VIRY.CZ

posílám log

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Logy buď kopírujte sem, nebo je ukládejte v txt formátu. Děkuji.

Dobrý den,

spuštěno, při restartu se PC zaseklo a po opětovném startu hlásí Spyware Terminator chybu - dle logu mu byly odebrány drivery.

Za log v pdf se omlouváme, ovšem forum nám txt odmítalo příjmout viz printscreen starý á 5 min.

Děkujeme za Vaši pomoc!



# AdwCleaner v4.203 - Log vytvořen 10/05/2015 v 19:18:44
# Aktualizováno 30/04/2015 by Xplode
# Databáze : 2015-05-09.1 [Server]
# Operační system : Windows 7 Home Premium Service Pack 1 (x64)
# Uživatelské jméno : Eva - EVA-PC
# Spuštěno z : C:\Users\Eva\Desktop\adwcleaner_4.203.exe
# Nastavení : Čištění

***** [ Služby ] *****

[#] Služba Smazáno : globalUpdate
[#] Služba Smazáno : globalUpdatem
Služba Smazáno : sp_rsdrv2

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SereneScreen
Složka Smazáno : C:\Program Files (x86)\globalUpdate
Složka Smazáno : C:\Program Files (x86)\Linkey
Složka Smazáno : C:\Program Files (x86)\SereneScreen
Složka Smazáno : C:\Program Files (x86)\coupons and fun
Složka Smazáno : C:\Users\Eva\AppData\Local\globalUpdate
Soubor Smazáno : C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage
Soubor Smazáno : C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal
Soubor Smazáno : C:\Users\Eva\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_wlogin.icq.com_0.localstorage
Soubor Smazáno : C:\Users\Eva\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal

***** [ Naplánované úlohy ] *****

Úloha Smazáno : globalUpdateUpdateTaskMachineCore
Úloha Smazáno : globalUpdateUpdateTaskMachineUA
Úloha Smazáno : coupons_and_fun_updating_service
Úloha Smazáno : coupons_and_fun_notification_service

***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Klíč Smazáno : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Klíč Smazáno : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\apnwidgets.ask.com
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Klíč Smazáno : HKCU\Software\APN PIP
Klíč Smazáno : HKCU\Software\GlobalUpdate
Klíč Smazáno : HKCU\Software\InstalledBrowserExtensions
Klíč Smazáno : HKCU\Software\Softonic
Klíč Smazáno : HKCU\Software\YahooPartnerToolbar
Klíč Smazáno : HKCU\Software\SereneScreen
Klíč Smazáno : HKCU\Software\coupons and fun
Klíč Smazáno : HKLM\SOFTWARE\GlobalUpdate
Klíč Smazáno : HKLM\SOFTWARE\InstalledBrowserExtensions
Klíč Smazáno : HKLM\SOFTWARE\PIP
Klíč Smazáno : HKLM\SOFTWARE\SystemK
Klíč Smazáno : HKLM\SOFTWARE\SereneScreen
Klíč Smazáno : HKLM\SOFTWARE\Linkey
Klíč Smazáno : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\apnwidgets.ask.com
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\icq.com
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\wlogin.icq.com

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17728


-\\ Google Chrome v

[C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Startup_URLs] : hxxp://www.default-search.net?sid=476&aid=113& ... 63&src=hmp

-\\ Opera v29.0.1795.47


*************************

AdwCleaner[R0].txt - [13031 bytů] - [10/05/2015 19:15:38]
AdwCleaner[S0].txt - [12017 bytů] - [10/05/2015 19:18:44]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [12076 bytů] ##########

...doplním, forum mi odmítá vložit txt/bez přípony/s dummy přílohou alá .abc.

Rovnou přidávám RSIT log:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Eva at 2015-05-10 19:49:22
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 10 GB (4%) free of 238 GB
Total RAM: 4061 MB (47% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:49:42, on 10.5.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17728)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
C:\Program Files\Alwil Software\Avast5\avastui.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera_crashreporter.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
C:\Program Files\trend micro\Eva.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://inu.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live

\WindowsLiveLogin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [Google Update] "C:\Users\Eva\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: FancyStart daemon.lnk = ?
O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer

\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{ED2830BB-A4D7-4125-AA1A-B63C2FD3743E}: NameServer = 10.107.4.100,10.107.4.129
O20 - AppInit_DLLs:
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash

\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Web'n'walk Manager mobile equipment installation service (ameisvc) - Gemfor s.r.o. - C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: FastBootAgent - ASUSTeK Computer Inc. - C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\sua.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file

missing)

--
End of file - 11399 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1

ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1

ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\Alwil Software\Avast5\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"taskhost.exe"
"C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe"
taskeng.exe {A406689F-B700-41F2-8FD9-270017D8849D}
"C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe"
"C:\Program Files\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe"
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
Atouch64.exe
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
C:\Windows\Explorer.EXE
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Windows\system32\Dwm.exe"
taskeng.exe {55E6C99B-876F-4CE7-8C0E-945D55DEA2A1}
"C:\Program Files (x86)\Secunia\PSI\PSIA.exe" --start-service
"C:\Program Files\Windows Sidebar\sidebar.exe"
"C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Windows\WindowsMobile\wmdc.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe"
"C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe"
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Secunia\PSI\psi_tray.exe"
"C:\Program Files\Alwil Software\Avast5\avastui.exe" /nogui
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\Program Files (x86)\Secunia\PSI\sua.exe" --start-service
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\servicing\TrustedInstaller.exe
ATKOSD.exe
KBFiltr.exe
WDC.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --ran-launcher /crash-reporter-parent-id=1792
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --type=gpu-process --channel="1792.0.1460408783\1929921204" --enable-proprietary-media-types-playback --crash-

reporter-pid=3392 --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,6,19,42 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-

device-id=0x2a42 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2202 --enable-proprietary-media-types-playback --crash-reporter-pid=3392 --

ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --

lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --ppapi-flash-path="C:

\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_17_0_0_169.dll" --ppapi-flash-version=17.0.0.169 --crash-reporter-pid=3392 --device-scale-factor=1 --font-cache-

shared-mem-suffix=1792 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --disable-accelerated-video-decode --

channel="1792.3.61345069\901127902" /prefetch:673131151
"C:\Windows\AsScrPro.exe"
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --

lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash

\pepflashplayer32_17_0_0_169.dll" --ppapi-flash-version=17.0.0.169 --crash-reporter-pid=3392 --device-scale-factor=1 --font-cache-shared-mem-suffix=1792 --enable-

pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --disable-accelerated-video-decode --channel="1792.5.1128315490\172804697"

/prefetch:673131151
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --

lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash

\pepflashplayer32_17_0_0_169.dll" --ppapi-flash-version=17.0.0.169 --crash-reporter-pid=3392 --device-scale-factor=1 --font-cache-shared-mem-suffix=1792 --enable-

pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --disable-accelerated-video-decode --channel="1792.7.340040384\514076694" /prefetch:673131151
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --

lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --ppapi-flash-path="C:

\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_17_0_0_169.dll" --ppapi-flash-version=17.0.0.169 --crash-reporter-pid=3392 --device-scale-factor=1 --font-cache-

shared-mem-suffix=1792 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --disable-accelerated-video-decode --

channel="1792.8.1249472963\1065622161" /prefetch:673131151
"C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -scheduled
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Eva\Desktop\AdwCleaner[S0].txt
"C:\Windows\system32\notepad.exe"
"C:\Windows\system32\mspaint.exe"
C:\Windows\system32\AUDIODG.EXE 0x858
"C:\Program Files\Paint.NET\PaintDotNet.exe" "C:\Users\Eva\Desktop\problem s prilohami.png"
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --

lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash

\pepflashplayer32_17_0_0_169.dll" --ppapi-flash-version=17.0.0.169 --crash-reporter-pid=3392 --device-scale-factor=1 --font-cache-shared-mem-suffix=1792 --enable-

pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --disable-accelerated-video-decode --channel="1792.11.1318587626\243229356"

/prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search"

"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Users\Eva\Downloads\RSITx64 (1).exe"
"C:\Windows\system32\wuauclt.exe" /RunHandlerComServer
"C:\Windows\SoftwareDistribution\Download\Install\mpas-d_bd_1.197.1467.0.exe" WD /q
d:\b8f5069716d911f590\MpMiniSigStub.exe WD /q
MpSigStub.exe /program d:\b8f5069716d911f590\MpMiniSigStub.exe WD /q
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --

lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash

\pepflashplayer32_17_0_0_169.dll" --ppapi-flash-version=17.0.0.169 --crash-reporter-pid=3392 --device-scale-factor=1 --font-cache-shared-mem-suffix=1792 --enable-

pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --disable-accelerated-video-decode --channel="1792.12.1114057231\80624649"

/prefetch:673131151

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1638683089-495567063-1402951975-1000Core.job - C:\Users\Eva\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1638683089-495567063-1402951975-1000UA.job - C:\Users\Eva\AppData\Local\Google\Update\GoogleUpdate.exe /ua

/installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
Windows Live Family Safety Browser Helper Class - C:\Program Files\Windows Live\Family Safety\fssbho.dll [2008-12-08 68960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll [2014-11-30 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-11-30 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2014-11-30 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21 1219152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-30 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21 1219152]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2009-04-09 320000]
"Windows Mobile Device Center"=C:\Windows\WindowsMobile\wmdc.exe [2007-05-31 660360]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-08-25 161304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-08-25 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-08-25 415256]
"SpywareTerminatorShield"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2011-11-22 2779824]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-06-25 1414144]
"Google Update"=C:\Users\Eva\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-17 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-04-20 159744]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKOSD2]
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-07-07 8493624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2011-03-14 2779024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ETDWare]
C:\Program Files\Elantech\ETDCtrl.exe [2009-06-12 619392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Eva\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-17 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControlUser]
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2011-10-28 49208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon]
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-08-20 150016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IJNetworkScannerSelectorEX]
C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [2011-01-15 452016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-06-25 1414144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pocket Navigator Installer 6.0]
C:\Program Files (x86)\Navigator11\Setup Utility\clickertray.exe [2011-08-15 356864]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-12-11 30877280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\T-Mobile Communication Centre]
C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe [2012-08-22 1368768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePPShortCut]
C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [2008-01-04 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe [2009-03-02 1076264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Eva^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky

a spuštění aplikace OneNote 2007.lnk]
C:\PROGRA~2\MICROS~1\Office12\ONENOTEM.EXE [2009-02-26 97680]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2009-07-13 2244096]
"AvastUI.exe"=C:\Program Files\Alwil Software\Avast5\AvastUI.exe [2015-03-31 5227648]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2011-10-28 49208]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-10-07 507776]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
C:\Windows\AsScrProlog.exe [2009-09-16 72248]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2009-09-16 3054136]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe []

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
C:\Program Files (x86)\CyberLink\PowerDVD\Language\Language.exe []

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\P2Go_Menu]
C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe C:\Program Files (x86)\CyberLink\Power2Go UpdateWithCreateOnce SOFTWARE\CyberLink\Power2Go\6.0

[]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\RemoteControl]
C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FancyStart daemon.lnk - C:\Windows\Installer\{60D6618B-153F-4353-8185-908E676E5888}\_DCE9A4DB2A5F2786140FA3.exe
Secunia PSI Tray.lnk - C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-08-25 271360]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera]
"Debugger="tasklist.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-05-10 19:15:33 ----D---- C:\AdwCleaner
2015-05-02 17:48:43 ----D---- C:\rsit
2015-05-02 17:48:43 ----D---- C:\Program Files\trend micro
2015-04-15 19:25:59 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-04-15 19:25:59 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-04-15 19:25:59 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-04-15 19:25:59 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-04-15 19:25:59 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-04-15 19:25:59 ----A---- C:\Windows\system32\wuauclt.exe
2015-04-15 19:25:59 ----A---- C:\Windows\system32\wuapp.exe
2015-04-15 19:25:59 ----A---- C:\Windows\system32\wuapi.dll
2015-04-15 19:25:59 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-04-15 19:25:58 ----A---- C:\Windows\system32\wups2.dll
2015-04-15 19:25:58 ----A---- C:\Windows\system32\wups.dll
2015-04-15 19:25:58 ----A---- C:\Windows\system32\wudriver.dll
2015-04-15 19:25:58 ----A---- C:\Windows\system32\wucltux.dll
2015-04-15 19:25:58 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 19:25:57 ----A---- C:\Windows\system32\wuwebv.dll
2015-04-15 19:25:57 ----A---- C:\Windows\system32\wuaueng.dll
2015-04-15 19:25:51 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2015-04-15 19:25:51 ----A---- C:\Windows\system32\gdi32.dll
2015-04-15 19:25:50 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-04-15 19:25:50 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-04-15 19:25:50 ----A---- C:\Windows\system32\msxml3r.dll
2015-04-15 19:25:50 ----A---- C:\Windows\system32\msxml3.dll
2015-04-15 19:25:45 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-04-15 19:25:44 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-04-15 19:25:44 ----A---- C:\Windows\system32\ntdll.dll
2015-04-15 19:25:43 ----A---- C:\Windows\system32\KernelBase.dll
2015-04-15 19:25:43 ----A---- C:\Windows\system32\kernel32.dll
2015-04-15 19:25:42 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-04-15 19:25:41 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-04-15 19:25:40 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-04-15 19:25:40 ----A---- C:\Windows\system32\wow64win.dll
2015-04-15 19:25:40 ----A---- C:\Windows\system32\schannel.dll
2015-04-15 19:25:39 ----A---- C:\Windows\system32\lsasrv.dll
2015-04-15 19:25:38 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-04-15 19:25:37 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-04-15 19:25:37 ----A---- C:\Windows\system32\wow64.dll
2015-04-15 19:25:37 ----A---- C:\Windows\system32\srcore.dll
2015-04-15 19:25:37 ----A---- C:\Windows\system32\conhost.exe
2015-04-15 19:25:36 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-04-15 19:25:36 ----A---- C:\Windows\system32\winsrv.dll
2015-04-15 19:25:36 ----A---- C:\Windows\system32\wdigest.dll
2015-04-15 19:25:36 ----A---- C:\Windows\system32\rstrui.exe
2015-04-15 19:25:36 ----A---- C:\Windows\system32\msv1_0.dll
2015-04-15 19:25:36 ----A---- C:\Windows\system32\kerberos.dll
2015-04-15 19:25:36 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-04-15 19:25:36 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-04-15 19:25:35 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-04-15 19:25:35 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-04-15 19:25:35 ----A---- C:\Windows\system32\TSpkg.dll
2015-04-15 19:25:35 ----A---- C:\Windows\system32\sspicli.dll
2015-04-15 19:25:35 ----A---- C:\Windows\system32\smss.exe
2015-04-15 19:25:35 ----A---- C:\Windows\system32\ncrypt.dll
2015-04-15 19:25:34 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-04-15 19:25:34 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-04-15 19:25:34 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-04-15 19:25:34 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-04-15 19:25:34 ----A---- C:\Windows\system32\srclient.dll
2015-04-15 19:25:34 ----A---- C:\Windows\system32\lsass.exe
2015-04-15 19:25:34 ----A---- C:\Windows\system32\auditpol.exe
2015-04-15 19:25:33 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-04-15 19:25:33 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-04-15 19:25:33 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-04-15 19:25:33 ----A---- C:\Windows\system32\sspisrv.dll
2015-04-15 19:25:33 ----A---- C:\Windows\system32\secur32.dll
2015-04-15 19:25:33 ----A---- C:\Windows\system32\ntvdm64.dll
2015-04-15 19:25:33 ----A---- C:\Windows\system32\csrsrv.dll
2015-04-15 19:25:33 ----A---- C:\Windows\system32\credssp.dll
2015-04-15 19:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 19:25:32 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 19:25:32 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 19:25:32 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 19:25:32 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 19:25:32 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 19:25:32 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-04-15 19:25:32 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-04-15 19:25:32 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-04-15 19:25:32 ----A---- C:\Windows\system32\wow64cpu.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 19:25:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 19:25:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 19:25:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 19:25:28 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 19:25:28 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 19:25:28 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 19:25:28 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 19:25:28 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 19:25:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 19:25:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 19:25:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 19:25:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 19:25:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 19:25:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 19:25:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 19:25:26 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 19:25:26 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 19:25:26 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-04-15 19:25:25 ----A---- C:\Windows\SYSWOW64\user.exe
2015-04-15 19:25:25 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-04-15 19:25:25 ----A---- C:\Windows\system32\apisetschema.dll
2015-04-15 19:25:24 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-04-15 19:25:24 ----A---- C:\Windows\system32\adtschema.dll
2015-04-15 19:25:23 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-04-15 19:25:23 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-04-15 19:25:23 ----A---- C:\Windows\system32\msobjs.dll
2015-04-15 19:25:23 ----A---- C:\Windows\system32\msaudite.dll
2015-04-15 19:24:40 ----A---- C:\Windows\system32\drivers\http.sys
2015-04-15 19:24:38 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-04-15 19:24:38 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-04-15 19:24:37 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-04-15 19:24:37 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-04-15 19:24:37 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-04-15 19:24:37 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-04-15 19:24:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-04-15 19:24:35 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-04-15 19:24:35 ----A---- C:\Windows\system32\iernonce.dll
2015-04-15 19:24:35 ----A---- C:\Windows\system32\ie4uinit.exe
2015-04-15 19:24:34 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-04-15 19:24:34 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-04-15 19:24:34 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-04-15 19:24:34 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 19:24:33 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-04-15 19:24:31 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-04-15 19:24:31 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-04-15 19:24:31 ----A---- C:\Windows\system32\iedkcs32.dll
2015-04-15 19:24:30 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-04-15 19:24:30 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-04-15 19:24:30 ----A---- C:\Windows\system32\urlmon.dll
2015-04-15 19:24:30 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-04-15 19:24:29 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-04-15 19:24:29 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-04-15 19:24:28 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-04-15 19:24:28 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-04-15 19:24:28 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-15 19:24:28 ----A---- C:\Windows\system32\msfeeds.dll
2015-04-15 19:24:28 ----A---- C:\Windows\system32\dxtrans.dll
2015-04-15 19:24:27 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-04-15 19:24:26 ----A---- C:\Windows\system32\iesetup.dll
2015-04-15 19:24:26 ----A---- C:\Windows\system32\ieapfltr.dll
2015-04-15 19:24:25 ----A---- C:\Windows\system32\iertutil.dll
2015-04-15 19:24:24 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-04-15 19:24:24 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-04-15 19:24:23 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-04-15 19:24:23 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-04-15 19:24:23 ----A---- C:\Windows\system32\jsproxy.dll
2015-04-15 19:24:23 ----A---- C:\Windows\system32\ieUnatt.exe
2015-04-15 19:24:22 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-04-15 19:24:20 ----A---- C:\Windows\system32\ieui.dll
2015-04-15 19:24:20 ----A---- C:\Windows\system32\ieframe.dll
2015-04-15 19:24:20 ----A---- C:\Windows\system32\dxtmsft.dll
2015-04-15 19:24:18 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-04-15 19:24:18 ----A---- C:\Windows\system32\mshtmled.dll
2015-04-15 19:24:18 ----A---- C:\Windows\system32\jscript9diag.dll
2015-04-15 19:24:17 ----A---- C:\Windows\system32\vbscript.dll
2015-04-15 19:24:17 ----A---- C:\Windows\system32\jscript9.dll
2015-04-15 19:24:16 ----A---- C:\Windows\system32\wininet.dll
2015-04-15 19:24:15 ----A---- C:\Windows\system32\msrating.dll
2015-04-15 19:24:15 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-04-15 19:24:14 ----A---- C:\Windows\system32\mshtml.dll
2015-04-15 19:21:33 ----A---- C:\Windows\SYSWOW64\clfsw32.dll
2015-04-15 19:21:33 ----A---- C:\Windows\system32\clfsw32.dll
2015-04-15 19:21:33 ----A---- C:\Windows\system32\clfs.sys

======List of files/folders modified in the last 1 month======

2015-05-10 19:49:40 ----D---- C:\Windows\Prefetch
2015-05-10 19:49:19 ----D---- C:\Windows\Temp
2015-05-10 19:49:17 ----SHD---- C:\System Volume Information
2015-05-10 19:29:42 ----D---- C:\Windows\system32\config
2015-05-10 19:29:13 ----D---- C:\Windows\system32\drivers
2015-05-10 19:29:02 ----D---- C:\Windows\system32\Tasks
2015-05-10 19:18:52 ----D---- C:\Windows\Tasks
2015-05-10 19:18:47 ----RD---- C:\Program Files (x86)
2015-05-03 14:59:35 ----D---- C:\Users\Eva\AppData\Roaming\vlc
2015-05-02 17:48:43 ----D---- C:\Program Files
2015-05-02 17:36:20 ----D---- C:\Windows\System32
2015-05-02 17:36:20 ----D---- C:\Windows\inf
2015-05-02 17:36:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-04-30 12:22:16 ----D---- C:\Windows\system32\NDF
2015-04-29 11:53:56 ----D---- C:\Program Files (x86)\Opera
2015-04-26 17:35:51 ----D---- C:\Users\Eva\AppData\Roaming\foobar2000
2015-04-16 23:12:28 ----D---- C:\Users\Eva\AppData\Roaming\Skype
2015-04-16 20:32:46 ----D---- C:\Windows\rescache
2015-04-16 19:57:24 ----D---- C:\Windows\Microsoft.NET
2015-04-16 19:57:17 ----RSD---- C:\Windows\assembly
2015-04-16 19:39:44 ----D---- C:\Windows\winsxs
2015-04-16 19:36:16 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-04-16 19:36:16 ----D---- C:\Windows\SysWOW64
2015-04-16 19:36:16 ----D---- C:\Windows\system32\cs-CZ
2015-04-16 19:36:16 ----D---- C:\Windows\PolicyDefinitions
2015-04-16 19:36:04 ----D---- C:\Windows\AppPatch
2015-04-16 19:36:01 ----D---- C:\Program Files\Internet Explorer
2015-04-16 19:36:00 ----D---- C:\Windows\SYSWOW64\en-US
2015-04-16 19:35:58 ----D---- C:\Windows\system32\en-US
2015-04-16 19:35:56 ----D---- C:\Program Files (x86)\Internet Explorer
2015-04-15 22:15:29 ----SHD---- C:\Windows\Installer
2015-04-15 22:15:29 ----HD---- C:\Config.Msi
2015-04-15 22:15:29 ----D---- C:\ProgramData\Microsoft Help
2015-04-15 22:12:58 ----D---- C:\Windows\system32\MRT
2015-04-15 22:06:26 ----A---- C:\Windows\system32\MRT.exe
2015-04-15 19:18:43 ----D---- C:\Windows\system32\catroot2
2015-04-15 18:58:38 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-30 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-30 267632]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-04 408600]
R0 lullaby;lullaby; C:\Windows\system32\DRIVERS\lullaby.sys [2009-06-18 15928]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-30 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-30 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-30 436624]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-30 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-30 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-30 116728]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2009-06-12 112128]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-08-25 10611552]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E62x64.sys [2009-06-09 55296]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
R3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf.sys [2010-09-01 17976]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-06-05 1806400]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2015-05-10 51496]
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-05-26 40448]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-02-28 96296]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-02-28 134184]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2008-12-22 36392]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-02-28 21160]
S3 dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\drivers\Dot4Prt.sys [2010-11-20 19968]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2008-12-08 61792]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\Windows\system32\DRIVERS\ewdcsc.sys [2007-08-09 29696]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2009-09-10 117248]
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\Windows\system32\DRIVERS\ewusbdev.sys [2009-10-12 114304]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RimUsb;zařízení BlackBerry Smartphone; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [2007-05-14 27520]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
S3 SQTECH900A;ZBR-DSC-DRIVER(PID_900A_00); C:\Windows\System32\Drivers\Capt900A.sys [2009-07-24 135104]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\drivers\usb8023x.sys [2013-02-12 19968]
S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgx64bus.sys [2010-01-21 17920]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2009-07-09 1222144]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 154168]
S3 WinUsb;Ovladač WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 ameisvc;Web'n'walk Manager mobile equipment installation service; C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe [2012-08-22 123320]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2014-11-30 50344]
R2 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-03-02 844328]
R2 FastBootAgent;FastBootAgent; C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe [2009-07-24 306232]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 Secunia PSI Agent;Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [2011-01-10 993848]
R2 Secunia Update Agent;Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [2011-01-10 399416]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [2011-11-22 1148632]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-28 107912]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15 268464]
S3 fsssvc;Windows Live Zabezpečení rodiny; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2008-12-08 533344]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-28 107912]
S3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-03-13 114688]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-21 1255736]

-----------------EOF-----------------

A ještě FRST, pokud Vám pomůže. Díky & hezký den.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64)

Version: 09-05-2015
Ran by Eva (administrator) on EVA-PC on 10-05-2015 19:56:51
Running from C:\Users\Eva\Downloads
Loaded Profiles: Eva (Available profiles: Eva)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS

Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:

http://www.geekstogo.com/forum/topic/33 ... orial-how-

to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be

closed. The file will not be moved.)

(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\Alwil Software

\Avast5\AvastSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft

\BingBar\SeaPort.EXE
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth

Software\btwdins.exe
(ASUSTeK Computer Inc.) C:\Windows\SysWOW64\Fast Boot

\FastBootAgent.exe
() C:\Program Files (x86)\ASUS\ControlDeck

\ControlDeckStartUp.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\ASPG.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
() C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator

\st_rsser64.exe
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun

\AmIcoSinglun64.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator

\SpywareTerminatorShield.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia PC Suite

7\PCSuite.exe
(Gemfor s.r.o.) C:\Program Files (x86)\T-Mobile\Web'n'walk

Manager\ameisvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(AVAST Software) C:\Program Files\Alwil Software

\Avast5\avastui.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update

\hpwuschd2.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java

\Java Update\jusched.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
(Opera Software) C:\Program Files (x86)\Opera

\29.0.1795.47\opera.exe
() C:\Program Files (x86)\Opera

\29.0.1795.47\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera

\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera

\29.0.1795.47\opera.exe
(ASUS) C:\Windows\AsScrPro.exe
(Opera Software) C:\Program Files (x86)\Opera

\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera

\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera

\29.0.1795.47\opera.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java

\Java Update\jucheck.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar

\sidebar.exe
(Opera Software) C:\Program Files (x86)\Opera

\29.0.1795.47\opera.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will

be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files

(x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09]

(AlcorMicro Co., Ltd.)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows

\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft

Corporation)
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files

(x86)\Spyware Terminator\SpywareTerminatorShield.exe [2779824

2011-11-22] (Crawler.com)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA

\VIAudioi\VDeck\VDeck.exe [2244096 2009-07-13] (VIA)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\Alwil

Software\Avast5\AvastUI.exe [5227648 2015-03-31] (AVAST

Software)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files

(x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-10-28]

(Hewlett-Packard)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files

(x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-

10-07] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel

Corporation)
HKU\S-1-5-21-1638683089-495567063-1402951975-1000\...\Run: [PC

Suite Tray] => C:\Program Files (x86)\Nokia\Nokia PC Suite

7\PCSuite.exe [1414144 2009-06-25] (Nokia)
HKU\S-1-5-21-1638683089-495567063-1402951975-1000\...\Run:

[Google Update] => C:\Users\Eva\AppData\Local\Google\Update

\GoogleUpdate.exe [116648 2012-07-17] (Google Inc.)
HKU\S-1-5-21-1638683089-495567063-1402951975-1000\...

\MountPoints2: {67299af6-9e32-11e0-880d-000272a43436} - G:

\LGAutoRun.exe
HKU\S-1-5-21-1638683089-495567063-1402951975-1000\...

\MountPoints2: {c54c6e1c-15bf-11e0-bc6a-90e6ba41e08d} - F:

\LGAutoRun.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs

\Startup\FancyStart daemon.lnk [2009-09-16]
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer

\{60D6618B-153F-4353-8185-

908E676E5888}\_DCE9A4DB2A5F2786140FA3.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs

\Startup\Secunia PSI Tray.lnk [2011-02-11]
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files

(x86)\Secunia\PSI\psi_tray.exe (Secunia)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-

8763-00608CC02F24} => C:\Program Files\Alwil Software

\Avast5\ashShA64.dll [2014-11-30] (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-

47B7-93E1-CDD82E34AF8B} => C:\Users\Eva\AppData\Roaming

\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-

47B7-93E1-CDD82E34AF8B} => C:\Users\Eva\AppData\Roaming

\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-

47B7-93E1-CDD82E34AF8B} => C:\Users\Eva\AppData\Roaming

\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-

47B7-93E1-CDD82E34AF8B} => C:\Users\Eva\AppData\Roaming

\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-

A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Eva\AppData\Roaming

\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-

A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Eva\AppData\Roaming

\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-

A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Eva\AppData\Roaming

\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)

==================== Internet (Whitelisted)

====================

(If an item is included in the fixlist, if it is a registry

item it will be removed or restored to default.)

HKU\S-1-5-21-1638683089-495567063-1402951975-1000\Software

\Microsoft\Internet Explorer\Main,Start Page = http://inu.cz/
HKU\S-1-5-21-1638683089-495567063-1402951975-1000\Software

\Microsoft\Internet Explorer\Main,Default_Page_URL =

http://asus.msn.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-

472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-

472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-

472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live Family Safety Browser Helper Class ->

{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> C:\Program Files

\Windows Live\Family Safety\fssbho.dll [2008-12-08] (Microsoft

Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-

D17F00898D06} -> C:\Program Files\Alwil Software

\Avast5\aswWebRepIE64.dll [2014-11-30] (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-

B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java

\jre1.8.0_25\bin\ssv.dll [2014-11-30] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-

D17F00898D06} -> C:\Program Files\Alwil Software

\Avast5\aswWebRepIE.dll [2014-11-30] (AVAST Software)
BHO-x32: Pomocník pro přihlášení ke službě Windows Live ->

{9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files

(x86)\Common Files\Microsoft Shared\Windows Live

\WindowsLiveLogin.dll [2009-02-17] (Microsoft Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-

03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar

\BingExt.dll [2011-10-21] (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-

BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java

\jre1.8.0_25\bin\jp2ssv.dll [2014-11-30] (Oracle Corporation)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-

7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-

C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-

8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar

\BingExt.dll [2011-10-21] (Microsoft Corporation.)
Toolbar: HKU\S-1-5-21-1638683089-495567063-1402951975-1000 ->

No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F}

- C:\Program Files (x86)\Windows Live\Messenger

\msgrapp.14.0.8050.1202.dll [2008-12-02] (Microsoft

Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} -

C:\Program Files (x86)\Windows Live\Messenger

\msgrapp.14.0.8050.1202.dll [2008-12-02] (Microsoft

Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{ED2830BB-A4D7-4125-AA1A-B63C2FD3743E}:

[NameServer] 10.107.4.100,10.107.4.129

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows

\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows

\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program

Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10

-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program

Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll

[2014-11-30] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:

\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll

[2014-11-30] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.3 -> C:

\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2008-11-

13] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 ->

C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[2008-12-04] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:

\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[2015-02-08] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:

\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[2015-02-08] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe

\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems

Inc.)
FF Plugin HKU\S-1-5-21-1638683089-495567063-1402951975-1000:

@tools.google.com/Google Update;version=3 -> C:\Users\Eva

\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[2015-02-08] (Google Inc.)
FF Plugin HKU\S-1-5-21-1638683089-495567063-1402951975-1000:

@tools.google.com/Google Update;version=9 -> C:\Users\Eva

\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[2015-02-08] (Google Inc.)
FF HKLM-x32\...\Firefox\Extensions: [bkmrksync@nokia.com] - C:

\Program Files (x86)\Nokia\Nokia PC Suite 7\bkmrksync
FF Extension: PC Sync 2 Synchronisation Extension - C:\Program

Files (x86)\Nokia\Nokia PC Suite 7\bkmrksync [2009-11-21]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:

\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\Alwil

Software\Avast5\WebRep\FF [2011-08-03]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.cz/
CHR Plugin: (Shockwave Flash) - C:\Users\Eva\AppData\Local

\Google\Chrome\Application\21.0.1180.83\PepperFlash

\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\Eva\AppData\Local

\Google\Chrome\Application\42.0.2311.135\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed

\Flash\NPSWF32_11_3_300_271.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Eva\AppData\Local

\Google\Chrome\Application

\42.0.2311.135\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Eva\AppData\Local

\Google\Chrome\Application\42.0.2311.135\pdf.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files

(x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google

\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files

(x86)\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:

\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft

Corp.)
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files

(x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft

Corporation)
CHR Profile: C:\Users\Eva\AppData\Local\Google\Chrome\User

Data\Default
CHR Extension: (gclcmokkcfnjpghegbnebiokigholeli) - C:\Users

\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions

\gclcmokkcfnjpghegbnebiokigholeli [2015-04-15]
CHR Extension: (Azov Sea Theme #2) - C:\Users\Eva\AppData

\Local\Google\Chrome\User Data\Default\Extensions

\jlaedahonkgompacchmmhgpigkefcglh [2013-10-20]
CHR Extension: (Google Wallet) - C:\Users\Eva\AppData\Local

\Google\Chrome\User Data\Default\Extensions

\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-10]
CHR Extension: (phhpajlkjeoakfmckfnogpnfeidgbhil) - C:\Users

\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions

\phhpajlkjeoakfmckfnogpnfeidgbhil [2015-04-07]
CHR HKLM-x32\...\Chrome\Extension:

[gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil

Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2014-11-30]
StartMenuInternet: Google Chrome.SWJXR5ICFARMQQCRPWOL2COEYM -

C:\Users\Eva\AppData\Local\Google\Chrome\Application\chrome.exe

Opera:
=======
OPR Extension: (gclcmokkcfnjpghegbnebiokigholeli) - C:\Users

\Eva\AppData\Roaming\Opera Software\Opera Stable\Extensions

\gclcmokkcfnjpghegbnebiokigholeli [2015-04-15]
OPR Extension: (phhpajlkjeoakfmckfnogpnfeidgbhil) - C:\Users

\Eva\AppData\Roaming\Opera Software\Opera Stable\Extensions

\phhpajlkjeoakfmckfnogpnfeidgbhil [2015-04-07]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be

removed from the registry. The file will not be moved unless

listed separately.)

R2 ameisvc; C:\Program Files (x86)\T-Mobile\Web'n'walk Manager

\ameisvc.exe [123320 2012-08-22] (Gemfor s.r.o.)
R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208

2007-08-08] () [File not signed]
R2 avast! Antivirus; C:\Program Files\Alwil Software

\Avast5\AvastSvc.exe [50344 2014-11-30] (AVAST Software)
R2 FastBootAgent; C:\Windows\SysWOW64\Fast Boot

\FastBootAgent.exe [306232 2009-07-24] (ASUSTeK Computer Inc.)
S3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin

\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File

not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield

\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14]

(Macrovision Corporation) [File not signed]
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688

2011-04-13] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [66048

2011-04-13] (Hewlett-Packard) [File not signed]
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI

\PSIA.exe [993848 2011-01-10] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI

\sua.exe [399416 2011-01-10] (Secunia)
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator

\st_rsser64.exe [1148632 2011-11-22] (Crawler.com)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll

[1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be

removed from the registry. The file will not be moved unless

listed separately.)

R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904

2007-07-24] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208

2014-11-30] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280

2014-11-30] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014

-11-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776

2014-11-30] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432

2014-11-30] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-

11-30] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014

-11-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014

-11-30] ()
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [243200

2009-10-21] (Huawei Technologies Co., Ltd.)
S3 Huawei; C:\Windows\System32\DRIVERS\ewdcsc.sys [29696 2007-

08-09] (Huawei Tech. Co., Ltd.)
S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304

2009-10-12] (Huawei Technologies Co., Ltd.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416

2009-07-20] ( )
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520

2007-05-14] (Research In Motion Limited)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806400

2009-06-05] ()
S2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496

2015-05-10] (Windows (R) Win 7 DDK provider)
S3 SQTECH900A; C:\Windows\System32\Drivers\Capt900A.sys [135104

2009-07-24] (Service & Quality Technology.)
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920

2010-01-21] (LG Electronics Inc.)
S3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys

[1222144 2009-07-09] (VIA Technologies, Inc.) [File not signed]
U3 tmlwf; No ImagePath
U3 tmwfp; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from

the registry. Any associated file could be listed separately to

be moved.)


==================== One Month Created Files and Folders

========

(If an entry is included in the fixlist, the file\folder will

be moved.)

2015-05-10 19:56 - 2015-05-10 19:57 - 00019162 _____ () C:

\Users\Eva\Downloads\FRST.txt
2015-05-10 19:56 - 2015-05-10 19:56 - 00000000 ____D () C:\FRST
2015-05-10 19:54 - 2015-05-10 19:54 - 02102784 _____ (Farbar)

C:\Users\Eva\Downloads\FRST64.exe
2015-05-10 19:48 - 2015-05-10 19:49 - 01222144 _____ () C:

\Users\Eva\Downloads\RSITx64 (1).exe
2015-05-10 19:30 - 2015-05-10 19:30 - 00012212 _____ () C:

\Users\Eva\Desktop\AdwCleaner[S0].txt
2015-05-10 19:15 - 2015-05-10 19:19 - 00000000 ____D () C:

\AdwCleaner
2015-05-10 19:14 - 2015-05-10 19:14 - 02204160 _____ () C:

\Users\Eva\Desktop\adwcleaner_4.203.exe
2015-05-03 15:00 - 2015-05-03 15:40 - 722893816 _____ () C:

\Users\Eva\Downloads\Ve-víru-války-(2).avi
2015-05-02 20:05 - 2015-05-02 20:36 - 554616476 _____ () C:

\Users\Eva\Downloads\Ve-víru-války-(1).avi
2015-05-02 17:48 - 2015-05-10 19:49 - 00000000 ____D () C:

\Program Files\trend micro
2015-05-02 17:48 - 2015-05-02 17:49 - 00000000 ____D () C:\rsit
2015-05-02 17:48 - 2015-05-02 17:48 - 01222144 _____ () C:

\Users\Eva\Downloads\RSITx64.exe
2015-05-02 17:33 - 2015-05-10 19:52 - 00003098 _____ () C:

\Windows\System32\Tasks\P4G Sidebar
2015-04-15 19:25 - 2015-03-25 05:24 - 03298816 _____ (Microsoft

Corporation) C:\Windows\system32\wucltux.dll
2015-04-15 19:25 - 2015-03-25 05:24 - 02553856 _____ (Microsoft

Corporation) C:\Windows\system32\wuaueng.dll
2015-04-15 19:25 - 2015-03-25 05:24 - 00696320 _____ (Microsoft

Corporation) C:\Windows\system32\wuapi.dll
2015-04-15 19:25 - 2015-03-25 05:24 - 00191488 _____ (Microsoft

Corporation) C:\Windows\system32\wuwebv.dll
2015-04-15 19:25 - 2015-03-25 05:24 - 00098304 _____ (Microsoft

Corporation) C:\Windows\system32\wudriver.dll
2015-04-15 19:25 - 2015-03-25 05:24 - 00060416 _____ (Microsoft

Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-15 19:25 - 2015-03-25 05:24 - 00037376 _____ (Microsoft

Corporation) C:\Windows\system32\wups2.dll
2015-04-15 19:25 - 2015-03-25 05:24 - 00035328 _____ (Microsoft

Corporation) C:\Windows\system32\wups.dll
2015-04-15 19:25 - 2015-03-25 05:23 - 00135168 _____ (Microsoft

Corporation) C:\Windows\system32\wuauclt.exe
2015-04-15 19:25 - 2015-03-25 05:23 - 00036864 _____ (Microsoft

Corporation) C:\Windows\system32\wuapp.exe
2015-04-15 19:25 - 2015-03-25 05:23 - 00012288 _____ (Microsoft

Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 19:25 - 2015-03-25 05:00 - 00566784 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-15 19:25 - 2015-03-25 05:00 - 00173056 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-15 19:25 - 2015-03-25 05:00 - 00092672 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-15 19:25 - 2015-03-25 05:00 - 00033792 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-15 19:25 - 2015-03-25 05:00 - 00029696 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-15 19:25 - 2015-03-17 07:22 - 05557696 _____ (Microsoft

Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-15 19:25 - 2015-03-17 07:22 - 00155576 _____ (Microsoft

Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-15 19:25 - 2015-03-17 07:22 - 00095672 _____ (Microsoft

Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-15 19:25 - 2015-03-17 07:19 - 01727904 _____ (Microsoft

Corporation) C:\Windows\system32\ntdll.dll
2015-04-15 19:25 - 2015-03-17 07:17 - 00362496 _____ (Microsoft

Corporation) C:\Windows\system32\wow64win.dll
2015-04-15 19:25 - 2015-03-17 07:17 - 00243712 _____ (Microsoft

Corporation) C:\Windows\system32\wow64.dll
2015-04-15 19:25 - 2015-03-17 07:17 - 00013312 _____ (Microsoft

Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 01461760 _____ (Microsoft

Corporation) C:\Windows\system32\lsasrv.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 01163264 _____ (Microsoft

Corporation) C:\Windows\system32\kernel32.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 00728064 _____ (Microsoft

Corporation) C:\Windows\system32\kerberos.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 00503808 _____ (Microsoft

Corporation) C:\Windows\system32\srcore.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 00424448 _____ (Microsoft

Corporation) C:\Windows\system32\KernelBase.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 00341504 _____ (Microsoft

Corporation) C:\Windows\system32\schannel.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 00314880 _____ (Microsoft

Corporation) C:\Windows\system32\msv1_0.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 00309760 _____ (Microsoft

Corporation) C:\Windows\system32\ncrypt.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 00296960 _____ (Microsoft

Corporation) C:\Windows\system32\rstrui.exe
2015-04-15 19:25 - 2015-03-17 07:16 - 00215040 _____ (Microsoft

Corporation) C:\Windows\system32\winsrv.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 00210944 _____ (Microsoft

Corporation) C:\Windows\system32\wdigest.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 00136192 _____ (Microsoft

Corporation) C:\Windows\system32\sspicli.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 00112640 _____ (Microsoft

Corporation) C:\Windows\system32\smss.exe
2015-04-15 19:25 - 2015-03-17 07:16 - 00086528 _____ (Microsoft

Corporation) C:\Windows\system32\TSpkg.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 00050176 _____ (Microsoft

Corporation) C:\Windows\system32\srclient.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 00043520 _____ (Microsoft

Corporation) C:\Windows\system32\csrsrv.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 00029184 _____ (Microsoft

Corporation) C:\Windows\system32\sspisrv.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 00028160 _____ (Microsoft

Corporation) C:\Windows\system32\secur32.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 00022016 _____ (Microsoft

Corporation) C:\Windows\system32\credssp.dll
2015-04-15 19:25 - 2015-03-17 07:16 - 00016384 _____ (Microsoft

Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-15 19:25 - 2015-03-17 07:15 - 00338432 _____ (Microsoft

Corporation) C:\Windows\system32\conhost.exe
2015-04-15 19:25 - 2015-03-17 07:15 - 00064000 _____ (Microsoft

Corporation) C:\Windows\system32\auditpol.exe
2015-04-15 19:25 - 2015-03-17 07:15 - 00031232 _____ (Microsoft

Corporation) C:\Windows\system32\lsass.exe
2015-04-15 19:25 - 2015-03-17 07:13 - 00146432 _____ (Microsoft

Corporation) C:\Windows\system32\msaudite.dll
2015-04-15 19:25 - 2015-03-17 07:13 - 00060416 _____ (Microsoft

Corporation) C:\Windows\system32\msobjs.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00686080 _____ (Microsoft

Corporation) C:\Windows\system32\adtschema.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00006656 _____ (Microsoft

Corporation) C:\Windows\system32\apisetschema.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00006144 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1

-0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00005120 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00004608 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1

-1-0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00004608 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-

processthreads-l1-1-0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00004096 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00004096 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00004096 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-

localregistry-l1-1-0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00004096 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-localization-

l1-1-0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003584 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1

-1-0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003584 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-

processenvironment-l1-1-0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003584 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-

1-0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003584 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003584 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003584 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-

libraryloader-l1-1-0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003584 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003072 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003072 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003072 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003072 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003072 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003072 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-interlocked-

l1-1-0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003072 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003072 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003072 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-

errorhandling-l1-1-0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003072 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-

1-0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003072 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003072 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1

-0.dll
2015-04-15 19:25 - 2015-03-17 07:11 - 00003072 ____H (Microsoft

Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 07:01 - 03976632 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-04-15 19:25 - 2015-03-17 07:01 - 03920824 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-04-15 19:25 - 2015-03-17 06:59 - 01309696 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-15 19:25 - 2015-03-17 06:57 - 00550912 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-15 19:25 - 2015-03-17 06:57 - 00259584 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-04-15 19:25 - 2015-03-17 06:57 - 00248832 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-15 19:25 - 2015-03-17 06:57 - 00221184 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-04-15 19:25 - 2015-03-17 06:57 - 00172032 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-04-15 19:25 - 2015-03-17 06:57 - 00065536 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-04-15 19:25 - 2015-03-17 06:57 - 00043008 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\srclient.dll
2015-04-15 19:25 - 2015-03-17 06:57 - 00022016 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\secur32.dll
2015-04-15 19:25 - 2015-03-17 06:57 - 00014336 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-15 19:25 - 2015-03-17 06:56 - 01114112 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-04-15 19:25 - 2015-03-17 06:56 - 00274944 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-15 19:25 - 2015-03-17 06:56 - 00096768 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-04-15 19:25 - 2015-03-17 06:56 - 00050176 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-04-15 19:25 - 2015-03-17 06:56 - 00025600 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-15 19:25 - 2015-03-17 06:56 - 00017408 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\credssp.dll
2015-04-15 19:25 - 2015-03-17 06:56 - 00005120 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-15 19:25 - 2015-03-17 06:53 - 00146432 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-15 19:25 - 2015-03-17 06:53 - 00060416 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00686080 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00006656 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00005120 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00004608 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-

processthreads-l1-1-0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00004096 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00004096 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00004096 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00004096 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-

localregistry-l1-1-0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00004096 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-

l1-1-0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003584 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-

processenvironment-l1-1-0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003584 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-

1-0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003584 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003584 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-

libraryloader-l1-1-0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003584 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-

l1-1-0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003584 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003072 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003072 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1

-1-0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003072 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003072 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003072 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003072 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003072 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-

errorhandling-l1-1-0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003072 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-

1-0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003072 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003072 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1

-0.dll
2015-04-15 19:25 - 2015-03-17 06:50 - 00003072 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 05:45 - 00007680 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-15 19:25 - 2015-03-17 05:45 - 00002048 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\user.exe
2015-04-15 19:25 - 2015-03-17 05:43 - 00006144 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1

-0.dll
2015-04-15 19:25 - 2015-03-17 05:43 - 00004608 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1

-1-0.dll
2015-04-15 19:25 - 2015-03-17 05:43 - 00003584 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-17 05:43 - 00003072 ____H (Microsoft

Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-

0.dll
2015-04-15 19:25 - 2015-03-10 05:25 - 01882624 _____ (Microsoft

Corporation) C:\Windows\system32\msxml3.dll
2015-04-15 19:25 - 2015-03-10 05:21 - 00002048 _____ (Microsoft

Corporation) C:\Windows\system32\msxml3r.dll
2015-04-15 19:25 - 2015-03-10 05:08 - 01237504 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-15 19:25 - 2015-03-10 05:05 - 00002048 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-15 19:25 - 2015-03-05 07:12 - 00404480 _____ (Microsoft

Corporation) C:\Windows\system32\gdi32.dll
2015-04-15 19:25 - 2015-03-05 06:05 - 00311808 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-15 19:24 - 2015-04-02 02:17 - 00389808 _____ (Microsoft

Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-15 19:24 - 2015-04-02 01:49 - 00342704 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-04-15 19:24 - 2015-03-13 06:32 - 24980480 _____ (Microsoft

Corporation) C:\Windows\system32\mshtml.dll
2015-04-15 19:24 - 2015-03-13 06:25 - 02724864 _____ (Microsoft

Corporation) C:\Windows\system32\mshtml.tlb
2015-04-15 19:24 - 2015-03-13 06:25 - 00004096 _____ (Microsoft

Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-15 19:24 - 2015-03-13 06:09 - 00066560 _____ (Microsoft

Corporation) C:\Windows\system32\iesetup.dll
2015-04-15 19:24 - 2015-03-13 06:08 - 00584192 _____ (Microsoft

Corporation) C:\Windows\system32\vbscript.dll
2015-04-15 19:24 - 2015-03-13 06:08 - 00417280 _____ (Microsoft

Corporation) C:\Windows\system32\html.iec
2015-04-15 19:24 - 2015-03-13 06:08 - 00048640 _____ (Microsoft

Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-15 19:24 - 2015-03-13 06:07 - 02886144 _____ (Microsoft

Corporation) C:\Windows\system32\iertutil.dll
2015-04-15 19:24 - 2015-03-13 06:06 - 00088064 _____ (Microsoft

Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-15 19:24 - 2015-03-13 06:00 - 00054784 _____ (Microsoft

Corporation) C:\Windows\system32\jsproxy.dll
2015-04-15 19:24 - 2015-03-13 05:59 - 00034304 _____ (Microsoft

Corporation) C:\Windows\system32\iernonce.dll
2015-04-15 19:24 - 2015-03-13 05:55 - 00633856 _____ (Microsoft

Corporation) C:\Windows\system32\ieui.dll
2015-04-15 19:24 - 2015-03-13 05:54 - 00144384 _____ (Microsoft

Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-15 19:24 - 2015-03-13 05:54 - 00114688 _____ (Microsoft

Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-15 19:24 - 2015-03-13 05:53 - 00814080 _____ (Microsoft

Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-15 19:24 - 2015-03-13 05:50 - 06025216 _____ (Microsoft

Corporation) C:\Windows\system32\jscript9.dll
2015-04-15 19:24 - 2015-03-13 05:44 - 00968704 _____ (Microsoft

Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-15 19:24 - 2015-03-13 05:42 - 19695616 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-15 19:24 - 2015-03-13 05:42 - 02724864 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-04-15 19:24 - 2015-03-13 05:40 - 00490496 _____ (Microsoft

Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-15 19:24 - 2015-03-13 05:32 - 00077824 _____ (Microsoft

Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 19:24 - 2015-03-13 05:28 - 00503296 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-15 19:24 - 2015-03-13 05:28 - 00062464 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-04-15 19:24 - 2015-03-13 05:27 - 00340992 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\html.iec
2015-04-15 19:24 - 2015-03-13 05:27 - 00199680 _____ (Microsoft

Corporation) C:\Windows\system32\msrating.dll
2015-04-15 19:24 - 2015-03-13 05:27 - 00047616 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-04-15 19:24 - 2015-03-13 05:26 - 00092160 _____ (Microsoft

Corporation) C:\Windows\system32\mshtmled.dll
2015-04-15 19:24 - 2015-03-13 05:26 - 00064000 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-04-15 19:24 - 2015-03-13 05:23 - 00316928 _____ (Microsoft

Corporation) C:\Windows\system32\dxtrans.dll
2015-04-15 19:24 - 2015-03-13 05:22 - 02278400 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-15 19:24 - 2015-03-13 05:20 - 00047104 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-04-15 19:24 - 2015-03-13 05:20 - 00030720 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-04-15 19:24 - 2015-03-13 05:17 - 00478208 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\ieui.dll
2015-04-15 19:24 - 2015-03-13 05:16 - 00115712 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-04-15 19:24 - 2015-03-13 05:15 - 00620032 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-04-15 19:24 - 2015-03-13 05:08 - 00720384 _____ (Microsoft

Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-15 19:24 - 2015-03-13 05:07 - 00801280 _____ (Microsoft

Corporation) C:\Windows\system32\msfeeds.dll
2015-04-15 19:24 - 2015-03-13 05:06 - 00418304 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-04-15 19:24 - 2015-03-13 05:05 - 02125824 _____ (Microsoft

Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-15 19:24 - 2015-03-13 05:05 - 01359360 _____ (Microsoft

Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-15 19:24 - 2015-03-13 05:01 - 00060416 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-15 19:24 - 2015-03-13 05:00 - 14397440 _____ (Microsoft

Corporation) C:\Windows\system32\ieframe.dll
2015-04-15 19:24 - 2015-03-13 04:57 - 00168960 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\msrating.dll
2015-04-15 19:24 - 2015-03-13 04:56 - 00076288 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-04-15 19:24 - 2015-03-13 04:54 - 00285696 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-04-15 19:24 - 2015-03-13 04:49 - 04305408 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-15 19:24 - 2015-03-13 04:45 - 02358784 _____ (Microsoft

Corporation) C:\Windows\system32\wininet.dll
2015-04-15 19:24 - 2015-03-13 04:44 - 00689152 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-15 19:24 - 2015-03-13 04:43 - 02052608 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-04-15 19:24 - 2015-03-13 04:42 - 01155072 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-04-15 19:24 - 2015-03-13 04:34 - 12825600 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-15 19:24 - 2015-03-13 04:33 - 01548288 _____ (Microsoft

Corporation) C:\Windows\system32\urlmon.dll
2015-04-15 19:24 - 2015-03-13 04:22 - 00800768 _____ (Microsoft

Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-15 19:24 - 2015-03-13 04:20 - 01888256 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-15 19:24 - 2015-03-13 04:16 - 01311232 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-15 19:24 - 2015-03-13 04:14 - 00710144 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-15 19:24 - 2015-02-25 05:18 - 00754688 _____ (Microsoft

Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-15 19:21 - 2015-03-04 06:55 - 00367552 _____ (Microsoft

Corporation) C:\Windows\system32\clfs.sys
2015-04-15 19:21 - 2015-03-04 06:41 - 00079360 _____ (Microsoft

Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 19:21 - 2015-03-04 06:10 - 00058880 _____ (Microsoft

Corporation) C:\Windows\SysWOW64\clfsw32.dll

==================== One Month Modified Files and Folders

=======

(If an entry is included in the fixlist, the file\folder will

be moved.)

2015-05-10 19:58 - 2012-05-20 21:23 - 00000914 _____ () C:

\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-10 19:53 - 2009-09-16 15:53 - 01375206 _____ () C:

\Windows\WindowsUpdate.log
2015-05-10 19:46 - 2011-08-25 23:07 - 00957440 ___SH () C:

\Users\Eva\Desktop\Thumbs.db
2015-05-10 19:45 - 2009-11-21 18:12 - 00000000 ____D () C:

\Users\Eva\AppData\Local\Paint.NET
2015-05-10 19:43 - 2009-07-14 06:45 - 00010240 ____H () C:

\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-

1.C7483456-A289-439d-8115-601632D005A0
2015-05-10 19:43 - 2009-07-14 06:45 - 00010240 ____H () C:

\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-

0.C7483456-A289-439d-8115-601632D005A0
2015-05-10 19:33 - 2010-11-03 18:58 - 00000952 _____ () C:

\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-10 19:32 - 2012-08-22 19:23 - 00000954 _____ () C:

\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1638683089-

495567063-1402951975-1000UA.job
2015-05-10 19:30 - 2009-09-16 16:35 - 00003000 _____ () C:

\Windows\System32\Tasks\ASUS Live Update
2015-05-10 19:29 - 2011-12-08 22:40 - 00051496 _____ (Windows

(R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2015-05-10 19:28 - 2015-01-02 23:46 - 00009433 _____ () C:

\Windows\setupact.log
2015-05-10 19:28 - 2010-11-03 18:58 - 00000948 _____ () C:

\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-10 19:28 - 2009-07-14 07:08 - 00000006 ____H () C:

\Windows\Tasks\SA.DAT
2015-05-10 19:06 - 2015-04-07 20:28 - 00000004 _____ () C:

\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-05-10 19:06 - 2013-10-13 11:03 - 00004184 _____ () C:

\Windows\System32\Tasks\avast! Emergency Update
2015-05-05 20:03 - 2012-08-22 19:23 - 00000902 _____ () C:

\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1638683089-

495567063-1402951975-1000Core.job
2015-05-03 14:59 - 2014-03-28 23:49 - 00000000 ____D () C:

\Users\Eva\AppData\Roaming\vlc
2015-05-02 21:36 - 2012-08-22 19:27 - 00002356 _____ () C:

\Users\Eva\Desktop\Google Chrome.lnk
2015-05-02 17:36 - 2009-08-03 22:00 - 00622660 _____ () C:

\Windows\system32\perfh005.dat
2015-05-02 17:36 - 2009-08-03 22:00 - 00118810 _____ () C:

\Windows\system32\perfc005.dat
2015-05-02 17:36 - 2009-07-14 07:13 - 01445734 _____ () C:

\Windows\system32\PerfStringBackup.INI
2015-04-30 12:22 - 2009-07-14 05:20 - 00000000 ____D () C:

\Windows\system32\NDF
2015-04-29 11:53 - 2014-08-24 19:39 - 00003826 _____ () C:

\Windows\System32\Tasks\Opera scheduled Autoupdate 1408901941
2015-04-29 11:53 - 2009-11-21 17:42 - 00000000 ____D () C:

\Program Files (x86)\Opera
2015-04-26 17:35 - 2010-09-11 20:38 - 00000000 ____D () C:

\Users\Eva\AppData\Roaming\foobar2000
2015-04-16 23:12 - 2012-10-28 20:19 - 00000000 ____D () C:

\Users\Eva\AppData\Roaming\Skype
2015-04-16 20:32 - 2009-07-14 05:20 - 00000000 ____D () C:

\Windows\rescache
2015-04-16 19:36 - 2009-07-14 05:20 - 00000000 ____D () C:

\Windows\PolicyDefinitions
2015-04-15 22:15 - 2009-09-16 16:03 - 00000000 ____D () C:

\ProgramData\Microsoft Help
2015-04-15 22:12 - 2013-08-14 22:00 - 00000000 ____D () C:

\Windows\system32\MRT
2015-04-15 22:06 - 2010-11-19 17:31 - 128913832 _____

(Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-15 18:58 - 2012-05-20 21:23 - 00778416 _____ (Adobe

Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-15 18:58 - 2012-05-20 21:23 - 00003852 _____ () C:

\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-15 18:58 - 2011-08-03 21:42 - 00142512 _____ (Adobe

Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories

=======

2007-06-12 18:34 - 2007-06-12 18:34 - 0035822 _____ () C:

\Program Files (x86)\Common Files\ASPG_icon.ico
2008-05-22 17:35 - 2008-05-22 17:35 - 0051962 _____ () C:

\Program Files (x86)\Common Files\banner.jpg
2009-04-08 19:31 - 2009-04-08 19:31 - 0106496 _____ () C:

\Program Files (x86)\Common Files\CPInstallAction.dll
2008-08-12 06:45 - 2008-08-12 06:45 - 0155648 _____ (ASUS) C:

\Program Files (x86)\Common Files\MSIactionall.dll
2013-02-13 19:25 - 2013-02-13 19:32 - 0004608 _____ () C:

\Users\Eva\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-

E0D61DEA3FDF.ini
2011-06-19 21:02 - 2011-06-19 21:03 - 0000000 _____ () C:

\Users\Eva\AppData\Local\{9CAFF543-EF68-49FE-B117-C1720470F482}
2009-11-21 19:44 - 2012-08-22 17:02 - 0001002 _____ () C:

\ProgramData\hpzinstall.log
2009-09-16 16:18 - 2009-09-16 16:19 - 0000105 _____ () C:

\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2009-09-16 16:18 - 2009-09-16 16:18 - 0000107 _____ () C:

\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

Some content of TEMP:
====================
C:\Users\Eva\AppData\Local\Temp\Quarantine.exe
C:\Users\Eva\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Eva\AppData\Local\Temp\sqlite3.dll
C:\Users\Eva\AppData\Local\Temp\{132C241D-1DEC-4EBD-8809-

73F664B9FF86}-setup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass

verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally

signed


LastRegBack: 2015-05-05 21:24

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-05-2015
Ran by Eva at 2015-05-10 19:58:38
Running from C:\Users\Eva\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1638683089-495567063-1402951975-500 - Administrator - Disabled)
Eva (S-1-5-21-1638683089-495567063-1402951975-1000 - Administrator - Enabled) => C:\Users\Eva
Guest (S-1-5-21-1638683089-495567063-1402951975-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1638683089-495567063-1402951975-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

2007 Microsoft Office system (HKLM-x32\...\PROHYBRIDR) (Version: 12.0.6612.1000 - Microsoft Corporation)
64 Bit HP CIO Components Installer (Version: 8.2.4 - Hewlett-Packard) Hidden
7-Zip 9.22beta (HKLM-x32\...\7-Zip) (Version: - )
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Activation Assistant for the 2007 Microsoft Office suites (HKLM-x32\...\Activation Assistant for the 2007 Microsoft Office suites) (Version: - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (x32 Version: 1.0 - Microsoft Corporation) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 9.0.289.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Aktualizace ovladače pro aplikaci Centrum zařízení Windows Mobile (HKLM\...\{92DBCA36-9B41-4DD1-941A-AED149DD37F0}) (Version: 6.1.6965.0 - Microsoft Corporation)
Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{5A22D889-FBDD-4AE8-86EC-089D45FC133E}) (Version: 1.2.17.25001 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.2.17.25001 - Alcor Micro Corp.) Hidden
Asistent pro přihlášení ke službě Windows Live (HKLM-x32\...\{BD86C297-41C7-4DB5-82C4-98DE3399A2EF}) (Version: 5.000.818.6 - Microsoft Corporation)
ASUS AI Recovery (HKLM-x32\...\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}) (Version: 1.0.4 - ASUS)
ASUS CopyProtect (HKLM-x32\...\{6B77A7F6-DD63-4F13-A6FF-83137A5AC354}) (Version: 1.0.0015 - ASUS)
ASUS FancyStart (HKLM-x32\...\{60D6618B-153F-4353-8185-908E676E5888}) (Version: 1.0.5 - ASUSTeK Computer Inc.)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS)
ASUS Live Update (HKLM-x32\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.9 - ASUS)
ASUS MultiFrame (HKLM-x32\...\{9D48531D-2135-49FC-BC29-ACCDA5396A76}) (Version: 1.0.0019 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{1686C4D1-B1FD-42E8-B7A8-FB4C4DBA5BA8}) (Version: 1.1.19 - ASUS)
ASUS SmartLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0007 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0028 - ASUS)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.17 - asus)
Asus_Camera_ScreenSaver (HKLM-x32\...\Asus_Camera_ScreenSaver) (Version: 2.0.0009 - ASUS)
Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.16 - Atheros Communications Inc.)
ATK Generic Function Service (HKLM-x32\...\{D3D54F3E-C5C3-443D-978F-87A72E5616E8}) (Version: 1.00.0008 - ATK)
ATK Hotkey (HKLM-x32\...\{7C05592D-424B-46CB-B505-E0013E8E75C9}) (Version: 1.0.0051 - ASUS)
ATK Media (HKLM-x32\...\{D1E5870E-E3E5-4475-98A6-ADD614524ADF}) (Version: 2.0.0005 - ASUS)
ATKOSD2 (HKLM-x32\...\{3B05F2FB-745B-4012-ADF2-439F36B2E70B}) (Version: 7.0.0005 - ASUS)
Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\avast) (Version: 10.0.2208 - AVAST Software)
Avi to Mpeg 2.1 (HKLM-x32\...\{14BF164E-80A4-422E-BE43-39FB759666C2}_is1) (Version: - Avi to Mpeg)
Balíček ovladače systému Windows - Lexmark International Printer (10/01/2009 2.1.4.0) (HKLM\...\0F2E85E3B6D6DAD8836F0B2FC7A42D4281FA6F3A) (Version: 10/01/2009 2.1.4.0 - Lexmark International)
Balíček ovladače systému Windows - Nokia Modem (06/01/2009 4.1) (HKLM\...\E8A6D621B6D3FC5D43C68C549D959DE76EEF5D84) (Version: 06/01/2009 4.1 - Nokia)
Balíček ovladače systému Windows - Nokia Modem (06/01/2009 7.01.0.3) (HKLM\...\F779F5541ABD99C95C03B0FD5E3C058B22DA0FF7) (Version: 06/01/2009 7.01.0.3 - Nokia)
Balíček ovladače systému Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) (HKLM\...\FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D) (Version: 08/22/2008 7.0.0.0 - Nokia)
Bing Bar (HKLM-x32\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - )
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.)
Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version: - Canon Inc.)
Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version: - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 3.05 - Piriform)
Centrum zařízení Windows Mobile (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
Codec Pack - All In 1 6.0.3.0 (HKLM-x32\...\Cool's_Codec_pack_4.12) (Version: - )
ControlDeck (HKLM-x32\...\{5B65EF64-1DFA-414A-8C94-7BB726158E21}) (Version: 1.0.3 - ASUS)
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Dropbox (HKU\S-1-5-21-1638683089-495567063-1402951975-1000\...\Dropbox) (Version: 2.6.24 - Dropbox, Inc.)
ETDWare PS/2-x64 7.0.5.5_WHQL (HKLM\...\Elantech) (Version: - )
Fast Boot (HKLM-x32\...\{A16656CE-4B17-4484-A13F-22B9500E5223}) (Version: 1.0.0 - ASUS)
foobar2000 v1.0.3 (HKLM-x32\...\foobar2000) (Version: 1.0.3 - Peter Pawlowski)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Chrome (HKU\S-1-5-21-1638683089-495567063-1402951975-1000\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Scanjet G4000 Series (HKLM\...\{10297E58-2DFE-478B-9A1D-4B14E4E79CDF}) (Version: 13.0 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM-x32\...\{97486FBE-A3FC-4783-8D55-EA37E9D171CC}) (Version: 5.005.000.001 - Hewlett-Packard)
hpg4000 (x32 Version: 13.0.0.0 - Název společnosti:) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Choice Guard (x32 Version: 1.2.87.0 - Microsoft Corporation) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - Intel Corporation)
Java 7 Update 21 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217021FF}) (Version: 7.0.210 - Oracle)
Java 8 Update 20 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218020F0}) (Version: 8.0.200 - Oracle Corporation)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Junk Mail filter update (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
LG USB Modem Drivers (HKLM-x32\...\{3E8DE1A6-B365-4FF6-B917-2892A34990E8}) (Version: 4.9.7 - LG Electronics)
Malwarebytes' Anti-Malware verze 1.51.2.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.51.2.1300 - Malwarebytes Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.3 (HKLM-x32\...\{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}) (Version: 2.0.2313.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
MSVC80_x64 (Version: 1.0.1.0 - Nokia) Hidden
MSVC80_x86 (x32 Version: 1.0.1.0 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Nástroj pro odesílání služby Windows Live (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Navigator 11 - Setup Utility 11.0.15-1 (HKLM-x32\...\MAPFACTOR_SETUP_UTILITY_HYBRID_11_is1) (Version: 11.0.15-1 - MapFactor s.r.o)
Nokia Connectivity Cable Driver (HKLM-x32\...\{52D02A2B-03D2-4E34-A358-DC5D951FD296}) (Version: 7.1.17.0 - Nokia)
Nokia PC Suite (HKLM-x32\...\Nokia PC Suite) (Version: 7.1.30.9 - Nokia)
Nokia PC Suite (x32 Version: 7.1.30.9 - Nokia) Hidden
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
Opera 12.17 (HKLM-x32\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA)
Opera Stable 29.0.1795.47 (HKLM-x32\...\Opera 29.0.1795.47) (Version: 29.0.1795.47 - Opera Software ASA)
Paint.NET v3.5.1 (HKLM\...\{5BFB956C-3AB9-492A-9E91-5D8C87DCC599}) (Version: 3.51.0 - dotPDN LLC)
PC Connectivity Solution (HKLM-x32\...\{0C973594-7DDF-4BD0-84ED-3517F7622037}) (Version: 9.23.3.0 - Nokia)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 0.9.8 - Frank Heindörfer, Philip Chinery)
Petz Sports (HKLM-x32\...\{653BB2E2-267F-4AB3-9B56-2BF76922B041}) (Version: 1.00 - Ubisoft)
Platform (x32 Version: 1.34 - VIA Technologies, Inc.) Hidden
Plus-HD-9.6 (HKLM-x32\...\Plus-HD-9.6) (Version: 1.34.5.12 - Plus HD) <==== ATTENTION
PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 6.0.2319 - CyberLink Corp.)
PowerDirector (x32 Version: 6.0.2319 - CyberLink Corp.) Hidden
PowerProducer (HKLM-x32\...\{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: - )
RAF (HKLM-x32\...\{E6B43401-E818-4961-AFED-118DD8E87642}) (Version: 1.00.0001 - FUJIFILM Corporation)
RAW FILE CONVERTER EX powered by SILKYPIX (HKLM-x32\...\InstallShield_{30B1CCDB-209B-4E94-8311-379F2E6B6B59}) (Version: 3 - Ichikawa Soft Laboratory)
RAW FILE CONVERTER EX powered by SILKYPIX (x32 Version: 3 - Ichikawa Soft Laboratory) Hidden
Registrace uživatele zařízení Canon MG5300 series (HKLM-x32\...\Registrace uživatele zařízení Canon MG5300 series) (Version: - )
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Secunia PSI (2.0.0.3001) (HKLM-x32\...\Secunia PSI) (Version: - )
Secure Download Manager (HKLM-x32\...\{4A5667B2-5D13-46C2-85B5-9D46A6096F61}) (Version: 3.1.0 - Kivuto Solutions Inc.)
SereneScreen Marine Aquarium 2.6 (HKLM-x32\...\SereneScreen Marine Aquarium 2.6_is1) (Version: 2.6 - Prolific Publishing, Inc.)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Software Bluetooth WIDCOMM (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.0.8000 - Broadcom)
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Spyware Terminator 2012 (HKLM-x32\...\{56736259-613E-4A3B-B428-6235F2E76F44}_is1) (Version: 3.0.0.50 - Crawler.com)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
USB 2.0 1.3M UVC WebCam (HKLM\...\USB 2.0 1.3M UVC WebCam) (Version: - )
Věda hrou (HKLM-x32\...\{4F00BC1A-7710-4A14-8DA5-A90721E779AD}) (Version: 1.1 - )
VIA Platform Device Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.34 - VIA Technologies, Inc.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Web'n'walk Manager (HKLM-x32\...\T-Mobile Communication Centre) (Version: 2012-08-22 - Gemfor s.r.o.)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8050.1202 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{4B4451CE-D1E6-4BDE-B4B2-59F03BB83B7C}) (Version: 14.0.8050.1202 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.26.0 - ASUS)
Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.10 - ASUS)
ZBR-DSC-DRIVER (HKLM-x32\...\{3F26B93A-E8B5-4AFC-84DB-4CCAD8A9A808}) (Version: 1.00.000 - SQ)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1638683089-495567063-1402951975-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Eva\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1638683089-495567063-1402951975-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Eva\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-1638683089-495567063-1402951975-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Eva\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-1638683089-495567063-1402951975-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Eva\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-1638683089-495567063-1402951975-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Eva\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1638683089-495567063-1402951975-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Eva\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-1638683089-495567063-1402951975-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Eva\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1638683089-495567063-1402951975-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Eva\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1638683089-495567063-1402951975-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Eva\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1638683089-495567063-1402951975-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Eva\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1638683089-495567063-1402951975-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Eva\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1638683089-495567063-1402951975-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Eva\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File

==================== Restore Points =========================

05-05-2015 20:21:36 Windows Update
10-05-2015 19:48:19 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0A8DDFF8-A196-424D-8AC7-03D08E11A86E} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2009-07-24] ()
Task: {0C10463C-BCB7-405E-B6F7-99EBE247D248} - System32\Tasks\{102DCC25-FAF3-41C3-814D-D52096CCDFB6} => pcalua.exe -a "C:\Program Files (x86)\Plus-HD-9.6\Uninstall.exe" -c /fcp=1
Task: {15C91DB5-A126-4589-9079-1E9F92E88CFF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-28] (Google Inc.)
Task: {54172182-1C8C-4EF3-B5DB-22DE4004E389} - System32\Tasks\P4G Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {6898EC80-4B1B-4AFB-A1D9-83CF8D5BEDBA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1638683089-495567063-1402951975-1000Core => C:\Users\Eva\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-17] (Google Inc.)
Task: {734BF149-511F-4E3D-9BA0-98D980A6D9A4} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-05-19] (ASUS)
Task: {847E3D94-86D3-4337-A079-0FA6C3A674C2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1638683089-495567063-1402951975-1000UA => C:\Users\Eva\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-17] (Google Inc.)
Task: {854312CB-EBFC-4C6F-B123-41223429D5F7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {87EA9B96-EDFA-4DF7-A401-52F5315E5B4C} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK)
Task: {9EE0C2B3-8CF4-42C3-A6BA-AE0EE378021C} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe
Task: {A3F4452D-CCC5-44A4-BF97-3F3CB6C82966} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()
Task: {AA98D25D-0389-4309-BB6C-5D7C35996FDA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: {AAFA16BC-C3B5-46E8-9C0C-8913DFED86D5} - System32\Tasks\ASPG => C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe [2009-06-29] (ASUS)
Task: {B48550E7-E815-4275-84A8-829665C7C430} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [2009-07-23] ()
Task: {BA8C1020-334F-46FD-AFEF-A4F86F1AA156} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe [2014-11-30] (AVAST Software)
Task: {CA0800D8-05BE-448E-A8B2-779E810CB3D9} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2009-07-29] (ATK)
Task: {D9812EB6-FC73-4346-9F99-117ECE2FFD56} - System32\Tasks\{847CEF93-5D17-4013-AACC-D96539537B15} => pcalua.exe -a C:\Users\Eva\Desktop\install_flash_player.exe -d C:\Users\Eva\Desktop
Task: {DD2F1472-45C8-4E0B-B54E-89884D19D2CD} - System32\Tasks\Opera scheduled Autoupdate 1408901941 => C:\Program Files (x86)\Opera\launcher.exe [2015-04-17] (Opera Software)
Task: {F11947B7-CD50-43EC-9ACF-B0D3A5823D29} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-28] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1638683089-495567063-1402951975-1000Core.job => C:\Users\Eva\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1638683089-495567063-1402951975-1000UA.job => C:\Users\Eva\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2009-09-16 16:33 - 2007-08-08 09:08 - 00094208 _____ () C:\Program Files\ATKGFNEX\GFNEXSrv.exe
2009-11-29 22:57 - 2005-03-12 02:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll
2009-07-23 02:58 - 2009-07-23 02:58 - 00017976 _____ () C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
2009-05-05 19:00 - 2009-05-05 19:00 - 00041472 _____ () C:\Program Files\P4G\DevMng.dll
2009-07-27 19:12 - 2009-07-27 19:12 - 00026624 _____ () C:\Program Files\P4G\OvrClk.dll
2009-09-16 16:33 - 2007-03-10 03:58 - 00124416 _____ () C:\Program Files\ATKGFNEX\AGFNEX64.dll
2008-10-01 08:02 - 2008-10-01 08:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2009-07-24 19:32 - 2009-07-24 19:32 - 01593344 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
2008-08-14 05:59 - 2008-08-14 05:59 - 00301624 _____ () C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
2015-04-29 11:52 - 2015-04-29 11:39 - 00479352 _____ () C:\Program Files (x86)\Opera\29.0.1795.47\opera_crashreporter.exe
2009-09-16 16:35 - 2007-11-30 20:20 - 00051768 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
2015-05-10 19:07 - 2015-05-10 19:07 - 02926592 _____ () C:\Program Files\Alwil Software\Avast5\defs\15051000\algo.dll
2009-09-16 16:35 - 2009-06-22 22:37 - 00212992 _____ () C:\Windows\SysWOW64\Fast Boot\GetBootTime.dll
2008-08-12 12:16 - 2008-08-12 12:16 - 02023424 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\QtCore4.dll
2008-07-29 15:01 - 2008-07-29 15:01 - 07331840 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\QtGui4.dll
2008-07-29 14:50 - 2008-07-29 14:50 - 00364544 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\QtXml4.dll
2008-07-29 15:47 - 2008-07-29 15:47 - 00135168 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\imageformats\qjpeg4.dll
2008-07-29 15:47 - 2008-07-29 15:47 - 00016384 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\imageformats\qsvg4.dll
2008-07-29 15:11 - 2008-07-29 15:11 - 00253952 _____ () C:\Program Files (x86)\Nokia\Nokia PC Suite 7\QtSvg4.dll
2015-03-14 11:46 - 2015-03-14 11:46 - 38714440 _____ () C:\Program Files\Alwil Software\Avast5\libcef.dll
2009-06-03 03:09 - 2009-06-03 03:09 - 00225280 _____ () C:\Program Files (x86)\asus\VirtualCamera\virtualCamera.ax
2015-04-29 11:51 - 2015-04-29 11:29 - 01576568 _____ () C:\Program Files (x86)\Opera\29.0.1795.47\libglesv2.dll
2015-04-29 11:51 - 2015-04-29 11:29 - 00081016 _____ () C:\Program Files (x86)\Opera\29.0.1795.47\libegl.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

HKU\S-1-5-21-1638683089-495567063-1402951975-1000\Software\Classes\.exe: => <===== ATTENTION!

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1638683089-495567063-1402951975-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Eva\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\Windows\pss\Bluetooth.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Eva^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk => C:\Windows\pss\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk.Startup
MSCONFIG\startupreg: ATKMEDIA => C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
MSCONFIG\startupreg: ATKOSD2 => C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
MSCONFIG\startupreg: CanonMyPrinter => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
MSCONFIG\startupreg: ETDWare => C:\Program Files\Elantech\ETDCtrl.exe
MSCONFIG\startupreg: Google Update => "C:\Users\Eva\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: HControlUser => C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: hpqSRMon => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
MSCONFIG\startupreg: IJNetworkScannerSelectorEX => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
MSCONFIG\startupreg: PC Suite Tray => "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
MSCONFIG\startupreg: Pocket Navigator Installer 6.0 => C:\Program Files (x86)\Navigator11\Setup Utility\clickertray.exe
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: T-Mobile Communication Centre => "C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe" -autorun
MSCONFIG\startupreg: UpdatePPShortCut => "C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\PowerProducer" update "Software\CyberLink\PowerProducer\4.0"

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [{B1AAD569-011F-4DF5-9778-14C1D3FBBFC5}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{1746A093-CC77-4633-9BB8-4D66F9E330D4}] => (Allow) svchost.exe
FirewallRules: [{42D85C2D-1795-4601-B9BC-C49102EDAB98}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [TCP Query User{27727F18-E312-438B-94FA-7EA3B62769F4}C:\program files (x86)\spyware terminator\spywareterminatorupdate.exe] => (Allow) C:\program files (x86)\spyware terminator\spywareterminatorupdate.exe
FirewallRules: [UDP Query User{CBA567D2-D891-419B-BAB8-A17F6FB5100D}C:\program files (x86)\spyware terminator\spywareterminatorupdate.exe] => (Allow) C:\program files (x86)\spyware terminator\spywareterminatorupdate.exe
FirewallRules: [{9463B48F-D3AB-49AE-8E03-21A7077A23E0}] => (Allow) C:\Program Files (x86)\Cyberlink\PowerDirector\PDR.EXE
FirewallRules: [{60737D7B-41AC-4C34-8FB0-BBEAB89B8799}] => (Allow) %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{E626942D-551E-440F-99BE-14919AF1032A}] => (Allow) %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{A950409C-07FD-48F6-A150-A95075825028}] => (Allow) LPort=26675
FirewallRules: [{621E98B6-E3EE-4EF1-80DE-523C09C6A92E}] => (Allow) C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{9C523171-DE65-4524-A350-B950BE22B0A4}] => (Allow) C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{1562F92E-2B2F-4C49-BB39-47192C2CC159}] => (Allow) %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{C89964F3-854A-42BD-A043-896E6BFAE8B0}] => (Allow) %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{C8777D3D-A831-48DC-BCD0-C556F396CE62}] => (Allow) LPort=26675
FirewallRules: [TCP Query User{D5653640-9FF3-4509-A034-8228E0964CD8}C:\users\eva\desktop\sprava\my mobile\mymobiler\mymobiler.exe] => (Allow) C:\users\eva\desktop\sprava\my mobile\mymobiler\mymobiler.exe
FirewallRules: [UDP Query User{392F4C59-2984-4882-9E65-B01A2998F453}C:\users\eva\desktop\sprava\my mobile\mymobiler\mymobiler.exe] => (Allow) C:\users\eva\desktop\sprava\my mobile\mymobiler\mymobiler.exe
FirewallRules: [TCP Query User{CE2490F1-0CF3-4DA5-A595-25DB619C513D}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [UDP Query User{29E3C840-3021-4834-964E-9D948525A609}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [TCP Query User{FDAB2E2E-430F-441E-828B-31D8EFD1B641}C:\program files (x86)\opera\opera.exe] => (Allow) C:\program files (x86)\opera\opera.exe
FirewallRules: [UDP Query User{889D7508-25C7-4893-8161-040E88A52D78}C:\program files (x86)\opera\opera.exe] => (Allow) C:\program files (x86)\opera\opera.exe
FirewallRules: [{FF25FF18-FFD1-43E4-8181-A900E9F10819}] => (Allow) %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{D5DF6AA0-6BD6-4326-8B77-2F9781EB90E5}] => (Allow) %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{93A85A53-B5AE-4F22-9739-A941079602A6}] => (Allow) LPort=26675
FirewallRules: [{DE7C7F7C-62A9-4CFD-957C-D8B077630BC4}] => (Allow) %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{915FBB27-082E-419B-A060-6412CCBF66AB}] => (Allow) %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{4A999335-BD33-4E09-9457-A43E0D754814}] => (Allow) LPort=26675
FirewallRules: [{9F2194AD-9941-4B00-A09F-85317ACA3687}] => (Allow) %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{5BCD3071-3EB4-408B-AF9B-E9EEC315C2C0}] => (Allow) %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{79BFD4C1-2841-4416-8529-78E0E61807AC}] => (Allow) LPort=26675
FirewallRules: [{4D4ECAB1-D3A1-44C5-85CF-E466D46FBE33}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
FirewallRules: [{2E7CAF22-1E10-4675-805E-CFD20877FE94}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
FirewallRules: [{BFA9325A-FBFB-4EB4-8994-0753CF07B689}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
FirewallRules: [{A7CA502C-9F6A-4BE8-96CF-3B0BC7E6601E}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
FirewallRules: [TCP Query User{4AEE474E-BEE8-4A53-A65F-BE10335A215A}C:\users\eva\desktop\my mobile\mymobiler\mymobiler.exe] => (Allow) C:\users\eva\desktop\my mobile\mymobiler\mymobiler.exe
FirewallRules: [UDP Query User{64D0E094-BACA-4D73-A28B-D9C4A9DCF3AC}C:\users\eva\desktop\my mobile\mymobiler\mymobiler.exe] => (Allow) C:\users\eva\desktop\my mobile\mymobiler\mymobiler.exe
FirewallRules: [{AD7BC8B6-E411-4E6F-8310-719F4554ED6F}] => (Allow) C:\Program Files (x86)\Opera\pluginwrapper\opera_plugin_wrapper.exe
FirewallRules: [{EA1C076E-840C-4982-86EF-8C684FA2DD1F}] => (Allow) C:\Program Files (x86)\Opera\pluginwrapper\opera_plugin_wrapper.exe
FirewallRules: [{45BC4B8B-6E41-46C2-B19B-59E68AC5499D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{62EBF4BE-A13B-4FE3-ADAB-9BEF9D31F6A8}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{DEC4299D-01B8-496C-8D7E-F011008622A8}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{A059BE34-27D5-45B6-BCEA-B0547089B94E}] => (Allow) C:\Program Files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe
FirewallRules: [{F527AF5A-2CDA-40FF-9C5A-62ACD187CB6A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqsudi.exe
FirewallRules: [{D2A1663D-8A27-4804-A49A-B62787AA8EBF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpsapp.exe
FirewallRules: [{F6FE30C3-8714-4FEC-A5A4-AF4654094D35}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpse.exe
FirewallRules: [{2B4355F7-F322-4DCE-96DC-1F6F802EE6DD}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{5B0300B8-E7EA-4FE8-BCDD-9AF765B326E3}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{9D75BBC5-004A-48EA-942A-FEB2EDD337AD}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{ED4E26CA-F8C2-4A33-BB55-566D3D45F5DA}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{9456847A-1C98-4951-B321-D074093B310E}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{6F342E86-5667-499C-8425-1F52A6ED2EBD}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{1E294F57-3366-4982-ADF1-00CC5D0270F0}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{51E364C6-1E6E-42C2-A624-818409454D23}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{6F993343-7448-46FB-9FF8-382FEFAAF6B9}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{2062EC6E-A1CE-4448-8B87-64A4985BC74F}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{C078FA92-92F0-4587-90E3-C6B636057D78}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{B674918E-8FBA-4E8C-B4BB-B6D8A8050D1D}] => (Allow) C:\Users\Eva\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{C1CD07D6-6387-4B27-8A1A-8D7CE2E18493}] => (Allow) C:\Users\Eva\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{AB1ED0C0-77B5-4936-9D29-322065DFD070}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/05/2015 09:26:32 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 se nezdařilo.
Závislé sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (05/02/2015 07:09:19 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 se nezdařilo.
Závislé sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (04/26/2015 09:37:00 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 se nezdařilo.
Závislé sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (04/26/2015 04:57:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Explorer.EXE, verze: 6.1.7601.17514, časové razítko: 0x4ce7a144
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.18798, časové razítko: 0x5507b864
Kód výjimky: 0xc0000374
Posun chyby: 0x00000000000bf922
ID chybujícího procesu: 0xecc
Čas spuštění chybující aplikace: 0xExplorer.EXE0
Cesta k chybující aplikaci: Explorer.EXE1
Cesta k chybujícímu modulu: Explorer.EXE2
ID zprávy: Explorer.EXE3

Error: (04/19/2015 09:02:59 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 se nezdařilo.
Závislé sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (04/16/2015 08:27:09 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 se nezdařilo.
Závislé sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (04/12/2015 10:48:35 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 se nezdařilo.
Závislé sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (04/07/2015 09:07:12 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 se nezdařilo.
Závislé sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (04/04/2015 03:03:00 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 se nezdařilo.
Závislé sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (04/03/2015 04:43:52 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 se nezdařilo.
Závislé sestavení Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.


System errors:
=============
Error: (05/10/2015 07:35:42 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Windows Update přestala během spouštění reagovat.

Error: (05/10/2015 07:19:56 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba Windows Update se po přijetí pokynu pro vypnutí neukončila správně.

Error: (05/10/2015 07:19:23 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Správce služeb se pokusil o opravnou akci (Restartovat službu) po nečekaném ukončení služby Windows Search, ale tato akce selhala kvůli následující chybě:
%%1056

Error: (05/10/2015 07:18:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Instalační služba modulů systému Windows byla nečekaně ukončena. Stalo se to 2 krát. Následující opravná akce bude spuštěna za 300000 milisekund: Restartovat službu.

Error: (05/10/2015 07:18:53 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 2 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (05/10/2015 07:18:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Ochrana softwaru byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.

Error: (05/10/2015 07:18:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Windows Media Player Network Sharing byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (05/10/2015 07:18:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (05/10/2015 07:18:43 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Secunia Update Agent byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (05/10/2015 07:18:41 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Instalační služba modulů systému Windows byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2010-11-20 18:10:27.477
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ProgramData\Spyware Terminator\fileobjinfo.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2010-11-20 18:10:27.466
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ProgramData\Spyware Terminator\fileobjinfo.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2010-11-20 18:10:27.452
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ProgramData\Spyware Terminator\fileobjinfo.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2010-11-20 18:10:27.440
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ProgramData\Spyware Terminator\fileobjinfo.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2010-10-07 17:46:11.169
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ProgramData\Spyware Terminator\fileobjinfo.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2010-10-07 17:46:11.159
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ProgramData\Spyware Terminator\fileobjinfo.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2010-10-07 17:46:11.147
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ProgramData\Spyware Terminator\fileobjinfo.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2010-10-07 17:46:11.137
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ProgramData\Spyware Terminator\fileobjinfo.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2010-09-11 19:58:33.248
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ProgramData\Spyware Terminator\fileobjinfo.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2010-09-11 19:58:33.240
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ProgramData\Spyware Terminator\fileobjinfo.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU T5870 @ 2.00GHz
Percentage of memory in use: 43%
Total physical RAM: 4061.09 MB
Available physical RAM: 2288.49 MB
Total Pagefile: 8120.36 MB
Available Pagefile: 5884.99 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:232.88 GB) (Free:9.15 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:218.23 GB) (Free:79.78 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: D9B3496E)
Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=218.2 GB) - (Type=OF Extended)

==================== End Of Log ============================

Logy se sem kopírují z txt souborů. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Program Files (x86)\Microsoft\BingBar
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1638683089-495567063-1402951975-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1638683089-495567063-1402951975-1000UA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]/64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]/64
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip]
"Debugger=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro]
"Debugger=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera]
"Debugger=-

:services
BBUpdate
BBSvc

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

Děkuji za pomoc, OTM v poslední fázi mazání flash kleklo, ale snad smazalo, co mělo..

(To s tím ukládáním jsem pochopil špatně, díky za upřesnění.)

Logfile of random's system information tool 1.10 (written by random/random)
Run by Eva at 2015-05-10 21:56:11
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 10 GB (4%) free of 238 GB
Total RAM: 4061 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:56:16, on 10.5.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17728)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Users\Eva\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
C:\Windows\AsScrPro.exe
C:\Program Files\Alwil Software\Avast5\avastui.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera_crashreporter.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
C:\Program Files\trend micro\Eva.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://inu.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [Google Update] "C:\Users\Eva\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: FancyStart daemon.lnk = ?
O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{ED2830BB-A4D7-4125-AA1A-B63C2FD3743E}: NameServer = 10.107.4.100,10.107.4.129
O20 - AppInit_DLLs:
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Web'n'walk Manager mobile equipment installation service (ameisvc) - Gemfor s.r.o. - C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: FastBootAgent - ASUSTeK Computer Inc. - C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\sua.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10889 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\AUDIODG.EXE 0x2ac
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\Alwil Software\Avast5\AvastSvc.exe"
taskeng.exe {7E5E14EA-2AF5-4BE8-BA28-77EBCF33FB0E}
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe"
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\Secunia\PSI\PSIA.exe" --start-service
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
taskeng.exe {E2C61E41-6200-4A64-BF98-A1124B971863}
"C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe"
"C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe"
"C:\Program Files\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
taskeng.exe {E10A962C-54E5-459E-B620-EFA3D5E33A73}
"C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe"
"C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
Atouch64.exe
"C:\Program Files\Windows Sidebar\sidebar.exe"
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
"C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe"
"C:\Program Files (x86)\Secunia\PSI\sua.exe" --start-service
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
ATKOSD.exe
KBFiltr.exe
WDC.exe
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Windows\WindowsMobile\wmdc.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe"
C:\Windows\system32\svchost.exe -k WindowsMobile
"C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"C:\Users\Eva\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Secunia\PSI\psi_tray.exe"
"C:\Windows\AsScrPro.exe"
"C:\Program Files\Alwil Software\Avast5\avastui.exe" /nogui
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --ran-launcher /crash-reporter-parent-id=4392
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --type=gpu-process --channel="4392.0.2050938570\1008981896" --enable-proprietary-media-types-playback --crash-reporter-pid=4436 --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,6,19,42 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x2a42 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2202 --enable-proprietary-media-types-playback --crash-reporter-pid=4436 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_17_0_0_169.dll" --ppapi-flash-version=17.0.0.169 --crash-reporter-pid=4436 --device-scale-factor=1 --font-cache-shared-mem-suffix=4392 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --disable-accelerated-video-decode --channel="4392.3.1360154675\949491092" /prefetch:673131151
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_17_0_0_169.dll" --ppapi-flash-version=17.0.0.169 --crash-reporter-pid=4436 --device-scale-factor=1 --font-cache-shared-mem-suffix=4392 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --disable-accelerated-video-decode --channel="4392.4.719008924\718681960" /prefetch:673131151
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_17_0_0_169.dll" --ppapi-flash-version=17.0.0.169 --crash-reporter-pid=4436 --device-scale-factor=1 --font-cache-shared-mem-suffix=4392 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --disable-accelerated-video-decode --channel="4392.5.1530654846\112127706" /prefetch:673131151
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_17_0_0_169.dll" --ppapi-flash-version=17.0.0.169 --crash-reporter-pid=4436 --device-scale-factor=1 --font-cache-shared-mem-suffix=4392 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --disable-accelerated-video-decode --channel="4392.6.983314672\586728723" /prefetch:673131151
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --ppapi-flash-path="C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_17_0_0_169.dll" --ppapi-flash-version=17.0.0.169 --crash-reporter-pid=4436 --device-scale-factor=1 --font-cache-shared-mem-suffix=4392 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=1 --disable-accelerated-video-decode --channel="4392.8.1450944846\1555573652" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Users\Eva\Downloads\RSITx64 (2).exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
Windows Live Family Safety Browser Helper Class - C:\Program Files\Windows Live\Family Safety\fssbho.dll [2008-12-08 68960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll [2014-11-30 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-11-30 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2014-11-30 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-30 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2009-04-09 320000]
"Windows Mobile Device Center"=C:\Windows\WindowsMobile\wmdc.exe [2007-05-31 660360]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-08-25 161304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-08-25 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-08-25 415256]
"SpywareTerminatorShield"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2011-11-22 2779824]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-06-25 1414144]
"Google Update"=C:\Users\Eva\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-17 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-04-20 159744]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKOSD2]
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-07-07 8493624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2011-03-14 2779024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ETDWare]
C:\Program Files\Elantech\ETDCtrl.exe [2009-06-12 619392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Eva\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-17 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControlUser]
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2011-10-28 49208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon]
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-08-20 150016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IJNetworkScannerSelectorEX]
C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [2011-01-15 452016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-06-25 1414144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pocket Navigator Installer 6.0]
C:\Program Files (x86)\Navigator11\Setup Utility\clickertray.exe [2011-08-15 356864]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-12-11 30877280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\T-Mobile Communication Centre]
C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe [2012-08-22 1368768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePPShortCut]
C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [2008-01-04 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe [2009-03-02 1076264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Eva^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
C:\PROGRA~2\MICROS~1\Office12\ONENOTEM.EXE [2009-02-26 97680]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2009-07-13 2244096]
"AvastUI.exe"=C:\Program Files\Alwil Software\Avast5\AvastUI.exe [2015-03-31 5227648]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2011-10-28 49208]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
C:\Windows\AsScrProlog.exe [2009-09-16 72248]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2009-09-16 3054136]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe []

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
C:\Program Files (x86)\CyberLink\PowerDVD\Language\Language.exe []

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\P2Go_Menu]
C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe C:\Program Files (x86)\CyberLink\Power2Go UpdateWithCreateOnce SOFTWARE\CyberLink\Power2Go\6.0 []

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\shared tools\msconfig\startupreg\RemoteControl]
C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FancyStart daemon.lnk - C:\Windows\Installer\{60D6618B-153F-4353-8185-908E676E5888}\_DCE9A4DB2A5F2786140FA3.exe
Secunia PSI Tray.lnk - C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-08-25 271360]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera]
"Debugger="tasklist.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-05-10 21:44:10 ----D---- C:\_OTM
2015-05-10 19:56:03 ----D---- C:\FRST
2015-05-10 19:15:33 ----D---- C:\AdwCleaner
2015-05-02 17:48:43 ----D---- C:\rsit
2015-05-02 17:48:43 ----D---- C:\Program Files\trend micro
2015-04-15 19:25:59 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-04-15 19:25:59 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-04-15 19:25:59 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-04-15 19:25:59 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-04-15 19:25:59 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-04-15 19:25:59 ----A---- C:\Windows\system32\wuauclt.exe
2015-04-15 19:25:59 ----A---- C:\Windows\system32\wuapp.exe
2015-04-15 19:25:59 ----A---- C:\Windows\system32\wuapi.dll
2015-04-15 19:25:59 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-04-15 19:25:58 ----A---- C:\Windows\system32\wups2.dll
2015-04-15 19:25:58 ----A---- C:\Windows\system32\wups.dll
2015-04-15 19:25:58 ----A---- C:\Windows\system32\wudriver.dll
2015-04-15 19:25:58 ----A---- C:\Windows\system32\wucltux.dll
2015-04-15 19:25:58 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 19:25:57 ----A---- C:\Windows\system32\wuwebv.dll
2015-04-15 19:25:57 ----A---- C:\Windows\system32\wuaueng.dll
2015-04-15 19:25:51 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2015-04-15 19:25:51 ----A---- C:\Windows\system32\gdi32.dll
2015-04-15 19:25:50 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-04-15 19:25:50 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-04-15 19:25:50 ----A---- C:\Windows\system32\msxml3r.dll
2015-04-15 19:25:50 ----A---- C:\Windows\system32\msxml3.dll
2015-04-15 19:25:45 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-04-15 19:25:44 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-04-15 19:25:44 ----A---- C:\Windows\system32\ntdll.dll
2015-04-15 19:25:43 ----A---- C:\Windows\system32\KernelBase.dll
2015-04-15 19:25:43 ----A---- C:\Windows\system32\kernel32.dll
2015-04-15 19:25:42 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-04-15 19:25:41 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-04-15 19:25:40 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-04-15 19:25:40 ----A---- C:\Windows\system32\wow64win.dll
2015-04-15 19:25:40 ----A---- C:\Windows\system32\schannel.dll
2015-04-15 19:25:39 ----A---- C:\Windows\system32\lsasrv.dll
2015-04-15 19:25:38 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-04-15 19:25:37 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-04-15 19:25:37 ----A---- C:\Windows\system32\wow64.dll
2015-04-15 19:25:37 ----A---- C:\Windows\system32\srcore.dll
2015-04-15 19:25:37 ----A---- C:\Windows\system32\conhost.exe
2015-04-15 19:25:36 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-04-15 19:25:36 ----A---- C:\Windows\system32\winsrv.dll
2015-04-15 19:25:36 ----A---- C:\Windows\system32\wdigest.dll
2015-04-15 19:25:36 ----A---- C:\Windows\system32\rstrui.exe
2015-04-15 19:25:36 ----A---- C:\Windows\system32\msv1_0.dll
2015-04-15 19:25:36 ----A---- C:\Windows\system32\kerberos.dll
2015-04-15 19:25:36 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-04-15 19:25:36 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-04-15 19:25:35 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-04-15 19:25:35 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-04-15 19:25:35 ----A---- C:\Windows\system32\TSpkg.dll
2015-04-15 19:25:35 ----A---- C:\Windows\system32\sspicli.dll
2015-04-15 19:25:35 ----A---- C:\Windows\system32\smss.exe
2015-04-15 19:25:35 ----A---- C:\Windows\system32\ncrypt.dll
2015-04-15 19:25:34 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-04-15 19:25:34 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-04-15 19:25:34 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-04-15 19:25:34 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-04-15 19:25:34 ----A---- C:\Windows\system32\srclient.dll
2015-04-15 19:25:34 ----A---- C:\Windows\system32\lsass.exe
2015-04-15 19:25:34 ----A---- C:\Windows\system32\auditpol.exe
2015-04-15 19:25:33 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-04-15 19:25:33 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-04-15 19:25:33 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-04-15 19:25:33 ----A---- C:\Windows\system32\sspisrv.dll
2015-04-15 19:25:33 ----A---- C:\Windows\system32\secur32.dll
2015-04-15 19:25:33 ----A---- C:\Windows\system32\ntvdm64.dll
2015-04-15 19:25:33 ----A---- C:\Windows\system32\csrsrv.dll
2015-04-15 19:25:33 ----A---- C:\Windows\system32\credssp.dll
2015-04-15 19:25:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 19:25:32 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 19:25:32 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 19:25:32 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 19:25:32 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 19:25:32 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 19:25:32 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-04-15 19:25:32 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-04-15 19:25:32 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-04-15 19:25:32 ----A---- C:\Windows\system32\wow64cpu.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 19:25:31 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 19:25:30 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 19:25:29 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 19:25:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 19:25:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 19:25:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 19:25:28 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 19:25:28 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 19:25:28 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 19:25:28 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 19:25:28 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 19:25:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 19:25:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 19:25:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 19:25:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 19:25:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 19:25:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 19:25:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 19:25:26 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 19:25:26 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 19:25:26 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-04-15 19:25:25 ----A---- C:\Windows\SYSWOW64\user.exe
2015-04-15 19:25:25 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-04-15 19:25:25 ----A---- C:\Windows\system32\apisetschema.dll
2015-04-15 19:25:24 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-04-15 19:25:24 ----A---- C:\Windows\system32\adtschema.dll
2015-04-15 19:25:23 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-04-15 19:25:23 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-04-15 19:25:23 ----A---- C:\Windows\system32\msobjs.dll
2015-04-15 19:25:23 ----A---- C:\Windows\system32\msaudite.dll
2015-04-15 19:24:40 ----A---- C:\Windows\system32\drivers\http.sys
2015-04-15 19:24:38 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-04-15 19:24:38 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-04-15 19:24:37 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-04-15 19:24:37 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-04-15 19:24:37 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-04-15 19:24:37 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-04-15 19:24:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-04-15 19:24:35 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-04-15 19:24:35 ----A---- C:\Windows\system32\iernonce.dll
2015-04-15 19:24:35 ----A---- C:\Windows\system32\ie4uinit.exe
2015-04-15 19:24:34 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-04-15 19:24:34 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-04-15 19:24:34 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-04-15 19:24:34 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 19:24:33 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-04-15 19:24:31 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-04-15 19:24:31 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-04-15 19:24:31 ----A---- C:\Windows\system32\iedkcs32.dll
2015-04-15 19:24:30 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-04-15 19:24:30 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-04-15 19:24:30 ----A---- C:\Windows\system32\urlmon.dll
2015-04-15 19:24:30 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-04-15 19:24:29 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-04-15 19:24:29 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-04-15 19:24:28 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-04-15 19:24:28 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-04-15 19:24:28 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-15 19:24:28 ----A---- C:\Windows\system32\msfeeds.dll
2015-04-15 19:24:28 ----A---- C:\Windows\system32\dxtrans.dll
2015-04-15 19:24:27 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-04-15 19:24:26 ----A---- C:\Windows\system32\iesetup.dll
2015-04-15 19:24:26 ----A---- C:\Windows\system32\ieapfltr.dll
2015-04-15 19:24:25 ----A---- C:\Windows\system32\iertutil.dll
2015-04-15 19:24:24 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-04-15 19:24:24 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-04-15 19:24:23 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-04-15 19:24:23 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-04-15 19:24:23 ----A---- C:\Windows\system32\jsproxy.dll
2015-04-15 19:24:23 ----A---- C:\Windows\system32\ieUnatt.exe
2015-04-15 19:24:22 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-04-15 19:24:20 ----A---- C:\Windows\system32\ieui.dll
2015-04-15 19:24:20 ----A---- C:\Windows\system32\ieframe.dll
2015-04-15 19:24:20 ----A---- C:\Windows\system32\dxtmsft.dll
2015-04-15 19:24:18 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-04-15 19:24:18 ----A---- C:\Windows\system32\mshtmled.dll
2015-04-15 19:24:18 ----A---- C:\Windows\system32\jscript9diag.dll
2015-04-15 19:24:17 ----A---- C:\Windows\system32\vbscript.dll
2015-04-15 19:24:17 ----A---- C:\Windows\system32\jscript9.dll
2015-04-15 19:24:16 ----A---- C:\Windows\system32\wininet.dll
2015-04-15 19:24:15 ----A---- C:\Windows\system32\msrating.dll
2015-04-15 19:24:15 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-04-15 19:24:14 ----A---- C:\Windows\system32\mshtml.dll
2015-04-15 19:21:33 ----A---- C:\Windows\SYSWOW64\clfsw32.dll
2015-04-15 19:21:33 ----A---- C:\Windows\system32\clfsw32.dll
2015-04-15 19:21:33 ----A---- C:\Windows\system32\clfs.sys

======List of files/folders modified in the last 1 month======

2015-05-10 21:56:17 ----D---- C:\Windows\Temp
2015-05-10 21:51:54 ----D---- C:\Windows\system32\config
2015-05-10 21:51:19 ----D---- C:\Windows\system32\Tasks
2015-05-10 21:45:10 ----D---- C:\Windows\Tasks
2015-05-10 21:45:03 ----D---- C:\Program Files (x86)\Microsoft
2015-05-10 19:58:44 ----D---- C:\Windows\Prefetch
2015-05-10 19:58:44 ----D---- C:\Windows
2015-05-10 19:49:17 ----SHD---- C:\System Volume Information
2015-05-10 19:29:13 ----D---- C:\Windows\system32\drivers
2015-05-10 19:18:47 ----RD---- C:\Program Files (x86)
2015-05-03 14:59:35 ----D---- C:\Users\Eva\AppData\Roaming\vlc
2015-05-02 17:48:43 ----D---- C:\Program Files
2015-05-02 17:36:20 ----D---- C:\Windows\System32
2015-05-02 17:36:20 ----D---- C:\Windows\inf
2015-05-02 17:36:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-04-30 12:22:16 ----D---- C:\Windows\system32\NDF
2015-04-29 11:53:56 ----D---- C:\Program Files (x86)\Opera
2015-04-26 17:35:51 ----D---- C:\Users\Eva\AppData\Roaming\foobar2000
2015-04-16 23:12:28 ----D---- C:\Users\Eva\AppData\Roaming\Skype
2015-04-16 20:32:46 ----D---- C:\Windows\rescache
2015-04-16 19:57:24 ----D---- C:\Windows\Microsoft.NET
2015-04-16 19:57:17 ----RSD---- C:\Windows\assembly
2015-04-16 19:39:44 ----D---- C:\Windows\winsxs
2015-04-16 19:36:16 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-04-16 19:36:16 ----D---- C:\Windows\SysWOW64
2015-04-16 19:36:16 ----D---- C:\Windows\system32\cs-CZ
2015-04-16 19:36:16 ----D---- C:\Windows\PolicyDefinitions
2015-04-16 19:36:04 ----D---- C:\Windows\AppPatch
2015-04-16 19:36:01 ----D---- C:\Program Files\Internet Explorer
2015-04-16 19:36:00 ----D---- C:\Windows\SYSWOW64\en-US
2015-04-16 19:35:58 ----D---- C:\Windows\system32\en-US
2015-04-16 19:35:56 ----D---- C:\Program Files (x86)\Internet Explorer
2015-04-15 22:15:29 ----SHD---- C:\Windows\Installer
2015-04-15 22:15:29 ----HD---- C:\Config.Msi
2015-04-15 22:15:29 ----D---- C:\ProgramData\Microsoft Help
2015-04-15 22:12:58 ----D---- C:\Windows\system32\MRT
2015-04-15 22:06:26 ----A---- C:\Windows\system32\MRT.exe
2015-04-15 19:18:43 ----D---- C:\Windows\system32\catroot2
2015-04-15 18:58:38 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-30 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-30 267632]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-04 408600]
R0 lullaby;lullaby; C:\Windows\system32\DRIVERS\lullaby.sys [2009-06-18 15928]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-30 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-30 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-30 436624]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-30 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-30 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-30 116728]
R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2015-05-10 51496]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2009-06-12 112128]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-08-25 10611552]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E62x64.sys [2009-06-09 55296]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
R3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf.sys [2010-09-01 17976]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-06-05 1806400]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-05-26 40448]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-02-28 96296]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-02-28 134184]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2008-12-22 36392]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-02-28 21160]
S3 dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\drivers\Dot4Prt.sys [2010-11-20 19968]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2008-12-08 61792]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\Windows\system32\DRIVERS\ewdcsc.sys [2007-08-09 29696]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2009-09-10 117248]
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\Windows\system32\DRIVERS\ewusbdev.sys [2009-10-12 114304]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RimUsb;zařízení BlackBerry Smartphone; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [2007-05-14 27520]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
S3 SQTECH900A;ZBR-DSC-DRIVER(PID_900A_00); C:\Windows\System32\Drivers\Capt900A.sys [2009-07-24 135104]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\drivers\usb8023x.sys [2013-02-12 19968]
S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgx64bus.sys [2010-01-21 17920]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2009-07-09 1222144]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 154168]
S3 WinUsb;Ovladač WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 ameisvc;Web'n'walk Manager mobile equipment installation service; C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\ameisvc.exe [2012-08-22 123320]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2014-11-30 50344]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-03-02 844328]
R2 FastBootAgent;FastBootAgent; C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe [2009-07-24 306232]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 Secunia PSI Agent;Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [2011-01-10 993848]
R2 Secunia Update Agent;Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [2011-01-10 399416]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [2011-11-22 1148632]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-28 107912]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15 268464]
S3 fsssvc;Windows Live Zabezpečení rodiny; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2008-12-08 533344]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-28 107912]
S3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-03-13 114688]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-21 1255736]

-----------------EOF-----------------

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?

Díky, provedeno && předám uživateli k testu.

OK, nemáte zač!

Tady uživatel - bohužel, nepomohlo
Kromě toho, že se otevírají okna s reklamou, se mi posunuje stránka (nastavím začátek článku, šoupne se sám dolů a následují vyskakující okna reklam); dále když chci něco "rozkliknout" na jakékoli stránce (např. nastavit datum v nabídce úřadu práce,detail zboží na stránce inter.obchodu, otevřít článek na idnes, a před chvílí se přihlásit na Vaší stránku- otevře se sám znovu prohlížeč s reklamami - např. nabídkami her, novinami v angl.a často se mi nabízí "Windows 7 oprava PC" s nabídkou "stažení a skenování mého PC zdarma" apod. Krom toho se občas chová podivně - nešla vypnout Wifi, sám se mi zavřel dokumnet ve Wordu či celý Word. PC pomalé, stále "chroustá". Prosím pomozte. Děkuju. (jsem prostý uživatel, omlouvám se za neodborné výrazivo)

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Vyhrávám pitomce týdne, otevřela jsem odkaz a nevím si rady (dosud mi s logy pomáhal syn způsobem "přítel na telefonu" a když byl vzácně doma). Poradíte mi prosím trochu podrobněji? Omlouvám se a děkuju.

MBAM stáhněte z uvedeného odkazu, nainstalujte a spusťte. Nechte pracovat. Po skončení skenu se objeví log (měl by se sám otevřít), který sem zkopírujte. Já ho pak zkontroluji a řeknu, zda smazat vše, nebo zda něco ponecháme (MBAM občas má chybné detekce a nerad bych, aby smazal něco potřebného - proto toto řešení)