VIRY.CZ

Dobrý den, dostal se ke mě zavirovaný počítač. Pomocí avastu a jeho kotroly před spuštěním systému jsem už nějaké napadené soubory podařilo odebrat ale myslím si že v počítači bude problém ještě někde jinde. Děkuji za kontrolu.

Logfile of random's system information tool 1.10 (written by random/random)
Run by euronics at 2015-07-20 16:47:54
Microsoft Windows 8.1
System drive C: has 650 GB (93%) free of 698 GB
Total RAM: 5957 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:47:59, on 20. 7. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Users\euronics\AppData\Roaming\Mozila\autoit.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\euronics.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.atlas.cz/?from=icqhp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [RadioController] "C:\Program Files (x86)\RadioController\RfBtnHelper.exe" Start_Run
O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Samsung Appstore] "C:\Users\euronics\AppData\Roaming\Mozila\autoit.exe" "C:\Users\euronics\AppData\Roaming\Mozila\up.au3"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O4 - HKUS\S-1-5-21-373619528-1556549716-3743306597-1001\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Broadcom Card Reader Service (BrcmCardReader) - Broadcom Corp. - C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe
O23 - Service: CCDMonitorService - Acer Incorporated - C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Nero Update (NAUpdate) - Nero AG - c:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Dritek RF Button Command Service (RfButtonDriverService) - Dritek System INC. - C:\Windows\RfBtnSvc64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9449 bytes

======Listing Processes======

wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"C:\Windows\system32\nvvsvc.exe"
"dwm.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe"
"C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
dashost.exe {948fae09-92be-4699-a036f115e087371a}
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
C:\Windows\RfBtnSvc64.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"c:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
taskhostex.exe
"\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}" --enable-wmi-window --enable-setforeground-window --enable-kbhook-window
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\skydrive.exe -Embedding
"C:\WINDOWS\system32\GWX\GWX.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\WINDOWS\system32\igfxext.exe" -Embedding
"C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe"
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Windows\System32\igfxtray.exe"
"C:\Program Files\Acer\Acer Power Management\ePowerTray.exe"
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Users\euronics\AppData\Roaming\Mozila\autoit.exe" "C:\Users\euronics\AppData\Roaming\Mozila\up.au3"
"C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files (x86)\RadioController\RfBtnHelper.exe" HigherRFButtonHelper
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe20_ Global\UsGthrCtrlFltPipeMssGthrPipe20 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 588 596 604 65536 600

"C:\Users\euronics\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\AutoKMS.job - C:\Windows\AutoKMS.exe
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\euronics\AppData\Roaming\Mozilla\Firefox\Profiles\ahl9f86w.default

prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@alawar.com/npapi]
"Description"=
"Path"=C:\WINDOWS\npapi.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon Easy-PhotoPrint EX
"Path"=C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-01-25 66688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-07-20 655480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-20 559624]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-06-11 12503184]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 108144]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-11-29 3008824]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-10-19 2185032]
"CanonSolutionMenu"=C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [2009-09-04 767312]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2015-06-01 183216]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2015-06-01 411056]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2015-06-01 453552]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Samsung Appstore"=C:\Users\euronics\AppData\Roaming\Mozila\autoit.exe [2015-06-12 934400]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-06-01 8358680]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LManager"= []
"RadioController"=C:\Program Files (x86)\RadioController\RfBtnHelper.exe [2013-04-26 111216]
"Norton Online Backup"=C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2012-08-15 2994880]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-07-20 6109776]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2015-06-01 451584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLinkedConnections"=1
"DisableTaskMgr"=0
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-07-20 16:47:54 ----D---- C:\rsit
2015-07-20 16:47:54 ----D---- C:\Program Files\trend micro
2015-07-20 16:32:20 ----D---- C:\ProgramData\Mozilla
2015-07-20 16:32:16 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-20 13:15:39 ----D---- C:\Users\euronics\AppData\Roaming\AVAST Software
2015-07-20 13:14:45 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2015-07-20 13:14:45 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2015-07-20 13:14:45 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2015-07-20 13:14:45 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2015-07-20 13:14:45 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2015-07-20 13:14:45 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2015-07-20 13:14:45 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2015-07-20 13:14:45 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2015-07-20 13:14:43 ----A---- C:\WINDOWS\system32\aswBoot.exe
2015-07-20 13:14:26 ----A---- C:\WINDOWS\avastSS.scr
2015-07-20 13:12:42 ----D---- C:\Program Files\AVAST Software
2015-07-20 13:12:01 ----D---- C:\ProgramData\AVAST Software
2015-07-20 12:41:10 ----D---- C:\Program Files\CCleaner
2015-07-20 12:35:13 ----SHD---- C:\Config.Msi
2015-07-19 12:23:04 ----D---- C:\ProgramData\AVG Security Toolbar
2015-07-19 12:23:02 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-07-19 09:47:00 ----D---- C:\Program Files\Common Files\AV
2015-07-19 09:46:36 ----D---- C:\Users\euronics\AppData\Roaming\TuneUp Software
2015-07-19 09:28:56 ----HD---- C:\ProgramData\Common Files
2015-07-19 09:28:56 ----D---- C:\ProgramData\MFAData
2015-07-15 08:59:53 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2015-07-15 08:59:53 ----A---- C:\WINDOWS\system32\ole32.dll
2015-07-15 08:59:18 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-07-15 08:59:17 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2015-07-15 08:58:54 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2015-07-15 08:58:54 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2015-07-15 08:58:54 ----A---- C:\WINDOWS\system32\wucltux.dll
2015-07-15 08:58:54 ----A---- C:\WINDOWS\system32\wuaueng.dll
2015-07-15 08:58:54 ----A---- C:\WINDOWS\system32\wuauclt.exe
2015-07-15 08:58:54 ----A---- C:\WINDOWS\system32\wuapp.exe
2015-07-15 08:58:54 ----A---- C:\WINDOWS\system32\wuapi.dll
2015-07-15 08:58:54 ----A---- C:\WINDOWS\system32\WinSetupUI.dll
2015-07-15 08:58:53 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2015-07-15 08:58:53 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2015-07-15 08:58:53 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2015-07-15 08:58:53 ----A---- C:\WINDOWS\system32\wuwebv.dll
2015-07-15 08:58:53 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2015-07-15 08:58:53 ----A---- C:\WINDOWS\system32\wups2.dll
2015-07-15 08:58:53 ----A---- C:\WINDOWS\system32\wups.dll
2015-07-15 08:58:53 ----A---- C:\WINDOWS\system32\wudriver.dll
2015-07-15 08:58:12 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2015-07-15 08:57:43 ----A---- C:\WINDOWS\system32\win32k.sys
2015-07-15 08:57:20 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2015-07-15 08:57:19 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2015-07-15 08:57:19 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2015-07-15 08:57:19 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2015-07-15 08:57:19 ----A---- C:\WINDOWS\system32\msv1_0.dll
2015-07-15 08:57:19 ----A---- C:\WINDOWS\system32\lsasrv.dll
2015-07-15 08:57:19 ----A---- C:\WINDOWS\system32\kerberos.dll
2015-07-15 08:57:19 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2015-07-15 08:57:19 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2015-07-15 08:57:19 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2015-07-15 08:57:19 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2015-07-15 08:57:18 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2015-07-15 08:57:18 ----A---- C:\WINDOWS\system32\certcli.dll
2015-07-15 08:56:45 ----A---- C:\WINDOWS\system32\werdiagcontroller.dll
2015-07-15 08:56:45 ----A---- C:\WINDOWS\system32\audiosrv.dll
2015-07-15 08:56:45 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-07-15 08:56:17 ----A---- C:\WINDOWS\system32\profsvc.dll
2015-07-15 08:55:47 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-07-15 08:55:47 ----A---- C:\WINDOWS\system32\authui.dll
2015-07-15 08:55:46 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2015-07-15 08:55:46 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2015-07-15 08:55:46 ----A---- C:\WINDOWS\system32\msiexec.exe
2015-07-15 08:55:46 ----A---- C:\WINDOWS\system32\msi.dll
2015-07-15 08:55:14 ----A---- C:\WINDOWS\SYSWOW64\GeofenceMonitorService.dll
2015-07-15 08:55:14 ----A---- C:\WINDOWS\system32\GeofenceMonitorService.dll
2015-07-15 08:54:49 ----A---- C:\WINDOWS\system32\shell32.dll
2015-07-15 08:54:48 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-07-15 08:54:46 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2015-07-15 08:54:46 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2015-07-15 08:52:50 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2015-07-15 08:52:19 ----A---- C:\WINDOWS\system32\drivers\sermouse.sys
2015-07-15 08:52:19 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2015-07-15 08:52:19 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys
2015-07-15 08:52:19 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2015-07-15 08:52:19 ----A---- C:\WINDOWS\system32\drivers\kbdclass.sys
2015-07-15 08:52:19 ----A---- C:\WINDOWS\system32\drivers\i8042prt.sys
2015-07-15 08:51:50 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys
2015-07-15 08:51:22 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-07-15 08:51:21 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-07-15 08:51:21 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-07-15 08:51:21 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-07-15 08:45:52 ----A---- C:\WINDOWS\system32\generaltel.dll
2015-07-15 08:45:52 ----A---- C:\WINDOWS\system32\appraiser.dll
2015-07-15 08:45:51 ----A---- C:\WINDOWS\system32\invagent.dll
2015-07-15 08:45:51 ----A---- C:\WINDOWS\system32\devinv.dll
2015-07-15 08:45:51 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2015-07-15 08:45:51 ----A---- C:\WINDOWS\system32\aepdu.dll
2015-07-15 08:45:51 ----A---- C:\WINDOWS\system32\aeinv.dll
2015-07-15 08:45:51 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-07-15 08:44:54 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2015-07-15 08:44:54 ----A---- C:\WINDOWS\system32\WSShared.dll
2015-07-15 08:44:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-15 08:44:53 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-15 08:43:50 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-07-15 08:43:47 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-07-15 08:43:32 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-07-15 08:43:26 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-07-15 08:42:04 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-07-15 08:41:59 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-07-15 08:41:56 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-07-15 08:41:55 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-07-15 08:41:55 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-07-15 08:41:55 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-07-15 08:41:23 ----A---- C:\WINDOWS\system32\wininet.dll
2015-07-15 08:41:23 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-07-15 08:41:21 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-07-15 08:41:19 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-07-15 08:41:19 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2015-07-15 08:41:18 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-07-15 08:41:18 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2015-07-15 08:41:17 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2015-07-15 08:41:17 ----A---- C:\WINDOWS\system32\ieui.dll
2015-07-15 08:41:16 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2015-07-15 08:41:16 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2015-07-15 08:41:15 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2015-07-15 08:41:15 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2015-07-15 08:41:14 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2015-07-15 08:41:14 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2015-07-15 08:41:14 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2015-07-15 08:41:14 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-07-15 08:41:13 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2015-07-15 08:41:13 ----A---- C:\WINDOWS\system32\msrating.dll
2015-07-15 08:41:13 ----A---- C:\WINDOWS\system32\mshtmled.dll
2015-07-15 08:41:13 ----A---- C:\WINDOWS\system32\dxtrans.dll
2015-07-15 08:41:12 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2015-07-15 08:41:12 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-07-15 08:41:12 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2015-07-15 08:41:12 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2015-07-15 08:41:12 ----A---- C:\WINDOWS\system32\webcheck.dll
2015-07-15 08:41:12 ----A---- C:\WINDOWS\system32\jscript.dll
2015-07-15 08:41:12 ----A---- C:\WINDOWS\system32\inetcomm.dll
2015-07-15 08:41:12 ----A---- C:\WINDOWS\system32\iepeers.dll
2015-07-15 08:40:28 ----A---- C:\WINDOWS\system32\fhcpl.dll
2015-07-15 08:39:59 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2015-07-15 08:39:59 ----A---- C:\WINDOWS\system32\gdi32.dll
2015-07-15 08:25:33 ----A---- C:\WINDOWS\system32\apphelp.dll
2015-07-15 08:24:37 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-07-15 08:24:11 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2015-07-15 08:24:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2015-06-24 01:31:00 ----A---- C:\WINDOWS\system32\FM20.DLL

======List of files/folders modified in the last 1 month======

2015-07-20 16:47:54 ----RD---- C:\Program Files
2015-07-20 16:35:49 ----D---- C:\WINDOWS\Prefetch
2015-07-20 16:33:21 ----D---- C:\WINDOWS\Inf
2015-07-20 16:33:21 ----D---- C:\WINDOWS\debug
2015-07-20 16:33:21 ----D---- C:\Windows
2015-07-20 16:32:34 ----D---- C:\Users\euronics\AppData\Roaming\Mozilla
2015-07-20 16:32:20 ----AHD---- C:\ProgramData
2015-07-20 16:32:16 ----D---- C:\Program Files (x86)
2015-07-20 16:25:23 ----D---- C:\WINDOWS\Microsoft.NET
2015-07-20 16:24:50 ----D---- C:\WINDOWS\Temp
2015-07-20 16:24:24 ----D---- C:\WINDOWS\system32\config
2015-07-20 16:02:47 ----D---- C:\WINDOWS\rescache
2015-07-20 16:00:03 ----D---- C:\WINDOWS\system32\sru
2015-07-20 15:41:44 ----DC---- C:\WINDOWS\Panther
2015-07-20 15:41:43 ----D---- C:\WINDOWS\SoftwareDistribution
2015-07-20 15:16:21 ----SHD---- C:\System Volume Information
2015-07-20 15:11:53 ----RD---- C:\WINDOWS\System32
2015-07-20 15:11:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-07-20 15:07:32 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2015-07-20 13:46:26 ----D---- C:\Program Files (x86)\Mobogenie
2015-07-20 13:15:22 ----D---- C:\WINDOWS\system32\DriverStore
2015-07-20 13:15:08 ----D---- C:\WINDOWS\system32\Tasks
2015-07-20 13:14:45 ----D---- C:\WINDOWS\system32\drivers
2015-07-20 13:14:44 ----D---- C:\WINDOWS\WinSxS
2015-07-20 13:05:07 ----D---- C:\Program Files (x86)\Google
2015-07-20 13:05:06 ----SHD---- C:\WINDOWS\Installer
2015-07-20 13:05:06 ----D---- C:\WINDOWS\Tasks
2015-07-20 13:02:52 ----D---- C:\Program Files (x86)\Zachvev - Pod vlivem mesice
2015-07-20 13:02:45 ----D---- C:\Program Files (x86)\Zelene mesto
2015-07-20 13:02:19 ----D---- C:\Program Files (x86)\Ze zivota hmyzu
2015-07-20 13:01:05 ----D---- C:\Program Files (x86)\Zachran syna
2015-07-20 13:00:38 ----D---- C:\Program Files (x86)\WildTangent Games
2015-07-20 12:58:42 ----D---- C:\Users\euronics\AppData\Roaming\WildTangent
2015-07-20 12:58:42 ----D---- C:\ProgramData\WildTangent
2015-07-20 12:57:51 ----D---- C:\Program Files (x86)\Tornado
2015-07-20 12:57:39 ----D---- C:\Program Files (x86)\Smaragdova zeme Solitaire
2015-07-20 12:56:46 ----D---- C:\Program Files (x86)\Proroctvi ztraceneho kralovstvi
2015-07-20 12:56:40 ----D---- C:\Program Files (x86)\Proklete klenoty
2015-07-20 12:56:23 ----D---- C:\Program Files (x86)\Princ z Persie a hamizny kalif
2015-07-20 12:55:55 ----D---- C:\Program Files (x86)\Pomsta ducha - Soumrak nad Beaconem
2015-07-20 12:55:30 ----D---- C:\Program Files (x86)\Pikova dama
2015-07-20 12:53:21 ----D---- C:\Program Files (x86)\Morova rana
2015-07-20 12:52:32 ----D---- C:\Program Files (x86)\Loutkove divadlo - Ztracene mesto
2015-07-20 12:52:12 ----D---- C:\Program Files (x86)\Loď nářků
2015-07-20 12:51:44 ----D---- C:\Program Files (x86)\Libanky v pekle
2015-07-20 12:49:33 ----D---- C:\Program Files (x86)\Kralovsky expres
2015-07-20 12:49:26 ----D---- C:\Program Files (x86)\Kostej Nesmrtelny
2015-07-20 12:48:57 ----D---- C:\Program Files (x86)\Kouzelne darky
2015-07-20 12:48:49 ----D---- C:\Program Files (x86)\Kdo jsem
2015-07-20 12:48:43 ----D---- C:\Program Files (x86)\Jardinains 2!
2015-07-20 12:48:35 ----D---- C:\Program Files (x86)\Jantarova kletba
2015-07-20 12:48:00 ----D---- C:\Program Files (x86)\Jane Angel 2 - Deti temnoty
2015-07-20 12:46:23 ----D---- C:\Program Files (x86)\Hledani gralu - Jane Angel
2015-07-20 12:46:10 ----D---- C:\Program Files (x86)\Hledani gralu
2015-07-20 12:45:39 ----D---- C:\Program Files (x86)\Fantom - Zlocin v Benatkach
2015-07-20 12:45:01 ----D---- C:\Program Files (x86)\Cerny kocour - Sberatelska edice
2015-07-20 12:44:38 ----D---- C:\Program Files (x86)\Carodejny zertik - zabi stesti
2015-07-20 12:44:29 ----D---- C:\Program Files (x86)\Carodejka
2015-07-20 12:43:39 ----D---- C:\Program Files (x86)\Common Files
2015-07-20 12:42:34 ----D---- C:\Program Files (x86)\Byl jednou jeden mikrob
2015-07-20 12:41:55 ----D---- C:\Program Files (x86)\Bratr a sestra - smrti navzdory
2015-07-20 12:41:20 ----D---- C:\Program Files (x86)\Bezhlavy jezdec - legenda ze Sleepy Hollow
2015-07-20 12:41:08 ----D---- C:\Program Files (x86)\Anticky Rim 2
2015-07-20 12:40:55 ----D---- C:\Program Files (x86)\Anticky Rim
2015-07-20 12:40:44 ----D---- C:\Program Files (x86)\Ahoj Ameriko - Za rozkvetly New York
2015-07-20 12:36:22 ----HD---- C:\WINDOWS\ELAMBKUP
2015-07-20 12:33:03 ----D---- C:\Program Files (x86)\Zlodeji dusi
2015-07-19 17:22:54 ----SD---- C:\Users\euronics\AppData\Roaming\Microsoft
2015-07-19 12:21:19 ----D---- C:\Users\euronics\AppData\Roaming\newnext.me
2015-07-19 09:47:00 ----D---- C:\Program Files\Common Files
2015-07-19 09:43:08 ----D---- C:\WINDOWS\SysWOW64
2015-07-18 12:27:23 ----D---- C:\WINDOWS\AppReadiness
2015-07-17 16:51:07 ----D---- C:\WINDOWS\apppatch
2015-07-17 16:51:04 ----D---- C:\WINDOWS\system32\cs-CZ
2015-07-17 16:51:01 ----D---- C:\WINDOWS\system32\CodeIntegrity
2015-07-17 16:51:00 ----RD---- C:\WINDOWS\ToastData
2015-07-17 16:50:58 ----SD---- C:\WINDOWS\system32\CompatTel
2015-07-17 16:50:58 ----D---- C:\WINDOWS\system32\wbem
2015-07-17 16:50:58 ----D---- C:\WINDOWS\system32\appraiser
2015-07-17 16:50:57 ----D---- C:\WINDOWS\WinStore
2015-07-17 16:50:57 ----D---- C:\Program Files\Internet Explorer
2015-07-17 16:50:57 ----D---- C:\Program Files (x86)\Internet Explorer
2015-07-17 16:44:11 ----D---- C:\ProgramData\Microsoft Help
2015-07-17 16:37:49 ----D---- C:\WINDOWS\CbsTemp
2015-07-17 16:34:25 ----D---- C:\WINDOWS\system32\MRT
2015-07-17 16:15:03 ----SD---- C:\WINDOWS\SYSWOW64\GWX
2015-07-17 16:15:03 ----SD---- C:\WINDOWS\system32\GWX
2015-07-15 11:01:51 ----HD---- C:\Program Files\WindowsApps
2015-07-15 10:22:28 ----D---- C:\WINDOWS\SYSWOW64\NV
2015-07-15 10:22:28 ----D---- C:\WINDOWS\system32\NV
2015-07-15 07:31:46 ----D---- C:\WINDOWS\system32\catroot2
2015-07-13 23:10:13 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-07-05 12:08:23 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2015-07-03 08:43:04 ----A---- C:\WINDOWS\system32\MRT.exe
2015-07-01 12:25:26 ----D---- C:\ProgramData\CanonIJPLM

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-07-20 65224]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-07-20 274808]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-08-16 645952]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2013-09-05 30496]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-07-20 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-07-20 1048856]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-07-20 447944]
R1 ccSet_NARA;NARA Settings Manager; C:\WINDOWS\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [2012-05-26 168608]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-07-20 28656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-07-20 90968]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-07-20 150160]
R3 AthBTPort;@oem11.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\WINDOWS\system32\DRIVERS\btath_flt.sys [2013-01-25 89168]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
R3 b57xdbd;@oem24.inf,%bcmxd_16bf_svcd%;Broadcom xD Picture Bus Driver Service; C:\WINDOWS\System32\drivers\b57xdbd.sys [2012-08-13 72280]
R3 b57xdmp;@oem24.inf,%BXD_SVCDESC%;Broadcom xD Picture vstorp client drv; C:\WINDOWS\System32\drivers\b57xdmp.sys [2012-08-13 21080]
R3 bScsiMSa;bScsiMSa; C:\WINDOWS\System32\drivers\bScsiMSa.sys [2012-06-19 55384]
R3 bScsiSDa;bScsiSDa; C:\WINDOWS\System32\drivers\bScsiSDa.sys [2012-08-14 70744]
R3 BTATH_A2DP;@oem10.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\WINDOWS\system32\drivers\btath_a2dp.sys [2013-01-25 346192]
R3 btath_avdt;@oem10.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\WINDOWS\system32\drivers\btath_avdt.sys [2013-01-25 115280]
R3 BTATH_BUS;@oem7.inf,%BTATH_BUS.SVCDESC%;Qualcomm Atheros Bluetooth Bus; C:\WINDOWS\System32\drivers\btath_bus.sys [2013-01-25 34384]
R3 BTATH_HCRP;@oem14.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\WINDOWS\System32\drivers\btath_hcrp.sys [2013-01-25 179432]
R3 BTATH_LWFLT;@oem22.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [2013-01-25 77464]
R3 BTATH_RCP;@oem18.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\WINDOWS\System32\drivers\btath_rcp.sys [2013-01-25 136424]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2013-01-25 581200]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2014-10-29 53248]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2013-12-04 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-06-01 5384176]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-06-12 4060560]
R3 IntcDAud;@oem21.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 k57nd60a;@netk57a.inf,%SvcDispName%;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\WINDOWS\system32\DRIVERS\k57nd60a.sys [2013-06-18 425984]
R3 MEIx64;@oem25.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2013-09-05 11273504]
R3 Ps2Kb2Hid;@oem3.inf,%Ps2Kb2Hid.SVCDESC%;PS/2 Keyboard to HID Driver; C:\WINDOWS\System32\drivers\aPs2Kb2Hid.sys [2013-04-26 26736]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-01-30 167424]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2012-11-29 31032]
R3 SynTP;@oem5.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2012-11-29 464184]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2014-06-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S1 MpKsl82ebaedc;MpKsl82ebaedc; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{DDA79002-8F2D-4D93-B7E1-C3222F523575}\MpKsl82ebaedc.sys []
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-05-11 1201664]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2014-10-29 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2013-01-25 227456]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-07-20 146600]
R2 BrcmCardReader;Broadcom Card Reader Service; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [2012-08-21 176640]
R2 CCDMonitorService;CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2013-02-20 2615368]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2012-12-10 350544]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2009-02-10 116104]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-18 165760]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-18 276864]
R2 NAUpdate;Nero Update; c:\Program Files (x86)\Nero\Update\NASvc.exe [2012-07-14 769432]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2012-08-15 3943104]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-08-30 920864]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-09-05 1364256]
R2 RfButtonDriverService;Dritek RF Button Command Service; C:\Windows\RfBtnSvc64.exe [2013-04-26 96880]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-18 364416]
R3 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2013-03-16 662088]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-06-01 290224]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-08-13 136120]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 50942144]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-07-01 148136]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

-----------------EOF-----------------

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Po spusteni probehne stazeni databaze
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

# AdwCleaner v4.208 - Log vytvořen 20/07/2015 v 17:22:23
# Aktualizováno 09/07/2015 by Xplode
# Databáze : 2015-07-15.1 [Server]
# Operační system : Windows 8.1 (x64)
# Uživatelské jméno : euronics - ACER
# Spuštěno z : C:\Users\euronics\Desktop\adwcleaner_4.208.exe
# Nastavení : Čištění

***** [ Služby ] *****

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\AVG Security Toolbar
Složka Smazáno : C:\Program Files (x86)\icqtoolbar
Složka Smazáno : C:\Program Files (x86)\Mobogenie
Složka Smazáno : C:\Users\euronics\AppData\Local\genienext
Složka Smazáno : C:\Users\euronics\AppData\Local\Mobogenie
Složka Smazáno : C:\Users\euronics\AppData\Local\Softonic
Složka Smazáno : C:\Users\euronics\AppData\Local\Amigo
Složka Smazáno : C:\Users\euronics\AppData\Roaming\newnext.me
Složka Smazáno : C:\Users\euronics\AppData\Roaming\quickclick
Složka Smazáno : C:\Users\euronics\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
Složka Smazáno : C:\Users\euronics\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Softonic
Složka Smazáno : C:\Users\euronics\Documents\Mobogenie
Soubor Smazáno : C:\Users\euronics\daemonprocess.txt

***** [ Naplánované úlohy ] *****

***** [ Zástupci ] *****

***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Klíč Smazáno : HKCU\Software\XTTB00001
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Smazáno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BE9654C9-9D79-42EC-B55A-3CAEB12DBF58}
Klíč Smazáno : HKCU\Software\Softonic
Klíč Smazáno : HKCU\Software\Avg Secure Update
Klíč Smazáno : HKU\.DEFAULT\Software\Avg Secure Update
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Softonic for Windows

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17840

-\\ Mozilla Firefox v39.0 (x86 en-US)

-\\ Opera v0.0.0.0

*************************

AdwCleaner[R0].txt - [2564 bytů] - [20/07/2015 17:18:55]
AdwCleaner[S0].txt - [2131 bytů] - [20/07/2015 17:22:23]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2189 bytů] ##########

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by euronics on po 20. 07. 2015 at 20:28:36,26.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\euronics\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

20. 7. 2015 20:29:24 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\AGEIA Technologies deleted successfully
C:\PROGRA~2\WildTangent Games deleted successfully
C:\Program Files\Common Files\AV deleted successfully
C:\Users\euronics\AppData\Roaming\spidla deleted successfully
C:\Users\euronics\AppData\Local\cache deleted successfully
C:\Users\euronics\AppData\Local\CrashDumps deleted successfully
C:\Users\euronics\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\euronics\AppData\Local\EmieSiteList deleted successfully
C:\Users\euronics\AppData\Local\EmieUserList deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-373619528-1556549716-3743306597-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\euronics\AppData\Roaming\Mozilla\Firefox\Profiles\ahl9f86w.default\prefs.js:
user_pref("browser.startup.homepage", "https://www.seznam.cz/");

Added to C:\Users\euronics\AppData\Roaming\Mozilla\Firefox\Profiles\ahl9f86w.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\PROGRA~2\AGEIA Technologies not found
C:\PROGRA~2\WildTangent Games not found
C:\PROGRA~3\Špidla Data Processing, s.r.o not found
C:\Users\euronics\.android deleted
C:\PROGRA~2\Princ z Persie a hamizny kalif deleted
C:\PROGRA~2\Proroctvi ztraceneho kralovstvi deleted
C:\found.000 deleted
C:\Users\euronics\AppData\Roaming\AlawarEntertainment deleted
C:\PROGRA~3\AlawarWrapper deleted
C:\Users\euronics\AppData\Local\CrashRpt deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\Users\Public\Documents\AlawarWrapper deleted
C:\Users\euronics\Desktop\Softonic.lnk deleted
C:\Users\euronics\AppData\Local\AlawarHelper.exe deleted
"C:\windows\Installer\344b6.msi" deleted
"C:\Users\euronics\AppData\Roaming\Mozila\autoit.exe" deleted
"C:\Users\euronics\AppData\Roaming\Mozila" deleted
"C:\PROGRA~3\Spidla Data Processing, s.r.o" deleted
"C:\PROGRA~3\?pidla Data Processing, s.r.o" not deleted
"C:\PROGRA~3\Špidla Data Processing, s.r.o" deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\euronics\AppData\Roaming\Mozilla\Firefox\Profiles\ahl9f86w.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [20. 07. 2015 13:14]

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\euronics\AppData\Roaming\Mozilla\Firefox\Profiles\ahl9f86w.default
0302BD49CFF9780E77342871BFB8A54C - C:\Users\euronics\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player

==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[20. 07. 2015 13:14]

pushOK - euronics\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\fnaejnjikodabjplcjngjnjniokmapkm
pushOK - euronics\AppData\Roaming\Opera Software\Opera Stable\Extensions\fnaejnjikodabjplcjngjnjniokmapkm

==== Chromium Fix ======================

C:\Users\euronics\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\fnaejnjikodabjplcjngjnjniokmapkm deleted successfully
C:\Users\euronics\AppData\Roaming\Opera Software\Opera Stable\Extensions\fnaejnjikodabjplcjngjnjniokmapkm deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.atlas.cz/?from=icqhp"
"Search Page"="http://www.google.com"
"Search Bar"="http://www.google.com/ie"
"Default_Search_URL"="http://www.google.com/ie"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
@="http://www.google.com/search?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com/ie"
"Default_Search_URL"="http://www.google.com/ie"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.atlas.cz/?from=icqhp"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/ ... chasst.htm"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{147B00C8-1AD6-4664-9575-F57CCA6F24D5} Unknown Url="Not_Found"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Goo Url="http://www.google.com/search?q={sear"

==== Reset Google Chrome ======================

C:\Users\euronics\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences was reset successfully
C:\Users\euronics\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences.old was reset successfully
C:\Users\euronics\AppData\Roaming\Opera Software\Opera Stable\Preferences was reset successfully
C:\Users\euronics\AppData\Roaming\Opera Software\Opera Stable\Preferences.old was reset successfully
C:\Users\euronics\AppData\Roaming\Opera Software\Opera Stable\Web Data was reset successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-373619528-1556549716-3743306597-1002\Software\Microsoft\Internet Explorer\SearchScopes\{147B00C8-1AD6-4664-9575-F57CCA6F24D5} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{147B00C8-1AD6-4664-9575-F57CCA6F24D5} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{147B00C8-1AD6-4664-9575-F57CCA6F24D5} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\203E62EEA6789D84098513925E9B9999 deleted successfully
HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EE26E302-876A-48D9-9058-3129E5B99999} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\203E62EEA6789D84098513925E9B9999 deleted successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\euronics\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\euronics\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\euronics\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\euronics\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

C:\Users\euronics\AppData\Local\Mozilla\Firefox\Profiles\ahl9f86w.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

No Chrome Cache found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=914 folders=1453 17877063 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\euronics\AppData\Local\Temp will be emptied at reboot
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\euronics\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\PROGRA~3\?pidla Data Processing, s.r.o" not deleted
"C:\PROGRA~3\?pidla Data Processing, s.r.o" not deleted

==== EOF on Łt 21. 07. 2015 at 6:36:34,12 ======================

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

jako první se mi nedařilo dostat na stránku pro stažení launcheru a poté ani stáhnou, avast pořád hlásil malware a viry. Po dokončení testu se z nějakého důvodu nevytvořil FRST.txt na poprvé a bylo nutné potvrdit jeho opětovné vytvoření.
V příloze addition.txt

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-07-2015
Ran by euronics (administrator) on ACER on 21-07-2015 12:59:46
Running from C:\Users\euronics\Desktop
Loaded Profiles: UpdatusUser & euronics (Available Profiles: UpdatusUser & euronics)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Broadcom Corp.) C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Dritek System Inc.) C:\Program Files (x86)\RadioController\RfBtnHelper.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe
(forum.viry.cz) C:\Users\euronics\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3008824 2012-11-29] (Synaptics Incorporated)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2185032 2009-10-19] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)
HKLM-x32\...\Run: [LManager] => [X]
HKLM-x32\...\Run: [RadioController] => C:\Program Files (x86)\RadioController\RfBtnHelper.exe [111216 2013-04-26] (Dritek System Inc.)
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6109776 2015-07-20] (AVAST Software)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-25] (Qualcomm Atheros Commnucations)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-373619528-1556549716-3743306597-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2014-10-29] (Microsoft Corporation)
HKU\S-1-5-21-373619528-1556549716-3743306597-1002\...\Run: [Samsung Appstore] => "C:\Users\euronics\AppData\Roaming\Mozila\autoit.exe" "C:\Users\euronics\AppData\Roaming\Mozila\up.au3"
HKU\S-1-5-21-373619528-1556549716-3743306597-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-07-20] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-373619528-1556549716-3743306597-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer13.msn.com
HKU\S-1-5-21-373619528-1556549716-3743306597-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com
HKU\S-1-5-21-373619528-1556549716-3743306597-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.atlas.cz/?from=icqhp
HKU\S-1-5-21-373619528-1556549716-3743306597-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-373619528-1556549716-3743306597-1002 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-373619528-1556549716-3743306597-1002 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-07-20] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-20] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 77.48.100.254 77.48.254.254
Tcpip\..\Interfaces\{88BF4C37-59E9-48F0-8FAF-06531C8FE7AC}: [DhcpNameServer] 10.61.56.1
Tcpip\..\Interfaces\{ECC3768C-06C8-423A-A81C-46FE53586AAA}: [DhcpNameServer] 77.48.100.254 77.48.254.254

FireFox:
========
FF ProfilePath: C:\Users\euronics\AppData\Roaming\Mozilla\Firefox\Profiles\ahl9f86w.default
FF Homepage: about:home
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @alawar.com/npapi -> C:\WINDOWS\npapi.dll No File
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-02-05] (CANON INC.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-08-13] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)
FF Plugin HKU\S-1-5-21-373619528-1556549716-3743306597-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\euronics\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-05-07] (Unity Technologies ApS)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-07-20]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-07-20]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-25] (Qualcomm Atheros Commnucations) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-07-20] (AVAST Software)
R2 BrcmCardReader; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [176640 2012-08-21] (Broadcom Corp.) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-20] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [662088 2013-03-16] (Acer Incorporated)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
U2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation)
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [96880 2013-04-26] (Dritek System INC.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-07-20] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-07-20] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-07-20] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-07-20] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1048856 2015-07-20] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447944 2015-07-20] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150160 2015-07-20] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-07-20] (AVAST Software)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-25] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-04-26] (Dritek System Inc.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31032 2012-11-29] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S1 MpKsl82ebaedc; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{DDA79002-8F2D-4D93-B7E1-C3222F523575}\MpKsl82ebaedc.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-21 12:59 - 2015-07-21 13:00 - 00014824 _____ C:\Users\euronics\Desktop\FRST.txt
2015-07-21 12:59 - 2015-07-21 12:59 - 00000000 ____D C:\FRST
2015-07-21 12:51 - 2015-07-21 12:51 - 00112640 _____ (forum.viry.cz) C:\Users\euronics\Desktop\FRSTLauncher.exe
2015-07-21 12:40 - 2015-07-21 12:40 - 02135552 _____ (Farbar) C:\Users\euronics\Desktop\FRST64.exe
2015-07-20 21:08 - 2015-07-20 20:28 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-07-20 20:29 - 2015-07-21 06:36 - 00011659 _____ C:\zoek-results.log
2015-07-20 20:28 - 2015-07-20 21:05 - 00000000 ____D C:\zoek_backup
2015-07-20 20:27 - 2015-07-20 20:27 - 01308672 _____ C:\Users\euronics\Desktop\zoek.exe
2015-07-20 17:35 - 2015-07-20 23:08 - 00000154 _____ C:\WINDOWS\setupact.log
2015-07-20 17:35 - 2015-07-20 17:35 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-07-20 17:34 - 2015-07-20 23:08 - 00001052 _____ C:\WINDOWS\PFRO.log
2015-07-20 17:18 - 2015-07-20 17:22 - 00000000 ____D C:\AdwCleaner
2015-07-20 17:17 - 2015-07-20 17:18 - 02248704 _____ C:\Users\euronics\Desktop\adwcleaner_4.208.exe
2015-07-20 17:00 - 2015-07-21 12:07 - 00208742 _____ C:\WINDOWS\WindowsUpdate.log
2015-07-20 16:47 - 2015-07-20 16:48 - 00000000 ____D C:\rsit
2015-07-20 16:47 - 2015-07-20 16:47 - 00000000 ____D C:\Program Files\trend micro
2015-07-20 16:45 - 2015-07-20 16:46 - 01222144 _____ C:\Users\euronics\Desktop\RSITx64.exe
2015-07-20 16:38 - 2015-07-20 21:01 - 00001198 _____ C:\Users\euronics\Desktop\Internet Explorer.lnk
2015-07-20 16:38 - 2015-07-20 21:01 - 00001198 _____ C:\Users\euronics\Desktop\Google Chrome.lnk
2015-07-20 16:32 - 2015-07-20 16:32 - 00001135 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-07-20 16:32 - 2015-07-20 16:32 - 00001123 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-07-20 16:32 - 2015-07-20 16:32 - 00000000 ____D C:\ProgramData\Mozilla
2015-07-20 16:32 - 2015-07-20 16:32 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-20 16:30 - 2015-07-20 16:30 - 00242712 _____ C:\Users\euronics\Downloads\Firefox Setup Stub 39.0.exe
2015-07-20 16:28 - 2015-07-20 16:42 - 00000000 ____D C:\Users\euronics\AppData\Local\Mozilla
2015-07-20 13:15 - 2015-07-20 13:15 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-07-20 13:15 - 2015-07-20 13:15 - 00000000 ____D C:\Users\euronics\AppData\Roaming\AVAST Software
2015-07-20 13:15 - 2015-07-20 13:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-07-20 13:14 - 2015-07-20 13:14 - 01048856 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-07-20 13:14 - 2015-07-20 13:14 - 00447944 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-07-20 13:14 - 2015-07-20 13:14 - 00378880 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-07-20 13:14 - 2015-07-20 13:14 - 00274808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-07-20 13:14 - 2015-07-20 13:14 - 00150160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-07-20 13:14 - 2015-07-20 13:14 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-07-20 13:14 - 2015-07-20 13:14 - 00090968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-07-20 13:14 - 2015-07-20 13:14 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-07-20 13:14 - 2015-07-20 13:14 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-07-20 13:14 - 2015-07-20 13:14 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-07-20 13:12 - 2015-07-20 13:12 - 00000000 ____D C:\ProgramData\AVAST Software
2015-07-20 13:12 - 2015-07-20 13:12 - 00000000 ____D C:\Program Files\AVAST Software
2015-07-20 13:11 - 2015-07-20 13:11 - 05685544 _____ (AVAST Software) C:\Users\euronics\Downloads\avast_free_antivirus_setup_online.exe
2015-07-20 12:41 - 2015-07-20 12:41 - 00002788 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-07-20 12:41 - 2015-07-20 12:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-07-20 12:41 - 2015-07-20 12:41 - 00000000 ____D C:\Program Files\CCleaner
2015-07-20 12:39 - 2015-07-20 12:39 - 06565736 _____ (Piriform Ltd) C:\Users\euronics\Downloads\ccsetup507.exe
2015-07-19 12:23 - 2015-07-20 16:32 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-19 09:46 - 2015-07-19 09:46 - 00000000 ____D C:\Users\euronics\AppData\Roaming\TuneUp Software
2015-07-19 09:28 - 2015-07-20 15:03 - 00000000 ____D C:\ProgramData\MFAData
2015-07-19 09:28 - 2015-07-19 09:28 - 00000000 ____D C:\Users\euronics\AppData\Local\MFAData
2015-07-15 08:59 - 2015-06-16 07:36 - 01661576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2015-07-15 08:59 - 2015-06-16 07:36 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2015-07-15 08:59 - 2015-04-23 17:47 - 03084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-07-15 08:59 - 2015-04-23 17:16 - 02471424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-07-15 08:58 - 2015-07-09 21:51 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-07-15 08:58 - 2015-07-09 20:40 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-07-15 08:58 - 2015-07-09 18:03 - 03701760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-07-15 08:58 - 2015-07-09 17:54 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-07-15 08:58 - 2015-07-09 17:53 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-07-15 08:58 - 2015-07-09 17:50 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-07-15 08:58 - 2015-07-09 17:50 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-07-15 08:58 - 2015-07-09 17:48 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-07-15 08:58 - 2015-07-09 17:46 - 02229248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-07-15 08:58 - 2015-07-09 17:38 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-07-15 08:58 - 2015-07-09 17:37 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-07-15 08:58 - 2015-07-09 17:35 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-07-15 08:58 - 2015-07-09 17:34 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-07-15 08:58 - 2015-06-27 05:08 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-07-15 08:58 - 2015-06-27 05:08 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-07-15 08:58 - 2015-06-27 04:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-07-15 08:58 - 2015-04-30 01:22 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2015-07-15 08:57 - 2015-06-28 07:07 - 00442712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2015-07-15 08:57 - 2015-06-28 07:07 - 00178008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-07-15 08:57 - 2015-06-28 07:06 - 01311960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2015-07-15 08:57 - 2015-06-28 07:06 - 00332120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2015-07-15 08:57 - 2015-06-27 18:42 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2015-07-15 08:57 - 2015-06-27 05:13 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2015-07-15 08:57 - 2015-06-27 05:12 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2015-07-15 08:57 - 2015-06-27 05:12 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2015-07-15 08:57 - 2015-06-27 04:40 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-07-15 08:57 - 2015-06-27 04:05 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-07-15 08:57 - 2015-06-27 04:00 - 00989184 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-07-15 08:57 - 2015-06-27 03:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-07-15 08:57 - 2015-06-27 03:26 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-07-15 08:57 - 2015-06-25 04:31 - 04177920 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-07-15 08:56 - 2015-05-30 23:18 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-07-15 08:56 - 2015-05-30 21:36 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-07-15 08:56 - 2015-05-30 21:35 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-07-15 08:56 - 2015-05-03 02:39 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-07-15 08:55 - 2015-06-16 00:41 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2015-07-15 08:55 - 2015-06-16 00:24 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-07-15 08:55 - 2015-06-15 23:16 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2015-07-15 08:55 - 2015-06-15 23:09 - 03607552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2015-07-15 08:55 - 2015-06-15 22:50 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-07-15 08:55 - 2015-06-15 21:57 - 02460160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-07-15 08:55 - 2015-05-07 17:21 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2015-07-15 08:55 - 2015-05-07 17:05 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2015-07-15 08:54 - 2015-05-07 19:50 - 22292672 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-07-15 08:54 - 2015-05-07 19:00 - 03109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2015-07-15 08:54 - 2015-05-07 18:53 - 19734960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-07-15 08:54 - 2015-05-07 18:12 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2015-07-15 08:52 - 2015-05-11 20:17 - 01201664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2015-07-15 08:52 - 2014-11-04 21:25 - 00059712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys
2015-07-15 08:52 - 2014-11-04 21:25 - 00051008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys
2015-07-15 08:52 - 2014-11-04 08:55 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys
2015-07-15 08:52 - 2014-11-04 08:54 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys
2015-07-15 08:52 - 2014-11-04 08:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2015-07-15 08:52 - 2014-11-04 08:54 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys
2015-07-15 08:51 - 2015-07-03 15:52 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-07-15 08:51 - 2015-07-03 15:52 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-07-15 08:51 - 2015-07-03 15:50 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-07-15 08:51 - 2015-07-03 15:50 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-07-15 08:51 - 2015-04-25 04:25 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
2015-07-15 08:45 - 2015-06-30 00:43 - 00026288 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-07-15 08:45 - 2015-06-29 17:07 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-07-15 08:45 - 2015-06-29 17:07 - 01084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-07-15 08:45 - 2015-06-29 17:07 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-07-15 08:45 - 2015-06-29 17:07 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-07-15 08:45 - 2015-06-29 17:07 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-07-15 08:45 - 2015-06-27 01:21 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-07-15 08:45 - 2015-06-27 01:21 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-07-15 08:44 - 2015-05-03 17:09 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-15 08:44 - 2015-05-03 16:58 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-15 08:44 - 2015-05-03 16:55 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-07-15 08:44 - 2015-05-03 16:49 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-07-15 08:43 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-07-15 08:43 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-07-15 08:43 - 2015-07-02 00:08 - 05923840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-07-15 08:43 - 2015-07-01 23:14 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-07-15 08:42 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-07-15 08:41 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-07-15 08:41 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-07-15 08:41 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-07-15 08:41 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-07-15 08:41 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-07-15 08:41 - 2015-06-16 00:39 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-07-15 08:41 - 2015-06-16 00:38 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-07-15 08:41 - 2015-06-16 00:26 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-07-15 08:41 - 2015-06-16 00:24 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-07-15 08:41 - 2015-06-16 00:02 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2015-07-15 08:41 - 2015-06-15 23:58 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2015-07-15 08:41 - 2015-06-15 23:57 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-07-15 08:41 - 2015-06-15 23:56 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-07-15 08:41 - 2015-06-15 23:55 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-07-15 08:41 - 2015-06-15 23:49 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-07-15 08:41 - 2015-06-15 23:41 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-07-15 08:41 - 2015-06-15 23:38 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-07-15 08:41 - 2015-06-15 23:36 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-07-15 08:41 - 2015-06-15 23:17 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-07-15 08:41 - 2015-06-15 23:16 - 02427392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-07-15 08:41 - 2015-06-15 23:15 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-07-15 08:41 - 2015-06-15 23:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-07-15 08:41 - 2015-06-15 23:04 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-07-15 08:41 - 2015-06-15 23:03 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-07-15 08:41 - 2015-06-15 22:52 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-07-15 08:41 - 2015-06-15 22:47 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2015-07-15 08:41 - 2015-06-15 22:44 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2015-07-15 08:41 - 2015-06-15 22:43 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-07-15 08:41 - 2015-06-15 22:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-07-15 08:41 - 2015-06-15 22:41 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-07-15 08:41 - 2015-06-15 22:37 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-07-15 08:41 - 2015-06-15 22:32 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-07-15 08:41 - 2015-06-15 22:31 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-07-15 08:41 - 2015-06-15 22:30 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-07-15 08:41 - 2015-06-15 22:30 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-07-15 08:41 - 2015-06-15 22:17 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-07-15 08:41 - 2015-06-15 22:07 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-07-15 08:41 - 2015-06-15 22:02 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-07-15 08:40 - 2015-05-11 18:34 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
2015-07-15 08:39 - 2015-06-11 05:49 - 01380600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-07-15 08:39 - 2015-06-10 18:13 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-07-15 08:39 - 2015-04-28 15:13 - 00513480 _____ C:\WINDOWS\SysWOW64\locale.nls
2015-07-15 08:39 - 2015-04-28 15:13 - 00513480 _____ C:\WINDOWS\system32\locale.nls
2015-07-15 08:25 - 2015-05-07 18:47 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2015-07-15 08:25 - 2015-05-02 01:33 - 00410739 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-07-15 08:24 - 2015-05-12 15:19 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-07-15 08:24 - 2015-05-03 17:07 - 07784448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2015-07-15 08:24 - 2015-05-03 16:57 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2015-07-13 17:18 - 2015-07-13 17:18 - 00000305 _____ C:\Users\euronics\Downloads\CSOB_1446543232_13.07.2015.txt
2015-07-09 19:48 - 2015-07-09 19:48 - 00295896 _____ C:\Users\euronics\Downloads\prilohy_26062.zip
2015-07-09 19:48 - 2015-07-09 19:48 - 00003802 _____ C:\Users\euronics\Downloads\smime (1).p7s
2015-06-29 19:43 - 2015-06-29 19:43 - 00003802 _____ C:\Users\euronics\Downloads\smime.p7s
2015-06-27 20:31 - 2015-06-27 20:31 - 00405379 _____ C:\Users\euronics\Desktop\profile.htm
2015-06-25 12:09 - 2015-06-25 12:09 - 09739819 _____ C:\Users\euronics\Downloads\prilohy_25718.zip
2015-06-25 12:08 - 2015-06-25 12:09 - 15418154 _____ C:\Users\euronics\Downloads\prilohy_25720.zip
2015-06-25 12:08 - 2015-06-25 12:08 - 18536774 _____ C:\Users\euronics\Downloads\prilohy_25724.zip
2015-06-25 12:08 - 2015-06-25 12:08 - 13030455 _____ C:\Users\euronics\Downloads\prilohy_25722.zip
2015-06-25 12:08 - 2015-06-25 12:08 - 03762824 _____ C:\Users\euronics\Downloads\prilohy_25726.zip
2015-06-25 12:08 - 2015-06-25 12:08 - 03034115 _____ C:\Users\euronics\Downloads\prilohy_25732.zip
2015-06-25 12:08 - 2015-06-25 12:08 - 02712402 _____ C:\Users\euronics\Downloads\prilohy_25728.zip
2015-06-25 12:08 - 2015-06-25 12:08 - 01026615 _____ C:\Users\euronics\Downloads\prilohy_25730.zip
2015-06-25 12:07 - 2015-06-25 12:07 - 04210363 _____ C:\Users\euronics\Downloads\prilohy_25738.zip
2015-06-25 12:07 - 2015-06-25 12:07 - 03726925 _____ C:\Users\euronics\Downloads\prilohy_25736.zip
2015-06-25 12:07 - 2015-06-25 12:07 - 02460967 _____ C:\Users\euronics\Downloads\prilohy_25734.zip
2015-06-25 12:07 - 2015-06-25 12:07 - 02460967 _____ C:\Users\euronics\Downloads\prilohy_25734 (1).zip
2015-06-25 12:06 - 2015-06-25 12:06 - 01338792 _____ C:\Users\euronics\Downloads\prilohy_25740.zip
2015-06-25 11:21 - 2015-06-25 11:21 - 00000311 _____ C:\Users\euronics\Downloads\CSOB_1434754134_25.06.2015.txt
2015-06-25 11:16 - 2015-06-25 11:16 - 00000301 _____ C:\Users\euronics\Downloads\CSOB_1434748904_25.06.2015.txt
2015-06-25 11:13 - 2015-06-25 11:13 - 00000301 _____ C:\Users\euronics\Downloads\CSOB_1434747063_25.06.2015.txt
2015-06-25 11:10 - 2015-06-25 11:10 - 00000298 _____ C:\Users\euronics\Downloads\CSOB_1434743947_25.06.2015.txt
2015-06-25 11:07 - 2015-06-25 11:07 - 00000304 _____ C:\Users\euronics\Downloads\CSOB_1434740797_25.06.2015.txt
2015-06-25 11:05 - 2015-06-25 11:05 - 00000305 _____ C:\Users\euronics\Downloads\CSOB_1434739033_25.06.2015.txt
2015-06-25 11:03 - 2015-06-25 11:03 - 00000300 _____ C:\Users\euronics\Downloads\CSOB_1434737383_25.06.2015.txt
2015-06-25 11:02 - 2015-06-25 11:02 - 00000304 _____ C:\Users\euronics\Downloads\CSOB_1434735454_25.06.2015.txt
2015-06-25 11:00 - 2015-06-25 11:00 - 00000313 _____ C:\Users\euronics\Downloads\CSOB_1434734056_25.06.2015.txt
2015-06-24 01:31 - 2015-06-24 01:31 - 01615016 _____ (Microsoft Corporation) C:\WINDOWS\system32\FM20.DLL

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-21 12:42 - 2014-04-01 19:37 - 01745984 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-07-21 12:42 - 2013-11-14 14:24 - 00739924 _____ C:\WINDOWS\system32\perfh005.dat
2015-07-21 12:42 - 2013-11-14 14:24 - 00151610 _____ C:\WINDOWS\system32\perfc005.dat
2015-07-21 12:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-07-21 06:36 - 2014-04-20 17:45 - 00000000 ___DO C:\Users\euronics\SkyDrive
2015-07-20 23:08 - 2014-01-05 19:28 - 00000216 _____ C:\WINDOWS\Tasks\AutoKMS.job
2015-07-20 23:08 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-07-20 23:07 - 2013-08-22 15:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2015-07-20 21:03 - 2014-02-01 19:09 - 00000000 ____D C:\Users\euronics
2015-07-20 19:41 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-07-20 19:15 - 2014-02-06 07:56 - 00003966 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5B3CA571-6AFB-4C28-A93E-05FFE6A148CC}
2015-07-20 17:51 - 2013-12-20 16:02 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-373619528-1556549716-3743306597-1002
2015-07-20 16:32 - 2014-09-24 17:35 - 00000000 ____D C:\Users\euronics\AppData\Roaming\Mozilla
2015-07-20 16:02 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache
2015-07-20 15:41 - 2014-02-01 18:59 - 00000000 ___DC C:\WINDOWS\Panther
2015-07-20 13:05 - 2014-01-05 17:28 - 00000000 ____D C:\Program Files (x86)\Google
2015-07-20 13:04 - 2014-01-05 17:28 - 00000000 ____D C:\Users\euronics\AppData\Local\Google
2015-07-20 13:02 - 2014-09-05 08:33 - 00000000 ____D C:\Program Files (x86)\Ze zivota hmyzu
2015-07-20 13:02 - 2014-03-30 09:47 - 00000000 ____D C:\Program Files (x86)\Zachvev - Pod vlivem mesice
2015-07-20 13:02 - 2014-01-07 13:55 - 00000000 ____D C:\Program Files (x86)\Zelene mesto
2015-07-20 13:01 - 2014-11-29 18:59 - 00000000 ____D C:\Program Files (x86)\Zachran syna
2015-07-20 12:59 - 2013-03-27 11:12 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-07-20 12:58 - 2014-01-07 16:49 - 00000000 ____D C:\Users\euronics\AppData\Roaming\WildTangent
2015-07-20 12:58 - 2013-03-27 11:12 - 00000000 ____D C:\ProgramData\WildTangent
2015-07-20 12:57 - 2014-09-23 09:42 - 00000000 ____D C:\Program Files (x86)\Smaragdova zeme Solitaire
2015-07-20 12:57 - 2014-08-24 14:40 - 00000000 ____D C:\Program Files (x86)\Tornado
2015-07-20 12:56 - 2014-03-23 17:25 - 00000000 ____D C:\Program Files (x86)\Proklete klenoty
2015-07-20 12:55 - 2014-06-12 13:08 - 00000000 ____D C:\Program Files (x86)\Pikova dama
2015-07-20 12:55 - 2014-04-14 11:52 - 00000000 ____D C:\Program Files (x86)\Pomsta ducha - Soumrak nad Beaconem
2015-07-20 12:53 - 2014-05-12 15:36 - 00000000 ____D C:\Program Files (x86)\Morova rana
2015-07-20 12:52 - 2014-09-18 18:16 - 00000000 ____D C:\Program Files (x86)\Loutkove divadlo - Ztracene mesto
2015-07-20 12:52 - 2014-03-14 11:22 - 00000000 ____D C:\Program Files (x86)\Loď nářků
2015-07-20 12:51 - 2014-08-01 19:21 - 00000000 ____D C:\Program Files (x86)\Libanky v pekle
2015-07-20 12:49 - 2014-07-05 16:39 - 00000000 ____D C:\Program Files (x86)\Kralovsky expres
2015-07-20 12:49 - 2014-01-18 12:29 - 00000000 ____D C:\Program Files (x86)\Kostej Nesmrtelny
2015-07-20 12:48 - 2015-01-25 13:27 - 00000000 ____D C:\Program Files (x86)\Jantarova kletba
2015-07-20 12:48 - 2014-12-27 18:13 - 00000000 ____D C:\Program Files (x86)\Kouzelne darky
2015-07-20 12:48 - 2014-07-17 14:33 - 00000000 ____D C:\Program Files (x86)\Jane Angel 2 - Deti temnoty
2015-07-20 12:48 - 2014-06-22 07:53 - 00000000 ____D C:\Program Files (x86)\Kdo jsem
2015-07-20 12:48 - 2014-01-07 18:44 - 00000000 ____D C:\Program Files (x86)\Jardinains 2!
2015-07-20 12:46 - 2014-05-30 13:46 - 00000000 ____D C:\Program Files (x86)\Hledani gralu
2015-07-20 12:46 - 2014-05-24 07:12 - 00000000 ____D C:\Program Files (x86)\Hledani gralu - Jane Angel
2015-07-20 12:45 - 2014-09-18 18:18 - 00000000 ____D C:\Program Files (x86)\Cerny kocour - Sberatelska edice
2015-07-20 12:45 - 2014-05-05 11:21 - 00000000 ____D C:\Program Files (x86)\Fantom - Zlocin v Benatkach
2015-07-20 12:44 - 2014-10-27 13:36 - 00000000 ____D C:\Program Files (x86)\Carodejka
2015-07-20 12:44 - 2014-09-05 09:02 - 00000000 ____D C:\Program Files (x86)\Carodejny zertik - zabi stesti
2015-07-20 12:42 - 2014-08-08 07:50 - 00000000 ____D C:\Program Files (x86)\Byl jednou jeden mikrob
2015-07-20 12:41 - 2014-11-30 11:29 - 00000000 ____D C:\Program Files (x86)\Bratr a sestra - smrti navzdory
2015-07-20 12:41 - 2014-02-28 19:47 - 00000000 ____D C:\Program Files (x86)\Anticky Rim 2
2015-07-20 12:40 - 2014-09-23 09:45 - 00000000 ____D C:\Program Files (x86)\Anticky Rim
2015-07-20 12:40 - 2014-09-11 12:33 - 00000000 ____D C:\Program Files (x86)\Ahoj Ameriko - Za rozkvetly New York
2015-07-20 12:36 - 2012-07-26 10:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-07-20 12:33 - 2014-11-13 11:33 - 00000000 ____D C:\Program Files (x86)\Zlodeji dusi
2015-07-19 17:25 - 2014-03-01 18:31 - 00000000 ____D C:\Users\euronics\AppData\Local\Deployment
2015-07-19 09:55 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2015-07-18 12:16 - 2013-08-22 16:44 - 00481536 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-07-17 16:51 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-07-17 16:50 - 2015-04-15 19:55 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-07-17 16:50 - 2015-03-11 14:11 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-07-17 16:50 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\WinStore
2015-07-17 16:44 - 2014-01-05 19:20 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-17 16:37 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-07-17 16:34 - 2014-01-03 18:13 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-07-17 16:15 - 2015-04-05 08:20 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-07-17 16:15 - 2015-04-05 08:20 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-07-15 10:22 - 2015-01-24 19:29 - 00000000 ____D C:\WINDOWS\SysWOW64\NV
2015-07-15 10:22 - 2015-01-24 19:29 - 00000000 ____D C:\WINDOWS\system32\NV
2015-07-13 23:10 - 2014-09-15 06:19 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-07-13 23:10 - 2014-09-15 06:19 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-05 12:08 - 2014-02-03 19:38 - 00300704 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-07-03 08:43 - 2014-01-03 18:13 - 130333168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-07-01 12:25 - 2015-06-15 18:59 - 00000000 ____D C:\ProgramData\CanonIJPLM

==================== Files in the root of some directories =======

2015-03-19 20:10 - 2015-03-19 20:10 - 0003072 _____ () C:\Users\euronics\AppData\Local\file__0.localstorage

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-07-20 23:19

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (Acer) (Fixed) (Total:681.85 GB) (Free:640.9 GB) NTFS

Available physical RAM: 4568.73 MB
Total physical RAM: 5957.28 MB
Percentage of memory in use: 23%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 698.6 GB) (Disk ID: 89DAE3FC)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData:gs5sys
AlternateDataStreams: C:\Users\All Users:gs5sys
AlternateDataStreams: C:\Users\euronics:gs5sys
AlternateDataStreams: C:\ProgramData\Application Data:gs5sys
AlternateDataStreams: C:\ProgramData\Data aplikací:gs5sys
AlternateDataStreams: C:\Users\euronics\Data aplikací:gs5sys
AlternateDataStreams: C:\Users\euronics\Local Settings:gs5sys
AlternateDataStreams: C:\Users\euronics\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\euronics\Soubory cookie:gs5sys
AlternateDataStreams: C:\Users\euronics\Šablony:gs5sys
AlternateDataStreams: C:\Users\euronics\Desktop\desktop.ini:gs5sys
AlternateDataStreams: C:\Users\euronics\AppData\Local:gs5sys
AlternateDataStreams: C:\Users\euronics\AppData\Roaming:gs5sys
AlternateDataStreams: C:\Users\euronics\AppData\Local\Data aplikací:gs5sys
AlternateDataStreams: C:\Users\euronics\AppData\Local\History:gs5sys
AlternateDataStreams: C:\Users\euronics\Documents\desktop.ini:gs5sys
AlternateDataStreams: C:\Users\Public\Documents\desktop.ini:gs5sys

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\euronics\Desktop" je 7 MB.

***** Startup Programs *****

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000

==================== End Of Log ==============================

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKU\S-1-5-21-373619528-1556549716-3743306597-1002\...\Run: [Samsung Appstore] => "C:\Users\euronics\AppData\Roaming\Mozila\autoit.exe" "C:\Users\euronics\AppData\Roaming\Mozila\up.au3"
HKU\S-1-5-21-373619528-1556549716-3743306597-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)

HKU\S-1-5-21-373619528-1556549716-3743306597-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer13.msn.com
HKU\S-1-5-21-373619528-1556549716-3743306597-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com
HKU\S-1-5-21-373619528-1556549716-3743306597-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.atlas.cz/?from=icqhp
HKU\S-1-5-21-373619528-1556549716-3743306597-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

FF Plugin-x32: @alawar.com/npapi -> C:\WINDOWS\npapi.dll No File

S1 MpKsl82ebaedc; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{DDA79002-8F2D-4D93-B7E1-C3222F523575}\MpKsl82ebaedc.sys [X]

2015-07-21 12:59 - 2015-07-21 13:00 - 00014824 _____ C:\Users\euronics\Desktop\FRST.txt
2015-07-21 12:51 - 2015-07-21 12:51 - 00112640 _____ (forum.viry.cz) C:\Users\euronics\Desktop\FRSTLauncher.exe
2015-07-20 21:08 - 2015-07-20 20:28 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-07-20 20:29 - 2015-07-21 06:36 - 00011659 _____ C:\zoek-results.log
2015-07-20 20:28 - 2015-07-20 21:05 - 00000000 ____D C:\zoek_backup
2015-07-20 20:27 - 2015-07-20 20:27 - 01308672 _____ C:\Users\euronics\Desktop\zoek.exe
2015-07-20 17:35 - 2015-07-20 23:08 - 00000154 _____ C:\WINDOWS\setupact.log
2015-07-20 17:35 - 2015-07-20 17:35 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-07-20 17:34 - 2015-07-20 23:08 - 00001052 _____ C:\WINDOWS\PFRO.log
2015-07-20 17:18 - 2015-07-20 17:22 - 00000000 ____D C:\AdwCleaner
2015-07-20 17:17 - 2015-07-20 17:18 - 02248704 _____ C:\Users\euronics\Desktop\adwcleaner_4.208.exe
2015-07-20 16:47 - 2015-07-20 16:48 - 00000000 ____D C:\rsit
2015-07-20 16:47 - 2015-07-20 16:47 - 00000000 ____D C:\Program Files\trend micro
2015-07-20 16:45 - 2015-07-20 16:46 - 01222144 _____ C:\Users\euronics\Desktop\RSITx64.exe
2015-07-20 12:39 - 2015-07-20 12:39 - 06565736 _____ (Piriform Ltd) C:\Users\euronics\Downloads\ccsetup507.exe
2015-07-20 13:11 - 2015-07-20 13:11 - 05685544 _____ (AVAST Software) C:\Users\euronics\Downloads\avast_free_antivirus_setup_online.exe

Task: C:\WINDOWS\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
C:\Windows\AutoKMS.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

AlternateDataStreams: C:\ProgramData:gs5sys
AlternateDataStreams: C:\Users\All Users:gs5sys
AlternateDataStreams: C:\Users\euronics:gs5sys
AlternateDataStreams: C:\ProgramData\Application Data:gs5sys
AlternateDataStreams: C:\ProgramData\Data aplikací:gs5sys
AlternateDataStreams: C:\Users\euronics\Data aplikací:gs5sys
AlternateDataStreams: C:\Users\euronics\Local Settings:gs5sys
AlternateDataStreams: C:\Users\euronics\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\euronics\Soubory cookie:gs5sys
AlternateDataStreams: C:\Users\euronics\Šablony:gs5sys
AlternateDataStreams: C:\Users\euronics\Desktop\desktop.ini:gs5sys
AlternateDataStreams: C:\Users\euronics\AppData\Local:gs5sys
AlternateDataStreams: C:\Users\euronics\AppData\Roaming:gs5sys
AlternateDataStreams: C:\Users\euronics\AppData\Local\Data aplikací:gs5sys
AlternateDataStreams: C:\Users\euronics\AppData\Local\History:gs5sys
AlternateDataStreams: C:\Users\euronics\Documents\desktop.ini:gs5sys
AlternateDataStreams: C:\Users\Public\Documents\desktop.ini:gs5sys

Hosts:
EmptyTemp:
Reboot:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Scan Tool (x64) Version:20-07-2015
Ran by euronics at 2015-07-21 16:48:26 Run:1
Running from C:\Users\euronics\Desktop
Loaded Profiles: UpdatusUser & euronics (Available Profiles: UpdatusUser & euronics)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKU\S-1-5-21-373619528-1556549716-3743306597-1002\...\Run: [Samsung Appstore] => "C:\Users\euronics\AppData\Roaming\Mozila\autoit.exe" "C:\Users\euronics\AppData\Roaming\Mozila\up.au3"
HKU\S-1-5-21-373619528-1556549716-3743306597-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)

HKU\S-1-5-21-373619528-1556549716-3743306597-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer13.msn.com
HKU\S-1-5-21-373619528-1556549716-3743306597-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com
HKU\S-1-5-21-373619528-1556549716-3743306597-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.atlas.cz/?from=icqhp
HKU\S-1-5-21-373619528-1556549716-3743306597-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

FF Plugin-x32: @alawar.com/npapi -> C:\WINDOWS\npapi.dll No File

S1 MpKsl82ebaedc; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{DDA79002-8F2D-4D93-B7E1-C3222F523575}\MpKsl82ebaedc.sys [X]

2015-07-21 12:59 - 2015-07-21 13:00 - 00014824 _____ C:\Users\euronics\Desktop\FRST.txt
2015-07-21 12:51 - 2015-07-21 12:51 - 00112640 _____ (forum.viry.cz) C:\Users\euronics\Desktop\FRSTLauncher.exe
2015-07-20 21:08 - 2015-07-20 20:28 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-07-20 20:29 - 2015-07-21 06:36 - 00011659 _____ C:\zoek-results.log
2015-07-20 20:28 - 2015-07-20 21:05 - 00000000 ____D C:\zoek_backup
2015-07-20 20:27 - 2015-07-20 20:27 - 01308672 _____ C:\Users\euronics\Desktop\zoek.exe
2015-07-20 17:35 - 2015-07-20 23:08 - 00000154 _____ C:\WINDOWS\setupact.log
2015-07-20 17:35 - 2015-07-20 17:35 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-07-20 17:34 - 2015-07-20 23:08 - 00001052 _____ C:\WINDOWS\PFRO.log
2015-07-20 17:18 - 2015-07-20 17:22 - 00000000 ____D C:\AdwCleaner
2015-07-20 17:17 - 2015-07-20 17:18 - 02248704 _____ C:\Users\euronics\Desktop\adwcleaner_4.208.exe
2015-07-20 16:47 - 2015-07-20 16:48 - 00000000 ____D C:\rsit
2015-07-20 16:47 - 2015-07-20 16:47 - 00000000 ____D C:\Program Files\trend micro
2015-07-20 16:45 - 2015-07-20 16:46 - 01222144 _____ C:\Users\euronics\Desktop\RSITx64.exe
2015-07-20 12:39 - 2015-07-20 12:39 - 06565736 _____ (Piriform Ltd) C:\Users\euronics\Downloads\ccsetup507.exe
2015-07-20 13:11 - 2015-07-20 13:11 - 05685544 _____ (AVAST Software) C:\Users\euronics\Downloads\avast_free_antivirus_setup_online.exe

Task: C:\WINDOWS\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
C:\Windows\AutoKMS.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

AlternateDataStreams: C:\ProgramData:gs5sys
AlternateDataStreams: C:\Users\All Users:gs5sys
AlternateDataStreams: C:\Users\euronics:gs5sys
AlternateDataStreams: C:\ProgramData\Application Data:gs5sys
AlternateDataStreams: C:\ProgramData\Data aplikací:gs5sys
AlternateDataStreams: C:\Users\euronics\Data aplikací:gs5sys
AlternateDataStreams: C:\Users\euronics\Local Settings:gs5sys
AlternateDataStreams: C:\Users\euronics\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\euronics\Soubory cookie:gs5sys
AlternateDataStreams: C:\Users\euronics\Šablony:gs5sys
AlternateDataStreams: C:\Users\euronics\Desktop\desktop.ini:gs5sys
AlternateDataStreams: C:\Users\euronics\AppData\Local:gs5sys
AlternateDataStreams: C:\Users\euronics\AppData\Roaming:gs5sys
AlternateDataStreams: C:\Users\euronics\AppData\Local\Data aplikací:gs5sys
AlternateDataStreams: C:\Users\euronics\AppData\Local\History:gs5sys
AlternateDataStreams: C:\Users\euronics\Documents\desktop.ini:gs5sys
AlternateDataStreams: C:\Users\Public\Documents\desktop.ini:gs5sys

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKU\S-1-5-21-373619528-1556549716-3743306597-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Samsung Appstore => value removed successfully
HKU\S-1-5-21-373619528-1556549716-3743306597-1002\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value removed successfully
HKU\S-1-5-21-373619528-1556549716-3743306597-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => Error setting value.
HKU\S-1-5-21-373619528-1556549716-3743306597-1001\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Error setting value.
HKU\S-1-5-21-373619528-1556549716-3743306597-1002\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKU\S-1-5-21-373619528-1556549716-3743306597-1002\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@alawar.com/npapi" => key removed successfully
MpKsl82ebaedc => Service removed successfully
C:\Users\euronics\Desktop\FRST.txt => moved successfully.
C:\Users\euronics\Desktop\FRSTLauncher.exe => moved successfully.
C:\WINDOWS\zoek-delete.exe => moved successfully.
C:\zoek-results.log => moved successfully.
C:\zoek_backup => moved successfully.
C:\Users\euronics\Desktop\zoek.exe => moved successfully.
C:\WINDOWS\setupact.log => moved successfully.
C:\WINDOWS\setuperr.log => moved successfully.
C:\WINDOWS\PFRO.log => moved successfully.
C:\AdwCleaner => moved successfully.
C:\Users\euronics\Desktop\adwcleaner_4.208.exe => moved successfully.
C:\rsit => moved successfully.
C:\Program Files\trend micro => moved successfully.
C:\Users\euronics\Desktop\RSITx64.exe => moved successfully.
C:\Users\euronics\Downloads\ccsetup507.exe => moved successfully.
C:\Users\euronics\Downloads\avast_free_antivirus_setup_online.exe => moved successfully.
C:\WINDOWS\Tasks\AutoKMS.job => moved successfully.
"C:\Windows\AutoKMS.exe" => File/Folder not found.
C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => moved successfully.
C:\ProgramData => ":gs5sys" ADS removed successfully.
"C:\Users\All Users" => ":gs5sys" ADS not found.
C:\Users\euronics => ":gs5sys" ADS removed successfully.
"C:\ProgramData\Application Data" => ":gs5sys" ADS not found.
"C:\ProgramData\Data aplikací" => ":gs5sys" ADS not found.
"C:\Users\euronics\Data aplikací" => ":gs5sys" ADS not found.
"C:\Users\euronics\Local Settings" => ":gs5sys" ADS not found.
C:\Users\euronics\SkyDrive => ":ms-properties" ADS removed successfully.
"C:\Users\euronics\Soubory cookie" => ":gs5sys" ADS not found.
"C:\Users\euronics\Šablony" => ":gs5sys" ADS not found.
C:\Users\euronics\Desktop\desktop.ini => ":gs5sys" ADS removed successfully.
C:\Users\euronics\AppData\Local => ":gs5sys" ADS removed successfully.
C:\Users\euronics\AppData\Roaming => ":gs5sys" ADS removed successfully.
"C:\Users\euronics\AppData\Local\Data aplikací" => ":gs5sys" ADS not found.
"C:\Users\euronics\AppData\Local\History" => ":gs5sys" ADS not found.
C:\Users\euronics\Documents\desktop.ini => ":gs5sys" ADS removed successfully.
C:\Users\Public\Documents\desktop.ini => ":gs5sys" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => moved successfully.
Hosts restored successfully.
EmptyTemp: => 31.1 MB temporary data Removed.

The system needed a reboot..

==== End of Fixlog 16:49:13 ====

Jak se chova PC?

pc se zdá že se chová normálně, nicméně ani před problémem s viry se nechoval nijak nestandartně spíše šlo o to že na facebooku rozesílal nějaké porno odkazy.

Jediné co mi přijde celou dobu divné je to že na ploše jsou zástupci Google chome a internetu explorer a i po smazání ikon se na ploše stále zobrazují. Navíc google chrome je z počítače odinstalován...
v příloze posílám celou odresu cíle která je vidět ve vlastnostech ikony.

Tak jeste uklidime

DelFix https://toolslib.net/downloads/finish/2/

Stahnete a spustte
Ponechte zatrzitkou pouze u volby Remove disinfection tools
Kliknete na Run

Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

Napiste ci zastupci zmizeli, on by je mel CCleaner odstranit

CCleaner jsem použil několikrát ještě před použitím samotného avastu a následného kontaktování vás. Nicméně ani předtím ani teď ikony nezmizely.

Stahnete SytemLook http://images.malwareremoval.com/jpshor ... ok_x64.exe a ulozte jej na plochu

Do okna vlozte skript nize
Kód: Vybrat vše
```
:dir
C:\Users\euronics\Desktop
```
Kliknete na Look
Tlacitko Look se zmeni na Scanning a zsedne
Pockejte pokud se tlacitko Scanning opet nezmeni na Look - tak poznate ze SystemLook dokoncil svou praci
Vyskoci na Vas log s nazvem SystemLook (pripadne bude ulozen na plose), jeho obsah mi sem vlozte

VIRY.CZ

Prosím o kontrolu logu. Děkuji

Prosím o kontrolu logu. Děkuji

Re: Prosím o kontrolu logu. Děkuji

Re: Prosím o kontrolu logu. Děkuji

Re: Prosím o kontrolu logu. Děkuji

Re: Prosím o kontrolu logu. Děkuji

Re: Prosím o kontrolu logu. Děkuji

Re: Prosím o kontrolu logu. Děkuji

Re: Prosím o kontrolu logu. Děkuji

Re: Prosím o kontrolu logu. Děkuji

Re: Prosím o kontrolu logu. Děkuji

Re: Prosím o kontrolu logu. Děkuji

Re: Prosím o kontrolu logu. Děkuji

Re: Prosím o kontrolu logu. Děkuji

Re: Prosím o kontrolu logu. Děkuji