VIRY.CZ

Dobrý večer,
mám takový problém. Týden se PC nepoužíval neb jsme byli mimo. Po prvním spuštění v neděli 24.4.2016 a načtení windows 7 se začaly stahovat aktualizace a bylo také v PC týden staré datum a o dvě hodiny méně. Což je divné. Nastavil jsem to na správné hodnoty. Po prvním spuštění internetu přes Operu, který máme přes kabelovku (modem od UPC) to chtělo přihlašovací údaje, číslo modemu aj.). Předtím to nikdy nechtělo neb je to tam nastaveno. Modem byl týden také vypnutý a máme přes něj také telefon od UPC. Pak se net spustil, ale běhalo to nějak pomalu. Pak Opera přestala reagovat a ve správci úloh byla několikrát a hodně MB. Po odstranění ve správci úloh začala Opera tak nějak pracovat. Přes Google Chrome net pracoval, ale také pomaleji. Najednou se sami od sebe restartovaly Windows 7. Za cca 10 minut po naběhnutí a práci na PC podruhé a objevila se tam tabulka, že je je to z důvodu ochrany. Udělal jsem bod obnovení o týden zpět a PC tak nějak pracoval. Dnes se opět načítaly aktualizace a PC v Opeře byl nějak pomalý a opět došlo 1x k restartu windows. v Google chrome pracuje, ale také se to načítalo pomaleji. A také se mi zdá jakoby se tam něco načítalo. Když jsem vytvářel log z RSIT (vypnul jsem Zone Alarm - firewall) tak to trvalo také nějak déle než to trvá jindy (možná to vytvářelo víc údajů). Prosím o kontrolu jestli tam není nějaká potvora.
Moc děkuji za další rady. Vkládám log z RSIT.

Logfile of random's system information tool 1.10 (written by random/random)
Run by kuku at 2016-04-26 18:44:06
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 318 GB (67%) free of 477 GB
Total RAM: 2558 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:44:24, on 26.4.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18283)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\UVC Video Camera\UVCSti.exe
C:\Program Files\UVC Video Camera\EffectDir\UVCTray.exe
C:\Program Files\EMET\EMET_notifier.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Aviry\Avast\avastui.exe
C:\Prográmky\PDF24\pdf24.exe
C:\Program Files\Real\RealPlayer\Update\realsched.exe
C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
C:\Programy\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
C:\Program Files\Secunia\PSI\psi_tray.exe
C:\Program Files\WinZip\FAHWindow32.exe
C:\Windows\system32\taskeng.exe
C:\Aviry\CCleaner\CCleaner.exe
C:\Program Files\WinZip\WZUpdateNotifier.exe
C:\Program Files\WinZip\WzPreloader.exe
C:\Programy\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Programy\HP\Digital Imaging\bin\hpqbam08.exe
C:\Programy\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Aviry\RSIT\RSIT.exe
C:\Program Files\trend micro\kuku.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Aviry\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [UVCSti] "C:\Program Files\UVC Video Camera\UVCSti.exe"
O4 - HKLM\..\Run: [RunUVC] "C:\Program Files\UVC Video Camera\EffectDir\UVCtray.exe"
O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
O4 - HKLM\..\Run: [EMET Notifier] C:\Program Files\EMET\EMET_notifier.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Programy\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [Logitech Download Assistant] C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Aviry\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [PDFPrint] C:\Prográmky\PDF24\pdf24.exe
O4 - HKLM\..\Run: [TkBellExe] "c:\program files\real\realplayer\Update\realsched.exe" -osboot
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Aviry\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKLM\..\Run: [RealDownloader] C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Aviry\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [ZoneAlarm Windows 10 Upgrader] "C:\ProgramData\CheckPoint\ZoneAlarm\Data\Updates\unpacked==win10=update_win10.zip\upgrade.exe" /delay (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ZoneAlarm Windows 10 Upgrader] "C:\ProgramData\CheckPoint\ZoneAlarm\Data\Updates\unpacked==win10=update_win10.zip\upgrade.exe" /delay (User 'Default user')
O4 - Global Startup: FAH.lnk = C:\Program Files\WinZip\FAHConsole.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programy\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: RealPlayer Cloud Service UI.lnk = C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
O4 - Global Startup: RealTimes.lnk = C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files\Secunia\PSI\psi_tray.exe
O4 - Global Startup: Update Notifier.lnk = C:\Program Files\WinZip\WZUpdateNotifier.exe
O4 - Global Startup: WinZip Preloader.lnk = C:\Program Files\WinZip\WzPreloader.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\Programy\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\kuku\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programy\MICROS~1\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Active File Monitor V10 (AdobeActiveFileMonitor10.0) - Adobe Systems Incorporated - C:\Fotoeditory\Adobe Photoshop Elements 10\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Aviry\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: RealPlayer Cloud Service - RealNetworks, Inc. - c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe
O23 - Service: RealPlayer Update Service (RealPlayerUpdateSvc) - Unknown owner - C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
O23 - Service: RealTimes Desktop Service - RealNetworks, Inc. - c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files\Secunia\PSI\sua.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies Ltd. - C:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: ZoneAlarm Privacy Service (ZAPrivacyService) - Check Point Software Technologies, Ltd. - C:\Aviry\CheckPoint\ZoneAlarm\ZaPrivacyService.exe

--
End of file - 7821 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\kuku\AppData\Roaming\Mozilla\Firefox\Profiles\9x5re7vu.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "keyword.URL" - "https://www.google.com/search"

"wrc@avast.com"=C:\Aviry\Avast\WebRep\FF
"smartwebprinting@hp.com"=C:\Programy\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
"sp@avast.com"=C:\Aviry\Avast\SafePrice\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.213 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_21_0_0_213.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi]
"Description"=ZoneAlarm LTD Toolbar Api
"Path"=C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=18.0.1.9]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=c:\program files\real\realplayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpplugin;version=18.0.1.9]
"Description"=RealTimes Download Plugin
"Path"=c:\program files\real\realplayer\Netscape6\nprpplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


C:\Users\kuku\AppData\Roaming\Mozilla\Firefox\Profiles\9x5re7vu.default\extensions\
donottrack@checkpoint.com
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}

C:\Users\kuku\AppData\Roaming\Mozilla\Firefox\Profiles\9x5re7vu.default\searchplugins\
Google.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Aviry\Avast\aswWebRepIE.dll [2016-02-18 678656]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"UVCSti"=C:\Program Files\UVC Video Camera\UVCSti.exe [2010-08-23 245760]
"RunUVC"=C:\Program Files\UVC Video Camera\EffectDir\UVCtray.exe [2010-08-23 7548928]
"Apoint"=C:\Program Files\DellTPad\Apoint.exe [2011-07-20 505720]
"EMET Notifier"=C:\Program Files\EMET\EMET_notifier.exe [2012-05-09 152152]
"hpqSRMon"=C:\Programy\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]
"LifeCam"=C:\Program Files\Microsoft LifeCam\LifeExp.exe [2010-12-13 135536]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 1425208]
"AvastUI.exe"=C:\Aviry\Avast\AvastUI.exe [2016-03-23 7139256]
"PDFPrint"=C:\Prográmky\PDF24\pdf24.exe [2014-11-28 193568]
"TkBellExe"=c:\program files\real\realplayer\Update\realsched.exe [2015-07-01 286272]
"ZoneAlarm"=C:\Aviry\CheckPoint\ZoneAlarm\zatray.exe [2015-11-07 134792]
"RealDownloader"=C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [2016-02-24 720112]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Aviry\CCleaner\CCleaner.exe [2016-03-11 6667992]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FAH.lnk - C:\Program Files\WinZip\FAHConsole.exe
HP Digital Imaging Monitor.lnk - C:\Programy\HP\Digital Imaging\bin\hpqtra08.exe
RealPlayer Cloud Service UI.lnk - C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
RealTimes.lnk - C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
Secunia PSI Tray.lnk - C:\Program Files\Secunia\PSI\psi_tray.exe
Update Notifier.lnk - C:\Program Files\WinZip\WZUpdateNotifier.exe
WinZip Preloader.lnk - C:\Program Files\WinZip\WzPreloader.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codecp.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"msacm.siren"=sirenacm.dll
"wave3"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-04-26 18:44:06 ----D---- C:\rsit
2016-04-24 19:28:09 ----A---- C:\Windows\system32\rpcss.dll
2016-04-24 19:28:05 ----A---- C:\Windows\system32\mtxoci.dll
2016-04-24 19:28:05 ----A---- C:\Windows\system32\msorcl32.dll
2016-04-24 19:27:42 ----A---- C:\Windows\system32\ole32.dll
2016-04-24 19:27:42 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-04-24 19:27:42 ----A---- C:\Windows\system32\KernelBase.dll
2016-04-24 19:27:41 ----A---- C:\Windows\system32\ntkrnlpa.exe
2016-04-24 19:27:41 ----A---- C:\Windows\system32\ntdll.dll
2016-04-24 19:27:40 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-04-24 19:27:40 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-04-24 19:27:38 ----A---- C:\Windows\system32\winsrv.dll
2016-04-24 19:27:38 ----A---- C:\Windows\system32\lsasrv.dll
2016-04-24 19:27:38 ----A---- C:\Windows\system32\kernel32.dll
2016-04-24 19:27:38 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-04-24 19:27:37 ----A---- C:\Windows\system32\smss.exe
2016-04-24 19:27:37 ----A---- C:\Windows\system32\rpcrt4.dll
2016-04-24 19:27:37 ----A---- C:\Windows\system32\kerberos.dll
2016-04-24 19:27:37 ----A---- C:\Windows\system32\conhost.exe
2016-04-24 19:27:37 ----A---- C:\Windows\system32\advapi32.dll
2016-04-24 19:27:36 ----A---- C:\Windows\system32\srcore.dll
2016-04-24 19:27:36 ----A---- C:\Windows\system32\schannel.dll
2016-04-24 19:27:36 ----A---- C:\Windows\system32\msv1_0.dll
2016-04-24 19:27:36 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-04-24 19:27:34 ----A---- C:\Windows\system32\wdigest.dll
2016-04-24 19:27:34 ----A---- C:\Windows\system32\TSpkg.dll
2016-04-24 19:27:34 ----A---- C:\Windows\system32\sspicli.dll
2016-04-24 19:27:34 ----A---- C:\Windows\system32\rpchttp.dll
2016-04-24 19:27:34 ----A---- C:\Windows\system32\ncrypt.dll
2016-04-24 19:27:34 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-04-24 19:27:34 ----A---- C:\Windows\system32\apisetschema.dll
2016-04-24 19:27:33 ----A---- C:\Windows\system32\srclient.dll
2016-04-24 19:27:33 ----A---- C:\Windows\system32\drivers\appid.sys
2016-04-24 19:27:33 ----A---- C:\Windows\system32\csrsrv.dll
2016-04-24 19:27:33 ----A---- C:\Windows\system32\cryptbase.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-04-24 19:27:32 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-04-24 19:27:32 ----A---- C:\Windows\system32\secur32.dll
2016-04-24 19:27:32 ----A---- C:\Windows\system32\rstrui.exe
2016-04-24 19:27:32 ----A---- C:\Windows\system32\lsass.exe
2016-04-24 19:27:32 ----A---- C:\Windows\system32\appidsvc.dll
2016-04-24 19:27:32 ----A---- C:\Windows\system32\appidapi.dll
2016-04-24 19:27:31 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-04-24 19:27:31 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-24 19:27:31 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-24 19:27:31 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-04-24 19:27:31 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-04-24 19:27:31 ----A---- C:\Windows\system32\sspisrv.dll
2016-04-24 19:27:31 ----A---- C:\Windows\system32\credssp.dll
2016-04-24 19:27:31 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-04-24 19:27:29 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-04-24 19:27:29 ----A---- C:\Windows\system32\msaudite.dll
2016-04-24 19:27:29 ----A---- C:\Windows\system32\auditpol.exe
2016-04-24 19:27:29 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-04-24 19:27:29 ----A---- C:\Windows\system32\adtschema.dll
2016-04-24 19:27:28 ----A---- C:\Windows\system32\msobjs.dll
2016-04-24 19:26:49 ----A---- C:\Windows\system32\vbscript.dll
2016-04-24 19:26:49 ----A---- C:\Windows\system32\jsproxy.dll
2016-04-24 19:26:49 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-04-24 19:26:49 ----A---- C:\Windows\system32\ieUnatt.exe
2016-04-24 19:26:48 ----A---- C:\Windows\system32\wininet.dll
2016-04-24 19:26:48 ----A---- C:\Windows\system32\jscript9diag.dll
2016-04-24 19:26:48 ----A---- C:\Windows\system32\jscript.dll
2016-04-24 19:26:48 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-04-24 19:26:48 ----A---- C:\Windows\system32\dxtmsft.dll
2016-04-24 19:26:47 ----A---- C:\Windows\system32\dxtrans.dll
2016-04-24 19:26:46 ----A---- C:\Windows\system32\ieui.dll
2016-04-24 19:26:45 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-04-24 19:26:45 ----A---- C:\Windows\system32\mshtmled.dll
2016-04-24 19:26:44 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-04-24 19:26:43 ----A---- C:\Windows\system32\iertutil.dll
2016-04-24 19:26:42 ----A---- C:\Windows\system32\mshtml.dll
2016-04-24 19:26:42 ----A---- C:\Windows\system32\jscript9.dll
2016-04-24 19:26:40 ----A---- C:\Windows\system32\urlmon.dll
2016-04-24 19:26:40 ----A---- C:\Windows\system32\msfeeds.dll
2016-04-24 19:26:40 ----A---- C:\Windows\system32\ieapfltr.dll
2016-04-24 19:26:39 ----A---- C:\Windows\system32\webcheck.dll
2016-04-24 19:26:39 ----A---- C:\Windows\system32\msrating.dll
2016-04-24 19:26:39 ----A---- C:\Windows\system32\iesetup.dll
2016-04-24 19:26:39 ----A---- C:\Windows\system32\ieframe.dll
2016-04-24 19:26:37 ----A---- C:\Windows\system32\inseng.dll
2016-04-24 19:26:37 ----A---- C:\Windows\system32\iernonce.dll
2016-04-24 19:26:37 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-04-24 19:26:37 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-04-24 19:26:37 ----A---- C:\Windows\system32\ie4uinit.exe
2016-04-24 19:26:14 ----A---- C:\Windows\system32\samsrv.dll
2016-04-24 19:26:14 ----A---- C:\Windows\system32\samlib.dll
2016-04-24 19:26:06 ----A---- C:\Windows\system32\tzres.dll
2016-04-24 19:26:00 ----A---- C:\Windows\system32\drivers\disk.sys
2016-04-24 19:25:58 ----A---- C:\Windows\system32\win32k.sys
2016-04-24 19:25:56 ----A---- C:\Windows\system32\generaltel.dll
2016-04-24 19:25:56 ----A---- C:\Windows\system32\devinv.dll
2016-04-24 19:25:56 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-04-24 19:25:56 ----A---- C:\Windows\system32\acmigration.dll
2016-04-24 19:25:55 ----A---- C:\Windows\system32\invagent.dll
2016-04-24 19:25:55 ----A---- C:\Windows\system32\appraiser.dll
2016-04-24 19:25:55 ----A---- C:\Windows\system32\aepic.dll
2016-04-24 19:25:55 ----A---- C:\Windows\system32\aeinv.dll
2016-04-24 19:25:53 ----A---- C:\Windows\system32\msxml3.dll
2016-04-24 19:25:52 ----A---- C:\Windows\system32\msxml3r.dll
2016-04-24 16:46:41 ----A---- C:\Windows\system32\aswBoot.exe
2016-04-13 14:34:48 ----A---- C:\Windows\system32\occache.dll
2016-04-13 14:34:48 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-04-13 14:34:48 ----A---- C:\Windows\system32\iedkcs32.dll
2016-04-12 13:09:28 ----D---- C:\Program Files\Mozilla Firefox
2016-04-11 23:10:02 ----D---- C:\Program Files\Common Files\Skype

======List of files/folders modified in the last 1 month======

2016-04-26 18:44:09 ----D---- C:\Program Files\trend micro
2016-04-26 18:40:53 ----D---- C:\Windows\Temp
2016-04-26 18:39:34 ----D---- C:\Windows
2016-04-26 18:29:51 ----D---- C:\Windows\Minidump
2016-04-26 14:25:43 ----D---- C:\Windows\system32\config
2016-04-26 14:23:15 ----D---- C:\Program Files\Opera
2016-04-25 11:44:57 ----D---- C:\Stati 2016
2016-04-25 09:40:58 ----D---- C:\Windows\inf
2016-04-25 09:40:52 ----D---- C:\Windows\debug
2016-04-25 04:35:36 ----D---- C:\Windows\System32
2016-04-25 04:35:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-04-25 04:33:15 ----D---- C:\Windows\Microsoft.NET
2016-04-25 04:33:11 ----RSD---- C:\Windows\assembly
2016-04-25 04:29:26 ----D---- C:\Windows\winsxs
2016-04-25 04:25:29 ----D---- C:\Windows\system32\drivers
2016-04-25 04:25:29 ----D---- C:\Windows\system32\cs-CZ
2016-04-25 04:25:28 ----D---- C:\Windows\system32\en-US
2016-04-25 04:25:23 ----D---- C:\Windows\system32\Boot
2016-04-25 04:25:17 ----D---- C:\Program Files\Internet Explorer
2016-04-25 04:25:03 ----D---- C:\Windows\system32\appraiser
2016-04-25 04:24:59 ----D---- C:\Windows\system32\DriverStore
2016-04-24 22:56:52 ----D---- C:\Windows\system32\catroot
2016-04-24 22:54:57 ----SHD---- C:\Windows\Installer
2016-04-24 22:54:57 ----SHD---- C:\Config.Msi
2016-04-24 22:49:08 ----D---- C:\Windows\system32\MRT
2016-04-24 22:49:04 ----A---- C:\Windows\system32\MRT.exe
2016-04-24 22:45:47 ----SHD---- C:\System Volume Information
2016-04-24 19:12:07 ----HD---- C:\ProgramData
2016-04-24 17:27:08 ----D---- C:\Windows\system32\GWX
2016-04-24 17:07:03 ----D---- C:\Windows\system32\Tasks
2016-04-24 16:56:05 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2016-04-24 16:43:34 ----D---- C:\Windows\Prefetch
2016-04-24 16:17:15 ----D---- C:\Windows\system32\wbem
2016-04-24 16:14:55 ----D---- C:\Windows\Tasks
2016-04-24 16:14:55 ----D---- C:\Windows\system32\wfp
2016-04-24 16:14:55 ----D---- C:\Windows\system32\drivers\cs-CZ
2016-04-24 16:14:55 ----D---- C:\Windows\system32\catroot2
2016-04-24 16:14:49 ----D---- C:\Windows\system32\CodeIntegrity
2016-04-24 16:14:49 ----D---- C:\Windows\servicing
2016-04-24 16:14:38 ----D---- C:\Windows\AppCompat
2016-04-24 16:14:37 ----D---- C:\Program Files\Common Files\microsoft shared
2016-04-24 16:14:06 ----D---- C:\Windows\registration
2016-04-24 16:11:35 ----D---- C:\Users\kuku\AppData\Roaming\Skype
2016-04-24 16:11:33 ----D---- C:\ProgramData\Real
2016-04-21 15:05:04 ----N---- C:\Windows\system32\MpSigStub.exe
2016-04-13 08:57:05 ----D---- C:\Program Files\Mozilla Maintenance Service
2016-04-12 13:28:45 ----RD---- C:\Program Files
2016-04-11 23:10:13 ----D---- C:\ProgramData\Skype
2016-04-11 23:10:02 ----RD---- C:\Program Files\Skype
2016-04-11 23:10:02 ----D---- C:\Program Files\Common Files
2016-04-10 19:03:24 ----D---- C:\Prezentace 2016
2016-04-08 15:54:10 ----D---- C:\Windows\system32\FxsTmp
2016-04-07 08:28:51 ----D---- C:\Windows\system32\NDF
2016-04-06 20:12:01 ----D---- C:\Články 2016
2016-03-28 17:38:34 ----D---- C:\Album fotografií
2016-03-27 21:40:23 ----D---- C:\Program Files\Common Files\Adobe AIR

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-02-18 58776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-02-18 221240]
R0 KL1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2014-03-19 135776]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2010-03-19 45648]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2016-03-22 35096]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-02-18 91232]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-03-09 816304]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-02-23 447848]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2014-03-19 488032]
R1 Vsdatant;Zone Alarm Firewall Driver; C:\Windows\system32\DRIVERS\vsdatant.sys [2015-11-07 367064]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-02-18 32792]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-03-09 91168]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-02-18 127432]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2012-06-19 3240400]
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver; C:\Windows\System32\Drivers\nx6000.sys [2010-12-13 30576]
R3 NVNET;NVIDIA nForce Ethernet Driver; C:\Windows\system32\DRIVERS\nvmf6232.sys [2010-08-12 298216]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2010-03-22 18944]
R3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf.sys [2011-12-16 15544]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 ApfiltrService;Alps Touch Pad Filter Driver for Windows x86; C:\Windows\system32\DRIVERS\Apfiltr.sys [2011-05-25 305488]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 Cam3820;Cam3820 PC Camera Driver; C:\Windows\System32\Drivers\cam3820a.sys [2010-08-25 369024]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-07-28 49088]
S3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-12-09 14848]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\drivers\WinUsb.sys [2010-11-20 35968]
S4 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Aviry\Avast\ng\vbox\VBoxAswDrv.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeActiveFileMonitor10.0;Adobe Active File Monitor V10; C:\Fotoeditory\Adobe Photoshop Elements 10\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [2011-09-14 169624]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-14 82128]
R2 avast! Antivirus;Avast Antivirus; C:\Aviry\Avast\AvastSvc.exe [2016-02-18 237096]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2010-12-13 135536]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-02-10 634144]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 RealPlayerUpdateSvc;RealPlayer Update Service; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [2015-06-17 31856]
R2 Secunia PSI Agent;Secunia PSI Agent; C:\Program Files\Secunia\PSI\PSIA.exe [2012-09-24 1328736]
R2 Secunia Update Agent;Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [2012-09-24 656480]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 1713904]
R2 ZAPrivacyService;ZoneAlarm Privacy Service; C:\Aviry\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [2015-10-19 96272]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-10 1266464]
S2 RealPlayer Cloud Service;RealPlayer Cloud Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [2015-07-01 1115224]
S2 RealTimes Desktop Service;RealTimes Desktop Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [2015-07-01 1115224]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2016-01-29 327296]
S2 vsmon;TrueVector Internet Monitor; C:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe [2015-11-07 3722912]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-24 270016]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2014-03-31 1512640]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-03-31 102912]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-04-12 146888]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-05-04 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2015-11-05 45744]
S4 ATMsrvc;ATM Service; C:\Windows\System32\ATMsrvc.exe [2000-05-24 15360]
S4 AvastVBoxSvc;AvastVBox COM Service; C:\Aviry\Avast\ng\vbox\AvastVBoxSVC.exe []
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Udělal jsem to dle pokynů a vkládám log.

# AdwCleaner v5.113 - Log soubor vytvořen 26/04/2016 o 19:41:00
# Aktualizováno 24/04/2016 by Xplode
# Databáze : 2016-04-24.3 [Server]
# Operační systém : Windows 7 Home Premium Service Pack 1 (X86)
# Jméno uživatele : kuku - KUKU-PC
# Spuštěno z : C:\Aviry\ADWCleaner\adwcleaner_5.113.exe
# Volba : Čištění
# Podpora : http://toolslib.net/forum

***** [ Služby ] *****


***** [ Složky ] *****

[-] Složka smazáno : C:\Users\kuku\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar

***** [ Soubory ] *****


***** [ DLLs ] *****


***** [ Zástupci ] *****


***** [ Naplánované úkoly ] *****


***** [ Registr ] *****

[-] Klávesa smazáno : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\c
[-] Klávesa smazáno : HKCU\Software\madFlac
[-] Klávesa smazáno : HKLM\SOFTWARE\CheckPoint\ISW
[-] Klávesa smazáno : HKLM\SOFTWARE\Mail.Ru
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm LTD Toolbar
[-] Klávesa smazáno : HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2566555506-497672473-4049909881-1001\Software\Check Point Software Technologies LTD

***** [ Webové prohlížeče ] *****


*************************

:: "Tracing" odstraněných kláves
:: Nastavení Winsock odstraněno

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [1416 bytes] - [26/04/2016 19:41:00]
C:\AdwCleaner\AdwCleaner[S1].txt - [1517 bytes] - [26/04/2016 19:38:20]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1562 bytes] ##########
Dík za další rady.

Dejte nový log RSIT.

Vkládám log a dík za další postup.

Logfile of random's system information tool 1.10 (written by random/random)
Run by kuku at 2016-04-26 20:49:17
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 318 GB (67%) free of 477 GB
Total RAM: 2558 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:50:43, on 26.4.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18283)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\UVC Video Camera\UVCSti.exe
C:\Program Files\UVC Video Camera\EffectDir\UVCTray.exe
C:\Program Files\EMET\EMET_notifier.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Aviry\Avast\avastui.exe
C:\Prográmky\PDF24\pdf24.exe
C:\Program Files\Real\RealPlayer\Update\realsched.exe
C:\Programy\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\WinZip\FAHWindow32.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
C:\Program Files\Secunia\PSI\psi_tray.exe
C:\Program Files\WinZip\WZUpdateNotifier.exe
C:\Aviry\CCleaner\CCleaner.exe
C:\Program Files\WinZip\WzPreloader.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Programy\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Programy\HP\Digital Imaging\bin\hpqbam08.exe
C:\Programy\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\RealNetworks\RealDownloader\videodl.exe
C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
C:\Program Files\RealNetworks\RealDownloader\videodl.exe
C:\Windows\system32\taskeng.exe
C:\Aviry\RSIT\RSIT.exe
C:\Program Files\trend micro\kuku.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Aviry\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [UVCSti] "C:\Program Files\UVC Video Camera\UVCSti.exe"
O4 - HKLM\..\Run: [RunUVC] "C:\Program Files\UVC Video Camera\EffectDir\UVCtray.exe"
O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
O4 - HKLM\..\Run: [EMET Notifier] C:\Program Files\EMET\EMET_notifier.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Programy\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [Logitech Download Assistant] C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Aviry\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [PDFPrint] C:\Prográmky\PDF24\pdf24.exe
O4 - HKLM\..\Run: [TkBellExe] "c:\program files\real\realplayer\Update\realsched.exe" -osboot
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Aviry\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKLM\..\Run: [RealDownloader] C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Aviry\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [ZoneAlarm Windows 10 Upgrader] "C:\ProgramData\CheckPoint\ZoneAlarm\Data\Updates\unpacked==win10=update_win10.zip\upgrade.exe" /delay (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ZoneAlarm Windows 10 Upgrader] "C:\ProgramData\CheckPoint\ZoneAlarm\Data\Updates\unpacked==win10=update_win10.zip\upgrade.exe" /delay (User 'Default user')
O4 - Global Startup: FAH.lnk = C:\Program Files\WinZip\FAHConsole.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programy\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: RealPlayer Cloud Service UI.lnk = C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
O4 - Global Startup: RealTimes.lnk = C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files\Secunia\PSI\psi_tray.exe
O4 - Global Startup: Update Notifier.lnk = C:\Program Files\WinZip\WZUpdateNotifier.exe
O4 - Global Startup: WinZip Preloader.lnk = C:\Program Files\WinZip\WzPreloader.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\Programy\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\kuku\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programy\MICROS~1\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Active File Monitor V10 (AdobeActiveFileMonitor10.0) - Adobe Systems Incorporated - C:\Fotoeditory\Adobe Photoshop Elements 10\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Aviry\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: RealPlayer Cloud Service - RealNetworks, Inc. - c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe
O23 - Service: RealPlayer Update Service (RealPlayerUpdateSvc) - Unknown owner - C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
O23 - Service: RealTimes Desktop Service - RealNetworks, Inc. - c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files\Secunia\PSI\sua.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies Ltd. - C:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: ZoneAlarm Privacy Service (ZAPrivacyService) - Check Point Software Technologies, Ltd. - C:\Aviry\CheckPoint\ZoneAlarm\ZaPrivacyService.exe

--
End of file - 7851 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\kuku\AppData\Roaming\Mozilla\Firefox\Profiles\9x5re7vu.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "keyword.URL" - "https://www.google.com/search"

"wrc@avast.com"=C:\Aviry\Avast\WebRep\FF
"smartwebprinting@hp.com"=C:\Programy\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
"sp@avast.com"=C:\Aviry\Avast\SafePrice\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.213 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_21_0_0_213.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=18.0.1.9]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=c:\program files\real\realplayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpplugin;version=18.0.1.9]
"Description"=RealTimes Download Plugin
"Path"=c:\program files\real\realplayer\Netscape6\nprpplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


C:\Users\kuku\AppData\Roaming\Mozilla\Firefox\Profiles\9x5re7vu.default\extensions\
donottrack@checkpoint.com
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}

C:\Users\kuku\AppData\Roaming\Mozilla\Firefox\Profiles\9x5re7vu.default\searchplugins\
Google.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Aviry\Avast\aswWebRepIE.dll [2016-02-18 678656]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"UVCSti"=C:\Program Files\UVC Video Camera\UVCSti.exe [2010-08-23 245760]
"RunUVC"=C:\Program Files\UVC Video Camera\EffectDir\UVCtray.exe [2010-08-23 7548928]
"Apoint"=C:\Program Files\DellTPad\Apoint.exe [2011-07-20 505720]
"EMET Notifier"=C:\Program Files\EMET\EMET_notifier.exe [2012-05-09 152152]
"hpqSRMon"=C:\Programy\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]
"LifeCam"=C:\Program Files\Microsoft LifeCam\LifeExp.exe [2010-12-13 135536]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 1425208]
"AvastUI.exe"=C:\Aviry\Avast\AvastUI.exe [2016-03-23 7139256]
"PDFPrint"=C:\Prográmky\PDF24\pdf24.exe [2014-11-28 193568]
"TkBellExe"=c:\program files\real\realplayer\Update\realsched.exe [2015-07-01 286272]
"ZoneAlarm"=C:\Aviry\CheckPoint\ZoneAlarm\zatray.exe [2015-11-07 134792]
"RealDownloader"=C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [2016-02-24 720112]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Aviry\CCleaner\CCleaner.exe [2016-03-11 6667992]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FAH.lnk - C:\Program Files\WinZip\FAHConsole.exe
HP Digital Imaging Monitor.lnk - C:\Programy\HP\Digital Imaging\bin\hpqtra08.exe
RealPlayer Cloud Service UI.lnk - C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
RealTimes.lnk - C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
Secunia PSI Tray.lnk - C:\Program Files\Secunia\PSI\psi_tray.exe
Update Notifier.lnk - C:\Program Files\WinZip\WZUpdateNotifier.exe
WinZip Preloader.lnk - C:\Program Files\WinZip\WzPreloader.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codecp.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"msacm.siren"=sirenacm.dll
"wave3"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-04-26 19:37:49 ----D---- C:\AdwCleaner
2016-04-26 18:44:06 ----D---- C:\rsit
2016-04-24 19:28:09 ----A---- C:\Windows\system32\rpcss.dll
2016-04-24 19:28:05 ----A---- C:\Windows\system32\mtxoci.dll
2016-04-24 19:28:05 ----A---- C:\Windows\system32\msorcl32.dll
2016-04-24 19:27:42 ----A---- C:\Windows\system32\ole32.dll
2016-04-24 19:27:42 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-04-24 19:27:42 ----A---- C:\Windows\system32\KernelBase.dll
2016-04-24 19:27:41 ----A---- C:\Windows\system32\ntkrnlpa.exe
2016-04-24 19:27:41 ----A---- C:\Windows\system32\ntdll.dll
2016-04-24 19:27:40 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-04-24 19:27:40 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-04-24 19:27:38 ----A---- C:\Windows\system32\winsrv.dll
2016-04-24 19:27:38 ----A---- C:\Windows\system32\lsasrv.dll
2016-04-24 19:27:38 ----A---- C:\Windows\system32\kernel32.dll
2016-04-24 19:27:38 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-04-24 19:27:37 ----A---- C:\Windows\system32\smss.exe
2016-04-24 19:27:37 ----A---- C:\Windows\system32\rpcrt4.dll
2016-04-24 19:27:37 ----A---- C:\Windows\system32\kerberos.dll
2016-04-24 19:27:37 ----A---- C:\Windows\system32\conhost.exe
2016-04-24 19:27:37 ----A---- C:\Windows\system32\advapi32.dll
2016-04-24 19:27:36 ----A---- C:\Windows\system32\srcore.dll
2016-04-24 19:27:36 ----A---- C:\Windows\system32\schannel.dll
2016-04-24 19:27:36 ----A---- C:\Windows\system32\msv1_0.dll
2016-04-24 19:27:36 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-04-24 19:27:34 ----A---- C:\Windows\system32\wdigest.dll
2016-04-24 19:27:34 ----A---- C:\Windows\system32\TSpkg.dll
2016-04-24 19:27:34 ----A---- C:\Windows\system32\sspicli.dll
2016-04-24 19:27:34 ----A---- C:\Windows\system32\rpchttp.dll
2016-04-24 19:27:34 ----A---- C:\Windows\system32\ncrypt.dll
2016-04-24 19:27:34 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-04-24 19:27:34 ----A---- C:\Windows\system32\apisetschema.dll
2016-04-24 19:27:33 ----A---- C:\Windows\system32\srclient.dll
2016-04-24 19:27:33 ----A---- C:\Windows\system32\drivers\appid.sys
2016-04-24 19:27:33 ----A---- C:\Windows\system32\csrsrv.dll
2016-04-24 19:27:33 ----A---- C:\Windows\system32\cryptbase.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-04-24 19:27:32 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-04-24 19:27:32 ----A---- C:\Windows\system32\secur32.dll
2016-04-24 19:27:32 ----A---- C:\Windows\system32\rstrui.exe
2016-04-24 19:27:32 ----A---- C:\Windows\system32\lsass.exe
2016-04-24 19:27:32 ----A---- C:\Windows\system32\appidsvc.dll
2016-04-24 19:27:32 ----A---- C:\Windows\system32\appidapi.dll
2016-04-24 19:27:31 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-04-24 19:27:31 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-24 19:27:31 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-24 19:27:31 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-04-24 19:27:31 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-04-24 19:27:31 ----A---- C:\Windows\system32\sspisrv.dll
2016-04-24 19:27:31 ----A---- C:\Windows\system32\credssp.dll
2016-04-24 19:27:31 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-04-24 19:27:29 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-04-24 19:27:29 ----A---- C:\Windows\system32\msaudite.dll
2016-04-24 19:27:29 ----A---- C:\Windows\system32\auditpol.exe
2016-04-24 19:27:29 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-04-24 19:27:29 ----A---- C:\Windows\system32\adtschema.dll
2016-04-24 19:27:28 ----A---- C:\Windows\system32\msobjs.dll
2016-04-24 19:26:49 ----A---- C:\Windows\system32\vbscript.dll
2016-04-24 19:26:49 ----A---- C:\Windows\system32\jsproxy.dll
2016-04-24 19:26:49 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-04-24 19:26:49 ----A---- C:\Windows\system32\ieUnatt.exe
2016-04-24 19:26:48 ----A---- C:\Windows\system32\wininet.dll
2016-04-24 19:26:48 ----A---- C:\Windows\system32\jscript9diag.dll
2016-04-24 19:26:48 ----A---- C:\Windows\system32\jscript.dll
2016-04-24 19:26:48 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-04-24 19:26:48 ----A---- C:\Windows\system32\dxtmsft.dll
2016-04-24 19:26:47 ----A---- C:\Windows\system32\dxtrans.dll
2016-04-24 19:26:46 ----A---- C:\Windows\system32\ieui.dll
2016-04-24 19:26:45 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-04-24 19:26:45 ----A---- C:\Windows\system32\mshtmled.dll
2016-04-24 19:26:44 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-04-24 19:26:43 ----A---- C:\Windows\system32\iertutil.dll
2016-04-24 19:26:42 ----A---- C:\Windows\system32\mshtml.dll
2016-04-24 19:26:42 ----A---- C:\Windows\system32\jscript9.dll
2016-04-24 19:26:40 ----A---- C:\Windows\system32\urlmon.dll
2016-04-24 19:26:40 ----A---- C:\Windows\system32\msfeeds.dll
2016-04-24 19:26:40 ----A---- C:\Windows\system32\ieapfltr.dll
2016-04-24 19:26:39 ----A---- C:\Windows\system32\webcheck.dll
2016-04-24 19:26:39 ----A---- C:\Windows\system32\msrating.dll
2016-04-24 19:26:39 ----A---- C:\Windows\system32\iesetup.dll
2016-04-24 19:26:39 ----A---- C:\Windows\system32\ieframe.dll
2016-04-24 19:26:37 ----A---- C:\Windows\system32\inseng.dll
2016-04-24 19:26:37 ----A---- C:\Windows\system32\iernonce.dll
2016-04-24 19:26:37 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-04-24 19:26:37 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-04-24 19:26:37 ----A---- C:\Windows\system32\ie4uinit.exe
2016-04-24 19:26:14 ----A---- C:\Windows\system32\samsrv.dll
2016-04-24 19:26:14 ----A---- C:\Windows\system32\samlib.dll
2016-04-24 19:26:06 ----A---- C:\Windows\system32\tzres.dll
2016-04-24 19:26:00 ----A---- C:\Windows\system32\drivers\disk.sys
2016-04-24 19:25:58 ----A---- C:\Windows\system32\win32k.sys
2016-04-24 19:25:56 ----A---- C:\Windows\system32\generaltel.dll
2016-04-24 19:25:56 ----A---- C:\Windows\system32\devinv.dll
2016-04-24 19:25:56 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-04-24 19:25:56 ----A---- C:\Windows\system32\acmigration.dll
2016-04-24 19:25:55 ----A---- C:\Windows\system32\invagent.dll
2016-04-24 19:25:55 ----A---- C:\Windows\system32\appraiser.dll
2016-04-24 19:25:55 ----A---- C:\Windows\system32\aepic.dll
2016-04-24 19:25:55 ----A---- C:\Windows\system32\aeinv.dll
2016-04-24 19:25:53 ----A---- C:\Windows\system32\msxml3.dll
2016-04-24 19:25:52 ----A---- C:\Windows\system32\msxml3r.dll
2016-04-24 16:46:41 ----A---- C:\Windows\system32\aswBoot.exe
2016-04-13 14:34:48 ----A---- C:\Windows\system32\occache.dll
2016-04-13 14:34:48 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-04-13 14:34:48 ----A---- C:\Windows\system32\iedkcs32.dll
2016-04-12 13:09:28 ----D---- C:\Program Files\Mozilla Firefox
2016-04-11 23:10:02 ----D---- C:\Program Files\Common Files\Skype

======List of files/folders modified in the last 1 month======

2016-04-26 20:50:01 ----D---- C:\Windows\Temp
2016-04-26 20:49:21 ----D---- C:\Program Files\trend micro
2016-04-26 19:48:20 ----D---- C:\Program Files\Opera
2016-04-26 19:43:34 ----D---- C:\Windows\system32\Tasks
2016-04-26 19:41:00 ----D---- C:\Users\kuku\AppData\Roaming\CheckPoint
2016-04-26 18:45:02 ----D---- C:\Windows\system32\config
2016-04-26 18:39:34 ----D---- C:\Windows
2016-04-26 18:29:51 ----D---- C:\Windows\Minidump
2016-04-25 11:44:57 ----D---- C:\Stati 2016
2016-04-25 09:40:58 ----D---- C:\Windows\inf
2016-04-25 09:40:52 ----D---- C:\Windows\debug
2016-04-25 04:35:36 ----D---- C:\Windows\System32
2016-04-25 04:35:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-04-25 04:33:15 ----D---- C:\Windows\Microsoft.NET
2016-04-25 04:33:11 ----RSD---- C:\Windows\assembly
2016-04-25 04:29:26 ----D---- C:\Windows\winsxs
2016-04-25 04:25:29 ----D---- C:\Windows\system32\drivers
2016-04-25 04:25:29 ----D---- C:\Windows\system32\cs-CZ
2016-04-25 04:25:28 ----D---- C:\Windows\system32\en-US
2016-04-25 04:25:23 ----D---- C:\Windows\system32\Boot
2016-04-25 04:25:17 ----D---- C:\Program Files\Internet Explorer
2016-04-25 04:25:03 ----D---- C:\Windows\system32\appraiser
2016-04-25 04:24:59 ----D---- C:\Windows\system32\DriverStore
2016-04-24 22:56:52 ----D---- C:\Windows\system32\catroot
2016-04-24 22:54:57 ----SHD---- C:\Windows\Installer
2016-04-24 22:54:57 ----SHD---- C:\Config.Msi
2016-04-24 22:49:08 ----D---- C:\Windows\system32\MRT
2016-04-24 22:49:04 ----A---- C:\Windows\system32\MRT.exe
2016-04-24 22:45:47 ----SHD---- C:\System Volume Information
2016-04-24 19:12:07 ----HD---- C:\ProgramData
2016-04-24 17:27:08 ----D---- C:\Windows\system32\GWX
2016-04-24 16:56:05 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2016-04-24 16:43:34 ----D---- C:\Windows\Prefetch
2016-04-24 16:17:15 ----D---- C:\Windows\system32\wbem
2016-04-24 16:14:55 ----D---- C:\Windows\Tasks
2016-04-24 16:14:55 ----D---- C:\Windows\system32\wfp
2016-04-24 16:14:55 ----D---- C:\Windows\system32\drivers\cs-CZ
2016-04-24 16:14:55 ----D---- C:\Windows\system32\catroot2
2016-04-24 16:14:49 ----D---- C:\Windows\system32\CodeIntegrity
2016-04-24 16:14:49 ----D---- C:\Windows\servicing
2016-04-24 16:14:38 ----D---- C:\Windows\AppCompat
2016-04-24 16:14:37 ----D---- C:\Program Files\Common Files\microsoft shared
2016-04-24 16:14:06 ----D---- C:\Windows\registration
2016-04-24 16:11:35 ----D---- C:\Users\kuku\AppData\Roaming\Skype
2016-04-24 16:11:33 ----D---- C:\ProgramData\Real
2016-04-21 15:05:04 ----N---- C:\Windows\system32\MpSigStub.exe
2016-04-13 08:57:05 ----D---- C:\Program Files\Mozilla Maintenance Service
2016-04-12 13:28:45 ----RD---- C:\Program Files
2016-04-11 23:10:13 ----D---- C:\ProgramData\Skype
2016-04-11 23:10:02 ----RD---- C:\Program Files\Skype
2016-04-11 23:10:02 ----D---- C:\Program Files\Common Files
2016-04-10 19:03:24 ----D---- C:\Prezentace 2016
2016-04-08 15:54:10 ----D---- C:\Windows\system32\FxsTmp
2016-04-07 08:28:51 ----D---- C:\Windows\system32\NDF
2016-04-06 20:12:01 ----D---- C:\Články 2016
2016-03-28 17:38:34 ----D---- C:\Album fotografií
2016-03-27 21:40:23 ----D---- C:\Program Files\Common Files\Adobe AIR

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-02-18 58776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-02-18 221240]
R0 KL1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2014-03-19 135776]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2010-03-19 45648]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2016-03-22 35096]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-02-18 91232]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-03-09 816304]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-02-23 447848]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2014-03-19 488032]
R1 Vsdatant;Zone Alarm Firewall Driver; C:\Windows\system32\DRIVERS\vsdatant.sys [2015-11-07 367064]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-02-18 32792]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-03-09 91168]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-02-18 127432]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2012-06-19 3240400]
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver; C:\Windows\System32\Drivers\nx6000.sys [2010-12-13 30576]
R3 NVNET;NVIDIA nForce Ethernet Driver; C:\Windows\system32\DRIVERS\nvmf6232.sys [2010-08-12 298216]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2010-03-22 18944]
R3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf.sys [2011-12-16 15544]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 ApfiltrService;Alps Touch Pad Filter Driver for Windows x86; C:\Windows\system32\DRIVERS\Apfiltr.sys [2011-05-25 305488]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 Cam3820;Cam3820 PC Camera Driver; C:\Windows\System32\Drivers\cam3820a.sys [2010-08-25 369024]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-07-28 49088]
S3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-12-09 14848]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\drivers\WinUsb.sys [2010-11-20 35968]
S4 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Aviry\Avast\ng\vbox\VBoxAswDrv.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeActiveFileMonitor10.0;Adobe Active File Monitor V10; C:\Fotoeditory\Adobe Photoshop Elements 10\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [2011-09-14 169624]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-14 82128]
R2 avast! Antivirus;Avast Antivirus; C:\Aviry\Avast\AvastSvc.exe [2016-02-18 237096]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2010-12-13 135536]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-02-10 634144]
R2 RealPlayerUpdateSvc;RealPlayer Update Service; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [2015-06-17 31856]
R2 Secunia PSI Agent;Secunia PSI Agent; C:\Program Files\Secunia\PSI\PSIA.exe [2012-09-24 1328736]
R2 Secunia Update Agent;Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [2012-09-24 656480]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 1713904]
R2 ZAPrivacyService;ZoneAlarm Privacy Service; C:\Aviry\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [2015-10-19 96272]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-10 1266464]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 RealPlayer Cloud Service;RealPlayer Cloud Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [2015-07-01 1115224]
S2 RealTimes Desktop Service;RealTimes Desktop Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [2015-07-01 1115224]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2016-01-29 327296]
S2 vsmon;TrueVector Internet Monitor; C:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe [2015-11-07 3722912]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-24 270016]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2014-03-31 1512640]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-03-31 102912]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-04-12 146888]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-05-04 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2015-11-05 45744]
S4 ATMsrvc;ATM Service; C:\Windows\System32\ATMsrvc.exe [2000-05-24 15360]
S4 AvastVBoxSvc;AvastVBox COM Service; C:\Aviry\Avast\ng\vbox\AvastVBoxSVC.exe []
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

Provedl jsem. Vkládám logy z OTM a z RSIT. Díky za další postup.

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 313840 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: kuku
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 2082234 bytes
->FireFox cache emptied: 7518805 bytes
->Google Chrome cache emptied: 7580125 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 313874 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 733848 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 479160 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 18,00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: kuku
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 04262016_213720

Files moved on Reboot...
File move failed. C:\Windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\opera_installer_20151214134543.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\opera_installer_20151214134553.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\opera_installer_20160322221020.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\opera_installer_20160322221021.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\opera_installer_20160322221035.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\opera_installer_20160322221519.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\opera_installer_20160322221520.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\opera_installer_20160322222019.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\opera_installer_20160322222020.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\opera_installer_20160424164744.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\opera_installer_20160424164750.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\opera_installer_20160424165215.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\SafeZone Installer\opera_installer_20160424165715.log scheduled to be moved on reboot.
File move failed. C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.

Registry entries deleted on Reboot...
-----------------------------------------------------
RSIT:

Logfile of random's system information tool 1.10 (written by random/random)
Run by kuku at 2016-04-26 21:44:10
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 318 GB (67%) free of 477 GB
Total RAM: 2558 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:44:26, on 26.4.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18283)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\notepad.exe
C:\Program Files\UVC Video Camera\UVCSti.exe
C:\Program Files\UVC Video Camera\EffectDir\UVCTray.exe
C:\Program Files\EMET\EMET_notifier.exe
C:\Aviry\Avast\avastui.exe
C:\Prográmky\PDF24\pdf24.exe
C:\Program Files\Real\RealPlayer\Update\realsched.exe
C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
C:\Programy\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\WinZip\FAHWindow32.exe
C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
C:\Windows\system32\taskeng.exe
C:\Aviry\CCleaner\CCleaner.exe
C:\Program Files\Secunia\PSI\psi_tray.exe
C:\Program Files\WinZip\WZUpdateNotifier.exe
C:\Program Files\WinZip\WzPreloader.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Programy\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Programy\HP\Digital Imaging\bin\hpqbam08.exe
C:\Programy\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Aviry\Avast\avBugReport.exe
C:\Windows\system32\conhost.exe
C:\Aviry\RSIT\RSIT.exe
C:\Program Files\trend micro\kuku.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Aviry\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [UVCSti] "C:\Program Files\UVC Video Camera\UVCSti.exe"
O4 - HKLM\..\Run: [RunUVC] "C:\Program Files\UVC Video Camera\EffectDir\UVCtray.exe"
O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
O4 - HKLM\..\Run: [EMET Notifier] C:\Program Files\EMET\EMET_notifier.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Programy\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [Logitech Download Assistant] C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Aviry\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [PDFPrint] C:\Prográmky\PDF24\pdf24.exe
O4 - HKLM\..\Run: [TkBellExe] "c:\program files\real\realplayer\Update\realsched.exe" -osboot
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Aviry\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKLM\..\Run: [RealDownloader] C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Aviry\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [ZoneAlarm Windows 10 Upgrader] "C:\ProgramData\CheckPoint\ZoneAlarm\Data\Updates\unpacked==win10=update_win10.zip\upgrade.exe" /delay (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ZoneAlarm Windows 10 Upgrader] "C:\ProgramData\CheckPoint\ZoneAlarm\Data\Updates\unpacked==win10=update_win10.zip\upgrade.exe" /delay (User 'Default user')
O4 - Global Startup: FAH.lnk = C:\Program Files\WinZip\FAHConsole.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programy\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: RealPlayer Cloud Service UI.lnk = C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
O4 - Global Startup: RealTimes.lnk = C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files\Secunia\PSI\psi_tray.exe
O4 - Global Startup: Update Notifier.lnk = C:\Program Files\WinZip\WZUpdateNotifier.exe
O4 - Global Startup: WinZip Preloader.lnk = C:\Program Files\WinZip\WzPreloader.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\Programy\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\kuku\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programy\MICROS~1\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Active File Monitor V10 (AdobeActiveFileMonitor10.0) - Adobe Systems Incorporated - C:\Fotoeditory\Adobe Photoshop Elements 10\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Aviry\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: RealPlayer Cloud Service - RealNetworks, Inc. - c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe
O23 - Service: RealPlayer Update Service (RealPlayerUpdateSvc) - Unknown owner - C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
O23 - Service: RealTimes Desktop Service - RealNetworks, Inc. - c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files\Secunia\PSI\sua.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies Ltd. - C:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: ZoneAlarm Privacy Service (ZAPrivacyService) - Check Point Software Technologies, Ltd. - C:\Aviry\CheckPoint\ZoneAlarm\ZaPrivacyService.exe

--
End of file - 7824 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\kuku\AppData\Roaming\Mozilla\Firefox\Profiles\9x5re7vu.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "keyword.URL" - "https://www.google.com/search"

"wrc@avast.com"=C:\Aviry\Avast\WebRep\FF
"smartwebprinting@hp.com"=C:\Programy\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
"sp@avast.com"=C:\Aviry\Avast\SafePrice\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.213 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_21_0_0_213.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=18.0.1.9]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=c:\program files\real\realplayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpplugin;version=18.0.1.9]
"Description"=RealTimes Download Plugin
"Path"=c:\program files\real\realplayer\Netscape6\nprpplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


C:\Users\kuku\AppData\Roaming\Mozilla\Firefox\Profiles\9x5re7vu.default\extensions\
donottrack@checkpoint.com
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}

C:\Users\kuku\AppData\Roaming\Mozilla\Firefox\Profiles\9x5re7vu.default\searchplugins\
Google.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Aviry\Avast\aswWebRepIE.dll [2016-02-18 678656]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"UVCSti"=C:\Program Files\UVC Video Camera\UVCSti.exe [2010-08-23 245760]
"RunUVC"=C:\Program Files\UVC Video Camera\EffectDir\UVCtray.exe [2010-08-23 7548928]
"Apoint"=C:\Program Files\DellTPad\Apoint.exe [2011-07-20 505720]
"EMET Notifier"=C:\Program Files\EMET\EMET_notifier.exe [2012-05-09 152152]
"hpqSRMon"=C:\Programy\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]
"LifeCam"=C:\Program Files\Microsoft LifeCam\LifeExp.exe [2010-12-13 135536]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 1425208]
"AvastUI.exe"=C:\Aviry\Avast\AvastUI.exe [2016-03-23 7139256]
"PDFPrint"=C:\Prográmky\PDF24\pdf24.exe [2014-11-28 193568]
"TkBellExe"=c:\program files\real\realplayer\Update\realsched.exe [2015-07-01 286272]
"ZoneAlarm"=C:\Aviry\CheckPoint\ZoneAlarm\zatray.exe [2015-11-07 134792]
"RealDownloader"=C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [2016-02-24 720112]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Aviry\CCleaner\CCleaner.exe [2016-03-11 6667992]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FAH.lnk - C:\Program Files\WinZip\FAHConsole.exe
HP Digital Imaging Monitor.lnk - C:\Programy\HP\Digital Imaging\bin\hpqtra08.exe
RealPlayer Cloud Service UI.lnk - C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
RealTimes.lnk - C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
Secunia PSI Tray.lnk - C:\Program Files\Secunia\PSI\psi_tray.exe
Update Notifier.lnk - C:\Program Files\WinZip\WZUpdateNotifier.exe
WinZip Preloader.lnk - C:\Program Files\WinZip\WzPreloader.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codecp.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"msacm.siren"=sirenacm.dll
"wave3"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-04-26 21:37:20 ----D---- C:\_OTM
2016-04-26 19:37:49 ----D---- C:\AdwCleaner
2016-04-26 18:44:06 ----D---- C:\rsit
2016-04-24 19:28:09 ----A---- C:\Windows\system32\rpcss.dll
2016-04-24 19:28:05 ----A---- C:\Windows\system32\mtxoci.dll
2016-04-24 19:28:05 ----A---- C:\Windows\system32\msorcl32.dll
2016-04-24 19:27:42 ----A---- C:\Windows\system32\ole32.dll
2016-04-24 19:27:42 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-04-24 19:27:42 ----A---- C:\Windows\system32\KernelBase.dll
2016-04-24 19:27:41 ----A---- C:\Windows\system32\ntkrnlpa.exe
2016-04-24 19:27:41 ----A---- C:\Windows\system32\ntdll.dll
2016-04-24 19:27:40 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-04-24 19:27:40 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-04-24 19:27:38 ----A---- C:\Windows\system32\winsrv.dll
2016-04-24 19:27:38 ----A---- C:\Windows\system32\lsasrv.dll
2016-04-24 19:27:38 ----A---- C:\Windows\system32\kernel32.dll
2016-04-24 19:27:38 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-04-24 19:27:37 ----A---- C:\Windows\system32\smss.exe
2016-04-24 19:27:37 ----A---- C:\Windows\system32\rpcrt4.dll
2016-04-24 19:27:37 ----A---- C:\Windows\system32\kerberos.dll
2016-04-24 19:27:37 ----A---- C:\Windows\system32\conhost.exe
2016-04-24 19:27:37 ----A---- C:\Windows\system32\advapi32.dll
2016-04-24 19:27:36 ----A---- C:\Windows\system32\srcore.dll
2016-04-24 19:27:36 ----A---- C:\Windows\system32\schannel.dll
2016-04-24 19:27:36 ----A---- C:\Windows\system32\msv1_0.dll
2016-04-24 19:27:36 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-04-24 19:27:34 ----A---- C:\Windows\system32\wdigest.dll
2016-04-24 19:27:34 ----A---- C:\Windows\system32\TSpkg.dll
2016-04-24 19:27:34 ----A---- C:\Windows\system32\sspicli.dll
2016-04-24 19:27:34 ----A---- C:\Windows\system32\rpchttp.dll
2016-04-24 19:27:34 ----A---- C:\Windows\system32\ncrypt.dll
2016-04-24 19:27:34 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-04-24 19:27:34 ----A---- C:\Windows\system32\apisetschema.dll
2016-04-24 19:27:33 ----A---- C:\Windows\system32\srclient.dll
2016-04-24 19:27:33 ----A---- C:\Windows\system32\drivers\appid.sys
2016-04-24 19:27:33 ----A---- C:\Windows\system32\csrsrv.dll
2016-04-24 19:27:33 ----A---- C:\Windows\system32\cryptbase.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-04-24 19:27:32 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-04-24 19:27:32 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-04-24 19:27:32 ----A---- C:\Windows\system32\secur32.dll
2016-04-24 19:27:32 ----A---- C:\Windows\system32\rstrui.exe
2016-04-24 19:27:32 ----A---- C:\Windows\system32\lsass.exe
2016-04-24 19:27:32 ----A---- C:\Windows\system32\appidsvc.dll
2016-04-24 19:27:32 ----A---- C:\Windows\system32\appidapi.dll
2016-04-24 19:27:31 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-04-24 19:27:31 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-24 19:27:31 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-24 19:27:31 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-04-24 19:27:31 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-04-24 19:27:31 ----A---- C:\Windows\system32\sspisrv.dll
2016-04-24 19:27:31 ----A---- C:\Windows\system32\credssp.dll
2016-04-24 19:27:31 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-24 19:27:30 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-04-24 19:27:29 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-04-24 19:27:29 ----A---- C:\Windows\system32\msaudite.dll
2016-04-24 19:27:29 ----A---- C:\Windows\system32\auditpol.exe
2016-04-24 19:27:29 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-04-24 19:27:29 ----A---- C:\Windows\system32\adtschema.dll
2016-04-24 19:27:28 ----A---- C:\Windows\system32\msobjs.dll
2016-04-24 19:26:49 ----A---- C:\Windows\system32\vbscript.dll
2016-04-24 19:26:49 ----A---- C:\Windows\system32\jsproxy.dll
2016-04-24 19:26:49 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-04-24 19:26:49 ----A---- C:\Windows\system32\ieUnatt.exe
2016-04-24 19:26:48 ----A---- C:\Windows\system32\wininet.dll
2016-04-24 19:26:48 ----A---- C:\Windows\system32\jscript9diag.dll
2016-04-24 19:26:48 ----A---- C:\Windows\system32\jscript.dll
2016-04-24 19:26:48 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-04-24 19:26:48 ----A---- C:\Windows\system32\dxtmsft.dll
2016-04-24 19:26:47 ----A---- C:\Windows\system32\dxtrans.dll
2016-04-24 19:26:46 ----A---- C:\Windows\system32\ieui.dll
2016-04-24 19:26:45 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-04-24 19:26:45 ----A---- C:\Windows\system32\mshtmled.dll
2016-04-24 19:26:44 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-04-24 19:26:43 ----A---- C:\Windows\system32\iertutil.dll
2016-04-24 19:26:42 ----A---- C:\Windows\system32\mshtml.dll
2016-04-24 19:26:42 ----A---- C:\Windows\system32\jscript9.dll
2016-04-24 19:26:40 ----A---- C:\Windows\system32\urlmon.dll
2016-04-24 19:26:40 ----A---- C:\Windows\system32\msfeeds.dll
2016-04-24 19:26:40 ----A---- C:\Windows\system32\ieapfltr.dll
2016-04-24 19:26:39 ----A---- C:\Windows\system32\webcheck.dll
2016-04-24 19:26:39 ----A---- C:\Windows\system32\msrating.dll
2016-04-24 19:26:39 ----A---- C:\Windows\system32\iesetup.dll
2016-04-24 19:26:39 ----A---- C:\Windows\system32\ieframe.dll
2016-04-24 19:26:37 ----A---- C:\Windows\system32\inseng.dll
2016-04-24 19:26:37 ----A---- C:\Windows\system32\iernonce.dll
2016-04-24 19:26:37 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-04-24 19:26:37 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-04-24 19:26:37 ----A---- C:\Windows\system32\ie4uinit.exe
2016-04-24 19:26:14 ----A---- C:\Windows\system32\samsrv.dll
2016-04-24 19:26:14 ----A---- C:\Windows\system32\samlib.dll
2016-04-24 19:26:06 ----A---- C:\Windows\system32\tzres.dll
2016-04-24 19:26:00 ----A---- C:\Windows\system32\drivers\disk.sys
2016-04-24 19:25:58 ----A---- C:\Windows\system32\win32k.sys
2016-04-24 19:25:56 ----A---- C:\Windows\system32\generaltel.dll
2016-04-24 19:25:56 ----A---- C:\Windows\system32\devinv.dll
2016-04-24 19:25:56 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-04-24 19:25:56 ----A---- C:\Windows\system32\acmigration.dll
2016-04-24 19:25:55 ----A---- C:\Windows\system32\invagent.dll
2016-04-24 19:25:55 ----A---- C:\Windows\system32\appraiser.dll
2016-04-24 19:25:55 ----A---- C:\Windows\system32\aepic.dll
2016-04-24 19:25:55 ----A---- C:\Windows\system32\aeinv.dll
2016-04-24 19:25:53 ----A---- C:\Windows\system32\msxml3.dll
2016-04-24 19:25:52 ----A---- C:\Windows\system32\msxml3r.dll
2016-04-24 16:46:41 ----A---- C:\Windows\system32\aswBoot.exe
2016-04-13 14:34:48 ----A---- C:\Windows\system32\occache.dll
2016-04-13 14:34:48 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-04-13 14:34:48 ----A---- C:\Windows\system32\iedkcs32.dll
2016-04-12 13:09:28 ----D---- C:\Program Files\Mozilla Firefox
2016-04-11 23:10:02 ----D---- C:\Program Files\Common Files\Skype

======List of files/folders modified in the last 1 month======

2016-04-26 21:44:21 ----D---- C:\Windows\Temp
2016-04-26 21:44:21 ----D---- C:\Program Files\Opera
2016-04-26 21:44:12 ----D---- C:\Program Files\trend micro
2016-04-26 21:38:00 ----D---- C:\Windows\system32\config
2016-04-26 21:36:02 ----D---- C:\Aviry
2016-04-26 19:43:34 ----D---- C:\Windows\system32\Tasks
2016-04-26 19:41:00 ----D---- C:\Users\kuku\AppData\Roaming\CheckPoint
2016-04-26 18:39:34 ----D---- C:\Windows
2016-04-26 18:29:51 ----D---- C:\Windows\Minidump
2016-04-25 11:44:57 ----D---- C:\Stati 2016
2016-04-25 09:40:58 ----D---- C:\Windows\inf
2016-04-25 09:40:52 ----D---- C:\Windows\debug
2016-04-25 04:35:36 ----D---- C:\Windows\System32
2016-04-25 04:35:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-04-25 04:33:15 ----D---- C:\Windows\Microsoft.NET
2016-04-25 04:33:11 ----RSD---- C:\Windows\assembly
2016-04-25 04:29:26 ----D---- C:\Windows\winsxs
2016-04-25 04:25:29 ----D---- C:\Windows\system32\drivers
2016-04-25 04:25:29 ----D---- C:\Windows\system32\cs-CZ
2016-04-25 04:25:28 ----D---- C:\Windows\system32\en-US
2016-04-25 04:25:23 ----D---- C:\Windows\system32\Boot
2016-04-25 04:25:17 ----D---- C:\Program Files\Internet Explorer
2016-04-25 04:25:03 ----D---- C:\Windows\system32\appraiser
2016-04-25 04:24:59 ----D---- C:\Windows\system32\DriverStore
2016-04-24 22:56:52 ----D---- C:\Windows\system32\catroot
2016-04-24 22:54:57 ----SHD---- C:\Windows\Installer
2016-04-24 22:54:57 ----SHD---- C:\Config.Msi
2016-04-24 22:49:08 ----D---- C:\Windows\system32\MRT
2016-04-24 22:49:04 ----A---- C:\Windows\system32\MRT.exe
2016-04-24 22:45:47 ----SHD---- C:\System Volume Information
2016-04-24 19:12:07 ----HD---- C:\ProgramData
2016-04-24 17:27:08 ----D---- C:\Windows\system32\GWX
2016-04-24 16:56:05 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2016-04-24 16:43:34 ----D---- C:\Windows\Prefetch
2016-04-24 16:17:15 ----D---- C:\Windows\system32\wbem
2016-04-24 16:14:55 ----D---- C:\Windows\Tasks
2016-04-24 16:14:55 ----D---- C:\Windows\system32\wfp
2016-04-24 16:14:55 ----D---- C:\Windows\system32\drivers\cs-CZ
2016-04-24 16:14:55 ----D---- C:\Windows\system32\catroot2
2016-04-24 16:14:49 ----D---- C:\Windows\system32\CodeIntegrity
2016-04-24 16:14:49 ----D---- C:\Windows\servicing
2016-04-24 16:14:38 ----D---- C:\Windows\AppCompat
2016-04-24 16:14:37 ----D---- C:\Program Files\Common Files\microsoft shared
2016-04-24 16:14:06 ----D---- C:\Windows\registration
2016-04-24 16:11:35 ----D---- C:\Users\kuku\AppData\Roaming\Skype
2016-04-24 16:11:33 ----D---- C:\ProgramData\Real
2016-04-21 15:05:04 ----N---- C:\Windows\system32\MpSigStub.exe
2016-04-13 08:57:05 ----D---- C:\Program Files\Mozilla Maintenance Service
2016-04-12 13:28:45 ----RD---- C:\Program Files
2016-04-11 23:10:13 ----D---- C:\ProgramData\Skype
2016-04-11 23:10:02 ----RD---- C:\Program Files\Skype
2016-04-11 23:10:02 ----D---- C:\Program Files\Common Files
2016-04-10 19:03:24 ----D---- C:\Prezentace 2016
2016-04-08 15:54:10 ----D---- C:\Windows\system32\FxsTmp
2016-04-07 08:28:51 ----D---- C:\Windows\system32\NDF
2016-04-06 20:12:01 ----D---- C:\Články 2016
2016-03-28 17:38:34 ----D---- C:\Album fotografií
2016-03-27 21:40:23 ----D---- C:\Program Files\Common Files\Adobe AIR

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-02-18 58776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-02-18 221240]
R0 KL1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2014-03-19 135776]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2010-03-19 45648]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2016-03-22 35096]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-02-18 91232]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-03-09 816304]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-02-23 447848]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2014-03-19 488032]
R1 Vsdatant;Zone Alarm Firewall Driver; C:\Windows\system32\DRIVERS\vsdatant.sys [2015-11-07 367064]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-02-18 32792]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-03-09 91168]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-02-18 127432]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2012-06-19 3240400]
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver; C:\Windows\System32\Drivers\nx6000.sys [2010-12-13 30576]
R3 NVNET;NVIDIA nForce Ethernet Driver; C:\Windows\system32\DRIVERS\nvmf6232.sys [2010-08-12 298216]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2010-03-22 18944]
R3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf.sys [2011-12-16 15544]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 ApfiltrService;Alps Touch Pad Filter Driver for Windows x86; C:\Windows\system32\DRIVERS\Apfiltr.sys [2011-05-25 305488]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 Cam3820;Cam3820 PC Camera Driver; C:\Windows\System32\Drivers\cam3820a.sys [2010-08-25 369024]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-07-28 49088]
S3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-12-09 14848]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\drivers\WinUsb.sys [2010-11-20 35968]
S4 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Aviry\Avast\ng\vbox\VBoxAswDrv.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeActiveFileMonitor10.0;Adobe Active File Monitor V10; C:\Fotoeditory\Adobe Photoshop Elements 10\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [2011-09-14 169624]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-14 82128]
R2 avast! Antivirus;Avast Antivirus; C:\Aviry\Avast\AvastSvc.exe [2016-02-18 237096]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2010-12-13 135536]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-02-10 634144]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 RealPlayerUpdateSvc;RealPlayer Update Service; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [2015-06-17 31856]
R2 Secunia PSI Agent;Secunia PSI Agent; C:\Program Files\Secunia\PSI\PSIA.exe [2012-09-24 1328736]
R2 Secunia Update Agent;Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [2012-09-24 656480]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 1713904]
R2 ZAPrivacyService;ZoneAlarm Privacy Service; C:\Aviry\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [2015-10-19 96272]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-10 1266464]
S2 RealPlayer Cloud Service;RealPlayer Cloud Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [2015-07-01 1115224]
S2 RealTimes Desktop Service;RealTimes Desktop Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [2015-07-01 1115224]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2016-01-29 327296]
S2 vsmon;TrueVector Internet Monitor; C:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe [2015-11-07 3722912]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-24 270016]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2014-03-31 1512640]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-03-31 102912]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-04-12 146888]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-05-04 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2015-11-05 45744]
S4 ATMsrvc;ATM Service; C:\Windows\System32\ATMsrvc.exe [2000-05-24 15360]
S4 AvastVBoxSvc;AvastVBox COM Service; C:\Aviry\Avast\ng\vbox\AvastVBoxSVC.exe []
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]

-----------------EOF-----------------

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?

Provedl jsem to až teď, ale bylo mi sděleno, že během dne to již fungovalo normálně (net přes Operu). Teď jsem vyzkoušel Google a taky zatím o.k. Jen ZoneAlarm požadoval provedení kritické aktualizace (FreeFirewall_Setup_v1.0.8.48858_573.exe), tak jsem ji nainstaloval. Doufám, že se to nainstalovalo bez toolbaru. Nenabízelo to žádné odškrtnutí ani, že by se nějaký toolbar instaloval.
Který program bych měl preventivně jednou za čas ještě spustit k pročištění či když se mi bude zdát, že je to pomalé. Před vypnutím PC spouštím CC Cleaner.
Děkuji za pomoc.

CCleaner je optimální řešení.

Diky.

Rádo se stalo!