Prosím o kontrolu logu
Napsal: 21 kvě 2016 11:00
Dobrý den.
Prosím o kontrolu logu z rsit mé kamarádky. Prosila mě o radu že má strašně pomalý comp. Udělal jsem log z Rsit a ještě před tím Adwcleaner. Posílám nejprve log z Adwcleneru a následně z Rsit. Předem vám děkuji za pomoc a ochotu.
# AdwCleaner v5.117 - Log soubor vytvořen 21/05/2016 o 08:43:14
# Aktualizováno 15/05/2016 by Xplode
# Databáze : 2016-05-15.2 [Server]
# Operační systém : Windows 7 Home Premium Service Pack 1 (X64)
# Jméno uživatele : uzivatel - UZIVATEL-PC
# Spuštěno z : C:\Users\uzivatel\Desktop\AdwCleaner.exe
# Volba : Čištění
# Podpora : http://toolslib.net/forum
***** [ Služby ] *****
[-] Služba smazáno : WtuSystemSupport
[-] Služba smazáno : vToolbarUpdater40.3.1
***** [ Složky ] *****
[-] Složka smazáno : C:\ProgramData\AVG Secure Search
[-] Složka smazáno : C:\ProgramData\AVG Security Toolbar
[-] Složka smazáno : C:\ProgramData\avg web tuneup
[#] Složka smazáno : C:\ProgramData\Application Data\AVG Secure Search
[#] Složka smazáno : C:\ProgramData\Application Data\AVG Security Toolbar
[#] Složka smazáno : C:\ProgramData\Application Data\avg web tuneup
[-] Složka smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
[-] Složka smazáno : C:\Program Files (x86)\Ask.com
[-] Složka smazáno : C:\Program Files (x86)\myfree codec
[-] Složka smazáno : C:\Program Files (x86)\avg web tuneup
[-] Složka smazáno : C:\Program Files (x86)\Common Files\AVG Secure Search
[-] Složka smazáno : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
[-] Složka smazáno : C:\Users\uzivatel\AppData\Local\avg web tuneup
[-] Složka smazáno : C:\Users\uzivatel\AppData\LocalLow\AskToolbar
[-] Složka smazáno : C:\Users\uzivatel\AppData\LocalLow\avg web tuneup
[-] Složka smazáno : C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\extensions\toolbar@ask.com
[-] Složka smazáno : C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\extensions\_e5Members_@www.productivityboss.com
[-] Složka smazáno : C:\Program Files\Common Files\AVG Secure Search
***** [ Soubory ] *****
[-] Soubor smazáno : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml
[-] Soubor smazáno : C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\extensions\Avg@toolbar.xpi
[-] Soubor smazáno : C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\searchplugins\Askcom.xml
[-] Soubor smazáno : C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\searchplugins\ask-web-search.xml
[-] Soubor smazáno : C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\searchplugins\avg-secure-search.xml
***** [ DLLs ] *****
***** [ WMI ] *****
***** [ Zástupci ] *****
***** [ Naplánované úkoly ] *****
[-] Úkol smazáno : Scheduled Update for Ask Toolbar
***** [ Registr ] *****
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
[-] Klávesa smazáno : HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh
[-] Klávesa smazáno : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\s
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd.1
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi.1
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj.1
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{CA3A5461-96B5-46DD-9341-5350D3C94615}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\TypeLib\{4BC8AD89-AC5F-4DBD-A38F-C355C7DD33D7}
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Klávesa smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
[-] Klávesa smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Klávesa smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Klávesa smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Klávesa smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Hodnota smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
[-] Klávesa smazáno : HKCU\Software\Ask.com
[-] Klávesa smazáno : HKCU\Software\Myfree Codec
[-] Klávesa smazáno : HKCU\Software\AppDataLow\Software\AskToolbar
[-] Klávesa smazáno : HKLM\SOFTWARE\AskToolbar
[-] Klávesa smazáno : HKLM\SOFTWARE\Myfree Codec
[-] Klávesa smazáno : HKLM\SOFTWARE\AVG Tuneup
[-] Klávesa smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
[-] Klávesa smazáno : HKU\.DEFAULT\Software\AskToolbar
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
[-] Data Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Obnoveno : HKU\S-1-5-21-4217708016-2405288471-3794538976-1000\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Klávesa smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Data Obnoveno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Klávesa smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FF4E1D1C-0CFB-4C80-BFF6-2228ABBCF297}
[-] Data Obnoveno : HKU\S-1-5-21-4217708016-2405288471-3794538976-1000\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Hodnota smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
***** [ Webové prohlížeče ] *****
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("browser.search.defaultenginename", "Ask Web Search");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("browser.search.selectedEngine", "Ask Web Search");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=8930A028-0AC3-4506-84F8-591CC2F7AA2D&n=781b1c31&ind=2015042609&p2=^BYM^xdm002^YYA^cz&searchfor="[...]
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.BUTTON_STRUCTURE", "[{\"b\":224509940,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":224509941,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.search.defaultenginename.prev", "Google");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.search.defaultenginename.savedPrev", "true");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.search.defaultenginename.tb", "Ask Web Search");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.search.selectedEngine.prev", "Google");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.search.selectedEngine.savedPrev", "true");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.search.selectedEngine.tb", "Ask Web Search");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.homepage.prev", "hxxp://www.centrum.cz/?utm_source=ch-sethp&utm ... paign=home");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.homepage.savedPrev", "true");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=8930A028-0AC3-4506-84F8-591CC2F7AA2D&n=781b1c31&p2=^BYM^xdm002^YYA^cz");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.page.savedPrev", 1);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.page.tb", 1);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.version.last", "46.0");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.competitorDNS", "{\"comment\":\"refresh every 1 week (7*24*60*60*1000)\",\"refreshPeriod\":604800000,\"list\":[{\"url\":\"hxxp://www.dnsrsearch.com/[...]
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.firstKnownVersion", "6.85.6.30360");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=8930A028-0AC3-4506-84F8-591CC2F7AA2D&n=781b1c31&p2=^BYM^xdm002^YYA^cz");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.hp.enabled", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.hp.guardType", "HPR");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.hp.user.defined", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.initialized", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installKeysSource", "Cookies");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installType", "XPI");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installation.contextKey", "");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installation.dlpCountryCode", "CZ");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installation.installDate", "2015042609");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installation.partnerId", "^BYM^xdm002^YYA^cz");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installation.partnerSubId", "");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installation.pixelUrl", "hxxp://free.productivityboss.com/install_pixels.jhtml?partner=^BYM^xdm002^YYA^cz&coId=35fed32f73ee45d88f1d3a42faa4de85&tbGu[...]
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installation.success", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installation.toolbarId", "8930A028-0AC3-4506-84F8-591CC2F7AA2D");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.isCompliantUninstallImplementation", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.lastActivePing", "1463810977717");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.lastKnownVersion", "7.38.8.46590");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.lostEngine", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.lssState", "{\"previousLocales\":[\"cs\",\"en-US\",\"en\"],\"supportedLocales\":[\"de\",\"es\",\"pt\",\"ja\",\"en\"],\"defaultLocale\":\"en\",\"supp[...]
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.options.defaultSearch", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.options.homePageEnabled", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.options.keywordEnabled", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.options.tabEnabled", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.partnerPixelFired", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.productDeliveryOption.language", "en");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.productDeliveryOption.type", "Toolbar");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.searchHistory", "www.centrum.czwww.seznam.czTaati\rková matrace 1+1 zdarma ERGO COMFORT\r\n\r\nPoradíme vám\r\n\r\ntým odborníko Intena\r\nVolej[...]
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.successUrl", "hxxp://free.productivityboss.com/installComplete.jhtml");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.toolbar.ownSearch", false);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.toolbar.versionChanged", false);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.toolbarCollapsed", false);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.uninstallTasks", "{\"prefBranchesToDelete\":[\"extensions.toolbar.mindspark._e5Members_.\"],\"filesToDelete\":[\"C:\\\\Users\\\\uzivatel\\\\AppData\[...]
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.weather.location", "10001");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark.hp.enabled", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "productivityboss@mindspark.com");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark.lastInstalled", "productivityboss@mindspark.com");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("keyword.URL", "hxxp://int.search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=8930A028-0AC3-4506-84F8-591CC2F7AA2D&n=781b1c31&ind=2015042609&p2=^BYM^xdm002^YYA^cz&searchfor=");
*************************
:: "Tracing" odstraněných kláves
:: Nastavení Winsock odstraněno
*************************
C:\AdwCleaner\AdwCleaner[C1].txt - [23676 bytes] - [21/05/2016 08:43:14]
C:\AdwCleaner\AdwCleaner[S1].txt - [24649 bytes] - [21/05/2016 08:36:09]
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [23824 bytes] ##########
-----------------------------------------------------------------------------------------------------------
Zde Rsit
Logfile of random's system information tool 1.10 (written by random/random)
Run by uzivatel at 2016-05-21 09:11:02
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 37 GB (32%) free of 114 GB
Total RAM: 4094 MB (48% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:11:25, on 21.5.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18315)
Boot mode: Normal
Running processes:
C:\ProgramData\DatacardService\DCSHelper.exe
C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe
C:\Program Files (x86)\Samsung\Kies\Kies.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.exe
C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
C:\Program Files (x86)\AVG\Setup\avgsetupx.exe
C:\Windows\Temp\AvgSetup\d54aa687-1121-47cc-815a-d1577b0a95e4\install\av\avgmfapx.exe
C:\Windows\syswow64\MsiExec.exe
C:\Windows\syswow64\MsiExec.exe
C:\Program Files\trend micro\uzivatel.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\Av\avuirunnerx.exe" C:\Program Files (x86)\AVG\Av\avgui.exe
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
O4 - HKLM\..\Run: [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
O4 - HKCU\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
O4 - HKCU\..\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Global Startup: O2 Internet
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{04AD0372-D291-4A4B-B7AE-D888020D9733}: NameServer = 160.218.161.60 194.228.211.33
O17 - HKLM\System\CCS\Services\Tcpip\..\{19F92524-B21C-4931-905B-B4E38C90806C}: NameServer = 160.218.161.60 194.228.211.33
O17 - HKLM\System\CS1\Services\Tcpip\..\{04AD0372-D291-4A4B-B7AE-D888020D9733}: NameServer = 160.218.161.60 194.228.211.33
O17 - HKLM\System\CS2\Services\Tcpip\..\{04AD0372-D291-4A4B-B7AE-D888020D9733}: NameServer = 160.218.161.60 194.228.211.33
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AvgAMPS - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgamps.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgfwsa.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
O23 - Service: DisplayLink Service (DisplayLinkService) - DisplayLink Corp. - C:\Program Files\DisplayLink Core Software\DisplayLinkService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HWDeviceService64.exe - Unknown owner - C:\ProgramData\DatacardService\HWDeviceService64.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: O2 Internet. OUC (O2 Internet. RunOuc) - Unknown owner - C:\Program Files (x86)\O2 Internet\UpdateDog\ouc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Rapport Management Service (RapportMgmtService) - IBM Corp. - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: AVG PC TuneUp Service (TuneUp.UtilitiesSvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10135 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
atieclxx
"C:\Program Files\DisplayLink Core Software\DisplayLinkService.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\Windows\System32\svchost.exe -k utcsvc
"C:\ProgramData\DatacardService\HWDeviceService64.exe" -/service
"C:\ProgramData\DatacardService\DCSHelper.exe"
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\ProgramData\O2 Internet\OnlineUpdate\ouc.exe" "C:/Program Files (x86)/O2 Internet/UpdateDog/"
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe"
"C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe"
"C:\Program Files\Apoint\Apoint.exe"
"C:\Program Files (x86)\Samsung\Kies\Kies.exe" /preload
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"
"C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE" /logon
/fmw.trayonly
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\msiexec.exe /V
"C:\Program Files\Apoint\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
"C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe" /TUStart /pid:3036
"Apntex.exe"
"C:\Program Files\Apoint\Apvfb.exe"
\??\C:\Windows\system32\conhost.exe "-40432470253637063812216305531069982264659437041784178461360560920-1371212495
"taskhost.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
ctfmon.exe
"C:\Program Files (x86)\AVG\Framework\Common\avguix.exe" --type=renderer --disable-gpu-compositing --disable-pinch --force-device-scale-factor=1.000000 --no-sandbox --disable-direct-write --enable-deferred-image-decoding --lang=en-US --lang=en-US --log-file="C:\Users\uzivatel\AppData\Local\Avg\log\fmw1\chromium_dbg.log" --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3276.0.2044054122\2140792196" /prefetch:673131151
C:\Windows\splwow64.exe 8192
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE"
"C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.exe" /MainProcess 3256 /PrinterName "Canon MG5600 series Printer" /ScannerName "Canon MG5600 series" /Language cs-CZ /Startup
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe"
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe" -servicelaunch=true
"C:\Program Files (x86)\AVG\Setup\avgsetupx.exe" /install=fmw,zen,av /fmw.subscription_package_id=1 /av.ProductType=PROT /av.trayonly=true /av.Caller=ZEN /av.NoDesktopShortcut=true /av.LicenseKeyCoded=NzZlMiUecSc0ezREBGApQAZYOHAOPS4YMiFhDjRaeSEgAGBLDBcRCEdWLwFQBxpaWB5VD0RFEUcRBVQYDEdSAgQXTxIRUggHXAcIR14fGRdPEhFDCQdQV1MRRRUbVAEARVJSWxcDCF9CFVUPV1oDFQ1bFwcMRVgTFkEcBl1oExhAGx1WRVJNA0wUHxUcGWodCEBfUk0XMysHdTYzBUxYdgI0RnBCWwJ0NEEGQV8KBUBAdjZddXFGTnFHXgQDRFUZVxpWRQYSRyoKXFgbHlBXUxFQHQQYExtWUgQYGENQHgZFTwBXFAhkODYETg0KAERBU0BRCHozAHYzKkp/FRJZRBBGeSojYB4henQnXEIiCAdACj5xNAFhbyYBbDknWnFbR3IxKEp1HDsCMkJLcyMOVjYODgo= /uicc="{\"areo\":true}"
consent.exe 1356 1572 00000000036E6A70
/NoFmwSwitch /uilevel=silent /dontrestart /pipecontrol=avgavsetup /appmode=downloadmanager /targetinstallationpath="C:\Program Files (x86)\AVG\Av" /caller=ZEN /installfeatures=fea_AntiSpm|fea_Antivir|fea_Emails__EMC|fea_Emails__Outlook|fea_FW|fea_IDP|fea_OnlnSc|fea_SrchSrf__Surf /licensekeycoded=NzZlMiUecSc0ezREBGApQAZYOHAOPS4YMiFhDjRaeSEgAGBLDBcRCEdWLwFQBxpaWB5VD0RFEUcRBVQYDEdSAgQXTxIRUggHXAcIR14fGRdPEhFDCQdQV1MRRRUbVAEARVJSWxcDCF9CFVUPV1oDFQ1bFwcMRVgTFkEcBl1oExhAGx1WRVJNA0wUHxUcGWodCEBfUk0XMysHdTYzBUxYdgI0RnBCWwJ0NEEGQV8KBUBAdjZddXFGTnFHXgQDRFUZVxpWRQYSRyoKXFgbHlBXUxFQHQQYTVADGkZOFwhSYH8xRg5NXwABQ0FQQFJ+dAc0czIiBVkfHgc3UQNmBQFHEA9aHAoPBzwuZwcJWHQdOEJ9NUB0PS9fRklARx0wWHYhJnAfGHRlWxNRNFQO /nodesktopshortcut=1 /producttype=PROT /selectedlanguage=1029 /trayonly=1
C:\Windows\system32\MsiExec.exe -Embedding A9AAA556644FB557C40D684061271CDC C
C:\Windows\syswow64\MsiExec.exe -Embedding D0FDA975000A12952924E9E84FD98E76 C
C:\Windows\system32\MsiExec.exe -Embedding BE71605DE4D6F5A62E17DB4E5420C726
C:\Windows\syswow64\MsiExec.exe -Embedding A67C7FA85BF9B6F202169B4D8B00AF20
C:\Windows\system32\MsiExec.exe -Embedding E729777BE0E95CBB52F5622DAAD3234F E Global\MSI0000
"c:\program files (x86)\teamviewer\TeamViewer_Desktop.exe" --IPCport 5939
taskhost.exe $(Arg0)
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\syswow64\MsiExec.exe -Embedding 560303AC04C11875CDF7DB9E8C5E5973 E Global\MSI0000
"C:\Program Files (x86)\AVG\Av\avgidsagenta.exe"
C:\Program Files (x86)\AVG\Av\avgcsrva.exe /pipeName=44800c66-0200-0000-fb6d-8f76b46e5015 /binaryPath="C:\Program Files (x86)\AVG\Av\\" /logPath=C:\Windows\system32\config\systemprofile\AppData\Local\Avg\log\av16 /logCfgPath=C:\ProgramData\Avg\log\av16
"C:\Users\uzivatel\Desktop\RSITx64.exe"
"C:\Program Files (x86)\AVG\Av\avgwdsvca.exe"
"C:\Program Files (x86)\AVG\Av\avgnsa.exe"
"C:\Program Files (x86)\AVG\Av\avgemca.exe"
C:\Program Files (x86)\AVG\Av\avgrsa.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.centrum.cz/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.242 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon My Image Garden
"Path"=C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.242 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-04-29 2134648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-04-29 1725056]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SONY VGP-UPR1 (Display Adapter)"=C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe [2008-08-28 233472]
"Apoint"=C:\Program Files\Apoint\Apoint.exe [2010-06-03 212480]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"KiesPreload"=C:\Program Files (x86)\Samsung\Kies\Kies.exe [2015-04-28 1566016]
""=C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2015-04-28 1015104]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-02-10 50599552]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-01-21 61440]
"AVG_UI"=C:\Program Files (x86)\AVG\Av\avuirunnerx.exe [2016-05-04 32528]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2015-04-28 311616]
"AvgUi"=C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [2016-04-22 186640]
"CanonQuickMenu"=C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [2014-01-17 1284680]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O2 Internet
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-05-21 09:11:03 ----D---- C:\Program Files\trend micro
2016-05-21 09:11:02 ----D---- C:\rsit
2016-05-21 09:09:35 ----D---- C:\Users\uzivatel\AppData\Roaming\SumatraPDF
2016-05-21 09:09:31 ----D---- C:\Program Files\SumatraPDF
2016-05-21 09:08:16 ----SHD---- C:\Config.Msi
2016-05-21 08:35:56 ----D---- C:\AdwCleaner
2016-05-20 18:17:30 ----D---- C:\Program Files (x86)\Seznam.cz
2016-05-20 18:16:19 ----D---- C:\Users\uzivatel\AppData\Roaming\Seznam.cz
2016-05-20 18:16:08 ----D---- C:\Program Files (x86)\TeamViewer
2016-05-11 22:46:23 ----A---- C:\Windows\system32\win32k.sys
2016-05-11 22:46:17 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-05-11 22:46:17 ----A---- C:\Windows\system32\tzres.dll
2016-05-11 22:46:06 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2016-05-11 22:46:06 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2016-05-11 22:46:06 ----A---- C:\Windows\system32\cdd.dll
2016-05-11 22:46:05 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2016-05-11 22:46:05 ----A---- C:\Windows\system32\d3d10level9.dll
2016-05-11 22:46:02 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2016-05-11 22:46:02 ----A---- C:\Windows\system32\gdi32.dll
2016-05-11 22:46:00 ----A---- C:\Windows\system32\jnwmon.dll
2016-05-11 22:45:58 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2016-05-11 22:45:58 ----A---- C:\Windows\system32\InkEd.dll
2016-05-11 22:45:40 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-05-11 22:45:40 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-05-11 22:45:40 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-05-11 22:45:40 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-05-11 22:45:40 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-05-11 22:45:40 ----A---- C:\Windows\system32\iernonce.dll
2016-05-11 22:45:40 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-05-11 22:45:40 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-05-11 22:45:39 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-05-11 22:45:39 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-05-11 22:45:39 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-05-11 22:45:39 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-05-11 22:45:39 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-05-11 22:45:39 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-05-11 22:45:39 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-05-11 22:45:39 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-05-11 22:45:39 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-05-11 22:45:39 ----A---- C:\Windows\system32\inseng.dll
2016-05-11 22:45:39 ----A---- C:\Windows\system32\ie4uinit.exe
2016-05-11 22:45:37 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-05-11 22:45:37 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-05-11 22:45:37 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-05-11 22:45:37 ----A---- C:\Windows\system32\urlmon.dll
2016-05-11 22:45:37 ----A---- C:\Windows\system32\occache.dll
2016-05-11 22:45:37 ----A---- C:\Windows\system32\iedkcs32.dll
2016-05-11 22:45:36 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-05-11 22:45:36 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-05-11 22:45:36 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-05-11 22:45:36 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-05-11 22:45:36 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-05-11 22:45:36 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-05-11 22:45:35 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-05-11 22:45:35 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-05-11 22:45:35 ----A---- C:\Windows\system32\msfeeds.dll
2016-05-11 22:45:35 ----A---- C:\Windows\system32\iesetup.dll
2016-05-11 22:45:35 ----A---- C:\Windows\system32\dxtrans.dll
2016-05-11 22:45:34 ----A---- C:\Windows\system32\iertutil.dll
2016-05-11 22:45:34 ----A---- C:\Windows\system32\ieapfltr.dll
2016-05-11 22:45:33 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-05-11 22:45:33 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-05-11 22:45:33 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-05-11 22:45:32 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-05-11 22:45:32 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-05-11 22:45:32 ----A---- C:\Windows\system32\vbscript.dll
2016-05-11 22:45:32 ----A---- C:\Windows\system32\jsproxy.dll
2016-05-11 22:45:31 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-05-11 22:45:30 ----A---- C:\Windows\system32\ieui.dll
2016-05-11 22:45:30 ----A---- C:\Windows\system32\ieframe.dll
2016-05-11 22:45:30 ----A---- C:\Windows\system32\dxtmsft.dll
2016-05-11 22:45:29 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-05-11 22:45:29 ----A---- C:\Windows\system32\mshtmled.dll
2016-05-11 22:45:28 ----A---- C:\Windows\system32\webcheck.dll
2016-05-11 22:45:28 ----A---- C:\Windows\system32\jscript9diag.dll
2016-05-11 22:45:28 ----A---- C:\Windows\system32\jscript.dll
2016-05-11 22:45:28 ----A---- C:\Windows\system32\ieUnatt.exe
2016-05-11 22:45:27 ----A---- C:\Windows\system32\wininet.dll
2016-05-11 22:45:27 ----A---- C:\Windows\system32\jscript9.dll
2016-05-11 22:45:26 ----A---- C:\Windows\system32\msrating.dll
2016-05-11 22:45:26 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-05-11 22:45:25 ----A---- C:\Windows\system32\mshtml.dll
2016-05-11 22:44:38 ----A---- C:\Windows\system32\rpcrt4.dll
2016-05-11 22:44:38 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-05-11 22:44:37 ----A---- C:\Windows\system32\lsasrv.dll
2016-05-11 22:44:37 ----A---- C:\Windows\system32\kerberos.dll
2016-05-11 22:44:36 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-05-11 22:44:36 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-05-11 22:44:36 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-05-11 22:44:36 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-05-11 22:44:35 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-05-11 22:44:35 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-05-11 22:44:35 ----A---- C:\Windows\system32\ntdll.dll
2016-05-11 22:44:35 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-05-11 22:44:35 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-05-11 22:44:35 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-05-11 22:44:35 ----A---- C:\Windows\system32\certcli.dll
2016-05-11 22:44:34 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-05-11 22:44:34 ----A---- C:\Windows\system32\wow64win.dll
2016-05-11 22:44:34 ----A---- C:\Windows\system32\smss.exe
2016-05-11 22:44:34 ----A---- C:\Windows\system32\schannel.dll
2016-05-11 22:44:34 ----A---- C:\Windows\system32\msv1_0.dll
2016-05-11 22:44:34 ----A---- C:\Windows\system32\kernel32.dll
2016-05-11 22:44:34 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-05-11 22:44:34 ----A---- C:\Windows\system32\advapi32.dll
2016-05-11 22:44:33 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-05-11 22:44:33 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-05-11 22:44:33 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-05-11 22:44:33 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-05-11 22:44:33 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\wow64.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\winsrv.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\wdigest.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\TSpkg.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\sspicli.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\srcore.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\rpchttp.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\ncrypt.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\KernelBase.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-05-11 22:44:33 ----A---- C:\Windows\system32\csrsrv.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\conhost.exe
2016-05-11 22:44:32 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-05-11 22:44:32 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-05-11 22:44:32 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-05-11 22:44:32 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-05-11 22:44:32 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-05-11 22:44:32 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-05-11 22:44:32 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\wow64cpu.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\sspisrv.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\srclient.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\secur32.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\rstrui.exe
2016-05-11 22:44:32 ----A---- C:\Windows\system32\ntvdm64.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\lsass.exe
2016-05-11 22:44:32 ----A---- C:\Windows\system32\drivers\appid.sys
2016-05-11 22:44:32 ----A---- C:\Windows\system32\cryptbase.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\credssp.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\appidsvc.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-05-11 22:44:32 ----A---- C:\Windows\system32\appidapi.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-05-11 22:44:31 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-05-11 22:44:31 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-05-11 22:44:31 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-05-11 22:44:31 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-05-11 22:44:31 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-05-11 22:44:31 ----A---- C:\Windows\system32\auditpol.exe
2016-05-11 22:44:31 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-05-11 22:44:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-05-11 22:44:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-05-11 22:44:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-11 22:44:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-05-11 22:44:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-05-11 22:44:29 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-05-11 22:44:29 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-05-11 22:44:29 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-05-11 22:44:29 ----A---- C:\Windows\SYSWOW64\user.exe
2016-05-11 22:44:29 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-05-11 22:44:29 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-05-11 22:44:29 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-05-11 22:44:29 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-05-11 22:44:29 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-05-11 22:44:29 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-05-11 22:44:29 ----A---- C:\Windows\system32\msobjs.dll
2016-05-11 22:44:29 ----A---- C:\Windows\system32\msaudite.dll
2016-05-11 22:44:29 ----A---- C:\Windows\system32\apisetschema.dll
2016-05-11 22:44:29 ----A---- C:\Windows\system32\adtschema.dll
2016-05-11 22:43:52 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2016-05-11 22:43:52 ----A---- C:\Windows\system32\WindowsCodecs.dll
2016-05-04 16:58:32 ----A---- C:\Windows\system32\drivers\avguniva.sys
======List of files/folders modified in the last 1 month======
2016-05-21 09:11:20 ----SHD---- C:\Windows\Installer
2016-05-21 09:11:08 ----D---- C:\Windows\Temp
2016-05-21 09:11:03 ----RD---- C:\Program Files
2016-05-21 09:10:59 ----D---- C:\Program Files\Common Files\AV
2016-05-21 09:10:36 ----D---- C:\Users\uzivatel\AppData\Roaming\Skype
2016-05-21 09:10:25 ----D---- C:\Windows\system32\drivers
2016-05-21 09:10:25 ----D---- C:\Windows\inf
2016-05-21 09:10:20 ----D---- C:\Windows\system32\DriverStore
2016-05-21 09:07:36 ----D---- C:\ProgramData\MFAData
2016-05-21 09:04:00 ----D---- C:\Windows\SysWOW64
2016-05-21 09:03:14 ----SHD---- C:\System Volume Information
2016-05-21 08:57:27 ----D---- C:\Windows
2016-05-21 08:56:12 ----D---- C:\Windows\system32\config
2016-05-21 08:50:52 ----D---- C:\Windows\Prefetch
2016-05-21 08:44:28 ----D---- C:\Windows\system32\Tasks
2016-05-21 08:44:26 ----D---- C:\Program Files\Common Files
2016-05-21 08:43:52 ----D---- C:\Program Files (x86)\Common Files
2016-05-21 08:43:41 ----RD---- C:\Program Files (x86)
2016-05-21 08:43:25 ----HD---- C:\ProgramData
2016-05-21 08:27:42 ----D---- C:\Windows\system32\drivers\etc
2016-05-20 18:19:26 ----RSD---- C:\Windows\Fonts
2016-05-18 14:12:57 ----D---- C:\ProgramData\CanonIJPLM
2016-05-16 20:24:07 ----HD---- C:\ProgramData\CanonIJMIG
2016-05-14 14:02:32 ----D---- C:\Windows\debug
2016-05-14 03:15:29 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-05-13 10:34:44 ----D---- C:\Windows\system32\appraiser
2016-05-12 20:44:46 ----D---- C:\Windows\rescache
2016-05-12 19:55:33 ----D---- C:\Windows\Microsoft.NET
2016-05-12 19:54:35 ----RSD---- C:\Windows\assembly
2016-05-12 19:41:54 ----D---- C:\Windows\winsxs
2016-05-12 19:32:01 ----D---- C:\Windows\System32
2016-05-12 19:32:01 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-05-12 19:20:35 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-05-12 19:20:35 ----D---- C:\Windows\system32\cs-CZ
2016-05-12 19:20:34 ----D---- C:\Windows\ehome
2016-05-12 19:20:33 ----D---- C:\Program Files\Windows Journal
2016-05-12 19:20:32 ----D---- C:\Program Files\Internet Explorer
2016-05-12 19:20:31 ----D---- C:\Windows\SYSWOW64\en-US
2016-05-12 19:20:28 ----D---- C:\Windows\system32\en-US
2016-05-12 19:20:24 ----D---- C:\Program Files (x86)\Internet Explorer
2016-05-12 19:20:11 ----D---- C:\Windows\AppPatch
2016-05-12 19:20:09 ----D---- C:\Windows\system32\Boot
2016-05-12 17:30:19 ----D---- C:\ProgramData\Microsoft Help
2016-05-12 17:21:46 ----D---- C:\Windows\system32\MRT
2016-05-12 17:06:40 ----A---- C:\Windows\system32\MRT.exe
2016-05-11 22:41:56 ----D---- C:\Windows\system32\catroot2
2016-05-11 09:36:18 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-05-09 10:50:43 ----SD---- C:\Windows\SYSWOW64\GWX
2016-05-09 10:50:43 ----SD---- C:\Windows\system32\GWX
2016-05-08 15:24:10 ----RD---- C:\Program Files (x86)\Skype
2016-05-03 14:05:35 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-04-24 23:41:16 ----D---- C:\Windows\Tasks
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2016-01-26 272304]
R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2016-02-16 360736]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2016-03-29 248576]
R0 AvgRkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2016-04-14 51968]
R0 Avguniva;AVG Universal Driver; C:\Windows\system32\DRIVERS\avguniva.sys [2016-05-04 71936]
R0 RapportHades64;RapportHades64; C:\Windows\System32\Drivers\RapportHades64.sys [2016-05-17 215560]
R0 RapportKE64;RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [2016-05-17 470056]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2016-02-16 162592]
R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6a.sys [2015-08-29 97208]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2016-04-20 307456]
R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2015-10-21 284080]
R1 AvgTdiA;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2015-10-08 302000]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-04-24 26528]
R1 RapportCerberus_1609040;RapportCerberus_1609040; \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_1609040.sys [2016-05-17 1157160]
R1 RapportEI64;RapportEI64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [2016-05-17 544360]
R1 RapportPG64;RapportPG64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [2016-05-17 525992]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2015-04-24 11922944]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2015-04-24 359936]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2010-06-03 299568]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 huawei_enumerator;huawei_enumerator; C:\Windows\system32\DRIVERS\ew_jubusenum.sys [2013-11-30 91648]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-04-24 4408792]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2015-04-24 8623856]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2015-04-24 237968]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
R3 SFEP;Sony Firmware Extension Parser; C:\Windows\system32\DRIVERS\SFEP.sys [2007-08-03 11392]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2015-04-24 34544]
R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [2016-03-29 32304]
S0 dlkmdldr;dlkmdldr; C:\Windows\system32\drivers\dlkmdldr.sys [2008-08-18 13424]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2015-04-24 11922944]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 dlkmd;dlkmd; C:\Windows\system32\drivers\dlkmd.sys [2008-08-18 311408]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\Windows\system32\DRIVERS\ew_hwusbdev.sys [2013-01-25 109568]
S3 ew_usbenumfilter;huawei_CompositeFilter; C:\Windows\system32\DRIVERS\ew_usbenumfilter.sys [2012-12-22 14976]
S3 ewusbnet;HUAWEI USB-NDIS miniport; C:\Windows\system32\DRIVERS\ewusbnet.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2013-11-30 226176]
S3 hwusb_cdcacm;hwusb_cdcacm; C:\Windows\system32\DRIVERS\ew_cdcacm.sys [2014-07-25 125952]
S3 hwusb_wwanecm;hwusb_wwanecm; C:\Windows\system32\DRIVERS\ew_wwanecm.sys [2014-09-30 380672]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 64bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-04-22 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2015-04-24 238080]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [2016-05-04 5155904]
R2 avgsvc;AVG Service; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [2016-04-22 1078544]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [2016-05-04 710232]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2016-04-29 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2016-04-29 1773696]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DisplayLinkService;DisplayLink Service; C:\Program Files\DisplayLink Core Software\DisplayLinkService.exe [2008-08-18 733544]
R2 HWDeviceService64.exe;HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [2014-01-15 351824]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2013-06-28 84616]
R2 RapportMgmtService;Rapport Management Service; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2016-05-17 2382832]
R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [2014-10-13 743688]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-06-01 5495056]
R2 TuneUp.UtilitiesSvc;AVG PC TuneUp Service; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2016-03-29 4584208]
S2 avgfws;AVG Firewall; C:\Program Files (x86)\AVG\Av\avgfwsa.exe [2016-05-04 1999224]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112]
S2 O2 Internet. RunOuc;O2 Internet. OUC; C:\Program Files (x86)\O2 Internet\UpdateDog\ouc.exe [2013-10-26 651856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-14 269504]
S3 AvgAMPS;AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [2016-05-04 638968]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-04-23 114688]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-04-28 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
-----------------EOF-----------------
Prosím o kontrolu logu z rsit mé kamarádky. Prosila mě o radu že má strašně pomalý comp. Udělal jsem log z Rsit a ještě před tím Adwcleaner. Posílám nejprve log z Adwcleneru a následně z Rsit. Předem vám děkuji za pomoc a ochotu.
# AdwCleaner v5.117 - Log soubor vytvořen 21/05/2016 o 08:43:14
# Aktualizováno 15/05/2016 by Xplode
# Databáze : 2016-05-15.2 [Server]
# Operační systém : Windows 7 Home Premium Service Pack 1 (X64)
# Jméno uživatele : uzivatel - UZIVATEL-PC
# Spuštěno z : C:\Users\uzivatel\Desktop\AdwCleaner.exe
# Volba : Čištění
# Podpora : http://toolslib.net/forum
***** [ Služby ] *****
[-] Služba smazáno : WtuSystemSupport
[-] Služba smazáno : vToolbarUpdater40.3.1
***** [ Složky ] *****
[-] Složka smazáno : C:\ProgramData\AVG Secure Search
[-] Složka smazáno : C:\ProgramData\AVG Security Toolbar
[-] Složka smazáno : C:\ProgramData\avg web tuneup
[#] Složka smazáno : C:\ProgramData\Application Data\AVG Secure Search
[#] Složka smazáno : C:\ProgramData\Application Data\AVG Security Toolbar
[#] Složka smazáno : C:\ProgramData\Application Data\avg web tuneup
[-] Složka smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
[-] Složka smazáno : C:\Program Files (x86)\Ask.com
[-] Složka smazáno : C:\Program Files (x86)\myfree codec
[-] Složka smazáno : C:\Program Files (x86)\avg web tuneup
[-] Složka smazáno : C:\Program Files (x86)\Common Files\AVG Secure Search
[-] Složka smazáno : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
[-] Složka smazáno : C:\Users\uzivatel\AppData\Local\avg web tuneup
[-] Složka smazáno : C:\Users\uzivatel\AppData\LocalLow\AskToolbar
[-] Složka smazáno : C:\Users\uzivatel\AppData\LocalLow\avg web tuneup
[-] Složka smazáno : C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\extensions\toolbar@ask.com
[-] Složka smazáno : C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\extensions\_e5Members_@www.productivityboss.com
[-] Složka smazáno : C:\Program Files\Common Files\AVG Secure Search
***** [ Soubory ] *****
[-] Soubor smazáno : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml
[-] Soubor smazáno : C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\extensions\Avg@toolbar.xpi
[-] Soubor smazáno : C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\searchplugins\Askcom.xml
[-] Soubor smazáno : C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\searchplugins\ask-web-search.xml
[-] Soubor smazáno : C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\searchplugins\avg-secure-search.xml
***** [ DLLs ] *****
***** [ WMI ] *****
***** [ Zástupci ] *****
***** [ Naplánované úkoly ] *****
[-] Úkol smazáno : Scheduled Update for Ask Toolbar
***** [ Registr ] *****
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
[-] Klávesa smazáno : HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh
[-] Klávesa smazáno : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\s
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd.1
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi.1
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj.1
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{CA3A5461-96B5-46DD-9341-5350D3C94615}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\TypeLib\{4BC8AD89-AC5F-4DBD-A38F-C355C7DD33D7}
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Klávesa smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
[-] Klávesa smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Klávesa smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Klávesa smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Klávesa smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Hodnota smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
[-] Klávesa smazáno : HKCU\Software\Ask.com
[-] Klávesa smazáno : HKCU\Software\Myfree Codec
[-] Klávesa smazáno : HKCU\Software\AppDataLow\Software\AskToolbar
[-] Klávesa smazáno : HKLM\SOFTWARE\AskToolbar
[-] Klávesa smazáno : HKLM\SOFTWARE\Myfree Codec
[-] Klávesa smazáno : HKLM\SOFTWARE\AVG Tuneup
[-] Klávesa smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
[-] Klávesa smazáno : HKU\.DEFAULT\Software\AskToolbar
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
[-] Klávesa smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
[-] Data Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Obnoveno : HKU\S-1-5-21-4217708016-2405288471-3794538976-1000\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Klávesa smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Data Obnoveno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Klávesa smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FF4E1D1C-0CFB-4C80-BFF6-2228ABBCF297}
[-] Data Obnoveno : HKU\S-1-5-21-4217708016-2405288471-3794538976-1000\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Hodnota smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
***** [ Webové prohlížeče ] *****
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("browser.search.defaultenginename", "Ask Web Search");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("browser.search.selectedEngine", "Ask Web Search");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=8930A028-0AC3-4506-84F8-591CC2F7AA2D&n=781b1c31&ind=2015042609&p2=^BYM^xdm002^YYA^cz&searchfor="[...]
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.BUTTON_STRUCTURE", "[{\"b\":224509940,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":224509941,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.search.defaultenginename.prev", "Google");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.search.defaultenginename.savedPrev", "true");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.search.defaultenginename.tb", "Ask Web Search");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.search.selectedEngine.prev", "Google");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.search.selectedEngine.savedPrev", "true");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.search.selectedEngine.tb", "Ask Web Search");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.homepage.prev", "hxxp://www.centrum.cz/?utm_source=ch-sethp&utm ... paign=home");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.homepage.savedPrev", "true");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=8930A028-0AC3-4506-84F8-591CC2F7AA2D&n=781b1c31&p2=^BYM^xdm002^YYA^cz");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.page.savedPrev", 1);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.page.tb", 1);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.browser.version.last", "46.0");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.competitorDNS", "{\"comment\":\"refresh every 1 week (7*24*60*60*1000)\",\"refreshPeriod\":604800000,\"list\":[{\"url\":\"hxxp://www.dnsrsearch.com/[...]
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.firstKnownVersion", "6.85.6.30360");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=8930A028-0AC3-4506-84F8-591CC2F7AA2D&n=781b1c31&p2=^BYM^xdm002^YYA^cz");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.hp.enabled", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.hp.guardType", "HPR");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.hp.user.defined", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.initialized", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installKeysSource", "Cookies");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installType", "XPI");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installation.contextKey", "");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installation.dlpCountryCode", "CZ");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installation.installDate", "2015042609");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installation.partnerId", "^BYM^xdm002^YYA^cz");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installation.partnerSubId", "");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installation.pixelUrl", "hxxp://free.productivityboss.com/install_pixels.jhtml?partner=^BYM^xdm002^YYA^cz&coId=35fed32f73ee45d88f1d3a42faa4de85&tbGu[...]
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installation.success", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.installation.toolbarId", "8930A028-0AC3-4506-84F8-591CC2F7AA2D");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.isCompliantUninstallImplementation", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.lastActivePing", "1463810977717");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.lastKnownVersion", "7.38.8.46590");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.lostEngine", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.lssState", "{\"previousLocales\":[\"cs\",\"en-US\",\"en\"],\"supportedLocales\":[\"de\",\"es\",\"pt\",\"ja\",\"en\"],\"defaultLocale\":\"en\",\"supp[...]
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.options.defaultSearch", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.options.homePageEnabled", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.options.keywordEnabled", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.options.tabEnabled", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.partnerPixelFired", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.productDeliveryOption.language", "en");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.productDeliveryOption.type", "Toolbar");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.searchHistory", "www.centrum.czwww.seznam.czTaati\rková matrace 1+1 zdarma ERGO COMFORT\r\n\r\nPoradíme vám\r\n\r\ntým odborníko Intena\r\nVolej[...]
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.successUrl", "hxxp://free.productivityboss.com/installComplete.jhtml");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.toolbar.ownSearch", false);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.toolbar.versionChanged", false);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.toolbarCollapsed", false);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.uninstallTasks", "{\"prefBranchesToDelete\":[\"extensions.toolbar.mindspark._e5Members_.\"],\"filesToDelete\":[\"C:\\\\Users\\\\uzivatel\\\\AppData\[...]
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark._e5Members_.weather.location", "10001");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark.hp.enabled", true);
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "productivityboss@mindspark.com");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("extensions.toolbar.mindspark.lastInstalled", "productivityboss@mindspark.com");
[-] [C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default\prefs.js] smazáno : user_pref("keyword.URL", "hxxp://int.search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=8930A028-0AC3-4506-84F8-591CC2F7AA2D&n=781b1c31&ind=2015042609&p2=^BYM^xdm002^YYA^cz&searchfor=");
*************************
:: "Tracing" odstraněných kláves
:: Nastavení Winsock odstraněno
*************************
C:\AdwCleaner\AdwCleaner[C1].txt - [23676 bytes] - [21/05/2016 08:43:14]
C:\AdwCleaner\AdwCleaner[S1].txt - [24649 bytes] - [21/05/2016 08:36:09]
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [23824 bytes] ##########
-----------------------------------------------------------------------------------------------------------
Zde Rsit
Logfile of random's system information tool 1.10 (written by random/random)
Run by uzivatel at 2016-05-21 09:11:02
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 37 GB (32%) free of 114 GB
Total RAM: 4094 MB (48% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:11:25, on 21.5.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18315)
Boot mode: Normal
Running processes:
C:\ProgramData\DatacardService\DCSHelper.exe
C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe
C:\Program Files (x86)\Samsung\Kies\Kies.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.exe
C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
C:\Program Files (x86)\AVG\Setup\avgsetupx.exe
C:\Windows\Temp\AvgSetup\d54aa687-1121-47cc-815a-d1577b0a95e4\install\av\avgmfapx.exe
C:\Windows\syswow64\MsiExec.exe
C:\Windows\syswow64\MsiExec.exe
C:\Program Files\trend micro\uzivatel.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\Av\avuirunnerx.exe" C:\Program Files (x86)\AVG\Av\avgui.exe
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
O4 - HKLM\..\Run: [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
O4 - HKCU\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
O4 - HKCU\..\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Global Startup: O2 Internet
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{04AD0372-D291-4A4B-B7AE-D888020D9733}: NameServer = 160.218.161.60 194.228.211.33
O17 - HKLM\System\CCS\Services\Tcpip\..\{19F92524-B21C-4931-905B-B4E38C90806C}: NameServer = 160.218.161.60 194.228.211.33
O17 - HKLM\System\CS1\Services\Tcpip\..\{04AD0372-D291-4A4B-B7AE-D888020D9733}: NameServer = 160.218.161.60 194.228.211.33
O17 - HKLM\System\CS2\Services\Tcpip\..\{04AD0372-D291-4A4B-B7AE-D888020D9733}: NameServer = 160.218.161.60 194.228.211.33
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AvgAMPS - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgamps.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgfwsa.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
O23 - Service: DisplayLink Service (DisplayLinkService) - DisplayLink Corp. - C:\Program Files\DisplayLink Core Software\DisplayLinkService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HWDeviceService64.exe - Unknown owner - C:\ProgramData\DatacardService\HWDeviceService64.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: O2 Internet. OUC (O2 Internet. RunOuc) - Unknown owner - C:\Program Files (x86)\O2 Internet\UpdateDog\ouc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Rapport Management Service (RapportMgmtService) - IBM Corp. - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: AVG PC TuneUp Service (TuneUp.UtilitiesSvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10135 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
atieclxx
"C:\Program Files\DisplayLink Core Software\DisplayLinkService.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\Windows\System32\svchost.exe -k utcsvc
"C:\ProgramData\DatacardService\HWDeviceService64.exe" -/service
"C:\ProgramData\DatacardService\DCSHelper.exe"
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\ProgramData\O2 Internet\OnlineUpdate\ouc.exe" "C:/Program Files (x86)/O2 Internet/UpdateDog/"
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
"C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe"
"C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe"
"C:\Program Files\Apoint\Apoint.exe"
"C:\Program Files (x86)\Samsung\Kies\Kies.exe" /preload
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"
"C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE" /logon
/fmw.trayonly
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\msiexec.exe /V
"C:\Program Files\Apoint\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
"C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe" /TUStart /pid:3036
"Apntex.exe"
"C:\Program Files\Apoint\Apvfb.exe"
\??\C:\Windows\system32\conhost.exe "-40432470253637063812216305531069982264659437041784178461360560920-1371212495
"taskhost.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\TeamViewer\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
"C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log
ctfmon.exe
"C:\Program Files (x86)\AVG\Framework\Common\avguix.exe" --type=renderer --disable-gpu-compositing --disable-pinch --force-device-scale-factor=1.000000 --no-sandbox --disable-direct-write --enable-deferred-image-decoding --lang=en-US --lang=en-US --log-file="C:\Users\uzivatel\AppData\Local\Avg\log\fmw1\chromium_dbg.log" --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3276.0.2044054122\2140792196" /prefetch:673131151
C:\Windows\splwow64.exe 8192
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE"
"C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.exe" /MainProcess 3256 /PrinterName "Canon MG5600 series Printer" /ScannerName "Canon MG5600 series" /Language cs-CZ /Startup
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe"
"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe" -servicelaunch=true
"C:\Program Files (x86)\AVG\Setup\avgsetupx.exe" /install=fmw,zen,av /fmw.subscription_package_id=1 /av.ProductType=PROT /av.trayonly=true /av.Caller=ZEN /av.NoDesktopShortcut=true /av.LicenseKeyCoded=NzZlMiUecSc0ezREBGApQAZYOHAOPS4YMiFhDjRaeSEgAGBLDBcRCEdWLwFQBxpaWB5VD0RFEUcRBVQYDEdSAgQXTxIRUggHXAcIR14fGRdPEhFDCQdQV1MRRRUbVAEARVJSWxcDCF9CFVUPV1oDFQ1bFwcMRVgTFkEcBl1oExhAGx1WRVJNA0wUHxUcGWodCEBfUk0XMysHdTYzBUxYdgI0RnBCWwJ0NEEGQV8KBUBAdjZddXFGTnFHXgQDRFUZVxpWRQYSRyoKXFgbHlBXUxFQHQQYExtWUgQYGENQHgZFTwBXFAhkODYETg0KAERBU0BRCHozAHYzKkp/FRJZRBBGeSojYB4henQnXEIiCAdACj5xNAFhbyYBbDknWnFbR3IxKEp1HDsCMkJLcyMOVjYODgo= /uicc="{\"areo\":true}"
consent.exe 1356 1572 00000000036E6A70
/NoFmwSwitch /uilevel=silent /dontrestart /pipecontrol=avgavsetup /appmode=downloadmanager /targetinstallationpath="C:\Program Files (x86)\AVG\Av" /caller=ZEN /installfeatures=fea_AntiSpm|fea_Antivir|fea_Emails__EMC|fea_Emails__Outlook|fea_FW|fea_IDP|fea_OnlnSc|fea_SrchSrf__Surf /licensekeycoded=NzZlMiUecSc0ezREBGApQAZYOHAOPS4YMiFhDjRaeSEgAGBLDBcRCEdWLwFQBxpaWB5VD0RFEUcRBVQYDEdSAgQXTxIRUggHXAcIR14fGRdPEhFDCQdQV1MRRRUbVAEARVJSWxcDCF9CFVUPV1oDFQ1bFwcMRVgTFkEcBl1oExhAGx1WRVJNA0wUHxUcGWodCEBfUk0XMysHdTYzBUxYdgI0RnBCWwJ0NEEGQV8KBUBAdjZddXFGTnFHXgQDRFUZVxpWRQYSRyoKXFgbHlBXUxFQHQQYTVADGkZOFwhSYH8xRg5NXwABQ0FQQFJ+dAc0czIiBVkfHgc3UQNmBQFHEA9aHAoPBzwuZwcJWHQdOEJ9NUB0PS9fRklARx0wWHYhJnAfGHRlWxNRNFQO /nodesktopshortcut=1 /producttype=PROT /selectedlanguage=1029 /trayonly=1
C:\Windows\system32\MsiExec.exe -Embedding A9AAA556644FB557C40D684061271CDC C
C:\Windows\syswow64\MsiExec.exe -Embedding D0FDA975000A12952924E9E84FD98E76 C
C:\Windows\system32\MsiExec.exe -Embedding BE71605DE4D6F5A62E17DB4E5420C726
C:\Windows\syswow64\MsiExec.exe -Embedding A67C7FA85BF9B6F202169B4D8B00AF20
C:\Windows\system32\MsiExec.exe -Embedding E729777BE0E95CBB52F5622DAAD3234F E Global\MSI0000
"c:\program files (x86)\teamviewer\TeamViewer_Desktop.exe" --IPCport 5939
taskhost.exe $(Arg0)
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\syswow64\MsiExec.exe -Embedding 560303AC04C11875CDF7DB9E8C5E5973 E Global\MSI0000
"C:\Program Files (x86)\AVG\Av\avgidsagenta.exe"
C:\Program Files (x86)\AVG\Av\avgcsrva.exe /pipeName=44800c66-0200-0000-fb6d-8f76b46e5015 /binaryPath="C:\Program Files (x86)\AVG\Av\\" /logPath=C:\Windows\system32\config\systemprofile\AppData\Local\Avg\log\av16 /logCfgPath=C:\ProgramData\Avg\log\av16
"C:\Users\uzivatel\Desktop\RSITx64.exe"
"C:\Program Files (x86)\AVG\Av\avgwdsvca.exe"
"C:\Program Files (x86)\AVG\Av\avgnsa.exe"
"C:\Program Files (x86)\AVG\Av\avgemca.exe"
C:\Program Files (x86)\AVG\Av\avgrsa.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\jjbyfpl8.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.centrum.cz/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.242 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon My Image Garden
"Path"=C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.242 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-04-29 2134648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-04-29 1725056]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SONY VGP-UPR1 (Display Adapter)"=C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe [2008-08-28 233472]
"Apoint"=C:\Program Files\Apoint\Apoint.exe [2010-06-03 212480]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"KiesPreload"=C:\Program Files (x86)\Samsung\Kies\Kies.exe [2015-04-28 1566016]
""=C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2015-04-28 1015104]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2016-02-10 50599552]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-01-21 61440]
"AVG_UI"=C:\Program Files (x86)\AVG\Av\avuirunnerx.exe [2016-05-04 32528]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2015-04-28 311616]
"AvgUi"=C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [2016-04-22 186640]
"CanonQuickMenu"=C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [2014-01-17 1284680]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O2 Internet
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2016-05-21 09:11:03 ----D---- C:\Program Files\trend micro
2016-05-21 09:11:02 ----D---- C:\rsit
2016-05-21 09:09:35 ----D---- C:\Users\uzivatel\AppData\Roaming\SumatraPDF
2016-05-21 09:09:31 ----D---- C:\Program Files\SumatraPDF
2016-05-21 09:08:16 ----SHD---- C:\Config.Msi
2016-05-21 08:35:56 ----D---- C:\AdwCleaner
2016-05-20 18:17:30 ----D---- C:\Program Files (x86)\Seznam.cz
2016-05-20 18:16:19 ----D---- C:\Users\uzivatel\AppData\Roaming\Seznam.cz
2016-05-20 18:16:08 ----D---- C:\Program Files (x86)\TeamViewer
2016-05-11 22:46:23 ----A---- C:\Windows\system32\win32k.sys
2016-05-11 22:46:17 ----A---- C:\Windows\SYSWOW64\tzres.dll
2016-05-11 22:46:17 ----A---- C:\Windows\system32\tzres.dll
2016-05-11 22:46:06 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2016-05-11 22:46:06 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2016-05-11 22:46:06 ----A---- C:\Windows\system32\cdd.dll
2016-05-11 22:46:05 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2016-05-11 22:46:05 ----A---- C:\Windows\system32\d3d10level9.dll
2016-05-11 22:46:02 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2016-05-11 22:46:02 ----A---- C:\Windows\system32\gdi32.dll
2016-05-11 22:46:00 ----A---- C:\Windows\system32\jnwmon.dll
2016-05-11 22:45:58 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2016-05-11 22:45:58 ----A---- C:\Windows\system32\InkEd.dll
2016-05-11 22:45:40 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-05-11 22:45:40 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-05-11 22:45:40 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-05-11 22:45:40 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-05-11 22:45:40 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-05-11 22:45:40 ----A---- C:\Windows\system32\iernonce.dll
2016-05-11 22:45:40 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-05-11 22:45:40 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-05-11 22:45:39 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-05-11 22:45:39 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-05-11 22:45:39 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-05-11 22:45:39 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-05-11 22:45:39 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-05-11 22:45:39 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-05-11 22:45:39 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-05-11 22:45:39 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-05-11 22:45:39 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-05-11 22:45:39 ----A---- C:\Windows\system32\inseng.dll
2016-05-11 22:45:39 ----A---- C:\Windows\system32\ie4uinit.exe
2016-05-11 22:45:37 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-05-11 22:45:37 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-05-11 22:45:37 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-05-11 22:45:37 ----A---- C:\Windows\system32\urlmon.dll
2016-05-11 22:45:37 ----A---- C:\Windows\system32\occache.dll
2016-05-11 22:45:37 ----A---- C:\Windows\system32\iedkcs32.dll
2016-05-11 22:45:36 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-05-11 22:45:36 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-05-11 22:45:36 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-05-11 22:45:36 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-05-11 22:45:36 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-05-11 22:45:36 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-05-11 22:45:35 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-05-11 22:45:35 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-05-11 22:45:35 ----A---- C:\Windows\system32\msfeeds.dll
2016-05-11 22:45:35 ----A---- C:\Windows\system32\iesetup.dll
2016-05-11 22:45:35 ----A---- C:\Windows\system32\dxtrans.dll
2016-05-11 22:45:34 ----A---- C:\Windows\system32\iertutil.dll
2016-05-11 22:45:34 ----A---- C:\Windows\system32\ieapfltr.dll
2016-05-11 22:45:33 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-05-11 22:45:33 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-05-11 22:45:33 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-05-11 22:45:32 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-05-11 22:45:32 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-05-11 22:45:32 ----A---- C:\Windows\system32\vbscript.dll
2016-05-11 22:45:32 ----A---- C:\Windows\system32\jsproxy.dll
2016-05-11 22:45:31 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-05-11 22:45:30 ----A---- C:\Windows\system32\ieui.dll
2016-05-11 22:45:30 ----A---- C:\Windows\system32\ieframe.dll
2016-05-11 22:45:30 ----A---- C:\Windows\system32\dxtmsft.dll
2016-05-11 22:45:29 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-05-11 22:45:29 ----A---- C:\Windows\system32\mshtmled.dll
2016-05-11 22:45:28 ----A---- C:\Windows\system32\webcheck.dll
2016-05-11 22:45:28 ----A---- C:\Windows\system32\jscript9diag.dll
2016-05-11 22:45:28 ----A---- C:\Windows\system32\jscript.dll
2016-05-11 22:45:28 ----A---- C:\Windows\system32\ieUnatt.exe
2016-05-11 22:45:27 ----A---- C:\Windows\system32\wininet.dll
2016-05-11 22:45:27 ----A---- C:\Windows\system32\jscript9.dll
2016-05-11 22:45:26 ----A---- C:\Windows\system32\msrating.dll
2016-05-11 22:45:26 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-05-11 22:45:25 ----A---- C:\Windows\system32\mshtml.dll
2016-05-11 22:44:38 ----A---- C:\Windows\system32\rpcrt4.dll
2016-05-11 22:44:38 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-05-11 22:44:37 ----A---- C:\Windows\system32\lsasrv.dll
2016-05-11 22:44:37 ----A---- C:\Windows\system32\kerberos.dll
2016-05-11 22:44:36 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-05-11 22:44:36 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-05-11 22:44:36 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-05-11 22:44:36 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-05-11 22:44:35 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-05-11 22:44:35 ----A---- C:\Windows\SYSWOW64\certcli.dll
2016-05-11 22:44:35 ----A---- C:\Windows\system32\ntdll.dll
2016-05-11 22:44:35 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-05-11 22:44:35 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-05-11 22:44:35 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-05-11 22:44:35 ----A---- C:\Windows\system32\certcli.dll
2016-05-11 22:44:34 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-05-11 22:44:34 ----A---- C:\Windows\system32\wow64win.dll
2016-05-11 22:44:34 ----A---- C:\Windows\system32\smss.exe
2016-05-11 22:44:34 ----A---- C:\Windows\system32\schannel.dll
2016-05-11 22:44:34 ----A---- C:\Windows\system32\msv1_0.dll
2016-05-11 22:44:34 ----A---- C:\Windows\system32\kernel32.dll
2016-05-11 22:44:34 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-05-11 22:44:34 ----A---- C:\Windows\system32\advapi32.dll
2016-05-11 22:44:33 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-05-11 22:44:33 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-05-11 22:44:33 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-05-11 22:44:33 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-05-11 22:44:33 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\wow64.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\winsrv.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\wdigest.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\TSpkg.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\sspicli.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\srcore.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\rpchttp.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\ncrypt.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\KernelBase.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-05-11 22:44:33 ----A---- C:\Windows\system32\csrsrv.dll
2016-05-11 22:44:33 ----A---- C:\Windows\system32\conhost.exe
2016-05-11 22:44:32 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-05-11 22:44:32 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-05-11 22:44:32 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2016-05-11 22:44:32 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-05-11 22:44:32 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-05-11 22:44:32 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-05-11 22:44:32 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\wow64cpu.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\sspisrv.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\srclient.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\setbcdlocale.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\secur32.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\rstrui.exe
2016-05-11 22:44:32 ----A---- C:\Windows\system32\ntvdm64.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\lsass.exe
2016-05-11 22:44:32 ----A---- C:\Windows\system32\drivers\appid.sys
2016-05-11 22:44:32 ----A---- C:\Windows\system32\cryptbase.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\credssp.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\appidsvc.dll
2016-05-11 22:44:32 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2016-05-11 22:44:32 ----A---- C:\Windows\system32\appidapi.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-11 22:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-05-11 22:44:31 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-05-11 22:44:31 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-05-11 22:44:31 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-05-11 22:44:31 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-05-11 22:44:31 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-05-11 22:44:31 ----A---- C:\Windows\system32\auditpol.exe
2016-05-11 22:44:31 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-05-11 22:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-05-11 22:44:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-05-11 22:44:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-05-11 22:44:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-11 22:44:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-05-11 22:44:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-05-11 22:44:29 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-05-11 22:44:29 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-05-11 22:44:29 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-05-11 22:44:29 ----A---- C:\Windows\SYSWOW64\user.exe
2016-05-11 22:44:29 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-05-11 22:44:29 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-05-11 22:44:29 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-05-11 22:44:29 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-05-11 22:44:29 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-05-11 22:44:29 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-05-11 22:44:29 ----A---- C:\Windows\system32\msobjs.dll
2016-05-11 22:44:29 ----A---- C:\Windows\system32\msaudite.dll
2016-05-11 22:44:29 ----A---- C:\Windows\system32\apisetschema.dll
2016-05-11 22:44:29 ----A---- C:\Windows\system32\adtschema.dll
2016-05-11 22:43:52 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2016-05-11 22:43:52 ----A---- C:\Windows\system32\WindowsCodecs.dll
2016-05-04 16:58:32 ----A---- C:\Windows\system32\drivers\avguniva.sys
======List of files/folders modified in the last 1 month======
2016-05-21 09:11:20 ----SHD---- C:\Windows\Installer
2016-05-21 09:11:08 ----D---- C:\Windows\Temp
2016-05-21 09:11:03 ----RD---- C:\Program Files
2016-05-21 09:10:59 ----D---- C:\Program Files\Common Files\AV
2016-05-21 09:10:36 ----D---- C:\Users\uzivatel\AppData\Roaming\Skype
2016-05-21 09:10:25 ----D---- C:\Windows\system32\drivers
2016-05-21 09:10:25 ----D---- C:\Windows\inf
2016-05-21 09:10:20 ----D---- C:\Windows\system32\DriverStore
2016-05-21 09:07:36 ----D---- C:\ProgramData\MFAData
2016-05-21 09:04:00 ----D---- C:\Windows\SysWOW64
2016-05-21 09:03:14 ----SHD---- C:\System Volume Information
2016-05-21 08:57:27 ----D---- C:\Windows
2016-05-21 08:56:12 ----D---- C:\Windows\system32\config
2016-05-21 08:50:52 ----D---- C:\Windows\Prefetch
2016-05-21 08:44:28 ----D---- C:\Windows\system32\Tasks
2016-05-21 08:44:26 ----D---- C:\Program Files\Common Files
2016-05-21 08:43:52 ----D---- C:\Program Files (x86)\Common Files
2016-05-21 08:43:41 ----RD---- C:\Program Files (x86)
2016-05-21 08:43:25 ----HD---- C:\ProgramData
2016-05-21 08:27:42 ----D---- C:\Windows\system32\drivers\etc
2016-05-20 18:19:26 ----RSD---- C:\Windows\Fonts
2016-05-18 14:12:57 ----D---- C:\ProgramData\CanonIJPLM
2016-05-16 20:24:07 ----HD---- C:\ProgramData\CanonIJMIG
2016-05-14 14:02:32 ----D---- C:\Windows\debug
2016-05-14 03:15:29 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-05-13 10:34:44 ----D---- C:\Windows\system32\appraiser
2016-05-12 20:44:46 ----D---- C:\Windows\rescache
2016-05-12 19:55:33 ----D---- C:\Windows\Microsoft.NET
2016-05-12 19:54:35 ----RSD---- C:\Windows\assembly
2016-05-12 19:41:54 ----D---- C:\Windows\winsxs
2016-05-12 19:32:01 ----D---- C:\Windows\System32
2016-05-12 19:32:01 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-05-12 19:20:35 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-05-12 19:20:35 ----D---- C:\Windows\system32\cs-CZ
2016-05-12 19:20:34 ----D---- C:\Windows\ehome
2016-05-12 19:20:33 ----D---- C:\Program Files\Windows Journal
2016-05-12 19:20:32 ----D---- C:\Program Files\Internet Explorer
2016-05-12 19:20:31 ----D---- C:\Windows\SYSWOW64\en-US
2016-05-12 19:20:28 ----D---- C:\Windows\system32\en-US
2016-05-12 19:20:24 ----D---- C:\Program Files (x86)\Internet Explorer
2016-05-12 19:20:11 ----D---- C:\Windows\AppPatch
2016-05-12 19:20:09 ----D---- C:\Windows\system32\Boot
2016-05-12 17:30:19 ----D---- C:\ProgramData\Microsoft Help
2016-05-12 17:21:46 ----D---- C:\Windows\system32\MRT
2016-05-12 17:06:40 ----A---- C:\Windows\system32\MRT.exe
2016-05-11 22:41:56 ----D---- C:\Windows\system32\catroot2
2016-05-11 09:36:18 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-05-09 10:50:43 ----SD---- C:\Windows\SYSWOW64\GWX
2016-05-09 10:50:43 ----SD---- C:\Windows\system32\GWX
2016-05-08 15:24:10 ----RD---- C:\Program Files (x86)\Skype
2016-05-03 14:05:35 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2016-04-24 23:41:16 ----D---- C:\Windows\Tasks
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2016-01-26 272304]
R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2016-02-16 360736]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2016-03-29 248576]
R0 AvgRkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2016-04-14 51968]
R0 Avguniva;AVG Universal Driver; C:\Windows\system32\DRIVERS\avguniva.sys [2016-05-04 71936]
R0 RapportHades64;RapportHades64; C:\Windows\System32\Drivers\RapportHades64.sys [2016-05-17 215560]
R0 RapportKE64;RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [2016-05-17 470056]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2016-02-16 162592]
R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6a.sys [2015-08-29 97208]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2016-04-20 307456]
R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2015-10-21 284080]
R1 AvgTdiA;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2015-10-08 302000]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-04-24 26528]
R1 RapportCerberus_1609040;RapportCerberus_1609040; \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_1609040.sys [2016-05-17 1157160]
R1 RapportEI64;RapportEI64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [2016-05-17 544360]
R1 RapportPG64;RapportPG64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [2016-05-17 525992]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2015-04-24 11922944]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2015-04-24 359936]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2010-06-03 299568]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 huawei_enumerator;huawei_enumerator; C:\Windows\system32\DRIVERS\ew_jubusenum.sys [2013-11-30 91648]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-04-24 4408792]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2015-04-24 8623856]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2015-04-24 237968]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
R3 SFEP;Sony Firmware Extension Parser; C:\Windows\system32\DRIVERS\SFEP.sys [2007-08-03 11392]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2015-04-24 34544]
R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [2016-03-29 32304]
S0 dlkmdldr;dlkmdldr; C:\Windows\system32\drivers\dlkmdldr.sys [2008-08-18 13424]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2015-04-24 11922944]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 dlkmd;dlkmd; C:\Windows\system32\drivers\dlkmd.sys [2008-08-18 311408]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\Windows\system32\DRIVERS\ew_hwusbdev.sys [2013-01-25 109568]
S3 ew_usbenumfilter;huawei_CompositeFilter; C:\Windows\system32\DRIVERS\ew_usbenumfilter.sys [2012-12-22 14976]
S3 ewusbnet;HUAWEI USB-NDIS miniport; C:\Windows\system32\DRIVERS\ewusbnet.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2013-11-30 226176]
S3 hwusb_cdcacm;hwusb_cdcacm; C:\Windows\system32\DRIVERS\ew_cdcacm.sys [2014-07-25 125952]
S3 hwusb_wwanecm;hwusb_wwanecm; C:\Windows\system32\DRIVERS\ew_wwanecm.sys [2014-09-30 380672]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 64bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-04-22 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2015-04-24 238080]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [2016-05-04 5155904]
R2 avgsvc;AVG Service; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [2016-04-22 1078544]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [2016-05-04 710232]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2016-04-29 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2016-04-29 1773696]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DisplayLinkService;DisplayLink Service; C:\Program Files\DisplayLink Core Software\DisplayLinkService.exe [2008-08-18 733544]
R2 HWDeviceService64.exe;HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [2014-01-15 351824]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2013-06-28 84616]
R2 RapportMgmtService;Rapport Management Service; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2016-05-17 2382832]
R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [2014-10-13 743688]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-06-01 5495056]
R2 TuneUp.UtilitiesSvc;AVG PC TuneUp Service; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2016-03-29 4584208]
S2 avgfws;AVG Firewall; C:\Program Files (x86)\AVG\Av\avgfwsa.exe [2016-05-04 1999224]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112]
S2 O2 Internet. RunOuc;O2 Internet. OUC; C:\Program Files (x86)\O2 Internet\UpdateDog\ouc.exe [2013-10-26 651856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-14 269504]
S3 AvgAMPS;AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [2016-05-04 638968]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-04-23 114688]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-04-28 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
-----------------EOF-----------------
