Start
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-203366251-1405514647-2716843105-1001\...\MountPoints2: {48efec67-798e-11e2-8f8d-10bf48e3931e} - "G:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-203366251-1405514647-2716843105-1001\...\MountPoints2: {5e79561a-7a59-11e2-88db-10bf48e3931e} - "G:\WD SmartWare.exe" autoplay=true
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Core i7\AppData\Local\MEGAsync\ShellExtX64.dll No File
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Core i7\AppData\Local\MEGAsync\ShellExtX64.dll No File
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Core i7\AppData\Local\MEGAsync\ShellExtX64.dll No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Core i7\AppData\Local\MEGAsync\ShellExtX32.dll No File
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Core i7\AppData\Local\MEGAsync\ShellExtX32.dll No File
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Core i7\AppData\Local\MEGAsync\ShellExtX32.dll No File
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.2.6.552\AVG Web TuneUp.dll => No File
Toolbar: HKU\S-1-5-21-203366251-1405514647-2716843105-1001 -> No Name - {34AB3C4C-DA1A-4067-96F4-31452C7CFE65} - No File
Toolbar: HKU\S-1-5-21-203366251-1405514647-2716843105-1001 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
FF HKLM-x32\...\Thunderbird\Extensions: [
eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => not found
appid=484","hxxp://start.mysearchdial.com/?f=1&a=coolmsd&cd=2XzuyEtN2Y1L1QzutCtD0B0FyEzz0EtAzytAtC0EyE0CtC0FtN0D0Tzu0CyDtAzztN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1R1F1F1I1H1B1Q&cr=272395503&ir=","hxxp://
www.delta-search.com/?babsrc=HP_ss&mntr ... 04-21&psv="
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\53.0.2785.143\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\53.0.2785.143\pdf.dll => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll => No File
U0 aswVmm; no ImagePath
U3 idsvc; no ImagePath
U3 wpcsvc; no ImagePath
C:\WINDOWS\system32\ApnDatabase.xml
C:\ProgramData\xmlF1BD.tmp
C:\ProgramData\xmlF1FD.tmp
C:\ProgramData\xmlF1FE.tmp
C:\ProgramData\xmlF1FF.tmp
C:\Users\Core i7\AppData\Local\Temp
AlternateDataStreams: C:\WINDOWS:nlsPreferences [386]
AlternateDataStreams: C:\ProgramData\Nalpeiron:user.ns1 [4]
AlternateDataStreams: C:\ProgramData\Nalpeiron:user.ns2 [5]
AlternateDataStreams: C:\ProgramData\Nalpeiron:user.ns3 [5]
AlternateDataStreams: C:\ProgramData\Nalpeiron:user.ns4 [5]
AlternateDataStreams: C:\ProgramData\TEMP:054203E4 [150]
AlternateDataStreams: C:\ProgramData\TEMP:2B600C25 [292]
AlternateDataStreams: C:\ProgramData\TEMP:DB60730C [126]
AlternateDataStreams: C:\Users\Core i7\Soubory cookie:KOStU7bduwqn6oh6oUte78bcw [2030]
AlternateDataStreams: C:\Users\Core i7\AppData\Local\OTH5UiudbyRlO52:kGrYAWGg7wdWt1Uy5OhoiWb [2146]
Task: {228C3359-551A-4C01-A0A5-D5C4E9406033} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {2BC8C0C0-B13C-426F-B446-200544890CFD} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {2E1F1729-525D-43E2-989D-808A4FF3D670} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
ask: {54A70B48-1214-425C-8A4E-2A4CF29C82F3} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {55F82C2D-73B5-4D18-90D2-5737EF501D04} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {827ED477-5679-4018-9941-B189CFD0CE76} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {8769B8ED-994D-4F38-8550-2FFF4C3C6B8A} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {90A8B69E-2703-4B54-ACE9-CE1821E5DEB9} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {95EE313A-EAF9-4D3A-AE22-418FA0BAE35C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {B8402931-05D1-4D40-9EA4-E4FECD5A7A0F} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {B9B41A3D-97D3-40A7-9194-95A7EB5F07AE} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {CDBD6B05-CA3B-40B9-A587-E47392EFC561} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
HKU\S-1-5-21-203366251-1405514647-2716843105-1001\Software\Classes\batfile: <===== ATTENTION
HKU\S-1-5-21-203366251-1405514647-2716843105-1001\Software\Classes\cmdfile: <===== ATTENTION
End
