spousta škodlivin v pc.

[jarda.otta]

zdravím. Najednou mě něco přesměrovalo všechny prohližeče domovské stránky seznamu na startpageing123.com. V nainstalovaných programech se objevilo nainstalováno Update_msi. Nejde spustit Skype. Zmizeli všechny doplnky mozilly firefox. Jsou odinstalovány. Na jednom foru jsem se dočetl že se dá odstranit startpageing123 utilitou wipersoft. Našla spoustu infiltrací ale je to jen nějaká demoverze. Včera mě něco změnilo v mém emailovém účtu nastavení. Nastavilo tam obrázek profilu rozkrok ženy. Po konzultaci na seznamu mě řekli, že byl můj účet napadenej a že se z něj začátkem března konalo spousta přihlášení z Brazílie a bylo odesláno spousta pošty na cizí servery. Musel jsem vše změnit. Dal jsem malwarebytesantimalware a našel toho hrozně moc. Jen jsem diagnostikoval a posílá sem log. Níže bude log z Rsit. Prosím o radu a děkuji.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2017.03.21.06

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Admin :: ADMIN-7206BB347 [administrátor]

21.3.2017 21:31:04
MBAM-log-2017-03-21 (22-14-43).txt

Typ: Kompletní kontrola (C:\|D:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 427804
Uplynulý čas: 41 minut, 44 sekund

Nalezené procesy v paměti: 1
C:\Documents and Settings\Admin\Data aplikací\Kyubey\Kyubey.exe (Adware.Elex.SHHKRST) -> 448 -> Nebyla provedena žádná instrukce.

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 1
HKLM\SYSTEM\CurrentControlSet\Services\Kyubey (Adware.Elex.SHHKRST) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 46
C:\Documents and Settings\Admin\Data aplikací\Kyubey (Adware.Elex.SHHKRST) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Admin\Local Settings\Data aplikací\FileViewPro (PUP.Optional.FileViewPro) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Admin\Local Settings\Data aplikací\FileViewPro\FileViewPro.exe_Url_jn4xqozlzppxcht2yt2wvho2bxkp31wm (PUP.Optional.FileViewPro) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Admin\Local Settings\Data aplikací\FileViewPro\FileViewPro.exe_Url_jn4xqozlzppxcht2yt2wvho2bxkp31wm\1.5.0.0 (PUP.Optional.FileViewPro) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\docs (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\ar (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\ast (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\bg (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\ca (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\cs (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\da (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\de (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\el (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\en_GB (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\es (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\et_EE (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\eu (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\fi (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\fr (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\gl (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\he (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\hr (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\hu (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\it (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\it_CH (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\ja (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\ko_KR (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\lt (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\nl (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\nn (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\pl (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\pt_BR (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\pt_PT (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\ru (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\sl (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\sq (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\sv (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\tr (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\uk (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\zh_CN (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\zh_TW (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\skins (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Admin\Data aplikací\WinSAPSvc (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Admin\Nabídka Start\Programy\amuleC (Adware.Elex) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 67
c:\documents and settings\all users\data aplikací\460e11e175q602\460e11e175q602.dll (Trojan.Wdfload.Generic) -> Nebyla provedena žádná instrukce.
C:\FRST\Quarantine\C\Program Files\FormatFactory\FFModules\Package\Ask\AskPIP_FF_.exe.xBAD (PUP.Optional.APNToolBar) -> Nebyla provedena žádná instrukce.
C:\FRST\Quarantine\D\SOFTWARE\Free .exe.xBAD (PUP.Optional.BundleInstaller.YT) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\aMule.exe (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\ed2k.exe (Adware.Elex) -> Nebyla provedena žádná instrukce.
c:\program files\bevisp\ckewisreasise.dll (Adware.Elex.SHHKRST) -> Nebyla provedena žádná instrukce.
C:\Program Files\Bevisp\Vonshgttain.dll (Adware.Elex.SHHKRST) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{BC03F35B-6949-416A-A52D-A964FC41E786}\RP71\A0014142.exe (PUP.Optional.APNToolBar) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{BC03F35B-6949-416A-A52D-A964FC41E786}\RP74\A0014239.exe (PUP.Optional.WiperSoft) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{BC03F35B-6949-416A-A52D-A964FC41E786}\RP74\A0014248.exe (PUP.Optional.WiperSoft) -> Nebyla provedena žádná instrukce.
c:\system volume information\_restore{bc03f35b-6949-416a-a52d-a964fc41e786}\rp76\a0014299.dll (Trojan.Wdfload.Generic) -> Nebyla provedena žádná instrukce.
c:\system volume information\_restore{bc03f35b-6949-416a-a52d-a964fc41e786}\rp76\a0014306.dll (Adware.Elex.SHHKRST) -> Nebyla provedena žádná instrukce.
D:\Stažené soubory\WiperSoft-installer.exe (PUP.Optional.WiperSoft) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Admin\Data aplikací\Kyubey\Kyubey.exe (Adware.Elex.SHHKRST) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Admin\Local Settings\Data aplikací\FileViewPro\FileViewPro.exe_Url_jn4xqozlzppxcht2yt2wvho2bxkp31wm\1.5.0.0\user.config (PUP.Optional.FileViewPro) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\amule.ico (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\docs\amulesig.txt (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\docs\AUTHORS.txt (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\docs\Changelog.txt (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\docs\EC_Protocol.txt (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\docs\license.txt (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\docs\README.txt (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\docs\TODO (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\ar\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\ast\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\bg\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\ca\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\cs\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\da\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\de\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\el\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\en_GB\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\es\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\et_EE\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\eu\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\fi\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\fr\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\gl\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\he\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\hr\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\hu\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\it\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\it_CH\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\ja\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\ko_KR\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\lt\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\nl\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\nn\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\pl\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\pt_BR\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\pt_PT\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\ru\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\sl\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\sq\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\sv\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\tr\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\uk\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\zh_CN\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\locale\zh_TW\amule.mo (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\skins\gnome.zip (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\skins\kde4.zip (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\skins\Mac_Gray.zip (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\skins\priscilla.zip (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\skins\tango.zip (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Program Files\amulell\skins\xfce.zip (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Admin\Data aplikací\WinSAPSvc\WinSAP.dll (Adware.Elex) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Admin\Nabídka Start\Programy\amuleC\aMuleC.lnk (Adware.Elex) -> Nebyla provedena žádná instrukce.

(konec)


Zde Rsit:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Admin at 2017-03-21 19:39:42
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 27 GB (53%) free of 50 GB
Total RAM: 3061 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:39:49, on 21.3.2017
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Panda USB Vaccine\USBVaccine.exe
C:\Program Files\Abrosoft\FantaMorph5\FantaUp.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\tsnpstd3.exe
C:\Documents and Settings\Admin\Data aplikací\Kyubey\Kyubey.exe
C:\WINDOWS\vsnpstd3.exe
C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\HydraVision\HydraGrd.exe
C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe
C:\Program Files\ATI Technologies\HydraVision\HydraMD.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\TechSmith\Snagit 11\Snagit32.exe
C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TeamViewer\TeamViewer_Service.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Program Files\TechSmith\Snagit 11\TSCHelp.exe
C:\Program Files\TechSmith\Snagit 11\SnagPriv.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\AVAST Software\Avast\aswidsagent.exe
C:\Program Files\Skype\Browser\SkypeBrowserHost.exe
C:\Program Files\TechSmith\Snagit 11\snagiteditor.exe
C:\Program Files\Skype\Browser\SkypeBrowserHost.exe
C:\Program Files\Skype\Browser\SkypeBrowserHost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
D:\Stažené soubory\SOFTWARE\RSIT.exe
C:\Program Files\trend micro\Admin.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [tsnpstd3] C:\WINDOWS\tsnpstd3.exe
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Grid] "C:\Program Files\ATI Technologies\HydraVision\HydraGrd.exe"
O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe"
O4 - HKCU\..\Run: [HydraVisionMDEngine] "C:\Program Files\ATI Technologies\HydraVision\HydraMD.exe" -AutoRun
O4 - HKCU\..\Policies\Explorer\Run: [Realtek] C:\Documents and Settings\Admin\Data aplikací\Microsoft\ejaudidt\bebawsgw.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-18 Startup: SAM.lnk = C:\Program Files\SAM\SAM.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: SAM.lnk = C:\Program Files\SAM\SAM.exe (User 'Default user')
O4 - Startup: SAM.lnk = C:\Program Files\SAM\SAM.exe
O4 - Global Startup: Snagit 11.lnk = C:\Program Files\TechSmith\Snagit 11\Snagit32.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 5821088819
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package 2) - http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package 1) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Abrosoft: Abrosoft FantaMorph update permissions manager. 12810. - Unknown owner - C:\Program Files\Abrosoft\FantaMorph5\FantaUp.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: aswbIDSAgent - AVAST Software s.r.o. - C:\Program Files\AVAST Software\Avast\aswidsagent.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Kyubey - Unknown owner - C:\Documents and Settings\Admin\Data aplikací\Kyubey\Kyubey.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
O23 - Service: TeamViewer 12 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

--
End of file - 9587 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\Avast Emergency Update.job - C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job - C:\WINDOWS\system32\xp_eos.exe
C:\WINDOWS\tasks\PandaUSBVaccine.job - C:\Program Files\Panda USB Vaccine\RunInteractiveWin.exe "C:\Program Files\Panda USB Vaccine\USBVaccine.exe" /resident /autovaccinate /agreelicense
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job - C:\WINDOWS\system32\xp_eos.exe -c
C:\WINDOWS\tasks\SafeZone scheduled Autoupdate 1465826939.job - C:\Program Files\AVAST Software\SZBrowser\launcher.exe --scheduledautoupdate $(Arg0)
C:\WINDOWS\tasks\TechSmith Updater.job - C:\Program Files\Common Files\TechSmith Shared\Updater\TSCUpdClt.exe all

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\u2ab59z9.default-1490117749245

prefs.js - "browser.startup.homepage" - "www.seznam.cz/"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF48
"sp@avast.com"=C:\Program Files\AVAST Software\Avast\SafePrice\FF48


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 24.0.0.221 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_24_0_0_221.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw_1225195.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Program Files\Mozilla Firefox\plugins\
NPOFF12.DLL

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-02-27 771816]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2017-02-27 205512]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-02-12 174592]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2014-01-07 98304]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-11-16 19722344]
"tsnpstd3"=C:\WINDOWS\tsnpstd3.exe [2007-06-15 368640]
"snpstd3"=C:\WINDOWS\vsnpstd3.exe [2006-09-18 843776]
"USBToolTip"=C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe [2007-02-20 199752]
"MSConfig"=C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE [2008-04-14 171008]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2017-02-08 27427808]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Grid"=C:\Program Files\ATI Technologies\HydraVision\HydraGrd.exe [2014-01-07 405504]
"HydraVisionDesktopManager"=C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [2014-01-07 393216]
"HydraVisionMDEngine"=C:\Program Files\ATI Technologies\HydraVision\HydraMD.exe [2014-01-07 569344]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Realtek"=C:\Documents and Settings\Admin\Data aplikací\Microsoft\ejaudidt\bebawsgw.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]
C:\Program Files\Common Files\Symantec Shared\ccApp.exe [2010-08-10 115560]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner.exe [2015-05-08 6369048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Documents and Settings\Admin\Data aplikací\Seznam.cz\szninstall.exe -c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Documents and Settings\Admin\Data aplikací\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Grid]
C:\Program Files\ATI Technologies\HydraVision\HydraGrd.exe [2014-01-07 405504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
C:\WINDOWS\system32\igfxtray.exe [2013-02-12 136704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
C:\WINDOWS\system32\igfxpers.exe [2013-02-12 162816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files\Seznam.cz\distribution\szninstall.exe -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\V0700Mon.exe]
C:\WINDOWS\V0700Mon.exe [2010-08-18 28672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ccSetMgr"=2
"ccEvtMgr"=2
"WMPNetworkSvc"=3

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Snagit 11.lnk - C:\Program Files\TechSmith\Snagit 11\Snagit32.exe

C:\Documents and Settings\Admin\Nabídka Start\Programy\Po spuštění
SAM.lnk - C:\Program Files\SAM\SAM.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-03-29 126976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-02-12 301568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmcService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Common Files\Symantec Shared\ccApp.exe"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe:*:Enabled:Symantec Email"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Documents and Settings\Admin\Data aplikací\uTorrent\utorrent.exe"="C:\Documents and Settings\Admin\Data aplikací\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe"="C:\Program Files\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe:*:Enabled:Apowersoft Phone Manager"
"C:\Program Files\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe"="C:\Program Files\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe:*:Enabled:Apowersoft Phone Manager"
"C:\Program Files\TeamViewer\TeamViewer.exe"="C:\Program Files\TeamViewer\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"E:\Ctyrka\ctyrka.exe"="E:\Ctyrka\ctyrka.exe:*:Enabled:Mariáš pro 4 hráče"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\FormatFactory\FFModules\Package\PFInstOnline.exe"="C:\Program Files\FormatFactory\FFModules\Package\PFInstOnline.exe:*:Disabled:App P2P Installer"
"C:\Program Files\FormatFactory\FormatFactory.exe"="C:\Program Files\FormatFactory\FormatFactory.exe:*:Enabled:FormatFactory"
"C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe:*:Enabled:Pinnacle VideoSpin"
"C:\Program Files\Pinnacle\Studio 15\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 15\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 15\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 15\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 15\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 15\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (C:\Program Files\Mozilla Firefox)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FFDS"=C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"vidc.mjpg"=pvmjpg30.dll
"VIDC.WMV3"=wmv9vcm.dll

======List of files/folders created in the last 1 month======

2017-03-21 19:15:31 ----A---- C:\WINDOWS\system32\wiperrm.exe
2017-03-21 19:15:25 ----D---- C:\Documents and Settings\Admin\Data aplikací\WiperSoft
2017-03-21 19:15:15 ----D---- C:\Program Files\WiperSoft
2017-03-21 12:33:45 ----D---- C:\Program Files\amulell
2017-03-21 12:33:45 ----D---- C:\Documents and Settings\Admin\Data aplikací\aMule
2017-03-21 01:14:54 ----HD---- C:\$AV_ASW
2017-03-20 20:33:18 ----A---- C:\WINDOWS\system32\drivers\aswHdsKe.sys
2017-03-20 14:15:00 ----D---- C:\Documents and Settings\Admin\Data aplikací\Kyubey
2017-03-20 14:14:53 ----D---- C:\Documents and Settings\Admin\Data aplikací\WinSAPSvc
2017-03-20 00:39:30 ----D---- C:\Program Files\GIMP 2
2017-03-17 15:49:20 ----D---- C:\Documents and Settings\Admin\Data aplikací\Media Player Classic
2017-03-17 13:14:04 ----HD---- C:\Documents and Settings\All Users\Data aplikací\460e11e175q602
2017-03-17 13:13:40 ----D---- C:\Documents and Settings\Admin\Data aplikací\Profiles
2017-03-17 13:13:39 ----D---- C:\Program Files\Bevisp
2017-03-17 12:54:24 ----D---- C:\Documents and Settings\Admin\Data aplikací\EurekaLog
2017-03-17 12:28:22 ----D---- C:\Program Files\Multilizer
2017-03-17 12:28:22 ----D---- C:\Program Files\Common Files\Multilizer
2017-03-17 12:28:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\multilizer
2017-03-17 12:28:22 ----D---- C:\Documents and Settings\Admin\Data aplikací\multilizer
2017-03-16 17:36:13 ----D---- C:\Program Files\Rajče Downloader
2017-03-13 17:02:46 ----A---- C:\WINDOWS\UC.PIF
2017-03-13 17:02:46 ----A---- C:\WINDOWS\RAR.PIF
2017-03-13 17:02:46 ----A---- C:\WINDOWS\PKZIP.PIF
2017-03-13 17:02:46 ----A---- C:\WINDOWS\PKUNZIP.PIF
2017-03-13 17:02:46 ----A---- C:\WINDOWS\LHA.PIF
2017-03-13 17:02:46 ----A---- C:\WINDOWS\ARJ.PIF
2017-03-13 17:02:45 ----D---- C:\totalcmd
2017-03-10 13:57:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2845142_WM64$
2017-03-10 11:46:44 ----D---- C:\Program Files\Microsoft Works
2017-03-10 11:46:29 ----D---- C:\Program Files\Common Files\DESIGNER
2017-03-10 11:44:07 ----D---- C:\WINDOWS\SHELLNEW
2017-03-10 11:43:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2017-03-10 11:43:06 ----RHD---- C:\MSOCache
2017-03-09 10:12:43 ----D---- C:\Documents and Settings\Admin\Data aplikací\TechSmith
2017-03-09 09:41:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\regid.1995-08.com.techsmith
2017-03-09 09:41:11 ----D---- C:\Program Files\Common Files\TechSmith Shared
2017-03-09 09:36:22 ----SHD---- C:\Config.Msi
2017-03-08 15:44:32 ----D---- C:\Program Files\SureThing Express Labeler
2017-03-08 15:44:32 ----D---- C:\Program Files\Common Files\SureThing Shared
2017-03-08 15:34:21 ----A---- C:\WINDOWS\unvise32.exe
2017-03-08 15:34:19 ----D---- C:\Program Files\LooksBuilderSE
2017-03-08 15:32:26 ----A---- C:\WINDOWS\system32\drivers\MarvinBus.sys
2017-03-08 15:32:19 ----D---- C:\Program Files\Common Files\Pinnacle
2017-03-08 15:31:37 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Ultimate Collection
2017-03-08 15:27:48 ----D---- C:\Program Files\Common Files\Pegasus Imaging
2017-03-08 15:27:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Studio 15
2017-03-08 15:27:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Plus
2017-03-08 15:19:19 ----HDC---- C:\WINDOWS\$NtUninstallKB942288-v3$
2017-03-08 15:16:10 ----N---- C:\WINDOWS\system32\drivers\CLBUDFR.sys
2017-03-08 15:16:10 ----N---- C:\WINDOWS\system32\drivers\CLBStor.sys
2017-03-08 15:15:38 ----D---- C:\Program Files\WMV9_VCM
2017-03-08 15:15:09 ----N---- C:\WINDOWS\system32\d3dx9_26.dll
2017-03-08 15:15:09 ----N---- C:\WINDOWS\system32\d3dx9_25.dll
2017-03-08 15:15:08 ----N---- C:\WINDOWS\system32\d3dx9_24.dll
2017-03-02 08:39:11 ----D---- C:\Documents and Settings\Admin\Data aplikací\vlc
2017-03-01 07:26:02 ----N---- C:\WINDOWS\system32\drivers\mbam.sys
2017-03-01 07:26:02 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2017-02-27 18:58:53 ----N---- C:\WINDOWS\system32\aswBoot.exe
2017-02-26 19:12:27 ----D---- C:\FRST
2017-02-25 12:06:17 ----D---- C:\Program Files\VB
2017-02-24 15:38:10 ----D---- C:\Program Files\MSXML 4.0
2017-02-24 14:47:03 ----HDC---- C:\WINDOWS\$NtUninstallwinusb0200$
2017-02-24 14:46:51 ----N---- C:\WINDOWS\system32\WinUSBCoInstaller2.dll
2017-02-24 09:53:32 ----D---- C:\Program Files\Common Files\Yahoo!
2017-02-24 09:53:31 ----D---- C:\Program Files\Pinnacle
2017-02-24 09:53:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle VideoSpin
2017-02-24 09:52:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
2017-02-23 22:07:01 ----D---- C:\Program Files\FormatFactory
2017-02-23 21:18:57 ----D---- C:\Program Files\Abrosoft
2017-02-23 21:03:30 ----D---- C:\Documents and Settings\Admin\Data aplikací\PhotoFiltre Studio X
2017-02-23 21:02:28 ----D---- C:\Program Files\PhotoFiltre Studio X

======List of files/folders modified in the last 1 month======

2017-03-21 19:39:47 ----D---- C:\Program Files\trend micro
2017-03-21 19:39:40 ----D---- C:\WINDOWS\system32\CatRoot2
2017-03-21 19:35:31 ----D---- C:\WINDOWS\temp
2017-03-21 19:29:43 ----D---- C:\Documents and Settings\Admin\Data aplikací\Skype
2017-03-21 19:15:37 ----D---- C:\WINDOWS\Prefetch
2017-03-21 19:15:31 ----D---- C:\WINDOWS\system32
2017-03-21 19:15:15 ----D---- C:\Program Files
2017-03-21 19:08:04 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-03-21 19:05:34 ----RASH---- C:\boot.ini
2017-03-21 19:05:34 ----A---- C:\WINDOWS\win.ini
2017-03-21 19:05:34 ----A---- C:\WINDOWS\system.ini
2017-03-21 19:03:35 ----A---- C:\WINDOWS\system32\log.txt
2017-03-21 19:02:10 ----A---- C:\WINDOWS\SchedLgU.Txt
2017-03-21 19:02:00 ----D---- C:\AdwCleaner
2017-03-21 19:01:56 ----SD---- C:\WINDOWS\Tasks
2017-03-21 18:58:52 ----D---- C:\WINDOWS\system32\drivers
2017-03-21 18:55:14 ----D---- C:\WINDOWS\system32\Macromed
2017-03-21 18:54:46 ----D---- C:\WINDOWS\Minidump
2017-03-21 18:54:46 ----D---- C:\WINDOWS
2017-03-21 18:51:48 ----D---- C:\Program Files\Mozilla Maintenance Service
2017-03-21 18:25:57 ----D---- C:\Documents and Settings\Admin\Data aplikací\uTorrent
2017-03-21 17:50:57 ----D---- C:\WINDOWS\system32\drivers\etc
2017-03-21 12:33:50 ----SHD---- C:\WINDOWS\Installer
2017-03-20 20:47:09 ----D---- C:\Documents and Settings\Admin\Data aplikací\TeamViewer
2017-03-20 20:46:40 ----D---- C:\WINDOWS\Logs
2017-03-19 09:11:38 ----D---- C:\Program Files\Mozilla Firefox
2017-03-18 13:57:40 ----D---- C:\Program Files\TeamViewer
2017-03-17 14:23:32 ----D---- C:\Documents and Settings\Admin\Data aplikací\LangSoft
2017-03-17 13:34:43 ----SD---- C:\Documents and Settings\Admin\Data aplikací\Microsoft
2017-03-17 12:28:22 ----D---- C:\Program Files\Common Files
2017-03-17 11:58:47 ----RSD---- C:\WINDOWS\Fonts
2017-03-15 07:16:30 ----HD---- C:\WINDOWS\inf
2017-03-13 17:02:46 ----D---- C:\Documents and Settings\Admin\Data aplikací\GHISLER
2017-03-10 13:37:13 ----D---- C:\WINDOWS\system32\CatRoot
2017-03-10 12:05:47 ----D---- C:\Program Files\MSECache
2017-03-10 11:47:24 ----RSD---- C:\WINDOWS\assembly
2017-03-10 11:47:17 ----D---- C:\WINDOWS\system32\config
2017-03-10 11:46:44 ----D---- C:\Program Files\Common Files\Microsoft Shared
2017-03-10 11:46:39 ----D---- C:\WINDOWS\WinSxS
2017-03-10 11:46:32 ----D---- C:\Program Files\Microsoft Office
2017-03-10 11:46:16 ----D---- C:\Program Files\Microsoft.NET
2017-03-10 11:44:15 ----D---- C:\Program Files\Common Files\System
2017-03-10 10:53:37 ----D---- C:\WINDOWS\Help
2017-03-09 15:25:52 ----D---- C:\Documents and Settings\Admin\Data aplikací\Audacity
2017-03-09 09:41:09 ----D---- C:\Program Files\TechSmith
2017-03-09 09:41:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\TechSmith
2017-03-08 15:32:30 ----DC---- C:\WINDOWS\system32\DRVSTORE
2017-03-08 15:19:32 ----D---- C:\WINDOWS\system32\mui
2017-03-08 15:19:31 ----RSHDC---- C:\WINDOWS\system32\dllcache
2017-03-08 15:16:10 ----HD---- C:\Program Files\InstallShield Installation Information
2017-03-08 15:15:11 ----D---- C:\WINDOWS\system32\DirectX
2017-03-04 08:10:35 ----D---- C:\WINDOWS\Microsoft.NET
2017-03-02 21:33:00 ----D---- C:\Program Files\Apowersoft
2017-03-02 18:26:10 ----N---- C:\WINDOWS\system32\FlashPlayerApp.exe
2017-03-02 08:28:25 ----D---- C:\Program Files\VideoLAN
2017-02-25 08:06:16 ----SHD---- C:\WINDOWS\CSC
2017-02-25 08:06:16 ----D---- C:\TRANSLAT
2017-02-24 14:46:51 ----N---- C:\WINDOWS\system32\WdfCoInstaller01009.dll
2017-02-23 21:03:31 ----D---- C:\Documents and Settings\Admin\Data aplikací\Identities
2017-02-23 11:19:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\FXhome
2017-02-22 14:21:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswbidsh;aswbidsh; C:\WINDOWS\system32\drivers\aswbidshx.sys [2017-02-27 148720]
R0 aswblog;aswblog; C:\WINDOWS\system32\drivers\aswblogx.sys [2017-02-27 267016]
R0 aswbuniv;aswbuniv; C:\WINDOWS\system32\drivers\aswbunivx.sys [2017-02-27 41176]
R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2017-02-27 62152]
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2017-03-14 278776]
R0 CLBStor;CyberLink InstantBurn UDF Reader Help Driver; C:\WINDOWS\system32\drivers\CLBStor.sys [2006-07-31 10368]
R0 mv61xx;mv61xx; C:\WINDOWS\system32\DRIVERS\mv61xx.sys [2010-10-06 156200]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2011-03-04 45648]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 aswbidsdriver;aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdriverx.sys [2017-02-27 257288]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2017-02-27 31064]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2017-02-27 60632]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2017-02-27 756200]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2017-03-21 465024]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2008-04-14 12032]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2017-02-27 106392]
R2 CLBUDFR;CyberLink UDF Filesystem; C:\WINDOWS\system32\drivers\CLBUDFR.sys [2006-07-31 180352]
R2 WiseFs;WiseFS; \??\C:\WINDOWS\WiseFs32.sys []
R3 asmthub3;ASMedia USB3 Hub Service; C:\WINDOWS\system32\DRIVERS\asmthub3.sys [2010-12-08 95720]
R3 asmtxhci;ASMEDIA XHCI Service; C:\WINDOWS\system32\DRIVERS\asmtxhci.sys [2010-12-08 292840]
R3 aswStmXP;aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [2017-02-27 184208]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-03-29 2873856]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdXP3.sys [2012-05-14 103040]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-11-23 6203496]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 MEI;Intel(R) Management Engine Interface; C:\WINDOWS\system32\DRIVERS\HECI.sys [2010-10-19 41088]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2010-09-09 234728]
R3 SNPSTD3;USB PC Camera (SNPSTD3); C:\WINDOWS\system32\DRIVERS\snpstd3.sys [2007-05-02 10222720]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-07-17 60160]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
S3 aswHdsKe;aswHdsKe; \??\C:\WINDOWS\system32\drivers\aswHdsKe.sys []
S3 aswHwid;aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [2017-02-27 34136]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-10-13 89856]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2013-02-12 2530720]
S3 IntcDAud;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2010-10-14 260864]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
S3 Revoflt;Revoflt; C:\WINDOWS\system32\DRIVERS\revoflt.sys [2009-12-30 27064]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-10-13 184192]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2013-08-29 26240]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-17 123008]
S3 V0700Afx;Creative Camera VF0700 Audio Effects Driver; C:\WINDOWS\system32\DRIVERS\V0700Afx.sys [2010-10-20 302720]
S3 V0700Vid;Creative Live! Cam Chat HD Driver; C:\WINDOWS\system32\DRIVERS\V0700Vid.sys [2010-10-18 322304]
S3 WinUSB;Android USB Driver; C:\WINDOWS\system32\DRIVERS\WinUSB.sys [2009-07-13 34944]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 exFat;exFat; C:\WINDOWS\system32\drivers\exFat.sys [2008-09-29 133632]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Abrosoft: Abrosoft FantaMorph update permissions manager. 12810.;Abrosoft: Abrosoft FantaMorph update permissions manager. 12810.; C:\Program Files\Abrosoft\FantaMorph5\FantaUp.exe [2010-11-18 224176]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-03-29 536576]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2017-02-27 262736]
R2 Kyubey;Kyubey; C:\Documents and Settings\Admin\Data aplikací\Kyubey\Kyubey.exe [2017-03-20 123392]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [2014-10-13 743688]
R2 TeamViewer;TeamViewer 12; C:\Program Files\TeamViewer\TeamViewer_Service.exe [2016-12-15 10351856]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [2017-02-27 5545144]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-03-28 593920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2017-01-16 317400]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-03-02 270936]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31 144200]
S3 idsvc;Služba Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2017-03-19 172488]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]

-----------------EOF-----------------

[JaRon]

ahoj,
nuz Tvoj postoj ma udivuje - skusil som utilitu, radil som sa atd. ,,,,,,, a potom prides sem - preco si nezacal tu
- najdene ZMAZ v MBAM
- vycisti PC s ADWCleanerom
- vycisti PC s CureIT
a potom napis, ci su este nejake problemy

[jarda.otta]

Kde prosím najdu ten cureit? Děkuji.

[JaRon]

https://forum.viry.cz/viewtopic.php?f=29&t=151000