Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Zdravím a prosím o kontrolu

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
honyzahy
Návštěvník
Návštěvník
Příspěvky: 8
Registrován: 15 říj 2014 15:24

Zdravím a prosím o kontrolu

#1 Příspěvek od honyzahy »

Logfile of random's system information tool 1.10 (written by random/random)
Run by HonyZahy at 2014-10-16 12:55:38
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 53 GB (7%) free of 715 GB
Total RAM: 4087 MB (27% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:55:50, on 16.10.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17126)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\SafeHouse\SdwMon32.exe
C:\Program Files (x86)\SafeHouse\SdwTray.exe
C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\AsGHost.exe
C:\Program Files (x86)\AVG\AVG2014\avgui.exe
C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
C:\Windows\SysWOW64\ctfmon.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\PSPad editor\PSPad.exe
C:\Users\HonyZahy\Documents\Visual Studio 2013\Projects\SportPickEditor\SportPickEditor\bin\Debug\SportPickEditor.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Users\HonyZahy\Documents\Visual Studio 2013\Projects\Trafficadbar\Trafficadbar\bin\Debug\Trafficadbar.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
C:\Users\HonyZahy\documents\visual studio 2013\Projects\Trafficadbar\Trafficadbar\bin\Debug\Trafficadbar.vshost.exe
C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\CommonExtensions\Microsoft\IntelliTrace\12.0.0\IntelliTrace.exe
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Program Files\trend micro\HonyZahy.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.idnes.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8081
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: 108.167.164.60 test.com
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Microsoft Web Test Recorder 12.0 Helper - {432dd630-7e03-4c97-9d62-b99f52df4fc2} - C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_20\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Aptana Debugger - {B8ADD4EA-ADE3-4DEB-A957-9BBD17D6D0C8} - C:\xampp\htdocs\.metadata\.plugins\com.aptana.js.debug.core\.dll\AptanaDebugger.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_20\bin\jp2ssv.dll
O2 - BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll
O3 - Toolbar: Aptana Debugger - {F348E1B0-CBFE-47C3-81B4-9F44B3B5A618} - C:\xampp\htdocs\.metadata\.plugins\com.aptana.js.debug.core\.dll\AptanaDebugger.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~2\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [LauncherM1400] "C:\Program Files (x86)\EPSON_P2B\Printer Software\Launcher\selaunch.exe" /S EPSON AL-M1400
O4 - HKLM\..\Run: [DocuPrint M1400 RUN] "C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmRun.exe"
O4 - HKLM\..\Run: [StatusAutoRunM1400] "C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmpl.exe" EPSON AL-M1400,hide,\S
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKCU\..\Run: [PC Dynamics SdwMon32] C:\Program Files (x86)\SafeHouse\SdwMon32.exe /run
O4 - HKCU\..\Run: [SafeHouseSystemTray] C:\PROGRA~2\SAFEHO~1\SDWTRAY.EXE /winstart
O4 - HKCU\..\Run: [Google Update] "C:\Users\HonyZahy\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [AVG-Secure-Search-Update_1213b] C:\Users\HonyZahy\AppData\Roaming\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe /PROMPT /mid=780bb9e06af547d3b936d1191024e9fb-227c9dc9e123848472d49caca8fbfd736015c979 /CMPID=1213b
O4 - HKCU\..\Run: [AVG-Secure-Search-Update_0214c] C:\Users\HonyZahy\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe /PROMPT /mid=780bb9e06af547d3b936d1191024e9fb-227c9dc9e123848472d49caca8fbfd736015c979 /CMPID=0214c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: SystemExplorerDisabled
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
O4 - Global Startup: SIM.lnk = C:\Program Files (x86)\SIM\sim.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Fiddler - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - "C:\Program Files (x86)\Fiddler2\Fiddler.exe" (file missing)
O9 - Extra 'Tools' menuitem: Fiddler - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - "C:\Program Files (x86)\Fiddler2\Fiddler.exe" (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com//activex/ractrl.cab?lmi=972
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~2\HEWLET~1\IAM\bin\APSHook.dll
O23 - Service: ActivIdentity Shared Store Service (ac.sharedstore) - ActivIdentity - C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - C:\Windows\system32\AEADISRV.EXE (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AuthenTec Fingerprint Service (ATService) - AuthenTec, Inc. - C:\Program Files\Fingerprint Sensor\ATService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
O23 - Service: @%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000 (c2wts) - Unknown owner - C:\Program Files (x86)\Windows Identity Foundation\v3.5\c2wtshost.exe (file missing)
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP ProtectTools Service - Hewlett-Packard Development Company, L.P - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: Drive Encryption Service (HpFkCryptService) - McAfee, Inc. - C:\Program Files (x86)\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SEcnStatutsDatabase (SENADB) - Unknown owner - C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmdb.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15521 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
c:\PROGRA~2\AVG\AVG2014\avgrsa.exe /boot
C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=f9d99838-6beb-4859-b08d-992acbaabb2f /coreSdkOptions=4382 /logConfFile="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\a6b9a653-4cf9-423d-ac8c-d455f71c9c18-1ac-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" /tempPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\" /logPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\log\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\SysWOW64\svchost.exe -k Cognizance
C:\Windows\SysWOW64\svchost.exe -k Bioscrypt
"C:\Program Files\Fingerprint Sensor\ATService.exe"
"C:\Program Files (x86)\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\spoolsv.exe
"C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe"
"C:\Program Files\ActivIdentity\ActivClient\acevents.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\AEADISRV.EXE
"C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe"
"C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmdb.exe"
"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\SysWOW64\vmnat.exe
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe"
WLIDSvcM.exe 2636
"C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgemca.exe"
C:\Windows\SysWOW64\vmnetdhcp.exe
"C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\ActivIdentity\ActivClient\acevents.exe"
"C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\SafeHouse\SdwMon32.exe" /run
"C:\Program Files (x86)\SafeHouse\SdwTray.exe" /winstart
"C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\AsGHost.exe" -Embedding
"C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE" /tsr
"C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmW.exe"
\??\C:\Windows\system32\conhost.exe "-16721851341017721337-158691022424251180-9767968684393458611805650415-350608979
"C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmwj.exe"
\??\C:\Windows\system32\conhost.exe "-22386812317643350061785402843971997907620939313659999895979723526556893452
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
C:\Windows\system32\DllHost.exe /Processid:{38E38285-D33D-40EB-9006-439225C54923}
"C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe"
ctfmon.exe
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3232 CREDAT:275457 /prefetch:2
"C:\Program Files\totalcmd\TOTALCMD64.EXE"
"taskhost.exe"
"C:\Program Files (x86)\PSPad editor\PSPad.exe"
"C:\Users\HonyZahy\Documents\Visual Studio 2013\Projects\SportPickEditor\SportPickEditor\bin\Debug\SportPickEditor.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3232 CREDAT:28652564 /prefetch:2
"C:\Users\HonyZahy\Documents\Visual Studio 2013\Projects\Trafficadbar\Trafficadbar\bin\Debug\Trafficadbar.exe"

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3232 CREDAT:4011188 /prefetch:2
"C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe"
"C:\Users\HonyZahy\documents\visual studio 2013\Projects\Trafficadbar\Trafficadbar\bin\Debug\Trafficadbar.vshost.exe"
"C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\CommonExtensions\Microsoft\IntelliTrace\12.0.0\IntelliTrace.exe" run /name:intellitrace_0000472c_01cfe92ed59d68ca_fa9023b4-8672-484d-93c7-5ab92a322419 /logfile:C:\Windows\Temp\Trafficadbar.vshost.exe_141016_124917_fa9023b4-8672-484d-93c7-5ab92a322419.iTrace /buffersize:65536 /buffercount:512 /watch:-1 /help- /nologo+ /collectionplan:C:\Users\HonyZahy\AppData\Local\Microsoft\VisualStudio\12.0\TraceDebugger\Settings\oyod0npd.er4 /hidden-
\??\C:\Windows\system32\conhost.exe "-1201009091824710165-2054065477620415600-262255934-95919818374236261-1676179528
"C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe" /o /eo /l /b /id 4428
"C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe" --channel=29700.0024F6E8.671566624 --type=renderer /o /eo /l /b /id 4428
"C:\Users\HonyZahy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H9R9C9WL\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-425939938-1532658576-2361754779-1000Core.job - C:\Users\HonyZahy\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-425939938-1532658576-2361754779-1000UA.job - C:\Users\HonyZahy\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\HonyZahy\AppData\Roaming\Mozilla\Firefox\Profiles\s1kirrcy.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 13.0.0.214 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.20.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_20\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.20.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_20\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 13.0.0.214 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.21.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.20.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_20\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll


C:\Users\HonyZahy\AppData\Roaming\Mozilla\Firefox\Profiles\s1kirrcy.default\extensions\
{3d7eb24f-2740-49df-8937-200b1cc08f8a}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0EA99306-BC87-4930-9E1D-1D1EA32A7E4E}]
Credential Manager for HP ProtectTools - C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\ItIEAddIn64.dll [2009-07-28 568592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_20\bin\ssv.dll [2014-09-08 551848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-03-28 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_20\bin\jp2ssv.dll [2014-09-08 212904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{432dd630-7e03-4c97-9d62-b99f52df4fc2}]
Microsoft Web Test Recorder 12.0 Helper - C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2013-10-05 71520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_20\bin\ssv.dll [2014-09-08 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-28 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B8ADD4EA-ADE3-4DEB-A957-9BBD17D6D0C8}]
Aptana Debugger - C:\xampp\htdocs\.metadata\.plugins\com.aptana.js.debug.core\.dll\AptanaDebugger.dll [2013-06-02 513024]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_20\bin\jp2ssv.dll [2014-09-08 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}]
Credential Manager for HP ProtectTools - C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll [2009-07-28 98576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-03-28 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{F348E1B0-CBFE-47C3-81B4-9F44B3B5A618} - Aptana Debugger - C:\xampp\htdocs\.metadata\.plugins\com.aptana.js.debug.core\.dll\AptanaDebugger.dll [2013-06-02 513024]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-28 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-23 165912]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-23 385560]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-23 363544]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 108144]
""= []
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-04 2174760]
"acevents"=C:\Program Files\ActivIdentity\ActivClient\acevents.exe [2009-06-03 196648]
"accrdsub"=C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [2009-06-03 483880]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-05-31 446392]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PC Dynamics SdwMon32"=C:\Program Files (x86)\SafeHouse\SdwMon32.exe [2012-11-09 151552]
"SafeHouseSystemTray"=C:\PROGRA~2\SAFEHO~1\SDWTRAY.EXE [2012-11-09 360448]
"Google Update"=C:\Users\HonyZahy\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-17 116648]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-11-10 3514176]
"AVG-Secure-Search-Update_1213b"=C:\Users\HonyZahy\AppData\Roaming\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe /PROMPT /mid=780bb9e06af547d3b936d1191024e9fb-227c9dc9e123848472d49caca8fbfd736015c979 /CMPID=1213b []
""= []
"AVG-Secure-Search-Update_0214c"=C:\Users\HonyZahy\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe /PROMPT /mid=780bb9e06af547d3b936d1191024e9fb-227c9dc9e123848472d49caca8fbfd736015c979 /CMPID=0214c []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PTHOSTTR"=C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE [2009-08-07 354360]
"CognizanceTS"=C:\PROGRA~2\HEWLET~1\IAM\Bin\ASTSVCC.dll [2009-07-28 24848]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"LauncherM1400"=C:\Program Files (x86)\EPSON_P2B\Printer Software\Launcher\selaunch.exe [2011-04-27 2438112]
"DocuPrint M1400 RUN"=C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmRun.exe [2011-04-27 361952]
"StatusAutoRunM1400"=C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmpl.exe [2011-07-19 4480984]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2014-08-25 5188112]
"SoundMAXPnP"=C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [2007-02-21 1183744]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
SIM.lnk - C:\Program Files (x86)\SIM\sim.exe

C:\Users\HonyZahy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
SystemExplorerDisabled
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~2\HEWLET~1\IAM\bin\APSHOO~1.DLL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-23 261120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
ASCredProv64

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.FFDS"=ff_vfw.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - "C:\Users\HonyZahy\AppData\Local\Aptana Studio 3\AptanaStudio3.exe" "%1"
.txt - open - C:\Windows\NOTEPAD.EXE %1

======List of files/folders created in the last 1 month======

2014-10-16 12:55:38 ----D---- C:\rsit
2014-10-15 13:42:01 ----A---- C:\TDSSKiller.3.0.0.40_15.10.2014_13.42.01_log.txt
2014-10-15 12:45:29 ----D---- C:\AdwCleaner
2014-10-12 12:05:17 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-10-12 12:04:36 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-10-12 12:04:36 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-10-12 12:04:35 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware

======List of files/folders modified in the last 1 month======

2014-10-16 12:55:46 ----D---- C:\Program Files\trend micro
2014-10-16 12:52:22 ----D---- C:\Windows\Temp
2014-10-16 09:04:01 ----D---- C:\ProgramData\MFAData
2014-10-15 13:42:08 ----D---- C:\Windows\system32\drivers
2014-10-15 13:36:38 ----D---- C:\Windows\system32\config
2014-10-15 13:30:16 ----D---- C:\Users\HonyZahy\AppData\Roaming\SIM
2014-10-15 13:29:56 ----D---- C:\Windows\Prefetch
2014-10-15 13:26:31 ----D---- C:\Windows\winsxs
2014-10-15 13:26:17 ----D---- C:\Windows\system32\catroot
2014-10-15 13:26:13 ----D---- C:\Windows\system32\catroot2
2014-10-15 13:25:52 ----D---- C:\ProgramData\hpqLog
2014-10-15 13:25:29 ----D---- C:\ProgramData\VMware
2014-10-15 13:24:11 ----RD---- C:\Program Files (x86)
2014-10-15 13:21:53 ----D---- C:\Windows\Vss
2014-10-15 13:21:53 ----D---- C:\Windows\Offline Web Pages
2014-10-14 18:16:13 ----D---- C:\Windows\ModemLogs
2014-10-14 17:25:27 ----SHD---- C:\System Volume Information
2014-10-14 17:25:25 ----D---- C:\Windows\System32
2014-10-14 17:25:25 ----D---- C:\Windows\inf
2014-10-14 17:25:25 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-10-14 17:24:13 ----D---- C:\Users\HonyZahy\AppData\Roaming\PC Suite
2014-10-14 17:23:10 ----D---- C:\Windows
2014-10-12 18:30:49 ----D---- C:\Windows\Minidump
2014-10-12 12:04:44 ----D---- C:\Users\HonyZahy\AppData\Roaming\Malwarebytes
2014-10-12 12:04:35 ----D---- C:\ProgramData\Malwarebytes
2014-10-11 12:08:49 ----D---- C:\Users\HonyZahy\AppData\Roaming\.minecraft
2014-10-09 18:22:05 ----SHD---- C:\Windows\Installer
2014-10-09 03:07:29 ----D---- C:\Users\HonyZahy\AppData\Roaming\uTorrent
2014-09-30 01:52:29 ----D---- C:\Windows\Tasks
2014-09-30 01:52:29 ----D---- C:\Windows\system32\Tasks
2014-09-30 01:49:57 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-09-30 01:36:22 ----D---- C:\Program Files (x86)\PSPad editor

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2014-06-17 190744]
R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2014-06-17 328984]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2014-08-06 123672]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2014-06-17 31512]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 30008]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 SafeBoot;SafeBoot; C:\Windows\system32\drivers\SafeBoot.sys [2009-07-29 55840]
R0 SbAlg;SbAlg; C:\Windows\system32\drivers\SbAlg.sys [2007-07-16 60160]
R0 SbFsLock;SbFsLock; C:\Windows\system32\drivers\SbFsLock.sys [2009-07-29 15392]
R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 17720]
R0 vidsflt53;Acronis Disk Storage Filter (53); C:\Windows\system32\DRIVERS\vsflt53.sys [2013-01-02 141920]
R0 vmci;VMware VMCI Bus Driver; C:\Windows\system32\DRIVERS\vmci.sys [2013-10-08 85584]
R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2014-06-30 152344]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2014-07-21 244504]
R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2014-06-17 235800]
R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2014-06-17 269080]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-12-15 279616]
R1 RsvLock;RsvLock; C:\Windows\system32\drivers\RsvLock.sys [2009-07-29 14880]
R1 SafDskNT;SafeHouse; \??\C:\Windows\system32\drivers\SAFDSKNT.SYS [2012-11-08 75760]
R2 hcmon;VMware hcmon; \??\C:\Windows\system32\drivers\hcmon.sys [2013-10-09 53816]
R2 VMnetBridge;VMware Bridge Protocol; C:\Windows\system32\DRIVERS\vmnetbridge.sys [2013-10-18 46160]
R2 VMnetuserif;VMware Network Application Interface; \??\C:\Windows\system32\drivers\vmnetuserif.sys [2013-10-18 30800]
R2 VMparport;VMware VMparport; \??\C:\Windows\system32\drivers\VMparport.sys [2013-10-18 31824]
R2 vmx86;VMware vmx86; \??\C:\Windows\system32\drivers\vmx86.sys [2013-10-18 64080]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 43320]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2008-04-24 402432]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-06-10 1146880]
R3 ATSwpWDF;AuthenTec TruePrint USB WDF Driver; C:\Windows\System32\Drivers\ATSwpWDF.sys [2009-07-29 549888]
R3 HBtnKey;HP Hotkey Device; C:\Windows\system32\DRIVERS\cpqbttn.sys [2010-02-25 19000]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 18432]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-09-23 6180832]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 64bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-06-04 1379376]
R3 TPM;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400]
R3 vmkbd;VMware kbd; \??\C:\Windows\system32\drivers\VMkbd.sys [2013-10-18 32848]
R3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys [2013-10-18 20560]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfoX64.sys [2007-09-25 18128]
S3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys []
S3 DisplayLinkUsbPort;DisplayLink USB Device; C:\Windows\system32\DRIVERS\DisplayLinkUsbPort_5.5.29055.0.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\Windows\system32\DRIVERS\ew_hwusbdev.sys []
S3 ew_usbenumfilter;huawei_CompositeFilter; C:\Windows\system32\DRIVERS\ew_usbenumfilter.sys []
S3 FTDIBUS;USB Serial Converter Driver; C:\Windows\system32\drivers\ftdibus.sys [2013-07-25 79592]
S3 FTSER2K;USB Serial Port Driver; C:\Windows\system32\drivers\ftser2k.sys [2013-07-25 86376]
S3 huawei_cdcacm;huawei_cdcacm; C:\Windows\system32\DRIVERS\ew_jucdcacm.sys []
S3 huawei_enumerator;huawei_enumerator; C:\Windows\system32\DRIVERS\ew_jubusenum.sys []
S3 huawei_ext_ctrl;huawei_ext_ctrl; C:\Windows\system32\DRIVERS\ew_juextctrl.sys []
S3 huawei_wwanecm;huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys []
S3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-10-01 25816]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-10-01 63704]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-06-25 35344]
S3 OSFMount;OSFMount; \??\C:\Program Files\OSFMount\OSFMount.sys [2012-05-09 540224]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys []
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2012-08-23 29696]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S4 RsFx0105;RsFx0105 Driver; C:\Windows\system32\DRIVERS\RsFx0105.sys [2011-09-22 311144]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ac.sharedstore;ActivIdentity Shared Store Service; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [2009-06-03 277032]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2007-02-06 80384]
R2 ASBroker;Logon Session Broker; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ASChannel;Local Communication Channel; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ATService;AuthenTec Fingerprint Service; C:\Program Files\Fingerprint Sensor\ATService.exe [2009-07-29 1841912]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2014-08-25 3242000]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2014-08-25 289328]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 HP ProtectTools Service;HP ProtectTools Service; C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe [2009-08-07 45056]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-03-17 92216]
R2 HpFkCryptService;Drive Encryption Service; C:\Program Files (x86)\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [2009-07-29 256544]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 30520]
R2 IpOverUsbSvc;Windows Phone IP over USB Transport (IpOverUsbSvc); C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [2014-04-17 22768]
R2 SENADB;SEcnStatutsDatabase; C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmdb.exe [2011-07-19 101336]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2012-10-20 130024]
R2 VMAuthdService;VMware Authorization Service; C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe [2013-10-18 86096]
R2 VMnetDHCP;VMware DHCP Service; C:\Windows\syswow64\vmnetdhcp.exe [2013-10-18 358480]
R2 VMUSBArbService;VMware USB Arbitration Service; C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [2013-10-09 905272]
R2 VMware NAT Service;VMware NAT Service; C:\Windows\syswow64\vmnat.exe [2013-10-18 437328]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2011-03-17 800824]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-24 136176]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-10-01 968504]
S2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-10-01 1871160]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 c2wts;@%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [2010-02-03 15768]
S3 Com4QLBEx;Com4QLBEx; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-01-12 227896]
S3 fussvc;Windows App Certification Kit Fast User Switching Utility Service; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [2014-02-20 142336]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-24 136176]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-24 194032]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-05-30 111616]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 50942144]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-03-22 119408]
S3 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2011-09-22 58345832]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2010-06-25 117264]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 Te.Service;Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [2013-08-22 119808]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2011-09-22 431464]
S4 SQLBrowser;SQL Server Browser; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2011-09-22 255336]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Zdravím a prosím o kontrolu

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Jen se zeptam pouzivate legalni operacni system, nejvyssi licence Ultimate zrovna neni bezna domaci verze :?:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
honyzahy
Návštěvník
Návštěvník
Příspěvky: 8
Registrován: 15 říj 2014 15:24

Re: Zdravím a prosím o kontrolu

#3 Příspěvek od honyzahy »

Ano, je to odkoupeny firemni NB.
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Zdravím a prosím o kontrolu

#4 Příspěvek od vyosek »

:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
honyzahy
Návštěvník
Návštěvník
Příspěvky: 8
Registrován: 15 říj 2014 15:24

Re: Zdravím a prosím o kontrolu

#5 Příspěvek od honyzahy »

# AdwCleaner v4.000 - Report created 16/10/2014 at 18:14:31
# DB v2014-10-15.7
# Updated 12/10/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : HonyZahy - NB-HZ
# Running from : C:\Users\HonyZahy\Desktop\adwcleaner_4.000.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Mozilla Firefox v28.0 (en-US)


-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [2822 octets] - [15/10/2014 12:45:32]
AdwCleaner[R1].txt - [889 octets] - [16/10/2014 18:11:50]
AdwCleaner[S0].txt - [2839 octets] - [15/10/2014 13:16:54]
AdwCleaner[S1].txt - [804 octets] - [16/10/2014 18:14:31]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [863 octets] ##########
Nahoru
honyzahy
Návštěvník
Návštěvník
Příspěvky: 8
Registrován: 15 říj 2014 15:24

Re: Zdravím a prosím o kontrolu

#6 Příspěvek od honyzahy »

Zoek.exe v5.0.0.0 Updated 16-10-2014
Tool run by HonyZahy on źt 16.10.2014 at 18:21:15,43.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\HonyZahy\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

16.10.2014 19:21:50 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-425939938-1532658576-2361754779-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0EA99306-BC87-4930-9E1D-1D1EA32A7E4E} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{0EA99306-BC87-4930-9E1D-1D1EA32A7E4E} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0EA99306-BC87-4930-9E1D-1D1EA32A7E4E} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\HonyZahy\AppData\Roaming\Mozilla\Firefox\Profiles\s1kirrcy.default\prefs.js:

Added to C:\Users\HonyZahy\AppData\Roaming\Mozilla\Firefox\Profiles\s1kirrcy.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\HonyZahy\AppData\Roaming\Thunderbird\Profiles\876crnc8.default\prefs.js:

Added to C:\Users\HonyZahy\AppData\Roaming\Thunderbird\Profiles\876crnc8.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

==== Deleting Files \ Folders ======================

C:\Users\HonyZahy\.android deleted
C:\PROGRA~2\SopCast deleted
C:\PROGRA~3\Avg_Update_0614a deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\HonyZahy\AppData\Local\cache deleted
C:\Users\HonyZahy\Downloads\bitcoinj-0.11-bundled.jar deleted
C:\Users\HonyZahy\Downloads\sqlite-netFx40-binary-bundle-Win32-2010-1.0.93.0.zip deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
"C:\Users\HonyZahy\AppData\Roaming\FreeCAD" deleted
"C:\Users\HonyZahy\AppData\Roaming\Samsung" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"fiddlerhook@fiddler2.com"="C:\Program Files (x86)\Fiddler2\FiddlerHook" [07.09.2014 07:12]

==== Firefox Extensions ======================

ProfilePath: C:\Users\HonyZahy\AppData\Roaming\Mozilla\Firefox\Profiles\s1kirrcy.default
- Flashblock - %ProfilePath%\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
- YouTube Caption Downloader - %ProfilePath%\extensions\captiondownloader@hiephm.com.xpi
- Firebug - %ProfilePath%\extensions\firebug@software.joehewitt.com.xpi
- SmartVideo For YouTube - %ProfilePath%\extensions\mytube@ashishmishra.in.xpi

ProfilePath: C:\Users\HonyZahy\AppData\Roaming\Thunderbird\Profiles\876crnc8.default
- Test Pilot for Thunderbird - %ProfilePath%\extensions\tbtestpilot@labs.mozilla.com.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\HonyZahy\AppData\Roaming\Mozilla\Firefox\Profiles\s1kirrcy.default
FB5621842FDABF9F8359775573498FBC - C:\Users\HonyZahy\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll - Google Update
2549375E682A65FA624D52F3AD27FC48 - C:\Users\HonyZahy\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player
A58DE0A570148AF5FF3512B2A340D09F - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll - Shockwave Flash
E37EAD09D28AE19D8A39B6A95F47513A - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll - Shockwave for Director / Shockwave for Director
87132527E2256CF6683A18C4EB34DD3B - C:\Windows\system32\Wat\npWatWeb.dll - Windows Activation Technologies


==== Chromium Look ======================

PageSpeed Insights (by Google) - HonyZahy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gplegfbjlmmehdoakndmohflojccocli

==== Chromium Startpages ======================

C:\Users\HonyZahy\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "http://www.idnes.cz/",


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.idnes.cz/"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.idnes.cz/"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{C9330BD6-953D-4118-BE64-DB0389075EC0} Google Url="http://www.google.com/search?q={searchTerms}&rlz="
{C9330BD6-953D-4118-BE64-DB0389075EC0} Google Url="http://www.google.com/search?q={searchTerms}&rlz="

==== Reset Google Chrome ======================

C:\Users\HonyZahy\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\HonyZahy\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\HonyZahy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\HonyZahy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\HonyZahy\AppData\Local\Mozilla\Firefox\Profiles\s1kirrcy.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\HonyZahy\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=770 folders=886 2805165466 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\HonyZahy\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\HonyZahy\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on źt 16.10.2014 at 20:14:02,53 ======================
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Zdravím a prosím o kontrolu

#7 Příspěvek od vyosek »

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=30&t=133101
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
honyzahy
Návštěvník
Návštěvník
Příspěvky: 8
Registrován: 15 říj 2014 15:24

Re: Zdravím a prosím o kontrolu

#8 Příspěvek od honyzahy »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-10-2014
Ran by HonyZahy (administrator) on NB-HZ on 16-10-2014 21:00:22
Running from C:\Users\HonyZahy\Desktop
Loaded Profile: HonyZahy (Available profiles: HonyZahy)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\ATService.exe
(McAfee, Inc.) C:\Program Files (x86)\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(ActivIdentity) C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Hewlett-Packard Development Company, L.P) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
() C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmdb.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Bioscrypt Inc.) C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\asghost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe
(PC Dynamics) C:\Program Files (x86)\SafeHouse\SdwMon32.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(PC Dynamics) C:\Program Files (x86)\SafeHouse\SdwTray.exe
(Google Inc.) C:\Users\HonyZahy\AppData\Local\Google\Update\GoogleUpdate.exe
() C:\Program Files (x86)\SIM\sim.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmw.exe
() C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmwj.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Analog Devices, Inc.) C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Prog-Soft s.r.o.) C:\Program Files (x86)\PSPad editor\PSPad.exe
(Ghisler Software GmbH) C:\Program Files\totalcmd\TOTALCMD64.EXE
(forum.viry.cz) C:\Users\HonyZahy\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2174760 2010-06-04] (Synaptics Incorporated)
HKLM\...\Run: [acevents] => C:\Program Files\ActivIdentity\ActivClient\acevents.exe [196648 2009-06-03] (ActivIdentity)
HKLM\...\Run: [accrdsub] => C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [483880 2009-06-03] (ActivIdentity)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-05-31] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PTHOSTTR] => C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE [354360 2009-08-07] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [CognizanceTS] => rundll32.exe C:\PROGRA~2\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-06-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LauncherM1400] => C:\Program Files (x86)\EPSON_P2B\Printer Software\Launcher\selaunch.exe [2438112 2011-04-27] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [DocuPrint M1400 RUN] => C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmRun.exe [361952 2011-04-27] ()
HKLM-x32\...\Run: [StatusAutoRunM1400] => C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmpl.exe [4480984 2011-07-19] ()
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5188112 2014-08-25] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SoundMAXPnP] => C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [1183744 2007-02-21] (Analog Devices, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [PC Dynamics SdwMon32] => C:\Program Files (x86)\SafeHouse\SdwMon32.exe [151552 2012-11-09] (PC Dynamics)
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [SafeHouseSystemTray] => C:\Program Files (x86)\SafeHouse\SdwTray.exe [360448 2012-11-09] (PC Dynamics)
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [Google Update] => C:\Users\HonyZahy\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-17] (Google Inc.)
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd)
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [AVG-Secure-Search-Update_1213b] => C:\Users\HonyZahy\AppData\Roaming\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe /PROMPT /mid=780bb9e06af547d3b936d1191024e9fb-227c9dc9e123848472d49caca8fbfd736015c979 /CMPID=1213b
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [] => [X]
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [AVG-Secure-Search-Update_0214c] => C:\Users\HonyZahy\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe /PROMPT /mid=780bb9e06af547d3b936d1191024e9fb-227c9dc9e123848472d49caca8fbfd736015c979 /CMPID=0214c
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\MountPoints2: {7fb379d8-551f-11e3-840f-c46c622da462} - F:\Autorun.exe
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\MountPoints2: {7fb379e5-551f-11e3-840f-c46c622da462} - F:\Autorun.exe
AppInit_DLLs: C:\PROGRA~2\HEWLET~1\IAM\bin\APSHOO~1.DLL => C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\APSHook64.dll [382224 2009-07-28] (Bioscrypt Inc.)
AppInit_DLLs-x32: C:\PROGRA~2\HEWLET~1\IAM\bin\APSHook.dll => C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\APSHook.dll [89872 2009-07-28] (Bioscrypt Inc.)
Lsa: [Notification Packages] scecli ASCredProv64
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SIM.lnk
ShortcutTarget: SIM.lnk -> C:\Program Files (x86)\SIM\sim.exe ()
Startup: C:\Users\HonyZahy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SystemExplorerDisabled ()
Startup: C:\Users\HonyZahy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [1AMPCBOK] -> {04cd1f3e-81d5-4904-a3ab-e0f99a7d769d} => No File
ShellIconOverlayIdentifiers-x32: [1AMPCBOK] -> {04cd1f3e-81d5-4904-a3ab-e0f99a7d769d} => No File
BootExecute: autocheck autochk * SmartDefragBootTime.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: 127.0.0.1:8081
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.idnes.cz/
SearchScopes: HKCU - DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {C9330BD6-953D-4118-BE64-DB0389075EC0} URL = http://www.google.com/search?q={searchTerms}&rlz=
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_20\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_20\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Microsoft Web Test Recorder 12.0 Helper -> {432dd630-7e03-4c97-9d62-b99f52df4fc2} -> C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_20\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Aptana Debugger -> {B8ADD4EA-ADE3-4DEB-A957-9BBD17D6D0C8} -> C:\xampp\htdocs\.metadata\.plugins\com.aptana.js.debug.core\.dll\AptanaDebugger.dll (Appcelerator, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_20\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Credential Manager for HP ProtectTools -> {DF21F1DB-80C6-11D3-9483-B03D0EC10000} -> C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll (Bioscrypt Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Aptana Debugger - {F348E1B0-CBFE-47C3-81B4-9F44B3B5A618} - C:\xampp\htdocs\.metadata\.plugins\com.aptana.js.debug.core\.dll\AptanaDebugger.dll (Appcelerator, Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shoc ... tor/sw.cab
DPF: HKLM-x32 {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} https://secure.logmein.com//activex/ractrl.cab?lmi=972
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\HonyZahy\AppData\Roaming\Mozilla\Firefox\Profiles\s1kirrcy.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF DefaultSearchUrl: http://www.google.com/search?btnG=Google+Search&q=
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF NetworkProxy: "http", "66.146.193.31"
FF NetworkProxy: "http_port", 8118
FF NetworkProxy: "type", 1
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files (x86)\Java\jre1.8.0_20\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files (x86)\Java\jre1.8.0_20\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\HonyZahy\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\HonyZahy\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\HonyZahy\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Extension: Flashblock - C:\Users\HonyZahy\AppData\Roaming\Mozilla\Firefox\Profiles\s1kirrcy.default\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-03-22]
FF Extension: YouTube Caption Downloader - C:\Users\HonyZahy\AppData\Roaming\Mozilla\Firefox\Profiles\s1kirrcy.default\Extensions\captiondownloader@hiephm.com.xpi [2014-03-22]
FF Extension: Firebug - C:\Users\HonyZahy\AppData\Roaming\Mozilla\Firefox\Profiles\s1kirrcy.default\Extensions\firebug@software.joehewitt.com.xpi [2014-03-22]
FF Extension: SmartVideo For YouTube - C:\Users\HonyZahy\AppData\Roaming\Mozilla\Firefox\Profiles\s1kirrcy.default\Extensions\mytube@ashishmishra.in.xpi [2014-03-22]
FF HKLM-x32\...\Firefox\Extensions: [fiddlerhook@fiddler2.com] - C:\Program Files (x86)\Fiddler2\FiddlerHook
FF Extension: FiddlerHook - C:\Program Files (x86)\Fiddler2\FiddlerHook [2014-09-07]

Chrome:
=======
CHR Profile: C:\Users\HonyZahy\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (SEOquake) - C:\Users\HonyZahy\AppData\Local\Google\Chrome\User Data\Default\Extensions\akdgnmcogleenhbclghghlkkdndkjdjc [2013-07-03]
CHR Extension: (Proxy SwitchySharp) - C:\Users\HonyZahy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpplabbmogkhghncfbfdeeokoefdjegm [2014-09-02]
CHR Extension: (PageSpeed Insights (by Google)) - C:\Users\HonyZahy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gplegfbjlmmehdoakndmohflojccocli [2013-07-03]
CHR Extension: (NetBeans Connector) - C:\Users\HonyZahy\AppData\Local\Google\Chrome\User Data\Default\Extensions\hafdlehgocfcodbgjnpecfajgkeejnaa [2013-05-26]
CHR Extension: (No Name) - C:\Users\HonyZahy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbebdjcjllheeclffnofhgcimmlkkbon [2012-12-20]
CHR Extension: (Google Wallet) - C:\Users\HonyZahy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ac.sharedstore; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [277032 2009-06-03] (ActivIdentity)
R2 AEADIFilters; C:\Windows\system32\AEADISRV.EXE [80384 2007-02-06] (Andrea Electronics Corporation)
R2 ASBroker; C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll [192784 2009-07-28] (Bioscrypt Inc.)
R2 ASChannel; C:\Program Files (x86)\Hewlett-Packard\IAM\Bin\AsChnl.dll [150288 2009-07-28] (Bioscrypt Inc.)
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3242000 2014-08-25] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [289328 2014-08-25] (AVG Technologies CZ, s.r.o.)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-03] (Microsoft Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
R2 HP ProtectTools Service; C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe [45056 2009-08-07] (Hewlett-Packard Development Company, L.P) [File not signed]
R2 HpFkCryptService; C:\Program Files (x86)\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [256544 2009-07-29] (McAfee, Inc.)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22768 2014-04-17] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
S3 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [58345832 2011-09-22] (Microsoft Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
R2 SENADB; C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmdb.exe [101336 2011-07-19] ()
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [431464 2011-09-22] (Microsoft Corporation)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [152344 2014-06-30] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [244504 2014-07-21] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [235800 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [328984 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123672 2014-08-06] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [269080 2014-06-17] (AVG Technologies CZ, s.r.o.)
S3 CrystalSysInfo; C:\Program Files\MediaCoder\SysInfoX64.sys [18128 2007-09-25] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2011-12-15] (DT Soft Ltd)
R3 HBtnKey; C:\Windows\System32\DRIVERS\cpqbttn.sys [19000 2010-02-25] (Hewlett-Packard Company)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-10-01] (Malwarebytes Corporation)
S3 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
S3 OSFMount; C:\Program Files\OSFMount\OSFMount.sys [540224 2012-05-09] (PassMark Software)
R1 RsvLock; C:\Windows\System32\Drivers\RsvLock.sys [14880 2009-07-29] (SafeBoot International)
R1 SafDskNT; C:\Windows\system32\drivers\SAFDSKNT.SYS [75760 2012-11-08] (PC Dynamics)
R0 SafeBoot; C:\Windows\System32\Drivers\SafeBoot.sys [55840 2009-07-29] () [File not signed]
R0 SbAlg; C:\Windows\System32\Drivers\SbAlg.sys [60160 2007-07-16] (SafeBoot N.V.)
R0 SbFsLock; C:\Windows\System32\Drivers\SbFsLock.sys [15392 2009-07-29] (SafeBoot International)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [17720 2010-11-26] ()
R0 vidsflt53; C:\Windows\System32\DRIVERS\vsflt53.sys [141920 2013-01-02] (Acronis)
R2 VMparport; C:\Windows\system32\drivers\VMparport.sys [31824 2013-10-18] (VMware, Inc.)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [73296 2013-10-08] (VMware, Inc.)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S3 DisplayLinkUsbPort; system32\DRIVERS\DisplayLinkUsbPort_5.5.29055.0.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [X]
S3 ssudmdm; system32\DRIVERS\ssudmdm.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-16 21:00 - 2014-10-16 21:00 - 00025022 _____ () C:\Users\HonyZahy\Desktop\FRST.txt
2014-10-16 20:59 - 2014-10-16 20:59 - 00112640 _____ (forum.viry.cz) C:\Users\HonyZahy\Downloads\FRSTLauncher (1).exe
2014-10-16 20:59 - 2014-10-16 20:47 - 00112640 _____ (forum.viry.cz) C:\Users\HonyZahy\Desktop\FRSTLauncher.exe
2014-10-16 20:48 - 2014-10-16 21:00 - 00000000 ____D () C:\FRST
2014-10-16 20:47 - 2014-10-16 20:47 - 00112640 _____ (forum.viry.cz) C:\Users\HonyZahy\Downloads\FRSTLauncher.exe
2014-10-16 20:46 - 2014-10-16 20:45 - 02112000 _____ (Farbar) C:\Users\HonyZahy\Desktop\FRST64.exe
2014-10-16 20:45 - 2014-10-16 20:45 - 02112000 _____ (Farbar) C:\Users\HonyZahy\Downloads\FRST64.exe
2014-10-16 20:21 - 2013-09-28 20:56 - 00001771 _____ () C:\hosts.~
2014-10-16 20:02 - 2014-10-16 18:21 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-10-16 19:21 - 2014-10-16 20:14 - 00009980 _____ () C:\zoek-results.log
2014-10-16 18:21 - 2014-10-16 19:48 - 00000000 ____D () C:\zoek_backup
2014-10-16 18:09 - 2014-10-16 18:09 - 01290752 _____ () C:\Users\HonyZahy\Desktop\zoek.exe
2014-10-16 18:08 - 2014-10-16 18:08 - 01976320 _____ () C:\Users\HonyZahy\Desktop\adwcleaner_4.000.exe
2014-10-16 12:55 - 2014-10-16 12:56 - 00000000 ____D () C:\rsit
2014-10-15 21:27 - 2014-10-15 21:27 - 29599162 _____ () C:\Users\HonyZahy\Downloads\microslice_v2.1.zip
2014-10-15 13:41 - 2014-10-15 13:41 - 04161313 _____ () C:\Users\HonyZahy\Downloads\tdsskiller.zip
2014-10-15 12:45 - 2014-10-16 18:14 - 00000000 ____D () C:\AdwCleaner
2014-10-15 10:49 - 2014-10-15 12:58 - 420478976 _____ () C:\Users\HonyZahy\Downloads\2014_Computer Internet_Collection_Part_4_Sheva370_Softarchive.net.part4.rar
2014-10-14 23:21 - 2014-10-14 23:29 - 77297546 _____ () C:\Users\HonyZahy\Downloads\2014 Computer and Internet Collection III ePub.softarchive.net.part15.rar
2014-10-14 22:43 - 2014-10-14 22:55 - 105906176 _____ () C:\Users\HonyZahy\Downloads\2014 Computer and Internet Collection III ePub.softarchive.net.part14.rar
2014-10-14 22:41 - 2014-10-14 23:19 - 117990487 _____ () C:\Users\HonyZahy\Downloads\2014_Computer Internet_Collection_Part_4_Sheva370_Softarchive.net.part6.rar
2014-10-14 22:15 - 2014-10-14 22:28 - 105906176 _____ () C:\Users\HonyZahy\Downloads\2014 Computer and Internet Collection III ePub.softarchive.net.part13.rar
2014-10-14 22:01 - 2014-10-14 22:12 - 105906176 _____ () C:\Users\HonyZahy\Downloads\2014 Computer and Internet Collection III ePub.softarchive.net.part12.rar
2014-10-14 21:46 - 2014-10-14 21:58 - 105906176 _____ () C:\Users\HonyZahy\Downloads\2014 Computer and Internet Collection III ePub.softarchive.net.part11.rar
2014-10-14 17:23 - 2014-10-16 20:12 - 00011892 _____ () C:\Windows\setupact.log
2014-10-14 17:23 - 2014-10-14 17:23 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-14 17:07 - 2014-10-14 17:18 - 105906176 _____ () C:\Users\HonyZahy\Downloads\2014 Computer and Internet Collection III ePub.softarchive.net.part10.rar
2014-10-14 16:30 - 2014-10-14 16:42 - 105906176 _____ () C:\Users\HonyZahy\Downloads\2014 Computer and Internet Collection III ePub.softarchive.net.part09.rar
2014-10-14 16:03 - 2014-10-14 16:14 - 105906176 _____ () C:\Users\HonyZahy\Downloads\2014 Computer and Internet Collection III ePub.softarchive.net.part08.rar
2014-10-14 15:51 - 2014-10-14 16:02 - 105906176 _____ () C:\Users\HonyZahy\Downloads\2014 Computer and Internet Collection III ePub.softarchive.net.part07.rar
2014-10-14 15:38 - 2014-10-14 15:49 - 105906176 _____ () C:\Users\HonyZahy\Downloads\2014 Computer and Internet Collection III ePub.softarchive.net.part06.rar
2014-10-14 15:22 - 2014-10-14 15:34 - 105906176 _____ () C:\Users\HonyZahy\Downloads\2014 Computer and Internet Collection III ePub.softarchive.net.part05.rar
2014-10-14 14:49 - 2014-10-14 15:01 - 105906176 _____ () C:\Users\HonyZahy\Downloads\2014 Computer and Internet Collection III ePub.softarchive.net.part04.rar
2014-10-14 14:36 - 2014-10-14 14:47 - 105906176 _____ () C:\Users\HonyZahy\Downloads\2014 Computer and Internet Collection III ePub.softarchive.net.part03.rar
2014-10-14 14:24 - 2014-10-14 14:35 - 105906176 _____ () C:\Users\HonyZahy\Downloads\2014 Computer and Internet Collection III ePub.softarchive.net.part02.rar
2014-10-14 13:58 - 2014-10-14 14:23 - 105906176 _____ () C:\Users\HonyZahy\Downloads\2014 Computer and Internet Collection III ePub.softarchive.net.part01.rar
2014-10-14 13:41 - 2014-10-14 15:58 - 420478976 _____ () C:\Users\HonyZahy\Downloads\2014_Computer Internet_Collection_Part_4_Sheva370_Softarchive.net.part5.rar
2014-10-14 08:56 - 2014-10-14 12:45 - 420478976 _____ () C:\Users\HonyZahy\Downloads\Computer_Internet_eBooks_Part1_Sheva370_Softarchive.net.part3.rar
2014-10-14 08:55 - 2014-10-14 11:12 - 420478976 _____ () C:\Users\HonyZahy\Downloads\Computer_Internet_eBooks_Part1_Sheva370_Softarchive.net.part2.rar
2014-10-14 08:55 - 2014-10-14 11:04 - 420478976 _____ () C:\Users\HonyZahy\Downloads\Computer_Internet_eBooks_Part1_Sheva370_Softarchive.net.part1.rar
2014-10-14 00:34 - 2014-10-14 01:05 - 403267256 _____ () C:\Users\HonyZahy\Downloads\Softarchive.net_500ComEbook.part8.rar
2014-10-13 22:17 - 2014-10-13 23:49 - 698351616 _____ () C:\Users\HonyZahy\Downloads\Softarchive.net_500ComEbook.part7.rar
2014-10-13 22:11 - 2014-10-13 22:11 - 00000000 _____ () C:\sparkraw.log
2014-10-13 20:35 - 2014-10-13 21:51 - 698351616 _____ () C:\Users\HonyZahy\Downloads\Softarchive.net_500ComEbook.part6.rar
2014-10-13 18:57 - 2014-10-13 20:13 - 698351616 _____ () C:\Users\HonyZahy\Downloads\Softarchive.net_500ComEbook.part5.rar
2014-10-13 13:14 - 2014-10-13 14:30 - 698351616 _____ () C:\Users\HonyZahy\Downloads\Softarchive.net_500ComEbook.part4.rar
2014-10-13 11:52 - 2014-10-13 13:08 - 698351616 _____ () C:\Users\HonyZahy\Downloads\Softarchive.net_500ComEbook.part3.rar
2014-10-13 10:32 - 2014-10-13 11:48 - 698351616 _____ () C:\Users\HonyZahy\Downloads\Softarchive.net_500ComEbook.part2.rar
2014-10-13 09:15 - 2014-10-13 10:30 - 698351616 _____ () C:\Users\HonyZahy\Downloads\Softarchive.net_500ComEbook.part1.rar
2014-10-13 09:13 - 2013-12-21 04:05 - 105906176 _____ () C:\Users\HonyZahy\Downloads\Tumblr_Tyc00n_softarchive.net.part4.rar
2014-10-12 12:49 - 2014-10-12 12:49 - 00321848 _____ (Malwarebytes Corporation) C:\Users\HonyZahy\Downloads\mbam-clean-2.1.1.1001.exe
2014-10-12 12:05 - 2014-10-15 14:21 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-12 12:04 - 2014-10-13 21:42 - 00001135 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-12 12:04 - 2014-10-13 21:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-12 12:04 - 2014-10-13 21:42 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-10-12 12:04 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-10-12 12:04 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-10-12 06:45 - 2014-10-12 07:05 - 188369775 _____ () C:\Users\HonyZahy\Downloads\Com_Internet_Ebook_2012_5_Softarchive.net.part8.rar
2014-10-12 05:44 - 2014-10-12 06:10 - 232783872 _____ () C:\Users\HonyZahy\Downloads\Com_Internet_Ebook_2012_5_Softarchive.net.part7.rar
2014-10-11 18:58 - 2014-10-11 19:24 - 232783872 _____ () C:\Users\HonyZahy\Downloads\Com_Internet_Ebook_2012_5_Softarchive.net.part6.rar
2014-10-11 18:28 - 2014-10-11 18:57 - 232783872 _____ () C:\Users\HonyZahy\Downloads\Com_Internet_Ebook_2012_5_Softarchive.net.part5.rar
2014-10-11 17:54 - 2014-10-11 18:20 - 232783872 _____ () C:\Users\HonyZahy\Downloads\Com_Internet_Ebook_2012_5_Softarchive.net.part3.rar
2014-10-11 16:52 - 2014-10-11 17:18 - 232783872 _____ () C:\Users\HonyZahy\Downloads\Com_Internet_Ebook_2012_5_Softarchive.net.part4.rar
2014-10-11 13:17 - 2014-10-11 13:18 - 07008546 _____ () C:\Users\HonyZahy\Downloads\itextsharp-all-5.5.3.zip
2014-10-11 12:59 - 2014-10-11 13:25 - 232783872 _____ () C:\Users\HonyZahy\Downloads\Com_Internet_Ebook_2012_5_Softarchive.net.part2.rar
2014-10-11 12:20 - 2014-10-11 12:57 - 232783872 _____ () C:\Users\HonyZahy\Downloads\Com_Internet_Ebook_2012_5_Softarchive.net.part1.rar
2014-10-11 11:24 - 2014-10-11 11:25 - 12800953 _____ () C:\Users\HonyZahy\Downloads\3319076493-SoftArchive.net.zip
2014-10-11 11:18 - 2014-10-11 11:19 - 08238721 _____ () C:\Users\HonyZahy\Downloads\1484201825-SoftArchive.net_Mastering.rar
2014-10-04 18:57 - 2014-10-04 19:40 - 736464896 _____ () C:\Users\HonyZahy\Downloads\RYCHLE A ZBĚSILE 3 - TOKIJSKÁ JÍZDA 2006 CZ dabing.avi
2014-09-30 01:38 - 2014-09-30 01:38 - 00014547 _____ () C:\Users\HonyZahy\Downloads\201409-godaddy-nameserver.xlsx
2014-09-29 07:20 - 2014-09-29 07:40 - 182786188 _____ () C:\Users\HonyZahy\Downloads\Dva-a-půl-chlapa-5x09-(Vdolson92).avi
2014-09-29 07:00 - 2014-09-29 07:19 - 182814860 _____ () C:\Users\HonyZahy\Downloads\Dva-a-půl-chlapa-5x08-(Vdolson92).avi
2014-09-29 06:39 - 2014-09-29 06:59 - 182732940 _____ () C:\Users\HonyZahy\Downloads\Dva-a-půl-chlapa-5x07-(Vdolson92).avi
2014-09-29 06:19 - 2014-09-29 06:38 - 182777996 _____ () C:\Users\HonyZahy\Downloads\Dva-a-půl-chlapa-5x06-(Vdolson92).avi
2014-09-29 05:51 - 2014-09-29 06:11 - 182827148 _____ () C:\Users\HonyZahy\Downloads\Dva-a-půl-chlapa-5x05-(Vdolson92).avi
2014-09-29 05:31 - 2014-09-29 05:50 - 182749324 _____ () C:\Users\HonyZahy\Downloads\Dva-a-půl-chlapa-5x04-(Vdolson92).avi
2014-09-29 04:58 - 2014-09-29 05:24 - 182802572 _____ () C:\Users\HonyZahy\Downloads\Dva-a-půl-chlapa-5x03-(Vdolson92).avi
2014-09-29 04:34 - 2014-09-29 04:56 - 182681740 _____ () C:\Users\HonyZahy\Downloads\Dva-a-půl-chlapa-5x02-(Vdolson92).avi
2014-09-29 04:14 - 2014-09-29 04:33 - 182646784 _____ () C:\Users\HonyZahy\Downloads\Dva-a-půl-chlapa---5x01---Velcí-ptáci,pavouci-a-máma.avi
2014-09-18 01:08 - 2014-09-18 01:08 - 00042861 _____ () C:\Users\HonyZahy\Downloads\VisualEvent.js
2014-09-18 01:01 - 2014-09-18 01:01 - 00002655 _____ () C:\Users\HonyZahy\Downloads\VisualEvent_Loader.js

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-16 20:38 - 2012-11-16 20:31 - 00018863 _____ () C:\Users\HonyZahy\Downloads\sazky_work.txt
2014-10-16 20:33 - 2012-08-24 04:37 - 00000956 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-16 20:20 - 2009-07-14 06:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-16 20:20 - 2009-07-14 06:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-16 20:16 - 2011-12-13 11:28 - 01799855 _____ () C:\Windows\WindowsUpdate.log
2014-10-16 20:14 - 2011-12-16 14:02 - 00000000 ____D () C:\Users\HonyZahy\AppData\Roaming\SIM
2014-10-16 20:13 - 2012-08-24 04:37 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-16 20:13 - 2011-12-19 15:44 - 00000000 ____D () C:\ProgramData\hpqLog
2014-10-16 20:12 - 2011-12-14 11:44 - 00000000 ____D () C:\ProgramData\VMware
2014-10-16 20:12 - 2010-11-21 05:47 - 00438934 _____ () C:\Windows\PFRO.log
2014-10-16 20:12 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-16 20:11 - 2013-01-22 01:41 - 00000974 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-425939938-1532658576-2361754779-1000UA.job
2014-10-16 19:48 - 2011-12-13 11:33 - 00000000 ____D () C:\Users\HonyZahy
2014-10-16 19:22 - 2013-09-28 20:42 - 00000840 _____ () C:\Windows\system32\Drivers\etc\hosts.~
2014-10-16 18:05 - 2013-10-14 18:39 - 00000000 ____D () C:\ProgramData\MFAData
2014-10-16 17:44 - 2014-08-07 10:04 - 00000000 ____D () C:\Users\HonyZahy\Documents\Visual Studio 2013
2014-10-16 17:40 - 2013-02-26 19:20 - 00018113 _____ () C:\Users\HonyZahy\Downloads\sazky_work.~txt
2014-10-16 14:11 - 2013-01-22 01:41 - 00000922 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-425939938-1532658576-2361754779-1000Core.job
2014-10-16 12:55 - 2013-05-07 23:05 - 00000000 ____D () C:\Program Files\trend micro
2014-10-15 13:21 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-10-15 13:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Vss
2014-10-14 17:25 - 2010-11-21 11:27 - 00743094 _____ () C:\Windows\system32\perfh005.dat
2014-10-14 17:25 - 2010-11-21 11:27 - 00170226 _____ () C:\Windows\system32\perfc005.dat
2014-10-14 17:25 - 2009-07-14 07:13 - 01788242 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-14 17:24 - 2011-12-18 18:22 - 00000000 ____D () C:\Users\HonyZahy\AppData\Roaming\PC Suite
2014-10-14 06:06 - 2011-12-14 13:32 - 00000000 ____D () C:\Users\HonyZahy\AppData\Local\GHISLER
2014-10-14 06:02 - 2012-01-10 16:43 - 00000000 ____D () C:\Users\HonyZahy\Downloads\Book
2014-10-13 18:01 - 2013-06-13 18:24 - 00016119 _____ () C:\Users\HonyZahy\Downloads\work-cliboard.txt
2014-10-12 18:30 - 2012-04-03 22:47 - 00000000 ____D () C:\Windows\Minidump
2014-10-12 14:39 - 2014-05-19 05:59 - 00000000 ____D () C:\Users\HonyZahy\Downloads\Miner
2014-10-12 12:04 - 2012-08-03 01:16 - 00000000 ____D () C:\Users\HonyZahy\AppData\Roaming\Malwarebytes
2014-10-12 12:04 - 2012-08-03 01:16 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-10-11 12:08 - 2012-11-22 04:48 - 00000000 ____D () C:\Users\HonyZahy\AppData\Roaming\.minecraft
2014-10-09 03:07 - 2011-12-23 10:37 - 00000000 ____D () C:\Users\HonyZahy\AppData\Roaming\uTorrent
2014-10-01 11:11 - 2012-08-03 01:16 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-30 01:49 - 2012-04-03 22:50 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-30 01:49 - 2011-12-13 14:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-30 01:36 - 2011-12-18 01:49 - 00000000 ____D () C:\Program Files (x86)\PSPad editor
2014-09-25 04:22 - 2013-01-22 01:42 - 00002376 _____ () C:\Users\HonyZahy\Desktop\Google Chrome.lnk
2014-09-24 22:53 - 2013-01-14 15:29 - 00000000 ____D () C:\Users\HonyZahy\Downloads\torrent
2014-09-20 01:07 - 2013-06-14 19:29 - 00016025 _____ () C:\Users\HonyZahy\Downloads\work-cliboard.~txt
2014-09-16 17:15 - 2013-11-17 14:15 - 00000000 ____D () C:\Users\HonyZahy\Downloads\Nová složka

Files to move or delete:
====================
C:\Users\HonyZahy\hsqlprefs.dat
C:\Users\HonyZahy\jagex_cl_runescape_LIVE.dat
C:\Users\HonyZahy\random.dat


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-425939938-1532658576-2361754779-1000Core.job => C:\Users\HonyZahy\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-425939938-1532658576-2361754779-1000UA.job => C:\Users\HonyZahy\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: AVG AntiVirus Free Edition 2014 (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\HonyZahy\Desktop" je 104 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
DefaultOutboundAction REG_DWORD 0x0
DefaultInboundAction REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
DefaultOutboundAction REG_DWORD 0x0
DefaultInboundAction REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Přílohy
Addition.zip
(13.57 KiB) Staženo 31 x
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Zdravím a prosím o kontrolu

#9 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
CloseProcesses:
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-05-31] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-06-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [Google Update] => C:\Users\HonyZahy\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-17] (Google Inc.)
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd)
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [AVG-Secure-Search-Update_1213b] => C:\Users\HonyZahy\AppData\Roaming\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe /PROMPT /mid=780bb9e06af547d3b936d1191024e9fb-227c9dc9e123848472d49caca8fbfd736015c979 /CMPID=1213b
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [] => [X]
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [AVG-Secure-Search-Update_0214c] => C:\Users\HonyZahy\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe /PROMPT /mid=780bb9e06af547d3b936d1191024e9fb-227c9dc9e123848472d49caca8fbfd736015c979 /CMPID=0214c
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\MountPoints2: {7fb379d8-551f-11e3-840f-c46c622da462} - F:\Autorun.exe
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\MountPoints2: {7fb379e5-551f-11e3-840f-c46c622da462} - F:\Autorun.exe
Startup: C:\Users\HonyZahy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SystemExplorerDisabled ()
ShellIconOverlayIdentifiers: [1AMPCBOK] -> {04cd1f3e-81d5-4904-a3ab-e0f99a7d769d} => No File
ShellIconOverlayIdentifiers-x32: [1AMPCBOK] -> {04cd1f3e-81d5-4904-a3ab-e0f99a7d769d} => No File

ProxyServer: 127.0.0.1:8081
FF NetworkProxy: "http", "66.146.193.31"
FF NetworkProxy: "http_port", 8118
FF NetworkProxy: "type", 1

FF HKLM-x32\...\Firefox\Extensions: [fiddlerhook@fiddler2.com] - C:\Program Files (x86)\Fiddler2\FiddlerHook
FF Extension: FiddlerHook - C:\Program Files (x86)\Fiddler2\FiddlerHook [2014-09-07]

CHR Extension: (Proxy SwitchySharp) - C:\Users\HonyZahy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpplabbmogkhghncfbfdeeokoefdjegm [2014-09-02]

S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S3 DisplayLinkUsbPort; system32\DRIVERS\DisplayLinkUsbPort_5.5.29055.0.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [X]
S3 ssudmdm; system32\DRIVERS\ssudmdm.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

C:\Users\HonyZahy\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe
C:\Users\HonyZahy\AppData\Roaming\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe
2014-10-16 21:00 - 2014-10-16 21:00 - 00025022 _____ () C:\Users\HonyZahy\Desktop\FRST.txt
2014-10-16 20:59 - 2014-10-16 20:59 - 00112640 _____ (forum.viry.cz) C:\Users\HonyZahy\Downloads\FRSTLauncher (1).exe
2014-10-16 20:59 - 2014-10-16 20:47 - 00112640 _____ (forum.viry.cz) C:\Users\HonyZahy\Desktop\FRSTLauncher.exe
2014-10-16 20:47 - 2014-10-16 20:47 - 00112640 _____ (forum.viry.cz) C:\Users\HonyZahy\Downloads\FRSTLauncher.exe
2014-10-16 20:46 - 2014-10-16 20:45 - 02112000 _____ (Farbar) C:\Users\HonyZahy\Desktop\FRST64.exe
2014-10-16 20:21 - 2013-09-28 20:56 - 00001771 _____ () C:\hosts.~
2014-10-16 20:02 - 2014-10-16 18:21 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-10-16 19:21 - 2014-10-16 20:14 - 00009980 _____ () C:\zoek-results.log
2014-10-16 18:21 - 2014-10-16 19:48 - 00000000 ____D () C:\zoek_backup
2014-10-16 18:09 - 2014-10-16 18:09 - 01290752 _____ () C:\Users\HonyZahy\Desktop\zoek.exe
2014-10-16 18:08 - 2014-10-16 18:08 - 01976320 _____ () C:\Users\HonyZahy\Desktop\adwcleaner_4.000.exe
2014-10-16 12:55 - 2014-10-16 12:56 - 00000000 ____D () C:\rsit
2014-10-15 21:27 - 2014-10-15 21:27 - 29599162 _____ () C:\Users\HonyZahy\Downloads\microslice_v2.1.zip
2014-10-15 13:41 - 2014-10-15 13:41 - 04161313 _____ () C:\Users\HonyZahy\Downloads\tdsskiller.zip
2014-10-15 12:45 - 2014-10-16 18:14 - 00000000 ____D () C:\AdwCleaner
2014-10-12 12:49 - 2014-10-12 12:49 - 00321848 _____ (Malwarebytes Corporation) C:\Users\HonyZahy\Downloads\mbam-clean-2.1.1.1001.exe
C:\Users\HonyZahy\hsqlprefs.dat
C:\Users\HonyZahy\jagex_cl_runescape_LIVE.dat
C:\Users\HonyZahy\random.dat


Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-425939938-1532658576-2361754779-1000Core.job => C:\Users\HonyZahy\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-425939938-1532658576-2361754779-1000UA.job => C:\Users\HonyZahy\AppData\Local\Google\Update\GoogleUpdate.exe

Task: {8AAA9913-70FD-4B8D-A037-1BB4C3242B43} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask No Task File <==== ATTENTION
Task: {C20B4BD7-8D67-4EBA-83C2-5D6EBA7418CA} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline No Task File <==== ATTENTION

Hosts:
EmptyTemp:
Reboot:
End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
honyzahy
Návštěvník
Návštěvník
Příspěvky: 8
Registrován: 15 říj 2014 15:24

Re: Zdravím a prosím o kontrolu

#10 Příspěvek od honyzahy »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-10-2014
Ran by HonyZahy at 2014-10-16 22:39:59 Run:1
Running from C:\Users\HonyZahy\Desktop
Loaded Profile: HonyZahy (Available profiles: HonyZahy)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-05-31] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-06-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [Google Update] => C:\Users\HonyZahy\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-17] (Google Inc.)
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd)
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [AVG-Secure-Search-Update_1213b] => C:\Users\HonyZahy\AppData\Roaming\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe /PROMPT /mid=780bb9e06af547d3b936d1191024e9fb-227c9dc9e123848472d49caca8fbfd736015c979 /CMPID=1213b
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [] => [X]
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\Run: [AVG-Secure-Search-Update_0214c] => C:\Users\HonyZahy\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe /PROMPT /mid=780bb9e06af547d3b936d1191024e9fb-227c9dc9e123848472d49caca8fbfd736015c979 /CMPID=0214c
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\MountPoints2: {7fb379d8-551f-11e3-840f-c46c622da462} - F:\Autorun.exe
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\...\MountPoints2: {7fb379e5-551f-11e3-840f-c46c622da462} - F:\Autorun.exe
Startup: C:\Users\HonyZahy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SystemExplorerDisabled ()
ShellIconOverlayIdentifiers: [1AMPCBOK] -> {04cd1f3e-81d5-4904-a3ab-e0f99a7d769d} => No File
ShellIconOverlayIdentifiers-x32: [1AMPCBOK] -> {04cd1f3e-81d5-4904-a3ab-e0f99a7d769d} => No File

ProxyServer: 127.0.0.1:8081
FF NetworkProxy: "http", "66.146.193.31"
FF NetworkProxy: "http_port", 8118
FF NetworkProxy: "type", 1

FF HKLM-x32\...\Firefox\Extensions: [fiddlerhook@fiddler2.com] - C:\Program Files (x86)\Fiddler2\FiddlerHook
FF Extension: FiddlerHook - C:\Program Files (x86)\Fiddler2\FiddlerHook [2014-09-07]

CHR Extension: (Proxy SwitchySharp) - C:\Users\HonyZahy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpplabbmogkhghncfbfdeeokoefdjegm [2014-09-02]

S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S3 DisplayLinkUsbPort; system32\DRIVERS\DisplayLinkUsbPort_5.5.29055.0.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [X]
S3 ssudmdm; system32\DRIVERS\ssudmdm.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

C:\Users\HonyZahy\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe
C:\Users\HonyZahy\AppData\Roaming\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe
2014-10-16 21:00 - 2014-10-16 21:00 - 00025022 _____ () C:\Users\HonyZahy\Desktop\FRST.txt
2014-10-16 20:59 - 2014-10-16 20:59 - 00112640 _____ (forum.viry.cz) C:\Users\HonyZahy\Downloads\FRSTLauncher (1).exe
2014-10-16 20:59 - 2014-10-16 20:47 - 00112640 _____ (forum.viry.cz) C:\Users\HonyZahy\Desktop\FRSTLauncher.exe
2014-10-16 20:47 - 2014-10-16 20:47 - 00112640 _____ (forum.viry.cz) C:\Users\HonyZahy\Downloads\FRSTLauncher.exe
2014-10-16 20:46 - 2014-10-16 20:45 - 02112000 _____ (Farbar) C:\Users\HonyZahy\Desktop\FRST64.exe
2014-10-16 20:21 - 2013-09-28 20:56 - 00001771 _____ () C:\hosts.~
2014-10-16 20:02 - 2014-10-16 18:21 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-10-16 19:21 - 2014-10-16 20:14 - 00009980 _____ () C:\zoek-results.log
2014-10-16 18:21 - 2014-10-16 19:48 - 00000000 ____D () C:\zoek_backup
2014-10-16 18:09 - 2014-10-16 18:09 - 01290752 _____ () C:\Users\HonyZahy\Desktop\zoek.exe
2014-10-16 18:08 - 2014-10-16 18:08 - 01976320 _____ () C:\Users\HonyZahy\Desktop\adwcleaner_4.000.exe
2014-10-16 12:55 - 2014-10-16 12:56 - 00000000 ____D () C:\rsit
2014-10-15 21:27 - 2014-10-15 21:27 - 29599162 _____ () C:\Users\HonyZahy\Downloads\microslice_v2.1.zip
2014-10-15 13:41 - 2014-10-15 13:41 - 04161313 _____ () C:\Users\HonyZahy\Downloads\tdsskiller.zip
2014-10-15 12:45 - 2014-10-16 18:14 - 00000000 ____D () C:\AdwCleaner
2014-10-12 12:49 - 2014-10-12 12:49 - 00321848 _____ (Malwarebytes Corporation) C:\Users\HonyZahy\Downloads\mbam-clean-2.1.1.1001.exe
C:\Users\HonyZahy\hsqlprefs.dat
C:\Users\HonyZahy\jagex_cl_runescape_LIVE.dat
C:\Users\HonyZahy\random.dat


Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-425939938-1532658576-2361754779-1000Core.job => C:\Users\HonyZahy\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-425939938-1532658576-2361754779-1000UA.job => C:\Users\HonyZahy\AppData\Local\Google\Update\GoogleUpdate.exe

Task: {8AAA9913-70FD-4B8D-A037-1BB4C3242B43} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask No Task File <==== ATTENTION
Task: {C20B4BD7-8D67-4EBA-83C2-5D6EBA7418CA} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline No Task File <==== ATTENTION

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => value deleted successfully.
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => value deleted successfully.
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value deleted successfully.
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AVG-Secure-Search-Update_1213b => value deleted successfully.
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKU\S-1-5-21-425939938-1532658576-2361754779-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AVG-Secure-Search-Update_0214c => value deleted successfully.
"HKU\S-1-5-21-425939938-1532658576-2361754779-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7fb379d8-551f-11e3-840f-c46c622da462}" => Key deleted successfully.
"HKCR\CLSID\{7fb379d8-551f-11e3-840f-c46c622da462}" => Key not found.
"HKU\S-1-5-21-425939938-1532658576-2361754779-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7fb379e5-551f-11e3-840f-c46c622da462}" => Key deleted successfully.
"HKCR\CLSID\{7fb379e5-551f-11e3-840f-c46c622da462}" => Key not found.
C:\Users\HonyZahy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SystemExplorerDisabled => Moved successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\1AMPCBOK" => Key deleted successfully.
"HKCR\CLSID\{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}" => Key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\1AMPCBOK" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}" => Key not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
Firefox Proxy settings were reset.
Firefox Proxy settings were reset.
Firefox Proxy settings were reset.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\fiddlerhook@fiddler2.com => value deleted successfully.
C:\Program Files (x86)\Fiddler2\FiddlerHook => Moved successfully.
C:\Users\HonyZahy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpplabbmogkhghncfbfdeeokoefdjegm => Moved successfully.
dgderdrv => Service deleted successfully.
DisplayLinkUsbPort => Service deleted successfully.
ew_hwusbdev => Service deleted successfully.
ew_usbenumfilter => Service deleted successfully.
huawei_cdcacm => Service deleted successfully.
huawei_enumerator => Service deleted successfully.
huawei_ext_ctrl => Service deleted successfully.
huawei_wwanecm => Service deleted successfully.
ssudmdm => Service deleted successfully.
VGPU => Service deleted successfully.
"C:\Users\HonyZahy\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe" => File/Directory not found.
"C:\Users\HonyZahy\AppData\Roaming\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe" => File/Directory not found.
C:\Users\HonyZahy\Desktop\FRST.txt => Moved successfully.
C:\Users\HonyZahy\Downloads\FRSTLauncher (1).exe => Moved successfully.
C:\Users\HonyZahy\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\HonyZahy\Downloads\FRSTLauncher.exe => Moved successfully.
C:\Users\HonyZahy\Desktop\FRST64.exe => Moved successfully.
C:\hosts.~ => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\HonyZahy\Desktop\zoek.exe => Moved successfully.
C:\Users\HonyZahy\Desktop\adwcleaner_4.000.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Users\HonyZahy\Downloads\microslice_v2.1.zip => Moved successfully.
C:\Users\HonyZahy\Downloads\tdsskiller.zip => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\HonyZahy\Downloads\mbam-clean-2.1.1.1001.exe => Moved successfully.
C:\Users\HonyZahy\hsqlprefs.dat => Moved successfully.
C:\Users\HonyZahy\jagex_cl_runescape_LIVE.dat => Moved successfully.
C:\Users\HonyZahy\random.dat => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-425939938-1532658576-2361754779-1000Core.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-425939938-1532658576-2361754779-1000UA.job => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{8AAA9913-70FD-4B8D-A037-1BB4C3242B43}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8AAA9913-70FD-4B8D-A037-1BB4C3242B43}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Windows Activation Technologies\ValidationTask" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C20B4BD7-8D67-4EBA-83C2-5D6EBA7418CA}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20B4BD7-8D67-4EBA-83C2-5D6EBA7418CA}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline" => Key deleted successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 655.8 MB temporary data.


The system needed a reboot.

==== End of Fixlog ====
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Zdravím a prosím o kontrolu

#11 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Zpět na „Preventivní kontroly logů“