Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Ntb se seka

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Ntb se seka

#16 Příspěvek od vyosek »

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
cedan
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 05 bře 2014 00:23

Re: Ntb se seka

#17 Příspěvek od cedan »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-03-2014 01
Ran by HP 8710w Workstation (administrator) on PC on 07-03-2014 20:48:05
Running from C:\Users\HP 8710w Workstation\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(Hewlett-Packard Company) C:\Windows\system32\Hpservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe
(Andrea Electronics Corporation) C:\Windows\system32\AEADISRV.EXE
() C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Analog Devices, Inc.) C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Wargaming.net) C:\Games\World_of_Tanks\WorldOfTanks.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MpCmdRun.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [] - [X]
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2174760 2010-06-04] (Synaptics Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [SoundMAXPnP] - C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [1183744 2007-02-21] (Analog Devices, Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [IObit Malware Fighter] - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1573184 2013-12-13] (IObit)
HKLM-x32\...\Run: [] - [X]
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\Run: [HP Deskjet 3520 series (NET)] - C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2551656 2012-01-31] (Hewlett-Packard Co.)
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\Run: [Zoner Photo Studio Autoupdate] - C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [800280 2013-09-16] (ZONER software)
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: E - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: F - F:\Autorun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: G - G:\Autorun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {139c7562-8b52-11e2-91f9-001f3b41b05d} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {139c7571-8b52-11e2-91f9-001f3b41b05d} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {2acfa570-d04d-11e1-9856-00218609dcde} - F:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {2b7145e4-d0f8-11e1-988e-00218609dcde} - F:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {2b71460b-d0f8-11e1-988e-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {3f440a7d-cf81-11e1-9894-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {440d9b1f-bee5-11e1-9ed7-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {440d9b2f-bee5-11e1-9ed7-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {61b65efc-d10c-11e1-98ab-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {61b65f33-d10c-11e1-98ab-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {61b65f3d-d10c-11e1-98ab-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {6b4d171d-8e22-11e1-9e73-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {824008d1-83f2-11e1-922a-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {824008d9-83f2-11e1-922a-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {979ab722-d0f7-11e1-98f1-00218609dcde} - F:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {a25c2f9c-d1ac-11e1-9ee3-00218609dcde} - G:\Autorun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {a3b5fada-cf82-11e1-98ec-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {b4052603-cf6b-11e1-a62f-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {d6f6ebab-8a71-11e2-ac22-00218609dcde} - F:\.\Autorun.exe AUTORUN=1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=13415
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {02D7F91A-39E9-4A03-B20F-5B946AC35427} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
SearchScopes: HKCU - {22450D50-F49B-4445-B109-EED229DC41E8} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13415
SearchScopes: HKCU - {328D9851-0553-41C6-A747-2C7CCBEFA4B2} URL = http://www.mapy.cz/?query={searchTerms} ... arch_13415
SearchScopes: HKCU - {3C893BF9-C8B6-4C21-9823-43B0BC982B20} URL = http://encyklopedie.seznam.cz/search?q= ... arch_13415
SearchScopes: HKCU - {4D69FA62-3CE5-464A-8255-B0B4EC3ED103} URL = http://www.novinky.cz/hledej?w={searchT ... arch_13415
SearchScopes: HKCU - {56167194-330E-420C-9D1D-5D725E15532B} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_13415
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {8E6AC9F9-4752-45AE-BD31-2BDF207C1594} URL = http://search.seznam.cz/?q={searchTerms ... arch_13415
SearchScopes: HKCU - {E18BEAB9-934A-4000-957F-620B87EEF062} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13415
SearchScopes: HKCU - {E221EAA4-4187-4E81-84AB-A85B42ADC1B3} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_13415
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Ads Removal - {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} - C:\Program Files (x86)\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll (Adblock)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/s ... wflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\HP 8710w Workstation\AppData\Roaming\Mozilla\Firefox\Profiles\ne98b4cd.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @java.com/DTPlugin,version=10.11.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.11.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\HP 8710w Workstation\AppData\Roaming\Mozilla\Firefox\Profiles\ne98b4cd.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Ads Removal - C:\Users\HP 8710w Workstation\AppData\Roaming\Mozilla\Firefox\Profiles\ne98b4cd.default\Extensions\adsremoval@adsremoval.net [2014-03-07]
FF Extension: Seznam lištička - C:\Users\HP 8710w Workstation\AppData\Roaming\Mozilla\Firefox\Profiles\ne98b4cd.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2013-10-14]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-07-13]

Chrome:
=======
CHR Extension: (Dokumenty Google) - C:\Users\HP 8710w Workstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-07]
CHR Extension: (Disk Google) - C:\Users\HP 8710w Workstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-07]
CHR Extension: (YouTube) - C:\Users\HP 8710w Workstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-04-05]
CHR Extension: (Vyhledávání Google) - C:\Users\HP 8710w Workstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-04-05]
CHR Extension: (Ads Removal) - C:\Users\HP 8710w Workstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen [2014-03-07]
CHR Extension: (Peněženka Google) - C:\Users\HP 8710w Workstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Gmail) - C:\Users\HP 8710w Workstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-04-05]

==================== Services (Whitelisted) =================

R2 AEADIFilters; C:\Windows\system32\AEADISRV.EXE [80384 2007-02-06] (Andrea Electronics Corporation)
R2 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] ()
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [341824 2013-11-11] (IObit)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-10-14] (DT Soft Ltd)
R3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
R3 HBtnKey; C:\Windows\System32\DRIVERS\cpqbttn.sys [19000 2010-02-25] (Hewlett-Packard Company)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [31136 2013-09-30] (REALiX(tm))
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com)
S3 RICOH SmartCard Reader; C:\Windows\System32\DRIVERS\rismcx64.sys [59008 2009-07-20] (RICOH Company, Ltd.)
R3 rismcx64; C:\Windows\System32\DRIVERS\rismcx64.sys [59008 2009-07-20] (RICOH Company, Ltd.)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2013-12-24] (IObit)
R3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com)
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbfake; system32\DRIVERS\ewusbfake.sys [X]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-07 20:48 - 2014-03-07 20:49 - 00018163 _____ () C:\Users\HP 8710w Workstation\Downloads\FRST.txt
2014-03-07 20:47 - 2014-03-07 20:48 - 00000000 ____D () C:\FRST
2014-03-07 20:47 - 2014-03-07 20:47 - 02156544 _____ (Farbar) C:\Users\HP 8710w Workstation\Downloads\FRST64.exe
2014-03-07 20:45 - 2014-03-07 20:45 - 00112640 _____ (forum.viry.cz) C:\Users\HP 8710w Workstation\Downloads\Nepotvrzeno 33301.crdownload
2014-03-07 02:49 - 2014-03-06 23:51 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-06 23:52 - 2014-03-07 05:17 - 00015988 _____ () C:\zoek-results.log
2014-03-06 23:51 - 2014-03-07 02:05 - 00000000 ____D () C:\zoek_backup
2014-03-06 23:51 - 2014-03-06 23:51 - 01284608 _____ () C:\Users\HP 8710w Workstation\Downloads\zoek.exe
2014-03-06 23:01 - 2014-03-06 23:04 - 00000000 ____D () C:\AdwCleaner
2014-03-06 22:59 - 2014-03-06 22:59 - 01244192 _____ () C:\Users\HP 8710w Workstation\Downloads\adwcleaner.exe
2014-03-06 08:56 - 2014-03-06 08:56 - 00001073 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-06 08:56 - 2014-03-06 08:56 - 00000000 ____D () C:\Users\HP 8710w Workstation\AppData\Roaming\Malwarebytes
2014-03-06 08:56 - 2014-03-06 08:56 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-06 08:56 - 2014-03-06 08:56 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-06 08:56 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-06 08:12 - 2014-03-06 08:13 - 10284816 _____ (Malwarebytes Corporation ) C:\Users\HP 8710w Workstation\Downloads\mbam-setup.exe
2014-03-05 00:22 - 2014-03-06 15:03 - 00000000 ____D () C:\Program Files\trend micro
2014-03-05 00:22 - 2014-03-05 00:23 - 00000000 ____D () C:\rsit
2014-03-05 00:21 - 2014-03-05 00:22 - 00935175 _____ () C:\Users\HP 8710w Workstation\Downloads\RSITx64.exe
2014-03-03 18:17 - 2014-03-07 19:43 - 00000616 _____ () C:\Windows\setupact.log
2014-03-03 18:17 - 2014-03-03 18:17 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-03 18:16 - 2014-03-07 19:28 - 00074134 _____ () C:\Windows\PFRO.log
2014-03-01 08:39 - 2014-03-01 08:39 - 15740232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 31432480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 23683360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 17715784 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 12324640 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-01 08:38 - 2014-03-01 08:38 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 02713728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 00875296 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 00844576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-02-28 21:54 - 2014-02-28 21:54 - 00000110 ____H () C:\Users\HP 8710w Workstation\Downloads\001_CMTP_logo_2 (1).jpg.uid-zps
2014-02-27 16:01 - 2014-02-27 16:01 - 00000110 ____H () C:\Users\HP 8710w Workstation\Downloads\image5.png.uid-zps
2014-02-24 23:02 - 2014-02-24 23:02 - 02522143 _____ () C:\Users\HP 8710w Workstation\Downloads\Citizen Herren-Armbanduhr XL Super Titanium Chronograph Quarz Titan CA0340-55A Amazon.de Uhren.htm
2014-02-24 23:02 - 2014-02-24 23:02 - 00000000 ____D () C:\Users\HP 8710w Workstation\Downloads\Citizen Herren-Armbanduhr XL Super Titanium Chronograph Quarz Titan CA0340-55A Amazon.de Uhren_files
2014-02-19 19:27 - 2014-02-19 19:40 - 147266000 _____ () C:\Users\HP 8710w Workstation\ts3_recording_14_02_19_19_27_19.wav
2014-02-19 10:41 - 2014-02-19 10:41 - 00000160 _____ () C:\Users\HP 8710w Workstation\Downloads\stažený soubor (1)
2014-02-19 10:41 - 2014-02-19 10:41 - 00000160 _____ () C:\Users\HP 8710w Workstation\Downloads\stažený soubor
2014-02-18 09:56 - 2014-03-01 08:38 - 14669032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-02-18 09:56 - 2014-02-18 09:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433250.dll
2014-02-18 09:56 - 2014-02-18 09:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433250.dll
2014-02-16 09:27 - 2014-02-16 09:29 - 27098838 _____ () C:\Users\HP 8710w Workstation\Downloads\8.11_Crabtr33_XVM_CZ_modpack_v1.00.7z
2014-02-15 15:03 - 2014-02-15 15:03 - 00001058 _____ () C:\Users\Public\Desktop\Smart Defrag 3.lnk
2014-02-15 15:03 - 2013-12-24 10:40 - 00021184 _____ (IObit) C:\Windows\system32\Drivers\SmartDefragDriver.sys
2014-02-13 00:08 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 00:08 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-13 00:07 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 00:07 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 00:07 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-13 00:07 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 00:07 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-13 00:07 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-13 00:07 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 00:07 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-13 00:07 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-13 00:07 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-13 00:07 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-13 00:07 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-13 00:07 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-13 00:07 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-13 00:07 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-13 00:07 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-13 00:07 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 00:07 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-13 00:07 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-13 00:07 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-13 00:07 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 00:07 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-13 00:07 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-13 00:07 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-13 00:07 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-13 00:07 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-13 00:07 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-13 00:07 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-13 00:07 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-13 00:07 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 00:07 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 00:07 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-13 00:07 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-13 00:07 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-13 00:07 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 00:07 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-13 00:07 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-13 00:07 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-13 00:07 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-12 17:50 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 17:50 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 17:50 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 17:50 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 17:50 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 17:50 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 17:49 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 17:49 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 17:49 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 17:49 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 17:49 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 17:49 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 17:49 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 17:49 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 17:49 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 17:49 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 17:49 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 17:49 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 17:49 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 17:49 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 17:49 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 17:49 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 17:49 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 17:49 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 17:49 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 17:49 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 17:49 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 17:49 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-07 20:54 - 2014-02-07 20:55 - 00000000 ____D () C:\Program Files\Virtual Audio Cable
2014-02-07 20:54 - 2014-02-07 20:54 - 00066728 _____ (Eugene V. Muzychenko) C:\Windows\system32\Drivers\vrtaucbl.sys

==================== One Month Modified Files and Folders =======

2014-03-07 20:49 - 2014-03-07 20:48 - 00018163 _____ () C:\Users\HP 8710w Workstation\Downloads\FRST.txt
2014-03-07 20:48 - 2014-03-07 20:47 - 00000000 ____D () C:\FRST
2014-03-07 20:47 - 2014-03-07 20:47 - 02156544 _____ (Farbar) C:\Users\HP 8710w Workstation\Downloads\FRST64.exe
2014-03-07 20:45 - 2014-03-07 20:45 - 00112640 _____ (forum.viry.cz) C:\Users\HP 8710w Workstation\Downloads\Nepotvrzeno 33301.crdownload
2014-03-07 20:36 - 2012-04-05 09:00 - 00000980 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-07 20:13 - 2012-06-28 13:45 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-07 19:57 - 2012-02-03 13:25 - 01552674 _____ () C:\Windows\WindowsUpdate.log
2014-03-07 19:51 - 2009-07-14 05:45 - 00014256 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-07 19:51 - 2009-07-14 05:45 - 00014256 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-07 19:47 - 2012-08-05 21:31 - 00000000 ____D () C:\Users\HP 8710w Workstation\AppData\Roaming\TS3Client
2014-03-07 19:43 - 2014-03-03 18:17 - 00000616 _____ () C:\Windows\setupact.log
2014-03-07 19:43 - 2012-04-05 09:00 - 00000976 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-07 19:43 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-07 19:28 - 2014-03-03 18:16 - 00074134 _____ () C:\Windows\PFRO.log
2014-03-07 05:17 - 2014-03-06 23:52 - 00015988 _____ () C:\zoek-results.log
2014-03-07 03:04 - 2013-01-23 18:16 - 00000664 ____H () C:\Windows\Tasks\Norton Product InstallerIdle.job
2014-03-07 02:05 - 2014-03-06 23:51 - 00000000 ____D () C:\zoek_backup
2014-03-07 01:15 - 2012-02-03 13:33 - 00000000 ____D () C:\Users\HP 8710w Workstation
2014-03-06 23:51 - 2014-03-07 02:49 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-06 23:51 - 2014-03-06 23:51 - 01284608 _____ () C:\Users\HP 8710w Workstation\Downloads\zoek.exe
2014-03-06 23:04 - 2014-03-06 23:01 - 00000000 ____D () C:\AdwCleaner
2014-03-06 22:59 - 2014-03-06 22:59 - 01244192 _____ () C:\Users\HP 8710w Workstation\Downloads\adwcleaner.exe
2014-03-06 15:03 - 2014-03-05 00:22 - 00000000 ____D () C:\Program Files\trend micro
2014-03-06 08:56 - 2014-03-06 08:56 - 00001073 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-06 08:56 - 2014-03-06 08:56 - 00000000 ____D () C:\Users\HP 8710w Workstation\AppData\Roaming\Malwarebytes
2014-03-06 08:56 - 2014-03-06 08:56 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-06 08:56 - 2014-03-06 08:56 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-06 08:13 - 2014-03-06 08:12 - 10284816 _____ (Malwarebytes Corporation ) C:\Users\HP 8710w Workstation\Downloads\mbam-setup.exe
2014-03-06 05:28 - 2013-02-28 07:45 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-06 05:27 - 2012-04-01 17:39 - 00000000 ____D () C:\ProgramData\Skype
2014-03-05 22:59 - 2009-07-14 16:18 - 00669132 _____ () C:\Windows\system32\perfh005.dat
2014-03-05 22:59 - 2009-07-14 16:18 - 00141760 _____ () C:\Windows\system32\perfc005.dat
2014-03-05 22:59 - 2009-07-14 06:13 - 01584626 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-05 00:23 - 2014-03-05 00:22 - 00000000 ____D () C:\rsit
2014-03-05 00:22 - 2014-03-05 00:21 - 00935175 _____ () C:\Users\HP 8710w Workstation\Downloads\RSITx64.exe
2014-03-03 18:17 - 2014-03-03 18:17 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-03 00:44 - 2012-04-09 17:02 - 00000000 ____D () C:\Windows\Minidump
2014-03-02 10:40 - 2009-07-14 06:08 - 00032616 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-01 08:43 - 2014-01-29 16:14 - 00000000 ____D () C:\DrvInstall
2014-03-01 08:42 - 2012-02-03 14:10 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-01 08:39 - 2014-03-01 08:39 - 15740232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-03-01 08:39 - 2010-12-04 05:45 - 18257576 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 31432480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 23683360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 17715784 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 12324640 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-03-01 08:38 - 2014-03-01 08:38 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 02713728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 00875296 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-03-01 08:38 - 2014-03-01 08:38 - 00844576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-03-01 08:38 - 2014-02-18 09:56 - 14669032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-03-01 08:38 - 2014-01-12 23:55 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-03-01 08:38 - 2010-12-04 05:45 - 03090184 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-02-28 21:54 - 2014-02-28 21:54 - 00000110 ____H () C:\Users\HP 8710w Workstation\Downloads\001_CMTP_logo_2 (1).jpg.uid-zps
2014-02-28 21:29 - 2013-03-24 14:34 - 00000000 ____D () C:\Users\HP 8710w Workstation\Downloads\Náhrada TWIST Micro Duo leifheit-online.cz_files
2014-02-27 16:01 - 2014-02-27 16:01 - 00000110 ____H () C:\Users\HP 8710w Workstation\Downloads\image5.png.uid-zps
2014-02-27 15:30 - 2013-10-14 10:39 - 00000000 ____D () C:\Users\HP 8710w Workstation\Downloads\Pinnacle-Studio-16-Ultimate-16.0.1.98-CZ-Multilingual
2014-02-24 23:02 - 2014-02-24 23:02 - 02522143 _____ () C:\Users\HP 8710w Workstation\Downloads\Citizen Herren-Armbanduhr XL Super Titanium Chronograph Quarz Titan CA0340-55A Amazon.de Uhren.htm
2014-02-24 23:02 - 2014-02-24 23:02 - 00000000 ____D () C:\Users\HP 8710w Workstation\Downloads\Citizen Herren-Armbanduhr XL Super Titanium Chronograph Quarz Titan CA0340-55A Amazon.de Uhren_files
2014-02-21 21:13 - 2012-06-28 13:45 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-21 21:13 - 2012-04-19 17:30 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-21 21:13 - 2012-02-03 17:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-19 19:40 - 2014-02-19 19:27 - 147266000 _____ () C:\Users\HP 8710w Workstation\ts3_recording_14_02_19_19_27_19.wav
2014-02-19 10:41 - 2014-02-19 10:41 - 00000160 _____ () C:\Users\HP 8710w Workstation\Downloads\stažený soubor (1)
2014-02-19 10:41 - 2014-02-19 10:41 - 00000160 _____ () C:\Users\HP 8710w Workstation\Downloads\stažený soubor
2014-02-18 18:49 - 2012-05-11 19:15 - 00000000 ____D () C:\Windows\rescache
2014-02-18 13:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-18 09:56 - 2014-02-18 09:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433250.dll
2014-02-18 09:56 - 2014-02-18 09:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433250.dll
2014-02-18 09:33 - 2013-07-14 13:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-18 09:30 - 2012-02-03 23:59 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-16 14:31 - 2012-04-05 09:00 - 00003976 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-16 14:31 - 2012-04-05 09:00 - 00003724 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-16 09:29 - 2014-02-16 09:27 - 27098838 _____ () C:\Users\HP 8710w Workstation\Downloads\8.11_Crabtr33_XVM_CZ_modpack_v1.00.7z
2014-02-15 15:03 - 2014-02-15 15:03 - 00001058 _____ () C:\Users\Public\Desktop\Smart Defrag 3.lnk
2014-02-15 15:02 - 2013-08-29 15:37 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-02-13 00:10 - 2012-03-18 12:02 - 01560276 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-10 15:35 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-02-08 18:42 - 2010-12-04 04:45 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-02-08 18:42 - 2009-06-23 11:59 - 06712608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-02-08 18:42 - 2009-06-23 11:59 - 03498272 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-02-08 18:42 - 2009-06-23 11:59 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-02-08 18:42 - 2009-06-23 11:59 - 00923936 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-02-08 18:42 - 2009-06-23 11:59 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-02-07 20:55 - 2014-02-07 20:54 - 00000000 ____D () C:\Program Files\Virtual Audio Cable
2014-02-07 20:54 - 2014-02-07 20:54 - 00066728 _____ (Eugene V. Muzychenko) C:\Windows\system32\Drivers\vrtaucbl.sys
2014-02-06 13:16 - 2014-02-13 00:07 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-13 00:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-13 00:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-13 00:07 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-13 00:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-13 00:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-13 00:07 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-13 00:07 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-13 00:07 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-13 00:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-13 00:07 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-13 00:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-13 00:07 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-13 00:07 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-13 00:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-13 00:07 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-13 00:07 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-13 00:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-13 00:07 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-13 00:07 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-13 00:07 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-13 00:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-13 00:07 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-13 00:07 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-13 00:07 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-13 00:07 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-13 00:07 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-13 00:07 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-13 00:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-13 00:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-13 00:07 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-13 00:07 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-13 00:07 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-13 00:07 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-13 00:07 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-13 00:07 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-13 00:07 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-13 00:07 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-13 00:07 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-05 21:16 - 2013-05-19 20:39 - 00001747 _____ () C:\Users\HP 8710w Workstation\Desktop\Nový textový dokument.txt

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-28 13:23

==================== End Of Log ============================
Nahoru
cedan
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 05 bře 2014 00:23

Re: Ntb se seka

#18 Příspěvek od cedan »

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-03-2014 01
Ran by HP 8710w Workstation at 2014-03-07 20:49:58
Running from C:\Users\HP 8710w Workstation\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: IObit Malware Fighter (Enabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\{FF2A5498-4EFE-430F-A138-7EB365DBEBAD}) (Version: 12.0.0.112 - Adobe Systems, Inc)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.)
Advanced SystemCare 7 (HKLM-x32\...\Advanced SystemCare 7_is1) (Version: 7.1.0 - IObit)
Advanced Tactical Center™ 1.12 (HKLM-x32\...\ATC_is1) (Version: 1.1.2.0 - Foolish Entertainment)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
AuthenTec TrueSuite (HKLM\...\{E6C44758-FF49-47D1-8182-65E3818ACE23}) (Version: 2.0.0.57 - AuthenTec, Inc.)
Bandicam (HKLM-x32\...\Bandicam) (Version: - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - )
bob internet (HKLM-x32\...\bob internet) (Version: 1.16.1.0 - A1 Telekom Austria AG)
bob internet (x32 Version: 1.16.1.0 - A1 Telekom Austria AG) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.01 - Piriform)
Codec Pack - All In 1 6.0.3.0 (HKLM-x32\...\Cool's_Codec_pack_4.12) (Version: - )
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
DJIA3525FWUpdateAlert (x32 Version: 1.00.0000 - HP) Hidden
Dokan Library 0.6.0 (HKLM-x32\...\DokanLibrary) (Version: - )
Driver Booster (HKLM-x32\...\Driver Booster_is1) (Version: 1.2 - IObit)
Game Booster 3 (HKLM-x32\...\Game Booster_is1) (Version: 3.4 - IObit)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.2.53.5169 - Gretech Corporation)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.146 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
HP Deskjet 3520 series Nápověda (HKLM-x32\...\{D259C419-D776-4163-B27C-19722C555237}) (Version: 27.0.0 - Hewlett Packard)
HP Deskjet 3520 series Setup Guide (HKLM-x32\...\{AEEDCEB7-00B8-4BE1-B492-AB04803D5F1E}) (Version: 27.0.0 - Hewlett Packard)
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.3341 - HP Photo Creations Powered by RocketLife)
HP Product Detection (HKLM-x32\...\{AF5D2519-C6B4-4AFD-9A8D-FBF74DD4F0A0}) (Version: 11.15.0004 - HP)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HWiNFO32 Version 4.12 (HKLM-x32\...\HWiNFO32_is1) (Version: 4.12 - Martin Malík - REALiX)
HWiNFO64 Version 4.22 (HKLM\...\HWiNFO64_is1) (Version: 4.22 - Martin Malík - REALiX)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 18.7 - Intel)
IObit Malware Fighter (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 2.1 - IObit)
Java 7 Update 11 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417011FF}) (Version: 7.0.110 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416031FF}) (Version: 6.0.310 - Oracle)
Java(TM) 6 Update 35 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216033FF}) (Version: 6.0.350 - Oracle)
Malwarebytes Anti-Malware verze 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (CSY) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Antimalware Service CS-CZ Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Access MUI (Czech) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Czech) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (Czech) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Czech) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Czech) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2007 (x32 Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (Czech) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Czech) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Czech) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Client CS-CZ Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 22.0 (x86 cs) (HKLM-x32\...\Mozilla Firefox 22.0 (x86 cs)) (Version: 22.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 22.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NVIDIA 3D Vision Controller Driver (x32 Version: 275.33 - NVIDIA Corporation) Hidden
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.6128 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden
NVIDIA nView 136.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 136.28 - NVIDIA Corporation)
NVIDIA nView Desktop Manager (HKLM\...\nView Desktop Manager) (Version: - )
NVIDIA nView Desktop Manager (Version: 6.14.10.13585 - NVIDIA Corporation) Hidden
NVIDIA Ovladač řídící jednotky 3D Vision 275.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 275.33 - NVIDIA Corporation)
NVIDIA PhysX (x32 Version: 9.10.0514 - NVIDIA Corporation) Hidden
NVIDIA Systémový software PhysX 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)
Ovládací panel NVIDIA 334.89 (Version: 334.89 - NVIDIA Corporation) Hidden
Ovladače videa společnosti Pinnacle (HKLM\...\{6DE721A5-5E89-4D74-994C-652BB3C0672E}) (Version: 12.1.0.030 - Pinnacle Systems)
Pinnacle Studio 16 - Install Manager (HKLM-x32\...\{F1886CD7-9F73-417A-92E9-7E0AB0F0E099}) (Version: 16.0.75 - Avid Technology, Inc.)
Pinnacle Studio 16 (HKLM-x32\...\{284BFDBC-DAC6-43EC-85A8-E1CEC0D3A114}) (Version: 16.0.0.75 - Avid Technology, Inc.)
PokerStars.net (HKLM-x32\...\PokerStars.net) (Version: - PokerStars.net)
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
RICOH Media Driver (HKLM-x32\...\{F5CC2EF8-20A4-4366-A681-3FE849E65809}) (Version: 2.10.00.04 - RICOH)
Seznam Software (HKCU\...\SeznamInstall) (Version: - Seznam.cz)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Smart Defrag 3 (HKLM-x32\...\Smart Defrag 3_is1) (Version: 3.0 - IObit)
Snagit 11 (HKLM-x32\...\{68723B04-57EC-11E1-A6A8-9E2D4824019B}) (Version: 11.1.0 - TechSmith Corporation)
Soft Data Fax Modem with SmartCP (HKLM\...\CNXT_MODEM_PCI_VEN_14F1&DEV_2C06_hpZ1379y) (Version: - )
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.24.0 - Synaptics Incorporated)
System Requirements Lab for Intel (HKLM-x32\...\{C7CA731B-BF9A-46D9-92CF-8A8737AE9240}) (Version: 4.5.13.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.24322 - TeamViewer)
TomTom HOME (HKLM-x32\...\{9017CEAF-BE5A-4F73-8A0E-C87E26971E55}) (Version: 2.9.3 - Název společnosti:)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{A030537D-0034-46AD-A730-B1119786F607}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{128A5449-CF71-4DA4-A746-F49E3B5DB584}) (Version: - Microsoft)
Virtual Audio Cable 4.10 (HKLM\...\Virtual Audio Cable 4.10) (Version: - )
WinRAR 4.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.10.0 - win.rar GmbH)
World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net)
Youtube Downloader HD v. 2.9.9.7 (HKLM-x32\...\Youtube Downloader HD_is1) (Version: - YoutubeDownloaderHD.com)
Základní software zařízení HP Deskjet 3520 series (HKLM\...\{77B131D6-3AE7-4983-9ABC-71A912C7D445}) (Version: 27.0.847.0 - Hewlett-Packard Co.)
Zoner Photo Studio 16 (HKLM\...\ZonerPhotoStudio16_CZ_is1) (Version: 16.0.1.2 - ZONER software)

==================== Restore Points =========================

01-03-2014 07:37:45 Driver Booster : NVIDIA Quadro FX 1600M
01-03-2014 08:11:33 Windows Update
05-03-2014 15:18:41 Windows Update
06-03-2014 04:26:13 Windows Update
06-03-2014 22:52:59 zoek.exe restore point

==================== Hosts content: ==========================

2009-07-14 03:34 - 2014-03-06 23:53 - 00000840 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1EC6591F-FA35-4E8E-A660-EE5D1F8805C0} - \Driver Booster Update No Task File
Task: {318E456D-8CF7-4B16-9A5A-F891143B5AD6} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2014-01-10] (IObit)
Task: {4158338E-31C8-455B-A694-EFFEA49F4A28} - System32\Tasks\ASC7_SkipUac_HP 8710w Workstation => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe [2013-12-16] (IObit)
Task: {4DDECEBD-4B2D-4C20-8037-2F5E6E442D60} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-04-23] (Piriform Ltd)
Task: {6602258D-E2C7-49C1-9037-545853CFA487} - System32\Tasks\ASC7_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe [2013-12-03] (IObit)
Task: {6691CA33-CFEE-4D28-ADAB-F3DDB8DCDC0C} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe [2013-09-04] ()
Task: {A476AB6A-574C-4BBE-919E-E2F8A365F3EA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-05] (Google Inc.)
Task: {A9DEE520-6A23-4FD9-8EC4-3D072A4F10B5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21] (Adobe Systems Incorporated)
Task: {D3395A84-5015-4ADA-A413-E6000BF6BF98} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-05] (Google Inc.)
Task: {DCB4B869-FC03-42B7-9A7F-7549C7B66564} - System32\Tasks\Norton Product InstallerIdle => C:\Windows\SysWOW64\Adobe\Shockwave 11\SymInstallStub.exe
Task: {F7845A9F-317C-4828-8409-8C9AED952C51} - \Dealply No Task File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Norton Product InstallerIdle.job => C:\Windows\SysWOW64\Adobe\Shockwave 11\SymInstallStub.exe

==================== Loaded Modules (whitelisted) =============

2012-07-20 06:53 - 2014-02-08 18:42 - 00117024 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-02-03 13:45 - 2012-05-18 23:53 - 00380736 _____ () C:\Program Files\NVIDIA Corporation\nview\nvshell.dll
2012-03-17 10:30 - 2012-01-09 19:44 - 00193536 _____ () C:\Program Files\WinRAR\rarext.dll
2011-01-10 13:49 - 2011-01-10 13:49 - 00014848 _____ () C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
2012-07-30 15:13 - 2013-10-27 10:23 - 00302056 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2012-07-30 15:13 - 2013-10-27 10:23 - 00320488 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2011-05-10 14:48 - 2013-10-27 10:23 - 00565224 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2013-09-11 14:30 - 2013-10-27 10:23 - 00700904 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-01-29 16:19 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madExcept_.bpl
2014-01-29 16:19 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madBasic_.bpl
2014-01-29 16:19 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madDisAsm_.bpl
2014-01-29 16:19 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\webres.dll
2013-08-31 22:06 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\madExcept_.bpl
2013-08-31 22:06 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\madBasic_.bpl
2013-08-31 22:06 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\madDisAsm_.bpl
2013-08-31 22:06 - 2013-12-12 18:46 - 08001344 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\WebUI.dll
2013-12-04 15:00 - 2013-10-16 22:17 - 00185168 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\libcurl-4.dll
2013-08-31 22:06 - 2013-05-16 19:26 - 00182080 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\unrar.dll
2013-08-31 22:06 - 2013-05-16 19:26 - 00145216 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\zlibwapi.dll
2014-01-03 20:14 - 2013-12-17 15:43 - 00327680 _____ () C:\Games\World_of_Tanks\voip.dll
2014-01-03 20:14 - 2013-12-17 15:43 - 00321520 _____ () C:\Games\World_of_Tanks\ortp.dll
2014-01-03 20:14 - 2013-12-17 15:43 - 00270336 _____ () C:\Games\World_of_Tanks\libcurl.dll
2014-01-03 20:14 - 2013-12-17 15:43 - 00386600 _____ () C:\Games\World_of_Tanks\NxCooking.dll
2014-01-03 20:14 - 2013-12-17 15:43 - 00071208 _____ () C:\Games\World_of_Tanks\PhysXLoader.dll
2014-03-04 17:55 - 2014-03-02 03:35 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\chrome_elf.dll
2014-03-04 17:55 - 2014-03-02 03:35 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\libglesv2.dll
2014-03-04 17:55 - 2014-03-02 03:35 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\libegl.dll
2014-03-04 17:55 - 2014-03-02 03:35 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\pdf.dll
2014-03-04 17:55 - 2014-03-02 03:35 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ppGoogleNaClPluginChrome.dll
2014-03-04 17:55 - 2014-03-02 03:35 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\HP 8710w Workstation\Downloads\message_4152.eml:OECustomProperty

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Snagit 11.lnk => C:\Windows\pss\Snagit 11.lnk.CommonStartup
MSCONFIG\startupreg: cz.seznam.software.autoupdate => "C:\Users\HP 8710w Workstation\AppData\Roaming\Seznam.cz\szninstall.exe" -c
MSCONFIG\startupreg: cz.seznam.software.szndesktop => "C:\Users\HP 8710w Workstation\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: seznam-listicka-distribuce => "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
MSCONFIG\startupreg: Zoner Photo Studio Service 16 => "C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXEC:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe"

==================== Faulty Device Manager Devices =============

Name: Řadič jednoduché komunikace pro sběrnici PCI
Description: Řadič jednoduché komunikace pro sběrnici PCI
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Sériový port sběrnice PCI
Description: Sériový port sběrnice PCI
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/18/2014 10:02:06 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Služba Šifrování neinicializovala databázi katalogu. Chyba součásti ESENT: -528.

Error: (02/18/2014 10:02:06 AM) (Source: ESENT) (User: )
Description: Catalog Database (1240) Catalog Database: Při otevírání souboru protokolu C:\Windows\system32\CatRoot2\edb.log došlo k chybě -1811 (0xfffff8ed).

Error: (02/15/2014 05:50:11 PM) (Source: IMFservice) (User: )
Description: Neplatný popisovač

Error: (02/05/2014 11:40:39 PM) (Source: IMFservice) (User: )
Description: Neplatný popisovač

Error: (02/05/2014 11:40:39 PM) (Source: IMFservice) (User: )
Description: Neplatný popisovač

Error: (01/29/2014 04:15:54 PM) (Source: RasClient) (User: )
Description: CoID={813451BE-6B5F-4AA8-8136-33987B070433}: Uživatel PC\HP 8710w Workstation vytočil připojení s názvem bob, které se nezdařilo. Kód chyby vrácený při selhání je 633.

Error: (01/27/2014 08:47:05 PM) (Source: .NET Runtime) (User: )
Description: Aplikace: NGStudio.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: kód výjimky c0000005, adresa výjimky 5F12B4BF

Error: (01/27/2014 00:11:51 AM) (Source: Application Hang) (User: )
Description: Program ts3client_win64.exe verze 3.0.13.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: afc

Čas spuštění: 01cf1a8800b6bbb6

Čas ukončení: 78

Cesta k aplikaci: C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe

ID hlášení: 2a75f4d9-86df-11e3-bc64-00218609dcde

Error: (01/16/2014 05:17:08 PM) (Source: IMFservice) (User: )
Description: Neplatný popisovač

Error: (01/16/2014 05:17:08 PM) (Source: IMFservice) (User: )
Description: Neplatný popisovač


System errors:
=============
Error: (03/07/2014 08:49:33 PM) (Source: Disk) (User: )
Description: Zařízení \Device\Harddisk0\DR0 má chybný blok.

Error: (03/07/2014 07:45:45 PM) (Source: Disk) (User: )
Description: Zařízení \Device\Harddisk0\DR0 má chybný blok.

Error: (03/07/2014 07:45:42 PM) (Source: Disk) (User: )
Description: Zařízení \Device\Harddisk0\DR0 má chybný blok.

Error: (03/07/2014 07:45:38 PM) (Source: Disk) (User: )
Description: Zařízení \Device\Harddisk0\DR0 má chybný blok.

Error: (03/07/2014 07:45:35 PM) (Source: Disk) (User: )
Description: Zařízení \Device\Harddisk0\DR0 má chybný blok.

Error: (03/07/2014 07:45:32 PM) (Source: Disk) (User: )
Description: Zařízení \Device\Harddisk0\DR0 má chybný blok.

Error: (03/07/2014 07:45:28 PM) (Source: Disk) (User: )
Description: Zařízení \Device\Harddisk0\DR0 má chybný blok.

Error: (03/07/2014 07:44:26 PM) (Source: Service Control Manager) (User: )
Description: Služba Zprostředkovatel domácích skupin závisí na službě Hostitel poskytovatele rozpoznávání funkce, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (03/07/2014 07:31:14 PM) (Source: Disk) (User: )
Description: Zařízení \Device\Harddisk0\DR0 má chybný blok.

Error: (03/07/2014 07:31:11 PM) (Source: Disk) (User: )
Description: Zařízení \Device\Harddisk0\DR0 má chybný blok.


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 61%
Total physical RAM: 4031.3 MB
Available physical RAM: 1551.13 MB
Total Pagefile: 8060.79 MB
Available Pagefile: 4844.88 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.78 GB) (Free:3.69 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive f: (DV M23_SD) (Removable) (Total:3.69 GB) (Free:0.02 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: B0C9B0C9)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================
Nahoru
cedan
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 05 bře 2014 00:23

Re: Ntb se seka

#19 Příspěvek od cedan »

:/ udelal jsem neco spatne ze jsem jeste nedostal odpoved? nebo uz ten log je kompletni a tim padem jiz cele toto tema vyresene? :)
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Ntb se seka

#20 Příspěvek od vyosek »

:arrow: Omlouvam se, mel jsem pracovni zalezitosti

:arrow: Odinstalujte IObit Malware Fighter a Advanced SystemCare 7 - jsou to kramy a delaji jen skodu nez uzitek

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKLM\...\Run: [] - [X]
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [IObit Malware Fighter] - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1573184 2013-12-13] (IObit)
HKLM-x32\...\Run: [] - [X]
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\Run: [HP Deskjet 3520 series (NET)] - C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2551656 2012-01-31] (Hewlett-Packard Co.)
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\Run: [Zoner Photo Studio Autoupdate] - C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [800280 2013-09-16] (ZONER software)
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: E - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: F - F:\Autorun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: G - G:\Autorun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {139c7562-8b52-11e2-91f9-001f3b41b05d} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {139c7571-8b52-11e2-91f9-001f3b41b05d} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {2acfa570-d04d-11e1-9856-00218609dcde} - F:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {2b7145e4-d0f8-11e1-988e-00218609dcde} - F:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {2b71460b-d0f8-11e1-988e-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {3f440a7d-cf81-11e1-9894-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {440d9b1f-bee5-11e1-9ed7-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {440d9b2f-bee5-11e1-9ed7-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {61b65efc-d10c-11e1-98ab-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {61b65f33-d10c-11e1-98ab-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {61b65f3d-d10c-11e1-98ab-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {6b4d171d-8e22-11e1-9e73-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {824008d1-83f2-11e1-922a-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {824008d9-83f2-11e1-922a-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {979ab722-d0f7-11e1-98f1-00218609dcde} - F:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {a25c2f9c-d1ac-11e1-9ee3-00218609dcde} - G:\Autorun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {a3b5fada-cf82-11e1-98ec-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {b4052603-cf6b-11e1-a62f-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {d6f6ebab-8a71-11e2-ac22-00218609dcde} - F:\.\Autorun.exe AUTORUN=1

FF SearchPlugin: C:\Users\HP 8710w Workstation\AppData\Roaming\Mozilla\Firefox\Profiles\ne98b4cd.default\searchplugins\yahoo_ff.xml
FF Extension: Ads Removal - C:\Users\HP 8710w Workstation\AppData\Roaming\Mozilla\Firefox\Profiles\ne98b4cd.default\Extensions\adsremoval@adsremoval.net [2014-03-07]

CHR Extension: (Ads Removal) - C:\Users\HP 8710w Workstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen [2014-03-07]

R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [341824 2013-11-11] (IObit)
R3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com)
R3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com)
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbfake; system32\DRIVERS\ewusbfake.sys [X]

2014-03-07 02:49 - 2014-03-06 23:51 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-06 23:52 - 2014-03-07 05:17 - 00015988 _____ () C:\zoek-results.log
2014-03-06 23:51 - 2014-03-07 02:05 - 00000000 ____D () C:\zoek_backup
2014-03-06 23:51 - 2014-03-06 23:51 - 01284608 _____ () C:\Users\HP 8710w Workstation\Downloads\zoek.exe
2014-03-06 22:59 - 2014-03-06 22:59 - 01244192 _____ () C:\Users\HP 8710w Workstation\Downloads\adwcleaner.exe
2014-03-06 08:12 - 2014-03-06 08:13 - 10284816 _____ (Malwarebytes Corporation ) C:\Users\HP 8710w Workstation\Downloads\mbam-setup.exe
2014-03-06 08:12 - 2014-03-06 08:13 - 10284816 _____ (Malwarebytes Corporation ) C:\Users\HP 8710w Workstation\Downloads\mbam-setup.exe
C:\Program Files (x86)\IObit

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Norton Product InstallerIdle.job => C:\Windows\SysWOW64\Adobe\Shockwave 11\SymInstallStub.exe

Hosts:
CMD: shutdown /r /f /t 2

End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
cedan
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 05 bře 2014 00:23

Re: Ntb se seka

#21 Příspěvek od cedan »

Vse dle doporuceni jsem odinstaloval jak IOBit tak i Advanced system care. Restartoval PC a udelal ten FIXLIST dle navodu.
Jen doufam ze jsem to udelal spravne protoze ten LOG vybehl jeste pred tim nez jsem to musel restartovat rucne :)

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-03-2014 01
Ran by HP 8710w Workstation at 2014-03-09 10:48:41 Run:1
Running from C:\Users\HP 8710w Workstation\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [] - [X]
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [IObit Malware Fighter] - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1573184 2013-12-13] (IObit)
HKLM-x32\...\Run: [] - [X]
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\Run: [HP Deskjet 3520 series (NET)] - C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2551656 2012-01-31] (Hewlett-Packard Co.)
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\Run: [Zoner Photo Studio Autoupdate] - C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [800280 2013-09-16] (ZONER software)
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: E - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: F - F:\Autorun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: G - G:\Autorun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {139c7562-8b52-11e2-91f9-001f3b41b05d} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {139c7571-8b52-11e2-91f9-001f3b41b05d} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {2acfa570-d04d-11e1-9856-00218609dcde} - F:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {2b7145e4-d0f8-11e1-988e-00218609dcde} - F:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {2b71460b-d0f8-11e1-988e-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {3f440a7d-cf81-11e1-9894-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {440d9b1f-bee5-11e1-9ed7-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {440d9b2f-bee5-11e1-9ed7-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {61b65efc-d10c-11e1-98ab-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {61b65f33-d10c-11e1-98ab-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {61b65f3d-d10c-11e1-98ab-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {6b4d171d-8e22-11e1-9e73-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {824008d1-83f2-11e1-922a-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {824008d9-83f2-11e1-922a-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {979ab722-d0f7-11e1-98f1-00218609dcde} - F:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {a25c2f9c-d1ac-11e1-9ee3-00218609dcde} - G:\Autorun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {a3b5fada-cf82-11e1-98ec-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {b4052603-cf6b-11e1-a62f-00218609dcde} - E:\AutoRun.exe
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\...\MountPoints2: {d6f6ebab-8a71-11e2-ac22-00218609dcde} - F:\.\Autorun.exe AUTORUN=1

FF SearchPlugin: C:\Users\HP 8710w Workstation\AppData\Roaming\Mozilla\Firefox\Profiles\ne98b4cd.default\searchplugins\yahoo_ff.xml
FF Extension: Ads Removal - C:\Users\HP 8710w Workstation\AppData\Roaming\Mozilla\Firefox\Profiles\ne98b4cd.default\Extensions\adsremoval@adsremoval.net [2014-03-07]

CHR Extension: (Ads Removal) - C:\Users\HP 8710w Workstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen [2014-03-07]

R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [341824 2013-11-11] (IObit)
R3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com)
R3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com)
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbfake; system32\DRIVERS\ewusbfake.sys [X]

2014-03-07 02:49 - 2014-03-06 23:51 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-06 23:52 - 2014-03-07 05:17 - 00015988 _____ () C:\zoek-results.log
2014-03-06 23:51 - 2014-03-07 02:05 - 00000000 ____D () C:\zoek_backup
2014-03-06 23:51 - 2014-03-06 23:51 - 01284608 _____ () C:\Users\HP 8710w Workstation\Downloads\zoek.exe
2014-03-06 22:59 - 2014-03-06 22:59 - 01244192 _____ () C:\Users\HP 8710w Workstation\Downloads\adwcleaner.exe
2014-03-06 08:12 - 2014-03-06 08:13 - 10284816 _____ (Malwarebytes Corporation ) C:\Users\HP 8710w Workstation\Downloads\mbam-setup.exe
2014-03-06 08:12 - 2014-03-06 08:13 - 10284816 _____ (Malwarebytes Corporation ) C:\Users\HP 8710w Workstation\Downloads\mbam-setup.exe
C:\Program Files (x86)\IObit

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Norton Product InstallerIdle.job => C:\Windows\SysWOW64\Adobe\Shockwave 11\SymInstallStub.exe

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\HP Software Update => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\IObit Malware Fighter => Value not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp => Key deleted successfully.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\Software\Microsoft\Windows\CurrentVersion\Run\\HP Deskjet 3520 series (NET) => Value deleted successfully.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Autoupdate => Value deleted successfully.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\S-1-5-21-3878015499-2240099498-1799337887-1000 => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\S-1-5-21-3878015499-2240099498-1799337887-1000 => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\S-1-5-21-3878015499-2240099498-1799337887-1000 => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{139c7562-8b52-11e2-91f9-001f3b41b05d} => Key deleted successfully.
HKCR\CLSID\{139c7562-8b52-11e2-91f9-001f3b41b05d} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{139c7571-8b52-11e2-91f9-001f3b41b05d} => Key deleted successfully.
HKCR\CLSID\{139c7571-8b52-11e2-91f9-001f3b41b05d} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2acfa570-d04d-11e1-9856-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{2acfa570-d04d-11e1-9856-00218609dcde} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2b7145e4-d0f8-11e1-988e-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{2b7145e4-d0f8-11e1-988e-00218609dcde} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2b71460b-d0f8-11e1-988e-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{2b71460b-d0f8-11e1-988e-00218609dcde} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3f440a7d-cf81-11e1-9894-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{3f440a7d-cf81-11e1-9894-00218609dcde} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{440d9b1f-bee5-11e1-9ed7-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{440d9b1f-bee5-11e1-9ed7-00218609dcde} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{440d9b2f-bee5-11e1-9ed7-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{440d9b2f-bee5-11e1-9ed7-00218609dcde} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{61b65efc-d10c-11e1-98ab-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{61b65efc-d10c-11e1-98ab-00218609dcde} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{61b65f33-d10c-11e1-98ab-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{61b65f33-d10c-11e1-98ab-00218609dcde} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{61b65f3d-d10c-11e1-98ab-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{61b65f3d-d10c-11e1-98ab-00218609dcde} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6b4d171d-8e22-11e1-9e73-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{6b4d171d-8e22-11e1-9e73-00218609dcde} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{824008d1-83f2-11e1-922a-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{824008d1-83f2-11e1-922a-00218609dcde} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{824008d9-83f2-11e1-922a-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{824008d9-83f2-11e1-922a-00218609dcde} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{979ab722-d0f7-11e1-98f1-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{979ab722-d0f7-11e1-98f1-00218609dcde} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a25c2f9c-d1ac-11e1-9ee3-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{a25c2f9c-d1ac-11e1-9ee3-00218609dcde} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a3b5fada-cf82-11e1-98ec-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{a3b5fada-cf82-11e1-98ec-00218609dcde} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b4052603-cf6b-11e1-a62f-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{b4052603-cf6b-11e1-a62f-00218609dcde} => Key not found.
HKU\S-1-5-21-3878015499-2240099498-1799337887-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d6f6ebab-8a71-11e2-ac22-00218609dcde} => Key deleted successfully.
HKCR\CLSID\{d6f6ebab-8a71-11e2-ac22-00218609dcde} => Key not found.
C:\Users\HP 8710w Workstation\AppData\Roaming\Mozilla\Firefox\Profiles\ne98b4cd.default\searchplugins\yahoo_ff.xml => Moved successfully.
C:\Users\HP 8710w Workstation\AppData\Roaming\Mozilla\Firefox\Profiles\ne98b4cd.default\Extensions\adsremoval@adsremoval.net => Moved successfully.
C:\Users\HP 8710w Workstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen => Moved successfully.
IMFservice => Service not found.
FileMonitor => Service not found.
RegFilter => Service not found.
UrlFilter => Service not found.
WinRing0_1_2_0 => Service deleted successfully.
ew_hwusbdev => Service deleted successfully.
ew_usbenumfilter => Service deleted successfully.
huawei_cdcacm => Service deleted successfully.
huawei_enumerator => Service deleted successfully.
huawei_ext_ctrl => Service deleted successfully.
huawei_wwanecm => Service deleted successfully.
hwdatacard => Service deleted successfully.
hwusbfake => Service deleted successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\HP 8710w Workstation\Downloads\zoek.exe => Moved successfully.
C:\Users\HP 8710w Workstation\Downloads\adwcleaner.exe => Moved successfully.
C:\Users\HP 8710w Workstation\Downloads\mbam-setup.exe => Moved successfully.
"C:\Users\HP 8710w Workstation\Downloads\mbam-setup.exe" => File/Directory not found.
"C:\Program Files (x86)\IObit" => File/Directory not found.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\Norton Product InstallerIdle.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========


==== End of Fixlog ====
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Ntb se seka

#22 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: Napiste jak se chova ntb
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“