zpomaleny prohlizec , vyskakujici reklamy

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
chew
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 15 Lis 2014 21:13

zpomaleny prohlizec , vyskakujici reklamy

#1 Příspěvek od chew »

Dobry vecer , mam zpomaleny prohlizec a vyskakuji mi reklamy kam se jen podivam . tu prikladam Log

Logfile of random's system information tool 1.10 (written by random/random)
Run by michal at 2014-11-15 21:59:03
Microsoft Windows 8.1
System drive C: has 24 GB (24%) free of 100 GB
Total RAM: 8128 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:59:12, on 15. 11. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17037)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\SupTab\HpUI.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\SupTab\Loader32.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\notepad.exe
C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\81ed0e74a40ed4fe8a36a7b819c4279f.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe
C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
C:\Users\michal\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
C:\Program Files (x86)\Battle.net\Battle.net.5191\Battle.net.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\michal.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&t ... N85C9N85C9
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=16194
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&t ... N85C9N85C9
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type= ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type= ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&t ... N85C9N85C9
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: eee1ef70083a013208d37190b1a6e5ef0063429 - {11111111-1111-1111-1111-110611341129} - C:\Program Files (x86)\SavePass 1.1\SavePass 1.1-bho.dll
O2 - BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll
O2 - BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - E:\ClassicExplorer32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - E:\ClassicIEDLL_32.dll
O3 - Toolbar: Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - E:\ClassicExplorer32.dll
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe" 60
O4 - HKLM\..\Run: [Super Charger] C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\michal\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\michal\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [81ed0e74a40ed4fe8a36a7b819c4279f] "C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\81ed0e74a40ed4fe8a36a7b819c4279f.exe" ..
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Facebook Update] %APPDATA%\Microsoft\update.exe
O4 - Startup: 81ed0e74a40ed4fe8a36a7b819c4279f.exe
O4 - Startup: 81ed0e74a40ed4fe8a36a7b819c4279f.exe.tmp
O4 - Startup: Facebook.lnk = C:\Users\michal\AppData\Roaming\Microsoft\update.exe
O9 - Extra button: (no name) - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - E:\\ClassicIE_32.exe
O9 - Extra 'Tools' menuitem: Classic IE Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - E:\\ClassicIE_32.exe
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: IePlugin Services (IePluginServices) - Cherished Technololgy LIMITED - C:\ProgramData\IePluginServices\PluginService.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Small Business Advantage (intelsba) - Intel Corporation - C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe
O23 - Service: Intel(R) Smart Connect Technology Agent (ISCTAgent) - Unknown owner - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Service KMSELDI - Unknown owner - C:\Program Files\KMSpico\Service_KMS.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: WindowsMangerProtect Service (WindowsMangerProtect) - Fuyu LIMITED - C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11349 bytes

======Listing Processes======





wininit.exe


winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\ProgramData\IePluginServices\PluginService.exe -service
C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe -service
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe"
"C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc

taskhostex.exe
taskeng.exe {8DFC5AB8-BB7A-48B2-B45F-9712A6F87EB8}
"C:\Program Files (x86)\SavePass 1.1\0093e960-5fc4-4c01-ab0a-a085713f6814-6.exe" /rawdata=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
taskeng.exe {81CD3BD2-A6B9-4EB9-AF9D-843772C4C06A}
"C:\Program Files (x86)\SavePass 1.1\55165869-7942-492f-881b-9b10284bb925.exe" 001504 4F075D6BA3EF4D8D9A9A8D033828D828IE 63429 1416046361 93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 SavePass 1.1
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss c5d3eb8c-d3f5-4e45-affa-f5792dc2e705 1
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe 0x4
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files (x86)\SavePass 1.1\e18cad61-bcd4-4eda-b5fc-6395534ef9a6.exe" /agentregpath='SavePass 1.1' /appid=63429 /srcid='001504' /subid='0' /zdata='163149315' /bic=4F075D6BA3EF4D8D9A9A8D033828D828IE /verifier=cf17539d92ce64928e5aa901361c4a22 /installerversion=1_35_09_29 /installationtime=1416046361 /statsdomain=http://stats.newonlinedatastack.com /errorsdomain=http://errors.newonlinedatastack.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 /monetizationdomain=http://logs.newonlinedatastack.com /runfrom='task' /externallog=''
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\SupTab\HpUI.exe" -run
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\SupTab\Loader64.exe"
"C:\Program Files (x86)\SupTab\Loader32.exe"
"C:\Windows\System32\cmd.exe" /k attrib "C:\Users\michal\AppData\Roaming\Microsoft\update.exe" +s +h
\??\C:\Windows\system32\conhost.exe 0x4
notepad
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {9BA05972-F6A8-11CF-A442-00A0C90A8F39} -Embedding
ClassicStartMenu.exe -startup
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\81ed0e74a40ed4fe8a36a7b819c4279f.exe"
"C:\Windows\System32\cmd.exe" /k attrib "C:\Users\michal\AppData\Roaming\Microsoft\update.exe" +s +h
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Windows\System32\cmd.exe" /k attrib "C:\Users\michal\AppData\Roaming\Microsoft\update.exe" +s +h
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe"
szndesktop.exe default start
"C:\Users\michal\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe 0x4

"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe" -startup
"C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe" --locale=enUS --session=191446051153240364
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Battle.net\Battle.net.5191\Battle.net.exe"
"C:\Windows\System32\WWAHost.exe" -ServerName:Windows.Store
C:\Windows\System32\RuntimeBroker.exe -Embedding
taskhost.exe $(Arg0)
"C:\Program Files (x86)\World of Warcraft\Wow-64.exe" -launcherlogin -noautolaunch64bit -launch -uid wow_enus
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3632.0.1083886314\1297288839" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,16,44 --gpu-vendor-id=0x10de --gpu-device-id=0x1187 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.4465 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/disable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/Bootstrap/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_15/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="3632.2.2053989393\1951889285" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3632.7.896367890\365417897" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/disable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/Bootstrap/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_15/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="3632.18.2100845753\2119129738" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/disable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/Bootstrap/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_15/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="3632.35.1929609395\1958897858" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/disable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/Bootstrap/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_15/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="3632.36.1295616419\2116864834" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/disable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/Bootstrap/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_15/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="3632.38.920568792\106303385" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/disable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/Bootstrap/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_15/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="3632.39.1123796275\1580745033" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe30_ Global\UsGthrCtrlFltPipeMssGthrPipe30 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 584 588 596 65536 592
"C:\Users\michal\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\0093e960-5fc4-4c01-ab0a-a085713f6814-1.job - C:\Program Files (x86)\SavePass 1.1\SavePass 1.1-codedownloader.exe /rawdata=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
C:\Windows\tasks\0093e960-5fc4-4c01-ab0a-a085713f6814-11.job - C:\Program Files (x86)\SavePass 1.1\0093e960-5fc4-4c01-ab0a-a085713f6814-11.exe /rawdata=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
C:\Windows\tasks\0093e960-5fc4-4c01-ab0a-a085713f6814-2.job - C:\Program Files (x86)\SavePass 1.1\0093e960-5fc4-4c01-ab0a-a085713f6814-2.exe /rawdata=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
C:\Windows\tasks\0093e960-5fc4-4c01-ab0a-a085713f6814-4.job - C:\Program Files (x86)\SavePass 1.1\0093e960-5fc4-4c01-ab0a-a085713f6814-4.exe /rawdata=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
C:\Windows\tasks\0093e960-5fc4-4c01-ab0a-a085713f6814-5.job - C:\Program Files (x86)\SavePass 1.1\0093e960-5fc4-4c01-ab0a-a085713f6814-5.exe /rawdata=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
C:\Windows\tasks\0093e960-5fc4-4c01-ab0a-a085713f6814-5_user.job - C:\Program Files (x86)\SavePass 1.1\0093e960-5fc4-4c01-ab0a-a085713f6814-5.exe /rawdata=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
C:\Windows\tasks\0093e960-5fc4-4c01-ab0a-a085713f6814-6.job - C:\Program Files (x86)\SavePass 1.1\0093e960-5fc4-4c01-ab0a-a085713f6814-6.exe /rawdata=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
C:\Windows\tasks\0093e960-5fc4-4c01-ab0a-a085713f6814-7.job - C:\Program Files (x86)\SavePass 1.1\0093e960-5fc4-4c01-ab0a-a085713f6814-7.exe /rawdata=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
C:\Windows\tasks\55165869-7942-492f-881b-9b10284bb925.job - C:\Program Files (x86)\SavePass 1.1\55165869-7942-492f-881b-9b10284bb925.exe 001504 4F075D6BA3EF4D8D9A9A8D033828D828IE 63429 1416046361 93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 SavePass 1.1
C:\Windows\tasks\AmiUpdXp.job - C:\Users\michal\AppData\Local\19879\Updater.exe
C:\Windows\tasks\CGNNIFN.job - C:\Users\michal\AppData\Roaming\CGNNIFN.exe /infocmdline=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
C:\Windows\tasks\e18cad61-bcd4-4eda-b5fc-6395534ef9a6.job - C:\Program Files (x86)\SavePass 1.1\e18cad61-bcd4-4eda-b5fc-6395534ef9a6.exe /agentregpath='SavePass 1.1' /appid=63429 /srcid='001504' /subid='0' /zdata='163149315' /bic=4F075D6BA3EF4D8D9A9A8D033828D828IE /verifier=cf17539d92ce64928e5aa901361c4a22 /installerversion=1_35_09_29 /installationtime=1416046361 /statsdomain=http://stats.newonlinedatastack.com /errorsdomain=http://errors.newonlinedatastack.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 /monetizationdomain=http://logs.newonlinedatastack.com /runfrom='task' /externallog=''
C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /c
C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\NF.job - C:\Users\michal\AppData\Roaming\NF.exe /infocmdline=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

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611341129}]
SavePass 1.1 - C:\Program Files (x86)\SavePass 1.1\SavePass 1.1-bho64.dll [2014-11-15 764832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - E:\ClassicExplorer64.dll [2014-01-18 796352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14 2117216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - E:\ClassicIEDLL_64.dll [2014-01-18 483520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611341129}]
SavePass 1.1 - C:\Program Files (x86)\SavePass 1.1\SavePass 1.1-bho.dll [2014-11-15 567712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
IETabPage Class - C:\Program Files (x86)\SupTab\SupTab.dll [2014-11-15 514016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - E:\ClassicExplorer32.dll [2014-01-18 674496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14 1709152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - E:\ClassicIEDLL_32.dll [2014-01-18 437440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - E:\ClassicExplorer64.dll [2014-01-18 796352]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - E:\ClassicExplorer32.dll [2014-01-18 674496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2014-05-12 7575256]
"ISCT Tray"=C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [2014-04-24 5860656]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-11-06 2464072]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-11-06 2800296]
"Classic Start Menu"=E:\ClassicStartMenu.exe [2014-01-18 161984]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-11-06 30526056]
"cz.seznam.software.autoupdate"=C:\Users\michal\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\michal\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"81ed0e74a40ed4fe8a36a7b819c4279f"=C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\81ed0e74a40ed4fe8a36a7b819c4279f.exe [2014-11-15 61440]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-10-23 6501656]
"Facebook Update"=C:\Users\michal\AppData\Roaming\Microsoft\update.exe [2013-12-28 1554465]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2014-04-03 134616]
"Super Charger"=C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [2014-04-08 1047536]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
81ed0e74a40ed4fe8a36a7b819c4279f.exe
81ed0e74a40ed4fe8a36a7b819c4279f.exe.tmp
Facebook.lnk - C:\Users\michal\AppData\Roaming\Microsoft\update.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-15 21:59:03 ----D---- C:\rsit
2014-11-15 21:59:03 ----D---- C:\Program Files\trend micro
2014-11-15 12:27:03 ----D---- C:\Users\michal\AppData\Roaming\ClassicShell
2014-11-15 12:25:59 ----D---- C:\Program Files\KMSpico
2014-11-15 12:25:51 ----D---- C:\Users\michal\AppData\Roaming\dclogs
2014-11-15 12:25:45 ----D---- C:\Users\michal\AppData\Roaming\WinRAR
2014-11-15 12:18:17 ----D---- C:\Users\michal\AppData\Roaming\TS3Client
2014-11-15 12:00:59 ----A---- C:\autoexec.bat
2014-11-15 11:35:15 ----D---- C:\Program Files\CCleaner
2014-11-15 11:33:11 ----A---- C:\Windows\system32\drivers\{b8b15cc6-bff7-46f4-9881-2927784a8f05}Gw64.sys
2014-11-15 11:27:46 ----D---- C:\Program Files\WinRAR
2014-11-15 11:13:15 ----D---- C:\ProgramData\IePluginServices
2014-11-15 11:13:08 ----D---- C:\Program Files (x86)\SupTab
2014-11-15 11:13:03 ----D---- C:\ProgramData\WindowsMangerProtect
2014-11-15 11:12:48 ----D---- C:\Program Files (x86)\SavePass 1.1
2014-11-15 10:51:10 ----D---- C:\Program Files (x86)\Reference Assemblies
2014-11-15 10:51:10 ----D---- C:\Program Files (x86)\MSBuild
2014-11-15 10:51:05 ----D---- C:\Windows\SYSWOW64\XPSViewer
2014-11-15 10:51:05 ----D---- C:\Program Files\Reference Assemblies
2014-11-15 10:51:05 ----D---- C:\Program Files\MSBuild
2014-11-15 10:50:01 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2014-11-15 10:50:01 ----A---- C:\Windows\SYSWOW64\PresentationNative_v0300.dll
2014-11-15 10:50:01 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-11-15 10:50:01 ----A---- C:\Windows\system32\TsWpfWrp.exe
2014-11-15 10:50:01 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2014-11-15 10:50:01 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-11-15 10:49:57 ----A---- C:\Users\michal\AppData\Roaming\NF.exe
2014-11-15 10:49:24 ----A---- C:\Users\michal\AppData\Roaming\CGNNIFN.exe
2014-11-15 10:49:21 ----D---- C:\Program Files (x86)\globalUpdate
2014-11-15 10:48:34 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-11-15 10:48:22 ----D---- C:\Program Files (x86)\Seznam.cz
2014-11-15 10:48:08 ----D---- C:\Users\michal\AppData\Roaming\Seznam.cz
2014-11-15 02:40:35 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-11-15 02:40:35 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-11-15 02:40:35 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2014-11-15 02:40:35 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-11-15 02:40:35 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-11-15 02:40:35 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-11-15 02:40:34 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2014-11-15 02:40:34 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2014-11-15 02:40:34 ----A---- C:\Windows\system32\nvspcap64.dll
2014-11-15 02:40:34 ----A---- C:\Windows\system32\nvspbridge64.dll
2014-11-15 02:40:31 ----D---- C:\ProgramData\NVIDIA Corporation
2014-11-15 02:40:30 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-11-15 02:40:29 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2014-11-15 02:40:29 ----A---- C:\Windows\system32\nvaudcap64v.dll
2014-11-15 02:40:29 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2014-11-15 02:40:24 ----D---- C:\Program Files\NVIDIA Corporation
2014-11-15 02:37:57 ----HD---- C:\SuperChargerProfile
2014-11-15 02:37:57 ----D---- C:\Program Files (x86)\MSI
2014-11-15 02:35:52 ----D---- C:\Intel
2014-11-15 02:35:22 ----D---- C:\ProgramData\Intel
2014-11-15 02:35:21 ----D---- C:\Program Files (x86)\Intel
2014-11-15 02:34:42 ----D---- C:\Windows\SYSWOW64\RTCOM
2014-11-15 02:34:42 ----D---- C:\Program Files\Realtek
2014-11-15 02:34:31 ----A---- C:\Windows\system32\drivers\MBfilt64.sys
2014-11-15 02:34:26 ----A---- C:\Windows\system32\WavesGUILib64.dll
2014-11-15 02:34:25 ----A---- C:\Windows\system32\SRSWOW64.dll
2014-11-15 02:34:25 ----A---- C:\Windows\system32\SRSTSX64.dll
2014-11-15 02:34:25 ----A---- C:\Windows\system32\SRSTSH64.dll
2014-11-15 02:34:25 ----A---- C:\Windows\system32\SRSHP64.dll
2014-11-15 02:34:24 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2014-11-15 02:34:23 ----A---- C:\Windows\system32\RtPgEx64.dll
2014-11-15 02:34:23 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2014-11-15 02:34:23 ----A---- C:\Windows\system32\RtkCfg64.dll
2014-11-15 02:34:23 ----A---- C:\Windows\system32\RtkApi64.dll
2014-11-15 02:34:22 ----A---- C:\Windows\system32\RtDataProc64.dll
2014-11-15 02:34:22 ----A---- C:\Windows\system32\RTCOM64.dll
2014-11-15 02:34:22 ----A---- C:\Windows\system32\RltkAPO64.dll
2014-11-15 02:34:21 ----A---- C:\Windows\system32\RTEEP64A.dll
2014-11-15 02:34:21 ----A---- C:\Windows\system32\RTEEL64A.dll
2014-11-15 02:34:21 ----A---- C:\Windows\system32\RTEEG64A.dll
2014-11-15 02:34:21 ----A---- C:\Windows\system32\RTEED64A.dll
2014-11-15 02:34:21 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2014-11-15 02:34:20 ----A---- C:\Windows\system32\RP3DHT64.dll
2014-11-15 02:34:20 ----A---- C:\Windows\system32\RP3DAA64.dll
2014-11-15 02:34:20 ----A---- C:\Windows\system32\RCoInstII64.dll
2014-11-15 02:34:20 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2014-11-15 02:34:03 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll
2014-11-15 02:34:03 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-11-15 02:34:02 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2014-11-15 02:34:01 ----A---- C:\Windows\SYSWOW64\MBAPO232.dll
2014-11-15 02:34:01 ----A---- C:\Windows\system32\MBWrp64.dll
2014-11-15 02:34:01 ----A---- C:\Windows\system32\MBAPO264.dll
2014-11-15 02:33:58 ----A---- C:\Windows\system32\FMAPO64.dll
2014-11-15 02:33:42 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-11-15 02:33:41 ----A---- C:\Windows\system32\AERTAR64.dll
2014-11-15 02:33:41 ----A---- C:\Windows\system32\AERTAC64.dll
2014-11-15 02:33:40 ----HD---- C:\Program Files (x86)\Temp
2014-11-15 02:33:38 ----R---- C:\Windows\RtlExUpd.dll
2014-11-15 02:32:50 ----A---- C:\Windows\system32\drivers\Rt630x64.sys
2014-11-15 02:32:49 ----A---- C:\Windows\system32\RtNicProp64.dll
2014-11-15 02:32:44 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-11-15 02:32:44 ----D---- C:\Program Files (x86)\Realtek
2014-11-15 02:32:27 ----D---- C:\Program Files\Intel
2014-11-15 02:32:12 ----D---- C:\ProgramData\Package Cache
2014-11-15 02:29:36 ----D---- C:\Users\michal\AppData\Roaming\Adobe
2014-11-15 02:29:28 ----SD---- C:\Users\michal\AppData\Roaming\Microsoft
2014-11-15 02:26:07 ----D---- C:\Windows\SoftwareDistribution
2014-11-15 02:25:39 ----SHD---- C:\ProgramData\Šablony
2014-11-15 02:25:39 ----SHD---- C:\ProgramData\Plocha
2014-11-15 02:25:39 ----SHD---- C:\ProgramData\Nabídka Start
2014-11-15 02:25:39 ----SHD---- C:\ProgramData\Dokumenty
2014-11-15 02:25:39 ----SHD---- C:\ProgramData\Data aplikací
2014-11-15 02:25:18 ----ASH---- C:\hiberfil.sys
2014-11-15 02:23:34 ----D---- C:\Windows\Prefetch
2014-11-15 02:23:11 ----ASH---- C:\swapfile.sys
2014-11-15 02:23:11 ----ASH---- C:\pagefile.sys
2014-11-15 02:23:10 ----SHD---- C:\System Volume Information
2014-11-15 02:22:39 ----D---- C:\Windows\Panther
2014-11-14 22:17:19 ----D---- C:\Program Files (x86)\Diablo III
2014-11-14 20:58:37 ----D---- C:\Program Files (x86)\World of Warcraft
2014-11-14 20:47:29 ----D---- C:\Users\michal\AppData\Roaming\Skype
2014-11-14 20:47:25 ----RD---- C:\Program Files (x86)\Skype
2014-11-14 20:47:24 ----D---- C:\ProgramData\Skype
2014-11-14 20:10:48 ----D---- C:\Program Files (x86)\StarCraft II
2014-11-14 20:03:58 ----D---- C:\Users\michal\AppData\Roaming\NVIDIA
2014-11-14 20:03:51 ----D---- C:\Users\michal\AppData\Roaming\Battle.net
2014-11-14 20:03:46 ----D---- C:\ProgramData\Blizzard Entertainment
2014-11-14 20:03:46 ----D---- C:\Program Files (x86)\Battle.net
2014-11-14 20:02:25 ----D---- C:\ProgramData\Battle.net
2014-11-14 19:53:26 ----D---- C:\Program Files (x86)\Google
2014-11-14 19:50:21 ----A---- C:\Windows\system32\drivers\INETMON.sys
2014-11-14 19:47:38 ----D---- C:\Program Files (x86)\AGEIA Technologies
2014-11-14 19:47:14 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2014-11-14 19:47:09 ----D---- C:\ProgramData\NVIDIA
2014-11-14 19:47:05 ----D---- C:\Users\michal\AppData\Roaming\Macromedia
2014-11-14 19:47:03 ----A---- C:\Windows\system32\nvvsvc.exe
2014-11-14 19:47:03 ----A---- C:\Windows\system32\nvsvcr.dll
2014-11-14 19:47:03 ----A---- C:\Windows\system32\nvsvc64.dll
2014-11-14 19:47:03 ----A---- C:\Windows\system32\nvshext.dll
2014-11-14 19:47:03 ----A---- C:\Windows\system32\nvmctray.dll
2014-11-14 19:47:03 ----A---- C:\Windows\system32\nvcpl.dll
2014-11-14 19:46:54 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2014-11-14 19:46:54 ----A---- C:\Windows\system32\OpenCL.dll
2014-11-14 19:46:21 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2014-11-14 19:46:21 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2014-11-14 19:46:21 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2014-11-14 19:46:21 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2014-11-14 19:46:21 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2014-11-14 19:46:21 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2014-11-14 19:46:21 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2014-11-14 19:46:21 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2014-11-14 19:46:21 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2014-11-14 19:46:21 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2014-11-14 19:46:21 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2014-11-14 19:46:21 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2014-11-14 19:46:21 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2014-11-14 19:46:21 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2014-11-14 19:46:21 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvwgf2umx.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvumdshimx.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvopencl.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvoglv64.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvoglshim64.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvmcumd.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvinitx.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\NvIFR64.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvhdap64.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\NvFBC64.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvdispgenco6434465.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvdispco6434465.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvd3dumx.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvcuvid.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvcuda.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvcompiler.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\nvapi64.dll
2014-11-14 19:46:21 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2014-11-14 19:46:21 ----A---- C:\Windows\system32\drivers\nvhda64v.sys

======List of files/folders modified in the last 1 month======

2014-11-15 21:59:03 ----RD---- C:\Program Files
2014-11-15 21:09:05 ----D---- C:\Windows
2014-11-15 21:00:00 ----D---- C:\Windows\system32\sru
2014-11-15 17:29:01 ----D---- C:\Windows\Temp
2014-11-15 15:54:12 ----D---- C:\Windows\Microsoft.NET
2014-11-15 15:54:11 ----RD---- C:\Windows\assembly
2014-11-15 15:44:43 ----RD---- C:\Windows\System32
2014-11-15 15:44:43 ----D---- C:\Windows\Inf
2014-11-15 15:44:43 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-11-15 12:26:02 ----D---- C:\Windows\system32\Tasks
2014-11-15 12:25:37 ----HD---- C:\ProgramData
2014-11-15 12:25:33 ----SHD---- C:\Windows\Installer
2014-11-15 12:25:31 ----D---- C:\Windows\SysWOW64
2014-11-15 12:18:00 ----D---- C:\Windows\WinSxS
2014-11-15 11:59:48 ----D---- C:\Windows\system32\drivers
2014-11-15 11:57:47 ----RD---- C:\Program Files (x86)
2014-11-15 11:57:09 ----D---- C:\Windows\Tasks
2014-11-15 11:37:26 ----D---- C:\Windows\Logs
2014-11-15 11:37:26 ----D---- C:\Windows\debug
2014-11-15 11:33:11 ----A---- C:\Windows\win.ini
2014-11-15 11:32:43 ----HD---- C:\Windows\system32\GroupPolicy
2014-11-15 11:32:43 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2014-11-15 11:26:55 ----D---- C:\Windows\system32\NDF
2014-11-15 11:15:52 ----D---- C:\Program Files\Common Files\System
2014-11-15 10:51:36 ----D---- C:\Windows\CbsTemp
2014-11-15 10:51:05 ----RSD---- C:\Windows\Fonts
2014-11-15 10:51:05 ----D---- C:\Windows\SYSWOW64\MUI
2014-11-15 10:51:05 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-11-15 10:51:05 ----D---- C:\Windows\system32\MUI
2014-11-15 10:51:05 ----D---- C:\Windows\system32\cs-CZ
2014-11-15 10:48:45 ----SD---- C:\ProgramData\Microsoft
2014-11-15 10:47:47 ----D---- C:\Windows\system32\config
2014-11-15 10:24:21 ----D---- C:\Windows\system32\drivers\UMDF
2014-11-15 02:37:38 ----D---- C:\Windows\system32\catroot
2014-11-15 02:36:17 ----D---- C:\Windows\system32\wbem
2014-11-15 02:35:22 ----D---- C:\Windows\AppReadiness
2014-11-15 02:35:21 ----D---- C:\Windows\SYSWOW64\drivers
2014-11-15 02:32:38 ----D---- C:\Windows\system32\restore
2014-11-15 02:30:04 ----HD---- C:\Program Files\WindowsApps
2014-11-15 02:29:49 ----SHD---- C:\$Recycle.Bin
2014-11-15 02:29:28 ----RD---- C:\Users
2014-11-15 02:26:34 ----D---- C:\Windows\rescache
2014-11-15 02:25:39 ----D---- C:\Program Files\Windows NT
2014-11-15 02:24:42 ----D---- C:\Windows\system32\Recovery
2014-11-14 20:47:27 ----D---- C:\Program Files (x86)\Common Files
2014-11-14 19:47:12 ----D---- C:\Windows\system32\DriverStore
2014-11-14 19:47:03 ----D---- C:\Windows\Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Wof;Windows Overlay File System Filter Driver; C:\Windows\system32\drivers\Wof.sys [2014-03-18 157528]
R3 ikbevent;Intel Upper keyboard Class Filter Driver; C:\Windows\system32\DRIVERS\ikbevent.sys [2014-02-03 22216]
R3 imsevent;Intel Upper Mouse Class Filter Driver; C:\Windows\system32\DRIVERS\imsevent.sys [2014-02-03 22728]
R3 INETMON;INETMON; \??\C:\Windows\System32\Drivers\INETMON.sys [2014-04-03 25800]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-05-13 3962840]
R3 ISCT;@oem6.inf,%ISCT.DeviceDesc%;Intel(R) Smart Connect Technology Device Driver; C:\Windows\System32\drivers\ISCTD.sys [2014-02-03 44744]
R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys [2009-11-18 32344]
R3 MEIx64;@oem4.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2014-04-03 118272]
R3 NTIOLib_1_0_3;NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [2012-10-25 13368]
R3 NVHDA;@oem12.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-11-06 197408]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2014-11-04 13207184]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-11-06 19784]
R3 nvvad_WaveExtensible;@oem8.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-10-03 38216]
R3 RTL8168;@oem2.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2013-11-26 838872]
R3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2014-03-18 121088]
S3 MSICDSetup;MSICDSetup; \??\D:\CDriver64.sys []
S3 NTIOLib_1_0_C;NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys []
S3 WINUSB;@winusb.inf,%WINUSB_SvcDesc%;WinUsb Driver; C:\Windows\System32\drivers\WinUSB.SYS [2013-08-22 78848]
S3 WUDFSensorLP;@locationprovider.inf,%WudfLocationProviderDisplayName%;Služba Reflektor UMDF pro zprostředkovatele umístění (LocationProvider); C:\Windows\system32\DRIVERS\WUDFRd.sys [2013-08-22 230912]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-11-06 1148744]
R2 IePluginServices;IePlugin Services; C:\ProgramData\IePluginServices\PluginService.exe [2014-11-15 714208]
R2 ISCTAgent;Intel(R) Smart Connect Technology Agent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [2014-04-24 209712]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2014-04-03 154584]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2014-04-03 398296]
R2 MSI_SuperCharger;MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [2014-03-17 162800]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-11-06 1795912]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-11-06 19819848]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-11-03 935232]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-11-03 410952]
R2 WindowsMangerProtect;WindowsMangerProtect Service; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [2014-11-15 490640]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-11-15 68608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-15 107912]
S2 Service KMSELDI;Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [2013-12-11 1050904]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-11-15 68608]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-15 107912]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2014-01-31 887232]
S3 intelsba;Intel(R) Small Business Advantage; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [2014-03-27 54976]

-----------------EOF-----------------
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7328
Registrován: 15 Lis 2012 22:26
Místo/Bydliště: Znojmo

Re: zpomaleny prohlizec , vyskakujici reklamy

#2 Příspěvek od altrok »

Dobry vecer Vam preju :bye:

:arrow: V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

:arrow: Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
  • ukoncete vsechny programy
  • kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
  • kliknete na Scan, pote na Clean
  • po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi
:arrow: Ulozte na plochu zoek.exe http://hijackthis.nl/smeenk/zoek.htm
  • spustte jako spravce
  • do velkeho okna zkopirujte script uvedeny nize
  • kliknete na Run script
  • po restartu na Vas vyskoci log (pripadne jej najdete v C:\zoek-results.log) - vlozte mi jej do pristi odpovedi

    Kód: Vybrat vše

    autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
chew
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 15 Lis 2014 21:13

Re: zpomaleny prohlizec , vyskakujici reklamy

#3 Příspěvek od chew »

# AdwCleaner v4.101 - Report created 15/11/2014 at 22:08:07
# Updated 09/11/2014 by Xplode
# Database : 2014-11-13.1 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : michal - GINT
# Running from : C:\Users\michal\Downloads\adwcleaner_4.101.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem
Service Deleted : IePluginServices
Service Deleted : WindowsMangerProtect
Service Deleted : {b8b15cc6-bff7-46f4-9881-2927784a8f05}Gw64

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\IePluginServices
Folder Deleted : C:\ProgramData\WindowsMangerProtect
Folder Deleted : C:\Program Files (x86)\globalUpdate
[!] Folder Deleted : C:\Program Files (x86)\SupTab
Folder Deleted : C:\Program Files (x86)\SavePass 1.1
Folder Deleted : C:\Users\michal\AppData\Local\globalUpdate
Folder Deleted : C:\Users\michal\AppData\Local\CrashRpt
Folder Deleted : C:\Users\Public\Documents\ShopperPro
Folder Deleted : C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
File Deleted : C:\Windows\System32\\drivers\{b8b15cc6-bff7-46f4-9881-2927784a8f05}Gw64.sys
File Deleted : C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook.lnk
File Deleted : C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal

***** [ Scheduled Tasks ] *****

Task Deleted : AmiUpdXp
Task Deleted : globalUpdateUpdateTaskMachineCore
Task Deleted : globalUpdateUpdateTaskMachineUA
Task Deleted : SMupdate1
Task Deleted : YTDownloader
Task Deleted : 0093e960-5fc4-4c01-ab0a-a085713f6814-1
Task Deleted : 0093e960-5fc4-4c01-ab0a-a085713f6814-11
Task Deleted : 0093e960-5fc4-4c01-ab0a-a085713f6814-2
Task Deleted : 0093e960-5fc4-4c01-ab0a-a085713f6814-4
Task Deleted : 0093e960-5fc4-4c01-ab0a-a085713f6814-5
Task Deleted : 0093e960-5fc4-4c01-ab0a-a085713f6814-5_user
Task Deleted : 0093e960-5fc4-4c01-ab0a-a085713f6814-6
Task Deleted : 0093e960-5fc4-4c01-ab0a-a085713f6814-7
Task Deleted : 55165869-7942-492f-881b-9b10284bb925
Task Deleted : e18cad61-bcd4-4eda-b5fc-6395534ef9a6

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Key Deleted : HKCU\Software\81ed0e74a40ed4fe8a36a7b819c4279f
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611341129}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622342229}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655345529}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666346629}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{03771AEF-400D-4A13-B712-25878EC4A3F5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644344429}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611341129}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110611341129}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611341129}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622342229}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655345529}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666346629}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611341129}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\SupHpUISoft
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\SavePass 1.1
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\SavePass 1.1
Key Deleted : HKLM\SOFTWARE\SupDp
Key Deleted : HKLM\SOFTWARE\SupTab
Key Deleted : HKLM\SOFTWARE\supWindowsMangerProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SavePass 1.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WindowsMangerProtect
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17037

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Google Chrome v38.0.2125.122


*************************

AdwCleaner[R0].txt - [15295 octets] - [15/11/2014 22:07:18]
AdwCleaner[S0].txt - [12602 octets] - [15/11/2014 22:08:07]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [12663 octets] ##########
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7328
Registrován: 15 Lis 2012 22:26
Místo/Bydliště: Znojmo

Re: zpomaleny prohlizec , vyskakujici reklamy

#4 Příspěvek od altrok »

:arrow: Pokracujte zoekem
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
chew
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 15 Lis 2014 21:13

Re: zpomaleny prohlizec , vyskakujici reklamy

#5 Příspěvek od chew »

Zoek.exe v5.0.0.0 Updated 15-November-2014
Tool run by michal on so 15. 11. 2014 at 22:12:30,86.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\michal\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

15. 11. 2014 22:13:03 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{12F3E5ED-73C-4FE2-ACD-325B37DA929} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{14828BE-4FCC-42F3-8DE3-ED3D43D700} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{17B28994-A641-4BA0-806F-FE3C4891FC4} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F924E4F-8067-4BDF-AA49-7BAE1C0D99} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E0C7F69-7E30-4B35-8D69-FF342290F77E} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{31fe8b53-fc63-443e-8484-7c73d519f0ac} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{34207E74-3D5A-44B8-BAF4-3B38984BFEB3} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{364A1B43-A5B0-4BF6-A935-92D12ABA614B} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37524C65-480E-4A7F-94DF-1F6F4BDB5F7A} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3CB3FF9A-93B4-4230-BC48-621FD49775B} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3D4AE327-9F02-4FD9-BB40-7B393C1E147B} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{48C07DFD-2261-4D1C-A6BB-F3D42CE2C58} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{48F2AC94-6595-44FD-931E-6183BBC03DDA} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{49E3D9E1-CF4A-4BD3-B2D9-C24EAD4379E5} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4F091E96-1062-431A-8A2B-45D5B1DDEBEC} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{52554f28-1339-43e6-bd18-bff4f13d5352} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5323FABE-D6A5-45ED-9EA6-D6D9EFD6BAE} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5803E237-7B89-41DF-8044-B769CD4DEEA} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5B3660D3-DC15-4474-AF9F-D7BC9189876} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{61144615-5759-4D55-8F3C-411FF228292C} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62A133FB-5CD1-49B2-80C4-B9AE2951A7AD} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7BF1F9D9-336A-485E-ADB7-EE521AEB547} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7CBA25DD-7D78-4DAA-832-30A0A608139} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F7AFEEE-425A-455E-A6FE-6FBF769FD7A9} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{808E70F0-9D0A-464D-916A-5C486BAF} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8161A6FA-63C1-41D3-AC60-DACE6A50170} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8AEF9EEC-7763-4940-BB0-64E0EEAE5095} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8EDFADDE-C5BE-4BD4-B54C-AAF16F713DB} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{92DD3880-F81E-401A-8916-2C76316ECA88} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9410FC93-D-4A85-94C-D30F1B5338F} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{96966F21-67FC-4002-A4AA-AD94F02197C1} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9F1DA91C-8263-4A85-97AB-F09832741575} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A01841EE-4338-43C1-9AB7-6120EED3F13} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A1299117-E1B-4838-8495-39194F2E50B2} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A7800048-9C88-450A-AEC3-86327B7B3E3} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A9B4B595-D8A0-4E30-B436-D08C4FFAC6E} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A9BC057B-5F86-415A-A38B-2A5CFBFEE26} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AC996FA6-F08F-42D7-818C-DC8B296587F8} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ACFFDABA-F0BB-4004-913B-6B571C88E24} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AE3D4B37-B378-4F1F-A665-45EFFDFB1F} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AE542FF7-456A-4B74-BF10-7BD0E825C9FB} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B341246C-94E5-4D6F-A416-8FDA7D2467F0} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B34D91B7-AE16-4093-878-80CB5F5C16} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B3A536A4-87A5-408C-925C-10A72152E70} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B74EA4AD-BD6D-4368-BF2D-E2F9A39A6A7} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BA588B3D-268B-4971-B14-DF763FB66866} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C027D2F-BBB0-41D1-B21D-6ADD7E1AA3EC} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C2F71A6C-7D84-4931-9925-D3BBEE5BB57A} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C9284EC6-5AE0-40EA-BDF0-FE90462445E1} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CDF63C76-477A-4496-AEE9-5AEBDE2ECA81} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CEB2BA11-1E37-40B5-9955-3658C990AD94} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CF8BE759-1416-4F24-8DF1-BEA3364EC3DA} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1741EB6-F78D-4654-866D-362AF55992FF} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DAF24B60-1ECC-4AC9-9C8B-3F73FF4BECD0} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DAF2DA8-6C92-4617-9CEF-37C04B16208E} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E02264D5-3166-4710-A9A6-C9E97E7C1767} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EB5F2939-21B2-4ECF-95B6-A691449B44E} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EF9D1AFD-A7E6-4591-A7FB-83E7D49EFD55} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F23E4FB9-1903-4631-89B6-F9BC4732BC} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F2AA927-1CCA-4433-BB50-B21EF333ED5E} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F803C7AA-E116-4B6C-83F2-A985BC1EFB23} deleted successfully
HKEY_USERS\S-1-5-21-144057640-3153285968-835844921-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FC6F317E-28F4-4778-8933-92A6D4E3F4E6} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{31fe8b53-fc63-443e-8484-7c73d519f0ac} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{52554f28-1339-43e6-bd18-bff4f13d5352} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Shell"="explorer.exe"

==== Deleting Files \ Folders ======================

C:\Users\michal\AppData\Local\19879 deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\michal\AppData\Local\TempServer.exe.tmp deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\Windows\tasks\CGNNIFN.job deleted
C:\windows\SysNative\tasks\CGNNIFN deleted
C:\Windows\tasks\NF.job deleted
C:\windows\SysNative\tasks\NF deleted
C:\windows\SysNative\tasks\Microsoft\Windows\Maintenance\SMupdate2 deleted
C:\windows\SysNative\tasks\Microsoft\Windows\Multimedia\SMupdate3 deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\Windows\Syswow64\GroupPolicy\gpt.ini deleted
C:\Users\michal\AppData\Roaming\CGNNIFN.exe deleted
C:\Users\michal\AppData\Roaming\NF.exe deleted
C:\Users\michal\AppData\Local\TempServer.exe deleted
"C:\Users\michal\AppData\Roaming\CGNNIFN" deleted
"C:\Users\michal\AppData\Roaming\NF" deleted

==== Chromium Look ======================

AdBlock - michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom

==== Chromium Fix ======================

C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage deleted successfully
C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/?clid=16194"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.seznam.cz/?clid=16194"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IESR02"
{0CA6A5FE-6EB7-4083-825D-C41CCE87D1C1} Seznam TV Program Url="http://tv.seznam.cz/hledej?w={searchTer ... arch_16194"
{2E4EF79B-FB4D-4E07-B6E9-59FA0B330E8C} Firmy.cz Url="http://www.firmy.cz/?q={searchTerms}&so ... arch_16194"
{53D53661-FAF5-4C46-B50F-EF01C6481DE2} Slovnˇk EN/CZ Url="http://slovnik.seznam.cz/?q={searchTerm ... arch_16194"
{6114148E-2F3B-40B6-8132-4848E42068BA} Mapy.cz Url="http://www.mapy.cz/?query={searchTerms} ... arch_16194"
{69858470-6685-403E-975B-29712317135E} Zbo§ˇ.cz Url="http://www.zbozi.cz/?q={searchTerms}&r= ... arch_16194"
{C2B6EA61-6250-49E1-B0A4-F230BA3B0665} Encyklopedie Seznam Url="http://encyklopedie.seznam.cz/search?q= ... arch_16194"
{CDCA5BE0-B7D4-4928-8E11-9244BB7D861D} Novinky.cz Url="http://www.novinky.cz/hledej?w={searchT ... arch_16194"
{DFF8D53A-E24C-4B3B-991A-17D073E84876} Seznam Url="http://search.seznam.cz/?q={searchTerms ... arch_16194"
{F7A0EA81-3B7E-4EC8-8C08-AC74EFC1D638} Slovnˇk CZ/EN Url="http://slovnik.seznam.cz/?q={searchTerm ... arch_16194"

==== Reset Google Chrome ======================

C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\michal\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\michal\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\michal\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\michal\AppData\Local\Microsoft\Windows\INetCache\IE\D2SRJAKV will be deleted at reboot
C:\Users\michal\AppData\Local\Microsoft\Windows\INetCache\IE\VNC8H5VJ will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=23 folders=6 7100429 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\michal\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\michal\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\MpCmdRun.log" not found
"C:\Users\michal\AppData\Local\Microsoft\Windows\INetCache\IE\D2SRJAKV" not found
"C:\Users\michal\AppData\Local\Microsoft\Windows\INetCache\IE\VNC8H5VJ" not found
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on so 15. 11. 2014 at 22:19:16,15 ======================
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7328
Registrován: 15 Lis 2012 22:26
Místo/Bydliště: Znojmo

Re: zpomaleny prohlizec , vyskakujici reklamy

#6 Příspěvek od altrok »

:arrow: Dejte novy log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
chew
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 15 Lis 2014 21:13

Re: zpomaleny prohlizec , vyskakujici reklamy

#7 Příspěvek od chew »

.
Naposledy upravil(a) chew dne 15 Lis 2014 22:29, celkem upraveno 1 x.
Nahoru
chew
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 15 Lis 2014 21:13

Re: zpomaleny prohlizec , vyskakujici reklamy

#8 Příspěvek od chew »

pri stazeni frst launcheru mam problem chrome me to blokuje ze je soubor skodlivy.. co stim?
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7328
Registrován: 15 Lis 2012 22:26
Místo/Bydliště: Znojmo

Re: zpomaleny prohlizec , vyskakujici reklamy

#9 Příspěvek od altrok »

:arrow: Stahnete tedy jen FRST64.exe... prilozte oba logy (frst.txt i Addition.txt)
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
chew
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 15 Lis 2014 21:13

Re: zpomaleny prohlizec , vyskakujici reklamy

#10 Příspěvek od chew »

problemy sem vyresil stahly uz ho mam ale jakmile ho chci hodit na plochu taak mi to napise pokazde ze prestal pracovat a nejdes spustit :(
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7328
Registrován: 15 Lis 2012 22:26
Místo/Bydliště: Znojmo

Re: zpomaleny prohlizec , vyskakujici reklamy

#11 Příspěvek od altrok »

:arrow: Pouzijte jen FRST64.exe (bez Launcheru)
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
chew
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 15 Lis 2014 21:13

Re: zpomaleny prohlizec , vyskakujici reklamy

#12 Příspěvek od chew »

na tom odkazu coo jste mi poslal je ke stahnuti jen s launcherem
Nahoru
chew
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 15 Lis 2014 21:13

Re: zpomaleny prohlizec , vyskakujici reklamy

#13 Příspěvek od chew »

ne tak se omlouvam uz jsem to nasel
Nahoru
chew
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 15 Lis 2014 21:13

Re: zpomaleny prohlizec , vyskakujici reklamy

#14 Příspěvek od chew »

Prikladam oba logy.



Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-11-2014
Ran by michal (administrator) on GINT on 15-11-2014 22:39:24
Running from C:\Users\michal\Desktop
Loaded Profile: michal (Available profiles: michal)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(IvoSoft) E:\ClassicStartMenu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\michal\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\michal\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
() C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\81ed0e74a40ed4fe8a36a7b819c4279f.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7575256 2014-05-12] (Realtek Semiconductor)
HKLM\...\Run: [ISCT Tray] => C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [5860656 2014-04-24] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2464072 2014-11-06] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Classic Start Menu] => E:\ClassicStartMenu.exe [161984 2014-01-18] (IvoSoft)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1087960 2014-04-03] (Intel Corporation)
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1047536 2014-04-08] (MSI)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-144057640-3153285968-835844921-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30526056 2014-11-06] (Skype Technologies S.A.)
HKU\S-1-5-21-144057640-3153285968-835844921-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\michal\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-144057640-3153285968-835844921-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\michal\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-144057640-3153285968-835844921-1001\...\Run: [81ed0e74a40ed4fe8a36a7b819c4279f] => C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\81ed0e74a40ed4fe8a36a7b819c4279f.exe [61440 2014-11-15] ()
HKU\S-1-5-21-144057640-3153285968-835844921-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd)
HKU\S-1-5-21-144057640-3153285968-835844921-1001\...\Run: [Facebook Update] => %APPDATA%\Microsoft\update.exe
HKU\S-1-5-21-144057640-3153285968-835844921-1001\...\Winlogon: [Shell] %APPDATA%\Microsoft\update.exe,explorer.exe <==== ATTENTION
Startup: C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\81ed0e74a40ed4fe8a36a7b819c4279f.exe ()
Startup: C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\81ed0e74a40ed4fe8a36a7b819c4279f.exe.tmp ()
Startup: C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook.lnk
ShortcutTarget: Facebook.lnk -> C:\Users\michal\AppData\Roaming\Microsoft\update.exe ()
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => E:\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => E:\ClassicExplorer32.dll (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=16194
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {0CA6A5FE-6EB7-4083-825D-C41CCE87D1C1} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_16194
SearchScopes: HKCU - {2E4EF79B-FB4D-4E07-B6E9-59FA0B330E8C} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_16194
SearchScopes: HKCU - {53D53661-FAF5-4C46-B50F-EF01C6481DE2} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_16194
SearchScopes: HKCU - {6114148E-2F3B-40B6-8132-4848E42068BA} URL = http://www.mapy.cz/?query={searchTerms} ... arch_16194
SearchScopes: HKCU - {69858470-6685-403E-975B-29712317135E} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_16194
SearchScopes: HKCU - {C2B6EA61-6250-49E1-B0A4-F230BA3B0665} URL = http://encyklopedie.seznam.cz/search?q= ... arch_16194
SearchScopes: HKCU - {CDCA5BE0-B7D4-4928-8E11-9244BB7D861D} URL = http://www.novinky.cz/hledej?w={searchT ... arch_16194
SearchScopes: HKCU - {DFF8D53A-E24C-4B3B-991A-17D073E84876} URL = http://search.seznam.cz/?q={searchTerms ... arch_16194
SearchScopes: HKCU - {F7A0EA81-3B7E-4EC8-8C08-AC74EFC1D638} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_16194
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> E:\ClassicExplorer64.dll (IvoSoft)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> E:\ClassicIEDLL_64.dll (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> E:\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> E:\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - E:\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - E:\ClassicExplorer32.dll (IvoSoft)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxp://google.com/
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-14]
CHR Extension: (Dokumenty Google) - C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-14]
CHR Extension: (Disk Google) - C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-14]
CHR Extension: (YouTube) - C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-14]
CHR Extension: (Vyhledávání Google) - C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-14]
CHR Extension: (Tabulky Google) - C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-14]
CHR Extension: (AdBlock) - C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-11-15]
CHR Extension: (Peněženka Google) - C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-14]
CHR Extension: (Gmail) - C:\Users\michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-11-06] (NVIDIA Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [54976 2014-03-27] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [209712 2014-04-24] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-04-03] (Intel Corporation)
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-18] (Microsoft Corporation)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [162800 2014-03-17] (MSI)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2013-08-22] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-11-06] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19819848 2014-11-06] (NVIDIA Corporation)
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [1050904 2013-12-11] () [File not signed]
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [22216 2014-02-03] ()
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [22728 2014-02-03] ()
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [25800 2014-04-03] ()
R3 ISCT; C:\Windows\System32\drivers\ISCTD.sys [44744 2014-02-03] ()
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [118272 2014-04-03] (Intel Corporation)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2014-11-06] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38216 2014-10-03] (NVIDIA Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-15 22:39 - 2014-11-15 22:39 - 00017010 _____ () C:\Users\michal\Desktop\FRST.txt
2014-11-15 22:39 - 2014-11-15 22:39 - 00000000 ____D () C:\FRST
2014-11-15 22:38 - 2014-11-15 22:38 - 02116608 _____ (Farbar) C:\Users\michal\Desktop\FRST64.exe
2014-11-15 22:33 - 2014-11-15 22:33 - 00112640 _____ (forum.viry.cz) C:\Users\michal\Desktop\FRSTLauncher (4).exe
2014-11-15 22:32 - 2014-11-15 22:37 - 00015327 _____ () C:\Users\michal\AppData\Local\LM.bat
2014-11-15 22:32 - 2014-11-15 22:32 - 00029696 _____ () C:\Users\michal\AppData\Local\MSGBOX.EXE
2014-11-15 22:31 - 2014-11-15 22:31 - 00112640 _____ (forum.viry.cz) C:\Users\michal\Downloads\Nepotvrzeno 379665.crdownload
2014-11-15 22:27 - 2014-11-15 22:27 - 00112640 _____ (forum.viry.cz) C:\Users\michal\Downloads\Nepotvrzeno 924650.crdownload
2014-11-15 22:26 - 2014-11-15 22:26 - 00112640 _____ (forum.viry.cz) C:\Users\michal\Downloads\Nepotvrzeno 880836.crdownload
2014-11-15 22:26 - 2014-11-15 22:26 - 00112640 _____ (forum.viry.cz) C:\Users\michal\Downloads\Nepotvrzeno 25796.crdownload
2014-11-15 22:18 - 2014-11-15 22:12 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-11-15 22:13 - 2014-11-15 22:19 - 00020761 _____ () C:\zoek-results.log
2014-11-15 22:12 - 2014-11-15 22:18 - 00000000 ____D () C:\zoek_backup
2014-11-15 22:12 - 2014-11-15 22:12 - 01294848 _____ () C:\Users\michal\Downloads\zoek.exe
2014-11-15 22:09 - 2014-11-15 22:19 - 00000282 _____ () C:\Windows\setupact.log
2014-11-15 22:09 - 2014-11-15 22:09 - 00000000 _____ () C:\Windows\setuperr.log
2014-11-15 22:08 - 2014-11-15 22:18 - 00000654 _____ () C:\Windows\PFRO.log
2014-11-15 22:07 - 2014-11-15 22:08 - 00000000 ____D () C:\AdwCleaner
2014-11-15 22:06 - 2014-11-15 22:06 - 02140160 _____ () C:\Users\michal\Downloads\adwcleaner_4.101.exe
2014-11-15 21:59 - 2014-11-15 21:59 - 00000000 ____D () C:\rsit
2014-11-15 21:59 - 2014-11-15 21:59 - 00000000 ____D () C:\Program Files\trend micro
2014-11-15 21:58 - 2014-11-15 21:58 - 01222144 _____ () C:\Users\michal\Downloads\RSITx64.exe
2014-11-15 21:33 - 2014-11-15 21:51 - 844996608 _____ () C:\Users\michal\Downloads\MLČENÍ JEHŇÁTEK 1991 CZ dabing.avi
2014-11-15 12:35 - 2014-11-15 21:14 - 00020913 _____ () C:\Windows\WindowsUpdate.log
2014-11-15 12:27 - 2014-11-15 22:04 - 00000000 ____D () C:\Users\michal\AppData\Roaming\ClassicShell
2014-11-15 12:26 - 2014-11-15 12:26 - 00003706 _____ () C:\Windows\System32\Tasks\AutoPico Daily Restart
2014-11-15 12:26 - 2014-11-15 12:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2014-11-15 12:25 - 2014-11-15 12:26 - 00000000 ____D () C:\Program Files\KMSpico
2014-11-15 12:25 - 2014-11-15 12:25 - 00000000 ____D () C:\Users\michal\AppData\Roaming\WinRAR
2014-11-15 12:25 - 2014-11-15 12:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2014-11-15 12:25 - 2013-12-28 14:28 - 00000000 ____D () C:\Users\michal\Downloads\KMSpico 9.1.3
2014-11-15 12:18 - 2014-11-15 19:31 - 00000000 ____D () C:\Users\michal\AppData\Roaming\TS3Client
2014-11-15 12:17 - 2014-11-15 12:17 - 00000724 _____ () C:\Users\michal\Desktop\TeamSpeak 3 Client.lnk
2014-11-15 12:17 - 2014-11-15 12:17 - 00000000 ____D () C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-11-15 12:16 - 2014-11-15 12:16 - 30095736 _____ (TeamSpeak Systems GmbH) C:\Users\michal\Downloads\TeamSpeak3-Client-win32-3.0.13.1.exe
2014-11-15 12:11 - 2014-11-15 12:11 - 05631168 _____ (IvoSoft) C:\Users\michal\Downloads\ClassicShellSetup_4_0_4.exe
2014-11-15 12:11 - 2014-11-15 12:11 - 03963267 _____ () C:\Users\michal\Downloads\KMSpico 9.1.3.rar
2014-11-15 12:00 - 2014-11-15 12:00 - 00000000 _____ () C:\autoexec.bat
2014-11-15 11:59 - 2014-11-15 11:59 - 02998656 _____ (Enigma Software Group USA, LLC.) C:\Users\michal\Downloads\SpyHunter-Installer.exe
2014-11-15 11:57 - 2014-11-15 22:19 - 00000958 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-15 11:57 - 2014-11-15 22:02 - 00000962 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-15 11:57 - 2014-11-15 12:24 - 00002333 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-15 11:57 - 2014-11-15 11:57 - 00003934 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-15 11:57 - 2014-11-15 11:57 - 00003698 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-15 11:57 - 2014-11-15 11:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-15 11:56 - 2014-11-15 11:57 - 00000000 ____D () C:\Users\michal\AppData\Local\Deployment
2014-11-15 11:56 - 2014-11-15 11:56 - 00000000 ____D () C:\Users\michal\AppData\Local\Apps\2.0
2014-11-15 11:35 - 2014-11-15 11:35 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-11-15 11:35 - 2014-11-15 11:35 - 00000834 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-11-15 11:35 - 2014-11-15 11:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-11-15 11:35 - 2014-11-15 11:35 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-15 11:27 - 2014-11-15 11:27 - 00000000 ____D () C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-15 11:27 - 2014-11-15 11:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-15 11:27 - 2014-11-15 11:27 - 00000000 ____D () C:\Program Files\WinRAR
2014-11-15 10:51 - 2014-11-15 10:51 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-11-15 10:51 - 2014-11-15 10:51 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-11-15 10:51 - 2014-11-15 10:51 - 00000000 ____D () C:\Program Files\MSBuild
2014-11-15 10:51 - 2014-11-15 10:51 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-11-15 10:51 - 2014-11-15 10:51 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-11-15 10:50 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2014-11-15 10:50 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-11-15 10:50 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-11-15 10:50 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2014-11-15 10:50 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-11-15 10:50 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-11-15 10:48 - 2014-11-15 22:24 - 00000000 ____D () C:\Users\michal\AppData\Roaming\Seznam.cz
2014-11-15 10:48 - 2014-11-15 10:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-11-15 10:48 - 2014-11-15 10:48 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-11-15 10:48 - 2014-11-15 10:48 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-11-15 10:24 - 2014-11-15 10:24 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-11-15 09:39 - 2014-11-15 09:39 - 00000000 ____D () C:\Users\michal\Documents\Diablo III
2014-11-15 02:40 - 2014-11-15 02:40 - 00001363 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-11-15 02:40 - 2014-11-15 02:40 - 00000000 ____D () C:\Users\michal\AppData\Local\NVIDIA
2014-11-15 02:40 - 2014-11-14 19:50 - 00000000 ____D () C:\Users\michal\AppData\Local\NVIDIA Corporation
2014-11-15 02:40 - 2014-11-14 19:47 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-11-15 02:40 - 2014-11-14 19:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-11-15 02:40 - 2014-11-14 19:47 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-11-15 02:40 - 2014-11-14 19:47 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-11-15 02:40 - 2014-11-06 18:13 - 02197680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-11-15 02:40 - 2014-11-06 18:13 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-11-15 02:40 - 2014-11-06 18:11 - 02800296 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-11-15 02:40 - 2014-11-06 18:11 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-11-15 02:40 - 2014-10-03 20:23 - 00038216 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-11-15 02:40 - 2014-10-03 20:23 - 00035144 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-11-15 02:40 - 2014-10-03 20:23 - 00032584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-11-15 02:40 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-11-15 02:40 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-11-15 02:40 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-11-15 02:40 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-11-15 02:40 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-11-15 02:40 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-11-15 02:37 - 2014-11-15 21:16 - 00003958 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{4A957018-6C95-4602-A1A6-6C3F6F009877}
2014-11-15 02:37 - 2014-11-15 02:37 - 00000000 __SHD () C:\Users\michal\AppData\Local\EmieUserList
2014-11-15 02:37 - 2014-11-15 02:37 - 00000000 __SHD () C:\Users\michal\AppData\Local\EmieSiteList
2014-11-15 02:37 - 2014-11-15 02:37 - 00000000 ___HD () C:\SuperChargerProfile
2014-11-15 02:37 - 2014-11-15 02:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2014-11-15 02:37 - 2014-11-15 02:37 - 00000000 ____D () C:\Program Files (x86)\MSI
2014-11-15 02:36 - 2014-11-15 02:36 - 00000000 ____D () C:\Windows\System32\Tasks\Intel(R) Small Business Advantage
2014-11-15 02:35 - 2014-11-15 22:21 - 00074899 _____ () C:\Windows\SysWOW64\Gms.log
2014-11-15 02:35 - 2014-11-15 02:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-11-15 02:35 - 2014-11-15 02:36 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-11-15 02:35 - 2014-11-15 02:35 - 00000000 ___RD () C:\Users\michal\Documents\Notes
2014-11-15 02:35 - 2014-11-15 02:35 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2014-11-15 02:35 - 2014-11-15 02:35 - 00000000 ____D () C:\Intel
2014-11-15 02:35 - 2014-11-14 19:50 - 00000000 ____D () C:\ProgramData\Intel
2014-11-15 02:34 - 2014-11-15 15:53 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-144057640-3153285968-835844921-1001
2014-11-15 02:34 - 2014-11-15 02:34 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-11-15 02:34 - 2014-11-15 02:34 - 00000000 ____D () C:\Users\michal\Intel
2014-11-15 02:34 - 2014-11-15 02:34 - 00000000 ____D () C:\Program Files\Realtek
2014-11-15 02:34 - 2014-05-13 12:09 - 03962840 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-11-15 02:34 - 2014-05-13 09:56 - 01065618 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-11-15 02:34 - 2014-05-09 04:17 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-11-15 02:34 - 2014-05-08 09:29 - 02000152 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO264.dll
2014-11-15 02:34 - 2014-05-08 09:29 - 01728280 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO232.dll
2014-11-15 02:34 - 2014-04-30 04:34 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-11-15 02:34 - 2014-04-28 08:48 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2014-11-15 02:34 - 2014-04-25 06:51 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-11-15 02:34 - 2014-04-25 06:23 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-11-15 02:34 - 2014-04-10 05:19 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-11-15 02:34 - 2014-04-10 05:19 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-11-15 02:34 - 2014-04-10 05:19 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-11-15 02:34 - 2014-03-06 09:35 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-11-15 02:34 - 2014-01-28 04:48 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-11-15 02:34 - 2014-01-08 08:25 - 00397592 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-11-15 02:34 - 2011-12-20 08:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-11-15 02:34 - 2011-11-22 09:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-11-15 02:34 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-11-15 02:34 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-11-15 02:34 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-11-15 02:34 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-11-15 02:34 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-11-15 02:34 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-11-15 02:34 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-11-15 02:34 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-11-15 02:34 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-11-15 02:34 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-11-15 02:34 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-11-15 02:34 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-11-15 02:34 - 2009-11-18 00:12 - 00032344 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\MBfilt64.sys
2014-11-15 02:33 - 2014-11-15 02:34 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-11-15 02:33 - 2014-02-26 08:16 - 02080472 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-11-15 02:33 - 2014-02-18 10:04 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-11-15 02:33 - 2013-10-15 20:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-11-15 02:33 - 2013-10-11 05:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-11-15 02:33 - 2012-03-08 04:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-11-15 02:32 - 2014-11-15 02:37 - 00000000 ____D () C:\Program Files\Intel
2014-11-15 02:32 - 2014-11-15 02:33 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-15 02:32 - 2014-11-15 02:33 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-11-15 02:32 - 2013-11-26 08:34 - 00838872 _____ (Realtek ) C:\Windows\system32\Drivers\Rt630x64.sys
2014-11-15 02:32 - 2013-11-26 08:34 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2014-11-15 02:29 - 2014-11-15 15:38 - 00000000 ____D () C:\Users\michal
2014-11-15 02:29 - 2014-11-15 11:43 - 00001422 _____ () C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-15 02:29 - 2014-11-15 02:30 - 00000000 ____D () C:\Users\michal\AppData\Local\Packages
2014-11-15 02:29 - 2014-11-15 02:29 - 00000020 ___SH () C:\Users\michal\ntuser.ini
2014-11-15 02:29 - 2014-11-15 02:29 - 00000000 _SHDL () C:\Users\michal\Šablony
2014-11-15 02:29 - 2014-11-15 02:29 - 00000000 _SHDL () C:\Users\michal\Soubory cookie
2014-11-15 02:29 - 2014-11-15 02:29 - 00000000 _SHDL () C:\Users\michal\Poslední
2014-11-15 02:29 - 2014-11-15 02:29 - 00000000 _SHDL () C:\Users\michal\Okolní tiskárny
2014-11-15 02:29 - 2014-11-15 02:29 - 00000000 _SHDL () C:\Users\michal\Okolní síť
2014-11-15 02:29 - 2014-11-15 02:29 - 00000000 _SHDL () C:\Users\michal\Nabídka Start
2014-11-15 02:29 - 2014-11-15 02:29 - 00000000 _SHDL () C:\Users\michal\Dokumenty
2014-11-15 02:29 - 2014-11-15 02:29 - 00000000 _SHDL () C:\Users\michal\Documents\Obrázky
2014-11-15 02:29 - 2014-11-15 02:29 - 00000000 _SHDL () C:\Users\michal\Documents\Hudba
2014-11-15 02:29 - 2014-11-15 02:29 - 00000000 _SHDL () C:\Users\michal\Documents\Filmy
2014-11-15 02:29 - 2014-11-15 02:29 - 00000000 _SHDL () C:\Users\michal\Data aplikací
2014-11-15 02:29 - 2014-11-15 02:29 - 00000000 _SHDL () C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-11-15 02:29 - 2014-11-15 02:29 - 00000000 _SHDL () C:\Users\michal\AppData\Local\Data aplikací
2014-11-15 02:29 - 2014-11-15 02:29 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-11-15 02:29 - 2014-11-15 02:29 - 00000000 ____D () C:\Users\michal\AppData\Roaming\Adobe
2014-11-15 02:29 - 2014-11-14 21:54 - 00000000 ____D () C:\Users\michal\AppData\Local\VirtualStore
2014-11-15 02:29 - 2014-03-18 17:02 - 00000000 ___RD () C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-15 02:29 - 2014-03-18 17:02 - 00000000 ___RD () C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-15 02:29 - 2014-03-18 16:42 - 00000369 _____ () C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-15 02:29 - 2014-03-18 16:42 - 00000369 _____ () C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-15 02:29 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-15 02:29 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Public\Documents\Obrázky
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Public\Documents\Hudba
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Public\Documents\Filmy
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default\Šablony
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default\Soubory cookie
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default\Poslední
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default\Okolní tiskárny
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default\Okolní síť
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default\Nabídka Start
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default\Dokumenty
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default\Documents\Obrázky
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default\Documents\Hudba
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default\Documents\Filmy
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default\Data aplikací
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Data aplikací
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default User\Documents\Obrázky
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default User\Documents\Hudba
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default User\Documents\Filmy
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Data aplikací
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\ProgramData\Šablony
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\ProgramData\Plocha
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\ProgramData\Nabídka Start
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\ProgramData\Dokumenty
2014-11-15 02:25 - 2014-11-15 02:25 - 00000000 _SHDL () C:\ProgramData\Data aplikací
2014-11-15 02:22 - 2014-11-15 11:37 - 00000000 ____D () C:\Windows\Panther
2014-11-14 22:22 - 2014-11-14 22:52 - 535601671 _____ () C:\Users\michal\Downloads\Naughty-America---Madelyn-Marie.wmv
2014-11-14 22:19 - 2014-11-14 22:19 - 00001150 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2014-11-14 22:19 - 2014-11-14 22:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2014-11-14 22:17 - 2014-11-15 09:39 - 00000000 ____D () C:\Program Files (x86)\Diablo III
2014-11-14 21:58 - 2014-11-14 21:58 - 00001248 _____ () C:\Users\Public\Desktop\World of Warcraft.lnk
2014-11-14 21:58 - 2014-11-14 21:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2014-11-14 20:58 - 2014-11-14 22:11 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
2014-11-14 20:47 - 2014-11-15 22:20 - 00000000 ____D () C:\Users\michal\AppData\Roaming\Skype
2014-11-14 20:47 - 2014-11-14 20:47 - 00002549 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-11-14 20:47 - 2014-11-14 20:47 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-14 20:47 - 2014-11-14 20:47 - 00000000 ____D () C:\Users\michal\AppData\Local\Skype
2014-11-14 20:47 - 2014-11-14 20:47 - 00000000 ____D () C:\ProgramData\Skype
2014-11-14 20:47 - 2014-11-14 20:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-11-14 20:45 - 2014-11-14 20:45 - 01546856 _____ (Skype Technologies S.A.) C:\Users\michal\Downloads\SkypeSetup.exe
2014-11-14 20:11 - 2014-11-14 21:25 - 00000000 ____D () C:\Users\michal\Documents\StarCraft II
2014-11-14 20:11 - 2014-11-14 20:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
2014-11-14 20:10 - 2014-11-14 20:25 - 00000000 ____D () C:\Program Files (x86)\StarCraft II
2014-11-14 20:06 - 2014-11-14 20:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-11-14 20:03 - 2014-11-15 22:07 - 00000000 ____D () C:\Users\michal\AppData\Local\Battle.net
2014-11-14 20:03 - 2014-11-15 11:44 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-11-14 20:03 - 2014-11-14 20:12 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-11-14 20:03 - 2014-11-14 20:06 - 00000000 ____D () C:\Users\michal\AppData\Roaming\Battle.net
2014-11-14 20:03 - 2014-11-14 20:03 - 00001156 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-11-14 20:03 - 2014-11-14 20:03 - 00000000 ____D () C:\Users\michal\AppData\Roaming\NVIDIA
2014-11-14 20:03 - 2014-11-14 20:03 - 00000000 ____D () C:\Users\michal\AppData\Local\Blizzard Entertainment
2014-11-14 20:03 - 2014-11-14 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-11-14 20:02 - 2014-11-14 20:02 - 02868792 _____ (Blizzard Entertainment) C:\Users\michal\Downloads\Battle.net-Setup-enUS.exe
2014-11-14 20:02 - 2014-11-14 20:02 - 00000000 ____D () C:\ProgramData\Battle.net
2014-11-14 19:53 - 2014-11-15 11:57 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-14 19:53 - 2014-11-14 19:54 - 00000000 ____D () C:\Users\michal\AppData\Local\Google
2014-11-14 19:50 - 2014-11-14 19:50 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_INETMON_01011.Wdf
2014-11-14 19:50 - 2014-04-03 09:53 - 00025800 _____ () C:\Windows\system32\Drivers\INETMON.sys
2014-11-14 19:47 - 2014-11-15 22:19 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-14 19:47 - 2014-11-14 19:47 - 00000000 ____D () C:\Users\michal\AppData\Roaming\Macromedia
2014-11-14 19:47 - 2014-11-14 19:47 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-11-14 19:47 - 2014-11-03 23:02 - 06882448 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-11-14 19:47 - 2014-11-03 23:02 - 03531464 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-11-14 19:47 - 2014-11-03 23:02 - 02558792 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-11-14 19:47 - 2014-11-03 23:02 - 00935232 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-11-14 19:47 - 2014-11-03 23:02 - 00385352 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-11-14 19:47 - 2014-11-03 23:02 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-11-14 19:47 - 2014-11-03 21:25 - 00615568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-11-14 19:47 - 2014-11-03 12:58 - 04099264 _____ () C:\Windows\system32\nvcoproc.bin
2014-11-14 19:46 - 2014-11-06 22:02 - 01538880 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-11-14 19:46 - 2014-11-06 22:02 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-11-14 19:46 - 2014-11-06 22:02 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 31891784 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 24555208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 20985544 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 20923712 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 19966344 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 18514080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 17259848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 16884632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 14031448 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 13943904 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 13207184 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-11-14 19:46 - 2014-11-04 01:04 - 11397208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 11335408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 04289168 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 04009672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 03238040 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 02849736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434465.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434465.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00987520 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00962704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00934216 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00922256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00898192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00870624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00833864 _____ () C:\Windows\system32\nvmcumd.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00501064 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00417096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00391824 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00352016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00349504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00303600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00059592 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-11-14 19:46 - 2014-11-04 01:04 - 00027094 _____ () C:\Windows\system32\nvinfo.pb

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-15 22:25 - 2014-03-18 16:33 - 01745984 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-15 22:25 - 2014-03-18 15:54 - 00738682 _____ () C:\Windows\system32\perfh005.dat
2014-11-15 22:25 - 2014-03-18 15:54 - 00151404 _____ () C:\Windows\system32\perfc005.dat
2014-11-15 22:19 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-15 22:17 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-11-15 22:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-11-15 22:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2014-11-15 11:33 - 2013-08-22 14:25 - 00000194 _____ () C:\Windows\win.ini
2014-11-15 11:26 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-15 11:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System
2014-11-15 10:55 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-11-15 10:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-11-15 10:51 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\MUI
2014-11-15 10:51 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-11-15 02:35 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-11-15 02:32 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore
2014-11-15 02:26 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache
2014-11-15 02:25 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-11-15 02:25 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-11-15 02:24 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\Recovery
2014-11-15 02:22 - 2013-08-22 16:36 - 00262144 _____ () C:\Windows\system32\config\BCD-Template
2014-11-14 19:47 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Help

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-15 02:23

==================== End Of Log ============================



Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-11-2014
Ran by michal at 2014-11-15 22:40:01
Running from C:\Users\michal\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Aktualizace NVIDIA 16.13.65 (Version: 16.13.65 - NVIDIA Corporation) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)
Classic Shell (HKLM\...\{2368907C-E8F6-4750-A023-254C3E2B5E8D}) (Version: 4.0.4 - IvoSoft)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.122 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.1.1000 - Intel Corporation)
Intel(R) Small Business Advantage (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: 2.2.51.8439 - Intel(R) Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{C763E38D-6102-4581-807B-46E42A749212}) (Version: 5.0.10.2832 - Intel Corporation)
Intel(R) Update Manager (x32 Version: 1.0.0.36888 - Intel Corporation) Hidden
Intel® Chipset Device Software (x32 Version: 10.0.17 - Intel(R) Corporation) Hidden
KMSpico v9.1.3 (HKLM\...\KMSpico_is1) (Version: 9.1.3 - )
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
MSI Super Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.2.025 - MSI)
NVIDIA GeForce Experience 2.1.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.4 - NVIDIA Corporation)
NVIDIA Ovladač 3D Vision 344.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.65 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 344.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.65 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 344.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.65 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
NVIDIA Virtuální audio Miracast 344.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 344.65 - NVIDIA Corporation)
Ovládací panel NVIDIA 344.65 (Version: 344.65 - NVIDIA Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.23.1126.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7245 - Realtek Semiconductor Corp.)
Seznam Software (HKU\S-1-5-21-144057640-3153285968-835844921-1001\...\SeznamInstall) (Version: - Seznam.cz)
SHIELD Streaming (Version: 3.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.65 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.22 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.105 - Skype Technologies S.A.)
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
TeamSpeak 3 Client (HKU\S-1-5-21-144057640-3153285968-835844921-1001\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH)
WinRAR 5.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points =========================

15-11-2014 01:32:38 Instalováno Realtek Ethernet Controller Driver

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2014-11-15 22:13 - 00000753 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {5F87735D-02D3-4031-B77D-3F9C3CD19926} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-15] (Google Inc.)
Task: {70274B14-6D37-4D64-B058-0A091CF4E127} - System32\Tasks\Intel(R) Small Business Advantage\Notifier => C:\Program Files\Intel\Intel(R) Small Business Advantage\UI\SBA_Notifier.exe [2014-03-27] (Intel Corporation)
Task: {80637E49-762C-441C-94CB-2901B04E0E33} - \Microsoft\Windows\Multimedia\SMupdate3 No Task File <==== ATTENTION
Task: {BE075D82-AD2D-4F3F-9113-450BF4F1443D} - \Microsoft\Windows\Maintenance\SMupdate2 No Task File <==== ATTENTION
Task: {C03AC8E5-2889-41F6-B401-83368DB7508A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-23] (Piriform Ltd)
Task: {F95955F9-6DBD-41ED-A2A2-E4DE8EC90200} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2013-12-11] ()
Task: {F97BE919-3923-4DEC-A14A-EA096497C9B4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-15] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-11-14 19:47 - 2014-11-03 23:02 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-04-24 12:24 - 2014-04-24 12:24 - 00209712 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2014-04-24 12:24 - 2014-04-24 12:24 - 00057648 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2014-04-24 12:24 - 2014-04-24 12:24 - 00057648 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTEncryptionCheck.dll
2014-04-24 12:24 - 2014-04-24 12:24 - 00037168 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll
2014-11-15 10:48 - 2013-04-15 12:32 - 00060416 _____ () C:\Users\michal\AppData\Roaming\Seznam.cz\bin\19455libfoxloader-x64.dll
2014-11-15 10:48 - 2013-04-12 09:13 - 00457208 _____ () C:\Users\michal\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
2014-11-15 10:48 - 2013-04-29 11:53 - 00045560 _____ () C:\Users\michal\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
2014-11-15 10:55 - 2014-11-15 10:54 - 00061440 _____ () C:\Users\michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\81ed0e74a40ed4fe8a36a7b819c4279f.exe
2014-10-23 20:19 - 2014-10-23 20:19 - 00043520 _____ () C:\Program Files\CCleaner\lang\lang-1029.dll
2013-08-22 08:19 - 2013-08-22 07:54 - 00174592 _____ () C:\Windows\system32\WinMetadata\Windows.UI.winmd
2014-11-15 10:48 - 2013-03-29 12:37 - 00059384 _____ () C:\Users\michal\AppData\Roaming\Seznam.cz\bin\19455libfoxloader.dll
2014-11-15 10:48 - 2013-03-25 15:39 - 00894968 _____ () C:\Users\michal\AppData\Roaming\Seznam.cz\bin\lightspeed.dll
2014-11-15 10:48 - 2013-04-29 10:54 - 01663000 _____ () C:\Users\michal\AppData\Roaming\Seznam.cz\bin\libfoxcub.dll
2014-11-15 11:57 - 2014-11-06 00:56 - 01042760 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.122\libglesv2.dll
2014-11-15 11:57 - 2014-11-06 00:56 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.122\libegl.dll
2014-11-15 11:57 - 2014-11-06 00:57 - 08911176 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.122\pdf.dll
2014-11-15 11:57 - 2014-11-06 00:56 - 01681224 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.122\ffmpegsumo.dll
2014-04-03 16:48 - 2014-04-03 16:48 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-11-15 11:57 - 2014-11-06 00:57 - 14910280 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.122\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-144057640-3153285968-835844921-500 - Administrator - Disabled)
Guest (S-1-5-21-144057640-3153285968-835844921-501 - Limited - Disabled)
michal (S-1-5-21-144057640-3153285968-835844921-1001 - Administrator - Enabled) => C:\Users\michal

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/15/2014 10:37:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: FRSTLauncher (4).exe, verze: 30.9.13.1, časové razítko: 0x2a425e19
Název chybujícího modulu: KERNELBASE.dll, verze: 6.3.9600.17031, časové razítko: 0x53088860
Kód výjimky: 0x0eedfade
Posun chyby: 0x00014dbd
ID chybujícího procesu: 0x2e4
Čas spuštění chybující aplikace: 0xFRSTLauncher (4).exe0
Cesta k chybující aplikaci: FRSTLauncher (4).exe1
Cesta k chybujícímu modulu: FRSTLauncher (4).exe2
ID zprávy: FRSTLauncher (4).exe3
Úplný název chybujícího balíčku: FRSTLauncher (4).exe4
ID aplikace související s chybujícím balíčkem: FRSTLauncher (4).exe5

Error: (11/15/2014 10:35:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: FRSTLauncher (4).exe, verze: 30.9.13.1, časové razítko: 0x2a425e19
Název chybujícího modulu: KERNELBASE.dll, verze: 6.3.9600.17031, časové razítko: 0x53088860
Kód výjimky: 0x0eedfade
Posun chyby: 0x00014dbd
ID chybujícího procesu: 0xae4
Čas spuštění chybující aplikace: 0xFRSTLauncher (4).exe0
Cesta k chybující aplikaci: FRSTLauncher (4).exe1
Cesta k chybujícímu modulu: FRSTLauncher (4).exe2
ID zprávy: FRSTLauncher (4).exe3
Úplný název chybujícího balíčku: FRSTLauncher (4).exe4
ID aplikace související s chybujícím balíčkem: FRSTLauncher (4).exe5

Error: (11/15/2014 10:34:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: FRSTLauncher (4).exe, verze: 30.9.13.1, časové razítko: 0x2a425e19
Název chybujícího modulu: KERNELBASE.dll, verze: 6.3.9600.17031, časové razítko: 0x53088860
Kód výjimky: 0x0eedfade
Posun chyby: 0x00014dbd
ID chybujícího procesu: 0x404
Čas spuštění chybující aplikace: 0xFRSTLauncher (4).exe0
Cesta k chybující aplikaci: FRSTLauncher (4).exe1
Cesta k chybujícímu modulu: FRSTLauncher (4).exe2
ID zprávy: FRSTLauncher (4).exe3
Úplný název chybujícího balíčku: FRSTLauncher (4).exe4
ID aplikace související s chybujícím balíčkem: FRSTLauncher (4).exe5

Error: (11/15/2014 10:33:24 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: FRSTLauncher (4).exe, verze: 30.9.13.1, časové razítko: 0x2a425e19
Název chybujícího modulu: KERNELBASE.dll, verze: 6.3.9600.17031, časové razítko: 0x53088860
Kód výjimky: 0x0eedfade
Posun chyby: 0x00014dbd
ID chybujícího procesu: 0xa18
Čas spuštění chybující aplikace: 0xFRSTLauncher (4).exe0
Cesta k chybující aplikaci: FRSTLauncher (4).exe1
Cesta k chybujícímu modulu: FRSTLauncher (4).exe2
ID zprávy: FRSTLauncher (4).exe3
Úplný název chybujícího balíčku: FRSTLauncher (4).exe4
ID aplikace související s chybujícím balíčkem: FRSTLauncher (4).exe5

Error: (11/15/2014 10:32:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: FRSTLauncher (4).exe, verze: 30.9.13.1, časové razítko: 0x2a425e19
Název chybujícího modulu: KERNELBASE.dll, verze: 6.3.9600.17031, časové razítko: 0x53088860
Kód výjimky: 0x0eedfade
Posun chyby: 0x00014dbd
ID chybujícího procesu: 0x98c
Čas spuštění chybující aplikace: 0xFRSTLauncher (4).exe0
Cesta k chybující aplikaci: FRSTLauncher (4).exe1
Cesta k chybujícímu modulu: FRSTLauncher (4).exe2
ID zprávy: FRSTLauncher (4).exe3
Úplný název chybujícího balíčku: FRSTLauncher (4).exe4
ID aplikace související s chybujícím balíčkem: FRSTLauncher (4).exe5

Error: (11/15/2014 10:32:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: FRSTLauncher (4).exe, verze: 30.9.13.1, časové razítko: 0x2a425e19
Název chybujícího modulu: KERNELBASE.dll, verze: 6.3.9600.17031, časové razítko: 0x53088860
Kód výjimky: 0x0eedfade
Posun chyby: 0x00014dbd
ID chybujícího procesu: 0xaec
Čas spuštění chybující aplikace: 0xFRSTLauncher (4).exe0
Cesta k chybující aplikaci: FRSTLauncher (4).exe1
Cesta k chybujícímu modulu: FRSTLauncher (4).exe2
ID zprávy: FRSTLauncher (4).exe3
Úplný název chybujícího balíčku: FRSTLauncher (4).exe4
ID aplikace související s chybujícím balíčkem: FRSTLauncher (4).exe5

Error: (11/15/2014 10:09:29 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Index nebyl inicializován.

Podrobnosti:
Zadaný objekt nebyl nalezen. Zadejte název existujícího objektu. (HRESULT : 0x80040d06) (0x80040d06)

Error: (11/15/2014 10:09:29 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Aplikace nebyla inicializována.

Kontext: aplikace Windows

Podrobnosti:
Zadaný objekt nebyl nalezen. Zadejte název existujícího objektu. (HRESULT : 0x80040d06) (0x80040d06)

Error: (11/15/2014 10:09:29 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Objekt indexovacího modulu nebyl inicializován.

Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Zadaný objekt nebyl nalezen. Zadejte název existujícího objektu. (HRESULT : 0x80040d06) (0x80040d06)

Error: (11/15/2014 10:09:29 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Modul plug-in v <Search.TripoliIndexer> nebyl inicializován.

Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Zadaný objekt nebyl nalezen. Zadejte název existujícího objektu. (HRESULT : 0x80040d06) (0x80040d06)


System errors:
=============
Error: (11/15/2014 10:19:28 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Service KMSELDI byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (11/15/2014 10:18:28 PM) (Source: DCOM) (EventID: 10010) (User: gint)
Description: {03E64E17-B220-4052-9B9B-155F9CB8E016}

Error: (11/15/2014 10:18:27 PM) (Source: DCOM) (EventID: 10010) (User: gint)
Description: {03E64E17-B220-4052-9B9B-155F9CB8E016}

Error: (11/15/2014 10:17:43 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (11/15/2014 10:17:43 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (11/15/2014 10:17:43 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (11/15/2014 10:17:43 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (11/15/2014 10:17:42 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (11/15/2014 10:09:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Service KMSELDI byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (11/15/2014 10:09:30 PM) (Source: DCOM) (EventID: 10005) (User: gint)
Description: 1053WSearchNení k dispozici{9E175B68-F52A-11D8-B9A5-505054503030}


Microsoft Office Sessions:
=========================
Error: (11/15/2014 10:37:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: FRSTLauncher (4).exe30.9.13.12a425e19KERNELBASE.dll6.3.9600.17031530888600eedfade00014dbd2e401d0011c532087eaC:\Users\michal\Desktop\FRSTLauncher (4).exeC:\Windows\SYSTEM32\KERNELBASE.dll90d1d765-6d0f-11e4-8259-448a5bd57f80

Error: (11/15/2014 10:35:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: FRSTLauncher (4).exe30.9.13.12a425e19KERNELBASE.dll6.3.9600.17031530888600eedfade00014dbdae401d0011c12d45185C:\Users\michal\Desktop\FRSTLauncher (4).exeC:\Windows\SYSTEM32\KERNELBASE.dll508a674c-6d0f-11e4-8259-448a5bd57f80

Error: (11/15/2014 10:34:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: FRSTLauncher (4).exe30.9.13.12a425e19KERNELBASE.dll6.3.9600.17031530888600eedfade00014dbd40401d0011bfc7c6985C:\Users\michal\Desktop\FRSTLauncher (4).exeC:\Windows\SYSTEM32\KERNELBASE.dll3a327e92-6d0f-11e4-8259-448a5bd57f80

Error: (11/15/2014 10:33:24 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: FRSTLauncher (4).exe30.9.13.12a425e19KERNELBASE.dll6.3.9600.17031530888600eedfade00014dbda1801d0011bc8f11bf3C:\Users\michal\Desktop\FRSTLauncher (4).exeC:\Windows\SYSTEM32\KERNELBASE.dll06a009f8-6d0f-11e4-8259-448a5bd57f80

Error: (11/15/2014 10:32:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: FRSTLauncher (4).exe30.9.13.12a425e19KERNELBASE.dll6.3.9600.17031530888600eedfade00014dbd98c01d0011bb2423940C:\Users\michal\Desktop\FRSTLauncher (4).exeC:\Windows\SYSTEM32\KERNELBASE.dlleff5ec00-6d0e-11e4-8259-448a5bd57f80

Error: (11/15/2014 10:32:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: FRSTLauncher (4).exe30.9.13.12a425e19KERNELBASE.dll6.3.9600.17031530888600eedfade00014dbdaec01d0011bae6bf1f4C:\Users\michal\Desktop\FRSTLauncher (4).exeC:\Windows\SYSTEM32\KERNELBASE.dllec51b625-6d0e-11e4-8259-448a5bd57f80

Error: (11/15/2014 10:09:29 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Podrobnosti:
Zadaný objekt nebyl nalezen. Zadejte název existujícího objektu. (HRESULT : 0x80040d06) (0x80040d06)

Error: (11/15/2014 10:09:29 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Kontext: aplikace Windows

Podrobnosti:
Zadaný objekt nebyl nalezen. Zadejte název existujícího objektu. (HRESULT : 0x80040d06) (0x80040d06)

Error: (11/15/2014 10:09:29 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Zadaný objekt nebyl nalezen. Zadejte název existujícího objektu. (HRESULT : 0x80040d06) (0x80040d06)

Error: (11/15/2014 10:09:29 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Zadaný objekt nebyl nalezen. Zadejte název existujícího objektu. (HRESULT : 0x80040d06) (0x80040d06)
Search.TripoliIndexer


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
Percentage of memory in use: 20%
Total physical RAM: 8127.9 MB
Available physical RAM: 6460.53 MB
Total Pagefile: 10047.9 MB
Available Pagefile: 8064.06 MB
Total Virtual: 131072 MB
Available Virtual: 131071.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:97.31 GB) (Free:22.5 GB) NTFS
Drive e: (Nový svazek) (Fixed) (Total:833.85 GB) (Free:833.65 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: FEDB3F03)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=97.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=833.9 GB) - (Type=07 NTFS)

==================== End Of Log ============================
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7328
Registrován: 15 Lis 2012 22:26
Místo/Bydliště: Znojmo

Re: zpomaleny prohlizec , vyskakujici reklamy

#15 Příspěvek od altrok »

:arrow: Jak jsme na tom s legalitou OS?
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
Zamčeno

Vrátit se na „Řešení problémů, logy“