Režim spánku nefunkční
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Režim spánku nefunkční
Dobrý den,
asi od vánoc mám problém s režimem spánku.Nejdříve nešel počítač z režimu spánku probudit( počítač se power tlačítkem probudí---klávesnice,myš a monitor nikoli).Přečetl jsem různá fora,udělal aktualizace ovladačů,ale nic nepomohlo.Ba naopak posledních pár dní už počítač ani sám neusíná, (nastavený režim je na 20 minut),jen monitor po 5 minutách ztmavne.Chci zjistit,jestli to je SW nebo HW chyba.Jen chci podotknout,že jsem tu po vánocích s jedním z kolegů řešil zpomalení mého PC,což jsme spolu úspěšně vyřešili.(snad to není tím.Přikládám log RSIT:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Tepan at 2015-01-05 22:42:21
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 14 GB (8%) free of 175 GB
Total RAM: 4095 MB (50% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:43:23, on 5.1.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)
Boot mode: Normal
Running processes:
C:\Users\Tepan\AppData\Roaming\uTorrent\uTorrent.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files (x86)\DivX\DivX Player\DivX Player.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe
C:\Program Files (x86)\Free Download Manager\fdm.exe
C:\Program Files\trend micro\Tepan.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [DelReg] C:\Program Files (x86)\MSI\DualCoreCenter\DelReg.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Tepan\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout FDM - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video FDM - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané FDM - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše FDM - file://C:\Program Files (x86)\Free Download Manager\dlall.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: Cool Hand Poker - {0E0F9DBD-86F4-4600-BDBC-365F9B18A210} - C:\Microgaming\Poker\coolhandMPP\MPPoker.exe (file missing) (HKCU)
O9 - Extra button: Cool Hand Poker - {3180B5CF-CC3C-4137-8ED5-F311D7420658} - C:\Microgaming\Poker\coolhandMPP\MPPoker.exe (file missing) (HKCU)
O9 - Extra button: Betsson Poker by Microgaming - {E0D59277-8248-4CC0-A93E-42764DC4B641} - C:\Microgaming\Poker\BetssonMPP\MPPoker.exe (HKCU)
O9 - Extra button: 32Red Poker Room - {E5A68C59-481A-4A60-B532-F4AFC5767CFA} - C:\Microgaming\Poker\32RedMPP\MPPoker.exe (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs:
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
--
End of file - 9912 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\Explorer.EXE
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Users\Tepan\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-97dd5104-0ce6-43a0-ab0c-c3f09e093e63 -SystemEventPortName:HostProcess-0d7ca32b-6da8-43ed-836e-5fc2d2a90ce2 -IoCancelEventPortName:HostProcess-5f0dc815-c976-436c-8b3a-7cdccc72fda9 -NonStateChangingEventPortName:HostProcess-c1acc19a-5f79-4d36-97ec-14b097d7aa84 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:f453b0ef-dc4b-451b-8df7-826d87c73ad7 -DeviceGroupId:WpdFsGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe"
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\totalcmd\TOTALCMD.EXE"
"C:\Program Files (x86)\DivX\DivX Player\DivX Player.exe" "J:\Pro Kubu\S05\12.Finta.se.trpytivou.cetkou.avi"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=4076.1350b1a0.1717406832 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 4076 "\\.\pipe\gecko-crash-server-pipe.4076" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe" --proxy-stub-channel=Flash2008.61065348.22279 --host-broker-channel=Flash2008.61065348.16268 --host-pid=2008 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe" --channel=4136.0015F364.1739005009 --proxy-stub-channel=Flash2008.61065348.22279 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll" --host-npapi-version=27 --type=renderer
"C:\Program Files (x86)\Free Download Manager\fdm.exe" -Embedding
"C:\Downloads\Software\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\HP Photo Creations Communicator.job - C:\ProgramData\HP Photo Creations\Communicator.exe --auto
=========Mozilla firefox=========
ProfilePath - C:\Users\Tepan\AppData\Roaming\Mozilla\Firefox\Profiles\sdckyap9.default-1405284649585
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.235 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0]
"Description"=DivX Web Player
"Path"=C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.67.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5]
"Description"=A component of your photo software powered by RocketLife
"Path"=C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.235 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-14 705448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-08-11 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-14 586968]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
Free Download Manager - C:\Program Files (x86)\Free Download Manager\iefdm2.dll [2013-10-25 365056]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-08-11 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-09-09 12856936]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Users\Tepan\AppData\Roaming\uTorrent\uTorrent.exe [2014-11-26 1385808]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXMediaServer]
C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2014-11-17 448856]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\Tepan\AppData\Roaming\uTorrent\uTorrent.exe [2014-11-26 1385808]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Tepan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^hpqtra08.exe]
C:\Users\Tepan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hpqtra08.exe []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-12-19 642808]
"DelReg"=C:\Program Files (x86)\MSI\DualCoreCenter\DelReg.exe [2008-05-13 196608]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-12-12 5227112]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MSIServer]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=lvcod64.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2015-01-05 22:42:22 ----D---- C:\Program Files\trend micro
2015-01-05 22:42:21 ----D---- C:\rsit
2015-01-01 12:52:15 ----D---- C:\Windows\95FC26FB19FD4A96BBB1B1062E8648F5.TMP
2015-01-01 12:50:48 ----D---- C:\ProgramData\THQ
2014-12-30 12:03:01 ----D---- C:\Windows\SYSWOW64\vbox
2014-12-30 12:03:01 ----D---- C:\Windows\system32\vbox
2014-12-30 11:46:30 ----D---- C:\AdwCleaner
2014-12-29 11:03:17 ----D---- C:\Program Files (x86)\Winamax Poker
2014-12-28 21:27:08 ----A---- C:\DelFix.txt
2014-12-28 20:40:48 ----D---- C:\Program Files\Defraggler
2014-12-28 16:52:20 ----D---- C:\Windows\pss
2014-12-28 14:05:41 ----D---- C:\Windows\027B5748C40941FE949B7B81A8304EF4.TMP
2014-12-28 12:44:24 ----D---- C:\FRST
2014-12-26 11:01:16 ----D---- C:\Windows\Hewlett-Packard
2014-12-20 10:56:55 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-12-20 10:56:55 ----A---- C:\Windows\system32\ieUnatt.exe
2014-12-15 08:27:36 ----D---- C:\Program Files (x86)\Winstep
2014-12-15 08:27:36 ----A---- C:\Windows\SYSWOW64\msvbvm50.dll
2014-12-15 07:05:31 ----ASH---- C:\pagefile.sys
2014-12-15 01:12:49 ----D---- C:\Users\Tepan\AppData\Roaming\Thunderbird
2014-12-15 01:12:35 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2014-12-12 00:39:47 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2014-12-12 00:39:47 ----A---- C:\Windows\SYSWOW64\mfps.dll
2014-12-12 00:39:47 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2014-12-12 00:39:47 ----A---- C:\Windows\SYSWOW64\mferror.dll
2014-12-12 00:39:47 ----A---- C:\Windows\system32\rrinstaller.exe
2014-12-12 00:39:47 ----A---- C:\Windows\system32\mfps.dll
2014-12-12 00:39:47 ----A---- C:\Windows\system32\mfpmp.exe
2014-12-12 00:39:47 ----A---- C:\Windows\system32\mferror.dll
2014-12-12 00:39:46 ----A---- C:\Windows\SYSWOW64\mf.dll
2014-12-12 00:39:46 ----A---- C:\Windows\system32\mf.dll
2014-12-12 00:34:10 ----A---- C:\Windows\system32\drivers\tdx.sys
2014-12-12 00:34:09 ----A---- C:\Windows\SYSWOW64\charmap.exe
2014-12-12 00:34:09 ----A---- C:\Windows\system32\charmap.exe
2014-12-12 00:34:02 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-12-12 00:34:02 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-12-12 00:34:01 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-12-12 00:34:01 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-12-12 00:34:01 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-12-12 00:34:01 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-12-12 00:34:01 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-12 00:34:01 ----A---- C:\Windows\system32\iernonce.dll
2014-12-12 00:34:01 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-12-12 00:34:01 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-12-12 00:34:01 ----A---- C:\Windows\system32\ie4uinit.exe
2014-12-12 00:34:00 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-12-12 00:34:00 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-12-12 00:34:00 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-12-12 00:33:59 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-12-12 00:33:59 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-12-12 00:33:59 ----A---- C:\Windows\system32\urlmon.dll
2014-12-12 00:33:59 ----A---- C:\Windows\system32\iedkcs32.dll
2014-12-12 00:33:58 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-12-12 00:33:58 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-12-12 00:33:58 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-12-12 00:33:58 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-12-12 00:33:58 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-12-12 00:33:58 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-12 00:33:58 ----A---- C:\Windows\system32\msfeeds.dll
2014-12-12 00:33:58 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-12-12 00:33:58 ----A---- C:\Windows\system32\dxtrans.dll
2014-12-12 00:33:57 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-12-12 00:33:56 ----A---- C:\Windows\system32\iesetup.dll
2014-12-12 00:33:56 ----A---- C:\Windows\system32\ieapfltr.dll
2014-12-12 00:33:55 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-12-12 00:33:55 ----A---- C:\Windows\system32\iertutil.dll
2014-12-12 00:33:54 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-12-12 00:33:54 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-12-12 00:33:54 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-12-12 00:33:54 ----A---- C:\Windows\system32\jsproxy.dll
2014-12-12 00:33:53 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-12-12 00:33:53 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-12-12 00:33:53 ----A---- C:\Windows\system32\ieui.dll
2014-12-12 00:33:53 ----A---- C:\Windows\system32\dxtmsft.dll
2014-12-12 00:33:52 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-12-12 00:33:52 ----A---- C:\Windows\system32\mshtmled.dll
2014-12-12 00:33:52 ----A---- C:\Windows\system32\ieframe.dll
2014-12-12 00:33:51 ----A---- C:\Windows\system32\wininet.dll
2014-12-12 00:33:51 ----A---- C:\Windows\system32\vbscript.dll
2014-12-12 00:33:51 ----A---- C:\Windows\system32\jscript9diag.dll
2014-12-12 00:33:51 ----A---- C:\Windows\system32\jscript9.dll
2014-12-12 00:33:50 ----A---- C:\Windows\system32\msrating.dll
2014-12-12 00:33:50 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-12-12 00:33:49 ----A---- C:\Windows\system32\mshtml.dll
2014-12-12 00:33:36 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-12-12 00:33:36 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-12-12 00:33:19 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll
2014-12-12 00:33:19 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2014-12-12 00:33:19 ----A---- C:\Windows\SYSWOW64\WSManMigrationPlugin.dll
2014-12-12 00:33:19 ----A---- C:\Windows\system32\WsmWmiPl.dll
2014-12-12 00:33:19 ----A---- C:\Windows\system32\WsmSvc.dll
2014-12-12 00:33:19 ----A---- C:\Windows\system32\WsmAuto.dll
2014-12-12 00:33:19 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-12 00:33:19 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2014-12-12 00:33:18 ----A---- C:\Windows\SYSWOW64\WsmAuto.dll
2014-12-12 00:33:18 ----A---- C:\Windows\SYSWOW64\WSManHTTPConfig.exe
2014-12-12 00:31:38 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-12-12 00:31:38 ----A---- C:\Windows\system32\tzres.dll
2014-12-10 20:59:46 ----D---- C:\ProgramData\NetBetCoach
======List of files/folders modified in the last 1 month======
2015-01-05 22:43:22 ----D---- C:\Users\Tepan\AppData\Roaming\uTorrent
2015-01-05 22:43:03 ----D---- C:\Windows\Temp
2015-01-05 22:42:22 ----D---- C:\Program Files
2015-01-05 21:36:51 ----D---- C:\Program Files (x86)\Full Tilt Poker
2015-01-05 06:56:12 ----D---- C:\Windows\system32\config
2015-01-04 12:48:09 ----HD---- C:\ProgramData
2015-01-04 12:38:05 ----D---- C:\Users\Tepan\AppData\Roaming\Free Download Manager
2015-01-03 12:26:22 ----D---- C:\Users\Tepan\AppData\Roaming\DivX
2015-01-02 12:13:31 ----D---- C:\Hry
2015-01-02 02:56:26 ----D---- C:\Program Files (x86)\Poker MIRA
2015-01-01 18:22:50 ----D---- C:\Users\Tepan\AppData\Roaming\Microgaming
2015-01-01 12:52:37 ----SHD---- C:\System Volume Information
2015-01-01 12:52:16 ----D---- C:\Windows
2015-01-01 12:52:15 ----SHD---- C:\Windows\Installer
2015-01-01 12:51:39 ----HD---- C:\Config.Msi
2015-01-01 12:51:30 ----D---- C:\Windows\winsxs
2015-01-01 12:33:41 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-01-01 12:27:17 ----D---- C:\Users\Tepan\AppData\Roaming\DAEMON Tools Lite
2015-01-01 11:37:23 ----D---- C:\Windows\System32
2015-01-01 11:19:58 ----D---- C:\Users\Tepan\AppData\Roaming\vlc
2014-12-31 10:47:26 ----D---- C:\Windows\inf
2014-12-30 12:03:01 ----D---- C:\Windows\SysWOW64
2014-12-29 11:03:17 ----D---- C:\Program Files (x86)
2014-12-28 23:31:19 ----D---- C:\Program Files (x86)\Steam
2014-12-28 21:03:17 ----D---- C:\Program Files (x86)\HP
2014-12-28 20:04:54 ----D---- C:\Poker
2014-12-28 20:02:10 ----D---- C:\ProgramData\Freemake
2014-12-28 19:53:04 ----D---- C:\Downloads
2014-12-28 19:46:10 ----D---- C:\Windows\Prefetch
2014-12-28 16:38:06 ----D---- C:\Windows\system32\drivers\etc
2014-12-28 16:19:21 ----D---- C:\Windows\system32\Tasks
2014-12-28 16:19:16 ----HD---- C:\Windows\system32\GroupPolicy
2014-12-28 14:08:52 ----D---- C:\Users\Tepan\AppData\Roaming\HpUpdate
2014-12-28 14:07:28 ----D---- C:\Windows\system32\catroot2
2014-12-26 18:02:45 ----D---- C:\Windows\system32\NDF
2014-12-26 01:36:04 ----D---- C:\ProgramData\Microsoft Help
2014-12-26 00:21:06 ----D---- C:\Program Files (x86)\TuneUp Utilities 2013
2014-12-24 17:33:17 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-12-23 07:52:21 ----D---- C:\Program Files (x86)\PokerStars
2014-12-23 07:40:17 ----D---- C:\Redbet
2014-12-20 10:54:18 ----D---- C:\Windows\system32\catroot
2014-12-15 08:54:15 ----D---- C:\Windows\debug
2014-12-15 07:56:09 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-12-15 07:56:09 ----D---- C:\Windows\system32\cs-CZ
2014-12-15 07:52:42 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-12-15 07:07:15 ----D---- C:\ProgramData\ProductData
2014-12-15 07:05:29 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-15 07:03:08 ----D---- C:\Windows\system32\drivers
2014-12-15 07:03:08 ----D---- C:\Program Files\Internet Explorer
2014-12-15 07:03:07 ----D---- C:\Windows\SYSWOW64\en-US
2014-12-15 07:03:07 ----D---- C:\Windows\system32\en-US
2014-12-15 07:03:07 ----D---- C:\Windows\PolicyDefinitions
2014-12-15 07:03:06 ----D---- C:\Program Files (x86)\Internet Explorer
2014-12-12 00:52:06 ----D---- C:\Windows\system32\MRT
2014-12-12 00:45:46 ----A---- C:\Windows\system32\MRT.exe
2014-12-10 23:47:07 ----D---- C:\DuckPoker
2014-12-08 13:43:24 ----D---- C:\Program Files (x86)\Unibet Poker
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2014-11-14 449936]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-14 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-14 267632]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2014-10-01 386680]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-11-14 28184]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-14 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-22 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-14 436624]
R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx64.sys [2014-04-20 49952]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-10-01 283064]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-14 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-14 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-14 116728]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2014-08-14 88480]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2014-08-14 46400]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2011-02-11 35344]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2014-11-14 271752]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-12-19 552960]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-09-13 3076456]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 DrvAgent64;DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [2014-09-14 21712]
S3 ENTECH64;ENTECH64; \??\C:\Windows\system32\DRIVERS\ENTECH64.sys [2008-09-17 12744]
S3 LVRS64;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs64.sys [2008-07-26 790424]
S3 LVUSBS64;Logitech USB Monitor Filter; C:\Windows\system32\DRIVERS\LVUSBS64.sys [2008-07-26 50072]
S3 LVUVC64;Logitech QuickCam S5500(UVC); C:\Windows\system32\DRIVERS\lvuvc64.sys [2008-07-26 5068056]
S3 NTIOLib_1_0_6;NTIOLib_1_0_6; \??\C:\Program Files (x86)\Setup Files\Ms7529v470\NTIOLib_X64.sys [2011-01-06 11888]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-12-19 240640]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-14 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-11-14 104416]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-04-15 76888]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-15 267440]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2014-11-14 4012248]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-22 114688]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 50942144]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-03 114800]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-06-30 542400]
S4 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [2008-02-18 877864]
S4 NetBetCoach;NetBet Poker Coach Service; C:\Users\Tepan\AppData\Local\NetBetCoach\NetBetCoach_service.exe [2014-09-16 74752]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [2006-12-19 81920]
S4 RzKLService;RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [2014-02-25 105448]
-----------------EOF-----------------
asi od vánoc mám problém s režimem spánku.Nejdříve nešel počítač z režimu spánku probudit( počítač se power tlačítkem probudí---klávesnice,myš a monitor nikoli).Přečetl jsem různá fora,udělal aktualizace ovladačů,ale nic nepomohlo.Ba naopak posledních pár dní už počítač ani sám neusíná, (nastavený režim je na 20 minut),jen monitor po 5 minutách ztmavne.Chci zjistit,jestli to je SW nebo HW chyba.Jen chci podotknout,že jsem tu po vánocích s jedním z kolegů řešil zpomalení mého PC,což jsme spolu úspěšně vyřešili.(snad to není tím.Přikládám log RSIT:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Tepan at 2015-01-05 22:42:21
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 14 GB (8%) free of 175 GB
Total RAM: 4095 MB (50% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:43:23, on 5.1.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)
Boot mode: Normal
Running processes:
C:\Users\Tepan\AppData\Roaming\uTorrent\uTorrent.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files (x86)\DivX\DivX Player\DivX Player.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe
C:\Program Files (x86)\Free Download Manager\fdm.exe
C:\Program Files\trend micro\Tepan.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [DelReg] C:\Program Files (x86)\MSI\DualCoreCenter\DelReg.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Tepan\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout FDM - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video FDM - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané FDM - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše FDM - file://C:\Program Files (x86)\Free Download Manager\dlall.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: Cool Hand Poker - {0E0F9DBD-86F4-4600-BDBC-365F9B18A210} - C:\Microgaming\Poker\coolhandMPP\MPPoker.exe (file missing) (HKCU)
O9 - Extra button: Cool Hand Poker - {3180B5CF-CC3C-4137-8ED5-F311D7420658} - C:\Microgaming\Poker\coolhandMPP\MPPoker.exe (file missing) (HKCU)
O9 - Extra button: Betsson Poker by Microgaming - {E0D59277-8248-4CC0-A93E-42764DC4B641} - C:\Microgaming\Poker\BetssonMPP\MPPoker.exe (HKCU)
O9 - Extra button: 32Red Poker Room - {E5A68C59-481A-4A60-B532-F4AFC5767CFA} - C:\Microgaming\Poker\32RedMPP\MPPoker.exe (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs:
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
--
End of file - 9912 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\Explorer.EXE
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Users\Tepan\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-97dd5104-0ce6-43a0-ab0c-c3f09e093e63 -SystemEventPortName:HostProcess-0d7ca32b-6da8-43ed-836e-5fc2d2a90ce2 -IoCancelEventPortName:HostProcess-5f0dc815-c976-436c-8b3a-7cdccc72fda9 -NonStateChangingEventPortName:HostProcess-c1acc19a-5f79-4d36-97ec-14b097d7aa84 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:f453b0ef-dc4b-451b-8df7-826d87c73ad7 -DeviceGroupId:WpdFsGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe"
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\totalcmd\TOTALCMD.EXE"
"C:\Program Files (x86)\DivX\DivX Player\DivX Player.exe" "J:\Pro Kubu\S05\12.Finta.se.trpytivou.cetkou.avi"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=4076.1350b1a0.1717406832 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 4076 "\\.\pipe\gecko-crash-server-pipe.4076" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe" --proxy-stub-channel=Flash2008.61065348.22279 --host-broker-channel=Flash2008.61065348.16268 --host-pid=2008 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe" --channel=4136.0015F364.1739005009 --proxy-stub-channel=Flash2008.61065348.22279 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll" --host-npapi-version=27 --type=renderer
"C:\Program Files (x86)\Free Download Manager\fdm.exe" -Embedding
"C:\Downloads\Software\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\HP Photo Creations Communicator.job - C:\ProgramData\HP Photo Creations\Communicator.exe --auto
=========Mozilla firefox=========
ProfilePath - C:\Users\Tepan\AppData\Roaming\Mozilla\Firefox\Profiles\sdckyap9.default-1405284649585
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.235 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0]
"Description"=DivX Web Player
"Path"=C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.67.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5]
"Description"=A component of your photo software powered by RocketLife
"Path"=C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.235 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-14 705448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-08-11 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-14 586968]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
Free Download Manager - C:\Program Files (x86)\Free Download Manager\iefdm2.dll [2013-10-25 365056]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-08-11 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-09-09 12856936]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Users\Tepan\AppData\Roaming\uTorrent\uTorrent.exe [2014-11-26 1385808]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXMediaServer]
C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2014-11-17 448856]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\Tepan\AppData\Roaming\uTorrent\uTorrent.exe [2014-11-26 1385808]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Tepan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^hpqtra08.exe]
C:\Users\Tepan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hpqtra08.exe []
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-12-19 642808]
"DelReg"=C:\Program Files (x86)\MSI\DualCoreCenter\DelReg.exe [2008-05-13 196608]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-12-12 5227112]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MSIServer]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=lvcod64.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2015-01-05 22:42:22 ----D---- C:\Program Files\trend micro
2015-01-05 22:42:21 ----D---- C:\rsit
2015-01-01 12:52:15 ----D---- C:\Windows\95FC26FB19FD4A96BBB1B1062E8648F5.TMP
2015-01-01 12:50:48 ----D---- C:\ProgramData\THQ
2014-12-30 12:03:01 ----D---- C:\Windows\SYSWOW64\vbox
2014-12-30 12:03:01 ----D---- C:\Windows\system32\vbox
2014-12-30 11:46:30 ----D---- C:\AdwCleaner
2014-12-29 11:03:17 ----D---- C:\Program Files (x86)\Winamax Poker
2014-12-28 21:27:08 ----A---- C:\DelFix.txt
2014-12-28 20:40:48 ----D---- C:\Program Files\Defraggler
2014-12-28 16:52:20 ----D---- C:\Windows\pss
2014-12-28 14:05:41 ----D---- C:\Windows\027B5748C40941FE949B7B81A8304EF4.TMP
2014-12-28 12:44:24 ----D---- C:\FRST
2014-12-26 11:01:16 ----D---- C:\Windows\Hewlett-Packard
2014-12-20 10:56:55 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-12-20 10:56:55 ----A---- C:\Windows\system32\ieUnatt.exe
2014-12-15 08:27:36 ----D---- C:\Program Files (x86)\Winstep
2014-12-15 08:27:36 ----A---- C:\Windows\SYSWOW64\msvbvm50.dll
2014-12-15 07:05:31 ----ASH---- C:\pagefile.sys
2014-12-15 01:12:49 ----D---- C:\Users\Tepan\AppData\Roaming\Thunderbird
2014-12-15 01:12:35 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2014-12-12 00:39:47 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2014-12-12 00:39:47 ----A---- C:\Windows\SYSWOW64\mfps.dll
2014-12-12 00:39:47 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2014-12-12 00:39:47 ----A---- C:\Windows\SYSWOW64\mferror.dll
2014-12-12 00:39:47 ----A---- C:\Windows\system32\rrinstaller.exe
2014-12-12 00:39:47 ----A---- C:\Windows\system32\mfps.dll
2014-12-12 00:39:47 ----A---- C:\Windows\system32\mfpmp.exe
2014-12-12 00:39:47 ----A---- C:\Windows\system32\mferror.dll
2014-12-12 00:39:46 ----A---- C:\Windows\SYSWOW64\mf.dll
2014-12-12 00:39:46 ----A---- C:\Windows\system32\mf.dll
2014-12-12 00:34:10 ----A---- C:\Windows\system32\drivers\tdx.sys
2014-12-12 00:34:09 ----A---- C:\Windows\SYSWOW64\charmap.exe
2014-12-12 00:34:09 ----A---- C:\Windows\system32\charmap.exe
2014-12-12 00:34:02 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-12-12 00:34:02 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-12-12 00:34:01 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-12-12 00:34:01 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-12-12 00:34:01 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-12-12 00:34:01 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-12-12 00:34:01 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-12 00:34:01 ----A---- C:\Windows\system32\iernonce.dll
2014-12-12 00:34:01 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-12-12 00:34:01 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-12-12 00:34:01 ----A---- C:\Windows\system32\ie4uinit.exe
2014-12-12 00:34:00 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-12-12 00:34:00 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-12-12 00:34:00 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-12-12 00:33:59 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-12-12 00:33:59 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-12-12 00:33:59 ----A---- C:\Windows\system32\urlmon.dll
2014-12-12 00:33:59 ----A---- C:\Windows\system32\iedkcs32.dll
2014-12-12 00:33:58 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-12-12 00:33:58 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-12-12 00:33:58 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-12-12 00:33:58 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-12-12 00:33:58 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-12-12 00:33:58 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-12 00:33:58 ----A---- C:\Windows\system32\msfeeds.dll
2014-12-12 00:33:58 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-12-12 00:33:58 ----A---- C:\Windows\system32\dxtrans.dll
2014-12-12 00:33:57 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-12-12 00:33:56 ----A---- C:\Windows\system32\iesetup.dll
2014-12-12 00:33:56 ----A---- C:\Windows\system32\ieapfltr.dll
2014-12-12 00:33:55 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-12-12 00:33:55 ----A---- C:\Windows\system32\iertutil.dll
2014-12-12 00:33:54 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-12-12 00:33:54 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-12-12 00:33:54 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-12-12 00:33:54 ----A---- C:\Windows\system32\jsproxy.dll
2014-12-12 00:33:53 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-12-12 00:33:53 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-12-12 00:33:53 ----A---- C:\Windows\system32\ieui.dll
2014-12-12 00:33:53 ----A---- C:\Windows\system32\dxtmsft.dll
2014-12-12 00:33:52 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-12-12 00:33:52 ----A---- C:\Windows\system32\mshtmled.dll
2014-12-12 00:33:52 ----A---- C:\Windows\system32\ieframe.dll
2014-12-12 00:33:51 ----A---- C:\Windows\system32\wininet.dll
2014-12-12 00:33:51 ----A---- C:\Windows\system32\vbscript.dll
2014-12-12 00:33:51 ----A---- C:\Windows\system32\jscript9diag.dll
2014-12-12 00:33:51 ----A---- C:\Windows\system32\jscript9.dll
2014-12-12 00:33:50 ----A---- C:\Windows\system32\msrating.dll
2014-12-12 00:33:50 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-12-12 00:33:49 ----A---- C:\Windows\system32\mshtml.dll
2014-12-12 00:33:36 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-12-12 00:33:36 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-12-12 00:33:19 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll
2014-12-12 00:33:19 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2014-12-12 00:33:19 ----A---- C:\Windows\SYSWOW64\WSManMigrationPlugin.dll
2014-12-12 00:33:19 ----A---- C:\Windows\system32\WsmWmiPl.dll
2014-12-12 00:33:19 ----A---- C:\Windows\system32\WsmSvc.dll
2014-12-12 00:33:19 ----A---- C:\Windows\system32\WsmAuto.dll
2014-12-12 00:33:19 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-12 00:33:19 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2014-12-12 00:33:18 ----A---- C:\Windows\SYSWOW64\WsmAuto.dll
2014-12-12 00:33:18 ----A---- C:\Windows\SYSWOW64\WSManHTTPConfig.exe
2014-12-12 00:31:38 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-12-12 00:31:38 ----A---- C:\Windows\system32\tzres.dll
2014-12-10 20:59:46 ----D---- C:\ProgramData\NetBetCoach
======List of files/folders modified in the last 1 month======
2015-01-05 22:43:22 ----D---- C:\Users\Tepan\AppData\Roaming\uTorrent
2015-01-05 22:43:03 ----D---- C:\Windows\Temp
2015-01-05 22:42:22 ----D---- C:\Program Files
2015-01-05 21:36:51 ----D---- C:\Program Files (x86)\Full Tilt Poker
2015-01-05 06:56:12 ----D---- C:\Windows\system32\config
2015-01-04 12:48:09 ----HD---- C:\ProgramData
2015-01-04 12:38:05 ----D---- C:\Users\Tepan\AppData\Roaming\Free Download Manager
2015-01-03 12:26:22 ----D---- C:\Users\Tepan\AppData\Roaming\DivX
2015-01-02 12:13:31 ----D---- C:\Hry
2015-01-02 02:56:26 ----D---- C:\Program Files (x86)\Poker MIRA
2015-01-01 18:22:50 ----D---- C:\Users\Tepan\AppData\Roaming\Microgaming
2015-01-01 12:52:37 ----SHD---- C:\System Volume Information
2015-01-01 12:52:16 ----D---- C:\Windows
2015-01-01 12:52:15 ----SHD---- C:\Windows\Installer
2015-01-01 12:51:39 ----HD---- C:\Config.Msi
2015-01-01 12:51:30 ----D---- C:\Windows\winsxs
2015-01-01 12:33:41 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-01-01 12:27:17 ----D---- C:\Users\Tepan\AppData\Roaming\DAEMON Tools Lite
2015-01-01 11:37:23 ----D---- C:\Windows\System32
2015-01-01 11:19:58 ----D---- C:\Users\Tepan\AppData\Roaming\vlc
2014-12-31 10:47:26 ----D---- C:\Windows\inf
2014-12-30 12:03:01 ----D---- C:\Windows\SysWOW64
2014-12-29 11:03:17 ----D---- C:\Program Files (x86)
2014-12-28 23:31:19 ----D---- C:\Program Files (x86)\Steam
2014-12-28 21:03:17 ----D---- C:\Program Files (x86)\HP
2014-12-28 20:04:54 ----D---- C:\Poker
2014-12-28 20:02:10 ----D---- C:\ProgramData\Freemake
2014-12-28 19:53:04 ----D---- C:\Downloads
2014-12-28 19:46:10 ----D---- C:\Windows\Prefetch
2014-12-28 16:38:06 ----D---- C:\Windows\system32\drivers\etc
2014-12-28 16:19:21 ----D---- C:\Windows\system32\Tasks
2014-12-28 16:19:16 ----HD---- C:\Windows\system32\GroupPolicy
2014-12-28 14:08:52 ----D---- C:\Users\Tepan\AppData\Roaming\HpUpdate
2014-12-28 14:07:28 ----D---- C:\Windows\system32\catroot2
2014-12-26 18:02:45 ----D---- C:\Windows\system32\NDF
2014-12-26 01:36:04 ----D---- C:\ProgramData\Microsoft Help
2014-12-26 00:21:06 ----D---- C:\Program Files (x86)\TuneUp Utilities 2013
2014-12-24 17:33:17 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-12-23 07:52:21 ----D---- C:\Program Files (x86)\PokerStars
2014-12-23 07:40:17 ----D---- C:\Redbet
2014-12-20 10:54:18 ----D---- C:\Windows\system32\catroot
2014-12-15 08:54:15 ----D---- C:\Windows\debug
2014-12-15 07:56:09 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-12-15 07:56:09 ----D---- C:\Windows\system32\cs-CZ
2014-12-15 07:52:42 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-12-15 07:07:15 ----D---- C:\ProgramData\ProductData
2014-12-15 07:05:29 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-15 07:03:08 ----D---- C:\Windows\system32\drivers
2014-12-15 07:03:08 ----D---- C:\Program Files\Internet Explorer
2014-12-15 07:03:07 ----D---- C:\Windows\SYSWOW64\en-US
2014-12-15 07:03:07 ----D---- C:\Windows\system32\en-US
2014-12-15 07:03:07 ----D---- C:\Windows\PolicyDefinitions
2014-12-15 07:03:06 ----D---- C:\Program Files (x86)\Internet Explorer
2014-12-12 00:52:06 ----D---- C:\Windows\system32\MRT
2014-12-12 00:45:46 ----A---- C:\Windows\system32\MRT.exe
2014-12-10 23:47:07 ----D---- C:\DuckPoker
2014-12-08 13:43:24 ----D---- C:\Program Files (x86)\Unibet Poker
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2014-11-14 449936]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-14 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-14 267632]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2014-10-01 386680]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-11-14 28184]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-14 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-22 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-14 436624]
R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx64.sys [2014-04-20 49952]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-10-01 283064]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-14 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-14 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-14 116728]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2014-08-14 88480]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2014-08-14 46400]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2011-02-11 35344]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2014-11-14 271752]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-12-19 552960]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-09-13 3076456]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 DrvAgent64;DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [2014-09-14 21712]
S3 ENTECH64;ENTECH64; \??\C:\Windows\system32\DRIVERS\ENTECH64.sys [2008-09-17 12744]
S3 LVRS64;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs64.sys [2008-07-26 790424]
S3 LVUSBS64;Logitech USB Monitor Filter; C:\Windows\system32\DRIVERS\LVUSBS64.sys [2008-07-26 50072]
S3 LVUVC64;Logitech QuickCam S5500(UVC); C:\Windows\system32\DRIVERS\lvuvc64.sys [2008-07-26 5068056]
S3 NTIOLib_1_0_6;NTIOLib_1_0_6; \??\C:\Program Files (x86)\Setup Files\Ms7529v470\NTIOLib_X64.sys [2011-01-06 11888]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-12-19 240640]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-14 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-11-14 104416]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-04-15 76888]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-15 267440]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2014-11-14 4012248]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-22 114688]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 50942144]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-03 114800]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-06-30 542400]
S4 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [2008-02-18 877864]
S4 NetBetCoach;NetBet Poker Coach Service; C:\Users\Tepan\AppData\Local\NetBetCoach\NetBetCoach_service.exe [2014-09-16 74752]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [2006-12-19 81920]
S4 RzKLService;RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [2014-02-25 105448]
-----------------EOF-----------------
MeetAgree.com - She’s Expensive. But You Can Afford Her.
Re: Režim spánku nefunkční
Zdravim 
Kdyz ho uspite sam, tak to jde?
Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.
Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=29&t=137928 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Re: Režim spánku nefunkční
když ho uspím sám,a pak ho chci probudit,tak se počítač probudí,monitor ,klávesnice a myš se nerozsvítí
tady je adwcleaner:
# AdwCleaner v4.106 - Report created 06/01/2015 at 16:03:32
# Updated 21/12/2014 by Xplode
# Database : 2015-01-03.1 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Tepan - TEPAN-PC
# Running from : C:\Users\Tepan\Desktop\adwcleaner_4.106.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17496
-\\ Mozilla Firefox v34.0 (x86 cs)
-\\ Google Chrome v
-\\ Chromium v
-\\ Comodo Dragon v
*************************
AdwCleaner[R0].txt - [826 octets] - [30/12/2014 11:46:32]
AdwCleaner[R1].txt - [988 octets] - [04/01/2015 12:35:42]
AdwCleaner[R2].txt - [1047 octets] - [04/01/2015 12:45:07]
AdwCleaner[R3].txt - [1121 octets] - [06/01/2015 15:53:22]
AdwCleaner[R4].txt - [1181 octets] - [06/01/2015 15:58:19]
AdwCleaner[S0].txt - [886 octets] - [30/12/2014 11:58:00]
AdwCleaner[S1].txt - [1111 octets] - [04/01/2015 12:48:08]
AdwCleaner[S2].txt - [1103 octets] - [06/01/2015 16:03:32]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1163 octets] ##########
tady je adwcleaner:
# AdwCleaner v4.106 - Report created 06/01/2015 at 16:03:32
# Updated 21/12/2014 by Xplode
# Database : 2015-01-03.1 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Tepan - TEPAN-PC
# Running from : C:\Users\Tepan\Desktop\adwcleaner_4.106.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17496
-\\ Mozilla Firefox v34.0 (x86 cs)
-\\ Google Chrome v
-\\ Chromium v
-\\ Comodo Dragon v
*************************
AdwCleaner[R0].txt - [826 octets] - [30/12/2014 11:46:32]
AdwCleaner[R1].txt - [988 octets] - [04/01/2015 12:35:42]
AdwCleaner[R2].txt - [1047 octets] - [04/01/2015 12:45:07]
AdwCleaner[R3].txt - [1121 octets] - [06/01/2015 15:53:22]
AdwCleaner[R4].txt - [1181 octets] - [06/01/2015 15:58:19]
AdwCleaner[S0].txt - [886 octets] - [30/12/2014 11:58:00]
AdwCleaner[S1].txt - [1111 octets] - [04/01/2015 12:48:08]
AdwCleaner[S2].txt - [1103 octets] - [06/01/2015 16:03:32]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1163 octets] ##########
MeetAgree.com - She’s Expensive. But You Can Afford Her.
Re: Režim spánku nefunkční
OK, tak jeste ten MBAM 
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Re: Režim spánku nefunkční
Malwarebytes Anti-Malware
www.malwarebytes.org
Datum skenování: 6.1.2015
Čas skenování: 16:22:37
Protokol: MBAM.txt
Správce: Ano
Verze: 2.00.4.1028
Databáze malwaru: v2015.01.06.04
Databáze rootkitů: v2014.12.30.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Sebeobrany: Vypnuto
OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Tepan
Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 682437
Uplynulý čas: 2 hod, 31 min, 39 sek
Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto
Procesy: 0
(Žádné zákerné zjištěny položek)
Moduly: 0
(Žádné zákerné zjištěny položek)
Klíče registru: 4
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\MySearch.MySearch, , [1715de161c6d3600cd2a8df5966d07f9],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MySearch.MySearch, , [ea424ba98702e4526a8d5c2635cea65a],
PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.9, , [ef3dc0349decc373d801fa90ee1527d9],
PUP.Optional.ShopAndUp.A, HKU\S-1-5-21-1029120089-3632672932-3177029402-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Shop_an_Upi_1.6, , [7bb127cd2069db5b03185630cc37b848],
Hodnoty registru: 0
(Žádné zákerné zjištěny položek)
Data registru: 0
(Žádné zákerné zjištěny položek)
Složky: 2
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config, , [42eadb19523705319b762f5433d0b947],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro, , [af7d6391e5a4e84eeafb074af50e53ad],
Soubory: 22
PUP.Optional.MultiPlug, C:\Downloads\Software\Winstep%20Nexus%20Ultimate%2012.2%20Crack%20is%20Here%21%20BLatestD.exe, , [131916de4d3c72c43d097372a75a20e0],
PUP.Optional.Goobzo, C:\Program Files\Common Files\ShopperPro\spbiu.exe, , [4ddfa05476133cfa6015aab936cf9f61],
PUP.Optional.Goobzo, C:\Users\Tepan\AppData\Local\Installer\Install_6809\setup.exe, , [062622d2a0e97db90a5b353f7f8643bd],
PUP.Optional.Amonetize, C:\Users\Tepan\Downloads\DivX.Web.Player.Installer__8420_i1210646945_il15531.exe, , [52dac23296f39c9a0da6e6d8e31e7f81],
PUP.Optional.Amonetize, C:\Users\Tepan\Downloads\DivX.Web.Player.Installer__8420_i1210652935_il15531.exe, , [e646cf253e4b0432b003b30b55ac32ce],
Riskware.Injector.DC, J:\Hry\Far cry 4\Dual Core Fix.7z, , [2408599ba6e3bf771fc0df1927da54ac],
PUP.RiskwareTool.CK, J:\Hry\Mafia 2\OstatnA Programy\WinRAR v3.92 CZ (23-64bit)\Crack.zip, , [84a89262642593a392af58eca65cce32],
PUP.Optional.OpenCandy, J:\pro Adisa\DTLite-setup.exe, , [68c4d61eb4d50f27e7b768480401fb05],
Riskware.Tool.CK, J:\Programay z netu 2\Download manager\internet-download-manager-v6-05-5-winall-incl-keygen-and-patch-jaro.zip, , [a686886cd8b13df97dfefc85f30dd12f],
RiskWare.Tool.CK, J:\Programay z netu 2\Microsoft office 2007\Microsoft.Office.2007.Enterprise.Keygen.Only-MiCROSOFT.7z, , [3af25a9a90f99b9bcf211d3252b007f9],
RiskWare.Tool.CK, J:\Programay z netu 2\Ochrana pocitace\tuneup-2011-cz-key-ok.rar, , [c666e014107934020234333a1fe3d22e],
Trojan.Agent, J:\Programay z netu 2\Windows 7 Home Premium\New Windows 7 Activator [2010].rar, , [60ccd222a4e5ea4cb60e7ccced1529d7],
Trojan.Agent, J:\Programay z netu 2\Windows 7 Home Premium\7homprem64cs\7Loader Release 5.exe, , [43e90ce8ea9f9d99497ba6a204fe6a96],
HackTool.Wpakill, J:\Programay z netu 2\Windows 7 Home Premium\7homprem64cs\RemoveWAT.exe, , [979527cd4544d06642f280ec847cb14f],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\ver.xml, , [42eadb19523705319b762f5433d0b947],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\data.xml, , [42eadb19523705319b762f5433d0b947],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\uninstinethnfd.exe, , [42eadb19523705319b762f5433d0b947],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbia.exe, , [af7d6391e5a4e84eeafb074af50e53ad],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbici64.dll, , [af7d6391e5a4e84eeafb074af50e53ad],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii32.exe, , [af7d6391e5a4e84eeafb074af50e53ad],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii64.exe, , [af7d6391e5a4e84eeafb074af50e53ad],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbiw.sys, , [af7d6391e5a4e84eeafb074af50e53ad],
Fyzické sektory: 0
(Žádné zákerné zjištěny položek)
(end)
www.malwarebytes.org
Datum skenování: 6.1.2015
Čas skenování: 16:22:37
Protokol: MBAM.txt
Správce: Ano
Verze: 2.00.4.1028
Databáze malwaru: v2015.01.06.04
Databáze rootkitů: v2014.12.30.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Sebeobrany: Vypnuto
OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Tepan
Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 682437
Uplynulý čas: 2 hod, 31 min, 39 sek
Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto
Procesy: 0
(Žádné zákerné zjištěny položek)
Moduly: 0
(Žádné zákerné zjištěny položek)
Klíče registru: 4
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\MySearch.MySearch, , [1715de161c6d3600cd2a8df5966d07f9],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MySearch.MySearch, , [ea424ba98702e4526a8d5c2635cea65a],
PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.9, , [ef3dc0349decc373d801fa90ee1527d9],
PUP.Optional.ShopAndUp.A, HKU\S-1-5-21-1029120089-3632672932-3177029402-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Shop_an_Upi_1.6, , [7bb127cd2069db5b03185630cc37b848],
Hodnoty registru: 0
(Žádné zákerné zjištěny položek)
Data registru: 0
(Žádné zákerné zjištěny položek)
Složky: 2
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config, , [42eadb19523705319b762f5433d0b947],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro, , [af7d6391e5a4e84eeafb074af50e53ad],
Soubory: 22
PUP.Optional.MultiPlug, C:\Downloads\Software\Winstep%20Nexus%20Ultimate%2012.2%20Crack%20is%20Here%21%20BLatestD.exe, , [131916de4d3c72c43d097372a75a20e0],
PUP.Optional.Goobzo, C:\Program Files\Common Files\ShopperPro\spbiu.exe, , [4ddfa05476133cfa6015aab936cf9f61],
PUP.Optional.Goobzo, C:\Users\Tepan\AppData\Local\Installer\Install_6809\setup.exe, , [062622d2a0e97db90a5b353f7f8643bd],
PUP.Optional.Amonetize, C:\Users\Tepan\Downloads\DivX.Web.Player.Installer__8420_i1210646945_il15531.exe, , [52dac23296f39c9a0da6e6d8e31e7f81],
PUP.Optional.Amonetize, C:\Users\Tepan\Downloads\DivX.Web.Player.Installer__8420_i1210652935_il15531.exe, , [e646cf253e4b0432b003b30b55ac32ce],
Riskware.Injector.DC, J:\Hry\Far cry 4\Dual Core Fix.7z, , [2408599ba6e3bf771fc0df1927da54ac],
PUP.RiskwareTool.CK, J:\Hry\Mafia 2\OstatnA Programy\WinRAR v3.92 CZ (23-64bit)\Crack.zip, , [84a89262642593a392af58eca65cce32],
PUP.Optional.OpenCandy, J:\pro Adisa\DTLite-setup.exe, , [68c4d61eb4d50f27e7b768480401fb05],
Riskware.Tool.CK, J:\Programay z netu 2\Download manager\internet-download-manager-v6-05-5-winall-incl-keygen-and-patch-jaro.zip, , [a686886cd8b13df97dfefc85f30dd12f],
RiskWare.Tool.CK, J:\Programay z netu 2\Microsoft office 2007\Microsoft.Office.2007.Enterprise.Keygen.Only-MiCROSOFT.7z, , [3af25a9a90f99b9bcf211d3252b007f9],
RiskWare.Tool.CK, J:\Programay z netu 2\Ochrana pocitace\tuneup-2011-cz-key-ok.rar, , [c666e014107934020234333a1fe3d22e],
Trojan.Agent, J:\Programay z netu 2\Windows 7 Home Premium\New Windows 7 Activator [2010].rar, , [60ccd222a4e5ea4cb60e7ccced1529d7],
Trojan.Agent, J:\Programay z netu 2\Windows 7 Home Premium\7homprem64cs\7Loader Release 5.exe, , [43e90ce8ea9f9d99497ba6a204fe6a96],
HackTool.Wpakill, J:\Programay z netu 2\Windows 7 Home Premium\7homprem64cs\RemoveWAT.exe, , [979527cd4544d06642f280ec847cb14f],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\ver.xml, , [42eadb19523705319b762f5433d0b947],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\data.xml, , [42eadb19523705319b762f5433d0b947],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\uninstinethnfd.exe, , [42eadb19523705319b762f5433d0b947],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbia.exe, , [af7d6391e5a4e84eeafb074af50e53ad],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbici64.dll, , [af7d6391e5a4e84eeafb074af50e53ad],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii32.exe, , [af7d6391e5a4e84eeafb074af50e53ad],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii64.exe, , [af7d6391e5a4e84eeafb074af50e53ad],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbiw.sys, , [af7d6391e5a4e84eeafb074af50e53ad],
Fyzické sektory: 0
(Žádné zákerné zjištěny položek)
(end)
MeetAgree.com - She’s Expensive. But You Can Afford Her.
Re: Režim spánku nefunkční
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Re: Režim spánku nefunkční
samozrejme ze legalni....zakoupeno s pocitacem(tedy nainstalovano v nem)...to je snad dnes uz samozrejmost,ne?...-vy asi narazite na to,ze na disku "j" mam zalohovane windows 7 ...to jsou ovsem kopie bez registracniho klice (jen proto,ze mi endali instalacni cd/dvd).Mam samozrejme original.
Naposledy upravil(a) tepan dne 07 Led 2015 12:27, celkem upraveno 1 x.
MeetAgree.com - She’s Expensive. But You Can Afford Her.
Re: Režim spánku nefunkční
dal jsem vam sem vcera log z MBAM...co s nim mam delat...visi mi tu uz celej den...co mam smazat a co ne?(podotykam,ze z externiho disku "J" se mi moc veci mazat nechce
MeetAgree.com - She’s Expensive. But You Can Afford Her.
Re: Režim spánku nefunkční
Nekteri tam pak narvou jiny windows, nez tam ma byt.tepan napsal:zakoupeno s pocitacem(tedy nainstalovano v nem)...to je snad dnes uz samozrejmost,ne?
Zalohy by mi nevadily. Mi vadi, ze jsou i s nelegalnim aktivatorem. A jste si jisty, ze jsou opravdu ciste?tepan napsal:vy asi narazite na to,ze na disku "j" mam zalohovane windows 7
Nalezy doporucuji hodit do karanteny. Po restartu pc test zopakujte, at vime, jestli se to nevraci. Napiste vysledek testu a podle nej zvolim dalsi postup.
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Re: Režim spánku nefunkční
takze mam vse smazatt?.ono totiz mam prej cekat na pokyny spravce
MeetAgree.com - She’s Expensive. But You Can Afford Her.
Re: Režim spánku nefunkční
Jak jsem napsal, doporucuji to. Nutit vas nebudu, je to vase volba.tepan napsal:takze mam vse smazatt?
A vy nejste spravce pc?tepan napsal:ono totiz mam prej cekat na pokyny spravce
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Re: Režim spánku nefunkční
nemyslel jem spravce,ale radce.Jako ze mam po ukonceni MBAM pockat s odstranovanim na RADCE.
Vse krome Far Cry jsem dal do karanteny..dodam dalsi log(tedy az skonci)
Vse krome Far Cry jsem dal do karanteny..dodam dalsi log(tedy az skonci)
MeetAgree.com - She’s Expensive. But You Can Afford Her.
Re: Režim spánku nefunkční
Aha. No to jotepan napsal:nemyslel jem spravce,ale radce.Jako ze mam po ukonceni MBAM pockat s odstranovanim na RADCE.
Snad je to bez pridavkutepan napsal:Vse krome Far Cry jsem dal do karanteny.
OKtepan napsal:dodam dalsi log(tedy az skonci)
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Re: Režim spánku nefunkční
Malwarebytes Anti-Malware
www.malwarebytes.org
Datum skenování: 8.1.2015
Čas skenování: 5:15:52
Protokol: MBAM 2.txt
Správce: Ano
Verze: 2.00.4.1028
Databáze malwaru: v2015.01.08.03
Databáze rootkitů: v2015.01.07.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Sebeobrany: Vypnuto
OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Tepan
Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 685920
Uplynulý čas: 4 hod, 10 min, 37 sek
Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto
Procesy: 0
(Žádné zákerné zjištěny položek)
Moduly: 0
(Žádné zákerné zjištěny položek)
Klíče registru: 0
(Žádné zákerné zjištěny položek)
Hodnoty registru: 0
(Žádné zákerné zjištěny položek)
Data registru: 0
(Žádné zákerné zjištěny položek)
Složky: 0
(Žádné zákerné zjištěny položek)
Soubory: 0
(Žádné zákerné zjištěny položek)
Fyzické sektory: 0
(Žádné zákerné zjištěny položek)
(end)
www.malwarebytes.org
Datum skenování: 8.1.2015
Čas skenování: 5:15:52
Protokol: MBAM 2.txt
Správce: Ano
Verze: 2.00.4.1028
Databáze malwaru: v2015.01.08.03
Databáze rootkitů: v2015.01.07.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Sebeobrany: Vypnuto
OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Tepan
Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 685920
Uplynulý čas: 4 hod, 10 min, 37 sek
Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto
Procesy: 0
(Žádné zákerné zjištěny položek)
Moduly: 0
(Žádné zákerné zjištěny položek)
Klíče registru: 0
(Žádné zákerné zjištěny položek)
Hodnoty registru: 0
(Žádné zákerné zjištěny položek)
Data registru: 0
(Žádné zákerné zjištěny položek)
Složky: 0
(Žádné zákerné zjištěny položek)
Soubory: 0
(Žádné zákerné zjištěny položek)
Fyzické sektory: 0
(Žádné zákerné zjištěny položek)
(end)
MeetAgree.com - She’s Expensive. But You Can Afford Her.
Re: Režim spánku nefunkční
Vypnete antivir i dalsi pripadne zabezpeceni.
Kliknete na ComboFix pravym mysidlem a levym na Spustit jako spravce
Odsouhlaste licencni podminky a nechte program pracovat. Jestli vam nabidne instalaci Konzoly pro zotaveni, souhlaste.
Po dobu skenu nic nespoustejte, nikam neklikejte.
Po dokonceni skenovani (muze dojit i k restartu pc) by se mel vytvorit log, ktery bude umisteny zde C:\ComboFix.txt
Jeho obsah sem zkopirujte
Možnost podpořit naše fórum https://platba.viry.cz/payment/


Přispějete na provoz fóra?