Nesprávná funkčnost systému

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
dwarf253
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 26 Ún 2010 21:48

Nesprávná funkčnost systému

#1 Příspěvek od dwarf253 »

Zdravím, po poslední aktualizaci Lenova, kvůli které jsem musel restartovat notebook, se mi objevilo hned několik problémů. Zaprvé mi "system" vytěžuje disk, který pořád pracuje na 100%, i když zrovna teď, když píšu na tohle fórum, to přestalo dělat, nicméně sem tam vyskočí i nějaké ty hostitelské procesy. Co je ale hlavní problém, to je celkové zpomalení systému a hlavně mám problém cokoliv nainstalovat. Některé programy jdou, ale měl jsem problém s Chromem, který nenačítal stránky. Odinstalovat jej nešlo a když se mi to povedlo, zase nejde nainstalovat (nyní chrome nainstalovaný mám, ale zřejmě špatně, při startu se jen načítají stránky a když se snažím proces ukončit, musím přes správce, kde mi chrome zůstane a vypnout jej ani přes správce nejde, což mi dělá u více programů). Dokonce mi nešel spustit ani Rsit. Podobný problém jsem měl i s jinými programy, proto raději píšu sem, jestli to nezpůsobuje nějaká havěť. Podařilo se mi na druhý pokus udělat log z FRST:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-02-2015
Ran by Jan (administrator) on MAZLIK on 06-02-2015 22:43:35
Running from C:\Hry\OMSI 2
Loaded Profiles: Jan (Available profiles: UpdatusUser & Jan)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\avfaudiosw.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe
(LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(Synaptics Incorporated) C:\Windows\System32\valWbioSyncSvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynFP\Shared\SensorDBSynch.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tposd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\extapsup.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Realtek Semiconductor Corp.) C:\Windows\RtsCM64.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
(Marvell Semiconductor, Inc.) C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
(Pokki) C:\Users\Jan\AppData\Local\Pokki\Engine\HostAppServiceUpdater.exe
() C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [LenovoOptMouseUpdate] => C:\Program Files\Lenovo\HOTKEY\extapsup.exe [255480 2013-06-20] (Lenovo Group Limited)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [907480 2013-09-05] (Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [RtsCM] => C:\windows\RTSCM64.EXE [147160 2013-06-19] (Realtek Semiconductor Corp.)
HKLM\...\Run: [TpShocks] => C:\windows\system32\TpShocks.exe [384344 2014-02-18] (Lenovo.)
HKLM\...\Run: [LENOVO.TPKNRRES] => rundll32.exe "C:\Program Files\Lenovo\Communications Utility\LibStartStub.dll",AVStartupStub
HKLM\...\Run: [LnvMobHotspotClient] => C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [937968 2014-08-12] (Lenovo)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [HPUsageTracking] => "\HP UT\bin\hppusg.exe" "\HP UT"
HKLM\...\Run: [PrnStatusMX] => C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1238528 2007-07-13] (Marvell Semiconductor, Inc.)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-09-16] (Intel Corporation)
HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [750320 2014-09-05] (Lenovo)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49152 2005-02-16] (Hewlett-Packard Co.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HPUsageTracking] => C:\Program Files (x86)\Hewlett-Packard\HP UT\bin\hppusg.exe [36864 2007-11-02] ()
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1218419213-3744150916-93435521-1002\...\Run: [Pokki] => "%LOCALAPPDATA%\Pokki\Engine\HostAppServiceUpdater.exe" /LOGON
AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [184048 2013-10-31] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll => C:\windows\SysWOW64\nvinit.dll [156256 2013-10-31] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ThinkPad OneLink Dock Management.lnk
ShortcutTarget: ThinkPad OneLink Dock Management.lnk -> C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe ()
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1218419213-3744150916-93435521-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13-comm.msn.com/?pc=LNJB
HKU\S-1-5-21-1218419213-3744150916-93435521-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13-comm.msn.com/?pc=LNJB
HKU\S-1-5-21-1218419213-3744150916-93435521-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/welcome/thinkpad
HKU\S-1-5-21-1218419213-3744150916-93435521-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1218419213-3744150916-93435521-1002 -> DefaultScope {9F94CCDC-C6DD-4224-831B-EC67BC635A29} URL =
SearchScopes: HKU\S-1-5-21-1218419213-3744150916-93435521-1002 -> {9F94CCDC-C6DD-4224-831B-EC67BC635A29} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn [2015-02-06]
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF

Chrome:
=======
CHR HomePage: Default -> https://www.google.cz/?gws_rd=cr
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Disk Google) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-08]
CHR Extension: (RescueTime for Chrome™ & ChromeOS™) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdakmnplckeopfghnlpocafcepegjeap [2015-01-04]
CHR Extension: (YouTube) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-08]
CHR Extension: (Vyhledávání Google) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-08]
CHR Extension: (AdBlock Premium) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fndlhnanhedoklpdaacidomdnplcjcpj [2014-12-08]
CHR Extension: (Classic) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkacjpbfdknhflllbcmjibkdeoafencn [2014-12-29]
CHR Extension: (Norton Identity Safe) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2014-12-10]
CHR Extension: (Clickable Links) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgamelhnfokapndfdodnmfiningckjia [2014-12-08]
CHR Extension: (Norton Security Toolbar) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2014-12-08]
CHR Extension: (Peněženka Google) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-08]
CHR Extension: (Gmail) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-08]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-12-09]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-12-09]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [629192 2014-10-28] (Lenovo Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [140016 2014-09-05] (Lenovo)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-05] (Intel Corporation)
S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [54976 2013-09-25] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [532224 2014-04-23] (Lenovo)
R2 Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [2017736 2014-12-09] (Lenovo Group Limited)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584960 2014-11-21] (LENOVO INCORPORATED.)
S3 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [716232 2014-10-28] (Lenovo Corporation)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-11] (Lenovo Group Limited)
S2 lnvDiscoveryWinSvc; C:\Program Files\Lenovo\Lenovo Peer Connect\LenovoDiscoverySvc.exe [22576 2014-02-21] (Lenovo)
S3 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [474608 2014-08-12] (Lenovo)
S2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [470472 2014-12-09] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-10-16] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-18] ()
S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe [276376 2014-09-21] (Symantec Corporation)
S2 QuickControlMasterSvc; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe [59440 2014-02-12] (Lenovo Group Limited)
R3 QuickControlService; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe [322608 2014-02-12] (Lenovo Group Limited)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24120 2014-02-21] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [49040 2014-07-21] (Synaptics Incorporated)
R2 valWbioSyncSvc; C:\Windows\system32\valWbioSyncSvc.exe [32256 2014-07-21] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3816176 2014-01-18] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20150106.001\BHDrvx64.sys [1622744 2015-01-06] (Symantec Corporation)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1386296 2013-08-19] (Motorola Solutions, Inc.)
S3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1506000.020\ccSetx64.sys [162392 2014-02-21] (Symantec Corporation)
S3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-12-11] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-12-11] (Symantec Corporation)
S3 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [65928 2014-09-05] (Windows (R) Win 7 DDK provider)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [117192 2013-09-05] (Intel Corporation)
S3 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20150205.001\IDSvia64.sys [669400 2015-02-06] (Symantec Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [77456 2013-08-19] (Intel Corporation)
R3 LnvHIDHW; C:\Windows\System32\drivers\LnvHIDHW.sys [29496 2014-04-07] (Lenovo)
S3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [122584 2015-02-06] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20150205.037\ENG64.SYS [129752 2015-01-20] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20150205.037\EX64.SYS [2137304 2015-01-20] (Symantec Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3433952 2014-02-18] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [418008 2013-06-24] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8244312 2013-06-19] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-04-07] (Synaptics Incorporated)
R1 SMIDriver; C:\Windows\System32\drivers\smi.sys [19760 2014-07-21] (Windows (R) Win 7 DDK provider)
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1506000.020\SRTSP64.SYS [876248 2014-08-26] (Symantec Corporation)
S3 SRTSPX; C:\Windows\system32\drivers\NISx64\1506000.020\SRTSPX64.SYS [37592 2014-08-26] (Symantec Corporation)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-13] (Lenovo Group Limited)
S3 SymDS; C:\Windows\system32\drivers\NISx64\1506000.020\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
S3 SymEFA; C:\Windows\system32\drivers\NISx64\1506000.020\SYMEFA64.SYS [1148120 2014-08-26] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1506000.020\SymELAM.sys [23568 2013-08-01] (Symantec Corporation)
S3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-09-05] (Symantec Corporation)
S3 SymIRON; C:\Windows\system32\drivers\NISx64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
S3 SymNetS; C:\Windows\System32\Drivers\NISx64\1506000.020\SYMNETS.SYS [593112 2014-08-26] (Symantec Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-06 22:43 - 2015-02-06 22:43 - 00000000 ____D () C:\FRST
2015-02-06 22:03 - 2015-02-06 22:20 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-06 22:03 - 2015-02-06 22:03 - 00001125 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-02-06 22:03 - 2015-02-06 22:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-02-06 22:03 - 2015-02-06 22:03 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-06 22:03 - 2015-02-06 22:03 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-06 22:03 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2015-02-06 22:03 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2015-02-06 22:03 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2015-02-06 22:02 - 2015-02-06 22:02 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Jan\Desktop\mbam-setup-2.0.2.1012.exe
2015-02-06 18:50 - 2015-02-06 18:50 - 00000000 ____D () C:\Program Files (x86)\trend micro
2015-02-06 18:48 - 2015-02-06 18:48 - 01222144 _____ () C:\Users\Jan\Desktop\RSITx64.exe
2015-02-06 18:48 - 2015-02-06 18:48 - 00000000 ____D () C:\rsit
2015-02-06 18:48 - 2015-02-06 18:48 - 00000000 ____D () C:\Program Files\trend micro
2015-02-06 17:35 - 2015-02-06 17:35 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-06 17:34 - 2015-02-06 17:34 - 05325208 _____ (Piriform Ltd) C:\Users\Jan\Desktop\ccsetup502.exe
2015-02-06 17:28 - 2015-02-06 17:28 - 00001511 _____ () C:\Users\Jan\Desktop\NadaceCEZ_Podporaregionu1.grant
2015-02-05 22:43 - 2015-02-05 22:43 - 00220160 _____ () C:\Users\Jan\Downloads\L100293_141222_157299.xls
2015-02-05 22:43 - 2015-02-05 22:43 - 00083968 _____ () C:\Users\Jan\Downloads\L870441_141214_153884.xls
2015-02-05 21:20 - 2015-02-05 21:20 - 53412597 _____ () C:\Users\Jan\Downloads\Solaris-Urbino-12----LE-V1.4.rar
2015-02-04 10:28 - 2015-02-04 10:28 - 01061793 _____ () C:\Users\Jan\Downloads\Felsheim SU15.rar
2015-02-04 10:06 - 2015-02-04 10:06 - 02972672 _____ () C:\Users\Jan\Downloads\Sitove_modely2.ppt
2015-02-04 09:44 - 2015-02-04 09:44 - 00467975 _____ (KARPOLAN) C:\Users\Jan\Downloads\touchpad-blocker.exe
2015-02-04 09:28 - 2015-02-04 09:28 - 00880784 _____ (Google Inc.) C:\Users\Jan\Downloads\GoogleEarthProSetup.exe
2015-02-04 09:28 - 2015-02-04 09:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro
2015-02-04 00:00 - 2015-02-04 00:00 - 00750080 _____ () C:\Users\Jan\Downloads\Bilancni_modely.ppt
2015-02-03 23:10 - 2015-02-03 23:10 - 01132820 _____ () C:\Users\Jan\Downloads\Teorie her.pptx
2015-02-03 22:52 - 2015-02-03 22:52 - 00182621 _____ () C:\Users\Jan\Downloads\JRDPO.zip
2015-02-03 17:25 - 2015-02-03 17:25 - 01656961 _____ () C:\Users\Jan\Downloads\d3dx9_30.zip
2015-02-02 23:19 - 2015-02-02 23:35 - 00037888 _____ () C:\Users\Jan\Desktop\FS_Zadost.dot
2015-02-01 16:56 - 2015-02-01 16:56 - 00000000 ____D () C:\Users\Jan\Documents\Mišáček
2015-02-01 14:56 - 2015-02-01 14:56 - 00303048 _____ () C:\windows\Minidump\020115-45578-01.dmp
2015-02-01 09:51 - 2015-02-01 09:51 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Opera Software
2015-02-01 09:51 - 2015-02-01 09:51 - 00000000 ____D () C:\Users\Jan\AppData\Local\Opera Software
2015-02-01 09:43 - 2015-02-06 22:19 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-01-31 23:24 - 2015-01-31 23:55 - 00000000 ____D () C:\Users\Jan\Desktop\Tettau, alternativní jízdní řád
2015-01-29 21:55 - 2015-01-29 21:55 - 00679936 ____N (ScreenTime Media) C:\windows\SysWOW64\Fliqlo.scr
2015-01-29 21:55 - 2015-01-29 21:55 - 00679936 _____ (ScreenTime Media) C:\windows\system32\Fliqlo.scr
2015-01-29 21:55 - 2015-01-29 21:55 - 00000000 ____D () C:\Users\Jan\AppData\Local\Screentime
2015-01-29 21:55 - 2015-01-29 21:55 - 00000000 ____D () C:\ProgramData\Screentime
2015-01-29 21:11 - 2015-01-29 21:11 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Open Rails
2015-01-29 20:35 - 2015-01-29 20:35 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2015-01-29 20:35 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_4.dll
2015-01-29 20:35 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_4.dll
2015-01-29 20:35 - 2009-03-16 14:18 - 00069448 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_3.dll
2015-01-29 20:35 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_6.dll
2015-01-29 20:35 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\windows\SysWOW64\xinput1_3.dll
2015-01-29 20:35 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_33.dll
2015-01-29 20:35 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_31.dll
2015-01-28 10:41 - 2013-09-09 21:40 - 00002091 _____ () C:\Users\Jan\Desktop\Readme.txt
2015-01-27 10:45 - 2015-01-27 10:45 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\com.adobe.amp
2015-01-24 11:37 - 2013-09-14 23:11 - 00000000 ____D () C:\Users\Jan\Desktop\Linienfahr- und Umlaufpläne
2015-01-22 13:30 - 2015-01-28 00:33 - 00000000 ____D () C:\Users\Jan\Desktop\TKM
2015-01-21 21:45 - 2015-01-21 21:45 - 00000049 _____ () C:\windows\SysWOW64\ScrRecX.log
2015-01-21 21:45 - 2015-01-21 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2015-01-21 21:45 - 2008-08-18 18:18 - 00077824 _____ (Fox Magic Software) C:\windows\SysWOW64\fmcodec.DLL
2015-01-20 22:35 - 2015-01-20 22:35 - 00026483 _____ () C:\Users\Jan\AppData\Local\recently-used.xbel
2015-01-16 22:34 - 2015-01-16 22:34 - 00933187 _____ () C:\Users\Jan\Desktop\BodyBN.xcf
2015-01-14 12:10 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\windows\SysWOW64\aspnet_counters.dll
2015-01-14 12:10 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\windows\system32\aspnet_counters.dll
2015-01-13 23:18 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2015-01-13 23:18 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2015-01-13 23:18 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ahcache.sys
2015-01-13 23:18 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2015-01-13 23:18 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2015-01-13 23:18 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\windows\system32\ci.dll
2015-01-13 23:18 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
2015-01-13 23:18 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll
2015-01-13 23:18 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\windows\SysWOW64\Faultrep.dll
2015-01-13 23:18 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
2015-01-13 23:18 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\windows\system32\WerFaultSecure.exe
2015-01-13 23:18 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFaultSecure.exe
2015-01-13 23:18 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\windows\system32\ncsi.dll
2015-01-13 23:18 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
2015-01-13 23:18 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll
2015-01-13 23:18 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
2015-01-13 23:18 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\windows\system32\wermgr.exe
2015-01-13 23:18 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
2015-01-13 23:18 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
2015-01-13 23:18 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2015-01-13 23:18 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe
2015-01-13 23:18 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
2015-01-13 23:18 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\windows\SysWOW64\wermgr.exe
2015-01-13 23:18 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
2015-01-13 23:18 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
2015-01-13 23:18 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
2015-01-13 23:18 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\werdiagcontroller.dll
2015-01-13 23:18 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\werdiagcontroller.dll
2015-01-13 23:18 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\nlaapi.dll
2015-01-13 23:18 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2015-01-13 23:18 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll
2015-01-13 08:21 - 2015-01-13 08:21 - 02932736 _____ () C:\Users\Jan\Desktop\OO-PIO-2.ppt
2015-01-13 08:21 - 2015-01-13 08:21 - 01041741 _____ () C:\Users\Jan\Desktop\10-dekontaminace ondrušík demel Lazar.pptx
2015-01-13 08:21 - 2015-01-13 08:21 - 00718336 _____ () C:\Users\Jan\Desktop\!prezentace_zákony_blabla.ppt
2015-01-12 17:40 - 2015-01-12 17:48 - 00000000 ____D () C:\Users\Jan\Desktop\Vehicles
2015-01-08 21:44 - 2015-02-06 18:53 - 00000000 ____D () C:\Users\Jan\Desktop\Programy
2015-01-08 21:40 - 2015-02-01 14:56 - 1057744687 _____ () C:\windows\MEMORY.DMP
2015-01-08 21:40 - 2015-02-01 14:56 - 00000000 ____D () C:\windows\Minidump
2015-01-08 21:40 - 2015-01-08 21:40 - 00289904 _____ () C:\windows\Minidump\010815-33437-01.dmp
2015-01-08 21:38 - 2015-01-08 21:38 - 00000760 _____ () C:\Users\UpdatusUser\Desktop\SpeedFan.lnk
2015-01-08 21:38 - 2015-01-08 21:38 - 00000045 _____ () C:\windows\SysWOW64\initdebug.nfo
2015-01-08 21:38 - 2015-01-08 21:38 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2015-01-08 21:38 - 2015-01-08 21:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan
2015-01-08 16:34 - 2015-01-08 16:34 - 00000000 ____D () C:\Users\Jan\Documents\Symantec

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-06 22:42 - 2014-12-08 16:29 - 00000000 ___DO () C:\Users\Jan\OneDrive
2015-02-06 22:42 - 2014-12-08 16:18 - 00000970 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-06 22:42 - 2014-09-05 04:43 - 00000000 ____D () C:\ProgramData\Validity
2015-02-06 22:42 - 2013-08-22 15:46 - 00046847 _____ () C:\windows\setupact.log
2015-02-06 22:42 - 2013-08-22 15:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-02-06 22:41 - 2014-09-05 03:33 - 02092768 _____ () C:\windows\WindowsUpdate.log
2015-02-06 22:41 - 2013-08-22 14:25 - 04194304 ___SH () C:\windows\system32\config\BBI
2015-02-06 22:40 - 2014-09-05 04:09 - 03248454 _____ () C:\Users\Public\CAFADEBUG.log
2015-02-06 22:36 - 2014-12-08 16:13 - 00003594 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1218419213-3744150916-93435521-1002
2015-02-06 22:34 - 2014-12-24 20:47 - 00000000 ____D () C:\Users\Jan\AppData\Local\Seznam.cz
2015-02-06 22:29 - 2014-12-08 16:18 - 00000974 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-06 22:17 - 2014-12-08 16:18 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-06 22:06 - 2013-08-22 16:20 - 00000000 ____D () C:\windows\CbsTemp
2015-02-06 22:00 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\sru
2015-02-06 21:51 - 2014-12-08 16:18 - 00000000 ____D () C:\Users\Jan\AppData\Local\Google
2015-02-06 21:48 - 2014-12-12 22:37 - 00000000 ____D () C:\Users\Jan\AppData\Local\Adobe
2015-02-06 21:21 - 2014-12-08 16:15 - 00003954 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{0B61BF4E-58F1-4673-99AC-808E8B7E8EAB}
2015-02-06 18:57 - 2014-12-08 20:15 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\AIMP3
2015-02-06 18:32 - 2013-10-07 19:23 - 00040058 _____ () C:\windows\PFRO.log
2015-02-06 11:58 - 2014-12-08 16:07 - 00000000 ____D () C:\Users\Jan\AppData\Local\Packages
2015-02-06 10:53 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\AppReadiness
2015-02-06 10:21 - 2014-12-09 07:40 - 01977856 ___SH () C:\Users\Jan\Desktop\Thumbs.db
2015-02-06 08:20 - 2014-12-08 16:04 - 00000000 ____D () C:\Users\Jan\AppData\Local\Pokki
2015-02-06 08:19 - 2014-09-05 04:40 - 729911296 ___SH () C:\windows\lenovo_fastboot.img
2015-02-04 20:44 - 2014-12-09 23:22 - 00000000 ____D () C:\Users\Jan\AppData\Local\CrashDumps
2015-02-04 19:20 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\NDF
2015-02-04 09:24 - 2014-12-08 16:18 - 00003946 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-04 09:24 - 2014-12-08 16:18 - 00003710 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-03 17:25 - 2014-12-09 07:44 - 00000000 ____D () C:\Hry
2015-02-01 19:44 - 2014-12-08 16:04 - 00000000 ____D () C:\Users\Jan
2015-02-01 15:05 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\LiveKernelReports
2015-02-01 14:59 - 2013-08-22 14:25 - 00262144 ___SH () C:\windows\system32\config\ELAM
2015-02-01 09:16 - 2014-12-08 16:10 - 00002336 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2015-02-01 03:36 - 2014-12-18 11:14 - 00139776 ___SH () C:\Users\Jan\Downloads\Thumbs.db
2015-01-29 21:57 - 2014-12-09 07:23 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Skype
2015-01-29 16:30 - 2014-12-24 20:47 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Seznam Browser
2015-01-27 10:48 - 2014-12-13 00:52 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\uTorrent
2015-01-24 21:20 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-01-24 21:20 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-24 09:14 - 2013-08-22 16:36 - 00000000 __RSD () C:\windows\Media
2015-01-23 00:22 - 2014-09-05 04:06 - 00000000 ____D () C:\Program Files (x86)\Lenovo
2015-01-21 21:45 - 2014-12-12 23:11 - 00000000 ____D () C:\Programy
2015-01-20 22:35 - 2014-12-09 22:47 - 00000000 ____D () C:\Users\Jan\AppData\Local\gtk-2.0
2015-01-20 22:35 - 2014-12-09 22:44 - 00000000 ____D () C:\Users\Jan\.gimp-2.8
2015-01-20 19:25 - 2014-09-05 04:26 - 00739924 _____ () C:\windows\system32\perfh005.dat
2015-01-20 19:25 - 2014-09-05 04:26 - 00151610 _____ () C:\windows\system32\perfc005.dat
2015-01-20 19:25 - 2013-10-07 19:27 - 01745984 _____ () C:\windows\system32\PerfStringBackup.INI
2015-01-16 15:51 - 2014-12-13 00:53 - 00000885 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-01-15 01:41 - 2014-12-13 15:04 - 00000000 ____D () C:\windows\system32\MRT
2015-01-15 01:28 - 2014-12-13 15:04 - 113365784 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-01-11 12:53 - 2014-12-09 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aerosoft
2015-01-11 12:50 - 2014-09-05 04:06 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-08 21:23 - 2013-08-22 15:44 - 05111968 _____ () C:\windows\system32\FNTCACHE.DAT
2015-01-08 17:24 - 2014-12-08 16:38 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\LSC

==================== Files in the root of some directories =======

2014-12-14 22:00 - 2014-12-14 22:00 - 0000132 _____ () C:\Users\Jan\AppData\Roaming\Adobe Formát BMP CS5 – předvolby
2014-12-23 19:01 - 2014-12-23 19:01 - 0000132 _____ () C:\Users\Jan\AppData\Roaming\Adobe Formát PNG CS5 – předvolby
2015-01-20 22:35 - 2015-01-20 22:35 - 0026483 _____ () C:\Users\Jan\AppData\Local\recently-used.xbel
2014-12-08 16:07 - 2014-12-08 16:08 - 0000193 _____ () C:\Users\Jan\AppData\Local\RegisteredPackageInformation.xml
2014-12-30 22:05 - 2014-12-30 22:05 - 0007597 _____ () C:\Users\Jan\AppData\Local\Resmon.ResmonCfg
2014-09-05 04:08 - 2014-09-05 04:08 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-09-05 04:46 - 2014-09-05 04:46 - 0000107 _____ () C:\ProgramData\{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}.log
2014-09-05 04:43 - 2014-09-05 04:44 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2014-09-05 04:44 - 2014-09-05 04:45 - 0000110 _____ () C:\ProgramData\{B7A0CE06-068E-11D6-97FD-0050BACBF861}.log
2014-09-05 04:45 - 2014-09-05 04:46 - 0000115 _____ () C:\ProgramData\{D6E853EC-8960-4D44-AF03-7361BB93227C}.log

Some content of TEMP:
====================
C:\Users\Jan\AppData\Local\Temp\genteert.dll
C:\Users\Jan\AppData\Local\Temp\GURF9EA.exe
C:\Users\Jan\AppData\Local\Temp\install_flashplayer16x32_mssd_aaa_aih.exe
C:\Users\Jan\AppData\Local\Temp\install_flashplayer16x32_mssd_aaa_aih_1.exe
C:\Users\Jan\AppData\Local\Temp\install_reader11_cz_mssd_aaa_aih.exe
C:\Users\Jan\AppData\Local\Temp\install_reader11_cz_mssd_aaa_aih_1.exe
C:\Users\Jan\AppData\Local\Temp\LenovoExperienceImprovement.exe
C:\Users\Jan\AppData\Local\Temp\oct11B4.tmp.exe
C:\Users\Jan\AppData\Local\Temp\oct1CF6.tmp.exe
C:\Users\Jan\AppData\Local\Temp\oct574.tmp.exe
C:\Users\Jan\AppData\Local\Temp\oct8EAA.tmp.exe
C:\Users\Jan\AppData\Local\Temp\octB46.tmp.exe
C:\Users\Jan\AppData\Local\Temp\octBD93.tmp.exe
C:\Users\Jan\AppData\Local\Temp\octCE71.tmp.exe
C:\Users\Jan\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Jan\AppData\Local\Temp\sfareca00001.dll
C:\Users\Jan\AppData\Local\Temp\sfextra.dll
C:\Users\Jan\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Jan\AppData\Local\Temp\utt9D63.tmp.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-06 11:11

==================== End Of Log ============================

Mockrát děkuji za kontrolu.

altrok
Moderátor
Moderátor
Příspěvky: 7328
Registrován: 15 Lis 2012 22:26
Místo/Bydliště: Znojmo

Re: Nesprávná funkčnost systému

#2 Příspěvek od altrok »

Zdravim :bye:

:arrow: Jako prvni vyzkousejte obnovit system k datu, kdy jeste korektne fungoval.
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.

Odpovědět