Zdravím, po poslední aktualizaci Lenova, kvůli které jsem musel restartovat notebook, se mi objevilo hned několik problémů. Zaprvé mi "system" vytěžuje disk, který pořád pracuje na 100%, i když zrovna teď, když píšu na tohle fórum, to přestalo dělat, nicméně sem tam vyskočí i nějaké ty hostitelské procesy. Co je ale hlavní problém, to je celkové zpomalení systému a hlavně mám problém cokoliv nainstalovat. Některé programy jdou, ale měl jsem problém s Chromem, který nenačítal stránky. Odinstalovat jej nešlo a když se mi to povedlo, zase nejde nainstalovat (nyní chrome nainstalovaný mám, ale zřejmě špatně, při startu se jen načítají stránky a když se snažím proces ukončit, musím přes správce, kde mi chrome zůstane a vypnout jej ani přes správce nejde, což mi dělá u více programů). Dokonce mi nešel spustit ani Rsit. Podobný problém jsem měl i s jinými programy, proto raději píšu sem, jestli to nezpůsobuje nějaká havěť. Podařilo se mi na druhý pokus udělat log z FRST:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-02-2015
Ran by Jan (administrator) on MAZLIK on 06-02-2015 22:43:35
Running from C:\Hry\OMSI 2
Loaded Profiles: Jan (Available profiles: UpdatusUser & Jan)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\avfaudiosw.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe
(LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(Synaptics Incorporated) C:\Windows\System32\valWbioSyncSvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynFP\Shared\SensorDBSynch.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tposd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\extapsup.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Realtek Semiconductor Corp.) C:\Windows\RtsCM64.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
(Marvell Semiconductor, Inc.) C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
(Pokki) C:\Users\Jan\AppData\Local\Pokki\Engine\HostAppServiceUpdater.exe
() C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [LenovoOptMouseUpdate] => C:\Program Files\Lenovo\HOTKEY\extapsup.exe [255480 2013-06-20] (Lenovo Group Limited)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [907480 2013-09-05] (Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [RtsCM] => C:\windows\RTSCM64.EXE [147160 2013-06-19] (Realtek Semiconductor Corp.)
HKLM\...\Run: [TpShocks] => C:\windows\system32\TpShocks.exe [384344 2014-02-18] (Lenovo.)
HKLM\...\Run: [LENOVO.TPKNRRES] => rundll32.exe "C:\Program Files\Lenovo\Communications Utility\LibStartStub.dll",AVStartupStub
HKLM\...\Run: [LnvMobHotspotClient] => C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [937968 2014-08-12] (Lenovo)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [HPUsageTracking] => "\HP UT\bin\hppusg.exe" "\HP UT"
HKLM\...\Run: [PrnStatusMX] => C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1238528 2007-07-13] (Marvell Semiconductor, Inc.)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-09-16] (Intel Corporation)
HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [750320 2014-09-05] (Lenovo)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49152 2005-02-16] (Hewlett-Packard Co.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HPUsageTracking] => C:\Program Files (x86)\Hewlett-Packard\HP UT\bin\hppusg.exe [36864 2007-11-02] ()
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1218419213-3744150916-93435521-1002\...\Run: [Pokki] => "%LOCALAPPDATA%\Pokki\Engine\HostAppServiceUpdater.exe" /LOGON
AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [184048 2013-10-31] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll => C:\windows\SysWOW64\nvinit.dll [156256 2013-10-31] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ThinkPad OneLink Dock Management.lnk
ShortcutTarget: ThinkPad OneLink Dock Management.lnk -> C:\Program Files (x86)\Lenovo\OneLink Dock\onelinkpromgn.exe ()
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-1218419213-3744150916-93435521-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo13-comm.msn.com/?pc=LNJB
HKU\S-1-5-21-1218419213-3744150916-93435521-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13-comm.msn.com/?pc=LNJB
HKU\S-1-5-21-1218419213-3744150916-93435521-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/welcome/thinkpad
HKU\S-1-5-21-1218419213-3744150916-93435521-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1218419213-3744150916-93435521-1002 -> DefaultScope {9F94CCDC-C6DD-4224-831B-EC67BC635A29} URL =
SearchScopes: HKU\S-1-5-21-1218419213-3744150916-93435521-1002 -> {9F94CCDC-C6DD-4224-831B-EC67BC635A29} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn [2015-02-06]
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF
Chrome:
=======
CHR HomePage: Default -> https://www.google.cz/?gws_rd=cr
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Disk Google) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-08]
CHR Extension: (RescueTime for Chrome™ & ChromeOS™) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdakmnplckeopfghnlpocafcepegjeap [2015-01-04]
CHR Extension: (YouTube) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-08]
CHR Extension: (Vyhledávání Google) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-08]
CHR Extension: (AdBlock Premium) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fndlhnanhedoklpdaacidomdnplcjcpj [2014-12-08]
CHR Extension: (Classic) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkacjpbfdknhflllbcmjibkdeoafencn [2014-12-29]
CHR Extension: (Norton Identity Safe) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2014-12-10]
CHR Extension: (Clickable Links) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgamelhnfokapndfdodnmfiningckjia [2014-12-08]
CHR Extension: (Norton Security Toolbar) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2014-12-08]
CHR Extension: (Peněženka Google) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-08]
CHR Extension: (Gmail) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-08]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-12-09]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-12-09]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [629192 2014-10-28] (Lenovo Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [140016 2014-09-05] (Lenovo)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-05] (Intel Corporation)
S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [54976 2013-09-25] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [532224 2014-04-23] (Lenovo)
R2 Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [2017736 2014-12-09] (Lenovo Group Limited)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584960 2014-11-21] (LENOVO INCORPORATED.)
S3 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [716232 2014-10-28] (Lenovo Corporation)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-11] (Lenovo Group Limited)
S2 lnvDiscoveryWinSvc; C:\Program Files\Lenovo\Lenovo Peer Connect\LenovoDiscoverySvc.exe [22576 2014-02-21] (Lenovo)
S3 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [474608 2014-08-12] (Lenovo)
S2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [470472 2014-12-09] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-10-16] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-18] ()
S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe [276376 2014-09-21] (Symantec Corporation)
S2 QuickControlMasterSvc; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe [59440 2014-02-12] (Lenovo Group Limited)
R3 QuickControlService; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe [322608 2014-02-12] (Lenovo Group Limited)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24120 2014-02-21] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [49040 2014-07-21] (Synaptics Incorporated)
R2 valWbioSyncSvc; C:\Windows\system32\valWbioSyncSvc.exe [32256 2014-07-21] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3816176 2014-01-18] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20150106.001\BHDrvx64.sys [1622744 2015-01-06] (Symantec Corporation)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1386296 2013-08-19] (Motorola Solutions, Inc.)
S3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1506000.020\ccSetx64.sys [162392 2014-02-21] (Symantec Corporation)
S3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-12-11] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-12-11] (Symantec Corporation)
S3 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [65928 2014-09-05] (Windows (R) Win 7 DDK provider)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [117192 2013-09-05] (Intel Corporation)
S3 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20150205.001\IDSvia64.sys [669400 2015-02-06] (Symantec Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [77456 2013-08-19] (Intel Corporation)
R3 LnvHIDHW; C:\Windows\System32\drivers\LnvHIDHW.sys [29496 2014-04-07] (Lenovo)
S3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [122584 2015-02-06] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20150205.037\ENG64.SYS [129752 2015-01-20] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20150205.037\EX64.SYS [2137304 2015-01-20] (Symantec Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3433952 2014-02-18] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [418008 2013-06-24] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8244312 2013-06-19] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-04-07] (Synaptics Incorporated)
R1 SMIDriver; C:\Windows\System32\drivers\smi.sys [19760 2014-07-21] (Windows (R) Win 7 DDK provider)
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1506000.020\SRTSP64.SYS [876248 2014-08-26] (Symantec Corporation)
S3 SRTSPX; C:\Windows\system32\drivers\NISx64\1506000.020\SRTSPX64.SYS [37592 2014-08-26] (Symantec Corporation)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [33856 2012-09-13] (Lenovo Group Limited)
S3 SymDS; C:\Windows\system32\drivers\NISx64\1506000.020\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
S3 SymEFA; C:\Windows\system32\drivers\NISx64\1506000.020\SYMEFA64.SYS [1148120 2014-08-26] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1506000.020\SymELAM.sys [23568 2013-08-01] (Symantec Corporation)
S3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-09-05] (Symantec Corporation)
S3 SymIRON; C:\Windows\system32\drivers\NISx64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
S3 SymNetS; C:\Windows\System32\Drivers\NISx64\1506000.020\SYMNETS.SYS [593112 2014-08-26] (Symantec Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-06 22:43 - 2015-02-06 22:43 - 00000000 ____D () C:\FRST
2015-02-06 22:03 - 2015-02-06 22:20 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-06 22:03 - 2015-02-06 22:03 - 00001125 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-02-06 22:03 - 2015-02-06 22:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-02-06 22:03 - 2015-02-06 22:03 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-06 22:03 - 2015-02-06 22:03 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-06 22:03 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2015-02-06 22:03 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2015-02-06 22:03 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2015-02-06 22:02 - 2015-02-06 22:02 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Jan\Desktop\mbam-setup-2.0.2.1012.exe
2015-02-06 18:50 - 2015-02-06 18:50 - 00000000 ____D () C:\Program Files (x86)\trend micro
2015-02-06 18:48 - 2015-02-06 18:48 - 01222144 _____ () C:\Users\Jan\Desktop\RSITx64.exe
2015-02-06 18:48 - 2015-02-06 18:48 - 00000000 ____D () C:\rsit
2015-02-06 18:48 - 2015-02-06 18:48 - 00000000 ____D () C:\Program Files\trend micro
2015-02-06 17:35 - 2015-02-06 17:35 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-06 17:34 - 2015-02-06 17:34 - 05325208 _____ (Piriform Ltd) C:\Users\Jan\Desktop\ccsetup502.exe
2015-02-06 17:28 - 2015-02-06 17:28 - 00001511 _____ () C:\Users\Jan\Desktop\NadaceCEZ_Podporaregionu1.grant
2015-02-05 22:43 - 2015-02-05 22:43 - 00220160 _____ () C:\Users\Jan\Downloads\L100293_141222_157299.xls
2015-02-05 22:43 - 2015-02-05 22:43 - 00083968 _____ () C:\Users\Jan\Downloads\L870441_141214_153884.xls
2015-02-05 21:20 - 2015-02-05 21:20 - 53412597 _____ () C:\Users\Jan\Downloads\Solaris-Urbino-12----LE-V1.4.rar
2015-02-04 10:28 - 2015-02-04 10:28 - 01061793 _____ () C:\Users\Jan\Downloads\Felsheim SU15.rar
2015-02-04 10:06 - 2015-02-04 10:06 - 02972672 _____ () C:\Users\Jan\Downloads\Sitove_modely2.ppt
2015-02-04 09:44 - 2015-02-04 09:44 - 00467975 _____ (KARPOLAN) C:\Users\Jan\Downloads\touchpad-blocker.exe
2015-02-04 09:28 - 2015-02-04 09:28 - 00880784 _____ (Google Inc.) C:\Users\Jan\Downloads\GoogleEarthProSetup.exe
2015-02-04 09:28 - 2015-02-04 09:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro
2015-02-04 00:00 - 2015-02-04 00:00 - 00750080 _____ () C:\Users\Jan\Downloads\Bilancni_modely.ppt
2015-02-03 23:10 - 2015-02-03 23:10 - 01132820 _____ () C:\Users\Jan\Downloads\Teorie her.pptx
2015-02-03 22:52 - 2015-02-03 22:52 - 00182621 _____ () C:\Users\Jan\Downloads\JRDPO.zip
2015-02-03 17:25 - 2015-02-03 17:25 - 01656961 _____ () C:\Users\Jan\Downloads\d3dx9_30.zip
2015-02-02 23:19 - 2015-02-02 23:35 - 00037888 _____ () C:\Users\Jan\Desktop\FS_Zadost.dot
2015-02-01 16:56 - 2015-02-01 16:56 - 00000000 ____D () C:\Users\Jan\Documents\Mišáček
2015-02-01 14:56 - 2015-02-01 14:56 - 00303048 _____ () C:\windows\Minidump\020115-45578-01.dmp
2015-02-01 09:51 - 2015-02-01 09:51 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Opera Software
2015-02-01 09:51 - 2015-02-01 09:51 - 00000000 ____D () C:\Users\Jan\AppData\Local\Opera Software
2015-02-01 09:43 - 2015-02-06 22:19 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-01-31 23:24 - 2015-01-31 23:55 - 00000000 ____D () C:\Users\Jan\Desktop\Tettau, alternativní jízdní řád
2015-01-29 21:55 - 2015-01-29 21:55 - 00679936 ____N (ScreenTime Media) C:\windows\SysWOW64\Fliqlo.scr
2015-01-29 21:55 - 2015-01-29 21:55 - 00679936 _____ (ScreenTime Media) C:\windows\system32\Fliqlo.scr
2015-01-29 21:55 - 2015-01-29 21:55 - 00000000 ____D () C:\Users\Jan\AppData\Local\Screentime
2015-01-29 21:55 - 2015-01-29 21:55 - 00000000 ____D () C:\ProgramData\Screentime
2015-01-29 21:11 - 2015-01-29 21:11 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Open Rails
2015-01-29 20:35 - 2015-01-29 20:35 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2015-01-29 20:35 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_4.dll
2015-01-29 20:35 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\windows\SysWOW64\xactengine3_4.dll
2015-01-29 20:35 - 2009-03-16 14:18 - 00069448 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_3.dll
2015-01-29 20:35 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\windows\SysWOW64\X3DAudio1_6.dll
2015-01-29 20:35 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\windows\SysWOW64\xinput1_3.dll
2015-01-29 20:35 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_33.dll
2015-01-29 20:35 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_31.dll
2015-01-28 10:41 - 2013-09-09 21:40 - 00002091 _____ () C:\Users\Jan\Desktop\Readme.txt
2015-01-27 10:45 - 2015-01-27 10:45 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\com.adobe.amp
2015-01-24 11:37 - 2013-09-14 23:11 - 00000000 ____D () C:\Users\Jan\Desktop\Linienfahr- und Umlaufpläne
2015-01-22 13:30 - 2015-01-28 00:33 - 00000000 ____D () C:\Users\Jan\Desktop\TKM
2015-01-21 21:45 - 2015-01-21 21:45 - 00000049 _____ () C:\windows\SysWOW64\ScrRecX.log
2015-01-21 21:45 - 2015-01-21 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2015-01-21 21:45 - 2008-08-18 18:18 - 00077824 _____ (Fox Magic Software) C:\windows\SysWOW64\fmcodec.DLL
2015-01-20 22:35 - 2015-01-20 22:35 - 00026483 _____ () C:\Users\Jan\AppData\Local\recently-used.xbel
2015-01-16 22:34 - 2015-01-16 22:34 - 00933187 _____ () C:\Users\Jan\Desktop\BodyBN.xcf
2015-01-14 12:10 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\windows\SysWOW64\aspnet_counters.dll
2015-01-14 12:10 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\windows\system32\aspnet_counters.dll
2015-01-13 23:18 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2015-01-13 23:18 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2015-01-13 23:18 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ahcache.sys
2015-01-13 23:18 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2015-01-13 23:18 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2015-01-13 23:18 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\windows\system32\ci.dll
2015-01-13 23:18 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
2015-01-13 23:18 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll
2015-01-13 23:18 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\windows\SysWOW64\Faultrep.dll
2015-01-13 23:18 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
2015-01-13 23:18 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\windows\system32\WerFaultSecure.exe
2015-01-13 23:18 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFaultSecure.exe
2015-01-13 23:18 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\windows\system32\ncsi.dll
2015-01-13 23:18 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
2015-01-13 23:18 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll
2015-01-13 23:18 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
2015-01-13 23:18 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\windows\system32\wermgr.exe
2015-01-13 23:18 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
2015-01-13 23:18 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
2015-01-13 23:18 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2015-01-13 23:18 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe
2015-01-13 23:18 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
2015-01-13 23:18 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\windows\SysWOW64\wermgr.exe
2015-01-13 23:18 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
2015-01-13 23:18 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
2015-01-13 23:18 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
2015-01-13 23:18 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\werdiagcontroller.dll
2015-01-13 23:18 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\werdiagcontroller.dll
2015-01-13 23:18 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\nlaapi.dll
2015-01-13 23:18 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2015-01-13 23:18 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll
2015-01-13 08:21 - 2015-01-13 08:21 - 02932736 _____ () C:\Users\Jan\Desktop\OO-PIO-2.ppt
2015-01-13 08:21 - 2015-01-13 08:21 - 01041741 _____ () C:\Users\Jan\Desktop\10-dekontaminace ondrušík demel Lazar.pptx
2015-01-13 08:21 - 2015-01-13 08:21 - 00718336 _____ () C:\Users\Jan\Desktop\!prezentace_zákony_blabla.ppt
2015-01-12 17:40 - 2015-01-12 17:48 - 00000000 ____D () C:\Users\Jan\Desktop\Vehicles
2015-01-08 21:44 - 2015-02-06 18:53 - 00000000 ____D () C:\Users\Jan\Desktop\Programy
2015-01-08 21:40 - 2015-02-01 14:56 - 1057744687 _____ () C:\windows\MEMORY.DMP
2015-01-08 21:40 - 2015-02-01 14:56 - 00000000 ____D () C:\windows\Minidump
2015-01-08 21:40 - 2015-01-08 21:40 - 00289904 _____ () C:\windows\Minidump\010815-33437-01.dmp
2015-01-08 21:38 - 2015-01-08 21:38 - 00000760 _____ () C:\Users\UpdatusUser\Desktop\SpeedFan.lnk
2015-01-08 21:38 - 2015-01-08 21:38 - 00000045 _____ () C:\windows\SysWOW64\initdebug.nfo
2015-01-08 21:38 - 2015-01-08 21:38 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2015-01-08 21:38 - 2015-01-08 21:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan
2015-01-08 16:34 - 2015-01-08 16:34 - 00000000 ____D () C:\Users\Jan\Documents\Symantec
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-06 22:42 - 2014-12-08 16:29 - 00000000 ___DO () C:\Users\Jan\OneDrive
2015-02-06 22:42 - 2014-12-08 16:18 - 00000970 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-06 22:42 - 2014-09-05 04:43 - 00000000 ____D () C:\ProgramData\Validity
2015-02-06 22:42 - 2013-08-22 15:46 - 00046847 _____ () C:\windows\setupact.log
2015-02-06 22:42 - 2013-08-22 15:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-02-06 22:41 - 2014-09-05 03:33 - 02092768 _____ () C:\windows\WindowsUpdate.log
2015-02-06 22:41 - 2013-08-22 14:25 - 04194304 ___SH () C:\windows\system32\config\BBI
2015-02-06 22:40 - 2014-09-05 04:09 - 03248454 _____ () C:\Users\Public\CAFADEBUG.log
2015-02-06 22:36 - 2014-12-08 16:13 - 00003594 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1218419213-3744150916-93435521-1002
2015-02-06 22:34 - 2014-12-24 20:47 - 00000000 ____D () C:\Users\Jan\AppData\Local\Seznam.cz
2015-02-06 22:29 - 2014-12-08 16:18 - 00000974 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-06 22:17 - 2014-12-08 16:18 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-06 22:06 - 2013-08-22 16:20 - 00000000 ____D () C:\windows\CbsTemp
2015-02-06 22:00 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\sru
2015-02-06 21:51 - 2014-12-08 16:18 - 00000000 ____D () C:\Users\Jan\AppData\Local\Google
2015-02-06 21:48 - 2014-12-12 22:37 - 00000000 ____D () C:\Users\Jan\AppData\Local\Adobe
2015-02-06 21:21 - 2014-12-08 16:15 - 00003954 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{0B61BF4E-58F1-4673-99AC-808E8B7E8EAB}
2015-02-06 18:57 - 2014-12-08 20:15 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\AIMP3
2015-02-06 18:32 - 2013-10-07 19:23 - 00040058 _____ () C:\windows\PFRO.log
2015-02-06 11:58 - 2014-12-08 16:07 - 00000000 ____D () C:\Users\Jan\AppData\Local\Packages
2015-02-06 10:53 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\AppReadiness
2015-02-06 10:21 - 2014-12-09 07:40 - 01977856 ___SH () C:\Users\Jan\Desktop\Thumbs.db
2015-02-06 08:20 - 2014-12-08 16:04 - 00000000 ____D () C:\Users\Jan\AppData\Local\Pokki
2015-02-06 08:19 - 2014-09-05 04:40 - 729911296 ___SH () C:\windows\lenovo_fastboot.img
2015-02-04 20:44 - 2014-12-09 23:22 - 00000000 ____D () C:\Users\Jan\AppData\Local\CrashDumps
2015-02-04 19:20 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\NDF
2015-02-04 09:24 - 2014-12-08 16:18 - 00003946 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-04 09:24 - 2014-12-08 16:18 - 00003710 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-03 17:25 - 2014-12-09 07:44 - 00000000 ____D () C:\Hry
2015-02-01 19:44 - 2014-12-08 16:04 - 00000000 ____D () C:\Users\Jan
2015-02-01 15:05 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\LiveKernelReports
2015-02-01 14:59 - 2013-08-22 14:25 - 00262144 ___SH () C:\windows\system32\config\ELAM
2015-02-01 09:16 - 2014-12-08 16:10 - 00002336 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2015-02-01 03:36 - 2014-12-18 11:14 - 00139776 ___SH () C:\Users\Jan\Downloads\Thumbs.db
2015-01-29 21:57 - 2014-12-09 07:23 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Skype
2015-01-29 16:30 - 2014-12-24 20:47 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\Seznam Browser
2015-01-27 10:48 - 2014-12-13 00:52 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\uTorrent
2015-01-24 21:20 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-01-24 21:20 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-24 09:14 - 2013-08-22 16:36 - 00000000 __RSD () C:\windows\Media
2015-01-23 00:22 - 2014-09-05 04:06 - 00000000 ____D () C:\Program Files (x86)\Lenovo
2015-01-21 21:45 - 2014-12-12 23:11 - 00000000 ____D () C:\Programy
2015-01-20 22:35 - 2014-12-09 22:47 - 00000000 ____D () C:\Users\Jan\AppData\Local\gtk-2.0
2015-01-20 22:35 - 2014-12-09 22:44 - 00000000 ____D () C:\Users\Jan\.gimp-2.8
2015-01-20 19:25 - 2014-09-05 04:26 - 00739924 _____ () C:\windows\system32\perfh005.dat
2015-01-20 19:25 - 2014-09-05 04:26 - 00151610 _____ () C:\windows\system32\perfc005.dat
2015-01-20 19:25 - 2013-10-07 19:27 - 01745984 _____ () C:\windows\system32\PerfStringBackup.INI
2015-01-16 15:51 - 2014-12-13 00:53 - 00000885 _____ () C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-01-15 01:41 - 2014-12-13 15:04 - 00000000 ____D () C:\windows\system32\MRT
2015-01-15 01:28 - 2014-12-13 15:04 - 113365784 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-01-11 12:53 - 2014-12-09 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aerosoft
2015-01-11 12:50 - 2014-09-05 04:06 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-08 21:23 - 2013-08-22 15:44 - 05111968 _____ () C:\windows\system32\FNTCACHE.DAT
2015-01-08 17:24 - 2014-12-08 16:38 - 00000000 ____D () C:\Users\Jan\AppData\Roaming\LSC
==================== Files in the root of some directories =======
2014-12-14 22:00 - 2014-12-14 22:00 - 0000132 _____ () C:\Users\Jan\AppData\Roaming\Adobe Formát BMP CS5 – předvolby
2014-12-23 19:01 - 2014-12-23 19:01 - 0000132 _____ () C:\Users\Jan\AppData\Roaming\Adobe Formát PNG CS5 – předvolby
2015-01-20 22:35 - 2015-01-20 22:35 - 0026483 _____ () C:\Users\Jan\AppData\Local\recently-used.xbel
2014-12-08 16:07 - 2014-12-08 16:08 - 0000193 _____ () C:\Users\Jan\AppData\Local\RegisteredPackageInformation.xml
2014-12-30 22:05 - 2014-12-30 22:05 - 0007597 _____ () C:\Users\Jan\AppData\Local\Resmon.ResmonCfg
2014-09-05 04:08 - 2014-09-05 04:08 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-09-05 04:46 - 2014-09-05 04:46 - 0000107 _____ () C:\ProgramData\{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}.log
2014-09-05 04:43 - 2014-09-05 04:44 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2014-09-05 04:44 - 2014-09-05 04:45 - 0000110 _____ () C:\ProgramData\{B7A0CE06-068E-11D6-97FD-0050BACBF861}.log
2014-09-05 04:45 - 2014-09-05 04:46 - 0000115 _____ () C:\ProgramData\{D6E853EC-8960-4D44-AF03-7361BB93227C}.log
Some content of TEMP:
====================
C:\Users\Jan\AppData\Local\Temp\genteert.dll
C:\Users\Jan\AppData\Local\Temp\GURF9EA.exe
C:\Users\Jan\AppData\Local\Temp\install_flashplayer16x32_mssd_aaa_aih.exe
C:\Users\Jan\AppData\Local\Temp\install_flashplayer16x32_mssd_aaa_aih_1.exe
C:\Users\Jan\AppData\Local\Temp\install_reader11_cz_mssd_aaa_aih.exe
C:\Users\Jan\AppData\Local\Temp\install_reader11_cz_mssd_aaa_aih_1.exe
C:\Users\Jan\AppData\Local\Temp\LenovoExperienceImprovement.exe
C:\Users\Jan\AppData\Local\Temp\oct11B4.tmp.exe
C:\Users\Jan\AppData\Local\Temp\oct1CF6.tmp.exe
C:\Users\Jan\AppData\Local\Temp\oct574.tmp.exe
C:\Users\Jan\AppData\Local\Temp\oct8EAA.tmp.exe
C:\Users\Jan\AppData\Local\Temp\octB46.tmp.exe
C:\Users\Jan\AppData\Local\Temp\octBD93.tmp.exe
C:\Users\Jan\AppData\Local\Temp\octCE71.tmp.exe
C:\Users\Jan\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Jan\AppData\Local\Temp\sfareca00001.dll
C:\Users\Jan\AppData\Local\Temp\sfextra.dll
C:\Users\Jan\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Jan\AppData\Local\Temp\utt9D63.tmp.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-02-06 11:11
==================== End Of Log ============================
Mockrát děkuji za kontrolu.

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Nesprávná funkčnost systému
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Nesprávná funkčnost systému
Zdravim 
Jako prvni vyzkousejte obnovit system k datu, kdy jeste korektne fungoval.
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.


Přispějete na provoz fóra?