Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Kontrola

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
novas1998
Návštěvník
Návštěvník
Příspěvky: 110
Registrován: 19 kvě 2013 07:56

Kontrola

#1 Příspěvek od novas1998 »

Zdravím bratrův pc byl rok ničím nečištěný pouze byl základní antivirus microsoft... Měl strašně moc reklam na stránkách vypínal se mu prohlížeč no prostě hrůza a tak jsem včera použil
Superantispyware
Malwarebytes
CCleaner

a našel jsem přes 400 havětí a 30 trojských konu no prostě hrůza a nainstaloval jsem free antivir Avira ale pořád se mi nezdá že by bylo všechno v pořádku a tak sem házím log z RSIT

Kód: Vybrat vše

Logfile of random's system information tool 1.10 (written by random/random)
Run by Ondřej at 2015-03-04 13:34:12
Microsoft Windows 8.1 
System drive C: has 790 GB (83%) free of 954 GB
Total RAM: 7378 MB (81% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:34:15, on 4. 3. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\trend micro\Ondřej.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.hal3000.cz
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ads.ads-ki.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe,
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Avira Systray] C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Ondřej\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Service Host (Avira.OE.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7061 bytes

======Listing Processes======





wininit.exe


C:\Windows\system32\lsass.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
dashost.exe {0c8e13e3-3e14-4e7e-bcc3b23cb2b9bda1}
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000688
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-6d1fca03-6a16-4011-8451-6b4dfb9b5b25 -SystemEventPortName:HostProcess-43faaa38-f515-4f4a-a068-1201cc715025 -IoCancelEventPortName:HostProcess-b35503dd-24e8-4781-9906-2d11d50b3dee -NonStateChangingEventPortName:HostProcess-c775499c-4e3d-47bb-acb5-954a9940b499 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:2280c77c-3728-4558-a839-de2a6afa2b5d -DeviceGroupId:WpdFsGroup
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\Explorer.EXE
taskhostex.exe 
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" 
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" 
"C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe" 
"C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe" 
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Windows\System32\SettingSyncHost.exe" -Embedding

"C:\Users\Ondřej\Downloads\RSITx64.exe" 
C:\Windows\system32\wbem\wmiprvse.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\fu1nv1zp.default-1425234774393

prefs.js - "browser.startup.homepage" -  "https://www.google.cz/?gws_rd=ssl"
prefs.js - "keyword.URL" -  "http://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=203_pr__alt__ddc_dss_bd_com&p="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.43 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.43 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll


C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\fu1nv1zp.default-1425234774393\extensions\
abs@avira.com

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2012-03-06 6469736]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"=C:\Users\Ondřej\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-05-12 1171000]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-02-19 7416088]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-12-11 30878816]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2015-01-22 7780120]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-07-04 766688]
"Avira Systray"=C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [2015-02-12 127792]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2014-11-24 702768]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2015-03-04 13:34:12 ----D---- C:\rsit
2015-03-04 13:34:12 ----D---- C:\Program Files\trend micro
2015-03-03 15:23:46 ----A---- C:\Windows\system32\FNTCACHE.DAT
2015-03-02 13:28:51 ----D---- C:\Users\Ondřej\AppData\Roaming\Avira
2015-03-02 13:25:08 ----A---- C:\Windows\system32\drivers\avnetflt.sys
2015-03-02 13:22:53 ----A---- C:\Windows\system32\drivers\avkmgr.sys
2015-03-02 13:22:53 ----A---- C:\Windows\system32\drivers\avipbb.sys
2015-03-02 13:22:53 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2015-03-02 13:21:20 ----D---- C:\ProgramData\Avira
2015-03-02 13:21:20 ----D---- C:\Program Files (x86)\Avira
2015-03-02 13:18:55 ----D---- C:\SUPERDelete
2015-03-02 13:17:21 ----D---- C:\ProgramData\ATI
2015-03-02 13:13:15 ----D---- C:\Users\Ondřej\AppData\Roaming\SUPERAntiSpyware.com
2015-03-02 13:13:03 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2015-03-02 13:13:03 ----D---- C:\Program Files\SUPERAntiSpyware
2015-03-02 12:59:23 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2015-03-02 12:52:52 ----D---- C:\AMD
2015-03-02 12:50:17 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2015-03-02 12:50:15 ----A---- C:\Windows\system32\shell32.dll
2015-03-02 12:50:13 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2015-03-02 12:50:12 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-02 12:50:12 ----A---- C:\Windows\system32\SkyDrive.exe
2015-03-02 12:50:11 ----A---- C:\Windows\system32\SyncEngine.dll
2015-03-02 12:50:11 ----A---- C:\Windows\system32\SkyDriveTelemetry.dll
2015-03-02 12:50:10 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-02 12:50:10 ----A---- C:\Windows\system32\msctf.dll
2015-03-02 12:50:10 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2015-03-02 12:50:10 ----A---- C:\Windows\system32\MFMediaEngine.dll
2015-03-02 12:50:10 ----A---- C:\Windows\system32\IKEEXT.DLL
2015-03-02 12:50:10 ----A---- C:\Windows\system32\drivers\tcpip.sys
2015-03-02 12:50:09 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2015-03-02 12:50:09 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-03-02 12:50:09 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2015-03-02 12:50:09 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2015-03-02 12:50:09 ----A---- C:\Windows\system32\WSDApi.dll
2015-03-02 12:50:09 ----A---- C:\Windows\system32\VSSVC.exe
2015-03-02 12:50:09 ----A---- C:\Windows\system32\vssapi.dll
2015-03-02 12:50:09 ----A---- C:\Windows\system32\spoolsv.exe
2015-03-02 12:50:09 ----A---- C:\Windows\system32\mfplat.dll
2015-03-02 12:50:09 ----A---- C:\Windows\system32\dnsapi.dll
2015-03-02 12:50:09 ----A---- C:\Windows\system32\BFE.DLL
2015-03-02 12:50:08 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2015-03-02 12:50:08 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2015-03-02 12:50:08 ----A---- C:\Windows\SYSWOW64\untfs.dll
2015-03-02 12:50:08 ----A---- C:\Windows\SYSWOW64\rasapi32.dll
2015-03-02 12:50:08 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2015-03-02 12:50:08 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2015-03-02 12:50:08 ----A---- C:\Windows\system32\wuaueng.dll
2015-03-02 12:50:08 ----A---- C:\Windows\system32\WSDMon.dll
2015-03-02 12:50:08 ----A---- C:\Windows\system32\WinSCard.dll
2015-03-02 12:50:08 ----A---- C:\Windows\system32\vpnike.dll
2015-03-02 12:50:08 ----A---- C:\Windows\system32\untfs.dll
2015-03-02 12:50:08 ----A---- C:\Windows\system32\rasapi32.dll
2015-03-02 12:50:08 ----A---- C:\Windows\system32\nshwfp.dll
2015-03-02 12:50:08 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2015-03-02 12:50:08 ----A---- C:\Windows\system32\drivers\netio.sys
2015-03-02 12:50:08 ----A---- C:\Windows\system32\dnsrslvr.dll
2015-03-02 12:50:07 ----A---- C:\Windows\SYSWOW64\vsstrace.dll
2015-03-02 12:50:07 ----A---- C:\Windows\SYSWOW64\rasdiag.dll
2015-03-02 12:50:07 ----A---- C:\Windows\SYSWOW64\rascfg.dll
2015-03-02 12:50:07 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2015-03-02 12:50:07 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2015-03-02 12:50:07 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2015-03-02 12:50:07 ----A---- C:\Windows\SYSWOW64\DevicePairing.dll
2015-03-02 12:50:07 ----A---- C:\Windows\SYSWOW64\AppxAllUserStore.dll
2015-03-02 12:50:07 ----A---- C:\Windows\system32\vsstrace.dll
2015-03-02 12:50:07 ----A---- C:\Windows\system32\rasdiag.dll
2015-03-02 12:50:07 ----A---- C:\Windows\system32\rascfg.dll
2015-03-02 12:50:07 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2015-03-02 12:50:07 ----A---- C:\Windows\system32\QSHVHOST.DLL
2015-03-02 12:50:07 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2015-03-02 12:50:07 ----A---- C:\Windows\system32\drivers\wfplwfs.sys
2015-03-02 12:50:07 ----A---- C:\Windows\system32\drivers\wanarp.sys
2015-03-02 12:50:07 ----A---- C:\Windows\system32\drivers\sdbus.sys
2015-03-02 12:50:07 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2015-03-02 12:50:07 ----A---- C:\Windows\system32\drivers\kbdclass.sys
2015-03-02 12:50:07 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2015-03-02 12:50:07 ----A---- C:\Windows\system32\drivers\agilevpn.sys
2015-03-02 12:50:07 ----A---- C:\Windows\system32\DevicePairing.dll
2015-03-02 12:50:07 ----A---- C:\Windows\system32\AppxAllUserStore.dll
2015-03-02 12:50:07 ----A---- C:\Windows\splwow64.exe
2015-03-02 12:50:06 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-03-02 12:50:06 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-03-02 12:50:06 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-03-02 12:50:06 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-03-02 12:50:06 ----A---- C:\Windows\SYSWOW64\rasser.dll
2015-03-02 12:50:06 ----A---- C:\Windows\SYSWOW64\rasmxs.dll
2015-03-02 12:50:06 ----A---- C:\Windows\SYSWOW64\eventcls.dll
2015-03-02 12:50:06 ----A---- C:\Windows\system32\wuwebv.dll
2015-03-02 12:50:06 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2015-03-02 12:50:06 ----A---- C:\Windows\system32\wudriver.dll
2015-03-02 12:50:06 ----A---- C:\Windows\system32\wucltux.dll
2015-03-02 12:50:06 ----A---- C:\Windows\system32\wuauclt.exe
2015-03-02 12:50:06 ----A---- C:\Windows\system32\wuapp.exe
2015-03-02 12:50:06 ----A---- C:\Windows\system32\wuapi.dll
2015-03-02 12:50:06 ----A---- C:\Windows\system32\rasser.dll
2015-03-02 12:50:06 ----A---- C:\Windows\system32\rasmxs.dll
2015-03-02 12:50:06 ----A---- C:\Windows\system32\eventcls.dll
2015-03-02 12:50:06 ----A---- C:\Windows\system32\drivers\sermouse.sys
2015-03-02 12:50:06 ----A---- C:\Windows\system32\drivers\pdc.sys
2015-03-02 12:50:06 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2015-03-02 12:50:06 ----A---- C:\Windows\system32\drivers\ndistapi.sys
2015-03-02 12:50:06 ----A---- C:\Windows\system32\drivers\mouhid.sys
2015-03-02 12:50:06 ----A---- C:\Windows\system32\drivers\mouclass.sys
2015-03-02 12:50:06 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2015-03-02 12:50:06 ----A---- C:\Windows\system32\drivers\intelpep.sys
2015-03-02 12:50:06 ----A---- C:\Windows\system32\drivers\i8042prt.sys
2015-03-02 12:50:06 ----A---- C:\Windows\system32\drivers\dumpsd.sys
2015-03-02 12:50:06 ----A---- C:\Windows\system32\drivers\dam.sys
2015-03-02 12:49:58 ----A---- C:\Windows\SYSWOW64\MrmCoreR.dll
2015-03-02 12:49:58 ----A---- C:\Windows\system32\SettingsHandlers.dll
2015-03-02 12:49:58 ----A---- C:\Windows\system32\MrmCoreR.dll
2015-03-02 12:49:57 ----A---- C:\Windows\system32\SystemSettingsDatabase.dll
2015-03-02 12:49:57 ----A---- C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2015-03-02 12:49:57 ----A---- C:\Windows\system32\SystemSettingsAdminFlows.exe
2015-03-02 12:49:57 ----A---- C:\Windows\system32\SystemSettings.Handlers.dll
2015-03-02 12:49:57 ----A---- C:\Windows\system32\MDMAgent.exe
2015-03-02 12:44:33 ----D---- C:\ProgramData\Malwarebytes
2015-03-02 12:44:33 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-03-02 12:44:33 ----A---- C:\Windows\system32\drivers\mwac.sys
2015-03-02 12:44:33 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2015-03-02 12:44:33 ----A---- C:\Windows\system32\drivers\mbam.sys
2015-03-02 12:42:01 ----D---- C:\Program Files\Defraggler
2015-02-25 15:21:33 ----A---- C:\Windows\SYSWOW64\Windows.Globalization.dll
2015-02-25 15:21:33 ----A---- C:\Windows\system32\Windows.Globalization.dll
2015-02-25 15:21:32 ----A---- C:\Windows\SYSWOW64\GlobCollationHost.dll
2015-02-25 15:21:32 ----A---- C:\Windows\system32\GlobCollationHost.dll
2015-02-22 16:58:34 ----D---- C:\Users\Ondřej\AppData\Roaming\Identities
2015-02-22 16:48:25 ----D---- C:\Users\Ondřej\AppData\Roaming\glitz
2015-02-13 14:44:10 ----A---- C:\Windows\system32\jscript9.dll
2015-02-13 14:44:09 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-02-11 14:52:37 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2015-02-11 14:52:37 ----A---- C:\Windows\system32\scesrv.dll
2015-02-11 14:52:35 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-02-11 14:52:35 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-02-11 14:52:33 ----A---- C:\Windows\system32\drivers\cng.sys
2015-02-11 14:52:32 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-02-11 14:52:32 ----A---- C:\Windows\SYSWOW64\certcli.dll
2015-02-11 14:52:32 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-02-11 14:52:32 ----A---- C:\Windows\system32\msaudite.dll
2015-02-11 14:52:32 ----A---- C:\Windows\system32\lsasrv.dll
2015-02-11 14:52:32 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-02-11 14:52:32 ----A---- C:\Windows\system32\certcli.dll
2015-02-11 14:52:32 ----A---- C:\Windows\system32\adtschema.dll
2015-02-11 14:52:05 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2015-02-11 14:52:05 ----A---- C:\Windows\system32\oleaut32.dll
2015-02-11 14:52:04 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-02-11 14:52:04 ----A---- C:\Windows\system32\wow64.dll
2015-02-11 14:52:04 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-02-11 14:52:04 ----A---- C:\Windows\system32\ntdll.dll
2015-02-11 14:52:03 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-02-11 14:52:03 ----A---- C:\Windows\SYSWOW64\user.exe
2015-02-11 14:52:03 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-02-11 14:52:03 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-02-11 14:52:03 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-02-11 14:52:03 ----A---- C:\Windows\system32\wow64cpu.dll
2015-02-11 14:52:03 ----A---- C:\Windows\system32\ntvdm64.dll
2015-02-11 14:51:49 ----A---- C:\Windows\system32\schannel.dll
2015-02-11 14:51:48 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-02-11 14:51:42 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-02-11 14:51:42 ----A---- C:\Windows\system32\mshtml.dll
2015-02-11 14:51:40 ----A---- C:\Windows\system32\ieframe.dll
2015-02-11 14:51:39 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-02-11 14:51:38 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-02-11 14:51:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-02-11 14:51:38 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-02-11 14:51:38 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-02-11 14:51:38 ----A---- C:\Windows\system32\wininet.dll
2015-02-11 14:51:38 ----A---- C:\Windows\system32\vbscript.dll
2015-02-11 14:51:38 ----A---- C:\Windows\system32\jscript.dll
2015-02-11 14:51:38 ----A---- C:\Windows\system32\iertutil.dll
2015-02-11 14:51:37 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-02-11 14:51:37 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-02-11 14:51:37 ----A---- C:\Windows\system32\msfeeds.dll
2015-02-11 14:51:37 ----A---- C:\Windows\system32\dxtmsft.dll
2015-02-11 14:51:36 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-02-11 14:51:36 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-02-11 14:51:36 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-02-11 14:51:36 ----A---- C:\Windows\system32\webcheck.dll
2015-02-11 14:51:36 ----A---- C:\Windows\system32\urlmon.dll
2015-02-11 14:51:36 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-02-11 14:51:36 ----A---- C:\Windows\system32\iedkcs32.dll
2015-02-11 14:51:36 ----A---- C:\Windows\system32\ie4uinit.exe
2015-02-11 14:51:36 ----A---- C:\Windows\system32\actxprxy.dll
2015-02-11 14:51:35 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2015-02-11 14:51:35 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2015-02-11 14:51:35 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2015-02-11 14:51:35 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-02-11 14:51:35 ----A---- C:\Windows\system32\mshtmled.dll
2015-02-11 14:51:35 ----A---- C:\Windows\system32\inetcomm.dll
2015-02-11 14:51:35 ----A---- C:\Windows\system32\ieapfltr.dll
2015-02-11 14:50:21 ----A---- C:\Windows\system32\sppobjs.dll
2015-02-11 14:49:26 ----A---- C:\Windows\system32\win32k.sys
2015-02-09 23:00:22 ----A---- C:\Program Files (x86)\prefs.js
2015-02-05 19:43:46 ----A---- C:\Windows\system32\aspnet_counters.dll
2015-02-05 19:43:26 ----A---- C:\Windows\SYSWOW64\aspnet_counters.dll
2015-01-27 11:20:40 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-01-17 08:20:00 ----D---- C:\Program Files (x86)\Mozilla Firefox.bak
2015-01-14 14:51:32 ----A---- C:\Windows\system32\profsvc.dll
2015-01-14 14:51:32 ----A---- C:\Windows\system32\nlasvc.dll
2015-01-14 14:51:32 ----A---- C:\Windows\system32\ncsi.dll
2015-01-14 14:51:31 ----A---- C:\Windows\SYSWOW64\wermgr.exe
2015-01-14 14:51:31 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2015-01-14 14:51:31 ----A---- C:\Windows\SYSWOW64\WerFault.exe
2015-01-14 14:51:31 ----A---- C:\Windows\SYSWOW64\wer.dll
2015-01-14 14:51:31 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2015-01-14 14:51:31 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2015-01-14 14:51:31 ----A---- C:\Windows\system32\WerFaultSecure.exe
2015-01-14 14:51:31 ----A---- C:\Windows\system32\WerFault.exe
2015-01-14 14:51:31 ----A---- C:\Windows\system32\wer.dll
2015-01-14 14:51:31 ----A---- C:\Windows\system32\TSWbPrxy.exe
2015-01-14 14:51:31 ----A---- C:\Windows\system32\nlaapi.dll
2015-01-14 14:51:31 ----A---- C:\Windows\system32\Faultrep.dll
2015-01-14 14:51:31 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2015-01-14 14:51:31 ----A---- C:\Windows\system32\drivers\ahcache.sys
2015-01-14 14:51:31 ----A---- C:\Windows\system32\ci.dll
2015-01-14 14:51:31 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2015-01-14 14:51:30 ----A---- C:\Windows\SYSWOW64\werdiagcontroller.dll
2015-01-14 14:51:30 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-01-14 14:51:30 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-01-14 14:51:30 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-01-14 14:51:30 ----A---- C:\Windows\system32\wermgr.exe
2015-01-14 14:51:30 ----A---- C:\Windows\system32\werdiagcontroller.dll
2015-01-14 14:51:30 ----A---- C:\Windows\system32\EncDump.dll
2015-01-14 14:51:30 ----A---- C:\Windows\system32\audiosrv.dll
2015-01-14 14:51:30 ----A---- C:\Windows\system32\AudioSes.dll
2015-01-14 14:51:30 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-01-14 14:51:30 ----A---- C:\Windows\system32\AudioEng.dll
2015-01-14 14:51:30 ----A---- C:\Windows\system32\audiodg.exe
2015-01-09 15:04:43 ----D---- C:\ProgramData\taAKeorrleoave
2015-01-09 15:04:11 ----D---- C:\ProgramData\coInsuavee
2015-01-05 22:59:06 ----D---- C:\ProgramData\DisocouuntEExotenasi
2014-12-19 20:28:51 ----A---- C:\Windows\system32\poqexec.exe
2014-12-19 20:28:50 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-12-10 17:59:38 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-12-10 15:32:58 ----A---- C:\Windows\SYSWOW64\DeviceSetupStatusProvider.dll
2014-12-10 15:32:58 ----A---- C:\Windows\system32\DeviceSetupStatusProvider.dll
2014-12-10 15:32:57 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-12-10 15:32:57 ----A---- C:\Windows\system32\crypt32.dll
2014-12-10 15:29:01 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-12-10 15:29:01 ----A---- C:\Windows\system32\iepeers.dll
2014-12-10 15:29:00 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-12-10 15:29:00 ----A---- C:\Windows\system32\dxtrans.dll

======List of files/folders modified in the last 3 months======

2015-03-04 13:34:13 ----D---- C:\Windows\Temp
2015-03-04 13:34:12 ----RD---- C:\Program Files
2015-03-04 13:32:24 ----D---- C:\Windows\Prefetch
2015-03-04 13:27:17 ----D---- C:\Users\Ondřej\AppData\Roaming\Skype
2015-03-04 13:20:37 ----D---- C:\Windows
2015-03-03 19:00:00 ----D---- C:\Windows\system32\sru
2015-03-03 17:27:26 ----D---- C:\Windows\Microsoft.NET
2015-03-03 15:31:48 ----D---- C:\Windows\system32\drivers
2015-03-03 15:28:54 ----D---- C:\Counter-Strike 1.6
2015-03-03 15:27:43 ----SD---- C:\ProgramData\Microsoft
2015-03-03 15:23:46 ----RD---- C:\Windows\System32
2015-03-03 14:50:26 ----D---- C:\ProgramData\Origin
2015-03-03 14:48:16 ----D---- C:\Program Files (x86)\Origin
2015-03-03 14:45:13 ----D---- C:\Windows\rescache
2015-03-03 14:43:23 ----SHD---- C:\System Volume Information
2015-03-03 10:23:21 ----D---- C:\Windows\system32\config
2015-03-03 10:19:30 ----D---- C:\Windows\SoftwareDistribution
2015-03-03 10:18:22 ----D---- C:\Windows\Inf
2015-03-03 10:18:16 ----D---- C:\Windows\Logs
2015-03-03 10:18:16 ----D---- C:\Windows\debug
2015-03-02 13:35:27 ----HD---- C:\ProgramData
2015-03-02 13:32:06 ----D---- C:\Program Files (x86)\Stronghold Crusader
2015-03-02 13:26:47 ----D---- C:\Windows\SysWOW64
2015-03-02 13:26:47 ----D---- C:\Program Files (x86)\call of duty 2 plna verze na pc hra cz
2015-03-02 13:22:24 ----SHD---- C:\Windows\Installer
2015-03-02 13:21:20 ----RD---- C:\Program Files (x86)
2015-03-02 13:21:08 ----D---- C:\ProgramData\Package Cache
2015-03-02 13:16:02 ----D---- C:\ProgramData\SnowApp
2015-03-02 13:15:59 ----D---- C:\Windows\tracing
2015-03-02 13:15:59 ----D---- C:\ProgramData\8a64b500-91d9-42f2-8d4d-776c5ec0ee9c
2015-03-02 13:14:49 ----A---- C:\Windows\win.ini
2015-03-02 13:14:48 ----D---- C:\Windows\Tasks
2015-03-02 13:14:48 ----D---- C:\Windows\system32\Tasks
2015-03-02 13:14:47 ----D---- C:\ProgramData\SaveRiExtensioN
2015-03-02 13:14:47 ----D---- C:\ProgramData\HHapppy2SAAVea
2015-03-02 13:14:47 ----D---- C:\ProgramData\GreaatSave4U
2015-03-02 13:14:47 ----D---- C:\ProgramData\DoownSaVe
2015-03-02 13:14:47 ----D---- C:\ProgramData\DiealExpress
2015-03-02 13:14:47 ----D---- C:\Program Files (x86)\call of duty 2 plna verze na pc hra
2015-03-02 12:58:54 ----D---- C:\Program Files (x86)\ATI Technologies
2015-03-02 12:57:18 ----D---- C:\Windows\WinSxS
2015-03-02 12:55:25 ----RD---- C:\Windows\ImmersiveControlPanel
2015-03-02 12:55:24 ----RD---- C:\Windows\ToastData
2015-03-02 12:55:24 ----D---- C:\Windows\system32\wbem
2015-03-02 12:55:24 ----D---- C:\Windows\system32\en-US
2015-03-02 12:55:24 ----D---- C:\Windows\system32\cs-CZ
2015-03-02 12:55:23 ----D---- C:\Windows\SYSWOW64\setup
2015-03-02 12:55:23 ----D---- C:\Windows\system32\setup
2015-03-02 12:55:19 ----D---- C:\Windows\system32\DriverStore
2015-03-02 12:53:11 ----SHD---- C:\$Recycle.Bin
2015-03-02 12:52:07 ----D---- C:\Program Files\AMD
2015-03-02 12:49:49 ----D---- C:\Windows\system32\catroot2
2015-03-02 12:47:49 ----D---- C:\Windows\CbsTemp
2015-03-02 12:42:25 ----D---- C:\Program Files\CCleaner
2015-02-21 14:22:46 ----D---- C:\Windows\AppReadiness
2015-02-13 14:27:02 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-02-13 14:27:02 ----D---- C:\Windows\apppatch
2015-02-12 17:21:43 ----D---- C:\Windows\system32\MRT
2015-02-12 17:17:30 ----A---- C:\Windows\system32\MRT.exe
2015-02-11 14:57:01 ----HD---- C:\Program Files\WindowsApps
2015-02-08 17:32:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-01-28 22:03:38 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-16 19:45:14 ----D---- C:\Windows\system32\CodeIntegrity
2015-01-15 14:25:27 ----RD---- C:\Program Files (x86)\Skype
2015-01-15 14:25:23 ----D---- C:\ProgramData\Skype
2015-01-09 15:05:00 ----D---- C:\ProgramData\ed4ad877c887e259
2015-01-09 15:04:27 ----D---- C:\ProgramData\saafaeweb
2015-01-09 15:04:27 ----D---- C:\ProgramData\IsaVEur
2015-01-09 15:04:27 ----D---- C:\Program Files (x86)\saafaeweb
2014-12-31 12:14:31 ----N---- C:\Windows\system32\MpSigStub.exe
2014-12-10 17:57:30 ----D---- C:\Windows\system32\sr-Latn-RS
2014-12-10 17:57:30 ----D---- C:\Windows\system32\sr-Latn-CS
2014-12-10 17:57:27 ----D---- C:\Windows\PolicyDefinitions
2014-12-10 17:57:27 ----D---- C:\Program Files\Internet Explorer
2014-12-10 17:57:27 ----D---- C:\Program Files (x86)\Internet Explorer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Wof;Windows Overlay File System Filter Driver; C:\Windows\system32\drivers\Wof.sys [2014-03-13 157016]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2014-11-24 131608]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2014-11-24 28600]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R2 AODDriver4.2.0;AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2013-09-19 59648]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2014-11-24 119272]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-07-21 13209088]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-07-21 626688]
R3 AtiHDAudioService;@oem20.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdWB6.sys [2013-09-24 222720]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-03-06 4763112]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
R3 WUDFWpdFs;WUDFWpdFs; C:\Windows\system32\DRIVERS\WUDFRd.sys [2014-05-31 227840]
R3 WUDFWpdMtp;WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [2014-05-31 227840]
S0 amdkmafd;@oem18.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter; C:\Windows\System32\drivers\amdkmafd.sys [2012-09-23 21160]
S1 MpKsl079cce74;MpKsl079cce74; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C08AEBD7-B0F8-4BD4-9997-FB49C15257FC}\MpKsl079cce74.sys []
S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []
S3 ISCT;@oem9.inf,%ISCT.DeviceDesc%;Intel(R) Smart Connect Technology Device Driver; C:\Windows\System32\drivers\ISCTD64.sys [2012-07-24 46016]
S3 MTsensor;@oem7.inf,%ASACPI.DisplayName%;ATK0110 ACPI UTILITY; C:\Windows\System32\drivers\ASACPI.sys [2009-07-15 15416]
S3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2013-12-13 121088]
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-08-22 212224]
S3 WinUsb;@wpdmtp.inf,%WinUsb.SvcDesc%;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2013-08-22 78848]
S3 xusb22;@xusb22.inf,%XUSB22.ServiceName%;Xbox 360 Wireless Receiver Driver Service 22; C:\Windows\System32\drivers\xusb22.sys [2014-03-18 87040]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2014-07-23 172344]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-07-21 239616]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-12-06 344064]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2014-11-24 431920]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2014-11-24 431920]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]
S2 699fd52f;Assistant; C:\Windows\syswow64\rundll32.exe [2013-08-22 49664]
S2 Avira.OE.ServiceHost;Avira Service Host; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [2015-02-12 184056]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [2014-04-09 289256]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-01-27 114800]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-03-03 1910640]

-----------------EOF-----------------

Kód: Vybrat vše

info.txt logfile of random's system information tool 1.10 2015-03-04 13:34:17

======MBR======

0x33C08ED0BC007C8EC08ED8BE007CBF0006B90002FCF3A450681C06CBFBB90400BDBE07807E00007C0B0F850E0183C510E2F1CD1888560055C6461105C6461000B441BBAA55CD135D720F81FB55AA7509F7C101007403FE46106660807E1000742666680000000066FF760868000068007C680100681000B4428A56008BF4CD139F83C4109EEB14B80102BB007C8A56008A76018A4E028A6E03CD136661731CFE4E11750C807E00800F848A00B280EB845532E48A5600CD135DEB9E813EFE7D55AA756EFF7600E88D007517FAB0D1E664E88300B0DFE660E87C00B0FFE664E87500FBB800BBCD1A6623C0753B6681FB54435041753281F90201722C666807BB00006668000200006668080000006653665366556668000000006668007C0000666168000007CD1A5A32F6EA007C0000CD18A0B707EB08A0B607EB03A0B50732E40500078BF0AC3C007409BB0700B40ECD10EBF2F4EBFD2BC9E464EB002402E0F82402C3496E76616C696420706172746974696F6E207461626C65004572726F72206C6F6164696E67206F7065726174696E672073797374656D004D697373696E67206F7065726174696E672073797374656D000000637B9ACD37C303000080202100079F06190008000000400600009F071907FEFFFF0048060000186A74000000000000000000000000000000000000000000000000000000000000000055AA

======Uninstall list======

Adobe Flash Player 12 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_43_Plugin.exe -maintain plugin
Adobe Reader XI - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AB0000000001}
AMD Accelerated Video Transcoding-->MsiExec.exe /X{FCC4426F-0296-D30D-729C-E76C8E7252C7}
AMD Catalyst Install Manager-->msiexec /q/x{308051DA-0048-7A07-FE8B-9B6EC119A9E8} REBOOT=ReallySuppress
AMD VISION Engine Control Center-->"C:\AMD\WU-CCC2\ccc2_install\WULaunchApp.exe" -uninstall
Assassins Creed III v1.0.1-->"C:\Hry\Assassins Creed III\unins000.exe"
Avira Free Antivirus-->C:\Program Files (x86)\Avira\AntiVir Desktop\setup.exe /REMOVE
Avira-->"C:\ProgramData\Package Cache\{d9ed6dcf-6bfc-4fbb-802e-81dd5b767d6e}\Avira.OE.Setup.Bundle.exe"  /uninstall
Avira-->MsiExec.exe /I{3EC3E5DB-50E9-4F7C-AD0C-299E7595D4F4}
call of duty 2 plna verze na pc hra cz version for Windows-->"C:\Program Files (x86)\call of duty 2 plna verze na pc hra cz\unins000.exe"
call of duty 2 plna verze na pc hra version for Windows-->"C:\Program Files (x86)\call of duty 2 plna verze na pc hra\unins000.exe"
Call of Duty(R) 2-->C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D0A05794-48C2-4424-A15A-9F20FCFDD374} /l2057 
Catalyst Control Center - Branding-->MsiExec.exe /I{25A3B953-1423-3F15-640E-B620DD0F419A}
Catalyst Control Center - Branding-->MsiExec.exe /I{CB79256B-C0E0-40C6-8EB7-BDD796203581}
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Defraggler-->"C:\Program Files\Defraggler\uninst.exe"
FIFA 14-->"C:\Program Files (x86)\Common Files\EAInstaller\FIFA 14\Cleanup.exe" uninstall_game -autologging
Gameforge Live 2.0.5-->"C:\Program Files (x86)\GameforgeLive\unins000.exe"
GameSpy Arcade-->C:\PROGRA~2\GAMESP~1\UNWISE.EXE C:\PROGRA~2\GAMESP~1\INSTALL.LOG
Gothic II Gold-->C:\Program Files (x86)\InstallShield Installation Information\{8B95673D-2D4C-4216-ADA2-3660973700BF}\setup.exe -runfromtemp -l0x0405
Gothic II-->C:\PROGRA~2\JoWooD\GOTHIC~2\UNWISE.EXE C:\PROGRA~2\JoWooD\GOTHIC~2\install.log
GTA San Andreas-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}\setup.exe" -l0x9  -removeonly
HyperCam 2-->"C:\Program Files (x86)\HyCam2\UnHyCam2.exe"
K-Lite Codec Pack 10.0.5 Basic-->"C:\Program Files (x86)\K-Lite Codec Pack\unins000.exe"
Malwarebytes Anti-Malware verze 2.0.4.1028-->"C:\Program Files (x86)\Malwarebytes Anti-Malware\unins000.exe"
McAfee Security Scan Plus-->"C:\Program Files\McAfee Security Scan\uninstall.exe"
Metin2-->"C:\Program Files (x86)\GameforgeLive\Games\CZE_ces\Metin2\unins000.exe"
Microsoft Office-->MsiExec.exe /X{90150000-0138-0409-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219-->MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727-->"C:\ProgramData\Package Cache\{15134cb0-b767-4960-a911-f2d16ae54797}\vcredist_x64.exe"  /uninstall
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727-->"C:\ProgramData\Package Cache\{22154f09-719a-4619-bb71-5b3356999fbf}\vcredist_x86.exe"  /uninstall
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727-->MsiExec.exe /X{AC53FC8B-EE18-3F9C-9B59-60937D0B182C}
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727-->MsiExec.exe /X{A2CB1ACB-94A2-32BA-A15E-7D80319F7589}
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727-->MsiExec.exe /X{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727-->MsiExec.exe /X{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}
Minecraft 1.3.2 version for Windows-->"C:\Program Files (x86)\Minecraft 1.3.2\unins000.exe"
Mozilla Firefox 35.0.1 (x86 cs)-->"C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe"
Mozilla Maintenance Service-->"C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
Origin-->C:\Program Files (x86)\Origin\OriginUninstall.exe
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe"  -removeonly
Skype Click to Call-->MsiExec.exe /X{6D1221A9-17BF-4EC0-81F2-27D30EC30701}
Skype™ 7.0-->MsiExec.exe /X{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
Speccy-->"C:\Program Files\Speccy\uninst.exe"
Stronghold Crusader-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{8C3727F2-8E37-49E4-820C-03B1677F53B6}\Setup.exe" 
SUPERAntiSpyware-->"C:\Program Files\SUPERAntiSpyware\Uninstall.exe"
The Elder Scrolls  V Skyrim - CRACK version for Windows-->"C:\Program Files (x86)\The Elder Scrolls  V Skyrim - CRACK\unins000.exe"
The Elder Scrolls V Skyrim LE-->"C:\Program Files (x86)\The Elder Scrolls V Skyrim LE\unins000.exe"
VLC media player 2.0.5-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
WinRAR 5.00 (32-bit)-->C:\Program Files (x86)\WinRAR\uninstall.exe

======System event log======

Computer Name: WIN-QE5GI71TSQN
Event Code: 7040
Message: Režim spuštění služby Windows Search byl změněn z Zakázáno na automatické spouštění.
Record Number: 689
Source Name: Service Control Manager
Time Written: 20140115055622.481570-000
Event Type: Informace
User: 

Computer Name: WIN-QE5GI71TSQN
Event Code: 7040
Message: Režim spuštění služby Windows Search byl změněn z automatické spouštění na Zakázáno.
Record Number: 688
Source Name: Service Control Manager
Time Written: 20140115055611.344082-000
Event Type: Informace
User: 

Computer Name: WIN-QE5GI71TSQN
Event Code: 104
Message: Byl vymazán soubor protokolu Setup.
Record Number: 687
Source Name: Microsoft-Windows-Eventlog
Time Written: 20140115055608.598674-000
Event Type: Informace
User: 

Computer Name: WIN-QE5GI71TSQN
Event Code: 104
Message: Byl vymazán soubor protokolu Application.
Record Number: 686
Source Name: Microsoft-Windows-Eventlog
Time Written: 20140115055608.520544-000
Event Type: Informace
User: 

Computer Name: WIN-QE5GI71TSQN
Event Code: 104
Message: Byl vymazán soubor protokolu System.
Record Number: 685
Source Name: Microsoft-Windows-Eventlog
Time Written: 20140115055608.458044-000
Event Type: Informace
User: 

=====Application event log=====

Computer Name: Ondra
Event Code: 1001
Message: Chybný blok , typ 0
Název události: APPCRASH
Reakce: Není k dispozici.
ID souboru CAB: 0

Podpis problému:
P1: CCC.exe
P2: 4.5.0.0
P3: 5254e12e
P4: ntdll.dll
P5: 6.3.9600.16502
P6: 52c359e8
P7: c0000005
P8: 000000000006ba31
P9: 
P10: 

Připojené soubory:

Tyto soubory mohou být k dispozici zde:
C:\Users\Ondřej\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_CCC.exe_e56513a8ab287495ad735c63452f1d9aecc6b6f_3d7d585c_0e05292e

Symbol analýzy: 
Opětovné hledání řešení: 0
ID hlášení: 45399a55-b107-11e3-8276-d43d7ef5c43f
Stav hlášení: 2048
Zakódovaný interval: 
Record Number: 3502
Source Name: Windows Error Reporting
Time Written: 20140321144421.000000-000
Event Type: Informace
User: 

Computer Name: Ondra
Event Code: 1001
Message: Chybný blok , typ 0
Název události: APPCRASH
Reakce: Není k dispozici.
ID souboru CAB: 0

Podpis problému:
P1: wermgr.exe
P2: 6.3.9600.16384
P3: 5215ee1d
P4: ntdll.dll
P5: 6.3.9600.16502
P6: 52c359e8
P7: c0000005
P8: 000000000006ba31
P9: 
P10: 

Připojené soubory:
C:\Users\Ondřej\AppData\Local\Temp\WERECC2.tmp.appcompat.txt
C:\Users\Ondřej\AppData\Local\Temp\WERECF2.tmp.WERInternalMetadata.xml
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_wermgr.exe_c63d9c7a4a2d77f57a1f3a77f6c1a96b3a9afb_46410139_cab_0c78ed2e\memory.hdmp
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_wermgr.exe_c63d9c7a4a2d77f57a1f3a77f6c1a96b3a9afb_46410139_cab_0c78ed2e\triagedump.dmp

Tyto soubory mohou být k dispozici zde:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_wermgr.exe_c63d9c7a4a2d77f57a1f3a77f6c1a96b3a9afb_46410139_cab_0c78ed2e

Symbol analýzy: 
Opětovné hledání řešení: 0
ID hlášení: 400b569f-b107-11e3-8276-d43d7ef5c43f
Stav hlášení: 4
Zakódovaný interval: 
Record Number: 3501
Source Name: Windows Error Reporting
Time Written: 20140321144414.000000-000
Event Type: Informace
User: 

Computer Name: Ondra
Event Code: 1000
Message: Název chybující aplikace: CCC.exe, verze: 4.5.0.0, časové razítko: 0x5254e12e
Název chybujícího modulu: ntdll.dll, verze: 6.3.9600.16502, časové razítko: 0x52c359e8
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000006ba31
ID chybujícího procesu: 0xe74
Čas spuštění chybující aplikace: 0x01cf451404dd4b5b
Cesta k chybující aplikaci: C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 45399a55-b107-11e3-8276-d43d7ef5c43f
Úplný název chybujícího balíčku: 
ID aplikace související s chybujícím balíčkem: 
Record Number: 3500
Source Name: Application Error
Time Written: 20140321144414.000000-000
Event Type: Chyba
User: 

Computer Name: Ondra
Event Code: 1000
Message: Název chybující aplikace: wermgr.exe, verze: 6.3.9600.16384, časové razítko: 0x5215ee1d
Název chybujícího modulu: ntdll.dll, verze: 6.3.9600.16502, časové razítko: 0x52c359e8
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000006ba31
ID chybujícího procesu: 0xe7c
Čas spuštění chybující aplikace: 0x01cf45140257a59f
Cesta k chybující aplikaci: C:\Windows\system32\wermgr.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 400b569f-b107-11e3-8276-d43d7ef5c43f
Úplný název chybujícího balíčku: 
ID aplikace související s chybujícím balíčkem: 
Record Number: 3499
Source Name: Application Error
Time Written: 20140321144405.000000-000
Event Type: Chyba
User: 

Computer Name: Ondra
Event Code: 1001
Message: Chybný blok , typ 0
Název události: APPCRASH
Reakce: Není k dispozici.
ID souboru CAB: 0

Podpis problému:
P1: SearchIndexer.exe
P2: 7.0.9600.16384
P3: 5215d4c4
P4: ntdll.dll
P5: 6.3.9600.16502
P6: 52c359e8
P7: c0000005
P8: 000000000006ba31
P9: 
P10: 

Připojené soubory:

Tyto soubory mohou být k dispozici zde:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_SearchIndexer.ex_48f0b9e668615ac2d6a947f35f5587b3c82a182f_50865764_0c44ec54

Symbol analýzy: 
Opětovné hledání řešení: 0
ID hlášení: 3ff843bf-b107-11e3-8276-d43d7ef5c43f
Stav hlášení: 0
Zakódovaný interval: 
Record Number: 3498
Source Name: Windows Error Reporting
Time Written: 20140321144405.000000-000
Event Type: Informace
User: 

=====Security event log=====

Computer Name: Ondra
Event Code: 4797
Message: Došlo k pokusu o zadání dotazu na existenci prázdného hesla pro účet.

Subjekt:
	ID zabezpečení:		S-1-5-19
	Název účtu:		LOCAL SERVICE
	Doména účtu:		NT AUTHORITY
	ID přihlášení:		0x3E5

Další informace:
	Pracovní stanice volajícího:	ONDRA
	Název cílového účtu:	Administrator
	Doména cílového účtu:	Ondra
Record Number: 126818
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20141117083412.568126-000
Event Type: Úspěšný audit
User: 

Computer Name: Ondra
Event Code: 4797
Message: Došlo k pokusu o zadání dotazu na existenci prázdného hesla pro účet.

Subjekt:
	ID zabezpečení:		S-1-5-21-1975057165-606630669-3827422118-1002
	Název účtu:		Ondřej
	Doména účtu:		ONDRA
	ID přihlášení:		0xA47CD1D

Další informace:
	Pracovní stanice volajícího:	ONDRA
	Název cílového účtu:	Guest
	Doména cílového účtu:	Ondra
Record Number: 126817
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20141117083410.739998-000
Event Type: Úspěšný audit
User: 

Computer Name: Ondra
Event Code: 4797
Message: Došlo k pokusu o zadání dotazu na existenci prázdného hesla pro účet.

Subjekt:
	ID zabezpečení:		S-1-5-21-1975057165-606630669-3827422118-1002
	Název účtu:		Ondřej
	Doména účtu:		ONDRA
	ID přihlášení:		0xA47CD1D

Další informace:
	Pracovní stanice volajícího:	ONDRA
	Název cílového účtu:	HomeGroupUser$
	Doména cílového účtu:	Ondra
Record Number: 126816
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20141117083410.739998-000
Event Type: Úspěšný audit
User: 

Computer Name: Ondra
Event Code: 4797
Message: Došlo k pokusu o zadání dotazu na existenci prázdného hesla pro účet.

Subjekt:
	ID zabezpečení:		S-1-5-21-1975057165-606630669-3827422118-1002
	Název účtu:		Ondřej
	Doména účtu:		ONDRA
	ID přihlášení:		0xA47CD1D

Další informace:
	Pracovní stanice volajícího:	ONDRA
	Název cílového účtu:	Administrator
	Doména cílového účtu:	Ondra
Record Number: 126815
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20141117083410.739998-000
Event Type: Úspěšný audit
User: 

Computer Name: Ondra
Event Code: 4797
Message: Došlo k pokusu o zadání dotazu na existenci prázdného hesla pro účet.

Subjekt:
	ID zabezpečení:		S-1-5-21-1975057165-606630669-3827422118-1002
	Název účtu:		Ondřej
	Doména účtu:		ONDRA
	ID přihlášení:		0xA47CD1D

Další informace:
	Pracovní stanice volajícího:	ONDRA
	Název cílového účtu:	HomeGroupUser$
	Doména cílového účtu:	Ondra
Record Number: 126814
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20141117083410.739998-000
Event Type: Úspěšný audit
User: 

======Environment variables======

"FP_NO_HOST_CHECK"=NO
"USERNAME"=SYSTEM
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static
"ComSpec"=%SystemRoot%\system32\cmd.exe
"TMP"=%SystemRoot%\TEMP
"OS"=Windows_NT
"windir"=%SystemRoot%
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=4
"PROCESSOR_LEVEL"=21
"PROCESSOR_IDENTIFIER"=AMD64 Family 21 Model 16 Stepping 1, AuthenticAMD
"PROCESSOR_REVISION"=1001

-----------------EOF-----------------
Nahoru
novas1998
Návštěvník
Návštěvník
Příspěvky: 110
Registrován: 19 kvě 2013 07:56

Re: Kontrola

#2 Příspěvek od novas1998 »

Ještě dodám log z MBAM

Kód: Vybrat vše

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 2. 3. 2015
Čas skenování: 13:00:10
Protokol: log.txt
Správce: Ano

Verze: 2.00.4.1028
Databáze malwaru: v2015.03.02.03
Databáze rootkitů: v2015.02.25.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Sebeobrany: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: OndA?ej

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 424318
Uplynulý čas: 12 min, 37 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 11
PUP.Optional.MaintainerSvc.A, C:\ProgramData\8a64b500-91d9-42f2-8d4d-776c5ec0ee9c\maintainer.exe, 1572, Smazat při restartu, [dae1fb45fc8e4aec5479a7490cf58779]
PUP.Optional.MultiPlug.A, C:\ProgramData\SnowApp\SW-Booster\SW-Booster.exe, 2980, Smazat při restartu, [7d3e55eb404a999d5d3f540728d99e62]
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrlte.exe, 1928, Smazat při restartu, [9229261af09a0135650e76ec1ce44cb4]
BitcoinMiner, C:\Windows\Inf\msjogpb\msjogpb.exe, 4396, Smazat při restartu, [0fac0e32b4d661d5bc07d94ded140cf4]
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\updateConstaSurf.exe, 1712, Smazat při restartu, [d9e21a2607830531d0823e9d40c3c43c]
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\utilConstaSurf.exe, 5560, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92]
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.BrowserAdapter.exe, 5904, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92]
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.BrowserAdapter64.exe, 5840, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92]
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.expext.exe, 5964, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92]
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.PurBrowse64.exe, 5924, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92]
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.BOASHelper.exe, 6120, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92]

Moduly: 7
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\ConstaSurfBHO.dll, Smazat při restartu, [3b803709e9a1c571013f1e7c27da639d], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\ConstaSurfBHO.dll, Smazat při restartu, [3b803709e9a1c571013f1e7c27da639d], 
PUP.Optional.MultiPlug.A, C:\ProgramData\coInsuavee\Usws3z3kxOb2cA.dll, Smazat při restartu, [813ae45ca0ea3bfb2ad0c2ff976e10f0], 
PUP.Optional.MultiPlug.A, C:\ProgramData\taAKeorrleoave\sDgSqss3T6eqwX.dll, Smazat při restartu, [f3c83e025f2b0e28a65470510df8b848], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\466a673555504bc0aa2d4a38b7bf7287.dll, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.expextdll.dll, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\aGcbeeyU.dll, Smazat při restartu, [e5d684bc2367f83e45a95f19a85bd52b], 

Klíče registru: 93
PUP.Optional.MaintainerSvc.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\MaintainerSvc3.04.9247444, Do karantény, [dae1fb45fc8e4aec5479a7490cf58779], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5121721648, Do karantény, [7d3e55eb404a999d5d3f540728d99e62], 
PUP.Optional.ConstaSurf.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{d7356335-81bf-4769-bfbd-2e2889138641}, Do karantény, [3b803709e9a1c571013f1e7c27da639d], 
PUP.Optional.ConstaSurf.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{52654f2b-3a13-4569-ab52-ef4201f79221}, Do karantény, [3b803709e9a1c571013f1e7c27da639d], 
PUP.Optional.ConstaSurf.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{41E2BE59-5C34-46AB-B743-6678BC94F42C}, Do karantény, [3b803709e9a1c571013f1e7c27da639d], 
PUP.Optional.ConstaSurf.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{41E2BE59-5C34-46AB-B743-6678BC94F42C}, Do karantény, [3b803709e9a1c571013f1e7c27da639d], 
PUP.Optional.ConstaSurf.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{52654f2b-3a13-4569-ab52-ef4201f79221}, Do karantény, [3b803709e9a1c571013f1e7c27da639d], 
PUP.Optional.ConstaSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{D7356335-81BF-4769-BFBD-2E2889138641}, Do karantény, [3b803709e9a1c571013f1e7c27da639d], 
PUP.Optional.ConstaSurf.A, HKU\S-1-5-21-1975057165-606630669-3827422118-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{D7356335-81BF-4769-BFBD-2E2889138641}, Do karantény, [3b803709e9a1c571013f1e7c27da639d], 
PUP.Optional.ConstaSurf.A, HKU\S-1-5-21-1975057165-606630669-3827422118-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{D7356335-81BF-4769-BFBD-2E2889138641}, Do karantény, [3b803709e9a1c571013f1e7c27da639d], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2a25f315-7416-43c5-89c0-10dae970d29c}, Do karantény, [813ae45ca0ea3bfb2ad0c2ff976e10f0], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{2A25F315-7416-43C5-89C0-10DAE970D29C}, Do karantény, [813ae45ca0ea3bfb2ad0c2ff976e10f0], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{2A25F315-7416-43C5-89C0-10DAE970D29C}, Do karantény, [813ae45ca0ea3bfb2ad0c2ff976e10f0], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\P2a25f315_7416_43c5_89c0_10dae970d29c_.P2a25f315_7416_43c5_89c0_10dae970d29c_, Do karantény, [813ae45ca0ea3bfb2ad0c2ff976e10f0], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\P2a25f315_7416_43c5_89c0_10dae970d29c_.P2a25f315_7416_43c5_89c0_10dae970d29c_.10, Do karantény, [813ae45ca0ea3bfb2ad0c2ff976e10f0], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P2a25f315_7416_43c5_89c0_10dae970d29c_.P2a25f315_7416_43c5_89c0_10dae970d29c_, Do karantény, [813ae45ca0ea3bfb2ad0c2ff976e10f0], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P2a25f315_7416_43c5_89c0_10dae970d29c_.P2a25f315_7416_43c5_89c0_10dae970d29c_.10, Do karantény, [813ae45ca0ea3bfb2ad0c2ff976e10f0], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\CLSID\{2A25F315-7416-43C5-89C0-10DAE970D29C}, Do karantény, [813ae45ca0ea3bfb2ad0c2ff976e10f0], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\CLSID\{2A25F315-7416-43C5-89C0-10DAE970D29C}\INPROCSERVER32, Do karantény, [813ae45ca0ea3bfb2ad0c2ff976e10f0], 
PUP.Optional.MultiPlug.A, HKU\S-1-5-21-1975057165-606630669-3827422118-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{2A25F315-7416-43C5-89C0-10DAE970D29C}, Do karantény, [813ae45ca0ea3bfb2ad0c2ff976e10f0], 
PUP.Optional.MultiPlug.A, HKU\S-1-5-21-1975057165-606630669-3827422118-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{2A25F315-7416-43C5-89C0-10DAE970D29C}, Do karantény, [813ae45ca0ea3bfb2ad0c2ff976e10f0], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{2A25F315-7416-43C5-89C0-10DAE970D29C}, Do karantény, [813ae45ca0ea3bfb2ad0c2ff976e10f0], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{2A25F315-7416-43C5-89C0-10DAE970D29C}, Do karantény, [813ae45ca0ea3bfb2ad0c2ff976e10f0], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4362fd9f-3168-494c-a20f-7d3cc138c712}, Do karantény, [f3c83e025f2b0e28a65470510df8b848], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{4362FD9F-3168-494C-A20F-7D3CC138C712}, Do karantény, [f3c83e025f2b0e28a65470510df8b848], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{4362FD9F-3168-494C-A20F-7D3CC138C712}, Do karantény, [f3c83e025f2b0e28a65470510df8b848], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\P4362fd9f_3168_494c_a20f_7d3cc138c712_.P4362fd9f_3168_494c_a20f_7d3cc138c712_, Do karantény, [f3c83e025f2b0e28a65470510df8b848], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\P4362fd9f_3168_494c_a20f_7d3cc138c712_.P4362fd9f_3168_494c_a20f_7d3cc138c712_.10, Do karantény, [f3c83e025f2b0e28a65470510df8b848], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P4362fd9f_3168_494c_a20f_7d3cc138c712_.P4362fd9f_3168_494c_a20f_7d3cc138c712_, Do karantény, [f3c83e025f2b0e28a65470510df8b848], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P4362fd9f_3168_494c_a20f_7d3cc138c712_.P4362fd9f_3168_494c_a20f_7d3cc138c712_.10, Do karantény, [f3c83e025f2b0e28a65470510df8b848], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\CLSID\{4362FD9F-3168-494C-A20F-7D3CC138C712}, Do karantény, [f3c83e025f2b0e28a65470510df8b848], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\CLSID\{4362FD9F-3168-494C-A20F-7D3CC138C712}\INPROCSERVER32, Do karantény, [f3c83e025f2b0e28a65470510df8b848], 
PUP.Optional.MultiPlug.A, HKU\S-1-5-21-1975057165-606630669-3827422118-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{4362FD9F-3168-494C-A20F-7D3CC138C712}, Do karantény, [f3c83e025f2b0e28a65470510df8b848], 
PUP.Optional.MultiPlug.A, HKU\S-1-5-21-1975057165-606630669-3827422118-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{4362FD9F-3168-494C-A20F-7D3CC138C712}, Do karantény, [f3c83e025f2b0e28a65470510df8b848], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{4362FD9F-3168-494C-A20F-7D3CC138C712}, Do karantény, [f3c83e025f2b0e28a65470510df8b848], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{4362FD9F-3168-494C-A20F-7D3CC138C712}, Do karantény, [f3c83e025f2b0e28a65470510df8b848], 
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, Do karantény, [01ba7bc534560f2715fa420c37cca35d], 
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, Do karantény, [01ba7bc534560f2715fa420c37cca35d], 
PUP.Optional.BestToolbar.A, HKU\S-1-5-21-1975057165-606630669-3827422118-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{338B4DFE-2E2C-4338-9E41-E176D497299E}, Do karantény, [5863d46c2c5edb5b367a799c1de6fe02], 
PUP.Optional.BestToolbar.A, HKU\S-1-5-21-1975057165-606630669-3827422118-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}, Do karantény, [9427b888a6e414227d340b0a41c28080], 
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\CLASSES\SearchQUIEHelper.DNSGuard, Do karantény, [813aba86f1999b9b735d3618a26104fc], 
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\CLASSES\SearchQUIEHelper.DNSGuard.1, Do karantény, [56657ec20c7eb97d3b95f8564fb48f71], 
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SearchQUIEHelper.DNSGuard, Do karantény, [56657ec20c7eb97d3b95f8564fb48f71], 
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SearchQUIEHelper.DNSGuard.1, Do karantény, [56657ec20c7eb97d3b95f8564fb48f71], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{25F259ED-12F6-429F-5783-527C3E2F8586}, Do karantény, [8338b68af2989a9c333a66520df4e21e], 
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F6A71DC7-28F4-C6C7-8FA9-8A56C80FC96A}, Do karantény, [18a3b9876525e2546d1a5b7428d9c63a], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{274E3C5C-178E-EAE2-A52F-2863C0EECD46}, Do karantény, [209b38087218b28445a6fe75e41d867a], 
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{AF992111-52BE-832B-5882-8477E4A3C99A}, Do karantény, [1c9f2b15bad0a393ee09506bf60be719], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{45606A90-3363-3A3B-1C15-C40E77F4DAA0}, Do karantény, [a01b122e503ad660a9422e45ff02827e], 
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{E957849A-94AC-6F46-4623-C31474E3C170}, Do karantény, [e2d942fe1476c86e62954f6c1ce5639d], 
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{0782648b-1717-4fef-ac58-8cb3ce03adb3}w64, Do karantény, [04b7ae921476d95d372b30f01de8837d], 
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{1bf4cc48-f43e-4171-a6fa-c70b4da1fd25}w64, Do karantény, [5e5d241c305a40f697cb1709db2a619f], 
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{466a6735-5550-4bc0-aa2d-4a38b7bf7287}w64, Do karantény, [05b657e98a00bd7970f2b7698382ba46], 
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{9e91c5ac-d582-4f4e-aad0-1156c48345fd}w64, Do karantény, [e7d490b0a6e40b2b224065bbbb4aac54], 
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{bbb14e79-8bca-4abd-b124-4d30f9a4e2ad}w64, Do karantény, [a714a0a0eb9fc472a8ba958baf56a45c], 
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\${dtUserElevationPolicyID}, Do karantény, [9e1d9ea2f19923132854051d55b054ac], 
PUP.Optional.MoviesToolbar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}, Do karantény, [ccef301042488bab87a464c039cca35d], 
PUP.Optional.ConstaSurf.A, HKLM\SOFTWARE\WOW6432NODE\ConstaSurf, Do karantény, [6754c27e3e4c50e60c45ecefec17946c], 
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\Datamngr, Do karantény, [ebd073cdeaa0af87c0f7a32b877c37c9], 
PUP.Optional.SWBooster.A, HKLM\SOFTWARE\WOW6432NODE\SW-Booster, Do karantény, [14a7320e523864d2f8803397a45f847c], 
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\${dtUserElevationPolicyID}, Do karantény, [c7f4221e4b3f76c09ddf031f44c1db25], 
PUP.Optional.MoviesToolbar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}, Do karantény, [52693907f09a51e5f536f62e8a7b956b], 
PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{699fd52f}, Do karantény, [cfec9aa61773a88e331b13b4df24817f], 
PUP.Optional.ConstaSurf.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update ConstaSurf, Do karantény, [d9e21a2607830531d0823e9d40c3c43c], 
PUP.Optional.ConstaSurf.A, HKU\S-1-5-21-1975057165-606630669-3827422118-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\ConstaSurf, Do karantény, [c1fa6dd3345692a470e0d00bed165aa6], 
PUP.Optional.DataMngr.A, HKU\S-1-5-21-1975057165-606630669-3827422118-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Datamngr, Do karantény, [0ab13d03b1d9c6703e8401ffe124d12f], 
PUP.Optional.MoviesToolBar.A, HKU\S-1-5-21-1975057165-606630669-3827422118-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\ilividmoviestoolbar181, Do karantény, [62594000771370c6f9d210db2cd70000], 
PUP.Optional.weDownload.A, HKU\S-1-5-21-1975057165-606630669-3827422118-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Somoto Toolbar, Do karantény, [734893ad98f2b77f8ab31fb07390d62a], 
PUP.Optional.MoviesToolbar, HKU\S-1-5-21-1975057165-606630669-3827422118-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}, Do karantény, [8833a0a0a1e922145ece53d120e526da], 
PUP.Optional.ConstaSurf.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ConstaSurf, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, HKLM\SOFTWARE\CLASSES\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util ConstaSurf, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.PayByAds.A, HKU\S-1-5-21-1975057165-606630669-3827422118-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Yahoo! Search, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{E2343056-CC08-46AC-B898-BFC7ACF4E755}, Do karantény, [bcffe45ce1a9f73f457fdfa9748f3cc4], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}, Do karantény, [bcffe45ce1a9f73f457fdfa9748f3cc4], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{7041156A-0D2B-4DCD-A8EE-D0608BFCB2D0}, Do karantény, [bcffe45ce1a9f73f457fdfa9748f3cc4], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{9B41579A-1996-42F9-8F84-7B7786818CEF}, Do karantény, [bcffe45ce1a9f73f457fdfa9748f3cc4], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}, Do karantény, [bcffe45ce1a9f73f457fdfa9748f3cc4], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}, Do karantény, [bcffe45ce1a9f73f457fdfa9748f3cc4], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}, Do karantény, [bcffe45ce1a9f73f457fdfa9748f3cc4], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7041156A-0D2B-4DCD-A8EE-D0608BFCB2D0}, Do karantény, [bcffe45ce1a9f73f457fdfa9748f3cc4], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9B41579A-1996-42F9-8F84-7B7786818CEF}, Do karantény, [bcffe45ce1a9f73f457fdfa9748f3cc4], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}, Do karantény, [bcffe45ce1a9f73f457fdfa9748f3cc4], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}, Do karantény, [bcffe45ce1a9f73f457fdfa9748f3cc4], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{E2343056-CC08-46AC-B898-BFC7ACF4E755}, Do karantény, [bcffe45ce1a9f73f457fdfa9748f3cc4], 
PUP.Optional.BrowserAdBlocker.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{37476589-E48E-439E-A706-56189E2ED4C4}_is1, Do karantény, [f5c6bd8393f7fc3ab8955d2df112926e], 

Hodnoty registru: 7
PUP.Optional.PayByAds.A, HKU\S-1-5-21-1975057165-606630669-3827422118-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Yahoo! Search, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrlte.exe, Do karantény, [9229261af09a0135650e76ec1ce44cb4]
Trojan.Agent.SCR, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|MSStp, C:\Windows\inf\msstp.vbe, Do karantény, [4e6d9ca4ff8be155a6e3ebed798a9070]
PUP.Optional.MoviesToolbar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|FaviconPath, C:\Program Files (x86)\Movies App\Datamngr\favicon.ico, Do karantény, [ccef301042488bab87a464c039cca35d]
PUP.Optional.MoviesToolbar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|FaviconPath, C:\Program Files (x86)\Movies App\Datamngr\favicon.ico, Do karantény, [52693907f09a51e5f536f62e8a7b956b]
Trojan.Agent.VBSGen, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|msptbopSrv, "C:\Windows\system32\msptbop.vbe" msbeoep msdoimh, Do karantény, [3e7d9aa68ffb5cda4f5e4b9d10f3d52b]
Trojan.Agent.VBSGen, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|msatoyelSrv, C:\Windows\inf\msatoyel.vbe, Do karantény, [645750f04f3b0333a5ed707725de51af]
PUP.Optional.MoviesToolbar, HKU\S-1-5-21-1975057165-606630669-3827422118-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|FaviconPath, C:\Program Files (x86)\Movies App\Datamngr\favicon.ico, Do karantény, [8833a0a0a1e922145ece53d120e526da]

Data registru: 0
(Žádné zákerné zjištěny položek)

Složky: 38
PUP.Optional.Datamngr.A, C:\ProgramData\Datamngr, Do karantény, [9c1f1a26ee9c3df9737f08fd1bea02fe], 
PUP.Optional.Datamngr.A, C:\ProgramData\Wincert, Do karantény, [b4077bc5216905316a4544e9a95c22de], 
PUP.Optional.Multiplug, C:\Program Files (x86)\YoutubeAdblocker, Do karantény, [dfdc72ceb4d6fd392ee86ff5e02343bd], 
Trojan.Agent.BCM, C:\Windows\Inf\mncmiemso, Smazat při restartu, [9f1c97a9107a191d33164024fc07c937], 
Trojan.Agent.BCM, C:\Windows\Inf\mncmiemso\bitstreams, Do karantény, [9f1c97a9107a191d33164024fc07c937], 
PUP.Optional.YoutubeAdblocker.A, C:\ProgramData\YoutubeAdblocker, Do karantény, [63585ae6206a89ad44c2e482bf44669a], 
PUP.Optional.Datamngr.A, C:\Users\OndA?ej\AppData\LocalLow\DataMngr, Do karantény, [8c2f81bfdbaffc3a50f274f4a85b768a], 
PUP.Optional.MoviesToolbar.A, C:\Users\OndA?ej\AppData\LocalLow\ilividmoviestoolbar181, Do karantény, [c2f973cd76145cda10cf77fa4eb558a8], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\TEMP, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\plugins, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.WSBooster.A, C:\ProgramData\SnowApp\SW-Booster, Smazat při restartu, [bb001c24cfbbb581b112bdba41c2728e], 
PUP.Optional.WSBooster.A, C:\ProgramData\SnowApp\SW-Booster\5121721648, Do karantény, [bb001c24cfbbb581b112bdba41c2728e], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads, Smazat při restartu, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search, Smazat při restartu, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.5, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.6, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2, Smazat při restartu, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.Booster.A, C:\Program Files (x86)\SW-Booster, Do karantény, [b5060f313654bd799d201e5bfd0627d9], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\content, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.SaverPro.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf, Do karantény, [7546d769f69477bfb8a4c7bfd42fbb45], 
PUP.Optional.SaverPro.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115, Do karantény, [7546d769f69477bfb8a4c7bfd42fbb45], 
PUP.Optional.SaverPro.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf, Do karantény, [c4f70f31276389ade775cdb9e41ff907], 
PUP.Optional.SaverPro.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115, Do karantény, [c4f70f31276389ade775cdb9e41ff907], 
PUP.Optional.SaverPro.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf, Do karantény, [0cafaa9678123ff777e56c1a669d51af], 
PUP.Optional.SaverPro.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115, Do karantény, [0cafaa9678123ff777e56c1a669d51af], 
PUP.Optional.SaverPro.A, C:\Users\OndA?ej\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf, Do karantény, [209bc57bf2981422c597c4c23ec542be], 
PUP.Optional.SaverPro.A, C:\Users\OndA?ej\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115, Do karantény, [209bc57bf2981422c597c4c23ec542be], 
PUP.Optional.MultiPlug.A, C:\ProgramData\BestSaveForYou, Do karantény, [bcffe45ce1a9f73f457fdfa9748f3cc4], 
PUP.Optional.BrowserAdBlocker.A, C:\ProgramData\Browser AdBlocker, Do karantény, [f5c6bd8393f7fc3ab8955d2df112926e], 
PUP.Optional.MiniAdblocker.A, C:\ProgramData\Mini - Adblocker, Do karantény, [6c4f013fb1d995a1f45f74161ae959a7], 
PUP.Optional.SupremeAdblocker.A, C:\ProgramData\Supreme AdBlocker, Do karantény, [774477c96f1bdc5afc36fc8f8083ce32], 
PUP.Optional.YellowAdblocker.A, C:\ProgramData\Yellow AdBlocker, Do karantény, [5a6173cd107ac5717eb775160ff458a8], 
PUP.Optional.CoupExtension.A, C:\ProgramData\CoupExteNsioN, Do karantény, [c5f607396f1bcc6a561f3a5619eaa65a], 

Soubory: 254
Trojan.SProtector, C:\ProgramData\Assistant\AssistantSvc.dll, Smazat při restartu, [b803f44c8ffb201627fcfd87d928d030], 
Trojan.SProtector, C:\ProgramData\Assistant\Assistant.dll, Smazat při restartu, [7d3e340c474376c04cd687fdd8298977], 
PUP.Optional.MaintainerSvc.A, C:\ProgramData\8a64b500-91d9-42f2-8d4d-776c5ec0ee9c\maintainer.exe, Smazat při restartu, [dae1fb45fc8e4aec5479a7490cf58779], 
PUP.Optional.MultiPlug.A, C:\ProgramData\SnowApp\SW-Booster\SW-Booster.exe, Smazat při restartu, [7d3e55eb404a999d5d3f540728d99e62], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrlte.exe, Smazat při restartu, [9229261af09a0135650e76ec1ce44cb4], 
BitcoinMiner, C:\Windows\Inf\msjogpb\msjogpb.exe, Smazat při restartu, [0fac0e32b4d661d5bc07d94ded140cf4], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\ConstaSurfBHO.dll, Do karantény, [3b803709e9a1c571013f1e7c27da639d], 
PUP.Optional.MultiPlug.A, C:\ProgramData\coInsuavee\Usws3z3kxOb2cA.dll, Do karantény, [813ae45ca0ea3bfb2ad0c2ff976e10f0], 
PUP.Optional.MultiPlug.A, C:\ProgramData\coInsuavee\Usws3z3kxOb2cA.x64.dll, Do karantény, [813ae45ca0ea3bfb2ad0c2ff976e10f0], 
PUP.Optional.MultiPlug.A, C:\ProgramData\taAKeorrleoave\sDgSqss3T6eqwX.dll, Do karantény, [f3c83e025f2b0e28a65470510df8b848], 
PUP.Optional.MultiPlug.A, C:\ProgramData\taAKeorrleoave\sDgSqss3T6eqwX.x64.dll, Do karantény, [f3c83e025f2b0e28a65470510df8b848], 
PUP.Optional.Multiplug, C:\ProgramData\DiealExpress\TUApcA.exe, Do karantény, [8338b68af2989a9c333a66520df4e21e], 
PUP.Optional.SwiftBrowse, C:\ProgramData\8a64b500-91d9-42f2-8d4d-776c5ec0ee9c\maintainer.bak, Do karantény, [3d7ec878becc989edd238c74966cca36], 
PUP.Optional.MultiPlug, C:\ProgramData\BestSaveForYou\c9d.exe, Do karantény, [18a3b9876525e2546d1a5b7428d9c63a], 
PUP.Optional.MultiPlug.A, C:\ProgramData\SaveRiExtensioN\zcdz3Av.exe, Do karantény, [209b38087218b28445a6fe75e41d867a], 
PUP.Optional.MultiPlug, C:\ProgramData\DoownSaVe\vhJKInJ.exe, Do karantény, [1c9f2b15bad0a393ee09506bf60be719], 
PUP.Optional.MultiPlug.A, C:\ProgramData\GreaatSave4U\AGTZ.exe, Do karantény, [a01b122e503ad660a9422e45ff02827e], 
PUP.Optional.MultiPlug, C:\ProgramData\HHapppy2SAAVea\c7blU1BdnU.exe, Do karantény, [e2d942fe1476c86e62954f6c1ce5639d], 
PUP.BitCoinMiner, C:\Program Files (x86)\call of duty 2 plna verze na pc hra\call of duty 2 plna verze na pc hra.exe, Do karantény, [5368330de7a3c76fe229948e4db307f9], 
PUP.Optional.Bitcoin, C:\Windows\SysWOW64\acumncpjkcog.exe, Do karantény, [5c5fc57b1a70221489b7e4600af87c84], 
Trojan.BitMiner, C:\Windows\SysWOW64\dcgmncpjkcog.exe, Smazat při restartu, [bcfff64a2565bc7a69d2361f62a02fd1], 
PUP.BitCoinMiner, C:\Windows\SysWOW64\lcpmncpjkcog.exe, Do karantény, [ad0e112f3d4da2946755271017ea32ce], 
PUP.Optional.InstalleRex, C:\Users\OndA?ej\Downloads\sabaton heroes.mp3(1).exe, Do karantény, [e1daf64ae1a9191d28cfc2dd8f72b24e], 
PUP.Optional.InstalleRex, C:\Users\OndA?ej\Downloads\sabaton heroes.mp3.exe, Do karantény, [a318162aaedca294698e5b447c85857b], 
PUP.Optional.Bandoo, C:\Users\OndA?ej\Downloads\iLividSetup-r362-n-bf(1).exe, Do karantény, [467594ac6d1dd66091e5f83b2cd58f71], 
PUP.Optional.Bandoo, C:\Users\OndA?ej\Downloads\iLividSetup-r362-n-bf.exe, Do karantény, [9e1dd16f93f7e2545e18b281d92840c0], 
PUP.Optional.OutBrowse, C:\Users\OndA?ej\Downloads\install-flashplayer.exe, Do karantény, [03b8cd73bbcfa0963f28317e0df4b64a], 
PUP.Optional.Installrex, C:\Users\OndA?ej\Downloads\Korpiklaani Tequila.exe, Do karantény, [0fac0c3490faa492cb337f0f18e9f907], 
Trojan.Bitcoin.SE, C:\Users\OndA?ej\Downloads\The-Elder-Scrolls--V-Skyrim---CRACK.exe, Do karantény, [25961b2598f2c96dc593232502ffc739], 
PUP.Optional.OpenCandy, C:\Users\OndA?ej\Downloads\windows-media-player-11.exe, Do karantény, [42792e1253372115b4890fede71ea858], 
PUP.Optional.Assistant.A, C:\ProgramData\Assistant\Assistant_x64.dll, Do karantény, [39827ec26228c0767c79b7fcaf54de22], 
PUP.Optional.Assistant.A, C:\ProgramData\Assistant\Assistant.dll, Smazat při restartu, [378482be0585092d14e273400df6a25e], 
PUP.Optional.Assistant.A, C:\ProgramData\Assistant\AssistantSvc.dll, Smazat při restartu, [e6d5b9874446d264ca2dedc6e41ff010], 
PUP.Optional.Booster.A, C:\Windows\Tasks\SW-Booster-S-5121721648.job, Do karantény, [bffcd46c1d6de254b10bdfe5da29e020], 
PUP.Optional.Booster.A, C:\Windows\System32\Tasks\SW-Booster-S-5121721648, Do karantény, [bffc5ae6ee9c3afc536a24a06d96bf41], 
Trojan.Agent.SCR, C:\Windows\Inf\msstp.vbe, Do karantény, [4e6d9ca4ff8be155a6e3ebed798a9070], 
Trojan.Agent.VBS, C:\Windows\SysWOW64\msstp.vbe, Do karantény, [3982eb553d4d78be1c7760831de6dc24], 
Trojan.Script, C:\Windows\SysWOW64\msbeoep.vbe, Do karantény, [8f2cb58b95f5b0862f726388c53eba46], 
Trojan.Script, C:\Windows\SysWOW64\msdoimh.vbe, Do karantény, [219a3c04bfcb87afe0c1dc0ff70c13ed], 
Trojan.Script, C:\Windows\SysWOW64\msptbop.vbe, Do karantény, [03b8d0700e7c63d30e93be2d1ae93bc5], 
PUP.Optional.Datamngr.A, C:\ProgramData\Datamngr\coordinator.cfg, Do karantény, [9c1f1a26ee9c3df9737f08fd1bea02fe], 
PUP.Optional.Datamngr.A, C:\ProgramData\Datamngr\general.cfg, Do karantény, [9c1f1a26ee9c3df9737f08fd1bea02fe], 
PUP.Optional.Datamngr.A, C:\ProgramData\Datamngr\S-1-5-21-1975057165-606630669-3827422118-1002.cfg, Do karantény, [9c1f1a26ee9c3df9737f08fd1bea02fe], 
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{0782648b-1717-4fef-ac58-8cb3ce03adb3}w64.sys, Do karantény, [04b7ae921476d95d372b30f01de8837d], 
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{1bf4cc48-f43e-4171-a6fa-c70b4da1fd25}w64.sys, Do karantény, [5e5d241c305a40f697cb1709db2a619f], 
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{466a6735-5550-4bc0-aa2d-4a38b7bf7287}w64.sys, Do karantény, [05b657e98a00bd7970f2b7698382ba46], 
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{9e91c5ac-d582-4f4e-aad0-1156c48345fd}w64.sys, Do karantény, [e7d490b0a6e40b2b224065bbbb4aac54], 
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{bbb14e79-8bca-4abd-b124-4d30f9a4e2ad}w64.sys, Do karantény, [a714a0a0eb9fc472a8ba958baf56a45c], 
PUP.Optional.Dsrlte.A, C:\Users\OndA?ej\AppData\Roaming\Mozilla\Firefox\Profiles\fu1nv1zp.default-1425234774393\searchplugins\dsrlte.xml, Do karantény, [3c7f64dc89013bfb08c84fd66e9743bd], 
PUP.Optional.YahooSearch.A, C:\Windows\System32\Tasks\Yahoo! Search, Do karantény, [a615d26e3c4ee84e3891d4558c798e72], 
PUP.Optional.YahooSearch.A, C:\Windows\System32\Tasks\Yahoo! Search Updater, Do karantény, [d2e9f14f46449e987554e3460afbad53], 
PUP.Optional.Datamngr.A, C:\ProgramData\Wincert\win32cert.dll, Do karantény, [b4077bc5216905316a4544e9a95c22de], 
PUP.Optional.Datamngr.A, C:\ProgramData\Wincert\win32prop.dll, Do karantény, [b4077bc5216905316a4544e9a95c22de], 
PUP.Optional.Datamngr.A, C:\ProgramData\Wincert\win64cert.dll, Do karantény, [b4077bc5216905316a4544e9a95c22de], 
PUP.Optional.Datamngr.A, C:\ProgramData\Wincert\win64prop.dll, Do karantény, [b4077bc5216905316a4544e9a95c22de], 
Trojan.Agent.VBSGen, C:\Windows\Inf\msatoyel.vbe, Do karantény, [645750f04f3b0333a5ed707725de51af], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\updateConstaSurf.exe, Smazat při restartu, [d9e21a2607830531d0823e9d40c3c43c], 
PUP.Optional.Multiplug, C:\Program Files (x86)\YoutubeAdblocker\ZrE6EEAIa.dat, Do karantény, [dfdc72ceb4d6fd392ee86ff5e02343bd], 
PUP.Optional.Multiplug, C:\Program Files (x86)\YoutubeAdblocker\ZrE6EEAIa.tlb, Do karantény, [dfdc72ceb4d6fd392ee86ff5e02343bd], 
Trojan.Agent.BCM, C:\Windows\Inf\mncmiemso\diablo130302.cl, Do karantény, [9f1c97a9107a191d33164024fc07c937], 
Trojan.Agent.BCM, C:\Windows\Inf\mncmiemso\diakgcn121016.cl, Do karantény, [9f1c97a9107a191d33164024fc07c937], 
Trojan.Agent.BCM, C:\Windows\Inf\mncmiemso\libcurl-4.dll, Smazat při restartu, [9f1c97a9107a191d33164024fc07c937], 
Trojan.Agent.BCM, C:\Windows\Inf\mncmiemso\libeay32.dll, Smazat při restartu, [9f1c97a9107a191d33164024fc07c937], 
Trojan.Agent.BCM, C:\Windows\Inf\mncmiemso\libidn-11.dll, Do karantény, [9f1c97a9107a191d33164024fc07c937], 
Trojan.Agent.BCM, C:\Windows\Inf\mncmiemso\librtmp.dll, Do karantény, [9f1c97a9107a191d33164024fc07c937], 
Trojan.Agent.BCM, C:\Windows\Inf\mncmiemso\libssh2.dll, Do karantény, [9f1c97a9107a191d33164024fc07c937], 
Trojan.Agent.BCM, C:\Windows\Inf\mncmiemso\mncmiemso.exe, Smazat při restartu, [9f1c97a9107a191d33164024fc07c937], 
Trojan.Agent.BCM, C:\Windows\Inf\mncmiemso\phatk121016.cl, Do karantény, [9f1c97a9107a191d33164024fc07c937], 
Trojan.Agent.BCM, C:\Windows\Inf\mncmiemso\poclbm130302.cl, Do karantény, [9f1c97a9107a191d33164024fc07c937], 
Trojan.Agent.BCM, C:\Windows\Inf\mncmiemso\scrypt130511.cl, Do karantény, [9f1c97a9107a191d33164024fc07c937], 
Trojan.Agent.BCM, C:\Windows\Inf\mncmiemso\ssleay32.dll, Smazat při restartu, [9f1c97a9107a191d33164024fc07c937], 
Trojan.Agent.BCM, C:\Windows\Inf\mncmiemso\zlib1.dll, Smazat při restartu, [9f1c97a9107a191d33164024fc07c937], 
Trojan.Agent.BCM, C:\Windows\Inf\mncmiemso\bitstreams\fpgaminer_top_fixed7_197MHz.ncd, Do karantény, [9f1c97a9107a191d33164024fc07c937], 
PUP.Optional.YoutubeAdblocker.A, C:\ProgramData\YoutubeAdblocker\bKkaSQ8PYw.dat, Do karantény, [63585ae6206a89ad44c2e482bf44669a], 
PUP.Optional.Datamngr.A, C:\Users\OndA?ej\AppData\LocalLow\DataMngr\{7CA1F051-A4FB-4143-B263-02B41E571EED}64, Do karantény, [8c2f81bfdbaffc3a50f274f4a85b768a], 
PUP.Optional.MoviesToolbar.A, C:\Users\OndA?ej\AppData\LocalLow\ilividmoviestoolbar181\apnuserid.dat, Do karantény, [c2f973cd76145cda10cf77fa4eb558a8], 
PUP.Optional.MoviesToolbar.A, C:\Users\OndA?ej\AppData\LocalLow\ilividmoviestoolbar181\appid.dat, Do karantény, [c2f973cd76145cda10cf77fa4eb558a8], 
PUP.Optional.MoviesToolbar.A, C:\Users\OndA?ej\AppData\LocalLow\ilividmoviestoolbar181\dtx.ini, Do karantény, [c2f973cd76145cda10cf77fa4eb558a8], 
PUP.Optional.MoviesToolbar.A, C:\Users\OndA?ej\AppData\LocalLow\ilividmoviestoolbar181\geodata.xml, Do karantény, [c2f973cd76145cda10cf77fa4eb558a8], 
PUP.Optional.MoviesToolbar.A, C:\Users\OndA?ej\AppData\LocalLow\ilividmoviestoolbar181\guid.dat, Do karantény, [c2f973cd76145cda10cf77fa4eb558a8], 
PUP.Optional.MoviesToolbar.A, C:\Users\OndA?ej\AppData\LocalLow\ilividmoviestoolbar181\setupCfg.xml, Do karantény, [c2f973cd76145cda10cf77fa4eb558a8], 
PUP.Optional.MoviesToolbar.A, C:\Users\OndA?ej\AppData\LocalLow\ilividmoviestoolbar181\sysid.dat, Do karantény, [c2f973cd76145cda10cf77fa4eb558a8], 
PUP.Optional.MoviesToolbar.A, C:\Users\OndA?ej\AppData\LocalLow\ilividmoviestoolbar181\trackid.dat, Do karantény, [c2f973cd76145cda10cf77fa4eb558a8], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\0, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\7za.exe, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\ConstaSurf.ico, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\ConstaSurfUn.exe, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\ConstaSurfUninstall.exe, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\imnmlgndokmgocfabbcnfnjfopjkbinb.crx, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\updateConstaSurf.InstallState, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\1bf4cc48f43e4171a6fa.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\1bf4cc48f43e4171a6fa64.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\466a673555504bc0aa2d.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\466a673555504bc0aa2d4a38b7bf7287.dll, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\466a673555504bc0aa2d4a38b7bf728764.dll, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\466a673555504bc0aa2d64.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\7za.exe, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\9e91c5acd5824f4eaad0.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\9e91c5acd5824f4eaad064.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\sqlite3.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\tmp3AF2.tmp, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\tmp666D.tmp, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\tmpF927.tmp, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\utilConstaSurf.exe, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\utilConstaSurf.InstallState, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\{0782648b-1717-4fef-ac58-8cb3ce03adb3}.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\{1bf4cc48-f43e-4171-a6fa-c70b4da1fd25}.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.BrowserAdapter.exe, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.BrowserAdapter64.exe, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.expext.exe, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.expext.zip, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.expextdll.dll, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.PurBrowse.zip, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.PurBrowse64.exe, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\eula.txt, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\{9e91c5ac-d582-4f4e-aad0-1156c48345fd}.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\{9e91c5ac-d582-4f4e-aad0-1156c48345fd}64.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\{bbb14e79-8bca-4abd-b124-4d30f9a4e2ad}.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\{bbb14e79-8bca-4abd-b124-4d30f9a4e2ad}64.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\bbb14e798bca4abdb124.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\bbb14e798bca4abdb12464.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\BrowserAdapter.7z, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.BOAS.exe, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.BOAS.exe.PendingOverwrite, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.BOAS.zip, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.BOASHelper.exe, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.BOASPRT.exe, Smazat při restartu, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\ConstaSurf.BOASPRT.exe.PendingOverwrite, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\{1bf4cc48-f43e-4171-a6fa-c70b4da1fd25}64.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\TEMP\mfs21AF.tmp, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\TEMP\mfs6585.tmp, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\TEMP\mfs698E.tmp, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\TEMP\mfs698F.tmp, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\TEMP\mfsAB6B.tmp, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\plugins\ConstaSurf.BOAS.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\plugins\ConstaSurf.BrowserAdapter.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\plugins\ConstaSurf.CompatibilityChecker.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\plugins\ConstaSurf.ExpExt.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\plugins\ConstaSurf.FFUpdate.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\plugins\ConstaSurf.GCUpdate.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\plugins\ConstaSurf.OfSvc.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.ConstaSurf.A, C:\Program Files (x86)\ConstaSurf\bin\plugins\ConstaSurf.PurBrowse.dll, Do karantény, [c7f4d967acded85ef7677005ad566e92], 
PUP.Optional.WSBooster.A, C:\ProgramData\SnowApp\SW-Booster\5121721648.ini, Do karantény, [bb001c24cfbbb581b112bdba41c2728e], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\app.ini, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\bbdczpsF.dll, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\dsrlte.exe, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\dsrsetup.exe, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\ieds.xml, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\moteedDm.dll, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\res.dll, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\rvt.js, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\serp.js, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\sqlite.dll, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.5\app.ini, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.5\dsrlte.exe, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.5\dsrsetup.exe, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.5\fuqoenpg.dll, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.5\ieds.xml, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.5\ilgiJbin.dll, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.5\res.dll, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.5\rvt.js, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.5\serp.js, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.5\sqlite.dll, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.6\app.ini, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.6\dhaodnkm.dll, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.6\dsrlte.exe, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.6\dsrsetup.exe, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.6\ieds.xml, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.6\oi7iM2nh.dll, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.6\res.dll, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.6\rvt.js, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.6\serp.js, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.18.6\sqlite.dll, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\aGcbeeyU.dll, Smazat při restartu, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\app.ini, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\chromext64.dll, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrsetup.exe, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\hlpr64.exe, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\ieds.xml, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\mjf7JiNo.dll, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\res.dll, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.PayByAds.A, C:\Users\OndA?ej\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\serp.js, Do karantény, [e5d684bc2367f83e45a95f19a85bd52b], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\chrome.manifest, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\install.rdf, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF14.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF.xpt, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF10.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF11.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF12.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF13.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF15.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF16.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF17.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF18.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF19.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF2.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF20.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF21.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF22.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF23.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF24.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF25.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF26.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF27.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF28.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF29.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF30.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF31.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF32.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF4.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF5.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF6.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF7.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF8.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\components\DatamngrHlpFF9.dll, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\content\DnsBHO.js, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\content\Error404BHO.js, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\content\MainBHO.js, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\content\NativeHelper.js, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\content\NewTabBHO.js, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\content\overlay.js, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\content\overlay.xul, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\content\RelatedSearch.js, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\content\RequestPreserver.js, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\content\SearchBHO.js, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.DataMangr.A, C:\Users\OndA?ej\AppData\Roaming\Movies Toolbar\Datamngr\content\SettingManager.js, Do karantény, [6c4fa0a0f29885b1e3a6423835ceac54], 
PUP.Optional.SaverPro.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\background.html, Do karantény, [7546d769f69477bfb8a4c7bfd42fbb45], 
PUP.Optional.SaverPro.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\content.js, Do karantény, [7546d769f69477bfb8a4c7bfd42fbb45], 
PUP.Optional.SaverPro.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\EL7eP4pPy.js, Do karantény, [7546d769f69477bfb8a4c7bfd42fbb45], 
PUP.Optional.SaverPro.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\lsdb.js, Do karantény, [7546d769f69477bfb8a4c7bfd42fbb45], 
PUP.Optional.SaverPro.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\manifest.json, Do karantény, [7546d769f69477bfb8a4c7bfd42fbb45], 
PUP.Optional.SaverPro.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\background.html, Do karantény, [c4f70f31276389ade775cdb9e41ff907], 
PUP.Optional.SaverPro.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\content.js, Do karantény, [c4f70f31276389ade775cdb9e41ff907], 
PUP.Optional.SaverPro.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\EL7eP4pPy.js, Do karantény, [c4f70f31276389ade775cdb9e41ff907], 
PUP.Optional.SaverPro.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\lsdb.js, Do karantény, [c4f70f31276389ade775cdb9e41ff907], 
PUP.Optional.SaverPro.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\manifest.json, Do karantény, [c4f70f31276389ade775cdb9e41ff907], 
PUP.Optional.SaverPro.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\background.html, Do karantény, [0cafaa9678123ff777e56c1a669d51af], 
PUP.Optional.SaverPro.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\content.js, Do karantény, [0cafaa9678123ff777e56c1a669d51af], 
PUP.Optional.SaverPro.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\EL7eP4pPy.js, Do karantény, [0cafaa9678123ff777e56c1a669d51af], 
PUP.Optional.SaverPro.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\lsdb.js, Do karantény, [0cafaa9678123ff777e56c1a669d51af], 
PUP.Optional.SaverPro.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\manifest.json, Do karantény, [0cafaa9678123ff777e56c1a669d51af], 
PUP.Optional.SaverPro.A, C:\Users\OndA?ej\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\background.html, Do karantény, [209bc57bf2981422c597c4c23ec542be], 
PUP.Optional.SaverPro.A, C:\Users\OndA?ej\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\content.js, Do karantény, [209bc57bf2981422c597c4c23ec542be], 
PUP.Optional.SaverPro.A, C:\Users\OndA?ej\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\EL7eP4pPy.js, Do karantény, [209bc57bf2981422c597c4c23ec542be], 
PUP.Optional.SaverPro.A, C:\Users\OndA?ej\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\lsdb.js, Do karantény, [209bc57bf2981422c597c4c23ec542be], 
PUP.Optional.SaverPro.A, C:\Users\OndA?ej\AppData\Local\Google\Chrome\User Data\Default\Extensions\keoppklbljbnecjcpehjlmdcdibpdclf\115\manifest.json, Do karantény, [209bc57bf2981422c597c4c23ec542be], 
PUP.Optional.MultiPlug.A, C:\ProgramData\BestSaveForYou\c9d.dat, Do karantény, [bcffe45ce1a9f73f457fdfa9748f3cc4], 
PUP.Optional.MultiPlug.A, C:\ProgramData\BestSaveForYou\c9d.tlb, Do karantény, [bcffe45ce1a9f73f457fdfa9748f3cc4], 
PUP.Optional.BrowserAdBlocker.A, C:\ProgramData\Browser AdBlocker\Browser AdBlocker.exe, Do karantény, [f5c6bd8393f7fc3ab8955d2df112926e], 
PUP.Optional.MiniAdblocker.A, C:\ProgramData\Mini - Adblocker\Mini - Adblocker.exe, Do karantény, [6c4f013fb1d995a1f45f74161ae959a7], 
PUP.Optional.SupremeAdblocker.A, C:\ProgramData\Supreme AdBlocker\Supreme AdBlocker.exe, Do karantény, [774477c96f1bdc5afc36fc8f8083ce32], 
PUP.Optional.YellowAdblocker.A, C:\ProgramData\Yellow AdBlocker\Yellow AdBlocker.exe, Do karantény, [5a6173cd107ac5717eb775160ff458a8], 
PUP.Optional.CoupExtension.A, C:\ProgramData\CoupExteNsioN\6CfmOcTgVjUcoz.dat, Do karantény, [c5f607396f1bcc6a561f3a5619eaa65a], 
PUP.Optional.CoupExtension.A, C:\ProgramData\CoupExteNsioN\6CfmOcTgVjUcoz.tlb, Do karantény, [c5f607396f1bcc6a561f3a5619eaa65a], 

Fyzické sektory: 0
(Žádné zákerné zjištěny položek)


(end)
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Kontrola

#3 Příspěvek od vyosek »

Zdravim :)

:arrow: Nedavejte logy do code

:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Po spusteni probehne stazeni databaze
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
novas1998
Návštěvník
Návštěvník
Příspěvky: 110
Registrován: 19 kvě 2013 07:56

Re: Kontrola

#4 Příspěvek od novas1998 »

# AdwCleaner v4.111 - Logfile created 04/03/2015 at 14:20:42
# Updated 18/02/2015 by Xplode
# Database : 2015-03-02.3 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Ondřej - ONDRA
# Running from : C:\Users\Ondřej\Desktop\adwcleaner_4.111.exe
# Option : Cleaning

***** [ Services ] *****

[#] Service Deleted : 699fd52f

***** [ Files / Folders ] *****

[#] Folder Deleted : C:\ProgramData\BitGuard
[#] Folder Deleted : C:\ProgramData\Browser Manager
[#] Folder Deleted : C:\ProgramData\BrowserProtect
Folder Deleted : C:\ProgramData\DiealExpress
Folder Deleted : C:\ProgramData\DisocouuntEExotenasi
Folder Deleted : C:\ProgramData\DoownSaVe
Folder Deleted : C:\ProgramData\GreaatSave4U
Folder Deleted : C:\ProgramData\HHapppy2SAAVea
Folder Deleted : C:\ProgramData\IsaVEur
Folder Deleted : C:\ProgramData\saafaeweb
Folder Deleted : C:\ProgramData\SaveRiExtensioN
Folder Deleted : C:\ProgramData\taAKeorrleoave
Folder Deleted : C:\ProgramData\ed4ad877c887e259
Folder Deleted : C:\Program Files (x86)\saafaeweb
Folder Deleted : C:\Users\Administrator\AppData\Local\torch
Folder Deleted : C:\Users\Guest\AppData\Local\torch
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\torch
Folder Deleted : C:\Users\Ondřej\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Ondřej\AppData\Local\torch
Folder Deleted : C:\Users\Ondřej\AppData\LocalLow\Toolbar4
Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdlpnmjlelmkdmpnpgldecbigjdhbnob
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdlpnmjlelmkdmpnpgldecbigjdhbnob
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdlpnmjlelmkdmpnpgldecbigjdhbnob
Folder Deleted : C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdlpnmjlelmkdmpnpgldecbigjdhbnob
Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhmbhpdonghkbfokafdglffmkkpmjgec
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhmbhpdonghkbfokafdglffmkkpmjgec
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhmbhpdonghkbfokafdglffmkkpmjgec
Folder Deleted : C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhmbhpdonghkbfokafdglffmkkpmjgec
Folder Deleted : C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hdlpnmjlelmkdmpnpgldecbigjdhbnob
Folder Deleted : C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hdlpnmjlelmkdmpnpgldecbigjdhbnob
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hdlpnmjlelmkdmpnpgldecbigjdhbnob
Folder Deleted : C:\Users\Ondřej\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hdlpnmjlelmkdmpnpgldecbigjdhbnob
Folder Deleted : C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mhmbhpdonghkbfokafdglffmkkpmjgec
Folder Deleted : C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mhmbhpdonghkbfokafdglffmkkpmjgec
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mhmbhpdonghkbfokafdglffmkkpmjgec
Folder Deleted : C:\Users\Ondřej\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mhmbhpdonghkbfokafdglffmkkpmjgec
Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hdlpnmjlelmkdmpnpgldecbigjdhbnob
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hdlpnmjlelmkdmpnpgldecbigjdhbnob
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hdlpnmjlelmkdmpnpgldecbigjdhbnob
Folder Deleted : C:\Users\Ondřej\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hdlpnmjlelmkdmpnpgldecbigjdhbnob
Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mhmbhpdonghkbfokafdglffmkkpmjgec
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mhmbhpdonghkbfokafdglffmkkpmjgec
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mhmbhpdonghkbfokafdglffmkkpmjgec
Folder Deleted : C:\Users\Ondřej\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mhmbhpdonghkbfokafdglffmkkpmjgec
File Deleted : C:\Users\Ondřej\daemonprocess.txt
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\Ask.xml

***** [ Scheduled tasks ] *****

Task Deleted : Yahoo! Search
Task Deleted : Yahoo! Search Updater

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
Key Deleted : HKCU\Software\Classes\keepmysearch
Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{03771AEF-400D-4A13-B712-25878EC4A3F5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E0D6077D-7186-48B2-A6C6-2F7C533E8CFF}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A68535E8-9A0F-4DF1-A899-FF39819A5317}
Key Deleted : HKCU\Software\APNDTX
Key Deleted : HKCU\Software\RegisteredApplicationsEx

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v35.0.1 (x86 cs)

[fu1nv1zp.default-1425234774393\prefs.js] - Line Deleted : user_pref("browser.search.hiddenOneOffs", "Seznam,Ask.com,DuckDuckGo,Heuréka,Mapy.cz,Slunečnice,Wikipedie (cs)");

-\\ Google Chrome v


-\\ Comodo Dragon v


-\\ Chrome Canary v


*************************

AdwCleaner[R0].txt - [8348 bytes] - [04/03/2015 14:19:11]
AdwCleaner[S0].txt - [8054 bytes] - [04/03/2015 14:20:42]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8113 bytes] ##########







Zoek.exe v5.0.0.0 Updated 03-March-2015
Tool run by Ondýej on st 04. 03. 2015 at 14:24:26,08.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\ONDEJ~1\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

4. 3. 2015 14:25:36 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\PROGRA~3\8a64b500-91d9-42f2-8d4d-776c5ec0ee9c deleted successfully
C:\PROGRA~3\SnowApp deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1975057165-606630669-3827422118-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8EF33751-1286-4652-9208-A2B68801C726} deleted successfully
HKEY_USERS\S-1-5-21-1975057165-606630669-3827422118-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8EF33751-1286-4652-9208-A2B68801C726} deleted successfully
HKEY_USERS\S-1-5-21-1975057165-606630669-3827422118-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A54B2637-91C7-4E7F-B5A1-1B4E6DF0FD60} deleted successfully
HKEY_USERS\S-1-5-21-1975057165-606630669-3827422118-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A54B2637-91C7-4E7F-B5A1-1B4E6DF0FD60} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8EF33751-1286-4652-9208-A2B68801C726} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8EF33751-1286-4652-9208-A2B68801C726} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A54B2637-91C7-4E7F-B5A1-1B4E6DF0FD60} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A54B2637-91C7-4E7F-B5A1-1B4E6DF0FD60} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\ONDEJ~1\AppData\Roaming\Mozilla\Firefox\Profiles\fu1nv1zp.default-1425234774393\prefs.js:
user_pref("browser.startup.homepage", "https://www.google.cz/?gws_rd=ssl");
user_pref("browser.newtab.url", "http://search.yahoo.com/?fr=hp-ddc-bd-t ... tab_bd_com");
user_pref("browser.search.selectedEngine", "Yahoo! Search");
user_pref("keyword.URL", "http://search.yahoo.com/yhs/search?hspa ... _bd_com&p=");

Added to C:\Users\ONDEJ~1\AppData\Roaming\Mozilla\Firefox\Profiles\fu1nv1zp.default-1425234774393\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

Deleted from C:\Users\ONDEJ~1\AppData\Roaming\Mozilla\Firefox\Profiles\TgTDNOZF.default\prefs.js:

Added to C:\Users\ONDEJ~1\AppData\Roaming\Mozilla\Firefox\Profiles\TgTDNOZF.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\PROGRA~3\8a64b500-91d9-42f2-8d4d-776c5ec0ee9c not found
C:\PROGRA~2\call of duty 2 plna verze na pc hra deleted
C:\PROGRA~2\call of duty 2 plna verze na pc hra cz deleted
C:\PROGRA~2\The Elder Scrolls V Skyrim - CRACK deleted
C:\extensions deleted
C:\PROGRA~3\InstallMate deleted
C:\PROGRA~3\Package Cache deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk deleted
C:\windows\SysNative\GroupPolicy\machine deleted
C:\windows\SysNative\GroupPolicy\gpt.ini deleted
C:\Users\ONDEJ~1\AppData\Roaming\Mozilla\Firefox\Profiles\fu1nv1zp.default-1425234774393\extensions\abs@avira.com deleted
C:\Users\ONDEJ~1\AppData\Roaming\Mozilla\Firefox\Profiles\TgTDNOZF.default\extensions\abs@avira.com deleted
"C:\PROGRA~2\Windows Multimedia Platform" deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\ONDEJ~1\AppData\Roaming\Mozilla\Firefox\Profiles\fu1nv1zp.default-1425234774393
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\ONDEJ~1\AppData\Roaming\Mozilla\Firefox\Profiles\TgTDNOZF.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"{e4f94d1e-2f53-401e-8885-681602c0ddd8}"="C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi" [04. 04. 2014 11:36]

==== Firefox Extensions ======================

ProfilePath: C:\Users\ONDEJ~1\AppData\Roaming\Mozilla\Firefox\Profiles\fu1nv1zp.default-1425234774393
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi

==== Firefox Plugins ======================


==== Fake Chromium Profiles Check ======================

Fake profile C:\Users\Administrator\AppData\Local\Google\Chrome deleted
Fake profile C:\Users\Administrator\AppData\Local\Google\Chrome SxS deleted
Fake profile C:\Users\Administrator\AppData\Local\Comodo\Dragon deleted
Fake profile C:\Users\Guest\AppData\Local\Google\Chrome deleted
Fake profile C:\Users\Guest\AppData\Local\Google\Chrome SxS deleted
Fake profile C:\Users\Guest\AppData\Local\Comodo\Dragon deleted
Fake profile C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome deleted
Fake profile C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS deleted
Fake profile C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon deleted

==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
flliilndjeohchalpbbcdekjklbdgfkk - No path found[]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://ads.ads-ki.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://ads.ads-ki.com"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{80c554b9-c7f8-4a21-9471-06d606da78a2} Bing Url="http://www.bing.com/search?q={searchTer ... DF&pc=MSE1"

==== Reset Google Chrome ======================

Nothing found to reset

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Default User\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

No Chrome Cache found

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=296 folders=80 26722700 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\TEMP\AppData\Local\Temp emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Reset Hosts File ======================

Hosts File Reset Successfully

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\ONDEJ~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on st 04. 03. 2015 at 14:37:57,25 ======================
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Kontrola

#5 Příspěvek od vyosek »

:arrow: Stažení Farbar Recovery Scan Tool :arrow: Spustte FRST, odsouhlaste licencni podminky a kliknete na Scan - nasledne se vytvorit dva logy (FRST.txt a Addition.txt), oba sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
novas1998
Návštěvník
Návštěvník
Příspěvky: 110
Registrován: 19 kvě 2013 07:56

Re: Kontrola

#6 Příspěvek od novas1998 »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-03-2015 01
Ran by Ondřej (administrator) on ONDRA on 06-03-2015 11:47:54
Running from C:\Users\Ondřej\Desktop
Loaded Profiles: Ondřej (Available profiles: Ondřej)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6469736 2012-03-06] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766688 2014-07-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [127792 2015-02-12] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\Run: [Spotify Web Helper] => C:\Users\Ondřej\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171000 2014-05-12] (Spotify Ltd)
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30878816 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7780120 2015-01-22] (SUPERAntiSpyware)
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\MountPoints2: {9211e7b4-6cfc-11e4-835d-d43d7ef5c43f} - "F:\HTC_Sync_Manager_PC.exe"

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSE1
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://ads.ads-ki.com
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.hal3000.cz
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1975057165-606630669-3827422118-1002 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1975057165-606630669-3827422118-1002 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = http://www.bing.com/search?q={searchTer ... DF&pc=MSE1
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37

FireFox:
========
FF ProfilePath: C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\fu1nv1zp.default-1425234774393
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Mini - Adblocker - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\fu1nv1zp.default-1425234774393\Extensions\urahcflqgmimkxbih@klbx_foyglkkolhs_jy.net [2015-03-05]
FF Extension: Adblock Plus - C:\Users\Ondřej\AppData\Roaming\Mozilla\Firefox\Profiles\fu1nv1zp.default-1425234774393\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-03-02]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-01-27]
FF HKU\.DEFAULT\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Ondřej\AppData\Local\Google\Chrome\User Data\Default
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.) [File not signed]
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [184056 2015-02-12] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-03] (Electronic Arts)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2013-09-24] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)
S3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46016 2012-07-24] ()
S3 MTsensor; C:\Windows\System32\drivers\ASACPI.sys [15416 2009-07-15] ()
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S1 MpKsl079cce74; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C08AEBD7-B0F8-4BD4-9997-FB49C15257FC}\MpKsl079cce74.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-06 11:47 - 2015-03-06 11:48 - 00011495 _____ () C:\Users\Ondřej\Desktop\FRST.txt
2015-03-06 11:47 - 2015-03-06 11:47 - 02092544 _____ (Farbar) C:\Users\Ondřej\Desktop\FRST64.exe
2015-03-06 11:47 - 2015-03-06 11:47 - 00000000 ____D () C:\FRST
2015-03-04 14:36 - 2015-03-04 14:24 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-03-04 14:25 - 2015-03-04 14:37 - 00009648 _____ () C:\zoek-results.log
2015-03-04 14:24 - 2015-03-04 14:37 - 00000000 ____D () C:\zoek_backup
2015-03-04 14:23 - 2015-03-04 14:23 - 01304576 _____ () C:\Users\Ondřej\Desktop\zoek.exe
2015-03-04 14:19 - 2015-03-04 14:20 - 00000000 ____D () C:\AdwCleaner
2015-03-04 14:17 - 2015-03-04 14:17 - 02126848 _____ () C:\Users\Ondřej\Desktop\adwcleaner_4.111.exe
2015-03-04 13:34 - 2015-03-04 13:34 - 00000000 ____D () C:\rsit
2015-03-04 13:34 - 2015-03-04 13:34 - 00000000 ____D () C:\Program Files\trend micro
2015-03-04 13:30 - 2015-03-04 13:30 - 01222144 _____ () C:\Users\Ondřej\Downloads\RSITx64.exe
2015-03-04 13:20 - 2015-03-05 18:43 - 00003628 _____ () C:\Windows\PFRO.log
2015-03-03 15:23 - 2015-03-05 18:43 - 00001624 _____ () C:\Windows\setupact.log
2015-03-03 15:23 - 2015-03-03 15:23 - 00337768 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-03 15:23 - 2015-03-03 15:23 - 00000000 _____ () C:\Windows\setuperr.log
2015-03-03 10:19 - 2015-03-05 20:14 - 00612812 _____ () C:\Windows\WindowsUpdate.log
2015-03-02 13:28 - 2015-03-02 13:28 - 00000000 ____D () C:\Users\Ondřej\AppData\Roaming\Avira
2015-03-02 13:25 - 2015-03-02 13:24 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-03-02 13:22 - 2014-11-24 10:23 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-03-02 13:22 - 2014-11-24 10:23 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-03-02 13:22 - 2014-11-24 10:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-03-02 13:21 - 2015-03-02 13:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-03-02 13:21 - 2015-03-02 13:22 - 00000000 ____D () C:\ProgramData\Avira
2015-03-02 13:21 - 2015-03-02 13:22 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-03-02 13:20 - 2015-03-02 13:20 - 04582672 _____ (Avira Operations & Co. KG) C:\Users\Ondřej\Downloads\avira_en_av_5880303339__ws.exe
2015-03-02 13:18 - 2015-03-02 13:18 - 00000000 ____D () C:\SUPERDelete
2015-03-02 13:17 - 2015-03-02 13:17 - 00000000 ____D () C:\ProgramData\ATI
2015-03-02 13:13 - 2015-03-04 14:22 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2015-03-02 13:13 - 2015-03-02 13:13 - 00000000 ____D () C:\Users\Ondřej\AppData\Roaming\SUPERAntiSpyware.com
2015-03-02 13:13 - 2015-03-02 13:13 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2015-03-02 13:13 - 2015-03-02 13:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2015-03-02 13:12 - 2015-03-02 13:12 - 21335760 _____ (SUPERAntiSpyware) C:\Users\Ondřej\Downloads\SUPERAntiSpyware.exe
2015-03-02 12:59 - 2015-03-04 13:55 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-02 12:59 - 2015-03-02 12:59 - 00060385 _____ () C:\Windows\SysWOW64\CCCInstall_201503021259506434.log
2015-03-02 12:59 - 2015-03-02 12:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-03-02 12:53 - 2015-03-02 12:53 - 00065400 _____ () C:\Windows\SysWOW64\CCCInstall_201503021253343353.log
2015-03-02 12:53 - 2015-03-02 12:53 - 00000000 ____D () C:\Users\Default\AppData\Roaming\ATI
2015-03-02 12:53 - 2015-03-02 12:53 - 00000000 ____D () C:\Users\Default\AppData\Local\ATI
2015-03-02 12:53 - 2015-03-02 12:53 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\ATI
2015-03-02 12:53 - 2015-03-02 12:53 - 00000000 ____D () C:\Users\Default User\AppData\Local\ATI
2015-03-02 12:52 - 2015-03-02 12:52 - 00000000 ____D () C:\AMD
2015-03-02 12:50 - 2014-11-15 20:05 - 00801584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-02 12:50 - 2014-11-15 07:29 - 00962216 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-02 12:50 - 2014-11-14 15:36 - 00055776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-03-02 12:50 - 2014-11-14 08:10 - 03558400 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-03-02 12:50 - 2014-11-14 07:58 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-03-02 12:50 - 2014-11-14 07:57 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2015-03-02 12:50 - 2014-11-14 07:57 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-03-02 12:50 - 2014-11-14 07:54 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-03-02 12:50 - 2014-11-14 07:54 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-03-02 12:50 - 2014-11-14 07:53 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-03-02 12:50 - 2014-11-14 07:52 - 01714176 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-03-02 12:50 - 2014-11-14 06:04 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-03-02 12:50 - 2014-11-14 06:03 - 00885760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-03-02 12:50 - 2014-11-14 06:03 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-03-02 12:50 - 2014-11-14 06:01 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-03-02 12:50 - 2014-11-14 06:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-03-02 12:50 - 2014-11-11 01:39 - 22290560 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-02 12:50 - 2014-11-11 01:17 - 19731824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-02 12:50 - 2014-11-10 19:06 - 02485056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-03-02 12:50 - 2014-11-10 19:06 - 00473408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-03-02 12:50 - 2014-11-10 19:06 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-03-02 12:50 - 2014-11-10 19:06 - 00136512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2015-03-02 12:50 - 2014-11-10 03:57 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys
2015-03-02 12:50 - 2014-11-10 02:37 - 00845312 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2015-03-02 12:50 - 2014-11-10 02:34 - 01084416 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2015-03-02 12:50 - 2014-11-10 02:26 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2015-03-02 12:50 - 2014-11-10 02:20 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2015-03-02 12:50 - 2014-11-10 02:09 - 00272384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2015-03-02 12:50 - 2014-11-10 02:08 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2015-03-02 12:50 - 2014-11-10 02:06 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2015-03-02 12:50 - 2014-11-10 01:57 - 00624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2015-03-02 12:50 - 2014-11-10 01:57 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2015-03-02 12:50 - 2014-11-08 11:42 - 01390928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-02 12:50 - 2014-11-08 11:23 - 01127976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-02 12:50 - 2014-11-08 05:00 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2015-03-02 12:50 - 2014-11-08 05:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys
2015-03-02 12:50 - 2014-11-08 04:58 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys
2015-03-02 12:50 - 2014-11-08 04:58 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2015-03-02 12:50 - 2014-11-08 04:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\kmddsp.tsp
2015-03-02 12:50 - 2014-11-08 04:56 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\rasmxs.dll
2015-03-02 12:50 - 2014-11-08 04:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\rasser.dll
2015-03-02 12:50 - 2014-11-08 04:24 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll
2015-03-02 12:50 - 2014-11-08 04:13 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp
2015-03-02 12:50 - 2014-11-08 04:13 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll
2015-03-02 12:50 - 2014-11-08 04:13 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll
2015-03-02 12:50 - 2014-11-08 03:48 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll
2015-03-02 12:50 - 2014-11-08 03:38 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2015-03-02 12:50 - 2014-11-08 03:17 - 00143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2015-03-02 12:50 - 2014-11-08 03:09 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll
2015-03-02 12:50 - 2014-11-08 03:03 - 00733696 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2015-03-02 12:50 - 2014-11-08 02:59 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll
2015-03-02 12:50 - 2014-11-08 02:58 - 04837376 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2015-03-02 12:50 - 2014-11-08 02:49 - 01154048 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2015-03-02 12:50 - 2014-11-07 04:58 - 00952896 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2015-03-02 12:50 - 2014-11-07 04:20 - 00786120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2015-03-02 12:50 - 2014-11-05 03:12 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
2015-03-02 12:50 - 2014-11-05 03:12 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
2015-03-02 12:50 - 2014-11-05 03:06 - 00514048 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2015-03-02 12:50 - 2014-11-05 02:44 - 00657920 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2015-03-02 12:50 - 2014-11-05 02:43 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2015-03-02 12:50 - 2014-11-05 02:41 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2015-03-02 12:50 - 2014-11-05 02:39 - 00155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL
2015-03-02 12:50 - 2014-11-05 02:39 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL
2015-03-02 12:50 - 2014-11-05 02:33 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2015-03-02 12:50 - 2014-11-05 02:21 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2015-03-02 12:50 - 2014-11-05 02:20 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2015-03-02 12:50 - 2014-11-05 02:18 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2015-03-02 12:50 - 2014-11-05 02:14 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2015-03-02 12:50 - 2014-11-05 02:06 - 00555520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2015-03-02 12:50 - 2014-11-04 20:33 - 00058176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2015-03-02 12:50 - 2014-11-04 20:25 - 00059712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys
2015-03-02 12:50 - 2014-11-04 20:25 - 00051008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys
2015-03-02 12:50 - 2014-11-04 07:55 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sermouse.sys
2015-03-02 12:50 - 2014-11-04 07:54 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys
2015-03-02 12:50 - 2014-11-04 07:54 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2015-03-02 12:50 - 2014-11-04 07:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys
2015-03-02 12:50 - 2014-11-04 07:27 - 00128512 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2015-03-02 12:50 - 2014-11-04 06:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2015-03-02 12:50 - 2014-10-31 01:51 - 18823168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-03-02 12:50 - 2014-10-31 01:10 - 15158784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-03-02 12:50 - 2014-10-29 04:05 - 00551232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2015-03-02 12:50 - 2014-10-29 02:55 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2015-03-02 12:50 - 2014-10-29 02:13 - 00169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2015-03-02 12:50 - 2014-10-21 02:59 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\eventcls.dll
2015-03-02 12:50 - 2014-10-21 02:19 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eventcls.dll
2015-03-02 12:50 - 2014-10-21 01:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\vsstrace.dll
2015-03-02 12:50 - 2014-10-21 01:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2015-03-02 12:50 - 2014-10-21 01:31 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsstrace.dll
2015-03-02 12:50 - 2014-10-21 01:30 - 01454080 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2015-03-02 12:50 - 2014-10-21 01:20 - 01142272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
2015-03-02 12:50 - 2014-10-17 05:56 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2015-03-02 12:50 - 2014-10-17 05:56 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2015-03-02 12:50 - 2014-10-17 05:56 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2015-03-02 12:50 - 2014-10-17 04:35 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2015-03-02 12:49 - 2014-11-17 21:17 - 00672984 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2015-03-02 12:49 - 2014-11-17 21:17 - 00273240 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2015-03-02 12:49 - 2014-11-14 07:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsDatabase.dll
2015-03-02 12:49 - 2014-11-14 07:54 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2015-03-02 12:49 - 2014-11-14 07:46 - 02171904 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2015-03-02 12:49 - 2014-11-14 07:46 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2015-03-02 12:49 - 2014-11-14 07:39 - 02819584 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2015-03-02 12:49 - 2014-11-14 05:53 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2015-03-02 12:44 - 2015-03-02 12:44 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-03-02 12:44 - 2015-03-02 12:44 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-03-02 12:44 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-03-02 12:44 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-03-02 12:44 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-03-02 12:43 - 2015-03-02 12:43 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Ondřej\Downloads\mbam-setup-2.0.4.1028.exe
2015-03-02 12:42 - 2015-03-03 14:47 - 00000000 ____D () C:\Program Files\Defraggler
2015-03-02 12:41 - 2015-03-02 13:34 - 00000000 ____D () C:\Users\Ondřej\Desktop\čištění
2015-03-02 12:41 - 2015-03-02 12:41 - 04362512 _____ (Piriform Ltd) C:\Users\Ondřej\Downloads\dfsetup218.exe
2015-03-02 12:40 - 2015-03-02 12:40 - 05325696 _____ (Piriform Ltd) C:\Users\Ondřej\Downloads\ccsetup503.exe
2015-02-25 15:21 - 2014-12-13 22:28 - 00513488 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-25 15:21 - 2014-12-13 22:28 - 00513488 _____ () C:\Windows\system32\locale.nls
2015-02-25 15:21 - 2014-10-29 02:27 - 01200128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2015-02-25 15:21 - 2014-10-29 02:27 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2015-02-25 15:21 - 2014-10-29 02:04 - 00868352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2015-02-25 15:21 - 2014-10-29 02:04 - 00200704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
2015-02-22 17:27 - 2015-03-01 19:32 - 00000000 ____D () C:\Users\Ondřej\Desktop\Původní data aplikace Firefox
2015-02-22 16:48 - 2015-03-02 19:09 - 00000000 ____D () C:\Users\Ondřej\AppData\Roaming\glitz
2015-02-13 14:44 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-13 14:44 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-11 14:52 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 14:52 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 14:52 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-02-11 14:52 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-02-11 14:52 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 14:52 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 14:52 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 14:52 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-02-11 14:52 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-02-11 14:52 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 14:52 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 14:52 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 14:52 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 14:52 - 2014-12-09 00:12 - 00391526 _____ () C:\Windows\system32\ApnDatabase.xml
2015-02-11 14:52 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 14:52 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 14:52 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 14:52 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 14:52 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-02-11 14:52 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-02-11 14:52 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-02-11 14:52 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 14:52 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-02-11 14:52 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-02-11 14:52 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-02-11 14:52 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-02-11 14:52 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-02-11 14:51 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 14:51 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 14:51 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 14:51 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 14:51 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-02-11 14:51 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 14:51 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 14:51 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 14:51 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 14:51 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 14:51 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 14:51 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-02-11 14:51 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-02-11 14:51 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-02-11 14:51 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 14:51 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 14:51 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 14:51 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 14:51 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 14:51 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 14:51 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-02-11 14:51 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-02-11 14:51 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-02-11 14:51 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 14:51 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-02-11 14:51 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 14:51 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 14:51 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 14:51 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 14:51 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 14:51 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 14:51 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 14:51 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 14:51 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 14:51 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 14:51 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 14:50 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2015-02-11 14:49 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-09 23:00 - 2015-02-09 23:00 - 00000079 _____ () C:\Program Files (x86)\prefs.js
2015-02-08 17:29 - 2015-02-08 17:29 - 35203896 _____ () C:\Users\Ondřej\Desktop\Wireless LAN_Broadcom_5.100.82.95_W7x86W7x64_A.zip
2015-02-08 17:27 - 2015-02-08 17:28 - 12201106 _____ () C:\Users\Ondřej\Desktop\Wireless LAN_Atheros_9.2.0.439_W7x86W7x64_A.zip
2015-02-05 19:43 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2015-02-05 19:43 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-06 11:43 - 2014-04-06 13:28 - 00000000 __RDO () C:\Users\Ondřej\SkyDrive
2015-03-06 11:41 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2015-03-05 22:02 - 2014-01-22 18:12 - 00000000 ____D () C:\Users\Ondřej
2015-03-05 19:39 - 2014-01-22 18:19 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1975057165-606630669-3827422118-1002
2015-03-05 18:44 - 2014-10-05 18:22 - 00000000 ____D () C:\Counter-Strike 1.6
2015-03-05 18:43 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-05 18:42 - 2014-01-22 18:21 - 00000000 ____D () C:\Users\Ondřej\AppData\Roaming\Skype
2015-03-05 16:50 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-03-04 14:37 - 2014-09-30 16:55 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-03-04 14:36 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-03-04 14:35 - 2014-03-13 16:19 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2015-03-04 14:35 - 2014-03-13 16:19 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2015-03-04 14:35 - 2014-03-13 16:19 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2015-03-04 14:35 - 2014-03-13 16:19 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2015-03-04 14:35 - 2014-03-13 16:19 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2015-03-04 14:35 - 2014-03-13 16:19 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2015-03-04 14:35 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2015-03-03 15:11 - 2014-11-15 20:50 - 00000000 ____D () C:\Users\Ondřej\Documents\FIFA 14
2015-03-03 14:50 - 2014-11-15 20:28 - 00000000 ____D () C:\ProgramData\Origin
2015-03-03 14:48 - 2014-11-15 20:28 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-03-03 14:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache
2015-03-03 11:26 - 2014-01-31 20:54 - 00991232 ___SH () C:\Users\Ondřej\Desktop\Thumbs.db
2015-03-03 10:18 - 2014-09-25 13:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Elder Scrolls V Skyrim - CRACK
2015-03-03 10:18 - 2014-09-14 11:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\call of duty 2 plna verze na pc hra
2015-03-02 13:32 - 2014-05-23 13:54 - 00000000 ____D () C:\Program Files (x86)\Stronghold Crusader
2015-03-02 13:26 - 2014-09-14 11:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\call of duty 2 plna verze na pc hra cz
2015-03-02 13:19 - 2014-09-25 17:30 - 00000003 _____ () C:\Users\Ondřej\stut
2015-03-02 13:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\tracing
2015-03-02 13:14 - 2015-01-09 15:04 - 00000000 ____D () C:\ProgramData\coInsuavee
2015-03-02 13:14 - 2013-08-22 14:25 - 00000194 _____ () C:\Windows\win.ini
2015-03-02 12:59 - 2014-09-25 17:28 - 00000002 _____ () C:\Users\Ondřej\rgut
2015-03-02 12:58 - 2014-01-14 16:34 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2015-03-02 12:55 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData
2015-03-02 12:55 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-03-02 12:55 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup
2015-03-02 12:55 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\setup
2015-03-02 12:52 - 2014-01-14 16:35 - 00000000 ____D () C:\Program Files\AMD
2015-03-02 12:47 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-03-02 12:42 - 2014-10-21 12:08 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-12 17:21 - 2014-01-27 04:05 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-12 17:17 - 2014-01-27 04:05 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-09 23:00 - 2015-01-27 11:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-02-08 17:32 - 2013-09-10 13:24 - 01745984 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-08 17:32 - 2013-08-22 23:08 - 00738682 _____ () C:\Windows\system32\perfh005.dat
2015-02-08 17:32 - 2013-08-22 23:08 - 00151404 _____ () C:\Windows\system32\perfc005.dat

==================== Files in the root of some directories =======

2015-02-09 23:00 - 2015-02-09 23:00 - 0000079 _____ () C:\Program Files (x86)\prefs.js

Some content of TEMP:
====================
C:\Users\Ondřej\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-25 17:05

==================== End Of Log ============================
Nahoru
novas1998
Návštěvník
Návštěvník
Příspěvky: 110
Registrován: 19 kvě 2013 07:56

Re: Kontrola

#7 Příspěvek od novas1998 »

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-03-2015 01
Ran by Ondřej at 2015-03-06 11:48:44
Running from C:\Users\Ondřej\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\uTorrent) (Version: 3.4.2.34024 - BitTorrent Inc.)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.43 - Adobe Systems Incorporated)
Adobe Reader XI - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.00 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{308051DA-0048-7A07-FE8B-9B6EC119A9E8}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD VISION Engine Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Assassins Creed III v1.0.1 (HKLM-x32\...\Assassins Creed III_is1) (Version: 1.0.1 - Ubisoft)
Avira (HKLM-x32\...\{d9ed6dcf-6bfc-4fbb-802e-81dd5b767d6e}) (Version: 1.1.32.25147 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.32.25147 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
call of duty 2 plna verze na pc hra cz version for Windows (HKLM-x32\...\{FE23FF78-4679-E32A-AAB7-95810FC854CE}_is1) (Version: for Windows - )
call of duty 2 plna verze na pc hra version for Windows (HKLM-x32\...\{F0F5C091-89E7-3ACD-79AB-6CBCB1EBADF9}_is1) (Version: for Windows - )
Call of Duty(R) 2 (HKLM-x32\...\InstallShield_{D0A05794-48C2-4424-A15A-9F20FCFDD374}) (Version: 1.00.0000 - Activision)
Call of Duty(R) 2 (x32 Version: 1.00.0000 - Activision) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform)
Counter-Strike 1.6 v42 (HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\Counter-Strike 1.6_is1) (Version: - Valve)
Defraggler (HKLM\...\Defraggler) (Version: 2.18 - Piriform)
FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.7 - Electronic Arts)
Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)
GameRanger (HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\GameRanger) (Version: - GameRanger Technologies)
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version: - )
Gothic II (HKLM-x32\...\Gothic II) (Version: - )
Gothic II Gold (HKLM-x32\...\InstallShield_{8B95673D-2D4C-4216-ADA2-3660973700BF}) (Version: 1.00.0000 - CD Projekt)
Gothic II Gold (x32 Version: 1.00.0000 - CD Projekt) Hidden
GTA San Andreas (HKLM-x32\...\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}) (Version: 1.00.00001 - Rockstar Games)
HyperCam 2 (HKLM-x32\...\HyperCam 2) (Version: - )
K-Lite Codec Pack 10.0.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.0.5 - )
Malwarebytes Anti-Malware verze 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Metin2 (HKLM-x32\...\Metin2_is1) (Version: - Gameforge 4D GmbH)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Minecraft 1.3.2 version for Windows (HKLM-x32\...\{16EB0DC2-7FE8-A632-77F4-7DDBE58F7C25}_is1) (Version: for Windows - )
Mozilla Firefox 35.0.1 (x86 cs) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 cs)) (Version: 35.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Origin (HKLM-x32\...\Origin) (Version: 9.5.1.571 - Electronic Arts, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6586 - Realtek Semiconductor Corp.)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Speccy (HKLM\...\Speccy) (Version: 1.26 - Piriform)
Spotify (HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\Spotify) (Version: 0.9.8.296.g91f68827 - Spotify AB)
Stronghold Crusader (HKLM-x32\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version: - )
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1170 - SUPERAntiSpyware.com)
The Elder Scrolls V Skyrim - CRACK version for Windows (HKLM-x32\...\{50B181C4-B86F-8A55-2AA0-4B5954442A00}_is1) (Version: for Windows - )
The Elder Scrolls V Skyrim LE (HKLM-x32\...\The Elder Scrolls V Skyrim LE_is1) (Version: - )
VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN)
WinRAR 5.00 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points =========================

17-02-2015 14:57:37 Windows Update
25-02-2015 17:05:47 Windows Update
02-03-2015 12:50:25 Windows Update
04-03-2015 14:25:16 zoek.exe restore point

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {349C5B50-FF54-42F9-BE68-6571F8F10CCD} - System32\Tasks\{BFC3FC9D-A634-4CFE-9EE3-BD9CF5675DB0} => pcalua.exe -a E:\Autorun.exe -d E:\ -c --autorun
Task: {91DB8784-ED94-41F7-9655-9BA66369E2BE} - System32\Tasks\{25B809A1-6E12-4D00-BBD8-D6C61FDE0B6B} => pcalua.exe -a "C:\Users\Ondřej\Desktop\Stronghold Crusader +Cestina\Cestina\strongholdcrusader_cz.exe" -d "C:\Users\Ondřej\Desktop\Stronghold Crusader +Cestina\Cestina"
Task: {9BF09E3F-4F3D-4E0F-9DA6-6BD0E260F5B9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-02-19] (Piriform Ltd)
Task: {9D0980DE-4A4C-477A-AC27-52DEF6380C3A} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-02-12] (Microsoft Corporation)

==================== Loaded Modules (whitelisted) ==============

2013-12-06 16:06 - 2013-12-06 16:06 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2013-07-26 05:59 - 2013-07-26 05:59 - 00814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2013-07-26 05:59 - 2013-07-26 05:59 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2014-11-25 15:12 - 2014-11-25 15:12 - 00183296 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\ErrorReporting.dll
2013-12-06 16:06 - 2013-12-06 16:06 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Ondřej\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Ondřej\SkyDrive.old:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1975057165-606630669-3827422118-1002\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\HAL3000\HAL3000_main.jpg
DNS Servers: 213.46.172.36 - 213.46.172.37

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\StartupApproved\Run: => "SUPERAntiSpyware"

==================== Accounts: =============================

Administrator (S-1-5-21-1975057165-606630669-3827422118-500 - Administrator - Disabled)
Guest (S-1-5-21-1975057165-606630669-3827422118-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1975057165-606630669-3827422118-1006 - Limited - Enabled)
Ondřej (S-1-5-21-1975057165-606630669-3827422118-1002 - Administrator - Enabled) => C:\Users\Ondřej

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/05/2015 10:01:59 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program csko.exe verze 1.1.1.1 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 1184

Čas spuštění: 01d0576c1597540e

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Counter-Strike 1.6\csko.exe

ID hlášení: dc07ede0-c37a-11e4-83d1-d43d7ef5c43f

Úplný název chybujícího balíčku:

ID aplikace související s chybujícím balíčkem:

Error: (03/05/2015 06:44:24 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Avira.OE.ServiceHost.exe, verze: 1.1.32.25147, časové razítko: 0x54dca367
Název chybujícího modulu: KERNELBASE.dll, verze: 6.3.9600.17278, časové razítko: 0x53eeb460
Kód výjimky: 0xe0434352
Posun chyby: 0x00012f71
ID chybujícího procesu: 0x1118
Čas spuštění chybující aplikace: 0xAvira.OE.ServiceHost.exe0
Cesta k chybující aplikaci: Avira.OE.ServiceHost.exe1
Cesta k chybujícímu modulu: Avira.OE.ServiceHost.exe2
ID zprávy: Avira.OE.ServiceHost.exe3
Úplný název chybujícího balíčku: Avira.OE.ServiceHost.exe4
ID aplikace související s chybujícím balíčkem: Avira.OE.ServiceHost.exe5

Error: (03/05/2015 06:44:24 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: Avira.OE.ServiceHost.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.Xml.XmlException
Zásobník:
na System.Xml.XmlTextReaderImpl.Throw(System.Exception)
na System.Xml.XmlTextReaderImpl.ParseDocumentContent()
na System.Xml.XmlTextReaderImpl.Read()
na System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
na System.Xml.XmlDocument.Load(System.Xml.XmlReader)
na System.Xml.XmlDocument.Load(System.String)
na Avira.OE.WinCore.OeSharedSettingsAccessor.TryLoadXmlDocumentFromFile(Int32, System.TimeSpan)
na Avira.OE.WinCore.OeSharedSettingsAccessor.LoadXmlDocumentFromFile()
na Avira.OE.WinCore.OeSharedSettingsAccessor.Get(System.String)
na Avira.OE.WinCore.OeProductInfo.get_Culture()
na Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
na Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
na Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
na System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
na System.Threading.ThreadPoolWorkQueue.Dispatch()
na System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (03/05/2015 06:44:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Avira.OE.ServiceHost.exe, verze: 1.1.32.25147, časové razítko: 0x54dca367
Název chybujícího modulu: KERNELBASE.dll, verze: 6.3.9600.17278, časové razítko: 0x53eeb460
Kód výjimky: 0xe0434352
Posun chyby: 0x00012f71
ID chybujícího procesu: 0xfc0
Čas spuštění chybující aplikace: 0xAvira.OE.ServiceHost.exe0
Cesta k chybující aplikaci: Avira.OE.ServiceHost.exe1
Cesta k chybujícímu modulu: Avira.OE.ServiceHost.exe2
ID zprávy: Avira.OE.ServiceHost.exe3
Úplný název chybujícího balíčku: Avira.OE.ServiceHost.exe4
ID aplikace související s chybujícím balíčkem: Avira.OE.ServiceHost.exe5

Error: (03/05/2015 06:44:14 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: Avira.OE.ServiceHost.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.Xml.XmlException
Zásobník:
na System.Xml.XmlTextReaderImpl.Throw(System.Exception)
na System.Xml.XmlTextReaderImpl.ParseDocumentContent()
na System.Xml.XmlTextReaderImpl.Read()
na System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
na System.Xml.XmlDocument.Load(System.Xml.XmlReader)
na System.Xml.XmlDocument.Load(System.String)
na Avira.OE.WinCore.OeSharedSettingsAccessor.TryLoadXmlDocumentFromFile(Int32, System.TimeSpan)
na Avira.OE.WinCore.OeSharedSettingsAccessor.LoadXmlDocumentFromFile()
na Avira.OE.WinCore.OeSharedSettingsAccessor.Get(System.String)
na Avira.OE.WinCore.OeProductInfo.get_Culture()
na Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
na Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
na Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
na System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
na System.Threading.ThreadPoolWorkQueue.Dispatch()
na System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (03/05/2015 06:43:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Avira.OE.ServiceHost.exe, verze: 1.1.32.25147, časové razítko: 0x54dca367
Název chybujícího modulu: KERNELBASE.dll, verze: 6.3.9600.17278, časové razítko: 0x53eeb460
Kód výjimky: 0xe0434352
Posun chyby: 0x00012f71
ID chybujícího procesu: 0x764
Čas spuštění chybující aplikace: 0xAvira.OE.ServiceHost.exe0
Cesta k chybující aplikaci: Avira.OE.ServiceHost.exe1
Cesta k chybujícímu modulu: Avira.OE.ServiceHost.exe2
ID zprávy: Avira.OE.ServiceHost.exe3
Úplný název chybujícího balíčku: Avira.OE.ServiceHost.exe4
ID aplikace související s chybujícím balíčkem: Avira.OE.ServiceHost.exe5

Error: (03/05/2015 06:43:56 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: Avira.OE.ServiceHost.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.Xml.XmlException
Zásobník:
na System.Xml.XmlTextReaderImpl.Throw(System.Exception)
na System.Xml.XmlTextReaderImpl.ParseDocumentContent()
na System.Xml.XmlTextReaderImpl.Read()
na System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
na System.Xml.XmlDocument.Load(System.Xml.XmlReader)
na System.Xml.XmlDocument.Load(System.String)
na Avira.OE.WinCore.OeSharedSettingsAccessor.TryLoadXmlDocumentFromFile(Int32, System.TimeSpan)
na Avira.OE.WinCore.OeSharedSettingsAccessor.LoadXmlDocumentFromFile()
na Avira.OE.WinCore.OeSharedSettingsAccessor.Get(System.String)
na Avira.OE.WinCore.OeProductInfo.get_Culture()
na Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
na Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
na Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
na System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
na System.Threading.ThreadPoolWorkQueue.Dispatch()
na System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (03/05/2015 06:43:43 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Zpracování změny relace se nezdařilo. System.NullReferenceException: Odkaz na objekt není nastaven na instanci objektu.
v Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
v System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)

Error: (03/05/2015 05:49:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: csko.exe, verze: 1.1.1.1, časové razítko: 0x48feaf5a
Název chybujícího modulu: steamclient.dll, verze: 0.0.0.0, časové razítko: 0x4ab4e25d
Kód výjimky: 0xc0000417
Posun chyby: 0x00025bba
ID chybujícího procesu: 0x1514
Čas spuštění chybující aplikace: 0xcsko.exe0
Cesta k chybující aplikaci: csko.exe1
Cesta k chybujícímu modulu: csko.exe2
ID zprávy: csko.exe3
Úplný název chybujícího balíčku: csko.exe4
ID aplikace související s chybujícím balíčkem: csko.exe5

Error: (03/05/2015 03:18:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: csko.exe, verze: 1.1.1.1, časové razítko: 0x48feaf5a
Název chybujícího modulu: steamclient.dll, verze: 0.0.0.0, časové razítko: 0x4ab4e25d
Kód výjimky: 0xc0000417
Posun chyby: 0x00025bba
ID chybujícího procesu: 0x710
Čas spuštění chybující aplikace: 0xcsko.exe0
Cesta k chybující aplikaci: csko.exe1
Cesta k chybujícímu modulu: csko.exe2
ID zprávy: csko.exe3
Úplný název chybujícího balíčku: csko.exe4
ID aplikace související s chybujícím balíčkem: csko.exe5


System errors:
=============
Error: (03/05/2015 06:44:24 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Avira Service Host byla neočekávaně ukončena. Tento stav nastal již 3krát.

Error: (03/05/2015 06:44:14 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Avira Service Host byla nečekaně ukončena. Stalo se to 2 krát. Následující opravná akce bude spuštěna za 10000 milisekund: Restartovat službu.

Error: (03/05/2015 06:44:00 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Avira Service Host byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 10000 milisekund: Restartovat službu.

Error: (03/05/2015 06:43:36 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: Při pokusu o načtení souboru místních hostitelů došlo k chybě.

Error: (03/05/2015 06:43:25 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (18:35:43, ‎5. ‎3. ‎2015) bylo neočekávané.

Error: (03/05/2015 03:16:43 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Avira Service Host byla neočekávaně ukončena. Tento stav nastal již 3krát.

Error: (03/05/2015 03:16:32 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Avira Service Host byla nečekaně ukončena. Stalo se to 2 krát. Následující opravná akce bude spuštěna za 10000 milisekund: Restartovat službu.

Error: (03/05/2015 03:16:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Avira Service Host byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 10000 milisekund: Restartovat službu.

Error: (03/05/2015 03:16:09 PM) (Source: DCOM) (EventID: 10016) (User: ONDRA)
Description: specifické pro aplikaciMístníSpuštění{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}OndraOndřejS-1-5-21-1975057165-606630669-3827422118-1002LocalHost (pomocí LRPC)Není k dispoziciNení k dispozici

Error: (03/05/2015 03:16:09 PM) (Source: DCOM) (EventID: 10016) (User: ONDRA)
Description: specifické pro aplikaciMístníSpuštění{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}OndraOndřejS-1-5-21-1975057165-606630669-3827422118-1002LocalHost (pomocí LRPC)Není k dispoziciNení k dispozici


Microsoft Office Sessions:
=========================
Error: (03/05/2015 10:01:59 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: csko.exe1.1.1.1118401d0576c1597540e4294967295C:\Counter-Strike 1.6\csko.exedc07ede0-c37a-11e4-83d1-d43d7ef5c43f

Error: (03/05/2015 06:44:24 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Avira.OE.ServiceHost.exe1.1.32.2514754dca367KERNELBASE.dll6.3.9600.1727853eeb460e043435200012f71111801d0576c04ebfb2bC:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exeC:\Windows\SYSTEM32\KERNELBASE.dll42dccbab-c35f-11e4-83d1-d43d7ef5c43f

Error: (03/05/2015 06:44:24 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: Avira.OE.ServiceHost.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.Xml.XmlException
Zásobník:
na System.Xml.XmlTextReaderImpl.Throw(System.Exception)
na System.Xml.XmlTextReaderImpl.ParseDocumentContent()
na System.Xml.XmlTextReaderImpl.Read()
na System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
na System.Xml.XmlDocument.Load(System.Xml.XmlReader)
na System.Xml.XmlDocument.Load(System.String)
na Avira.OE.WinCore.OeSharedSettingsAccessor.TryLoadXmlDocumentFromFile(Int32, System.TimeSpan)
na Avira.OE.WinCore.OeSharedSettingsAccessor.LoadXmlDocumentFromFile()
na Avira.OE.WinCore.OeSharedSettingsAccessor.Get(System.String)
na Avira.OE.WinCore.OeProductInfo.get_Culture()
na Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
na Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
na Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
na System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
na System.Threading.ThreadPoolWorkQueue.Dispatch()
na System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (03/05/2015 06:44:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Avira.OE.ServiceHost.exe1.1.32.2514754dca367KERNELBASE.dll6.3.9600.1727853eeb460e043435200012f71fc001d0576bfc9f81aeC:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exeC:\Windows\SYSTEM32\KERNELBASE.dll3c9db54d-c35f-11e4-83d1-d43d7ef5c43f

Error: (03/05/2015 06:44:14 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: Avira.OE.ServiceHost.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.Xml.XmlException
Zásobník:
na System.Xml.XmlTextReaderImpl.Throw(System.Exception)
na System.Xml.XmlTextReaderImpl.ParseDocumentContent()
na System.Xml.XmlTextReaderImpl.Read()
na System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
na System.Xml.XmlDocument.Load(System.Xml.XmlReader)
na System.Xml.XmlDocument.Load(System.String)
na Avira.OE.WinCore.OeSharedSettingsAccessor.TryLoadXmlDocumentFromFile(Int32, System.TimeSpan)
na Avira.OE.WinCore.OeSharedSettingsAccessor.LoadXmlDocumentFromFile()
na Avira.OE.WinCore.OeSharedSettingsAccessor.Get(System.String)
na Avira.OE.WinCore.OeProductInfo.get_Culture()
na Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
na Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
na Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
na System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
na System.Threading.ThreadPoolWorkQueue.Dispatch()
na System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (03/05/2015 06:43:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Avira.OE.ServiceHost.exe1.1.32.2514754dca367KERNELBASE.dll6.3.9600.1727853eeb460e043435200012f7176401d0576be8432a06C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exeC:\Windows\SYSTEM32\KERNELBASE.dll33c4ba2c-c35f-11e4-83d1-d43d7ef5c43f

Error: (03/05/2015 06:43:56 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: Avira.OE.ServiceHost.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.Xml.XmlException
Zásobník:
na System.Xml.XmlTextReaderImpl.Throw(System.Exception)
na System.Xml.XmlTextReaderImpl.ParseDocumentContent()
na System.Xml.XmlTextReaderImpl.Read()
na System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
na System.Xml.XmlDocument.Load(System.Xml.XmlReader)
na System.Xml.XmlDocument.Load(System.String)
na Avira.OE.WinCore.OeSharedSettingsAccessor.TryLoadXmlDocumentFromFile(Int32, System.TimeSpan)
na Avira.OE.WinCore.OeSharedSettingsAccessor.LoadXmlDocumentFromFile()
na Avira.OE.WinCore.OeSharedSettingsAccessor.Get(System.String)
na Avira.OE.WinCore.OeProductInfo.get_Culture()
na Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
na Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
na Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
na System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
na System.Threading.ThreadPoolWorkQueue.Dispatch()
na System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (03/05/2015 06:43:43 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Zpracování změny relace se nezdařilo. System.NullReferenceException: Odkaz na objekt není nastaven na instanci objektu.
v Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
v System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)

Error: (03/05/2015 05:49:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: csko.exe1.1.1.148feaf5asteamclient.dll0.0.0.04ab4e25dc000041700025bba151401d0576463d1e260C:\Counter-Strike 1.6\csko.exec:\counter-strike 1.6\steamclient.dlla1c606b5-c357-11e4-83d0-d43d7ef5c43f

Error: (03/05/2015 03:18:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: csko.exe1.1.1.148feaf5asteamclient.dll0.0.0.04ab4e25dc000041700025bba71001d0574f3c2cccc6C:\Counter-Strike 1.6\csko.exec:\counter-strike 1.6\steamclient.dll79e4188d-c342-11e4-83d0-d43d7ef5c43f


CodeIntegrity Errors:
===================================
Date: 2015-01-15 14:31:04.314
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Movies App\Datamngr\x64\apcrtldr.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-01-15 14:31:04.204
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Movies App\Datamngr\apcrtldr.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-01-15 14:30:48.447
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Movies App\Datamngr\x64\apcrtldr.dll that did not meet the Windows signing level requirements.

Date: 2015-01-15 14:30:48.344
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Movies App\Datamngr\apcrtldr.dll that did not meet the Windows signing level requirements.

Date: 2015-01-13 22:10:16.212
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Movies App\Datamngr\x64\apcrtldr.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-01-13 22:10:16.100
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Movies App\Datamngr\apcrtldr.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-01-13 22:09:00.771
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Movies App\Datamngr\x64\apcrtldr.dll that did not meet the Windows signing level requirements.

Date: 2015-01-13 22:09:00.678
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Movies App\Datamngr\apcrtldr.dll that did not meet the Windows signing level requirements.

Date: 2015-01-13 13:50:42.927
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Movies App\Datamngr\x64\apcrtldr.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-01-13 13:50:42.818
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Movies App\Datamngr\apcrtldr.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

Processor: AMD A10-5800K APU with Radeon(tm) HD Graphics
Percentage of memory in use: 16%
Total physical RAM: 7377.8 MB
Available physical RAM: 6144.01 MB
Total Pagefile: 8529.8 MB
Available Pagefile: 7213.8 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.32 GB) (Free:770.34 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 03C337CD)
Partition 1: (Active) - (Size=200 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.3 GB) - (Type=07 NTFS)

==================== End Of Log ============================
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Kontrola

#8 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30878816 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7780120 2015-01-22] (SUPERAntiSpyware)
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\MountPoints2: {9211e7b4-6cfc-11e4-835d-d43d7ef5c43f} - "F:\HTC_Sync_Manager_PC.exe" 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSE1
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://ads.ads-ki.com
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.hal3000.cz
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-01-27]
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S1 MpKsl079cce74; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C08AEBD7-B0F8-4BD4-9997-FB49C15257FC}\MpKsl079cce74.sys [X]

C:\Program Files\McAfee Security Scan
C:\Program Files (x86)\Skype\Toolbars
2015-03-06 11:47 - 2015-03-06 11:48 - 00011495 _____ () C:\Users\Ondřej\Desktop\FRST.txt
2015-03-04 14:36 - 2015-03-04 14:24 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-03-04 14:25 - 2015-03-04 14:37 - 00009648 _____ () C:\zoek-results.log
2015-03-04 14:24 - 2015-03-04 14:37 - 00000000 ____D () C:\zoek_backup
2015-03-04 14:23 - 2015-03-04 14:23 - 01304576 _____ () C:\Users\Ondřej\Desktop\zoek.exe
2015-03-04 14:19 - 2015-03-04 14:20 - 00000000 ____D () C:\AdwCleaner
2015-03-04 14:17 - 2015-03-04 14:17 - 02126848 _____ () C:\Users\Ondřej\Desktop\adwcleaner_4.111.exe
2015-03-04 13:34 - 2015-03-04 13:34 - 00000000 ____D () C:\rsit
2015-03-04 13:34 - 2015-03-04 13:34 - 00000000 ____D () C:\Program Files\trend micro
2015-03-04 13:30 - 2015-03-04 13:30 - 01222144 _____ () C:\Users\Ondřej\Downloads\RSITx64.exe
2015-03-04 13:20 - 2015-03-05 18:43 - 00003628 _____ () C:\Windows\PFRO.log
2015-03-03 15:23 - 2015-03-05 18:43 - 00001624 _____ () C:\Windows\setupact.log
2015-03-02 13:20 - 2015-03-02 13:20 - 04582672 _____ (Avira Operations & Co. KG) C:\Users\Ondřej\Downloads\avira_en_av_5880303339__ws.exe
2015-03-02 12:41 - 2015-03-02 12:41 - 04362512 _____ (Piriform Ltd) C:\Users\Ondřej\Downloads\dfsetup218.exe
2015-03-02 12:40 - 2015-03-02 12:40 - 05325696 _____ (Piriform Ltd) C:\Users\Ondřej\Downloads\ccsetup503.exe
2015-03-02 12:43 - 2015-03-02 12:43 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Ondřej\Downloads\mbam-setup-2.0.4.1028.exe

Hosts:
EmptyTemp:
Reboot:
End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
novas1998
Návštěvník
Návštěvník
Příspěvky: 110
Registrován: 19 kvě 2013 07:56

Re: Kontrola

#9 Příspěvek od novas1998 »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-03-2015 01
Ran by Ondřej at 2015-03-07 18:54:03 Run:1
Running from C:\Users\Ondřej\Desktop
Loaded Profiles: Ondřej (Available profiles: Ondřej)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30878816 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7780120 2015-01-22] (SUPERAntiSpyware)
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\MountPoints2: {9211e7b4-6cfc-11e4-835d-d43d7ef5c43f} - "F:\HTC_Sync_Manager_PC.exe"

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSE1
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://ads.ads-ki.com
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.hal3000.cz
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-01-27]
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF HKU\S-1-5-21-1975057165-606630669-3827422118-1002\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S1 MpKsl079cce74; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C08AEBD7-B0F8-4BD4-9997-FB49C15257FC}\MpKsl079cce74.sys [X]

C:\Program Files\McAfee Security Scan
C:\Program Files (x86)\Skype\Toolbars
2015-03-06 11:47 - 2015-03-06 11:48 - 00011495 _____ () C:\Users\Ondřej\Desktop\FRST.txt
2015-03-04 14:36 - 2015-03-04 14:24 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-03-04 14:25 - 2015-03-04 14:37 - 00009648 _____ () C:\zoek-results.log
2015-03-04 14:24 - 2015-03-04 14:37 - 00000000 ____D () C:\zoek_backup
2015-03-04 14:23 - 2015-03-04 14:23 - 01304576 _____ () C:\Users\Ondřej\Desktop\zoek.exe
2015-03-04 14:19 - 2015-03-04 14:20 - 00000000 ____D () C:\AdwCleaner
2015-03-04 14:17 - 2015-03-04 14:17 - 02126848 _____ () C:\Users\Ondřej\Desktop\adwcleaner_4.111.exe
2015-03-04 13:34 - 2015-03-04 13:34 - 00000000 ____D () C:\rsit
2015-03-04 13:34 - 2015-03-04 13:34 - 00000000 ____D () C:\Program Files\trend micro
2015-03-04 13:30 - 2015-03-04 13:30 - 01222144 _____ () C:\Users\Ondřej\Downloads\RSITx64.exe
2015-03-04 13:20 - 2015-03-05 18:43 - 00003628 _____ () C:\Windows\PFRO.log
2015-03-03 15:23 - 2015-03-05 18:43 - 00001624 _____ () C:\Windows\setupact.log
2015-03-02 13:20 - 2015-03-02 13:20 - 04582672 _____ (Avira Operations & Co. KG) C:\Users\Ondřej\Downloads\avira_en_av_5880303339__ws.exe
2015-03-02 12:41 - 2015-03-02 12:41 - 04362512 _____ (Piriform Ltd) C:\Users\Ondřej\Downloads\dfsetup218.exe
2015-03-02 12:40 - 2015-03-02 12:40 - 05325696 _____ (Piriform Ltd) C:\Users\Ondřej\Downloads\ccsetup503.exe
2015-03-02 12:43 - 2015-03-02 12:43 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Ondřej\Downloads\mbam-setup-2.0.4.1028.exe

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value deleted successfully.
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\Software\Microsoft\Windows\CurrentVersion\Run\\SUPERAntiSpyware => value deleted successfully.
"HKU\S-1-5-21-1975057165-606630669-3827422118-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9211e7b4-6cfc-11e4-835d-d43d7ef5c43f}" => Key deleted successfully.
HKCR\CLSID\{9211e7b4-6cfc-11e4-835d-d43d7ef5c43f} => Key not found.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKCR\Wow6432Node\PROTOCOLS\Handler\skype4com" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D}" => Key deleted successfully.
"HKCR\PROTOCOLS\Handler\skypec2c" => Key deleted successfully.
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
HKCR\Wow6432Node\PROTOCOLS\Handler\skypec2c => Key not found.
"HKCR\Wow6432Node\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi => Moved successfully.
C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi => Moved successfully.
HKU\S-1-5-21-1975057165-606630669-3827422118-1002\Software\Mozilla\Firefox\Extensions\\{e4f94d1e-2f53-401e-8885-681602c0ddd8} => value deleted successfully.
c2cautoupdatesvc => Service deleted successfully.
c2cpnrsvc => Service deleted successfully.
McComponentHostService => Service deleted successfully.
EagleX64 => Service deleted successfully.
MpKsl079cce74 => Service deleted successfully.
C:\Program Files\McAfee Security Scan => Moved successfully.
C:\Program Files (x86)\Skype\Toolbars => Moved successfully.
C:\Users\Ondřej\Desktop\FRST.txt => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
"C:\Users\Ondřej\Desktop\zoek.exe" => File/Directory not found.
C:\AdwCleaner => Moved successfully.
"C:\Users\Ondřej\Desktop\adwcleaner_4.111.exe" => File/Directory not found.
C:\rsit => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Users\Ondřej\Downloads\RSITx64.exe => Moved successfully.
C:\Windows\PFRO.log => Moved successfully.
C:\Windows\setupact.log => Moved successfully.
C:\Users\Ondřej\Downloads\avira_en_av_5880303339__ws.exe => Moved successfully.
C:\Users\Ondřej\Downloads\dfsetup218.exe => Moved successfully.
C:\Users\Ondřej\Downloads\ccsetup503.exe => Moved successfully.
C:\Users\Ondřej\Downloads\mbam-setup-2.0.4.1028.exe => Moved successfully.
Could not reset Hosts.
EmptyTemp: => Removed 391.8 MB temporary data.


The system needed a reboot.

==== End of Fixlog 18:54:35 ====
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Kontrola

#10 Příspěvek od vyosek »

Jak se chova PC??
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
novas1998
Návštěvník
Návštěvník
Příspěvky: 110
Registrován: 19 kvě 2013 07:56

Re: Kontrola

#11 Příspěvek od novas1998 »

no snad už je v pohodě už se nic dalšího nenašlo? :)
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Kontrola

#12 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: DelFix https://toolslib.net/downloads/finish/2/
  • Stahnete a spustte
  • Ponechte zatrzitkou pouze u volby Remote disinfection tools
  • Kliknete na Run
:arrow: Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Zpět na „Preventivní kontroly logů“