Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu logu. (problém s Virus Web Protect )

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
rado145
Návštěvník
Návštěvník
Příspěvky: 64
Registrován: 22 bře 2014 08:49

Prosím o kontrolu logu. (problém s Virus Web Protect )

#1 Příspěvek od rado145 »

Dobrý den,prosím o kontrolu a případné dočištění mého OS systém.Dále bych Vás poprosil o odstranění stopZilla antiviru (při odinstalaci mi to hodilo chybku a nelze řádně odebrat) Děkuji moc !


Logfile of random's system information tool 1.10 (written by random/random)
Run by rado at 2015-05-03 08:15:20
Microsoft Windows 8.1
System drive C: has 48 GB (20%) free of 244 GB
Total RAM: 16327 MB (90% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:15:27, on 3. 5. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\STOPzilla\STOPzilla.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe
C:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe
C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Entertainment Center\EAXLoadr.exe
C:\Windows\SysWOW64\CTXFISPI.EXE
C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
C:\Program Files (x86)\Creative\ShareDLL\CADI\NotiMan.exe
C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\rado.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - e:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll
O4 - HKLM\..\Run: [RCSystem] "C:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe" RCSystem * -Startup
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files (x86)\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
O4 - HKCU\..\Run: [PCSpeedUp] C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe" Minimum
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [BitComet] "e:\Program Files (x86)\BitComet\BitComet.exe" /tray
O4 - Global Startup: Dell Display Manager.lnk = C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://e:\Program Files (x86)\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://e:\Program Files (x86)\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://e:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll/206 (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: BitComet Disk Boost Service (BITCOMET_HELPER_SERVICE) - www.BitComet.com - E:\Program Files (x86)\BitComet\tools\BitCometService.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PC Speed Up Service (PCSUService) - Unknown owner - C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: VIPRE (SBAMSvc) - ThreatTrack Security, Inc. - C:\Program Files (x86)\STOPzilla\SBAMSvc.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: STOPzilla Service (sz7) - iS3, Inc. - C:\Program Files (x86)\STOPzilla\SZServer.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8964 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe"
"C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
dashost.exe {556868a5-f846-4a69-8deacb7d36a5c0c5}
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\STOPzilla\SZServer.exe"
"C:\Program Files (x86)\STOPzilla\SBAMSvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 434fce44-2854-4622-af5e-3c63accdf7a6 1
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
taskhostex.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
"C:\Program Files (x86)\STOPzilla\STOPzilla.exe" /service
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe" Minimum
"C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe" -Embedding
"C:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe" RCSystem * -Startup
"C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Entertainment Center\EAXLoadr.exe"
"C:\Windows\SysWOW64\CTXFISPI.EXE" -Embedding
"C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
"C:\Program Files (x86)\Creative\ShareDLL\CADI\NotiMan.exe" -Embedding
"C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe"

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BackgroundRendererProcesses/Disallow/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group5 pct:10e stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/StandardR4/*PasswordGeneration/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledWithReno/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Default/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/default/*UwSInterstitialStatus/On/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Disabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5104 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --disable-gpu-compositing --channel="5104.2.948131174\174479115" /prefetch:673131151
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/Disallow/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group5 pct:10e stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/StandardR4/*PasswordGeneration/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledWithReno/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Default/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/default/*UwSInterstitialStatus/On/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Disabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5104 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --disable-gpu-compositing --channel="5104.5.762465247\602216915" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="5104.6.1928553223\841307068" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/Disallow/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group5 pct:10e stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/StandardR4/*PasswordGeneration/Disabled/PermissionBubbleRollout/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledWithReno/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Default/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/default/*UwSInterstitialStatus/On/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Disabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5104 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --disable-gpu-compositing --channel="5104.20.655665153\351353765" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5104.27.1796740247\1307134040" --use-gl=swiftshader --supports-dual-gpus=false --swiftshader-path="C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159" --gpu-driver-bug-workarounds=1,19,42,45,51 --gpu-vendor-id=0x10de --gpu-device-id=0x13c2 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.5012 --ignored=" --type=renderer " /prefetch:822062411
taskeng.exe {7F1D239A-E86B-408A-B9AB-20D5E83AAB38}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/Disallow/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group5 pct:10e stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/StandardR4/*PasswordGeneration/Disabled/PermissionBubbleRollout/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledWithReno/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Default/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/default/*UwSInterstitialStatus/On/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Disabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5104 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --enable-gpu-rasterization --enable-threaded-gpu-rasterization --disable-gpu-compositing --channel="5104.33.1728594050\1941297798" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/Disallow/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group5 pct:10e stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Extension (public)/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/StandardR4/*PasswordGeneration/Disabled/PermissionBubbleRollout/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledWithReno/RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/Default/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_76/*UMA-Uniformity-Trial-10-Percent/group_04/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_02/*UMA-Uniformity-Trial-50-Percent/default/*UwSInterstitialStatus/On/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/*Win32kLockdown/Disabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=5104 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --enable-gpu-rasterization --enable-threaded-gpu-rasterization --disable-gpu-compositing --channel="5104.38.164510768\267916649" /prefetch:673131151
"E:\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\PC SpeedUp Service Deactivator.job - C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe /dev0 /idle

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - e:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll [2013-11-29 767280]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"XboxStat"=C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2009-10-01 825184]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-04-09 2673296]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-04-09 1570672]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PCSpeedUp"=C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe [2014-09-23 314664]
"OscarEditor"=C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe [2012-03-20 3340288]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-02-19 7416088]
"BitComet"=e:\Program Files (x86)\BitComet\BitComet.exe [2013-12-31 14276784]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"RCSystem"=C:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe [2006-11-22 57344]
"AudioDrvEmulator"=C:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe [2006-11-22 57344]
"VolPanel"=C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [2006-12-06 180224]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Dell Display Manager.lnk - C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SBAMSvc]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nvidia.steamlauncher.exe]
"Debugger=""C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nvstreamer.exe]
"Debugger=""C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-05-03 08:15:20 ----D---- C:\rsit
2015-05-03 08:15:20 ----D---- C:\Program Files\trend micro
2015-05-02 22:24:13 ----ASH---- C:\swapfile.sys
2015-05-02 21:51:07 ----D---- C:\ProgramData\VIPRE
2015-05-02 21:44:31 ----D---- C:\Users\Radomír\AppData\Roaming\NVIDIA
2015-05-02 21:40:22 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2015-05-02 21:40:22 ----A---- C:\Windows\system32\nvspbridge64.dll
2015-05-02 21:39:52 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-05-02 21:39:48 ----D---- C:\ProgramData\NVIDIA
2015-05-02 21:39:47 ----A---- C:\Windows\system32\nvvsvc.exe
2015-05-02 21:39:47 ----A---- C:\Windows\system32\nvsvcr.dll
2015-05-02 21:39:47 ----A---- C:\Windows\system32\nvsvc64.dll
2015-05-02 21:39:47 ----A---- C:\Windows\system32\nvshext.dll
2015-05-02 21:39:47 ----A---- C:\Windows\system32\nvmctray.dll
2015-05-02 21:39:47 ----A---- C:\Windows\system32\nvcpl.dll
2015-05-02 21:39:41 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2015-05-02 21:39:41 ----A---- C:\Windows\system32\OpenCL.dll
2015-05-02 21:39:39 ----D---- C:\ProgramData\NVIDIA Corporation
2015-05-02 21:39:09 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2015-05-02 21:39:08 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-05-02 21:39:08 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-05-02 21:39:08 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-05-02 21:39:08 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-05-02 21:39:08 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-05-02 21:39:08 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-05-02 21:39:08 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-05-02 21:39:08 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-05-02 21:39:08 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-05-02 21:39:08 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-05-02 21:39:08 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-05-02 21:39:08 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-05-02 21:39:08 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-05-02 21:39:08 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvopencl.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvoglv64.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvmcvadgenco64.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvmcumd.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvinitx.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\NvIFR64.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvhdap64.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\NvFBC64.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvdispgenco6435012.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvdispco6435012.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvcuvid.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvcuda.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvcompiler.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvaudcaparm.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\nvaudcap64v.dll
2015-05-02 21:39:08 ----A---- C:\Windows\system32\drivers\nvvadarm.sys
2015-05-02 21:39:08 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-05-02 21:39:08 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2015-05-02 21:38:26 ----D---- C:\Program Files\NVIDIA Corporation
2015-05-02 21:14:52 ----SHD---- C:\Config.Msi
2015-05-02 21:05:04 ----D---- C:\Program Files (x86)\Google
2015-05-02 20:57:02 ----A---- C:\Windows\system32\drivers\gfiutil.sys
2015-05-02 20:57:02 ----A---- C:\Windows\system32\drivers\gfiark.sys
2015-05-02 20:53:54 ----D---- C:\ProgramData\STOPzilla!
2015-05-02 20:53:52 ----D---- C:\Program Files (x86)\STOPzilla
2015-05-02 20:25:38 ----A---- C:\autoexec.bat
2015-05-02 19:29:42 ----D---- C:\Users\Radomír\AppData\Roaming\Opera Software
2015-05-02 19:29:12 ----D---- C:\Users\Radomír\AppData\Roaming\Mozilla
2015-05-02 19:29:10 ----D---- C:\Program Files (x86)\Opera
2015-04-30 11:09:13 ----A---- C:\Windows\SYSWOW64\sdbinst.exe
2015-04-30 11:09:13 ----A---- C:\Windows\system32\sdbinst.exe
2015-04-30 11:09:12 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2015-04-30 11:09:12 ----A---- C:\Windows\system32\dwmcore.dll
2015-04-30 11:09:12 ----A---- C:\Windows\system32\drivers\ahcache.sys
2015-04-29 07:47:24 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2015-04-29 07:47:24 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2015-04-29 07:47:24 ----A---- C:\Windows\system32\dbghelp.dll
2015-04-29 07:47:24 ----A---- C:\Windows\system32\dbgeng.dll
2015-04-26 20:51:50 ----D---- C:\ProgramData\Rockstar Games
2015-04-21 19:21:32 ----A---- C:\Windows\system32\SettingsHandlers.dll
2015-04-21 19:21:31 ----AC---- C:\Windows\system32\drivers\USBHUB3.SYS
2015-04-21 19:21:31 ----AC---- C:\Windows\system32\drivers\bthhfenum.sys
2015-04-21 19:21:31 ----A---- C:\Windows\SYSWOW64\Windows.UI.Input.Inking.dll
2015-04-21 19:21:31 ----A---- C:\Windows\system32\Windows.UI.Input.Inking.dll
2015-04-21 19:21:31 ----A---- C:\Windows\system32\win32k.sys
2015-04-21 19:21:27 ----A---- C:\Windows\SYSWOW64\SRH.dll
2015-04-21 19:21:27 ----A---- C:\Windows\system32\SRH.dll
2015-04-21 19:21:20 ----A---- C:\Windows\SYSWOW64\certcli.dll
2015-04-21 19:21:20 ----A---- C:\Windows\system32\wpdshext.dll
2015-04-21 19:21:20 ----A---- C:\Windows\system32\wevtsvc.dll
2015-04-21 19:21:20 ----A---- C:\Windows\system32\drivers\udfs.sys
2015-04-21 19:21:20 ----A---- C:\Windows\system32\dpapisrv.dll
2015-04-21 19:21:20 ----A---- C:\Windows\system32\certcli.dll
2015-04-21 19:21:19 ----AC---- C:\Windows\system32\drivers\sdbus.sys
2015-04-21 19:21:19 ----AC---- C:\Windows\system32\drivers\dumpsd.sys
2015-04-21 19:21:19 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2015-04-21 19:21:19 ----A---- C:\Windows\SYSWOW64\PhotoMetadataHandler.dll
2015-04-21 19:21:19 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2015-04-21 19:21:12 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-04-21 19:21:12 ----A---- C:\Windows\system32\schannel.dll
2015-04-21 19:21:09 ----A---- C:\Windows\system32\diagtrack.dll
2015-04-16 15:45:32 ----D---- C:\Downloads
2015-04-16 15:45:28 ----D---- C:\Users\Radomír\AppData\Roaming\BitComet
2015-04-15 09:57:07 ----D---- C:\Program Files (x86)\Rockstar Games
2015-04-15 08:31:55 ----A---- C:\Windows\SYSWOW64\rascfg.dll
2015-04-15 08:31:55 ----A---- C:\Windows\system32\rascfg.dll
2015-04-15 08:31:55 ----A---- C:\Windows\system32\drivers\wanarp.sys
2015-04-15 08:31:55 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2015-04-15 08:31:46 ----A---- C:\Windows\system32\mshtml.dll
2015-04-15 08:31:45 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-04-15 08:31:44 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-04-15 08:31:44 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-04-15 08:31:44 ----A---- C:\Windows\system32\jscript9.dll
2015-04-15 08:31:44 ----A---- C:\Windows\system32\ieframe.dll
2015-04-15 08:31:43 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-04-15 08:31:43 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-04-15 08:31:43 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-04-15 08:31:43 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-04-15 08:31:43 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-04-15 08:31:43 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2015-04-15 08:31:43 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-04-15 08:31:43 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-04-15 08:31:43 ----A---- C:\Windows\system32\wininet.dll
2015-04-15 08:31:43 ----A---- C:\Windows\system32\vbscript.dll
2015-04-15 08:31:43 ----A---- C:\Windows\system32\urlmon.dll
2015-04-15 08:31:43 ----A---- C:\Windows\system32\mshtmled.dll
2015-04-15 08:31:43 ----A---- C:\Windows\system32\msfeeds.dll
2015-04-15 08:31:43 ----A---- C:\Windows\system32\jscript.dll
2015-04-15 08:31:43 ----A---- C:\Windows\system32\inetcomm.dll
2015-04-15 08:31:43 ----A---- C:\Windows\system32\iertutil.dll
2015-04-15 08:31:43 ----A---- C:\Windows\system32\ieapfltr.dll
2015-04-15 08:31:43 ----A---- C:\Windows\system32\ie4uinit.exe
2015-04-15 08:31:40 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-04-15 08:31:39 ----A---- C:\Windows\SYSWOW64\tracerpt.exe
2015-04-15 08:31:39 ----A---- C:\Windows\SYSWOW64\tdh.dll
2015-04-15 08:31:39 ----A---- C:\Windows\SYSWOW64\sechost.dll
2015-04-15 08:31:39 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-04-15 08:31:39 ----A---- C:\Windows\system32\wow64cpu.dll
2015-04-15 08:31:39 ----A---- C:\Windows\system32\wow64.dll
2015-04-15 08:31:39 ----A---- C:\Windows\system32\tracerpt.exe
2015-04-15 08:31:39 ----A---- C:\Windows\system32\tdh.dll
2015-04-15 08:31:39 ----A---- C:\Windows\system32\sechost.dll
2015-04-15 08:31:39 ----A---- C:\Windows\system32\ntdll.dll
2015-04-15 08:31:39 ----A---- C:\Windows\system32\microsoft-windows-system-events.dll
2015-04-15 08:31:38 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2015-04-15 08:31:38 ----A---- C:\Windows\system32\pku2u.dll
2015-04-15 08:31:38 ----A---- C:\Windows\system32\drivers\http.sys
2015-04-15 08:31:37 ----A---- C:\Windows\SYSWOW64\clfsw32.dll
2015-04-15 08:31:37 ----A---- C:\Windows\system32\drivers\clfs.sys
2015-04-15 08:31:37 ----A---- C:\Windows\system32\clfsw32.dll
2015-04-14 20:48:21 ----D---- C:\Program Files\Rockstar Games
2015-04-13 15:26:17 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-04-11 08:31:02 ----A---- C:\Windows\system32\wuaueng.dll
2015-04-11 08:31:02 ----A---- C:\Windows\system32\wuapi.dll
2015-04-11 08:31:01 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-04-11 08:31:01 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-04-11 08:31:01 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-04-11 08:31:01 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-04-11 08:31:01 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-04-11 08:31:01 ----A---- C:\Windows\system32\wuwebv.dll
2015-04-11 08:31:01 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2015-04-11 08:31:01 ----A---- C:\Windows\system32\wups2.dll
2015-04-11 08:31:01 ----A---- C:\Windows\system32\wups.dll
2015-04-11 08:31:01 ----A---- C:\Windows\system32\wudriver.dll
2015-04-11 08:31:01 ----A---- C:\Windows\system32\wucltux.dll
2015-04-11 08:31:01 ----A---- C:\Windows\system32\wuauclt.exe
2015-04-11 08:31:01 ----A---- C:\Windows\system32\wuapp.exe
2015-04-11 08:31:01 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-04-11 08:31:01 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-04-11 08:31:01 ----A---- C:\Windows\system32\storewuauth.dll
2015-04-10 22:41:48 ----D---- C:\Program Files\Microsoft Xbox 360 Accessories
2015-04-10 22:04:27 ----D---- C:\Users\Radomír\AppData\Roaming\Injustice
2015-04-08 09:52:01 ----D---- C:\Windows\system32\appraiser
2015-04-08 09:51:23 ----A---- C:\Windows\system32\invagent.dll
2015-04-08 09:51:23 ----A---- C:\Windows\system32\generaltel.dll
2015-04-08 09:51:23 ----A---- C:\Windows\system32\devinv.dll
2015-04-08 09:51:23 ----A---- C:\Windows\system32\appraiser.dll
2015-04-08 09:51:23 ----A---- C:\Windows\system32\aepic.dll
2015-04-08 09:51:23 ----A---- C:\Windows\system32\aepdu.dll
2015-04-08 09:51:23 ----A---- C:\Windows\system32\aeinv.dll
2015-04-08 09:51:23 ----A---- C:\Windows\system32\acmigration.dll
2015-04-08 09:51:21 ----A---- C:\Windows\system32\lsm.dll
2015-04-04 08:07:13 ----D---- C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP

======List of files/folders modified in the last 1 month======

2015-05-03 08:15:27 ----D---- C:\Windows\Temp
2015-05-03 08:15:20 ----RD---- C:\Program Files
2015-05-03 07:58:45 ----RD---- C:\Windows\System32
2015-05-03 07:58:45 ----D---- C:\Windows\Inf
2015-05-03 07:58:45 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-05-03 07:52:36 ----D---- C:\Program Files (x86)\Zrychleni Pocitace
2015-05-02 22:22:41 ----D---- C:\Program Files (x86)\Steam
2015-05-02 22:21:16 ----D---- C:\Users\Radomír\AppData\Roaming\Victor Vran
2015-05-02 22:00:00 ----D---- C:\Windows\system32\sru
2015-05-02 21:51:27 ----D---- C:\Windows
2015-05-02 21:48:20 ----D---- C:\Windows\Logs
2015-05-02 21:48:20 ----D---- C:\Windows\debug
2015-05-02 21:46:35 ----D---- C:\Users\Radomír\AppData\Roaming\QuickScan
2015-05-02 21:42:20 ----D---- C:\Windows\system32\Tasks
2015-05-02 21:40:22 ----D---- C:\Windows\SysWOW64
2015-05-02 21:40:21 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-05-02 21:40:18 ----D---- C:\Windows\system32\DriverStore
2015-05-02 21:40:18 ----D---- C:\Windows\system32\drivers
2015-05-02 21:39:48 ----HD---- C:\ProgramData
2015-05-02 21:39:47 ----D---- C:\Windows\Help
2015-05-02 21:34:51 ----D---- C:\Windows\Prefetch
2015-05-02 21:22:39 ----SHD---- C:\Windows\Installer
2015-05-02 21:05:20 ----RD---- C:\Program Files (x86)
2015-05-02 21:05:04 ----D---- C:\Windows\Tasks
2015-05-02 19:37:44 ----D---- C:\Windows\apppatch
2015-05-02 19:13:33 ----RSD---- C:\Windows\assembly
2015-05-02 17:03:10 ----D---- C:\Windows\SoftwareDistribution
2015-05-02 10:08:27 ----D---- C:\Windows\Microsoft.NET
2015-05-01 23:05:59 ----D---- C:\Users\Radomír\AppData\Roaming\vlc
2015-05-01 07:56:45 ----HD---- C:\Program Files\WindowsApps
2015-05-01 07:56:45 ----D---- C:\Windows\AppReadiness
2015-04-30 11:16:35 ----D---- C:\ProgramData\Origin
2015-04-30 11:14:44 ----D---- C:\Windows\system32\config
2015-04-30 11:09:52 ----D---- C:\Windows\WinSxS
2015-04-30 11:09:18 ----D---- C:\Windows\CbsTemp
2015-04-29 14:13:48 ----D---- C:\Users\Radomír\AppData\Roaming\Origin
2015-04-28 16:41:45 ----D---- C:\Windows\system32\LogFiles
2015-04-26 07:55:19 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-04-24 08:45:12 ----D---- C:\Windows\rescache
2015-04-22 14:37:20 ----SHD---- C:\$Recycle.Bin
2015-04-22 08:15:22 ----D---- C:\Program Files\WinRAR
2015-04-21 19:21:56 ----RD---- C:\Windows\ImmersiveControlPanel
2015-04-21 19:21:48 ----D---- C:\Windows\system32\AdvancedInstallers
2015-04-21 19:21:45 ----RSD---- C:\Windows\Fonts
2015-04-21 19:20:58 ----D---- C:\Windows\system32\catroot2
2015-04-17 21:31:22 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-04-16 20:48:48 ----D---- C:\Windows\system32\drivers\etc
2015-04-15 21:46:30 ----RD---- C:\Users
2015-04-15 08:34:36 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-04-15 08:34:36 ----D---- C:\Windows\system32\cs-CZ
2015-04-15 08:34:36 ----D---- C:\Program Files\Internet Explorer
2015-04-15 08:34:14 ----D---- C:\Windows\system32\MRT
2015-04-15 08:32:29 ----A---- C:\Windows\system32\MRT.exe
2015-04-14 01:24:21 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-04-13 07:56:48 ----D---- C:\Program Files (x86)\Origin
2015-04-10 22:41:49 ----D---- C:\Windows\system32\catroot
2015-04-09 18:18:23 ----SHD---- C:\System Volume Information
2015-04-09 02:58:18 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2015-04-09 02:58:18 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-04-09 02:58:18 ----A---- C:\Windows\system32\nvspcap64.dll
2015-04-09 02:58:18 ----A---- C:\Windows\system32\nvapi64.dll
2015-04-08 18:57:47 ----D---- C:\Program Files (x86)\Diablo III
2015-04-08 10:18:04 ----D---- C:\Windows\AppCompat
2015-04-08 09:52:01 ----SD---- C:\Windows\system32\CompatTel
2015-04-08 09:52:01 ----SD---- C:\ProgramData\Microsoft
2015-04-08 09:52:01 ----D---- C:\Windows\system32\wbem
2015-04-07 21:58:43 ----D---- C:\Program Files (x86)\Battle.net
2015-04-04 09:21:38 ----D---- C:\Windows\LiveKernelReports

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Wof;Windows Overlay File System Filter Driver; C:\Windows\system32\drivers\Wof.sys [2014-03-13 157016]
R2 sbapifs;sbapifs; C:\Windows\system32\DRIVERS\sbapifs.sys [2013-10-01 88928]
R3 CT20XUT.SYS;CT20XUT.SYS; C:\Windows\System32\drivers\CT20XUT.SYS [2014-03-01 205080]
R3 ctac32k;@oem7.inf,%CTAC32K.SvcDesc%;Creative AC3 Software Decoder; C:\Windows\system32\drivers\ctac32k.sys [2014-03-01 582936]
R3 ctaud2k;@oem7.inf,%CTAUD2K.SvcDesc%;Creative Audio Driver (WDM); C:\Windows\system32\drivers\ctaud2k.sys [2014-03-01 689048]
R3 CTEXFIFX.SYS;CTEXFIFX.SYS; C:\Windows\System32\drivers\CTEXFIFX.SYS [2014-03-01 1419544]
R3 CTHWIUT.SYS;CTHWIUT.SYS; C:\Windows\System32\drivers\CTHWIUT.SYS [2014-03-01 97048]
R3 ctprxy2k;@oem7.inf,%CTPRXY2K.SvcDesc%;Creative Proxy Driver; C:\Windows\system32\drivers\ctprxy2k.sys [2014-03-01 18200]
R3 ctsfm2k;@oem7.inf,%CTSFM2K.SvcDesc%;Creative SoundFont Management Device Driver; C:\Windows\system32\drivers\ctsfm2k.sys [2014-03-01 215320]
R3 emupia;@oem7.inf,%EMUPIA.SvcDesc%;E-mu Plug-in Architecture Driver; C:\Windows\system32\drivers\emupia2k.sys [2014-03-01 120600]
R3 ha20x2k;@oem7.inf,%HA20X.SvcDesc%;Creative 20X HAL Driver; C:\Windows\system32\drivers\ha20x2k.sys [2014-03-01 1564440]
R3 LgBttPort;@oem17.inf,%Lgsi.Service.Name%;LGE Bluetooth TransPort; C:\Windows\system32\DRIVERS\lgbtpt64.sys [2009-09-29 16384]
R3 lgbusenum;@oem15.inf,%busenum.SVCDESC%;LG Bluetooth Bus Enumerator; C:\Windows\System32\drivers\lgbtbs64.sys [2009-09-29 14848]
R3 LGVMODEM;@oem16.inf,%LGSI.Service.Name%;LGE Virtual Modem; C:\Windows\system32\DRIVERS\lgvmdm64.sys [2009-09-29 17408]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-04-14 25816]
R3 MEIx64;@oem5.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\HECIx64.sys [2012-07-17 62784]
R3 NVHDA;@oem11.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-04-09 195728]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2015-04-09 10423952]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-04-09 19600]
R3 nvvad_WaveExtensible;@oem13.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-04-09 38032]
R3 NVVADARM;@oem4.inf,%NVVADARM.SvcDesc%;NVIDIA Miracast Audio; C:\Windows\system32\drivers\nvvadarm.sys [2015-04-09 39056]
R3 ossrv;@oem7.inf,%OSSRV.SvcDesc%;Creative OS Services Driver; C:\Windows\system32\drivers\ctoss2k.sys [2014-03-01 181528]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
R3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2014-03-18 121088]
S3 Andbus;@oem28.inf,%LGSI.Service.Desc%;LGE Android Platform Composite USB Device; C:\Windows\System32\drivers\lgandbus64.sys [2012-03-02 19456]
S3 AndDiag;@oem30.inf,%Lgsi.Service.Name%;LGE Android Platform USB Serial Port; C:\Windows\system32\DRIVERS\lganddiag64.sys [2012-03-02 27648]
S3 AndGps;@oem31.inf,%Lgsi.Service.Name%;LGE Android Platform USB GPS NMEA Port; C:\Windows\system32\DRIVERS\lgandgps64.sys [2012-03-02 27136]
S3 ANDModem;@oem29.inf,%LGSI.Service.Name%;LGE Android Platform USB Modem; C:\Windows\system32\DRIVERS\lgandmodem64.sys [2012-03-02 34304]
S3 CT20XUT;CT20XUT; C:\Windows\system32\drivers\CT20XUT.SYS [2014-03-01 205080]
S3 CTEXFIFX;CTEXFIFX; C:\Windows\system32\drivers\CTEXFIFX.SYS [2014-03-01 1419544]
S3 CTHWIUT;CTHWIUT; C:\Windows\system32\drivers\CTHWIUT.SYS [2014-03-01 97048]
S3 gfiark;gfiark; C:\Windows\system32\drivers\gfiark.sys [2013-05-23 41032]
S3 gfiutil;gfiutil; C:\Windows\system32\drivers\gfiutil.sys [2013-09-04 31264]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-04-14 64216]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CTAudSvcService;Creative Audio Service; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [2011-10-19 423424]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2014-10-29 38792]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-04-09 1152144]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-04-14 1871160]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-04-09 1878672]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-04-09 22995600]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-04-08 936264]
R2 PCSUService;PC Speed Up Service; C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe [2014-09-23 430888]
R2 SBAMSvc;VIPRE; C:\Program Files (x86)\STOPzilla\SBAMSvc.exe [2014-01-07 3937472]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-04-08 410952]
R2 sz7;STOPzilla Service; C:\Program Files (x86)\STOPzilla\SZServer.exe [2015-04-06 1592624]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-02 107848]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-04-14 1080120]
S3 BITCOMET_HELPER_SERVICE;BitComet Disk Boost Service; E:\Program Files (x86)\BitComet\tools\BitCometService.exe [2013-11-29 1296728]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2015-03-24 79360]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-02 107848]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-04-13 1931632]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-04-14 836288]

-----------------EOF-----------------

Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Prosím o kontrolu logu. (problém s Virus Web Protect )

#2 Příspěvek od Márty84 »

Zdravim :)

:arrow: Nez pouzijeme silu, zkuste STOPZillu odinstalovat pomoci Reva http://www.stahuj.centrum.cz/utility_a_ ... installer/ (pri jeho instalaci pozorne ctete, co odklikavate, musite odmitnout pripadne pridavky)

:arrow: Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).

rado145
Návštěvník
Návštěvník
Příspěvky: 64
Registrován: 22 bře 2014 08:49

Re: Prosím o kontrolu logu. (problém s Virus Web Protect )

#3 Příspěvek od rado145 »

# AdwCleaner v4.203 - Log vytvořen 03/05/2015 v 08:47:13
# Aktualizováno 30/04/2015 by Xplode
# Databáze : 2015-05-02.1 [Server]
# Operační system : Windows 8.1 (x64)
# Uživatelské jméno : rado - RADEK
# Spuštěno z : E:\Downloads\adwcleaner_4.203.exe
# Nastavení : Čištění

***** [ Služby ] *****

[#] Služba Smazáno : pcsuservice

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zrychleni Pocitace
Složka Smazáno : C:\Program Files (x86)\Zrychleni Pocitace

***** [ Naplánované úlohy ] *****

Úloha Smazáno : PC SpeedUp Service Deactivator
Úloha Smazáno : Web Protector Plus
Úloha Smazáno : LaunchPreSignup
Úloha Smazáno : Web Protector Plus Server

***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKCU\Software\Google\Chrome\Extensions\kfecnpmgnlnbmipaogfhoacoioifjgko
Klíč Smazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\kfecnpmgnlnbmipaogfhoacoioifjgko
Hodnota Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [pcspeedup]
Klíč Smazáno : HKLM\SOFTWARE\Classes\PCSU.Registry
Klíč Smazáno : HKLM\SOFTWARE\Classes\PCSU.SysUtils
Klíč Smazáno : HKLM\SOFTWARE\Classes\PCSU.SysUtils.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\PCSU.Registry.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{B89F5C49-51DB-4974-AB5A-E25901AA339C}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{E9B5B0D2-D08A-49FC-8B5C-159B60BAA268}
Klíč Smazáno : HKCU\Software\Speedchecker Limited
Klíč Smazáno : HKCU\Software\UpdateStar
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PCSU-SL_is1

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Google Chrome v42.0.2311.135

[C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Extension] : kfecnpmgnlnbmipaogfhoacoioifjgko

*************************

AdwCleaner[R0].txt - [2150 bytů] - [03/05/2015 08:46:17]
AdwCleaner[S0].txt - [1949 bytů] - [03/05/2015 08:47:13]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2007 bytů] ##########
Jinak co se týče toho unistal programu bez odezvy :-(

Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Prosím o kontrolu logu. (problém s Virus Web Protect )

#4 Příspěvek od Márty84 »

rado145 píše:Jinak co se týče toho unistal programu bez odezvy :-(
Zkuste to v nouzovem rezimu. Pokud to nepujde ani tam, odstrelim to silou.


:arrow: Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=29&t=137928 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).

rado145
Návštěvník
Návštěvník
Příspěvky: 64
Registrován: 22 bře 2014 08:49

Re: Prosím o kontrolu logu. (problém s Virus Web Protect )

#5 Příspěvek od rado145 »

MBAM nalezeno 0 hrozeb .Teď jdu do toho nouzového režimu a uvidíme.

rado145
Návštěvník
Návštěvník
Příspěvky: 64
Registrován: 22 bře 2014 08:49

Re: Prosím o kontrolu logu. (problém s Virus Web Protect )

#6 Příspěvek od rado145 »

Bohužel problém nevyřeším ani v nouzovém režimu . :(

Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Prosím o kontrolu logu. (problém s Virus Web Protect )

#7 Příspěvek od Márty84 »

:arrow: Dejte logy podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100 - vypnete na chvili antivir, je mozne, ze to bude blokovat jako skodnou, ale pouzivame to porad, jedna se o falesny poplach :)
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).

rado145
Návštěvník
Návštěvník
Příspěvky: 64
Registrován: 22 bře 2014 08:49

Re: Prosím o kontrolu logu. (problém s Virus Web Protect )

#8 Příspěvek od rado145 »

<?xml version="1.0" encoding="UTF-16" ?>
<mbam-log>
<header>
<date>2015/05/03 09:36:52 +0200</date>
<logfile>mbam-log-2015-05-03 (09-36-50).xml</logfile>
<isadmin>yes</isadmin>
</header>
<engine>
<version>2.01.6.1022</version>
<malware-database>v2015.05.02.04</malware-database>
<rootkit-database>v2015.04.21.01</rootkit-database>
<license>free</license>
<file-protection>disabled</file-protection>
<web-protection>disabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
<system>
<osversion>Windows 8.1</osversion>
<arch>x64</arch>
<username>rado</username>
<filesys>NTFS</filesys>
</system>
<summary>
<type>threat</type>
<result>completed</result>
<objects>342446</objects>
<time>287</time>
<processes>0</processes>
<modules>0</modules>
<keys>0</keys>
<values>0</values>
<datas>0</datas>
<folders>0</folders>
<files>0</files>
<sectors>0</sectors>
</summary>
<options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
<items>
</items>
</mbam-log>

rado145
Návštěvník
Návštěvník
Příspěvky: 64
Registrován: 22 bře 2014 08:49

Re: Prosím o kontrolu logu. (problém s Virus Web Protect )

#9 Příspěvek od rado145 »

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-05-2015
Ran by rado at 2015-05-03 09:45:26
Running from E:\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-311206292-3038123496-1551756549-500 - Administrator - Disabled)
Guest (S-1-5-21-311206292-3038123496-1551756549-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-311206292-3038123496-1551756549-1003 - Limited - Enabled)
rado (S-1-5-21-311206292-3038123496-1551756549-1001 - Administrator - Enabled) => C:\Users\Radomír

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: STOPzilla AntiVirus (Enabled - Up to date) {17032AB1-6644-0721-EEB5-A39B8B646009}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: STOPzilla AntiVirus (Enabled - Up to date) {AC62CB55-407E-08AF-D405-98E9F0E32AB4}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AIDA64 Extreme v5.00 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 5.00 - FinalWire Ltd.)
Aktualizace NVIDIA 2.4.1.21 (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version: - Ubisoft)
Assassin's Creed Unity (HKLM-x32\...\Uplay Install 720) (Version: - Ubisoft)
Auslogics DiskDefrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 5.3.0.0 - Auslogics Labs Pty Ltd)
Auslogics Registry Defrag (HKLM-x32\...\{D627784F-B3EE-44E8-96B1-9509B991EA34}_is1) (Version: 8.3.0.0 - Auslogics Labs Pty Ltd)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BioShock Infinite (HKLM-x32\...\Steam App 8870) (Version: - Irrational Games)
BitComet 1.37 (HKLM-x32\...\BitComet) (Version: 1.37 - CometNetwork)
CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform)
Company of Heroes 2 (HKLM-x32\...\Steam App 231430) (Version: - Relic Entertainment)
CPUID CPU-Z 1.72 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
Creative Audio Control Panel (HKLM-x32\...\AudioCS) (Version: 3.00 - Creative Technology Limited)
Creative MediaSource 5 (HKLM-x32\...\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}) (Version: 5.00 - )
Creative System Information (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited)
Crysis®3 (HKLM-x32\...\{4198AE83-A3C6-4C41-85C8-EC63E990696E}) (Version: 1.0.0.0 - Electronic Arts)
Čeština do hry South Park: Klacek Pravdy verze 1.0 (HKLM-x32\...\{C1EA3034-6A86-4C18-A91F-SPSOTCZ7E0FE}_is1) (Version: 1.0 - Ubisoft)
Čeština do The Bureau XCOM Declassified (HKU\S-1-5-21-311206292-3038123496-1551756549-1001\...\Čeština do The Bureau XCOM Declassified) (Version: - )
Čeština The Bureau XCOM Declassified (HKLM-x32\...\Čeština The Bureau XCOM Declassified) (Version: - )
Dead Rising 3 (HKLM-x32\...\Steam App 265550) (Version: - Capcom Game Studio Vancouver)
Dell Display Manager (HKLM-x32\...\{AC50C05D-9D57-40F5-B2EF-AC402F14312B}_is1) (Version: - EnTech Taiwan)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Dragon Age™: Inkwizycja (HKLM-x32\...\{DC4C36DC-4E5B-4262-B0C7-157DF534B969}) (Version: 1.0.0.7 - Electronic Arts)
Dying Light (HKLM-x32\...\Steam App 239140) (Version: - Techland)
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version: - Ubisoft)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North)
Grim Dawn (HKLM-x32\...\Steam App 219990) (Version: - Crate Entertainment)
Intel(R) Update Manager (x32 Version: 1.6.3.70 - Intel Corporation) Hidden
Intel® SSD Toolbox (HKLM-x32\...\{06D085C8-1F00-11B2-96A7-8f0CE39193ED}) (Version: 3.2.3.400 - Intel Corporation)
Kingdoms of Amalur: Reckoning (HKLM-x32\...\{6A9D1594-7791-48f5-9CAA-DE9BCB968320}) (Version: 1.0.0.0 - Electronic Arts)
LG Bluetooth Drivers (HKLM-x32\...\{AC7EE5F1-0DE4-4256-8E43-92B73C8E6019}) (Version: 1.1 - LG Electronics)
LG PC Suite IV (HKLM-x32\...\LG PC Suite IV) (Version: 4.3.80.20121017 - LG Electronics)
LG United Mobile Drivers (HKLM-x32\...\{5DB849D6-9392-4FB7-9ABB-87ED433152E5}) (Version: 3.8.1 - LG Electronics)
Lords Of The Fallen (HKLM-x32\...\Steam App 265300) (Version: - CI Games)
Mafia II (HKLM-x32\...\Steam App 50130) (Version: - 2K Czech)
Malwarebytes Anti-Malware verze 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Max Payne 3 (HKLM-x32\...\Steam App 204100) (Version: - Rockstar Studios)
Metro: Last Light (HKLM-x32\...\Steam App 43160) (Version: - 4A Games)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Middle-earth: Shadow of Mordor (HKLM-x32\...\Steam App 241930) (Version: - Monolith Productions, Inc.)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Ovladač 3D Vision 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 349.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 349.95 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
NVIDIA Virtuální audio Miracast 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 350.12 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
OSCAR Editor (x32 Version: 12.03.0004 - A4TECH) Hidden
Ovládací panel NVIDIA 350.12 (Version: 350.12 - NVIDIA Corporation) Hidden
Risen 3 - Titan Lords (HKLM-x32\...\Steam App 249230) (Version: - Piranha Bytes)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)
Ryse: Son of Rome (HKLM-x32\...\Steam App 302510) (Version: - Crytek)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Sound Blaster Tactic(3D) Alpha (HKLM-x32\...\{2226247D-9846-4370-A1EF-FAA6958F7632}) (Version: 1.0 - Creative Technology Limited)
Sound Blaster X-Fi (HKLM-x32\...\{18F11181-EA1A-42AE-AF89-4867C7F7A6FA}) (Version: 1.0 - )
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version: - Obsidian Entertainment)
Star Wars: The Force Unleashed II (HKLM-x32\...\Steam App 32500) (Version: - Aspyr Studios)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp)
The Bureau: XCOM Declassified (HKLM-x32\...\Steam App 65930) (Version: - 2K Marin)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
Torchlight II (HKLM-x32\...\Steam App 200710) (Version: - Runic Games)
Transcend SSD Scope version 2.4.0 (HKLM-x32\...\{AD8E7B8B-EAD8-4B9F-882E-7970ABFACE34}_is1) (Version: 2.4.0 - Transcend Information, Inc.)
Uplay (HKLM-x32\...\Uplay) (Version: 5.1 - Ubisoft)
Victor Vran (HKLM-x32\...\Steam App 345180) (Version: - Haemimont Games)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.0 - VideoLAN)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Wolfenstein: The New Order (HKLM-x32\...\Steam App 201810) (Version: - Machine Games)
X7 Oscar Editor (HKLM-x32\...\InstallShield_{3C2379D2-337A-4FFA-9017-BDFB80EC0931}) (Version: 12.03.0004 - A4TECH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points =========================

ATTENTION: System Restore is disabled.

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0E318D5B-DA9A-4213-9C11-43E856CF82AF} - System32\Tasks\Opera N Sunday => C:\Program Files (x86)\Opera\launcher.exe
Task: {12C67101-5F6E-4080-8D04-0AC729C3EE1D} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6055C210-5B34-498D-9956-EEC9D157FA6E} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {7DF8F66C-11D7-428A-9812-D0589458D7AF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-02] (Google Inc.)
Task: {8BE99224-08D8-4EEA-9750-37C97DD76ECD} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {D15F7439-F3A2-4FDA-84CE-DE5422AB30AC} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-15] (Microsoft Corporation)
Task: {E5F4E8D0-C452-47CD-9369-A824AD3C6A71} - System32\Tasks\Opera N Saturday => C:\Program Files (x86)\Opera\launcher.exe
Task: {E74787F4-1E16-49C8-A768-B33B78BB8A38} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {F1B6666C-345F-4184-81D1-1E5089FFBD9F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-02-19] (Piriform Ltd)
Task: {F2EAC0F0-5E7D-44CE-AD47-B9DD76D8F4C7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-02] (Google Inc.)
Task: {F46C7243-E555-43AA-B1AC-D299A6520B73} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\Bootstrap.exe [2013-07-18] (Intel Corporation)
Task: {FFD606E3-9EFF-418E-AAAF-CBEB75CFD096} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\Bootstrap.exe [2013-07-18] (Intel Corporation)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-05-02 21:39 - 2015-04-08 23:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-03-20 12:59 - 2012-03-20 12:59 - 03340288 _____ () C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe
2015-05-02 21:40 - 2015-04-09 02:58 - 00721552 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster64.dll
2015-05-02 21:40 - 2015-04-09 02:58 - 00854160 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk64.dll
2015-05-02 20:57 - 2015-04-23 23:03 - 00184184 _____ () C:\Program Files (x86)\STOPzilla\Definitions\libBase64.dll
2015-05-02 20:57 - 2015-04-23 23:03 - 00175992 _____ () C:\Program Files (x86)\STOPzilla\Definitions\libMachoUniv.dll
2015-05-02 21:40 - 2015-04-09 02:58 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2010-12-02 18:56 - 2010-12-02 18:56 - 00815104 _____ () C:\Program Files (x86)\OSCAR Editor X7\Data\X7\Forms\OSD_Text\OSD_Text.dll
2011-01-09 21:45 - 2011-01-09 21:45 - 00088064 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_MouseDeviceManager.dll
2012-02-07 12:20 - 2012-02-07 12:20 - 02413568 _____ () C:\Program Files (x86)\OSCAR Editor X7\Data\X7\Forms\ScreenCapture\ScreenCapture.dll
2011-03-21 20:33 - 2011-03-21 20:33 - 00999424 _____ () C:\Program Files (x86)\OSCAR Editor X7\Data\X7\Forms\TrayIconWebAdvertisement\TrayIconWebAdvertisement.dll
2010-09-20 15:18 - 2010-09-20 15:18 - 00085504 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_ZoomControl.dll
2010-09-20 15:18 - 2010-09-20 15:18 - 00054272 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_ScrollbarControl.dll
2011-04-12 16:14 - 2011-04-12 16:14 - 00063488 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_AnalyzeGesturesInRight.dll
2010-11-01 21:16 - 2010-11-01 21:16 - 00062976 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_AnalyzeGesturesInOne.dll
2011-08-10 14:43 - 2011-08-10 14:43 - 00118272 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_Wheel4D.dll
2015-05-02 21:05 - 2015-04-28 04:07 - 14980424 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\PepperFlash\pepflashplayer.dll
2015-05-03 08:00 - 2014-02-10 13:44 - 04592128 _____ () C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libglesv2.dll
2015-05-03 08:00 - 2014-02-10 13:44 - 00112128 _____ () C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libegl.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Radomír\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SBAMSvc => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-311206292-3038123496-1551756549-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Radomír\AppData\Roaming\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
DNS Servers: 10.0.0.138

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run: => "XboxStat"
HKU\S-1-5-21-311206292-3038123496-1551756549-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-311206292-3038123496-1551756549-1001\...\StartupApproved\Run: => "BitComet"

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{1749A295-00A0-454E-9722-E3EA9DDB0885}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F468817B-CED0-4F9B-A928-98BA4E61DA0C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6A4768FD-6641-4E32-B9C0-B19CD2CC2BBB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{3E18FCD0-9C48-4DE7-B7FC-34329BD631D7}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{15C7F779-EB59-4AD7-ABC6-C4CE6A9EA122}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{B6AC3C3E-424D-4A37-86BC-BA44A9D3CDD6}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{FCE2B95E-1C19-4FE8-BB36-790182CF7B38}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{E53F61E4-62DE-4164-A876-CA37F3075E75}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{75F0C91C-0AF7-41DA-9C77-2722C5BC7A19}] => (Allow) D:\Uplay\cache\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{E2FAA429-80CE-40C0-9163-4EFEAF27F640}] => (Allow) D:\Uplay\cache\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{4D780989-AF9A-4F00-AFD1-E2416F0A5352}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grim Dawn\Grim Dawn.exe
FirewallRules: [{C8F03522-3177-4F23-B7AB-48CA70678B76}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grim Dawn\Grim Dawn.exe
FirewallRules: [{B028848C-765D-4176-B24F-6DA3E6FC4CBA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Victor Vran\VictorVranSteam.exe
FirewallRules: [{A54A931F-192F-4934-A67D-20B5F4B6C59E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Victor Vran\VictorVranSteam.exe
FirewallRules: [{D59D790C-94A1-49AE-BCAE-0F693240B35B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{2AB81F50-1DA6-449A-A236-D8EC00A25505}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{063FCFC0-A064-4FF0-B1AC-BB14B0EC50E5}] => (Allow) D:\Uplay\cache\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{6128AA11-88D0-43E8-9A86-8424AAC9281E}] => (Allow) D:\Uplay\cache\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{AC33698A-FA0A-43CA-8193-6A96851A61B6}] => (Allow) D:\Uplay\cache\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{B0648B59-DB63-4054-84C2-36D58CE02DE8}] => (Allow) D:\Uplay\cache\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{6E7B9EB5-30CA-4F73-B3D4-8B8AA5D198B2}] => (Allow) G:\SteamLibrary\steamapps\common\Lords Of The Fallen\bin\LordsOfTheFallen.exe
FirewallRules: [{1C34ABBE-88DC-41C3-B43E-4341AC1C89BD}] => (Allow) G:\SteamLibrary\steamapps\common\Lords Of The Fallen\bin\LordsOfTheFallen.exe
FirewallRules: [{6D352026-08BA-4496-9D9D-1C2640B837D8}] => (Allow) G:\SteamLibrary\steamapps\common\deadrising3\deadrising3.exe
FirewallRules: [{1F2E1023-977E-4096-97EE-453478193B54}] => (Allow) G:\SteamLibrary\steamapps\common\deadrising3\deadrising3.exe
FirewallRules: [{EEF4D05C-E2D9-47D6-A0C2-FE19A3DB6AD8}] => (Allow) G:\Uplay\cache\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{A1383C14-5931-43B2-9B39-E4C4E9025E5B}] => (Allow) G:\Uplay\cache\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{13EBD659-8E7A-49AB-8CA2-9D317E8D0A5C}] => (Allow) G:\Uplay\cache\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{8BA5E02C-B3EB-4EDB-9D57-C5B44FBE4767}] => (Allow) G:\Uplay\cache\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{B74754EF-D8B5-4109-8758-DF4D39521FF3}] => (Allow) G:\SteamLibrary\steamapps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{AC258F3A-0F4E-4EF4-8F1D-0239942140F2}] => (Allow) G:\SteamLibrary\steamapps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{78A13C34-DA18-4F3E-B3FE-70D9C612074A}] => (Allow) G:\SteamLibrary\steamapps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{31ACDC71-1728-40A4-A1A6-C34855B8CA97}] => (Allow) G:\SteamLibrary\steamapps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{47F822E7-83C4-4F87-B007-928DE9280C1B}] => (Allow) F:\SteamLibrary\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe
FirewallRules: [{9996FECF-8341-43C6-8C3D-62370821A378}] => (Allow) F:\SteamLibrary\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe
FirewallRules: [{AD116FA2-A494-4260-9B29-4E7A2C2D1A84}] => (Allow) F:\SteamLibrary\steamapps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe
FirewallRules: [{C143FFEF-4786-4214-93AA-0148401FDDF1}] => (Allow) F:\SteamLibrary\steamapps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe
FirewallRules: [{76984597-61F6-4925-8994-C6E5BE3376C9}] => (Allow) F:\SteamLibrary\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{261AB59A-366C-46B7-AA61-B45AC2208543}] => (Allow) F:\SteamLibrary\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{617DB85E-897C-4D67-9D21-74CBF5510093}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Torchlight II\ModLauncher.exe
FirewallRules: [{44D08A74-C539-48B8-83C2-E8796556313A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Torchlight II\ModLauncher.exe
FirewallRules: [{CA010DC6-5605-4512-BB37-5AF9928A7CD0}] => (Allow) F:\origin\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{B84E8C4D-06E7-4B63-A330-C239A7122744}] => (Allow) F:\origin\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{7303FBCB-8B4D-4897-B94B-97C71E99CA4F}] => (Allow) F:\SteamLibrary\steamapps\common\The Bureau\Binaries\Win32\TheBureau.exe
FirewallRules: [{05EBCA28-0442-4201-B6DD-E4A0B9127FD0}] => (Allow) F:\SteamLibrary\steamapps\common\The Bureau\Binaries\Win32\TheBureau.exe
FirewallRules: [{531E4C14-4D0D-44D2-A46A-5295CA0CFB9B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{C8AE5526-CD2A-4669-8124-17E864F248C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [TCP Query User{1E675A49-40FC-4F98-B0A2-CCEB567AACD4}F:\program files (x86)\bethesda softworks\hunted - the demon's forge\binaries\win32\p4dftre.dll] => (Allow) F:\program files (x86)\bethesda softworks\hunted - the demon's forge\binaries\win32\p4dftre.dll
FirewallRules: [UDP Query User{19064F50-7C34-4B27-9AD8-187225E29695}F:\program files (x86)\bethesda softworks\hunted - the demon's forge\binaries\win32\p4dftre.dll] => (Allow) F:\program files (x86)\bethesda softworks\hunted - the demon's forge\binaries\win32\p4dftre.dll
FirewallRules: [{D91FD292-F0EC-4148-B9AF-B5CF76C7C3AD}] => (Allow) F:\SteamLibrary\steamapps\common\Ryse Son of Rome\Bin64\Ryse.exe
FirewallRules: [{07E066B1-12FB-43F8-923C-518C14CAF3E8}] => (Allow) F:\SteamLibrary\steamapps\common\Ryse Son of Rome\Bin64\Ryse.exe
FirewallRules: [{534D73F5-E771-496F-A42B-81BC24C15912}] => (Allow) F:\SteamLibrary\steamapps\common\Castlevania Lords of Shadow 2\bin\CLOS2.exe
FirewallRules: [{06FFC622-D78A-4E75-A78D-E7524077768B}] => (Allow) F:\SteamLibrary\steamapps\common\Castlevania Lords of Shadow 2\bin\CLOS2.exe
FirewallRules: [{30331BE1-AEE5-42A3-B5CA-40FB27F4BDC7}] => (Allow) F:\SteamLibrary\steamapps\common\Mafia II\pc\mafia2.exe
FirewallRules: [{298352F9-532F-40E9-8B1F-8B15F010DEE3}] => (Allow) F:\SteamLibrary\steamapps\common\Mafia II\pc\mafia2.exe
FirewallRules: [{E74C6D17-D9F4-40D2-84D1-B1EF9B3A098B}] => (Allow) F:\SteamLibrary\steamapps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{EA7D06C1-B3D8-42E3-A870-BBDF4D998A2A}] => (Allow) F:\SteamLibrary\steamapps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{9F9E19FB-9F1A-4B9E-B57D-B4A875529D18}] => (Allow) F:\uplay\Assassin's Creed Unity\ACU.exe
FirewallRules: [{F94B4A8A-95F4-4FB5-8217-B18386973049}] => (Allow) F:\uplay\Assassin's Creed Unity\ACU.exe
FirewallRules: [{2BDF592C-3FB0-497E-8AA6-11A9BFF5DF54}] => (Allow) F:\origin\Kingdoms of Amalur Reckoning\Reckoning.exe
FirewallRules: [{7C5FF89A-8EBF-4A1D-B92C-49CF9B930D10}] => (Allow) F:\origin\Kingdoms of Amalur Reckoning\Reckoning.exe
FirewallRules: [{DA99F1CD-6953-4117-98B4-67B3483F8EE9}] => (Allow) G:\SteamLibrary\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{B04047B5-8BC9-44D1-AF66-46589B6EA955}] => (Allow) G:\SteamLibrary\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{728A1022-5808-4058-9650-6485186715A4}] => (Allow) C:\Program Files (x86)\Rockstar Games\Social Club\subprocess.exe
FirewallRules: [{5ECAB10B-434C-4354-A1CB-4BADF73CBF56}] => (Allow) C:\Program Files (x86)\Rockstar Games\Social Club\subprocess.exe
FirewallRules: [{0B2EB4F1-A4CF-4DDE-A072-8711EB2B9014}] => (Allow) C:\Program Files (x86)\Rockstar Games\Social Club\subprocess.exe
FirewallRules: [{512DD594-25E8-42DA-B838-6FDCE5B474BF}] => (Allow) C:\Program Files (x86)\Rockstar Games\Social Club\subprocess.exe
FirewallRules: [{8B96AC49-949D-4CAA-A4E5-83E3752A9CA1}] => (Allow) F:\SteamLibrary\steamapps\common\Dishonored RHCP\Binaries\Win32\Dishonored.exe
FirewallRules: [{F7F033FA-3986-4511-9A59-59F9AA66E092}] => (Allow) F:\SteamLibrary\steamapps\common\Dishonored RHCP\Binaries\Win32\Dishonored.exe
FirewallRules: [{0203B51B-1D33-4ED6-99F5-A07F6137F9CD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{7F2E4723-523A-4BF1-9581-B39F14F8C2D6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{663240FE-5C1B-45AF-94FF-8A7C6A25D156}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{397DD123-FDCE-4B34-925E-C7684B09AF23}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{3976363B-E629-4E3C-BFE3-CDCD74B8A845}] => (Allow) E:\Program Files (x86)\BitComet\BitComet.exe
FirewallRules: [{45AC6607-DAB9-4BD4-86DD-B36D44D48A7C}] => (Allow) E:\Program Files (x86)\BitComet\BitComet.exe
FirewallRules: [{47F6D931-9CD8-4DC7-AAC0-AFF37713DF59}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{FFEA07C9-AA6F-4181-8C2B-E85892B57CE9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{96973D31-F4B3-446D-BE3F-D4FD35CC7752}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{D06ACAA1-EB9F-4C85-BC97-BFB0166B0AAB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [TCP Query User{35F8ED07-8D90-4E67-BE93-7ECB9F6089A5}I:\grand theft auto v\gta5.exe] => (Allow) I:\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{64E1FB00-2438-45C7-82E8-399A10CD3A7C}I:\grand theft auto v\gta5.exe] => (Allow) I:\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{01C1E4C6-4930-4498-B924-F749196EFABC}I:\grand theft auto v\gta5.exe] => (Allow) I:\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{F42279CC-C97C-4631-8C75-2F6E8F339C77}I:\grand theft auto v\gta5.exe] => (Allow) I:\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{3537493D-5BBB-4B18-A0DA-7A26445397C0}E:\program files (x86)\bitcomet\bitcomet.exe] => (Allow) E:\program files (x86)\bitcomet\bitcomet.exe
FirewallRules: [UDP Query User{9ACDAE14-EB63-499E-BDB9-84948895B86B}E:\program files (x86)\bitcomet\bitcomet.exe] => (Allow) E:\program files (x86)\bitcomet\bitcomet.exe
FirewallRules: [TCP Query User{303F6247-7F63-4549-93B5-1DA7497AF25C}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{A0FDB8D5-8427-466E-A04C-0640B2BA9914}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{C8AE7952-4C30-440C-A5F3-9D6CAA479B37}] => (Allow) F:\SteamLibrary\steamapps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{1B42464E-D3D0-47A5-99AE-AF7F20F7555D}] => (Allow) F:\SteamLibrary\steamapps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{300E9B65-D8A7-4D8C-9498-C02368D1220C}] => (Allow) F:\origin\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{0B79169D-D3F3-4AFA-9526-7551B4A75A46}] => (Allow) F:\origin\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{D2DD56BD-5A0C-40F8-B488-B6944158ED5F}] => (Allow) F:\SteamLibrary\steamapps\common\Star Wars The Force Unleashed 2\SWTFU2.exe
FirewallRules: [{E7FB7194-83E1-44D6-B290-1425162C9AD3}] => (Allow) F:\SteamLibrary\steamapps\common\Star Wars The Force Unleashed 2\SWTFU2.exe
FirewallRules: [{53778806-5E4A-47ED-AE06-5B170E14D4E2}] => (Allow) G:\SteamLibrary\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{571BA284-3B55-4287-9656-B0FDB63A306C}] => (Allow) G:\SteamLibrary\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{2CACFE92-B2F1-4F30-9975-C5E9B2155834}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{BAA5693B-A949-4A01-A7AA-351B39C49C8B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{8A35841D-7CB6-45B2-8D25-56D402196ED8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{B9360F14-58C3-493F-B927-D6A63F5B2EBE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{7B0A6492-6C11-4AC2-97BC-30CAD06EFEEA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EBF36FA9-8029-4F35-B10B-EBFFE8E7901F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{BEC554DA-1D63-4F9B-A566-8324497A464F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

==================== Faulty Device Manager Devices =============

Name: Ovladač XBOX 360 pro systém Windows
Description: Ovladač XBOX 360 pro systém Windows
Class Guid: {d61ca365-5af4-4486-998b-9db4734c6ca3}
Manufacturer: Microsoft
Service: xusb22
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT AUTHORITY)
Description: Filtr událostí s dotazem select * from __InstanceModificationEvent where targetinstance isa '__ArbitratorConfiguration' nebylo možné znovu aktivovat v oboru názvů //./root, protože došlo k chybě 0x80041033. Dokud nebude problém odstraněn, nebude možné události prostřednictvím tohoto filtru doručovat.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __TimerEvent, jehož cílová třída __TimerEvent v oboru názvů //./root neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __TimerEvent, jehož cílová třída __TimerEvent v oboru názvů //./root/subscription neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __TimerEvent, jehož cílová třída __TimerEvent v oboru názvů //./root/CIMV2 neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __SystemEvent, jehož cílová třída __SystemEvent v oboru názvů //./root neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __SystemEvent, jehož cílová třída __SystemEvent v oboru názvů //./root/subscription neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __SystemEvent, jehož cílová třída __SystemEvent v oboru názvů //./root/CIMV2 neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __NamespaceOperationEvent, jehož cílová třída __NamespaceOperationEvent v oboru názvů //./root neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __NamespaceOperationEvent, jehož cílová třída __NamespaceOperationEvent v oboru názvů //./root/subscription neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __NamespaceOperationEvent, jehož cílová třída __NamespaceOperationEvent v oboru názvů //./root/CIMV2 neexistuje. Dotaz bude ignorován.


System errors:
=============
Error: (05/03/2015 09:43:15 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 09:43:15 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 09:43:15 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 09:41:05 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 09:41:05 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 09:41:05 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 09:36:58 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: radek)
Description: 0x8000002a116\??\C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\S-1-5-21-311206292-3038123496-1551756549-1001-0-ntuser.dat

Error: (05/03/2015 09:36:52 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: radek)
Description: 0x8000002a116\??\C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\S-1-5-21-311206292-3038123496-1551756549-1001-0-ntuser.dat

Error: (05/03/2015 09:36:08 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 09:36:08 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058


Microsoft Office Sessions:
=========================
Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT AUTHORITY)
Description: //./rootselect * from __InstanceModificationEvent where targetinstance isa '__ArbitratorConfiguration'0x80041033

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __TimerEvent__TimerEvent//./root

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __TimerEvent__TimerEvent//./root/subscription

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __TimerEvent__TimerEvent//./root/CIMV2

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __SystemEvent__SystemEvent//./root

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __SystemEvent__SystemEvent//./root/subscription

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __SystemEvent__SystemEvent//./root/CIMV2

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __NamespaceOperationEvent__NamespaceOperationEvent//./root

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __NamespaceOperationEvent__NamespaceOperationEvent//./root/subscription

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __NamespaceOperationEvent__NamespaceOperationEvent//./root/CIMV2


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz
Percentage of memory in use: 11%
Total physical RAM: 16326.8 MB
Available physical RAM: 14410.99 MB
Total Pagefile: 17226.8 MB
Available Pagefile: 15117.12 MB
Total Virtual: 131072 MB
Available Virtual: 131071.78 MB

==================== Drives ================================

Drive c: (Win 8.1 (ssd)) (Fixed) (Total:237.96 GB) (Free:46.41 GB) NTFS
Drive d: (hry (ssd)) (Fixed) (Total:74.31 GB) (Free:14.71 GB) NTFS
Drive e: (záloha) (Fixed) (Total:68.36 GB) (Free:63.82 GB) NTFS
Drive f: (hry) (Fixed) (Total:396.96 GB) (Free:100.7 GB) NTFS
Drive g: (hry 1) (Fixed) (Total:139.64 GB) (Free:27.71 GB) NTFS
Drive h: (seriály,hudba) (Fixed) (Total:467.28 GB) (Free:135.89 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive i: (filmy,dokument,programy) (Fixed) (Total:464.23 GB) (Free:192.06 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 74.5 GB) (Disk ID: E1521E52)

Partition: GPT Partition Type.

========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 69A8C970)

Partition: GPT Partition Type.

========================================================
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 139.7 GB) (Disk ID: 29D57381)
Partition 1: (Not Active) - (Size=139.6 GB) - (Type=07 NTFS)

========================================================
Disk: 4 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 29D54C7C)
Partition 1: (Active) - (Size=467.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=464.2 GB) - (Type=07 NTFS)

==================== End Of Log ============================

rado145
Návštěvník
Návštěvník
Příspěvky: 64
Registrován: 22 bře 2014 08:49

Re: Prosím o kontrolu logu. (problém s Virus Web Protect )

#10 Příspěvek od rado145 »

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-05-2015
Ran by rado at 2015-05-03 09:45:26
Running from E:\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-311206292-3038123496-1551756549-500 - Administrator - Disabled)
Guest (S-1-5-21-311206292-3038123496-1551756549-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-311206292-3038123496-1551756549-1003 - Limited - Enabled)
rado (S-1-5-21-311206292-3038123496-1551756549-1001 - Administrator - Enabled) => C:\Users\Radomír

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: STOPzilla AntiVirus (Enabled - Up to date) {17032AB1-6644-0721-EEB5-A39B8B646009}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: STOPzilla AntiVirus (Enabled - Up to date) {AC62CB55-407E-08AF-D405-98E9F0E32AB4}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AIDA64 Extreme v5.00 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 5.00 - FinalWire Ltd.)
Aktualizace NVIDIA 2.4.1.21 (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version: - Ubisoft)
Assassin's Creed Unity (HKLM-x32\...\Uplay Install 720) (Version: - Ubisoft)
Auslogics DiskDefrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 5.3.0.0 - Auslogics Labs Pty Ltd)
Auslogics Registry Defrag (HKLM-x32\...\{D627784F-B3EE-44E8-96B1-9509B991EA34}_is1) (Version: 8.3.0.0 - Auslogics Labs Pty Ltd)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BioShock Infinite (HKLM-x32\...\Steam App 8870) (Version: - Irrational Games)
BitComet 1.37 (HKLM-x32\...\BitComet) (Version: 1.37 - CometNetwork)
CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform)
Company of Heroes 2 (HKLM-x32\...\Steam App 231430) (Version: - Relic Entertainment)
CPUID CPU-Z 1.72 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
Creative Audio Control Panel (HKLM-x32\...\AudioCS) (Version: 3.00 - Creative Technology Limited)
Creative MediaSource 5 (HKLM-x32\...\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}) (Version: 5.00 - )
Creative System Information (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited)
Crysis®3 (HKLM-x32\...\{4198AE83-A3C6-4C41-85C8-EC63E990696E}) (Version: 1.0.0.0 - Electronic Arts)
Čeština do hry South Park: Klacek Pravdy verze 1.0 (HKLM-x32\...\{C1EA3034-6A86-4C18-A91F-SPSOTCZ7E0FE}_is1) (Version: 1.0 - Ubisoft)
Čeština do The Bureau XCOM Declassified (HKU\S-1-5-21-311206292-3038123496-1551756549-1001\...\Čeština do The Bureau XCOM Declassified) (Version: - )
Čeština The Bureau XCOM Declassified (HKLM-x32\...\Čeština The Bureau XCOM Declassified) (Version: - )
Dead Rising 3 (HKLM-x32\...\Steam App 265550) (Version: - Capcom Game Studio Vancouver)
Dell Display Manager (HKLM-x32\...\{AC50C05D-9D57-40F5-B2EF-AC402F14312B}_is1) (Version: - EnTech Taiwan)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Dragon Age™: Inkwizycja (HKLM-x32\...\{DC4C36DC-4E5B-4262-B0C7-157DF534B969}) (Version: 1.0.0.7 - Electronic Arts)
Dying Light (HKLM-x32\...\Steam App 239140) (Version: - Techland)
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version: - Ubisoft)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North)
Grim Dawn (HKLM-x32\...\Steam App 219990) (Version: - Crate Entertainment)
Intel(R) Update Manager (x32 Version: 1.6.3.70 - Intel Corporation) Hidden
Intel® SSD Toolbox (HKLM-x32\...\{06D085C8-1F00-11B2-96A7-8f0CE39193ED}) (Version: 3.2.3.400 - Intel Corporation)
Kingdoms of Amalur: Reckoning (HKLM-x32\...\{6A9D1594-7791-48f5-9CAA-DE9BCB968320}) (Version: 1.0.0.0 - Electronic Arts)
LG Bluetooth Drivers (HKLM-x32\...\{AC7EE5F1-0DE4-4256-8E43-92B73C8E6019}) (Version: 1.1 - LG Electronics)
LG PC Suite IV (HKLM-x32\...\LG PC Suite IV) (Version: 4.3.80.20121017 - LG Electronics)
LG United Mobile Drivers (HKLM-x32\...\{5DB849D6-9392-4FB7-9ABB-87ED433152E5}) (Version: 3.8.1 - LG Electronics)
Lords Of The Fallen (HKLM-x32\...\Steam App 265300) (Version: - CI Games)
Mafia II (HKLM-x32\...\Steam App 50130) (Version: - 2K Czech)
Malwarebytes Anti-Malware verze 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Max Payne 3 (HKLM-x32\...\Steam App 204100) (Version: - Rockstar Studios)
Metro: Last Light (HKLM-x32\...\Steam App 43160) (Version: - 4A Games)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Middle-earth: Shadow of Mordor (HKLM-x32\...\Steam App 241930) (Version: - Monolith Productions, Inc.)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Ovladač 3D Vision 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 349.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 349.95 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
NVIDIA Virtuální audio Miracast 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 350.12 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
OSCAR Editor (x32 Version: 12.03.0004 - A4TECH) Hidden
Ovládací panel NVIDIA 350.12 (Version: 350.12 - NVIDIA Corporation) Hidden
Risen 3 - Titan Lords (HKLM-x32\...\Steam App 249230) (Version: - Piranha Bytes)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)
Ryse: Son of Rome (HKLM-x32\...\Steam App 302510) (Version: - Crytek)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Sound Blaster Tactic(3D) Alpha (HKLM-x32\...\{2226247D-9846-4370-A1EF-FAA6958F7632}) (Version: 1.0 - Creative Technology Limited)
Sound Blaster X-Fi (HKLM-x32\...\{18F11181-EA1A-42AE-AF89-4867C7F7A6FA}) (Version: 1.0 - )
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version: - Obsidian Entertainment)
Star Wars: The Force Unleashed II (HKLM-x32\...\Steam App 32500) (Version: - Aspyr Studios)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp)
The Bureau: XCOM Declassified (HKLM-x32\...\Steam App 65930) (Version: - 2K Marin)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
Torchlight II (HKLM-x32\...\Steam App 200710) (Version: - Runic Games)
Transcend SSD Scope version 2.4.0 (HKLM-x32\...\{AD8E7B8B-EAD8-4B9F-882E-7970ABFACE34}_is1) (Version: 2.4.0 - Transcend Information, Inc.)
Uplay (HKLM-x32\...\Uplay) (Version: 5.1 - Ubisoft)
Victor Vran (HKLM-x32\...\Steam App 345180) (Version: - Haemimont Games)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.0 - VideoLAN)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Wolfenstein: The New Order (HKLM-x32\...\Steam App 201810) (Version: - Machine Games)
X7 Oscar Editor (HKLM-x32\...\InstallShield_{3C2379D2-337A-4FFA-9017-BDFB80EC0931}) (Version: 12.03.0004 - A4TECH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points =========================

ATTENTION: System Restore is disabled.

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0E318D5B-DA9A-4213-9C11-43E856CF82AF} - System32\Tasks\Opera N Sunday => C:\Program Files (x86)\Opera\launcher.exe
Task: {12C67101-5F6E-4080-8D04-0AC729C3EE1D} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6055C210-5B34-498D-9956-EEC9D157FA6E} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {7DF8F66C-11D7-428A-9812-D0589458D7AF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-02] (Google Inc.)
Task: {8BE99224-08D8-4EEA-9750-37C97DD76ECD} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {D15F7439-F3A2-4FDA-84CE-DE5422AB30AC} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-15] (Microsoft Corporation)
Task: {E5F4E8D0-C452-47CD-9369-A824AD3C6A71} - System32\Tasks\Opera N Saturday => C:\Program Files (x86)\Opera\launcher.exe
Task: {E74787F4-1E16-49C8-A768-B33B78BB8A38} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {F1B6666C-345F-4184-81D1-1E5089FFBD9F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-02-19] (Piriform Ltd)
Task: {F2EAC0F0-5E7D-44CE-AD47-B9DD76D8F4C7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-02] (Google Inc.)
Task: {F46C7243-E555-43AA-B1AC-D299A6520B73} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\Bootstrap.exe [2013-07-18] (Intel Corporation)
Task: {FFD606E3-9EFF-418E-AAAF-CBEB75CFD096} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\Bootstrap.exe [2013-07-18] (Intel Corporation)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-05-02 21:39 - 2015-04-08 23:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-03-20 12:59 - 2012-03-20 12:59 - 03340288 _____ () C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe
2015-05-02 21:40 - 2015-04-09 02:58 - 00721552 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster64.dll
2015-05-02 21:40 - 2015-04-09 02:58 - 00854160 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk64.dll
2015-05-02 20:57 - 2015-04-23 23:03 - 00184184 _____ () C:\Program Files (x86)\STOPzilla\Definitions\libBase64.dll
2015-05-02 20:57 - 2015-04-23 23:03 - 00175992 _____ () C:\Program Files (x86)\STOPzilla\Definitions\libMachoUniv.dll
2015-05-02 21:40 - 2015-04-09 02:58 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2010-12-02 18:56 - 2010-12-02 18:56 - 00815104 _____ () C:\Program Files (x86)\OSCAR Editor X7\Data\X7\Forms\OSD_Text\OSD_Text.dll
2011-01-09 21:45 - 2011-01-09 21:45 - 00088064 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_MouseDeviceManager.dll
2012-02-07 12:20 - 2012-02-07 12:20 - 02413568 _____ () C:\Program Files (x86)\OSCAR Editor X7\Data\X7\Forms\ScreenCapture\ScreenCapture.dll
2011-03-21 20:33 - 2011-03-21 20:33 - 00999424 _____ () C:\Program Files (x86)\OSCAR Editor X7\Data\X7\Forms\TrayIconWebAdvertisement\TrayIconWebAdvertisement.dll
2010-09-20 15:18 - 2010-09-20 15:18 - 00085504 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_ZoomControl.dll
2010-09-20 15:18 - 2010-09-20 15:18 - 00054272 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_ScrollbarControl.dll
2011-04-12 16:14 - 2011-04-12 16:14 - 00063488 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_AnalyzeGesturesInRight.dll
2010-11-01 21:16 - 2010-11-01 21:16 - 00062976 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_AnalyzeGesturesInOne.dll
2011-08-10 14:43 - 2011-08-10 14:43 - 00118272 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_Wheel4D.dll
2015-05-02 21:05 - 2015-04-28 04:07 - 14980424 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\PepperFlash\pepflashplayer.dll
2015-05-03 08:00 - 2014-02-10 13:44 - 04592128 _____ () C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libglesv2.dll
2015-05-03 08:00 - 2014-02-10 13:44 - 00112128 _____ () C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libegl.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Radomír\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SBAMSvc => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-311206292-3038123496-1551756549-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Radomír\AppData\Roaming\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
DNS Servers: 10.0.0.138

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run: => "XboxStat"
HKU\S-1-5-21-311206292-3038123496-1551756549-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-311206292-3038123496-1551756549-1001\...\StartupApproved\Run: => "BitComet"

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{1749A295-00A0-454E-9722-E3EA9DDB0885}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F468817B-CED0-4F9B-A928-98BA4E61DA0C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6A4768FD-6641-4E32-B9C0-B19CD2CC2BBB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{3E18FCD0-9C48-4DE7-B7FC-34329BD631D7}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{15C7F779-EB59-4AD7-ABC6-C4CE6A9EA122}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{B6AC3C3E-424D-4A37-86BC-BA44A9D3CDD6}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{FCE2B95E-1C19-4FE8-BB36-790182CF7B38}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{E53F61E4-62DE-4164-A876-CA37F3075E75}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{75F0C91C-0AF7-41DA-9C77-2722C5BC7A19}] => (Allow) D:\Uplay\cache\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{E2FAA429-80CE-40C0-9163-4EFEAF27F640}] => (Allow) D:\Uplay\cache\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{4D780989-AF9A-4F00-AFD1-E2416F0A5352}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grim Dawn\Grim Dawn.exe
FirewallRules: [{C8F03522-3177-4F23-B7AB-48CA70678B76}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grim Dawn\Grim Dawn.exe
FirewallRules: [{B028848C-765D-4176-B24F-6DA3E6FC4CBA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Victor Vran\VictorVranSteam.exe
FirewallRules: [{A54A931F-192F-4934-A67D-20B5F4B6C59E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Victor Vran\VictorVranSteam.exe
FirewallRules: [{D59D790C-94A1-49AE-BCAE-0F693240B35B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{2AB81F50-1DA6-449A-A236-D8EC00A25505}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{063FCFC0-A064-4FF0-B1AC-BB14B0EC50E5}] => (Allow) D:\Uplay\cache\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{6128AA11-88D0-43E8-9A86-8424AAC9281E}] => (Allow) D:\Uplay\cache\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{AC33698A-FA0A-43CA-8193-6A96851A61B6}] => (Allow) D:\Uplay\cache\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{B0648B59-DB63-4054-84C2-36D58CE02DE8}] => (Allow) D:\Uplay\cache\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{6E7B9EB5-30CA-4F73-B3D4-8B8AA5D198B2}] => (Allow) G:\SteamLibrary\steamapps\common\Lords Of The Fallen\bin\LordsOfTheFallen.exe
FirewallRules: [{1C34ABBE-88DC-41C3-B43E-4341AC1C89BD}] => (Allow) G:\SteamLibrary\steamapps\common\Lords Of The Fallen\bin\LordsOfTheFallen.exe
FirewallRules: [{6D352026-08BA-4496-9D9D-1C2640B837D8}] => (Allow) G:\SteamLibrary\steamapps\common\deadrising3\deadrising3.exe
FirewallRules: [{1F2E1023-977E-4096-97EE-453478193B54}] => (Allow) G:\SteamLibrary\steamapps\common\deadrising3\deadrising3.exe
FirewallRules: [{EEF4D05C-E2D9-47D6-A0C2-FE19A3DB6AD8}] => (Allow) G:\Uplay\cache\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{A1383C14-5931-43B2-9B39-E4C4E9025E5B}] => (Allow) G:\Uplay\cache\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{13EBD659-8E7A-49AB-8CA2-9D317E8D0A5C}] => (Allow) G:\Uplay\cache\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{8BA5E02C-B3EB-4EDB-9D57-C5B44FBE4767}] => (Allow) G:\Uplay\cache\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{B74754EF-D8B5-4109-8758-DF4D39521FF3}] => (Allow) G:\SteamLibrary\steamapps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{AC258F3A-0F4E-4EF4-8F1D-0239942140F2}] => (Allow) G:\SteamLibrary\steamapps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{78A13C34-DA18-4F3E-B3FE-70D9C612074A}] => (Allow) G:\SteamLibrary\steamapps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{31ACDC71-1728-40A4-A1A6-C34855B8CA97}] => (Allow) G:\SteamLibrary\steamapps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{47F822E7-83C4-4F87-B007-928DE9280C1B}] => (Allow) F:\SteamLibrary\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe
FirewallRules: [{9996FECF-8341-43C6-8C3D-62370821A378}] => (Allow) F:\SteamLibrary\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe
FirewallRules: [{AD116FA2-A494-4260-9B29-4E7A2C2D1A84}] => (Allow) F:\SteamLibrary\steamapps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe
FirewallRules: [{C143FFEF-4786-4214-93AA-0148401FDDF1}] => (Allow) F:\SteamLibrary\steamapps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe
FirewallRules: [{76984597-61F6-4925-8994-C6E5BE3376C9}] => (Allow) F:\SteamLibrary\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{261AB59A-366C-46B7-AA61-B45AC2208543}] => (Allow) F:\SteamLibrary\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{617DB85E-897C-4D67-9D21-74CBF5510093}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Torchlight II\ModLauncher.exe
FirewallRules: [{44D08A74-C539-48B8-83C2-E8796556313A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Torchlight II\ModLauncher.exe
FirewallRules: [{CA010DC6-5605-4512-BB37-5AF9928A7CD0}] => (Allow) F:\origin\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{B84E8C4D-06E7-4B63-A330-C239A7122744}] => (Allow) F:\origin\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{7303FBCB-8B4D-4897-B94B-97C71E99CA4F}] => (Allow) F:\SteamLibrary\steamapps\common\The Bureau\Binaries\Win32\TheBureau.exe
FirewallRules: [{05EBCA28-0442-4201-B6DD-E4A0B9127FD0}] => (Allow) F:\SteamLibrary\steamapps\common\The Bureau\Binaries\Win32\TheBureau.exe
FirewallRules: [{531E4C14-4D0D-44D2-A46A-5295CA0CFB9B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{C8AE5526-CD2A-4669-8124-17E864F248C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [TCP Query User{1E675A49-40FC-4F98-B0A2-CCEB567AACD4}F:\program files (x86)\bethesda softworks\hunted - the demon's forge\binaries\win32\p4dftre.dll] => (Allow) F:\program files (x86)\bethesda softworks\hunted - the demon's forge\binaries\win32\p4dftre.dll
FirewallRules: [UDP Query User{19064F50-7C34-4B27-9AD8-187225E29695}F:\program files (x86)\bethesda softworks\hunted - the demon's forge\binaries\win32\p4dftre.dll] => (Allow) F:\program files (x86)\bethesda softworks\hunted - the demon's forge\binaries\win32\p4dftre.dll
FirewallRules: [{D91FD292-F0EC-4148-B9AF-B5CF76C7C3AD}] => (Allow) F:\SteamLibrary\steamapps\common\Ryse Son of Rome\Bin64\Ryse.exe
FirewallRules: [{07E066B1-12FB-43F8-923C-518C14CAF3E8}] => (Allow) F:\SteamLibrary\steamapps\common\Ryse Son of Rome\Bin64\Ryse.exe
FirewallRules: [{534D73F5-E771-496F-A42B-81BC24C15912}] => (Allow) F:\SteamLibrary\steamapps\common\Castlevania Lords of Shadow 2\bin\CLOS2.exe
FirewallRules: [{06FFC622-D78A-4E75-A78D-E7524077768B}] => (Allow) F:\SteamLibrary\steamapps\common\Castlevania Lords of Shadow 2\bin\CLOS2.exe
FirewallRules: [{30331BE1-AEE5-42A3-B5CA-40FB27F4BDC7}] => (Allow) F:\SteamLibrary\steamapps\common\Mafia II\pc\mafia2.exe
FirewallRules: [{298352F9-532F-40E9-8B1F-8B15F010DEE3}] => (Allow) F:\SteamLibrary\steamapps\common\Mafia II\pc\mafia2.exe
FirewallRules: [{E74C6D17-D9F4-40D2-84D1-B1EF9B3A098B}] => (Allow) F:\SteamLibrary\steamapps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{EA7D06C1-B3D8-42E3-A870-BBDF4D998A2A}] => (Allow) F:\SteamLibrary\steamapps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{9F9E19FB-9F1A-4B9E-B57D-B4A875529D18}] => (Allow) F:\uplay\Assassin's Creed Unity\ACU.exe
FirewallRules: [{F94B4A8A-95F4-4FB5-8217-B18386973049}] => (Allow) F:\uplay\Assassin's Creed Unity\ACU.exe
FirewallRules: [{2BDF592C-3FB0-497E-8AA6-11A9BFF5DF54}] => (Allow) F:\origin\Kingdoms of Amalur Reckoning\Reckoning.exe
FirewallRules: [{7C5FF89A-8EBF-4A1D-B92C-49CF9B930D10}] => (Allow) F:\origin\Kingdoms of Amalur Reckoning\Reckoning.exe
FirewallRules: [{DA99F1CD-6953-4117-98B4-67B3483F8EE9}] => (Allow) G:\SteamLibrary\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{B04047B5-8BC9-44D1-AF66-46589B6EA955}] => (Allow) G:\SteamLibrary\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{728A1022-5808-4058-9650-6485186715A4}] => (Allow) C:\Program Files (x86)\Rockstar Games\Social Club\subprocess.exe
FirewallRules: [{5ECAB10B-434C-4354-A1CB-4BADF73CBF56}] => (Allow) C:\Program Files (x86)\Rockstar Games\Social Club\subprocess.exe
FirewallRules: [{0B2EB4F1-A4CF-4DDE-A072-8711EB2B9014}] => (Allow) C:\Program Files (x86)\Rockstar Games\Social Club\subprocess.exe
FirewallRules: [{512DD594-25E8-42DA-B838-6FDCE5B474BF}] => (Allow) C:\Program Files (x86)\Rockstar Games\Social Club\subprocess.exe
FirewallRules: [{8B96AC49-949D-4CAA-A4E5-83E3752A9CA1}] => (Allow) F:\SteamLibrary\steamapps\common\Dishonored RHCP\Binaries\Win32\Dishonored.exe
FirewallRules: [{F7F033FA-3986-4511-9A59-59F9AA66E092}] => (Allow) F:\SteamLibrary\steamapps\common\Dishonored RHCP\Binaries\Win32\Dishonored.exe
FirewallRules: [{0203B51B-1D33-4ED6-99F5-A07F6137F9CD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{7F2E4723-523A-4BF1-9581-B39F14F8C2D6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{663240FE-5C1B-45AF-94FF-8A7C6A25D156}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{397DD123-FDCE-4B34-925E-C7684B09AF23}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{3976363B-E629-4E3C-BFE3-CDCD74B8A845}] => (Allow) E:\Program Files (x86)\BitComet\BitComet.exe
FirewallRules: [{45AC6607-DAB9-4BD4-86DD-B36D44D48A7C}] => (Allow) E:\Program Files (x86)\BitComet\BitComet.exe
FirewallRules: [{47F6D931-9CD8-4DC7-AAC0-AFF37713DF59}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{FFEA07C9-AA6F-4181-8C2B-E85892B57CE9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{96973D31-F4B3-446D-BE3F-D4FD35CC7752}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{D06ACAA1-EB9F-4C85-BC97-BFB0166B0AAB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [TCP Query User{35F8ED07-8D90-4E67-BE93-7ECB9F6089A5}I:\grand theft auto v\gta5.exe] => (Allow) I:\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{64E1FB00-2438-45C7-82E8-399A10CD3A7C}I:\grand theft auto v\gta5.exe] => (Allow) I:\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{01C1E4C6-4930-4498-B924-F749196EFABC}I:\grand theft auto v\gta5.exe] => (Allow) I:\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{F42279CC-C97C-4631-8C75-2F6E8F339C77}I:\grand theft auto v\gta5.exe] => (Allow) I:\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{3537493D-5BBB-4B18-A0DA-7A26445397C0}E:\program files (x86)\bitcomet\bitcomet.exe] => (Allow) E:\program files (x86)\bitcomet\bitcomet.exe
FirewallRules: [UDP Query User{9ACDAE14-EB63-499E-BDB9-84948895B86B}E:\program files (x86)\bitcomet\bitcomet.exe] => (Allow) E:\program files (x86)\bitcomet\bitcomet.exe
FirewallRules: [TCP Query User{303F6247-7F63-4549-93B5-1DA7497AF25C}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{A0FDB8D5-8427-466E-A04C-0640B2BA9914}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{C8AE7952-4C30-440C-A5F3-9D6CAA479B37}] => (Allow) F:\SteamLibrary\steamapps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{1B42464E-D3D0-47A5-99AE-AF7F20F7555D}] => (Allow) F:\SteamLibrary\steamapps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{300E9B65-D8A7-4D8C-9498-C02368D1220C}] => (Allow) F:\origin\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{0B79169D-D3F3-4AFA-9526-7551B4A75A46}] => (Allow) F:\origin\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{D2DD56BD-5A0C-40F8-B488-B6944158ED5F}] => (Allow) F:\SteamLibrary\steamapps\common\Star Wars The Force Unleashed 2\SWTFU2.exe
FirewallRules: [{E7FB7194-83E1-44D6-B290-1425162C9AD3}] => (Allow) F:\SteamLibrary\steamapps\common\Star Wars The Force Unleashed 2\SWTFU2.exe
FirewallRules: [{53778806-5E4A-47ED-AE06-5B170E14D4E2}] => (Allow) G:\SteamLibrary\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{571BA284-3B55-4287-9656-B0FDB63A306C}] => (Allow) G:\SteamLibrary\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{2CACFE92-B2F1-4F30-9975-C5E9B2155834}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{BAA5693B-A949-4A01-A7AA-351B39C49C8B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{8A35841D-7CB6-45B2-8D25-56D402196ED8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{B9360F14-58C3-493F-B927-D6A63F5B2EBE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{7B0A6492-6C11-4AC2-97BC-30CAD06EFEEA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EBF36FA9-8029-4F35-B10B-EBFFE8E7901F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{BEC554DA-1D63-4F9B-A566-8324497A464F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

==================== Faulty Device Manager Devices =============

Name: Ovladač XBOX 360 pro systém Windows
Description: Ovladač XBOX 360 pro systém Windows
Class Guid: {d61ca365-5af4-4486-998b-9db4734c6ca3}
Manufacturer: Microsoft
Service: xusb22
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT AUTHORITY)
Description: Filtr událostí s dotazem select * from __InstanceModificationEvent where targetinstance isa '__ArbitratorConfiguration' nebylo možné znovu aktivovat v oboru názvů //./root, protože došlo k chybě 0x80041033. Dokud nebude problém odstraněn, nebude možné události prostřednictvím tohoto filtru doručovat.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __TimerEvent, jehož cílová třída __TimerEvent v oboru názvů //./root neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __TimerEvent, jehož cílová třída __TimerEvent v oboru názvů //./root/subscription neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __TimerEvent, jehož cílová třída __TimerEvent v oboru názvů //./root/CIMV2 neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __SystemEvent, jehož cílová třída __SystemEvent v oboru názvů //./root neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __SystemEvent, jehož cílová třída __SystemEvent v oboru názvů //./root/subscription neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __SystemEvent, jehož cílová třída __SystemEvent v oboru názvů //./root/CIMV2 neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __NamespaceOperationEvent, jehož cílová třída __NamespaceOperationEvent v oboru názvů //./root neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __NamespaceOperationEvent, jehož cílová třída __NamespaceOperationEvent v oboru názvů //./root/subscription neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __NamespaceOperationEvent, jehož cílová třída __NamespaceOperationEvent v oboru názvů //./root/CIMV2 neexistuje. Dotaz bude ignorován.


System errors:
=============
Error: (05/03/2015 09:43:15 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 09:43:15 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 09:43:15 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 09:41:05 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 09:41:05 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 09:41:05 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 09:36:58 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: radek)
Description: 0x8000002a116\??\C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\S-1-5-21-311206292-3038123496-1551756549-1001-0-ntuser.dat

Error: (05/03/2015 09:36:52 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: radek)
Description: 0x8000002a116\??\C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\S-1-5-21-311206292-3038123496-1551756549-1001-0-ntuser.dat

Error: (05/03/2015 09:36:08 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 09:36:08 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058


Microsoft Office Sessions:
=========================
Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT AUTHORITY)
Description: //./rootselect * from __InstanceModificationEvent where targetinstance isa '__ArbitratorConfiguration'0x80041033

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __TimerEvent__TimerEvent//./root

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __TimerEvent__TimerEvent//./root/subscription

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __TimerEvent__TimerEvent//./root/CIMV2

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __SystemEvent__SystemEvent//./root

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __SystemEvent__SystemEvent//./root/subscription

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __SystemEvent__SystemEvent//./root/CIMV2

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __NamespaceOperationEvent__NamespaceOperationEvent//./root

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __NamespaceOperationEvent__NamespaceOperationEvent//./root/subscription

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __NamespaceOperationEvent__NamespaceOperationEvent//./root/CIMV2


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz
Percentage of memory in use: 11%
Total physical RAM: 16326.8 MB
Available physical RAM: 14410.99 MB
Total Pagefile: 17226.8 MB
Available Pagefile: 15117.12 MB
Total Virtual: 131072 MB
Available Virtual: 131071.78 MB

==================== Drives ================================

Drive c: (Win 8.1 (ssd)) (Fixed) (Total:237.96 GB) (Free:46.41 GB) NTFS
Drive d: (hry (ssd)) (Fixed) (Total:74.31 GB) (Free:14.71 GB) NTFS
Drive e: (záloha) (Fixed) (Total:68.36 GB) (Free:63.82 GB) NTFS
Drive f: (hry) (Fixed) (Total:396.96 GB) (Free:100.7 GB) NTFS
Drive g: (hry 1) (Fixed) (Total:139.64 GB) (Free:27.71 GB) NTFS
Drive h: (seriály,hudba) (Fixed) (Total:467.28 GB) (Free:135.89 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive i: (filmy,dokument,programy) (Fixed) (Total:464.23 GB) (Free:192.06 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 74.5 GB) (Disk ID: E1521E52)

Partition: GPT Partition Type.

========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 69A8C970)

Partition: GPT Partition Type.

========================================================
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 139.7 GB) (Disk ID: 29D57381)
Partition 1: (Not Active) - (Size=139.6 GB) - (Type=07 NTFS)

========================================================
Disk: 4 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 29D54C7C)
Partition 1: (Active) - (Size=467.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=464.2 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Prosím o kontrolu logu. (problém s Virus Web Protect )

#11 Příspěvek od Márty84 »

Dal jste tu dva stejne logy a bohuzel zrovna ten mene dulezity. Abych mohl mazat, potrebuji ten druhy, co FRST vytvoril :)
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).

rado145
Návštěvník
Návštěvník
Příspěvky: 64
Registrován: 22 bře 2014 08:49

Re: Prosím o kontrolu logu. (problém s Virus Web Protect )

#12 Příspěvek od rado145 »

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-05-2015
Ran by rado at 2015-05-03 12:23:04
Running from E:\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-311206292-3038123496-1551756549-500 - Administrator - Disabled)
Guest (S-1-5-21-311206292-3038123496-1551756549-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-311206292-3038123496-1551756549-1003 - Limited - Enabled)
rado (S-1-5-21-311206292-3038123496-1551756549-1001 - Administrator - Enabled) => C:\Users\Radomír

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: STOPzilla AntiVirus (Enabled - Up to date) {17032AB1-6644-0721-EEB5-A39B8B646009}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: STOPzilla AntiVirus (Enabled - Up to date) {AC62CB55-407E-08AF-D405-98E9F0E32AB4}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AIDA64 Extreme v5.00 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 5.00 - FinalWire Ltd.)
Aktualizace NVIDIA 2.4.1.21 (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version: - Ubisoft)
Assassin's Creed Unity (HKLM-x32\...\Uplay Install 720) (Version: - Ubisoft)
Auslogics DiskDefrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 5.3.0.0 - Auslogics Labs Pty Ltd)
Auslogics Registry Defrag (HKLM-x32\...\{D627784F-B3EE-44E8-96B1-9509B991EA34}_is1) (Version: 8.3.0.0 - Auslogics Labs Pty Ltd)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BioShock Infinite (HKLM-x32\...\Steam App 8870) (Version: - Irrational Games)
BitComet 1.37 (HKLM-x32\...\BitComet) (Version: 1.37 - CometNetwork)
CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform)
Company of Heroes 2 (HKLM-x32\...\Steam App 231430) (Version: - Relic Entertainment)
CPUID CPU-Z 1.72 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
Creative Audio Control Panel (HKLM-x32\...\AudioCS) (Version: 3.00 - Creative Technology Limited)
Creative MediaSource 5 (HKLM-x32\...\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}) (Version: 5.00 - )
Creative System Information (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited)
Crysis®3 (HKLM-x32\...\{4198AE83-A3C6-4C41-85C8-EC63E990696E}) (Version: 1.0.0.0 - Electronic Arts)
Čeština do hry South Park: Klacek Pravdy verze 1.0 (HKLM-x32\...\{C1EA3034-6A86-4C18-A91F-SPSOTCZ7E0FE}_is1) (Version: 1.0 - Ubisoft)
Čeština do The Bureau XCOM Declassified (HKU\S-1-5-21-311206292-3038123496-1551756549-1001\...\Čeština do The Bureau XCOM Declassified) (Version: - )
Čeština The Bureau XCOM Declassified (HKLM-x32\...\Čeština The Bureau XCOM Declassified) (Version: - )
Dead Rising 3 (HKLM-x32\...\Steam App 265550) (Version: - Capcom Game Studio Vancouver)
Dell Display Manager (HKLM-x32\...\{AC50C05D-9D57-40F5-B2EF-AC402F14312B}_is1) (Version: - EnTech Taiwan)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Dragon Age™: Inkwizycja (HKLM-x32\...\{DC4C36DC-4E5B-4262-B0C7-157DF534B969}) (Version: 1.0.0.7 - Electronic Arts)
Dying Light (HKLM-x32\...\Steam App 239140) (Version: - Techland)
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version: - Ubisoft)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North)
Grim Dawn (HKLM-x32\...\Steam App 219990) (Version: - Crate Entertainment)
Intel(R) Update Manager (x32 Version: 1.6.3.70 - Intel Corporation) Hidden
Intel® SSD Toolbox (HKLM-x32\...\{06D085C8-1F00-11B2-96A7-8f0CE39193ED}) (Version: 3.2.3.400 - Intel Corporation)
Kingdoms of Amalur: Reckoning (HKLM-x32\...\{6A9D1594-7791-48f5-9CAA-DE9BCB968320}) (Version: 1.0.0.0 - Electronic Arts)
LG Bluetooth Drivers (HKLM-x32\...\{AC7EE5F1-0DE4-4256-8E43-92B73C8E6019}) (Version: 1.1 - LG Electronics)
LG PC Suite IV (HKLM-x32\...\LG PC Suite IV) (Version: 4.3.80.20121017 - LG Electronics)
LG United Mobile Drivers (HKLM-x32\...\{5DB849D6-9392-4FB7-9ABB-87ED433152E5}) (Version: 3.8.1 - LG Electronics)
Lords Of The Fallen (HKLM-x32\...\Steam App 265300) (Version: - CI Games)
Mafia II (HKLM-x32\...\Steam App 50130) (Version: - 2K Czech)
Malwarebytes Anti-Malware verze 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Max Payne 3 (HKLM-x32\...\Steam App 204100) (Version: - Rockstar Studios)
Metro: Last Light (HKLM-x32\...\Steam App 43160) (Version: - 4A Games)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Middle-earth: Shadow of Mordor (HKLM-x32\...\Steam App 241930) (Version: - Monolith Productions, Inc.)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Ovladač 3D Vision 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 349.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 349.95 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
NVIDIA Virtuální audio Miracast 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 350.12 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
OSCAR Editor (x32 Version: 12.03.0004 - A4TECH) Hidden
Ovládací panel NVIDIA 350.12 (Version: 350.12 - NVIDIA Corporation) Hidden
Risen 3 - Titan Lords (HKLM-x32\...\Steam App 249230) (Version: - Piranha Bytes)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)
Ryse: Son of Rome (HKLM-x32\...\Steam App 302510) (Version: - Crytek)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Sound Blaster Tactic(3D) Alpha (HKLM-x32\...\{2226247D-9846-4370-A1EF-FAA6958F7632}) (Version: 1.0 - Creative Technology Limited)
Sound Blaster X-Fi (HKLM-x32\...\{18F11181-EA1A-42AE-AF89-4867C7F7A6FA}) (Version: 1.0 - )
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version: - Obsidian Entertainment)
Star Wars: The Force Unleashed II (HKLM-x32\...\Steam App 32500) (Version: - Aspyr Studios)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp)
The Bureau: XCOM Declassified (HKLM-x32\...\Steam App 65930) (Version: - 2K Marin)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
Torchlight II (HKLM-x32\...\Steam App 200710) (Version: - Runic Games)
Transcend SSD Scope version 2.4.0 (HKLM-x32\...\{AD8E7B8B-EAD8-4B9F-882E-7970ABFACE34}_is1) (Version: 2.4.0 - Transcend Information, Inc.)
Uplay (HKLM-x32\...\Uplay) (Version: 5.1 - Ubisoft)
Victor Vran (HKLM-x32\...\Steam App 345180) (Version: - Haemimont Games)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.0 - VideoLAN)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Wolfenstein: The New Order (HKLM-x32\...\Steam App 201810) (Version: - Machine Games)
X7 Oscar Editor (HKLM-x32\...\InstallShield_{3C2379D2-337A-4FFA-9017-BDFB80EC0931}) (Version: 12.03.0004 - A4TECH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points =========================

ATTENTION: System Restore is disabled.

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0E318D5B-DA9A-4213-9C11-43E856CF82AF} - System32\Tasks\Opera N Sunday => C:\Program Files (x86)\Opera\launcher.exe
Task: {12C67101-5F6E-4080-8D04-0AC729C3EE1D} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {6055C210-5B34-498D-9956-EEC9D157FA6E} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {7562214D-EAEF-4046-90C5-1C27B8217A32} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-15] (Microsoft Corporation)
Task: {7DF8F66C-11D7-428A-9812-D0589458D7AF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-02] (Google Inc.)
Task: {8BE99224-08D8-4EEA-9750-37C97DD76ECD} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {E5F4E8D0-C452-47CD-9369-A824AD3C6A71} - System32\Tasks\Opera N Saturday => C:\Program Files (x86)\Opera\launcher.exe
Task: {E74787F4-1E16-49C8-A768-B33B78BB8A38} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {F1B6666C-345F-4184-81D1-1E5089FFBD9F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-02-19] (Piriform Ltd)
Task: {F2EAC0F0-5E7D-44CE-AD47-B9DD76D8F4C7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-02] (Google Inc.)
Task: {F46C7243-E555-43AA-B1AC-D299A6520B73} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\Bootstrap.exe [2013-07-18] (Intel Corporation)
Task: {FFD606E3-9EFF-418E-AAAF-CBEB75CFD096} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\Bootstrap.exe [2013-07-18] (Intel Corporation)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-05-02 21:39 - 2015-04-08 23:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-03-20 12:59 - 2012-03-20 12:59 - 03340288 _____ () C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe
2015-05-02 21:40 - 2015-04-09 02:58 - 00721552 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster64.dll
2015-05-02 21:40 - 2015-04-09 02:58 - 00854160 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk64.dll
2015-05-02 20:57 - 2015-04-23 23:03 - 00184184 _____ () C:\Program Files (x86)\STOPzilla\Definitions\libBase64.dll
2015-05-02 20:57 - 2015-04-23 23:03 - 00175992 _____ () C:\Program Files (x86)\STOPzilla\Definitions\libMachoUniv.dll
2015-05-02 21:40 - 2015-04-09 02:58 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2010-12-02 18:56 - 2010-12-02 18:56 - 00815104 _____ () C:\Program Files (x86)\OSCAR Editor X7\Data\X7\Forms\OSD_Text\OSD_Text.dll
2011-01-09 21:45 - 2011-01-09 21:45 - 00088064 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_MouseDeviceManager.dll
2012-02-07 12:20 - 2012-02-07 12:20 - 02413568 _____ () C:\Program Files (x86)\OSCAR Editor X7\Data\X7\Forms\ScreenCapture\ScreenCapture.dll
2011-03-21 20:33 - 2011-03-21 20:33 - 00999424 _____ () C:\Program Files (x86)\OSCAR Editor X7\Data\X7\Forms\TrayIconWebAdvertisement\TrayIconWebAdvertisement.dll
2010-09-20 15:18 - 2010-09-20 15:18 - 00085504 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_ZoomControl.dll
2010-09-20 15:18 - 2010-09-20 15:18 - 00054272 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_ScrollbarControl.dll
2011-04-12 16:14 - 2011-04-12 16:14 - 00063488 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_AnalyzeGesturesInRight.dll
2010-11-01 21:16 - 2010-11-01 21:16 - 00062976 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_AnalyzeGesturesInOne.dll
2011-08-10 14:43 - 2011-08-10 14:43 - 00118272 _____ () C:\Program Files (x86)\OSCAR Editor X7\DLL\DLL_Wheel4D.dll
2015-05-02 21:05 - 2015-04-28 04:07 - 14980424 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\PepperFlash\pepflashplayer.dll
2015-05-03 08:00 - 2014-02-10 13:44 - 04592128 _____ () C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libglesv2.dll
2015-05-03 08:00 - 2014-02-10 13:44 - 00112128 _____ () C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libegl.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Radomír\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SBAMSvc => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-311206292-3038123496-1551756549-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Radomír\AppData\Roaming\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
DNS Servers: 10.0.0.138

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run: => "XboxStat"
HKU\S-1-5-21-311206292-3038123496-1551756549-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-311206292-3038123496-1551756549-1001\...\StartupApproved\Run: => "BitComet"

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{1749A295-00A0-454E-9722-E3EA9DDB0885}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F468817B-CED0-4F9B-A928-98BA4E61DA0C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6A4768FD-6641-4E32-B9C0-B19CD2CC2BBB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{3E18FCD0-9C48-4DE7-B7FC-34329BD631D7}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{15C7F779-EB59-4AD7-ABC6-C4CE6A9EA122}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{B6AC3C3E-424D-4A37-86BC-BA44A9D3CDD6}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{FCE2B95E-1C19-4FE8-BB36-790182CF7B38}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{E53F61E4-62DE-4164-A876-CA37F3075E75}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{75F0C91C-0AF7-41DA-9C77-2722C5BC7A19}] => (Allow) D:\Uplay\cache\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{E2FAA429-80CE-40C0-9163-4EFEAF27F640}] => (Allow) D:\Uplay\cache\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{4D780989-AF9A-4F00-AFD1-E2416F0A5352}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grim Dawn\Grim Dawn.exe
FirewallRules: [{C8F03522-3177-4F23-B7AB-48CA70678B76}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grim Dawn\Grim Dawn.exe
FirewallRules: [{B028848C-765D-4176-B24F-6DA3E6FC4CBA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Victor Vran\VictorVranSteam.exe
FirewallRules: [{A54A931F-192F-4934-A67D-20B5F4B6C59E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Victor Vran\VictorVranSteam.exe
FirewallRules: [{D59D790C-94A1-49AE-BCAE-0F693240B35B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{2AB81F50-1DA6-449A-A236-D8EC00A25505}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{063FCFC0-A064-4FF0-B1AC-BB14B0EC50E5}] => (Allow) D:\Uplay\cache\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{6128AA11-88D0-43E8-9A86-8424AAC9281E}] => (Allow) D:\Uplay\cache\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{AC33698A-FA0A-43CA-8193-6A96851A61B6}] => (Allow) D:\Uplay\cache\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{B0648B59-DB63-4054-84C2-36D58CE02DE8}] => (Allow) D:\Uplay\cache\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{6E7B9EB5-30CA-4F73-B3D4-8B8AA5D198B2}] => (Allow) G:\SteamLibrary\steamapps\common\Lords Of The Fallen\bin\LordsOfTheFallen.exe
FirewallRules: [{1C34ABBE-88DC-41C3-B43E-4341AC1C89BD}] => (Allow) G:\SteamLibrary\steamapps\common\Lords Of The Fallen\bin\LordsOfTheFallen.exe
FirewallRules: [{6D352026-08BA-4496-9D9D-1C2640B837D8}] => (Allow) G:\SteamLibrary\steamapps\common\deadrising3\deadrising3.exe
FirewallRules: [{1F2E1023-977E-4096-97EE-453478193B54}] => (Allow) G:\SteamLibrary\steamapps\common\deadrising3\deadrising3.exe
FirewallRules: [{EEF4D05C-E2D9-47D6-A0C2-FE19A3DB6AD8}] => (Allow) G:\Uplay\cache\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{A1383C14-5931-43B2-9B39-E4C4E9025E5B}] => (Allow) G:\Uplay\cache\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{13EBD659-8E7A-49AB-8CA2-9D317E8D0A5C}] => (Allow) G:\Uplay\cache\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{8BA5E02C-B3EB-4EDB-9D57-C5B44FBE4767}] => (Allow) G:\Uplay\cache\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{B74754EF-D8B5-4109-8758-DF4D39521FF3}] => (Allow) G:\SteamLibrary\steamapps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{AC258F3A-0F4E-4EF4-8F1D-0239942140F2}] => (Allow) G:\SteamLibrary\steamapps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{78A13C34-DA18-4F3E-B3FE-70D9C612074A}] => (Allow) G:\SteamLibrary\steamapps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{31ACDC71-1728-40A4-A1A6-C34855B8CA97}] => (Allow) G:\SteamLibrary\steamapps\common\Metro Last Light\MetroLL.exe
FirewallRules: [{47F822E7-83C4-4F87-B007-928DE9280C1B}] => (Allow) F:\SteamLibrary\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe
FirewallRules: [{9996FECF-8341-43C6-8C3D-62370821A378}] => (Allow) F:\SteamLibrary\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe
FirewallRules: [{AD116FA2-A494-4260-9B29-4E7A2C2D1A84}] => (Allow) F:\SteamLibrary\steamapps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe
FirewallRules: [{C143FFEF-4786-4214-93AA-0148401FDDF1}] => (Allow) F:\SteamLibrary\steamapps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe
FirewallRules: [{76984597-61F6-4925-8994-C6E5BE3376C9}] => (Allow) F:\SteamLibrary\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{261AB59A-366C-46B7-AA61-B45AC2208543}] => (Allow) F:\SteamLibrary\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{617DB85E-897C-4D67-9D21-74CBF5510093}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Torchlight II\ModLauncher.exe
FirewallRules: [{44D08A74-C539-48B8-83C2-E8796556313A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Torchlight II\ModLauncher.exe
FirewallRules: [{CA010DC6-5605-4512-BB37-5AF9928A7CD0}] => (Allow) F:\origin\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{B84E8C4D-06E7-4B63-A330-C239A7122744}] => (Allow) F:\origin\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{7303FBCB-8B4D-4897-B94B-97C71E99CA4F}] => (Allow) F:\SteamLibrary\steamapps\common\The Bureau\Binaries\Win32\TheBureau.exe
FirewallRules: [{05EBCA28-0442-4201-B6DD-E4A0B9127FD0}] => (Allow) F:\SteamLibrary\steamapps\common\The Bureau\Binaries\Win32\TheBureau.exe
FirewallRules: [{531E4C14-4D0D-44D2-A46A-5295CA0CFB9B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{C8AE5526-CD2A-4669-8124-17E864F248C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [TCP Query User{1E675A49-40FC-4F98-B0A2-CCEB567AACD4}F:\program files (x86)\bethesda softworks\hunted - the demon's forge\binaries\win32\p4dftre.dll] => (Allow) F:\program files (x86)\bethesda softworks\hunted - the demon's forge\binaries\win32\p4dftre.dll
FirewallRules: [UDP Query User{19064F50-7C34-4B27-9AD8-187225E29695}F:\program files (x86)\bethesda softworks\hunted - the demon's forge\binaries\win32\p4dftre.dll] => (Allow) F:\program files (x86)\bethesda softworks\hunted - the demon's forge\binaries\win32\p4dftre.dll
FirewallRules: [{D91FD292-F0EC-4148-B9AF-B5CF76C7C3AD}] => (Allow) F:\SteamLibrary\steamapps\common\Ryse Son of Rome\Bin64\Ryse.exe
FirewallRules: [{07E066B1-12FB-43F8-923C-518C14CAF3E8}] => (Allow) F:\SteamLibrary\steamapps\common\Ryse Son of Rome\Bin64\Ryse.exe
FirewallRules: [{534D73F5-E771-496F-A42B-81BC24C15912}] => (Allow) F:\SteamLibrary\steamapps\common\Castlevania Lords of Shadow 2\bin\CLOS2.exe
FirewallRules: [{06FFC622-D78A-4E75-A78D-E7524077768B}] => (Allow) F:\SteamLibrary\steamapps\common\Castlevania Lords of Shadow 2\bin\CLOS2.exe
FirewallRules: [{30331BE1-AEE5-42A3-B5CA-40FB27F4BDC7}] => (Allow) F:\SteamLibrary\steamapps\common\Mafia II\pc\mafia2.exe
FirewallRules: [{298352F9-532F-40E9-8B1F-8B15F010DEE3}] => (Allow) F:\SteamLibrary\steamapps\common\Mafia II\pc\mafia2.exe
FirewallRules: [{E74C6D17-D9F4-40D2-84D1-B1EF9B3A098B}] => (Allow) F:\SteamLibrary\steamapps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{EA7D06C1-B3D8-42E3-A870-BBDF4D998A2A}] => (Allow) F:\SteamLibrary\steamapps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{9F9E19FB-9F1A-4B9E-B57D-B4A875529D18}] => (Allow) F:\uplay\Assassin's Creed Unity\ACU.exe
FirewallRules: [{F94B4A8A-95F4-4FB5-8217-B18386973049}] => (Allow) F:\uplay\Assassin's Creed Unity\ACU.exe
FirewallRules: [{2BDF592C-3FB0-497E-8AA6-11A9BFF5DF54}] => (Allow) F:\origin\Kingdoms of Amalur Reckoning\Reckoning.exe
FirewallRules: [{7C5FF89A-8EBF-4A1D-B92C-49CF9B930D10}] => (Allow) F:\origin\Kingdoms of Amalur Reckoning\Reckoning.exe
FirewallRules: [{DA99F1CD-6953-4117-98B4-67B3483F8EE9}] => (Allow) G:\SteamLibrary\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{B04047B5-8BC9-44D1-AF66-46589B6EA955}] => (Allow) G:\SteamLibrary\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{728A1022-5808-4058-9650-6485186715A4}] => (Allow) C:\Program Files (x86)\Rockstar Games\Social Club\subprocess.exe
FirewallRules: [{5ECAB10B-434C-4354-A1CB-4BADF73CBF56}] => (Allow) C:\Program Files (x86)\Rockstar Games\Social Club\subprocess.exe
FirewallRules: [{0B2EB4F1-A4CF-4DDE-A072-8711EB2B9014}] => (Allow) C:\Program Files (x86)\Rockstar Games\Social Club\subprocess.exe
FirewallRules: [{512DD594-25E8-42DA-B838-6FDCE5B474BF}] => (Allow) C:\Program Files (x86)\Rockstar Games\Social Club\subprocess.exe
FirewallRules: [{8B96AC49-949D-4CAA-A4E5-83E3752A9CA1}] => (Allow) F:\SteamLibrary\steamapps\common\Dishonored RHCP\Binaries\Win32\Dishonored.exe
FirewallRules: [{F7F033FA-3986-4511-9A59-59F9AA66E092}] => (Allow) F:\SteamLibrary\steamapps\common\Dishonored RHCP\Binaries\Win32\Dishonored.exe
FirewallRules: [{0203B51B-1D33-4ED6-99F5-A07F6137F9CD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{7F2E4723-523A-4BF1-9581-B39F14F8C2D6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{663240FE-5C1B-45AF-94FF-8A7C6A25D156}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{397DD123-FDCE-4B34-925E-C7684B09AF23}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{3976363B-E629-4E3C-BFE3-CDCD74B8A845}] => (Allow) E:\Program Files (x86)\BitComet\BitComet.exe
FirewallRules: [{45AC6607-DAB9-4BD4-86DD-B36D44D48A7C}] => (Allow) E:\Program Files (x86)\BitComet\BitComet.exe
FirewallRules: [{47F6D931-9CD8-4DC7-AAC0-AFF37713DF59}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{FFEA07C9-AA6F-4181-8C2B-E85892B57CE9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{96973D31-F4B3-446D-BE3F-D4FD35CC7752}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{D06ACAA1-EB9F-4C85-BC97-BFB0166B0AAB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [TCP Query User{35F8ED07-8D90-4E67-BE93-7ECB9F6089A5}I:\grand theft auto v\gta5.exe] => (Allow) I:\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{64E1FB00-2438-45C7-82E8-399A10CD3A7C}I:\grand theft auto v\gta5.exe] => (Allow) I:\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{01C1E4C6-4930-4498-B924-F749196EFABC}I:\grand theft auto v\gta5.exe] => (Allow) I:\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{F42279CC-C97C-4631-8C75-2F6E8F339C77}I:\grand theft auto v\gta5.exe] => (Allow) I:\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{3537493D-5BBB-4B18-A0DA-7A26445397C0}E:\program files (x86)\bitcomet\bitcomet.exe] => (Allow) E:\program files (x86)\bitcomet\bitcomet.exe
FirewallRules: [UDP Query User{9ACDAE14-EB63-499E-BDB9-84948895B86B}E:\program files (x86)\bitcomet\bitcomet.exe] => (Allow) E:\program files (x86)\bitcomet\bitcomet.exe
FirewallRules: [TCP Query User{303F6247-7F63-4549-93B5-1DA7497AF25C}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{A0FDB8D5-8427-466E-A04C-0640B2BA9914}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{C8AE7952-4C30-440C-A5F3-9D6CAA479B37}] => (Allow) F:\SteamLibrary\steamapps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{1B42464E-D3D0-47A5-99AE-AF7F20F7555D}] => (Allow) F:\SteamLibrary\steamapps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{300E9B65-D8A7-4D8C-9498-C02368D1220C}] => (Allow) F:\origin\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{0B79169D-D3F3-4AFA-9526-7551B4A75A46}] => (Allow) F:\origin\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{D2DD56BD-5A0C-40F8-B488-B6944158ED5F}] => (Allow) F:\SteamLibrary\steamapps\common\Star Wars The Force Unleashed 2\SWTFU2.exe
FirewallRules: [{E7FB7194-83E1-44D6-B290-1425162C9AD3}] => (Allow) F:\SteamLibrary\steamapps\common\Star Wars The Force Unleashed 2\SWTFU2.exe
FirewallRules: [{53778806-5E4A-47ED-AE06-5B170E14D4E2}] => (Allow) G:\SteamLibrary\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{571BA284-3B55-4287-9656-B0FDB63A306C}] => (Allow) G:\SteamLibrary\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{2CACFE92-B2F1-4F30-9975-C5E9B2155834}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{BAA5693B-A949-4A01-A7AA-351B39C49C8B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{8A35841D-7CB6-45B2-8D25-56D402196ED8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{B9360F14-58C3-493F-B927-D6A63F5B2EBE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{7B0A6492-6C11-4AC2-97BC-30CAD06EFEEA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EBF36FA9-8029-4F35-B10B-EBFFE8E7901F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{BEC554DA-1D63-4F9B-A566-8324497A464F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

==================== Faulty Device Manager Devices =============

Name: Ovladač XBOX 360 pro systém Windows
Description: Ovladač XBOX 360 pro systém Windows
Class Guid: {d61ca365-5af4-4486-998b-9db4734c6ca3}
Manufacturer: Microsoft
Service: xusb22
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/03/2015 10:21:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: vlc.exe, verze: 2.2.0.0, časové razítko: 0x00000004
Název chybujícího modulu: libqt4_plugin.dll, verze: 2.2.0.0, časové razítko: 0x00020002
Kód výjimky: 0x40000015
Posun chyby: 0x007c915a
ID chybujícího procesu: 0xe30
Čas spuštění chybující aplikace: 0xvlc.exe0
Cesta k chybující aplikaci: vlc.exe1
Cesta k chybujícímu modulu: vlc.exe2
ID zprávy: vlc.exe3
Úplný název chybujícího balíčku: vlc.exe4
ID aplikace související s chybujícím balíčkem: vlc.exe5

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT AUTHORITY)
Description: Filtr událostí s dotazem select * from __InstanceModificationEvent where targetinstance isa '__ArbitratorConfiguration' nebylo možné znovu aktivovat v oboru názvů //./root, protože došlo k chybě 0x80041033. Dokud nebude problém odstraněn, nebude možné události prostřednictvím tohoto filtru doručovat.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __TimerEvent, jehož cílová třída __TimerEvent v oboru názvů //./root neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __TimerEvent, jehož cílová třída __TimerEvent v oboru názvů //./root/subscription neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __TimerEvent, jehož cílová třída __TimerEvent v oboru názvů //./root/CIMV2 neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __SystemEvent, jehož cílová třída __SystemEvent v oboru názvů //./root neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __SystemEvent, jehož cílová třída __SystemEvent v oboru názvů //./root/subscription neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __SystemEvent, jehož cílová třída __SystemEvent v oboru názvů //./root/CIMV2 neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __NamespaceOperationEvent, jehož cílová třída __NamespaceOperationEvent v oboru názvů //./root neexistuje. Dotaz bude ignorován.

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: Zprostředkovatel událostí $Core se pokusil zaregistrovat dotaz select * from __NamespaceOperationEvent, jehož cílová třída __NamespaceOperationEvent v oboru názvů //./root/subscription neexistuje. Dotaz bude ignorován.


System errors:
=============
Error: (05/03/2015 00:20:10 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 00:20:10 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 00:20:10 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 00:18:02 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 00:18:02 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 00:18:02 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 00:13:02 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 00:13:02 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 00:13:02 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (05/03/2015 00:10:54 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1058


Microsoft Office Sessions:
=========================
Error: (05/03/2015 10:21:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: vlc.exe2.2.0.000000004libqt4_plugin.dll2.2.0.00002000240000015007c915ae3001d0857a1eb4733dC:\Program Files (x86)\VideoLAN\VLC\vlc.exeC:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll6cc432fc-f16d-11e4-82aa-c860009b56f1

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT AUTHORITY)
Description: //./rootselect * from __InstanceModificationEvent where targetinstance isa '__ArbitratorConfiguration'0x80041033

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __TimerEvent__TimerEvent//./root

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __TimerEvent__TimerEvent//./root/subscription

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __TimerEvent__TimerEvent//./root/CIMV2

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __SystemEvent__SystemEvent//./root

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __SystemEvent__SystemEvent//./root/subscription

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __SystemEvent__SystemEvent//./root/CIMV2

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __NamespaceOperationEvent__NamespaceOperationEvent//./root

Error: (05/03/2015 09:24:43 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT AUTHORITY)
Description: $Coreselect * from __NamespaceOperationEvent__NamespaceOperationEvent//./root/subscription


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz
Percentage of memory in use: 11%
Total physical RAM: 16326.8 MB
Available physical RAM: 14469.44 MB
Total Pagefile: 17226.8 MB
Available Pagefile: 15100.43 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: (Win 8.1 (ssd)) (Fixed) (Total:237.96 GB) (Free:46.36 GB) NTFS
Drive d: (hry (ssd)) (Fixed) (Total:74.31 GB) (Free:14.71 GB) NTFS
Drive e: (záloha) (Fixed) (Total:68.36 GB) (Free:63.82 GB) NTFS
Drive f: (hry) (Fixed) (Total:396.96 GB) (Free:100.7 GB) NTFS
Drive g: (hry 1) (Fixed) (Total:139.64 GB) (Free:27.71 GB) NTFS
Drive h: (seriály,hudba) (Fixed) (Total:467.28 GB) (Free:135.89 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive i: (filmy,dokument,programy) (Fixed) (Total:464.23 GB) (Free:192.06 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 74.5 GB) (Disk ID: E1521E52)

Partition: GPT Partition Type.

========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 69A8C970)

Partition: GPT Partition Type.

========================================================
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 139.7 GB) (Disk ID: 29D57381)
Partition 1: (Not Active) - (Size=139.6 GB) - (Type=07 NTFS)

========================================================
Disk: 4 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 29D54C7C)
Partition 1: (Active) - (Size=467.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=464.2 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Prosím o kontrolu logu. (problém s Virus Web Protect )

#13 Příspěvek od Márty84 »

Super, tak mam potreti ten stejny log :arcisit:
:arrow: Log FRST.txt vložíme do tématu, log Addition.txt můžete zabalit do archivu (RAR,ZIP...) a dát přílohy svého příspěvku.
Mam tu 3x Addition.txt . Ale ja potrebuji hlavne ten s nazvem FRST.txt :)
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).

rado145
Návštěvník
Návštěvník
Příspěvky: 64
Registrován: 22 bře 2014 08:49

Re: Prosím o kontrolu logu. (problém s Virus Web Protect )

#14 Příspěvek od rado145 »

Moc se omlouvám.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2015
Ran by rado (administrator) on RADEK on 03-05-2015 12:46:26
Running from E:\Downloads
Loaded Profiles: rado (Available profiles: rado)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(ThreatTrack Security, Inc.) C:\Program Files (x86)\STOPzilla\SBAMSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Creative Technology Ltd.) C:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Entertainment Center\EAXLoadr.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CTxfispi.exe
(EnTech Taiwan) C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe
(Creative Technology Ltd.) C:\Program Files (x86)\Creative\ShareDLL\CADI\NotiMan.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-04-09] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [RCSystem] => C:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe [57344 2006-11-22] (Creative Technology Ltd.)
HKLM-x32\...\Run: [AudioDrvEmulator] => C:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe [57344 2006-11-22] (Creative Technology Ltd.)
HKLM-x32\...\Run: [VolPanel] => C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [180224 2006-12-06] (Creative Technology Ltd)
HKU\S-1-5-21-311206292-3038123496-1551756549-1001\...\Run: [OscarEditor] => C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe [3340288 2012-03-20] ()
HKU\S-1-5-21-311206292-3038123496-1551756549-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-311206292-3038123496-1551756549-1001\...\Run: [BitComet] => e:\Program Files (x86)\BitComet\BitComet.exe [14276784 2013-12-31] (www.BitComet.com)
HKU\S-1-5-21-311206292-3038123496-1551756549-1001\...\MountPoints2: {ffbcbbd6-d174-11e4-8251-806e6f6e6963} - "J:\setup.exe"
IFEO\nvidia.steamlauncher.exe: [Debugger] "C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
IFEO\nvstreamer.exe: [Debugger] "C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dell Display Manager.lnk [2015-04-16]
ShortcutTarget: Dell Display Manager.lnk -> C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe (EnTech Taiwan)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
URLSearchHook: HKLM-x32 - Default Value = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-311206292-3038123496-1551756549-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO-x32: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> e:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll [2013-11-29] (BitComet)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll [2011-03-09] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-05-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-05-02] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR Profile: C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-02]
CHR Extension: (HD for YouTube™) - C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\Default\Extensions\akjbfncbadcmnkopckegnmjgihagponf [2015-05-03]
CHR Extension: (Google Docs) - C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-02]
CHR Extension: (Google Drive) - C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-02]
CHR Extension: (YouTube) - C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-02]
CHR Extension: (ImprovedTube - YouTube Extension) - C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnomihfieiccainjcjblhegjgglakjdd [2015-05-03]
CHR Extension: (Adblock for Youtube™) - C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2015-05-03]
CHR Extension: (Google Search) - C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-02]
CHR Extension: (Video Downloader professional) - C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2015-05-03]
CHR Extension: (Bookmark Manager) - C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-02]
CHR Extension: (Earth) - C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\Default\Extensions\jieopfhnlbjmbpckpdhfdedccdmngdac [2015-05-03]
CHR Extension: (Downloads) - C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngbcgifdaopbfflfhbcfeomijfbbcadi [2015-05-03]
CHR Extension: (Google Wallet) - C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-02]
CHR Extension: (Gmail) - C:\Users\Radomír\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-02]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 BITCOMET_HELPER_SERVICE; E:\Program Files (x86)\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2015-03-24] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [File not signed]
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1429504 2015-03-05] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-04-09] (NVIDIA Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-04-09] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-04-09] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1931632 2015-04-13] (Electronic Arts)
R2 SBAMSvc; C:\Program Files (x86)\STOPzilla\SBAMSvc.exe [3937472 2014-01-07] (ThreatTrack Security, Inc.)
S2 sz7; C:\Program Files (x86)\STOPzilla\SZServer.exe [1592624 2015-04-06] (iS3, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Andbus; C:\Windows\System32\drivers\lgandbus64.sys [19456 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\system32\DRIVERS\lganddiag64.sys [27648 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\system32\DRIVERS\lgandgps64.sys [27136 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\system32\DRIVERS\lgandmodem64.sys [34304 2012-03-02] (LG Electronics Inc.)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41032 2013-05-23] (ThreatTrack Security)
S3 gfiutil; C:\Windows\System32\drivers\gfiutil.sys [31264 2013-09-04] (ThreatTrack Security)
R3 LgBttPort; C:\Windows\system32\DRIVERS\lgbtpt64.sys [16384 2009-09-29] (LG Electronics Inc.)
R3 lgbusenum; C:\Windows\System32\drivers\lgbtbs64.sys [14848 2009-09-29] (LG Electronics Inc.)
R3 LGVMODEM; C:\Windows\system32\DRIVERS\lgvmdm64.sys [17408 2009-09-29] (LG Electronics Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-04-09] (NVIDIA Corporation)
R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [39056 2015-04-09] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2015-04-09] (NVIDIA Corporation)
R2 sbapifs; C:\Windows\System32\DRIVERS\sbapifs.sys [88928 2013-10-01] (ThreatTrack Security, Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R3 XENfiltv; C:\Windows\system32\drivers\XENfiltv.sys [25600 2009-07-31] (Creative Technology Ltd.)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-03 09:44 - 2015-05-03 12:46 - 00000000 ____D () C:\FRST
2015-05-03 08:58 - 2015-05-03 09:48 - 00048936 _____ () C:\Windows\WindowsUpdate.log
2015-05-03 08:50 - 2015-05-03 08:43 - 02204160 _____ () C:\Users\Radomír\Desktop\adwcleaner_4.203.exe
2015-05-03 08:47 - 2015-05-03 09:26 - 00001392 _____ () C:\Windows\setupact.log
2015-05-03 08:47 - 2015-05-03 08:47 - 00000000 _____ () C:\Windows\setuperr.log
2015-05-03 08:46 - 2015-05-03 08:51 - 00000000 ____D () C:\AdwCleaner
2015-05-03 08:15 - 2015-05-03 08:15 - 00000000 ____D () C:\rsit
2015-05-03 08:15 - 2015-05-03 08:15 - 00000000 ____D () C:\Program Files\trend micro
2015-05-02 21:51 - 2015-05-02 21:51 - 00000000 ____D () C:\ProgramData\VIPRE
2015-05-02 21:44 - 2015-05-02 21:44 - 00000000 ____D () C:\Users\Radomír\AppData\Roaming\NVIDIA
2015-05-02 21:40 - 2015-05-02 21:40 - 00000000 ____D () C:\Users\Radomír\AppData\Local\NVIDIA Corporation
2015-05-02 21:40 - 2015-05-02 21:40 - 00000000 ____D () C:\Users\Radomír\AppData\Local\NVIDIA
2015-05-02 21:40 - 2015-05-02 21:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-05-02 21:40 - 2015-04-09 02:58 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-05-02 21:40 - 2015-04-09 02:58 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-05-02 21:39 - 2015-05-03 09:26 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-02 21:39 - 2015-05-02 21:40 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-05-02 21:39 - 2015-04-09 02:58 - 31570064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 30397072 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 25375048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 24053576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 17176128 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 15818528 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 15716232 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 14006752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 12852784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 12689592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 11380728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 10423952 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-05-02 21:39 - 2015-04-09 02:58 - 02896528 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 02573456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 01895568 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435012.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcvadgenco64.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435012.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 01540240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 01086424 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 01047368 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 01037640 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00970568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00962192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00927440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00849552 _____ () C:\Windows\system32\nvmcumd.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00499344 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00402576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00390472 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00346256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00195728 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2015-05-02 21:39 - 2015-04-09 02:58 - 00175880 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00154256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00150648 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00100680 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcaparm.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00078480 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00066704 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00039056 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvadarm.sys
2015-05-02 21:39 - 2015-04-09 02:58 - 00038032 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-05-02 21:39 - 2015-04-09 02:58 - 00035472 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00032400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00030536 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2015-05-02 21:39 - 2015-04-09 02:58 - 00029329 _____ () C:\Windows\system32\nvinfo.pb
2015-05-02 21:39 - 2015-04-08 23:30 - 06841488 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-05-02 21:39 - 2015-04-08 23:30 - 03478344 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-05-02 21:39 - 2015-04-08 23:30 - 02558608 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-05-02 21:39 - 2015-04-08 23:30 - 00936264 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-05-02 21:39 - 2015-04-08 23:30 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-05-02 21:39 - 2015-04-08 23:30 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-05-02 21:39 - 2015-04-08 22:32 - 00560968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-05-02 21:39 - 2015-04-08 19:52 - 04336074 _____ () C:\Windows\system32\nvcoproc.bin
2015-05-02 21:38 - 2015-05-02 21:40 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-05-02 21:05 - 2015-05-03 12:10 - 00000960 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-02 21:05 - 2015-05-03 09:27 - 00000956 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-02 21:05 - 2015-05-02 21:05 - 00003932 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-02 21:05 - 2015-05-02 21:05 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-02 21:05 - 2015-05-02 21:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-02 21:05 - 2015-05-02 21:05 - 00000000 ____D () C:\Program Files (x86)\Google
2015-05-02 20:57 - 2013-09-04 14:57 - 00031264 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\gfiutil.sys
2015-05-02 20:57 - 2013-05-23 08:39 - 00041032 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\gfiark.sys
2015-05-02 20:53 - 2015-05-03 09:26 - 00000000 ____D () C:\ProgramData\STOPzilla!
2015-05-02 20:53 - 2015-05-02 20:57 - 00000000 ____D () C:\Program Files (x86)\STOPzilla
2015-05-02 20:53 - 2015-05-02 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\STOPzilla
2015-05-02 20:25 - 2015-05-02 20:25 - 00000000 _____ () C:\autoexec.bat
2015-05-02 19:29 - 2015-05-02 19:31 - 00000000 ____D () C:\Users\Radomír\AppData\Roaming\Opera Software
2015-05-02 19:29 - 2015-05-02 19:31 - 00000000 ____D () C:\Users\Radomír\AppData\Local\Opera Software
2015-05-02 19:29 - 2015-05-02 19:31 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-05-02 19:29 - 2015-05-02 19:29 - 00003246 _____ () C:\Windows\System32\Tasks\Opera N Sunday
2015-05-02 19:29 - 2015-05-02 19:29 - 00003246 _____ () C:\Windows\System32\Tasks\Opera N Saturday
2015-05-02 19:29 - 2015-05-02 19:29 - 00000000 ____D () C:\Users\Radomír\AppData\Roaming\Mozilla
2015-05-02 19:29 - 2015-05-02 19:28 - 41177600 _____ () C:\Users\Radomír\Downloads\PhysX-9.13.1220-SystemSoftware.msi
2015-05-01 22:54 - 2015-05-01 22:54 - 00000000 ____D () C:\Users\Radomír\AppData\Local\Risen3
2015-05-01 08:14 - 2015-05-01 08:14 - 00000000 ____D () C:\Users\Radomír\Documents\LucasArts
2015-05-01 08:10 - 2015-05-01 08:10 - 00000000 ____D () C:\Users\Radomír\AppData\Local\LucasArts
2015-04-30 11:09 - 2015-03-20 03:56 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2015-04-30 11:09 - 2015-03-13 04:49 - 02256896 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-04-30 11:09 - 2015-03-13 04:28 - 01943040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-04-30 11:09 - 2015-03-11 03:49 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-04-30 11:09 - 2015-03-11 03:09 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-04-29 07:47 - 2015-04-02 00:22 - 02985984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2015-04-29 07:47 - 2015-04-02 00:20 - 04417536 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2015-04-29 07:47 - 2015-04-01 05:45 - 01491456 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2015-04-29 07:47 - 2015-04-01 04:31 - 01207296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2015-04-29 07:47 - 2015-03-13 02:29 - 00410017 _____ () C:\Windows\system32\ApnDatabase.xml
2015-04-26 20:51 - 2015-04-26 20:51 - 00000000 ____D () C:\ProgramData\Rockstar Games
2015-04-21 19:21 - 2015-04-03 02:35 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll
2015-04-21 19:21 - 2015-04-03 02:14 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoMetadataHandler.dll
2015-04-21 19:21 - 2015-03-17 19:26 - 00467776 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2015-04-21 19:21 - 2015-03-14 04:03 - 04179968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-04-21 19:21 - 2015-03-13 06:03 - 00239424 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2015-04-21 19:21 - 2015-03-13 06:03 - 00154432 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2015-04-21 19:21 - 2015-03-13 04:59 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-21 19:21 - 2015-03-13 04:38 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-21 19:21 - 2015-03-13 04:02 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2015-04-21 19:21 - 2015-03-13 03:11 - 02162176 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2015-04-21 19:21 - 2015-03-13 02:39 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2015-04-21 19:21 - 2015-03-09 04:02 - 00057856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys
2015-04-21 19:21 - 2015-03-06 05:08 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-04-21 19:21 - 2015-03-06 04:47 - 01696256 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2015-04-21 19:21 - 2015-03-06 04:43 - 01969664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-04-21 19:21 - 2015-03-05 01:09 - 01429504 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-04-21 19:21 - 2015-03-04 03:32 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2015-04-21 19:21 - 2015-03-04 03:12 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2015-04-21 19:21 - 2015-02-18 01:19 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2015-04-21 19:21 - 2015-02-13 04:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-04-21 19:21 - 2015-02-13 03:46 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-04-21 19:21 - 2015-01-30 02:53 - 02819584 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2015-04-16 15:45 - 2015-04-16 15:45 - 00000000 ____D () C:\Users\Radomír\AppData\Roaming\BitComet
2015-04-16 15:45 - 2015-04-16 15:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet
2015-04-15 22:53 - 2015-04-15 22:53 - 00000000 ____D () C:\Users\Radomr\Documents\Rockstar Games
2015-04-15 21:46 - 2015-04-26 20:51 - 00000000 ____D () C:\Users\Radomír\Documents\Rockstar Games
2015-04-15 21:46 - 2015-04-17 21:42 - 00000000 ____D () C:\Users\Radomír\AppData\Local\Rockstar Games
2015-04-15 21:46 - 2015-04-15 21:49 - 00000000 ____D () C:\Users\Radom�r\Documents\Rockstar Games
2015-04-15 21:46 - 2015-04-15 21:46 - 00000000 ____D () C:\Users\Radom�r
2015-04-15 09:57 - 2015-04-26 20:51 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2015-04-15 08:31 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-15 08:31 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-15 08:31 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-04-15 08:31 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-15 08:31 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-04-15 08:31 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2015-04-15 08:31 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-15 08:31 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-15 08:31 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-04-15 08:31 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-04-15 08:31 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-04-15 08:31 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-04-15 08:31 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-15 08:31 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-15 08:31 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-15 08:31 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-04-15 08:31 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-15 08:31 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-15 08:31 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-15 08:31 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-15 08:31 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-15 08:31 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-04-15 08:31 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-04-15 08:31 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-15 08:31 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-15 08:31 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-15 08:31 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-04-15 08:31 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-04-15 08:31 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-15 08:31 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-15 08:31 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-15 08:31 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-04-15 08:31 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-15 08:31 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-15 08:31 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-15 08:31 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-15 08:31 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-15 08:31 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-15 08:31 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2015-04-15 08:31 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 08:31 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-15 08:31 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-15 08:31 - 2015-01-06 05:01 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2015-04-15 08:31 - 2015-01-06 04:59 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2015-04-15 08:31 - 2015-01-06 03:12 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll
2015-04-15 08:31 - 2015-01-06 03:02 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll
2015-04-15 05:05 - 2015-04-15 05:05 - 00000000 ____D () C:\Users\Radomr
2015-04-14 20:51 - 2015-05-02 22:01 - 00000080 _____ () C:\Users\Radomír\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2015-04-14 20:48 - 2015-04-26 20:51 - 00000000 ____D () C:\Program Files\Rockstar Games
2015-04-14 08:37 - 2015-04-14 08:37 - 00000000 ____D () C:\Users\Radomír\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Čeština do The Bureau XCOM Declassified
2015-04-13 15:26 - 2015-04-09 02:58 - 14617288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-04-11 08:31 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-11 08:31 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-11 08:31 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-11 08:31 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-11 08:31 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-11 08:31 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-11 08:31 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-11 08:31 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-11 08:31 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-11 08:31 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2015-04-11 08:31 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-04-11 08:31 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-11 08:31 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-11 08:31 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-11 08:31 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-11 08:31 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-11 08:31 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-11 08:31 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-10 22:41 - 2015-04-10 22:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories
2015-04-10 22:41 - 2015-04-10 22:41 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories
2015-04-10 22:04 - 2015-04-10 22:04 - 00000000 ____D () C:\Users\Radomír\AppData\Roaming\Injustice
2015-04-08 18:11 - 2015-04-08 18:11 - 00000000 ____D () C:\Users\Radomír\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\česká lokalizace hry ADVENT RISING
2015-04-08 18:11 - 2015-04-08 18:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\česká lokalizace hry ADVENT RISING
2015-04-08 09:52 - 2015-04-08 09:52 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-08 09:51 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-08 09:51 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-08 09:51 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-08 09:51 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-08 09:51 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-08 09:51 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-08 09:51 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-08 09:51 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2015-04-08 09:51 - 2014-12-03 01:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-04 08:07 - 2015-04-04 08:07 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2015-04-04 08:07 - 2015-04-04 08:07 - 00000000 ____D () C:\Users\Radomír\AppData\Local\2K Games

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-03 12:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2015-05-03 10:29 - 2015-03-23 22:48 - 00000000 ____D () C:\Users\Radomír\AppData\Roaming\vlc
2015-05-03 10:08 - 2015-03-23 18:27 - 00000000 ____D () C:\Users\Radomír\Documents\Assassin's Creed Unity
2015-05-03 09:35 - 2015-03-23 18:03 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-03 09:33 - 2014-03-18 17:33 - 01745984 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-03 09:33 - 2014-03-18 16:54 - 00738682 _____ () C:\Windows\system32\perfh005.dat
2015-05-03 09:33 - 2014-03-18 16:54 - 00151404 _____ () C:\Windows\system32\perfc005.dat
2015-05-03 09:26 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-03 08:58 - 2015-03-23 17:19 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-311206292-3038123496-1551756549-1001
2015-05-03 08:40 - 2015-03-23 19:08 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-05-02 22:21 - 2015-03-23 21:58 - 00000000 ____D () C:\Users\Radomír\AppData\Roaming\Victor Vran
2015-05-02 21:46 - 2015-03-23 20:10 - 00000000 ____D () C:\Users\Radomír\AppData\Roaming\QuickScan
2015-05-02 21:40 - 2015-03-23 17:20 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-05-02 21:39 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Help
2015-05-02 21:22 - 2015-03-23 17:13 - 00000000 ____D () C:\Users\Radomír
2015-05-02 21:05 - 2015-03-23 17:36 - 00000000 ____D () C:\Users\Radomír\AppData\Local\Google
2015-05-02 19:56 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-05-02 19:36 - 2015-03-23 19:48 - 00000000 ____D () C:\Users\Radomír\AppData\Local\Battle.net
2015-05-02 16:56 - 2015-03-23 19:14 - 00007704 _____ () C:\Users\Radomír\Desktop\práce.txt
2015-05-01 17:46 - 2015-03-23 21:30 - 00000000 ____D () C:\Users\Radomír\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-05-01 07:56 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-04-30 11:16 - 2015-03-23 19:52 - 00000000 ____D () C:\ProgramData\Origin
2015-04-30 11:09 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-04-29 14:18 - 2015-03-23 18:27 - 00000000 ____D () C:\Users\Radomír\Documents\hry
2015-04-29 14:13 - 2015-03-23 19:56 - 00000000 ____D () C:\Users\Radomír\AppData\Roaming\Origin
2015-04-29 08:51 - 2015-03-24 10:22 - 00007602 _____ () C:\Users\Radomír\AppData\Local\Resmon.ResmonCfg
2015-04-26 07:55 - 2015-03-23 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-04-26 07:55 - 2015-03-23 18:02 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-04-25 15:59 - 2015-03-25 22:58 - 00000000 ____D () C:\Users\Radomír\AppData\Local\dxhr
2015-04-24 08:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2015-04-22 08:15 - 2015-03-23 18:55 - 00000000 ____D () C:\Program Files\WinRAR
2015-04-21 19:23 - 2013-08-22 16:44 - 00337768 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-21 19:21 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-04-21 19:21 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-04-17 21:31 - 2015-03-23 18:20 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-15 20:23 - 2015-03-23 21:28 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-04-15 08:34 - 2015-03-23 17:30 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-15 08:32 - 2015-03-23 17:30 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-15 08:10 - 2015-03-23 17:16 - 00000000 __RDO () C:\Users\Radomír\OneDrive
2015-04-15 03:54 - 2015-03-23 18:26 - 00003966 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{F88B53A1-052B-4F9E-9D86-4F88C4C1B9E0}
2015-04-14 09:38 - 2015-03-23 18:02 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-04-14 09:37 - 2015-03-23 18:02 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-14 09:37 - 2015-03-23 18:02 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-04-14 01:24 - 2013-08-22 17:38 - 00792056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-14 01:24 - 2013-08-22 17:38 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-13 09:48 - 2015-03-23 18:27 - 00000000 ____D () C:\Users\Radomír\Documents\my games
2015-04-13 07:56 - 2015-03-23 19:52 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-04-09 02:58 - 2015-03-23 18:59 - 01570672 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-04-09 02:58 - 2015-03-23 18:59 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-04-09 02:58 - 2015-03-23 18:57 - 03317344 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-04-09 02:58 - 2015-03-23 18:57 - 02935416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-04-08 18:57 - 2015-03-23 19:50 - 00000000 ____D () C:\Program Files (x86)\Diablo III
2015-04-08 10:18 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppCompat
2015-04-08 09:52 - 2015-03-23 18:35 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-07 21:58 - 2015-03-23 19:48 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2015-04-04 09:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\LiveKernelReports

==================== Files in the root of some directories =======

2015-03-24 10:22 - 2015-04-29 08:51 - 0007602 _____ () C:\Users\Radomír\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-01 07:56

==================== End Of Log ============================

Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Prosím o kontrolu logu. (problém s Virus Web Protect )

#15 Příspěvek od Márty84 »

Ten navod asi nebyl precteny moc peclive, ze jo? FRST mel byt na plose, aby spravne fungoval i Launcher... Ale nevadi, no, akorat log pak neni tak podrobny a cisteni je mene dukladne :?:


:arrow: Napiste mi velikost adresare plochy (C:\Users\rado\Plocha)



:arrow: Otevrete si poznamkovy blok a zkopirujte do nej tento skript

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKU\S-1-5-21-311206292-3038123496-1551756549-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-311206292-3038123496-1551756549-1001\...\Run: [BitComet] => e:\Program Files (x86)\BitComet\BitComet.exe [14276784 2013-12-31] (www.BitComet.com)
IFEO\nvidia.steamlauncher.exe: [Debugger] "C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
IFEO\nvstreamer.exe: [Debugger] "C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe

URLSearchHook: HKLM-x32 - Default Value = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKU\S-1-5-21-311206292-3038123496-1551756549-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO-x32: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> e:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll [2013-11-29] (BitComet)

S3 BITCOMET_HELPER_SERVICE; E:\Program Files (x86)\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R2 SBAMSvc; C:\Program Files (x86)\STOPzilla\SBAMSvc.exe [3937472 2014-01-07] (ThreatTrack Security, Inc.)
S2 sz7; C:\Program Files (x86)\STOPzilla\SZServer.exe [1592624 2015-04-06] (iS3, Inc.)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41032 2013-05-23] (ThreatTrack Security)
S3 gfiutil; C:\Windows\System32\drivers\gfiutil.sys [31264 2013-09-04] (ThreatTrack Security)
R2 sbapifs; C:\Windows\System32\DRIVERS\sbapifs.sys [88928 2013-10-01] (ThreatTrack Security, Inc.)
R2 PCSUService;PC Speed Up Service; C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe [2014-09-23 430888]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-02 107848]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-02 107848]

2015-05-02 20:57 - 2013-09-04 14:57 - 00031264 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\gfiutil.sys
2015-05-02 20:57 - 2013-05-23 08:39 - 00041032 _____ (ThreatTrack Security) C:\Windows\system32\Drivers\gfiark.sys
2015-05-02 20:53 - 2015-05-03 09:26 - 00000000 ____D () C:\ProgramData\STOPzilla!
2015-05-02 20:53 - 2015-05-02 20:57 - 00000000 ____D () C:\Program Files (x86)\STOPzilla
2015-05-02 20:53 - 2015-05-02 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\STOPzilla
2015-04-04 08:07 - 2015-04-04 08:07 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

C:\Program Files (x86)\Zrychleni Pocitace
C:\Windows\System32\DRIVERS\sbapifs.sys

Hosts:
EmptyTemp:
Reboot:
End
Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev fixlist a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte FRST jako spravce, kliknete na napis Fix a program vykona prikazy.
Po restartu pc by se mel objevit novy log - s nazvem fixlog, ten mi sem zase zkopirujte.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).

Zamčeno