Mizí disk

[pavelc]

zdravím
začal "mizet" disk, po restartu je zpět, tak radši poprosím i o SW preventivku

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 25-05-2015
Ran by Home_PC (administrator) on GAME-PC on 26-05-2015 18:13:38
Running from C:\Users\Home_PC\Desktop
Loaded Profiles: Home_PC & All (Available Profiles: Home_PC & All)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel Desktop Utilities\iduServ.exe
(Intel Corporation) C:\Program Files (x86)\Intel\FSC\FSCAppServ.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNACBSWK.EXE
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
() C:\Users\All\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\Users\All\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel Desktop Utilities\iptray.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNACBSWK.EXE
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel Desktop Utilities\iptray.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM\...\Run: [CNAP2 Launcher] => C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-14] (CANON INC.)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [ipTray.exe] => C:\Program Files (x86)\Intel\Intel Desktop Utilities\ipTray.exe [1632456 2011-11-10] (Intel(R) Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2014-02-07] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-765561512-130652983-1916819721-1000\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-15] (Valve Corporation)
HKU\S-1-5-21-765561512-130652983-1916819721-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3481408 2012-02-13] (DT Soft Ltd)
HKU\S-1-5-21-765561512-130652983-1916819721-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\System32\ASTROG~1.SCR
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3481408 2012-02-13] (DT Soft Ltd)
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [cz.seznam.software.szndesktop] => C:\Users\All\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [cz.seznam.software.autoupdate] => C:\Users\All\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [Clownfish] => [X]
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-15] (Valve Corporation)
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-02-07] (Samsung)
HKU\S-1-5-21-765561512-130652983-1916819721-1002\...\MountPoints2: J - J:\Setup.exe
HKU\S-1-5-21-765561512-130652983-1916819721-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\PhotoScreensaver.scr [477696 2010-11-21] (Microsoft Corporation)
Startup: C:\Users\Home_PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ubisoft register.lnk [2015-05-23]
ShortcutTarget: ubisoft register.lnk -> C:\Program Files (x86)\Ubi Soft\Register\schedule.exe (Ubi Soft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [S-1-5-21-765561512-130652983-1916819721-1002] => Internet Explorer proxy is enabled
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-765561512-130652983-1916819721-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\S-1-5-21-765561512-130652983-1916819721-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12454
HKU\S-1-5-21-765561512-130652983-1916819721-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.cz/
SearchScopes: HKU\S-1-5-21-765561512-130652983-1916819721-1000 -> {57311830-C3D9-4AC7-931A-3AAB685B4874} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_12454
SearchScopes: HKU\S-1-5-21-765561512-130652983-1916819721-1002 -> {04A905D4-8C3B-48E3-A70E-57F8664497B7} URL = http://www.mapy.cz/?query={searchTerms} ... arch_12454
SearchScopes: HKU\S-1-5-21-765561512-130652983-1916819721-1002 -> {08274FDB-0830-4F27-8989-9E33844178FE} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_12454
SearchScopes: HKU\S-1-5-21-765561512-130652983-1916819721-1002 -> {0BF4B81D-12EF-4258-83A7-F2E93C16617B} URL = http://encyklopedie.seznam.cz/search?q= ... arch_12454
SearchScopes: HKU\S-1-5-21-765561512-130652983-1916819721-1002 -> {3FD06CA5-95F7-4AAD-A9AC-30A8E813BCAC} URL = http://search.seznam.cz/?q={searchTerms ... arch_12454
SearchScopes: HKU\S-1-5-21-765561512-130652983-1916819721-1002 -> {57311830-C3D9-4AC7-931A-3AAB685B4874} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_12454
SearchScopes: HKU\S-1-5-21-765561512-130652983-1916819721-1002 -> {6D495314-6FB5-4F22-A172-F6B4623B2A65} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_12454
SearchScopes: HKU\S-1-5-21-765561512-130652983-1916819721-1002 -> {847BFF22-80A9-4502-BDB5-A3B03D6EE561} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_12454
SearchScopes: HKU\S-1-5-21-765561512-130652983-1916819721-1002 -> {9EB0A7B7-AC45-4BC4-B3F2-2B2D0AE32A84} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
SearchScopes: HKU\S-1-5-21-765561512-130652983-1916819721-1002 -> {D38CBEA3-DA1B-4C3C-A39F-59659BD1B583} URL = http://www.novinky.cz/hledej?w={searchT ... arch_12454
SearchScopes: HKU\S-1-5-21-765561512-130652983-1916819721-1002 -> {F2679FE9-AB4B-4E7D-8EFF-A78356EC441F} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-11-04] (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-11-04] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-765561512-130652983-1916819721-1002 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Home_PC\AppData\Roaming\Mozilla\Firefox\Profiles\ev4pn85p.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> D:\Nová složka (2)\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin HKU\S-1-5-21-765561512-130652983-1916819721-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2014-12-18] ()
FF Plugin HKU\S-1-5-21-765561512-130652983-1916819721-1002: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\All\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
FF Plugin HKU\S-1-5-21-765561512-130652983-1916819721-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\All\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-03-23] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppluginrichmediaplayer.dll [2013-03-12] ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml [2014-02-05]
FF Extension: Adblock Plus - C:\Users\Home_PC\AppData\Roaming\Mozilla\Firefox\Profiles\ev4pn85p.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-31]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\firefox.cfg [2015-05-18] <==== ATTENTION

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [ochbjojkpcmlfeagbaahkofepalngihg] - No Path Or update_url value

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) []
R2 IduService; C:\Program Files (x86)\Intel\Intel Desktop Utilities\iduServ.exe [124616 2011-11-10] (Intel(R) Corporation)
R2 Intel(R) Desktop Boards FSC Application Service; C:\Program Files (x86)\Intel\FSC\FSCAppServ.exe [61440 2011-11-10] (Intel Corporation) []
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-12-18] ()
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 cpuio; C:\Windows\SysWOW64\Drivers\cpuiox64.sys [15384 2012-02-29] (Intel Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-03-13] (DT Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R1 SbFw; C:\Windows\System32\drivers\SbFw.sys [253528 2011-04-05] (Sunbelt Software, Inc.)
S3 SBFWIMCL; C:\Windows\System32\DRIVERS\sbfwim.sys [84568 2011-02-08] (Sunbelt Software, Inc.)
R3 SBFWIMCLMP; C:\Windows\System32\DRIVERS\SBFWIM.sys [84568 2011-02-08] (Sunbelt Software, Inc.)
S3 sbhips; C:\Windows\System32\drivers\sbhips.sys [60504 2011-04-05] (Sunbelt Software, Inc.)
R1 SbTis; C:\Windows\System32\drivers\sbtis.sys [94296 2011-04-05] (Sunbelt Software, Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-09-04] (Duplex Secure Ltd.)
U3 at65emrc; C:\Windows\System32\Drivers\at65emrc.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero byte File/Folder)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-26 18:13 - 2015-05-26 18:13 - 00018411 _____ () C:\Users\Home_PC\Desktop\FRST.txt
2015-05-26 18:13 - 2015-05-26 18:13 - 00000000 ____D () C:\FRST
2015-05-26 18:11 - 2015-05-26 18:11 - 02108928 _____ (Farbar) C:\Users\Home_PC\Desktop\FRST64.exe
2015-05-26 15:29 - 2015-05-26 15:29 - 00025905 _____ () C:\Users\All\Desktop\hs_err_pid3464.log
2015-05-26 15:27 - 2015-05-26 15:27 - 00025366 _____ () C:\Users\All\Desktop\hs_err_pid4520.log
2015-05-26 15:25 - 2015-05-26 15:25 - 00024989 _____ () C:\Users\All\Desktop\hs_err_pid308.log
2015-05-26 15:13 - 2015-05-26 15:13 - 00025646 _____ () C:\Users\All\Desktop\hs_err_pid2888.log
2015-05-26 15:08 - 2015-05-26 15:08 - 00025630 _____ () C:\Users\All\Desktop\hs_err_pid5140.log
2015-05-26 15:03 - 2015-05-26 15:03 - 00026148 _____ () C:\Users\All\Desktop\hs_err_pid5628.log
2015-05-26 15:00 - 2015-05-26 15:00 - 00026696 _____ () C:\Users\All\Desktop\hs_err_pid708.log
2015-05-26 08:26 - 2015-05-26 08:26 - 00025849 _____ () C:\Users\All\Desktop\hs_err_pid3096.log
2015-05-26 08:24 - 2015-05-26 08:24 - 00026666 _____ () C:\Users\All\Desktop\hs_err_pid3544.log
2015-05-26 08:21 - 2015-05-26 08:21 - 00025537 _____ () C:\Users\All\Desktop\hs_err_pid5200.log
2015-05-26 08:14 - 2015-05-26 08:14 - 00025525 _____ () C:\Users\All\Desktop\hs_err_pid5244.log
2015-05-25 17:50 - 2015-05-25 17:50 - 00026127 _____ () C:\Users\All\Desktop\hs_err_pid6684.log
2015-05-23 17:20 - 2015-05-23 17:20 - 00000798 _____ () C:\Users\Public\Desktop\The Settlers IV GOLD.lnk
2015-05-23 10:57 - 2015-05-23 11:23 - 469768192 _____ () C:\Users\All\Downloads\Penny-Dreadful-S02E03-The-Nightcomers-CZ-Titulky,Drama,Horor,-USA-,Velká-Británie,-2014.avi
2015-05-21 16:00 - 2015-05-21 16:00 - 00000907 _____ () C:\Users\All\Desktop\Play The Walking Dead nosTEAM.lnk
2015-05-21 13:37 - 2015-05-21 13:37 - 00026150 _____ () C:\Users\All\Desktop\hs_err_pid5760.log
2015-05-21 12:56 - 2015-05-21 12:56 - 00026283 _____ () C:\Users\All\Desktop\hs_err_pid5812.log
2015-05-21 06:32 - 2015-05-21 12:59 - 00000000 ____D () C:\Users\All\AppData\Local\BlackHole
2015-05-18 19:04 - 2015-05-18 19:04 - 00026300 _____ () C:\Users\All\Desktop\hs_err_pid4612.log
2015-05-18 13:42 - 2015-05-18 13:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-05-17 21:47 - 2015-05-17 21:47 - 00025630 _____ () C:\Users\All\Desktop\hs_err_pid5232.log
2015-05-17 16:09 - 2015-05-17 16:09 - 00000000 ____D () C:\Users\Home_PC\Desktop\Podklady PV 9
2015-05-17 14:38 - 2015-05-17 14:38 - 00000000 ____D () C:\Users\All\AppData\Local\UWebKit151
2015-05-17 14:38 - 2015-05-17 14:38 - 00000000 ____D () C:\ProgramData\boost_interprocess
2015-05-17 10:23 - 2015-05-17 10:23 - 00026112 _____ () C:\Users\All\Desktop\hs_err_pid4140.log
2015-05-16 16:03 - 2015-05-16 16:03 - 00026744 _____ () C:\Users\All\Desktop\hs_err_pid5500.log
2015-05-16 15:43 - 2015-05-16 15:43 - 00026517 _____ () C:\Users\All\Desktop\hs_err_pid4796.log
2015-05-15 16:17 - 2015-05-15 16:17 - 00026279 _____ () C:\Users\All\Desktop\hs_err_pid6116.log
2015-05-13 19:24 - 2015-05-13 19:24 - 00075364 _____ () C:\Users\Home_PC\Downloads\once.upon.a.time.s04e22.hdtv.x264-lol.srt
2015-05-12 19:12 - 2015-05-12 19:12 - 00026075 _____ () C:\Users\All\Desktop\hs_err_pid5716.log
2015-05-12 18:12 - 2015-05-12 18:12 - 00000000 ____D () C:\Users\Home_PC\Desktop\Závlahy_jednání_SPÚ_13.5.2015
2015-05-10 15:37 - 2015-05-10 15:37 - 00026740 _____ () C:\Users\All\Desktop\hs_err_pid5408.log
2015-05-09 11:11 - 2015-05-09 11:11 - 00025645 _____ () C:\Users\All\Desktop\hs_err_pid4264.log
2015-05-09 09:48 - 2015-05-09 09:49 - 00018549 _____ () C:\Windows\DirectX.log
2015-05-09 08:47 - 2015-05-09 08:47 - 00000755 _____ () C:\Users\Public\Desktop\Mortal Kombat X.lnk
2015-05-09 08:47 - 2015-05-09 08:47 - 00000755 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mortal Kombat X.lnk
2015-05-08 20:36 - 2015-05-16 13:10 - 00001055 _____ () C:\Users\Home_PC\Desktop\aukro UKK.txt
2015-05-08 09:31 - 2015-05-08 09:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TreeSize
2015-05-08 09:31 - 2015-05-08 09:31 - 00000000 ____D () C:\Program Files (x86)\JAM Software
2015-05-08 08:54 - 2015-05-08 08:54 - 00873976 _____ (JAM Software ) C:\Users\Home_PC\Downloads\TreeSizeSetup.exe
2015-05-08 06:39 - 2015-05-08 08:17 - 330961150 _____ () C:\Users\All\Downloads\The.Flash.S01E21.HDTV.XviD-FUM-cz-titulky-vloženy.avi
2015-05-08 06:14 - 2015-05-08 06:35 - 365932544 _____ () C:\Users\All\Downloads\iZombie-S01E08-CZ-Titulky.avi
2015-05-07 23:58 - 2015-05-07 23:58 - 00025696 _____ () C:\Users\All\Desktop\hs_err_pid2152.log
2015-05-06 21:36 - 2015-05-06 21:36 - 00408309 _____ () C:\Users\Home_PC\Downloads\KnC1.mobi
2015-05-05 12:27 - 2015-05-05 12:27 - 00000000 ____D () C:\Users\Home_PC\Desktop\Nová složka (3)
2015-05-04 18:32 - 2015-05-04 18:36 - 00000000 ____D () C:\Fraps
2015-05-03 18:49 - 2015-05-03 18:49 - 00004647 _____ () C:\Users\Home_PC\Downloads\CENEK_PAVEL_ING(1)(1).p12
2015-05-03 17:56 - 2015-05-03 17:56 - 00002458 _____ () C:\Users\Home_PC\Desktop\Návrh odměny čištění.txt
2015-05-03 11:48 - 2015-05-03 11:48 - 00000000 ____D () C:\Users\All\AppData\Roaming\MK10
2015-05-02 13:43 - 2015-05-02 13:43 - 00000000 ____D () C:\Users\All\Tracing
2015-05-02 10:58 - 2015-05-02 10:58 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\MK10
2015-05-02 10:52 - 2015-05-02 10:52 - 00000804 _____ () C:\Users\Home_PC\Desktop\magic.txt
2015-05-02 08:49 - 2015-05-02 08:54 - 64471040 _____ () C:\Users\Home_PC\Downloads\calibre-2.27.0.msi
2015-05-01 11:43 - 2015-05-03 11:30 - 00013354 _____ () C:\Users\Home_PC\Desktop\Mortal Kombat X.txt
2015-05-01 11:27 - 2014-01-21 08:27 - 00001155 _____ () C:\Users\All\Desktop\DOSBox.lnk
2015-04-30 22:26 - 2015-04-30 22:26 - 00000000 ____D () C:\Users\All\Desktop\Mortal Kombat
2015-04-30 20:58 - 2015-05-22 15:21 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\CrashDumps
2015-04-30 20:15 - 2015-04-30 20:15 - 00001949 _____ () C:\Users\Public\Desktop\TurboFLOORPLAN Dum & Interiér & Zahrada PRO 15.lnk
2015-04-30 20:15 - 2015-04-30 20:15 - 00000000 ____D () C:\Users\Home_PC\Documents\TurboFLOORPLAN Dum & Interiér & Zahrada PRO 15
2015-04-30 20:15 - 2015-04-30 20:15 - 00000000 ____D () C:\ProgramData\TurboFLOORPLAN Dum & Interiér & Zahrada PRO 15
2015-04-30 20:15 - 2015-04-30 20:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IMSIDesign
2015-04-30 20:14 - 2015-04-30 20:14 - 00000000 ____D () C:\ProgramData\IMSIDesign
2015-04-30 18:09 - 2015-04-30 18:09 - 00000916 _____ () C:\Users\Public\Desktop\Dobrodružný mahjongg - Kapitola 2.lnk
2015-04-30 18:09 - 2015-04-30 18:09 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Shape games
2015-04-30 18:09 - 2015-04-30 18:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dobrodružný mahjongg - Kapitola 2
2015-04-30 10:53 - 2015-04-30 10:53 - 06488407 _____ () C:\Users\Home_PC\Desktop\Návrh na realizaci opatření umožňujících plavbu malých plavidel na VD Nové Mlýny I a III.dotx
2015-04-30 10:38 - 2015-04-30 10:38 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\openvr
2015-04-29 13:55 - 2015-05-24 11:58 - 00000000 ____D () C:\Users\All\AppData\Local\CrashDumps
2015-04-29 13:48 - 2015-05-02 10:51 - 00009635 _____ () C:\Users\Home_PC\Desktop\koníček chabičovi 40.xlsx
2015-04-28 02:39 - 2015-04-28 07:40 - 00001367 _____ () C:\Users\Home_PC\Desktop\Norton Installation Files.lnk
2015-04-28 02:39 - 2015-04-28 02:39 - 00000000 ____D () C:\Users\Public\Downloads\Norton
2015-04-27 15:06 - 2015-04-27 15:06 - 00327941 _____ () C:\Users\Home_PC\Desktop\Cenek - neschopenka 1.jpeg
2015-04-27 15:06 - 2015-04-27 15:06 - 00324815 _____ () C:\Users\Home_PC\Desktop\Cenek - neschopenka 2.jpeg
2015-04-27 08:46 - 2015-05-04 05:49 - 00000000 ____D () C:\Users\Home_PC\Desktop\ŘZSM kritéria 2015
2015-04-27 07:31 - 2015-05-02 10:53 - 00000000 ____D () C:\Users\Home_PC\Desktop\setkání se starosty 2015

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-26 18:12 - 2014-03-20 19:40 - 00000000 ____D () C:\Program Files\trend micro
2015-05-26 17:24 - 2012-02-29 00:08 - 01603060 _____ () C:\Windows\WindowsUpdate.log
2015-05-26 17:18 - 2013-05-27 06:59 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-26 16:40 - 2013-05-08 18:48 - 00000000 ____D () C:\Users\All\AppData\Roaming\.minecraft
2015-05-26 16:21 - 2014-12-19 20:23 - 00000000 ____D () C:\Users\All\AppData\Roaming\vlc
2015-05-26 14:36 - 2013-05-04 15:12 - 00000000 ____D () C:\Users\All\AppData\Roaming\Seznam.cz
2015-05-26 14:32 - 2011-04-12 10:34 - 00689920 _____ () C:\Windows\system32\perfh005.dat
2015-05-26 14:32 - 2011-04-12 10:34 - 00150656 _____ () C:\Windows\system32\perfc005.dat
2015-05-26 14:32 - 2009-07-14 07:13 - 01637362 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-26 14:19 - 2012-06-30 18:56 - 00000000 ____D () C:\Users\All\AppData\Roaming\Skype
2015-05-26 07:53 - 2009-07-14 06:45 - 00034720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-26 07:53 - 2009-07-14 06:45 - 00034720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-26 07:46 - 2015-03-22 09:35 - 00031454 _____ () C:\Windows\setupact.log
2015-05-26 07:46 - 2012-02-29 01:37 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-26 07:46 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-26 06:07 - 2012-02-28 23:17 - 00003974 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{688A73AE-B742-4599-AB00-4D8F743FCC7C}
2015-05-25 06:35 - 2009-07-14 07:08 - 00032552 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-24 16:09 - 2015-02-15 17:04 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\JDownloader 2.0
2015-05-24 10:31 - 2012-11-17 22:34 - 00000000 ____D () C:\Users\Home_PC\Documents\Calibre knihovna
2015-05-24 09:18 - 2013-10-21 16:58 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-05-23 17:20 - 2013-11-20 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-05-23 17:20 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-05-23 17:19 - 2012-09-22 07:03 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\uTorrent
2015-05-23 14:46 - 2014-08-09 18:39 - 00000000 ____D () C:\Users\Home_PC\Desktop\fun foto a pics
2015-05-23 07:27 - 2015-04-14 05:21 - 00000000 ____D () C:\Users\Home_PC\Desktop\Nová složka (2)
2015-05-21 16:10 - 2014-10-29 11:41 - 00000000 ____D () C:\Users\All\Documents\Telltale Games
2015-05-21 16:10 - 2013-12-02 19:11 - 00000000 ____D () C:\ProgramData\REVOLT
2015-05-21 06:28 - 2012-04-20 17:03 - 00000000 ____D () C:\Users\All\AppData\Roaming\DAEMON Tools Lite
2015-05-19 20:17 - 2015-04-25 20:36 - 00000000 ____D () C:\Users\All\Desktop\trička
2015-05-19 04:34 - 2014-03-20 06:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-17 15:59 - 2013-08-15 09:04 - 00000000 ____D () C:\Users\All\AppData\Roaming\Awesomium
2015-05-16 19:35 - 2012-03-13 19:46 - 00000000 ____D () C:\Users\All\AppData\Local\Adobe
2015-05-16 19:34 - 2012-02-28 23:57 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\Adobe
2015-05-16 05:49 - 2015-02-11 18:42 - 00038400 _____ () C:\Users\Home_PC\Desktop\Marvell_přehled 9.4.2015.xls
2015-05-10 23:02 - 2012-08-27 12:58 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\Deployment
2015-05-09 09:50 - 2014-10-28 14:12 - 00000000 ____D () C:\ProgramData\Package Cache
2015-05-07 22:28 - 2015-03-24 06:06 - 00723686 _____ () C:\Windows\PFRO.log
2015-05-06 18:39 - 2013-02-01 09:03 - 00000000 ____D () C:\Users\All\AppData\Local\Windows Live
2015-05-02 13:43 - 2013-01-30 18:39 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-05-02 13:43 - 2012-06-30 18:24 - 00000000 ____D () C:\ProgramData\Skype
2015-05-02 13:43 - 2012-03-10 18:56 - 00000000 ____D () C:\Users\All
2015-05-02 09:05 - 2012-11-17 22:34 - 00000969 _____ () C:\Users\Public\Desktop\calibre - E-book management.lnk
2015-05-02 09:05 - 2012-11-17 22:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2015-05-02 09:05 - 2012-11-17 22:34 - 00000000 ____D () C:\Program Files (x86)\Calibre2
2015-05-02 05:44 - 2009-07-14 06:45 - 00419808 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-01 14:56 - 2013-04-11 22:06 - 00000000 ____D () C:\ProgramData\TEMP
2015-05-01 08:33 - 2012-02-28 23:17 - 00112096 _____ () C:\Users\Home_PC\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-30 20:18 - 2012-03-11 17:57 - 00112096 _____ () C:\Users\All\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-30 19:40 - 2012-08-05 09:37 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-04-30 19:38 - 2014-03-01 10:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codemasters
2015-04-30 07:19 - 2012-04-06 16:12 - 00000000 ____D () C:\ProgramData\Norton

==================== Files in the root of some directories =======

2013-07-25 07:07 - 2013-07-25 07:07 - 0000000 _____ () C:\Users\Home_PC\AppData\Roaming\bitlord_log.txt
2012-08-16 08:14 - 2012-08-16 08:14 - 0091445 _____ () C:\Users\Home_PC\AppData\Roaming\icarus-dxdiag.xml
2013-04-11 16:13 - 2013-06-14 15:06 - 0045270 _____ () C:\Users\Home_PC\AppData\Roaming\room_v3.dat
2014-05-02 19:27 - 2014-05-02 19:27 - 0003584 _____ () C:\Users\Home_PC\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-03-10 22:30 - 2012-03-10 22:30 - 0000095 _____ () C:\Users\Home_PC\AppData\Local\fusioncache.dat
2014-11-05 06:34 - 2014-11-05 06:34 - 0029696 _____ () C:\Users\Home_PC\AppData\Local\MSGBOX.EXE
2008-02-05 14:28 - 2008-02-05 14:28 - 0000051 _____ () C:\Users\Home_PC\AppData\Local\setup.txt

Some files in TEMP:
====================
C:\Users\Home_PC\AppData\Local\Temp\BRSVC_34663_hlp.exe
C:\Users\Home_PC\AppData\Local\Temp\Core.dll
C:\Users\Home_PC\AppData\Local\Temp\proxy_vole8017894611440706716.dll
C:\Users\Home_PC\AppData\Local\Temp\Setup.exe
C:\Users\Home_PC\AppData\Local\Temp\Window.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-24 07:36

==================== End of log ============================

[Rudy]

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

[pavelc]

# AdwCleaner v4.205 - Log vytvořen 26/05/2015 v 18:42:13
# Aktualizováno 21/05/2015 by Xplode
# Databáze : 2015-05-25.3 [Server]
# Operační system : Windows 7 Professional Service Pack 1 (x64)
# Uživatelské jméno : Home_PC - GAME-PC
# Spuštěno z : C:\Users\Home_PC\Desktop\adwcleaner_4.205.exe
# Nastavení : Čištění

***** [ Služby ] *****


***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rich Media Player
Složka Smazáno : C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mgdnblnolcinnndenjnollpiplgkbjcn
Složka Smazáno : C:\Users\All\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mgdnblnolcinnndenjnollpiplgkbjcn
Složka Smazáno : C:\Users\ASPNET\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mgdnblnolcinnndenjnollpiplgkbjcn
Složka Smazáno : C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mgdnblnolcinnndenjnollpiplgkbjcn
Složka Smazáno : C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mgdnblnolcinnndenjnollpiplgkbjcn
Složka Smazáno : C:\Users\Home_PC\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mgdnblnolcinnndenjnollpiplgkbjcn
Složka Smazáno : C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mgdnblnolcinnndenjnollpiplgkbjcn
Složka Smazáno : C:\Users\All\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mgdnblnolcinnndenjnollpiplgkbjcn
Složka Smazáno : C:\Users\ASPNET\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mgdnblnolcinnndenjnollpiplgkbjcn
Složka Smazáno : C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mgdnblnolcinnndenjnollpiplgkbjcn
Složka Smazáno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mgdnblnolcinnndenjnollpiplgkbjcn
Složka Smazáno : C:\Users\Home_PC\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mgdnblnolcinnndenjnollpiplgkbjcn
Soubor Smazáno : C:\Users\All\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Goodgame Empire.lnk

***** [ Naplánované úlohy ] *****

Úloha Smazáno : SW.Booster-S-1935984173

***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{0FA5C13C-4EDA-488A-A8EB-B84CD7395A79}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Klíč Smazáno : HKCU\Software\metaCrawler
Klíč Smazáno : HKCU\Software\DownLite
Klíč Smazáno : HKCU\Software\InfoSpace.com
Klíč Smazáno : HKLM\SOFTWARE\RST
Klíč Smazáno : HKU\.DEFAULT\Software\AVG Secure Search
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}
Data Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17689


-\\ Mozilla Firefox v38.0.1 (x86 cs)


-\\ Chromium v


-\\ Comodo Dragon v


-\\ Opera v0.0.0.0


-\\ Chrome Canary v


*************************

AdwCleaner[R0].txt - [2028 bytů] - [17/11/2014 18:38:22]
AdwCleaner[R1].txt - [2037 bytů] - [22/12/2014 09:58:55]
AdwCleaner[R2].txt - [3140 bytů] - [28/01/2015 23:25:45]
AdwCleaner[R3].txt - [3200 bytů] - [28/01/2015 23:27:08]
AdwCleaner[R4].txt - [4254 bytů] - [26/05/2015 18:41:07]
AdwCleaner[S0].txt - [3994 bytů] - [26/05/2015 18:42:13]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4052 bytů] ##########

[Rudy]

Dejte nový log FRST.

[pavelc]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 25-05-2015
Ran by Home_PC (administrator) on GAME-PC on 26-05-2015 18:54:58
Running from C:\Users\Home_PC\Desktop
Loaded Profiles: Home_PC (Available Profiles: Home_PC & All)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel Desktop Utilities\iduServ.exe
(Intel Corporation) C:\Program Files (x86)\Intel\FSC\FSCAppServ.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNACBSWK.EXE
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel Desktop Utilities\iptray.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM\...\Run: [CNAP2 Launcher] => C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-14] (CANON INC.)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [ipTray.exe] => C:\Program Files (x86)\Intel\Intel Desktop Utilities\ipTray.exe [1632456 2011-11-10] (Intel(R) Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2014-02-07] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-765561512-130652983-1916819721-1000\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-15] (Valve Corporation)
HKU\S-1-5-21-765561512-130652983-1916819721-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3481408 2012-02-13] (DT Soft Ltd)
HKU\S-1-5-21-765561512-130652983-1916819721-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\System32\ASTROG~1.SCR
Startup: C:\Users\Home_PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ubisoft register.lnk [2015-05-23]
ShortcutTarget: ubisoft register.lnk -> C:\Program Files (x86)\Ubi Soft\Register\schedule.exe (Ubi Soft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-765561512-130652983-1916819721-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-765561512-130652983-1916819721-1000 -> {57311830-C3D9-4AC7-931A-3AAB685B4874} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_12454
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-11-04] (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-11-04] (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Home_PC\AppData\Roaming\Mozilla\Firefox\Profiles\ev4pn85p.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> D:\Nová složka (2)\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin HKU\S-1-5-21-765561512-130652983-1916819721-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2014-12-18] ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppluginrichmediaplayer.dll [2013-03-12] ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml [2014-02-05]
FF Extension: Adblock Plus - C:\Users\Home_PC\AppData\Roaming\Mozilla\Firefox\Profiles\ev4pn85p.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-31]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\firefox.cfg [2015-05-18] <==== ATTENTION

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [ochbjojkpcmlfeagbaahkofepalngihg] - No Path Or update_url value

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) []
R2 IduService; C:\Program Files (x86)\Intel\Intel Desktop Utilities\iduServ.exe [124616 2011-11-10] (Intel(R) Corporation)
R2 Intel(R) Desktop Boards FSC Application Service; C:\Program Files (x86)\Intel\FSC\FSCAppServ.exe [61440 2011-11-10] (Intel Corporation) []
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-12-18] ()
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 cpuio; C:\Windows\SysWOW64\Drivers\cpuiox64.sys [15384 2012-02-29] (Intel Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-03-13] (DT Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R1 SbFw; C:\Windows\System32\drivers\SbFw.sys [253528 2011-04-05] (Sunbelt Software, Inc.)
S3 SBFWIMCL; C:\Windows\System32\DRIVERS\sbfwim.sys [84568 2011-02-08] (Sunbelt Software, Inc.)
R3 SBFWIMCLMP; C:\Windows\System32\DRIVERS\SBFWIM.sys [84568 2011-02-08] (Sunbelt Software, Inc.)
S3 sbhips; C:\Windows\System32\drivers\sbhips.sys [60504 2011-04-05] (Sunbelt Software, Inc.)
R1 SbTis; C:\Windows\System32\drivers\sbtis.sys [94296 2011-04-05] (Sunbelt Software, Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-09-04] (Duplex Secure Ltd.)
U3 ahi7d7b6; C:\Windows\System32\Drivers\ahi7d7b6.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zero byte File/Folder)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-26 18:40 - 2015-05-26 18:40 - 02223104 _____ () C:\Users\Home_PC\Desktop\adwcleaner_4.205.exe
2015-05-26 18:14 - 2015-05-26 18:14 - 00065142 _____ () C:\Users\Home_PC\Desktop\Addition.txt
2015-05-26 18:13 - 2015-05-26 18:54 - 00013757 _____ () C:\Users\Home_PC\Desktop\FRST.txt
2015-05-26 18:13 - 2015-05-26 18:54 - 00000000 ____D () C:\FRST
2015-05-26 18:11 - 2015-05-26 18:11 - 02108928 _____ (Farbar) C:\Users\Home_PC\Desktop\FRST64.exe
2015-05-26 15:29 - 2015-05-26 15:29 - 00025905 _____ () C:\Users\All\Desktop\hs_err_pid3464.log
2015-05-26 15:27 - 2015-05-26 15:27 - 00025366 _____ () C:\Users\All\Desktop\hs_err_pid4520.log
2015-05-26 15:25 - 2015-05-26 15:25 - 00024989 _____ () C:\Users\All\Desktop\hs_err_pid308.log
2015-05-26 15:13 - 2015-05-26 15:13 - 00025646 _____ () C:\Users\All\Desktop\hs_err_pid2888.log
2015-05-26 15:08 - 2015-05-26 15:08 - 00025630 _____ () C:\Users\All\Desktop\hs_err_pid5140.log
2015-05-26 15:03 - 2015-05-26 15:03 - 00026148 _____ () C:\Users\All\Desktop\hs_err_pid5628.log
2015-05-26 15:00 - 2015-05-26 15:00 - 00026696 _____ () C:\Users\All\Desktop\hs_err_pid708.log
2015-05-26 08:26 - 2015-05-26 08:26 - 00025849 _____ () C:\Users\All\Desktop\hs_err_pid3096.log
2015-05-26 08:24 - 2015-05-26 08:24 - 00026666 _____ () C:\Users\All\Desktop\hs_err_pid3544.log
2015-05-26 08:21 - 2015-05-26 08:21 - 00025537 _____ () C:\Users\All\Desktop\hs_err_pid5200.log
2015-05-26 08:14 - 2015-05-26 08:14 - 00025525 _____ () C:\Users\All\Desktop\hs_err_pid5244.log
2015-05-25 17:50 - 2015-05-25 17:50 - 00026127 _____ () C:\Users\All\Desktop\hs_err_pid6684.log
2015-05-23 17:20 - 2015-05-23 17:20 - 00000798 _____ () C:\Users\Public\Desktop\The Settlers IV GOLD.lnk
2015-05-23 10:57 - 2015-05-23 11:23 - 469768192 _____ () C:\Users\All\Downloads\Penny-Dreadful-S02E03-The-Nightcomers-CZ-Titulky,Drama,Horor,-USA-,Velká-Británie,-2014.avi
2015-05-21 16:00 - 2015-05-21 16:00 - 00000907 _____ () C:\Users\All\Desktop\Play The Walking Dead nosTEAM.lnk
2015-05-21 13:37 - 2015-05-21 13:37 - 00026150 _____ () C:\Users\All\Desktop\hs_err_pid5760.log
2015-05-21 12:56 - 2015-05-21 12:56 - 00026283 _____ () C:\Users\All\Desktop\hs_err_pid5812.log
2015-05-21 06:32 - 2015-05-21 12:59 - 00000000 ____D () C:\Users\All\AppData\Local\BlackHole
2015-05-18 19:04 - 2015-05-18 19:04 - 00026300 _____ () C:\Users\All\Desktop\hs_err_pid4612.log
2015-05-18 13:42 - 2015-05-18 13:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-05-17 21:47 - 2015-05-17 21:47 - 00025630 _____ () C:\Users\All\Desktop\hs_err_pid5232.log
2015-05-17 16:09 - 2015-05-17 16:09 - 00000000 ____D () C:\Users\Home_PC\Desktop\Podklady PV 9
2015-05-17 14:38 - 2015-05-17 14:38 - 00000000 ____D () C:\Users\All\AppData\Local\UWebKit151
2015-05-17 14:38 - 2015-05-17 14:38 - 00000000 ____D () C:\ProgramData\boost_interprocess
2015-05-17 10:23 - 2015-05-17 10:23 - 00026112 _____ () C:\Users\All\Desktop\hs_err_pid4140.log
2015-05-16 16:03 - 2015-05-16 16:03 - 00026744 _____ () C:\Users\All\Desktop\hs_err_pid5500.log
2015-05-16 15:43 - 2015-05-16 15:43 - 00026517 _____ () C:\Users\All\Desktop\hs_err_pid4796.log
2015-05-15 16:17 - 2015-05-15 16:17 - 00026279 _____ () C:\Users\All\Desktop\hs_err_pid6116.log
2015-05-13 19:24 - 2015-05-13 19:24 - 00075364 _____ () C:\Users\Home_PC\Downloads\once.upon.a.time.s04e22.hdtv.x264-lol.srt
2015-05-12 19:12 - 2015-05-12 19:12 - 00026075 _____ () C:\Users\All\Desktop\hs_err_pid5716.log
2015-05-12 18:12 - 2015-05-12 18:12 - 00000000 ____D () C:\Users\Home_PC\Desktop\Závlahy_jednání_SPÚ_13.5.2015
2015-05-10 15:37 - 2015-05-10 15:37 - 00026740 _____ () C:\Users\All\Desktop\hs_err_pid5408.log
2015-05-09 11:11 - 2015-05-09 11:11 - 00025645 _____ () C:\Users\All\Desktop\hs_err_pid4264.log
2015-05-09 09:48 - 2015-05-09 09:49 - 00018549 _____ () C:\Windows\DirectX.log
2015-05-09 08:47 - 2015-05-09 08:47 - 00000755 _____ () C:\Users\Public\Desktop\Mortal Kombat X.lnk
2015-05-09 08:47 - 2015-05-09 08:47 - 00000755 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mortal Kombat X.lnk
2015-05-08 20:36 - 2015-05-16 13:10 - 00001055 _____ () C:\Users\Home_PC\Desktop\aukro UKK.txt
2015-05-08 09:31 - 2015-05-08 09:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TreeSize
2015-05-08 09:31 - 2015-05-08 09:31 - 00000000 ____D () C:\Program Files (x86)\JAM Software
2015-05-08 08:54 - 2015-05-08 08:54 - 00873976 _____ (JAM Software ) C:\Users\Home_PC\Downloads\TreeSizeSetup.exe
2015-05-08 06:39 - 2015-05-08 08:17 - 330961150 _____ () C:\Users\All\Downloads\The.Flash.S01E21.HDTV.XviD-FUM-cz-titulky-vloženy.avi
2015-05-08 06:14 - 2015-05-08 06:35 - 365932544 _____ () C:\Users\All\Downloads\iZombie-S01E08-CZ-Titulky.avi
2015-05-07 23:58 - 2015-05-07 23:58 - 00025696 _____ () C:\Users\All\Desktop\hs_err_pid2152.log
2015-05-06 21:36 - 2015-05-06 21:36 - 00408309 _____ () C:\Users\Home_PC\Downloads\KnC1.mobi
2015-05-05 12:27 - 2015-05-05 12:27 - 00000000 ____D () C:\Users\Home_PC\Desktop\Nová složka (3)
2015-05-04 18:32 - 2015-05-04 18:36 - 00000000 ____D () C:\Fraps
2015-05-03 18:49 - 2015-05-03 18:49 - 00004647 _____ () C:\Users\Home_PC\Downloads\CENEK_PAVEL_ING(1)(1).p12
2015-05-03 17:56 - 2015-05-03 17:56 - 00002458 _____ () C:\Users\Home_PC\Desktop\Návrh odměny čištění.txt
2015-05-03 11:48 - 2015-05-03 11:48 - 00000000 ____D () C:\Users\All\AppData\Roaming\MK10
2015-05-02 13:43 - 2015-05-02 13:43 - 00000000 ____D () C:\Users\All\Tracing
2015-05-02 10:58 - 2015-05-02 10:58 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\MK10
2015-05-02 10:52 - 2015-05-02 10:52 - 00000804 _____ () C:\Users\Home_PC\Desktop\magic.txt
2015-05-02 08:49 - 2015-05-02 08:54 - 64471040 _____ () C:\Users\Home_PC\Downloads\calibre-2.27.0.msi
2015-05-01 11:43 - 2015-05-03 11:30 - 00013354 _____ () C:\Users\Home_PC\Desktop\Mortal Kombat X.txt
2015-05-01 11:27 - 2014-01-21 08:27 - 00001155 _____ () C:\Users\All\Desktop\DOSBox.lnk
2015-04-30 22:26 - 2015-04-30 22:26 - 00000000 ____D () C:\Users\All\Desktop\Mortal Kombat
2015-04-30 20:58 - 2015-05-22 15:21 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\CrashDumps
2015-04-30 20:15 - 2015-04-30 20:15 - 00001949 _____ () C:\Users\Public\Desktop\TurboFLOORPLAN Dum & Interiér & Zahrada PRO 15.lnk
2015-04-30 20:15 - 2015-04-30 20:15 - 00000000 ____D () C:\Users\Home_PC\Documents\TurboFLOORPLAN Dum & Interiér & Zahrada PRO 15
2015-04-30 20:15 - 2015-04-30 20:15 - 00000000 ____D () C:\ProgramData\TurboFLOORPLAN Dum & Interiér & Zahrada PRO 15
2015-04-30 20:15 - 2015-04-30 20:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IMSIDesign
2015-04-30 20:14 - 2015-04-30 20:14 - 00000000 ____D () C:\ProgramData\IMSIDesign
2015-04-30 18:09 - 2015-04-30 18:09 - 00000916 _____ () C:\Users\Public\Desktop\Dobrodružný mahjongg - Kapitola 2.lnk
2015-04-30 18:09 - 2015-04-30 18:09 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Shape games
2015-04-30 18:09 - 2015-04-30 18:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dobrodružný mahjongg - Kapitola 2
2015-04-30 10:53 - 2015-04-30 10:53 - 06488407 _____ () C:\Users\Home_PC\Desktop\Návrh na realizaci opatření umožňujících plavbu malých plavidel na VD Nové Mlýny I a III.dotx
2015-04-30 10:38 - 2015-04-30 10:38 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\openvr
2015-04-29 13:55 - 2015-05-24 11:58 - 00000000 ____D () C:\Users\All\AppData\Local\CrashDumps
2015-04-29 13:48 - 2015-05-02 10:51 - 00009635 _____ () C:\Users\Home_PC\Desktop\koníček chabičovi 40.xlsx
2015-04-28 02:39 - 2015-04-28 07:40 - 00001367 _____ () C:\Users\Home_PC\Desktop\Norton Installation Files.lnk
2015-04-28 02:39 - 2015-04-28 02:39 - 00000000 ____D () C:\Users\Public\Downloads\Norton
2015-04-27 15:06 - 2015-04-27 15:06 - 00327941 _____ () C:\Users\Home_PC\Desktop\Cenek - neschopenka 1.jpeg
2015-04-27 15:06 - 2015-04-27 15:06 - 00324815 _____ () C:\Users\Home_PC\Desktop\Cenek - neschopenka 2.jpeg
2015-04-27 08:46 - 2015-05-04 05:49 - 00000000 ____D () C:\Users\Home_PC\Desktop\ŘZSM kritéria 2015
2015-04-27 07:31 - 2015-05-02 10:53 - 00000000 ____D () C:\Users\Home_PC\Desktop\setkání se starosty 2015

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-26 18:50 - 2011-04-12 10:34 - 00689920 _____ () C:\Windows\system32\perfh005.dat
2015-05-26 18:50 - 2011-04-12 10:34 - 00150656 _____ () C:\Windows\system32\perfc005.dat
2015-05-26 18:50 - 2009-07-14 07:13 - 01637362 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-26 18:50 - 2009-07-14 06:45 - 00034720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-26 18:50 - 2009-07-14 06:45 - 00034720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-26 18:46 - 2012-02-29 00:08 - 01607431 _____ () C:\Windows\WindowsUpdate.log
2015-05-26 18:43 - 2015-03-22 09:35 - 00031622 _____ () C:\Windows\setupact.log
2015-05-26 18:43 - 2012-02-29 01:37 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-26 18:43 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-26 18:42 - 2014-11-17 18:38 - 00000000 ____D () C:\AdwCleaner
2015-05-26 18:19 - 2014-03-20 21:54 - 00006160 _____ () C:\Users\Home_PC\Desktop\gothic 3.txt
2015-05-26 18:18 - 2013-05-27 06:59 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-26 18:12 - 2014-03-20 19:40 - 00000000 ____D () C:\Program Files\trend micro
2015-05-26 16:40 - 2013-05-08 18:48 - 00000000 ____D () C:\Users\All\AppData\Roaming\.minecraft
2015-05-26 16:21 - 2014-12-19 20:23 - 00000000 ____D () C:\Users\All\AppData\Roaming\vlc
2015-05-26 14:36 - 2013-05-04 15:12 - 00000000 ____D () C:\Users\All\AppData\Roaming\Seznam.cz
2015-05-26 14:19 - 2012-06-30 18:56 - 00000000 ____D () C:\Users\All\AppData\Roaming\Skype
2015-05-26 06:07 - 2012-02-28 23:17 - 00003974 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{688A73AE-B742-4599-AB00-4D8F743FCC7C}
2015-05-25 06:35 - 2009-07-14 07:08 - 00032552 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-24 16:09 - 2015-02-15 17:04 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\JDownloader 2.0
2015-05-24 10:31 - 2012-11-17 22:34 - 00000000 ____D () C:\Users\Home_PC\Documents\Calibre knihovna
2015-05-24 09:18 - 2013-10-21 16:58 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-05-23 17:20 - 2013-11-20 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-05-23 17:20 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-05-23 17:19 - 2012-09-22 07:03 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\uTorrent
2015-05-23 14:46 - 2014-08-09 18:39 - 00000000 ____D () C:\Users\Home_PC\Desktop\fun foto a pics
2015-05-23 07:27 - 2015-04-14 05:21 - 00000000 ____D () C:\Users\Home_PC\Desktop\Nová složka (2)
2015-05-21 16:10 - 2014-10-29 11:41 - 00000000 ____D () C:\Users\All\Documents\Telltale Games
2015-05-21 16:10 - 2013-12-02 19:11 - 00000000 ____D () C:\ProgramData\REVOLT
2015-05-21 06:28 - 2012-04-20 17:03 - 00000000 ____D () C:\Users\All\AppData\Roaming\DAEMON Tools Lite
2015-05-19 20:17 - 2015-04-25 20:36 - 00000000 ____D () C:\Users\All\Desktop\trička
2015-05-19 04:34 - 2014-03-20 06:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-17 15:59 - 2013-08-15 09:04 - 00000000 ____D () C:\Users\All\AppData\Roaming\Awesomium
2015-05-16 19:35 - 2012-03-13 19:46 - 00000000 ____D () C:\Users\All\AppData\Local\Adobe
2015-05-16 19:34 - 2012-02-28 23:57 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\Adobe
2015-05-16 05:49 - 2015-02-11 18:42 - 00038400 _____ () C:\Users\Home_PC\Desktop\Marvell_přehled 9.4.2015.xls
2015-05-10 23:02 - 2012-08-27 12:58 - 00000000 ____D () C:\Users\Home_PC\AppData\Local\Deployment
2015-05-09 09:50 - 2014-10-28 14:12 - 00000000 ____D () C:\ProgramData\Package Cache
2015-05-07 22:28 - 2015-03-24 06:06 - 00723686 _____ () C:\Windows\PFRO.log
2015-05-06 18:39 - 2013-02-01 09:03 - 00000000 ____D () C:\Users\All\AppData\Local\Windows Live
2015-05-02 13:43 - 2013-01-30 18:39 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-05-02 13:43 - 2012-06-30 18:24 - 00000000 ____D () C:\ProgramData\Skype
2015-05-02 13:43 - 2012-03-10 18:56 - 00000000 ____D () C:\Users\All
2015-05-02 09:05 - 2012-11-17 22:34 - 00000969 _____ () C:\Users\Public\Desktop\calibre - E-book management.lnk
2015-05-02 09:05 - 2012-11-17 22:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2015-05-02 09:05 - 2012-11-17 22:34 - 00000000 ____D () C:\Program Files (x86)\Calibre2
2015-05-02 05:44 - 2009-07-14 06:45 - 00419808 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-01 14:56 - 2013-04-11 22:06 - 00000000 ____D () C:\ProgramData\TEMP
2015-05-01 08:33 - 2012-02-28 23:17 - 00112096 _____ () C:\Users\Home_PC\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-30 20:18 - 2012-03-11 17:57 - 00112096 _____ () C:\Users\All\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-30 19:40 - 2012-08-05 09:37 - 00000000 ____D () C:\Users\Home_PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-04-30 19:38 - 2014-03-01 10:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codemasters
2015-04-30 07:19 - 2012-04-06 16:12 - 00000000 ____D () C:\ProgramData\Norton

==================== Files in the root of some directories =======

2013-07-25 07:07 - 2013-07-25 07:07 - 0000000 _____ () C:\Users\Home_PC\AppData\Roaming\bitlord_log.txt
2012-08-16 08:14 - 2012-08-16 08:14 - 0091445 _____ () C:\Users\Home_PC\AppData\Roaming\icarus-dxdiag.xml
2013-04-11 16:13 - 2013-06-14 15:06 - 0045270 _____ () C:\Users\Home_PC\AppData\Roaming\room_v3.dat
2014-05-02 19:27 - 2014-05-02 19:27 - 0003584 _____ () C:\Users\Home_PC\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-03-10 22:30 - 2012-03-10 22:30 - 0000095 _____ () C:\Users\Home_PC\AppData\Local\fusioncache.dat
2014-11-05 06:34 - 2014-11-05 06:34 - 0029696 _____ () C:\Users\Home_PC\AppData\Local\MSGBOX.EXE
2008-02-05 14:28 - 2008-02-05 14:28 - 0000051 _____ () C:\Users\Home_PC\AppData\Local\setup.txt

Some files in TEMP:
====================
C:\Users\Home_PC\AppData\Local\Temp\BRSVC_34663_hlp.exe
C:\Users\Home_PC\AppData\Local\Temp\Core.dll
C:\Users\Home_PC\AppData\Local\Temp\proxy_vole8017894611440706716.dll
C:\Users\Home_PC\AppData\Local\Temp\Quarantine.exe
C:\Users\Home_PC\AppData\Local\Temp\Setup.exe
C:\Users\Home_PC\AppData\Local\Temp\sqlite3.dll
C:\Users\Home_PC\AppData\Local\Temp\Window.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-24 07:36

==================== End of log ============================

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Start
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
C:\Users\Home_PC\AppData\Local\Temp
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[pavelc]

Fix result of Farbar Recovery Scan Tool (x64) Version: 25-05-2015
Ran by Home_PC at 2015-05-26 20:37:43 Run:1
Running from C:\Users\Home_PC\Desktop
Loaded Profiles: Home_PC (Available Profiles: Home_PC & All)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
C:\Users\Home_PC\AppData\Local\Temp
End
*****************

HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value Removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value Removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value Removed successfully

"C:\Users\Home_PC\AppData\Local\Temp" folder move:

Could not move "C:\Users\Home_PC\AppData\Local\Temp" folder => Scheduled to move on reboot.


Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-05-26 20:39:06)<=

"C:\Users\Home_PC\AppData\Local\Temp" => Could not move

==== End of Fixlog 20:39:08 ====

[Rudy]

Kolik máte nyní volného místa na disku?

[pavelc]

7,66 na C
65,5 na D

[Rudy]

Na c:\ (pokud je systémový) je volné místo na krajní bezpečnostní mezi. Přesuňte některá svá data na jiné úložiště.

[pavelc]

děkuju, zkusím,
jinak v pořádku?

[Rudy]

Dostupné log jsou OK.

[pavelc]

děkuju

[Rudy]

Není zač!