Nefukční připojení k internetu, mrznoucí Avast při testování

[tomorn]

Ahoj,
prosím o pomoc s problémem. Počítač se nepřipojí k internetu, nedokáže získat IP adresu z DHCP serveru, funguje pouze až po nastavení pevné IP adresy, indikátor připojení však stále signalizuje omezené připojení, web však již prohlížet jde. Přestože jde procházet web, příkaz ping v příkazovém řádku hlásí "PING: transmit failed. Generali failure." Ostatní počítače ve stejné síti fungují normálně.
Avast nic nenajde. SUPERAntiSpyware nic nenajde. Brána Firewall systému Windows hlásí vypnutý stav, při ručním zapnutí hlásí chybu "Brána Windows Firewall nemůže změnit některá nastavení. Kód chyby 0x8007042c"
Po zapnutí chce systém aktivaci. Aktivace byla cca před dvěma měsíci úspěšně provedena.
Děkuji za pomoc.

přikládám log z FRST:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27-05-2015 01
Ran by tom (administrator) on TOMAS-PC on 28-05-2015 09:28:18
Running from C:\Users\tom\Desktop
Loaded Profiles: tom (Available Profiles: tom & Guest)
Platform: Windows 8.1 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Nero AG) C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
(Prolific Technology Inc.) C:\Windows\SysWOW64\IoctlSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
() C:\Program Files (x86)\VIA\RAID\vialogsv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\perfmon.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(forum.viry.cz) C:\Users\tom\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [NBKeyScan] => C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2221352 2008-06-08] (Nero AG)
HKU\S-1-5-21-1228592731-2117178040-1850598332-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8322328 2015-05-08] (Piriform Ltd)
HKU\S-1-5-21-1228592731-2117178040-1850598332-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)
HKU\S-1-5-21-1228592731-2117178040-1850598332-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7799576 2015-05-15] (SUPERAntiSpyware)
HKU\S-1-5-21-1228592731-2117178040-1850598332-1001\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1840424 2008-06-24] (Nero AG)
HKU\S-1-5-21-1228592731-2117178040-1850598332-1001\...\MountPoints2: {20f1ad07-da12-11e4-8252-08626629286f} - "G:\Setup.exe"
HKU\S-1-5-21-1228592731-2117178040-1850598332-1001\...\MountPoints2: {605fede8-da92-11e4-8258-08626629286f} - "I:\setup.exe"
HKU\S-1-5-21-1228592731-2117178040-1850598332-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11776 2014-10-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-05-09] (Avast Software s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1228592731-2117178040-1850598332-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1228592731-2117178040-1850598332-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKU\S-1-5-21-1228592731-2117178040-1850598332-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1228592731-2117178040-1850598332-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-04-03] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-03] (Avast Software s.r.o.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-04-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-03] (Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2015-04-03] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-03] (Avast Software s.r.o.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-04-14] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2015-04-03] (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 62.204.224.2 62.240.163.170
Tcpip\..\Interfaces\{9F3F27F2-AE70-4FFB-98A3-29A0CDCDA97D}: [NameServer] 62.204.224.2,62.240.163.170

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-04-03] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-03] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-02-13] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2015-04-03] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2015-04-03] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-03-31] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-03-31] (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-03]

Chrome:
=======
CHR Profile: C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-03]
CHR Extension: (Google Docs) - C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-03]
CHR Extension: (Google Drive) - C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-03]
CHR Extension: (YouTube) - C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-03]
CHR Extension: (Google Search) - C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-03]
CHR Extension: (Google Sheets) - C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-03]
CHR Extension: (Avast Online Security) - C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-03]
CHR Extension: (Google Wallet) - C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-03]
CHR Extension: (Gmail) - C:\Users\tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-03]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-03]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-07-04] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-09] (Avast Software s.r.o.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1429504 2015-03-05] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344976 2015-03-31] (Intel Corporation)
R2 Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-06-08] (Nero AG)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [537896 2008-06-24] (Nero AG)
R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [558592 2013-10-20] () [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5491984 2015-05-20] (TeamViewer GmbH)
R2 VRAID Log Service; C:\Program Files (x86)\VIA\RAID\vialogsv.exe [55920 2011-03-15] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 anvsnddrv; C:\Windows\system32\drivers\anvsnddrv.sys [33872 2011-11-28] (AnvSoft Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2013-07-04] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-09] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-09] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-09] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-09] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-09] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-05-09] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-09] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-09] ()
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30352 2015-04-03] (Disc Soft Ltd)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-28 09:28 - 2015-05-28 09:28 - 00015047 _____ () C:\Users\tom\Desktop\FRST.txt
2015-05-28 09:27 - 2015-05-28 09:28 - 00000000 ____D () C:\FRST
2015-05-28 09:27 - 2015-05-28 08:53 - 00112640 _____ (forum.viry.cz) C:\Users\tom\Desktop\FRSTLauncher.exe
2015-05-28 09:17 - 2015-05-28 09:20 - 00000000 ____D () C:\install
2015-05-28 09:09 - 2015-05-28 08:55 - 00688992 _____ (Swearware) C:\Users\tom\Desktop\dds.com
2015-05-28 09:09 - 2015-05-28 08:54 - 01222144 _____ () C:\Users\tom\Desktop\RSITx64.exe
2015-05-28 09:09 - 2015-05-28 08:52 - 02108928 _____ (Farbar) C:\Users\tom\Desktop\FRST64.exe
2015-05-28 08:40 - 2015-05-28 08:41 - 00000000 ____D () C:\AdwCleaner
2015-05-27 10:00 - 2015-05-27 10:17 - 00001908 _____ () C:\Windows\diagwrn.xml
2015-05-27 10:00 - 2015-05-27 10:17 - 00001908 _____ () C:\Windows\diagerr.xml
2015-05-27 10:00 - 2015-05-27 10:12 - 00000000 ___HD () C:\$WINDOWS.~BT
2015-05-27 08:27 - 2015-05-27 08:27 - 06549184 _____ (Piriform Ltd) C:\Users\tom\Downloads\ccsetup506.exe
2015-05-14 09:06 - 2015-04-24 23:32 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-14 09:06 - 2015-03-05 01:09 - 01429504 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-13 02:33 - 2015-04-30 22:35 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 02:33 - 2015-04-30 22:35 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-12 21:50 - 2015-04-10 02:34 - 02256896 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-05-12 21:50 - 2015-04-10 02:11 - 01943040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-05-12 21:50 - 2015-03-17 19:26 - 00467776 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2015-05-12 21:50 - 2015-03-09 04:02 - 00057856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys
2015-05-12 21:49 - 2015-05-01 01:05 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-12 21:49 - 2015-05-01 00:48 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-05-12 21:49 - 2015-03-20 03:56 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2015-05-12 21:49 - 2015-03-04 03:32 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2015-05-12 21:49 - 2015-03-04 03:12 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2015-05-12 21:49 - 2015-01-30 02:53 - 02819584 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2015-05-12 21:48 - 2015-04-14 00:48 - 04180480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-12 21:48 - 2015-04-10 03:00 - 01996800 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-12 21:48 - 2015-04-10 02:50 - 01387008 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-12 21:48 - 2015-04-10 02:26 - 01560576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-05-12 21:48 - 2015-04-03 02:35 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll
2015-05-12 21:48 - 2015-04-03 02:14 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoMetadataHandler.dll
2015-05-12 21:48 - 2015-04-02 00:22 - 02985984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2015-05-12 21:48 - 2015-04-02 00:20 - 04417536 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2015-05-12 21:48 - 2015-04-01 05:45 - 01491456 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2015-05-12 21:48 - 2015-04-01 04:31 - 01207296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2015-05-12 21:48 - 2015-03-13 04:02 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2015-05-12 21:48 - 2015-03-13 03:11 - 02162176 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2015-05-12 21:48 - 2015-03-13 02:39 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2015-05-12 21:45 - 2015-04-09 00:55 - 00410128 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-12 21:45 - 2015-03-06 04:47 - 01696256 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2015-05-12 21:43 - 2015-03-13 06:03 - 00239424 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2015-05-12 21:43 - 2015-03-13 06:03 - 00154432 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2015-05-12 21:43 - 2015-03-11 03:49 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-12 21:43 - 2015-03-11 03:09 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-05-12 21:43 - 2015-02-18 01:19 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2015-05-12 21:42 - 2015-04-21 19:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-12 21:42 - 2015-04-21 18:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-12 21:42 - 2015-04-21 18:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-12 21:42 - 2015-04-21 18:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-12 21:42 - 2015-04-21 18:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-12 21:42 - 2015-04-21 18:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-12 21:42 - 2015-04-21 18:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-12 21:42 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-05-12 21:42 - 2015-04-21 18:13 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2015-05-12 21:42 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-05-12 21:42 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-05-12 21:42 - 2015-04-21 18:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-12 21:42 - 2015-04-21 18:07 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-05-12 21:42 - 2015-04-21 18:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-12 21:42 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-05-12 21:42 - 2015-04-21 17:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-05-12 21:42 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-05-12 21:42 - 2015-04-21 17:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-05-12 21:42 - 2015-04-21 17:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-12 21:42 - 2015-04-21 17:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-12 21:42 - 2015-04-21 17:49 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-12 21:42 - 2015-04-21 17:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-12 21:42 - 2015-04-21 17:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-12 21:42 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-05-12 21:42 - 2015-04-21 17:37 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-05-12 21:42 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-05-12 21:42 - 2015-04-21 17:32 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-05-12 21:42 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-05-12 21:42 - 2015-04-21 17:28 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-05-12 21:42 - 2015-04-21 17:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-12 21:42 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-05-12 21:42 - 2015-04-21 17:26 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-05-12 21:42 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-05-12 21:42 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-05-12 21:42 - 2015-04-21 17:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-12 21:42 - 2015-04-21 17:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-12 21:42 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-05-12 21:42 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-05-12 21:42 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-05-12 21:42 - 2015-03-30 07:47 - 00561928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-05-12 21:42 - 2015-03-27 05:27 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-12 21:42 - 2015-03-27 04:50 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-05-12 21:42 - 2015-03-27 04:48 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-12 21:42 - 2015-03-13 02:29 - 00410017 _____ () C:\Windows\system32\ApnDatabase.xml
2015-05-12 21:42 - 2015-03-06 05:08 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-12 21:42 - 2015-03-06 04:43 - 01969664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-05-11 18:42 - 2015-05-11 18:42 - 00001304 _____ () C:\Users\tom\Desktop\Any Video Converter Ultimate.lnk
2015-05-11 18:42 - 2015-05-11 18:42 - 00000000 ____D () C:\Users\tom\Documents\Any Video Converter Ultimate
2015-05-11 18:42 - 2015-05-11 18:42 - 00000000 ____D () C:\Users\tom\AppData\Roaming\AnvSoft
2015-05-11 18:42 - 2015-05-11 18:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnvSoft
2015-05-11 18:42 - 2015-05-11 18:42 - 00000000 ____D () C:\Program Files (x86)\AnvSoft
2015-05-11 18:42 - 2011-11-28 14:51 - 00033872 _____ (AnvSoft Inc.) C:\Windows\system32\Drivers\anvsnddrv.sys
2015-05-09 21:55 - 2015-05-09 21:55 - 00000000 ____D () C:\Users\tom\AppData\Local\GHISLER
2015-05-09 20:35 - 2015-05-09 20:40 - 00000000 ____D () C:\Users\tom\Documents\Freemake
2015-05-09 20:35 - 2015-05-09 20:40 - 00000000 ____D () C:\ProgramData\Freemake
2015-05-09 20:35 - 2015-05-09 20:35 - 00001340 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk
2015-05-09 20:35 - 2015-05-09 20:35 - 00000000 ____D () C:\Users\tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2015-05-09 20:35 - 2015-05-09 20:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2015-05-09 20:34 - 2015-05-09 20:35 - 00000000 ____D () C:\Program Files (x86)\Freemake
2015-05-09 20:34 - 2015-05-09 20:34 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-05-09 20:34 - 2015-05-09 20:34 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-05-06 08:32 - 2015-05-06 08:32 - 635225280 _____ () C:\Windows\MEMORY.DMP
2015-05-06 08:32 - 2015-05-06 08:32 - 00287248 _____ () C:\Windows\Minidump\050615-8453-01.dmp
2015-05-06 08:32 - 2015-05-06 08:32 - 00000000 ____D () C:\Windows\Minidump
2015-05-01 00:27 - 2015-05-01 00:27 - 10554360 _____ () C:\Users\tom\Downloads\bsplayer269-1078.exe
2015-04-30 17:09 - 2015-04-30 17:09 - 00001422 _____ () C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-04-30 17:09 - 2015-04-30 17:09 - 00000020 ___SH () C:\Users\Guest\ntuser.ini
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 _SHDL () C:\Users\Guest\Šablony
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 _SHDL () C:\Users\Guest\Soubory cookie
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 _SHDL () C:\Users\Guest\Poslední
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 _SHDL () C:\Users\Guest\Okolní tiskárny
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 _SHDL () C:\Users\Guest\Okolní síť
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 _SHDL () C:\Users\Guest\Nabídka Start
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 _SHDL () C:\Users\Guest\Dokumenty
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 _SHDL () C:\Users\Guest\Documents\Obrázky
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 _SHDL () C:\Users\Guest\Documents\Hudba
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 _SHDL () C:\Users\Guest\Documents\Filmy
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 _SHDL () C:\Users\Guest\Data aplikací
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 _SHDL () C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 _SHDL () C:\Users\Guest\AppData\Local\Data aplikací
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 ____D () C:\Users\Guest\AppData\Roaming\Opera Software
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 ____D () C:\Users\Guest\AppData\Roaming\AVAST Software
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 ____D () C:\Users\Guest\AppData\Roaming\Adobe
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 ____D () C:\Users\Guest\AppData\Local\VirtualStore
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 ____D () C:\Users\Guest\AppData\Local\Packages
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 ____D () C:\Users\Guest\AppData\Local\Opera Software
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2015-04-30 17:09 - 2015-04-30 17:09 - 00000000 ____D () C:\Users\Guest
2015-04-30 17:09 - 2015-04-04 00:42 - 00000000 ___RD () C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-30 17:09 - 2015-04-04 00:33 - 00000000 ____D () C:\Users\Guest\AppData\Local\Microsoft Help
2015-04-30 17:09 - 2015-04-03 19:41 - 00000000 ___RD () C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-04-30 17:09 - 2015-04-03 19:41 - 00000000 ___RD () C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-30 17:09 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-04-30 17:09 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-04-30 17:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-28 09:21 - 2015-04-03 19:10 - 00000978 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-28 09:20 - 2015-04-03 16:04 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-28 09:13 - 2013-09-30 06:20 - 01745984 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-28 09:13 - 2013-09-30 05:57 - 00738682 _____ () C:\Windows\system32\perfh005.dat
2015-05-28 09:13 - 2013-09-30 05:57 - 00151404 _____ () C:\Windows\system32\perfc005.dat
2015-05-28 09:08 - 2015-04-06 10:12 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2015-05-28 08:59 - 2015-04-03 15:57 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-05-28 08:58 - 2015-04-03 19:10 - 00000974 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-28 08:58 - 2015-04-03 15:52 - 00000000 __RDO () C:\Users\tom\SkyDrive
2015-05-28 08:58 - 2015-04-03 15:48 - 01373004 _____ () C:\Windows\WindowsUpdate.log
2015-05-28 08:43 - 2015-04-03 19:42 - 00002003 _____ () C:\Windows\system32\Service_KMS.log
2015-05-28 08:43 - 2013-08-22 16:46 - 00001761 _____ () C:\Windows\setupact.log
2015-05-28 08:43 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-28 08:42 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-05-28 00:58 - 2015-04-06 16:46 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2015-05-27 19:38 - 2015-04-03 17:22 - 00000000 ____D () C:\Users\tom\Desktop\peta
2015-05-27 11:33 - 2015-04-03 19:05 - 00007615 _____ () C:\Users\tom\AppData\Local\Resmon.ResmonCfg
2015-05-27 10:00 - 2013-08-22 16:46 - 00000000 _____ () C:\Windows\setuperr.log
2015-05-27 09:52 - 2015-04-03 15:57 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1228592731-2117178040-1850598332-1001
2015-05-27 08:27 - 2015-04-03 16:50 - 00000834 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-05-27 08:27 - 2015-04-03 16:50 - 00000000 ____D () C:\Program Files\CCleaner
2015-05-26 17:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2015-05-26 09:23 - 2015-04-06 16:46 - 00000983 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-05-26 09:23 - 2015-04-06 16:46 - 00000971 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-05-26 09:21 - 2015-04-03 19:12 - 00002203 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-20 15:10 - 2015-04-03 15:59 - 00003830 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1428069475
2015-05-20 15:10 - 2015-04-03 15:57 - 00001063 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-05-20 12:35 - 2015-04-03 19:41 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-05-20 12:35 - 2015-04-03 19:41 - 00000000 ___SD () C:\Windows\system32\GWX
2015-05-20 12:35 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-05-19 08:08 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-05-17 19:26 - 2015-04-03 16:11 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2015-05-17 13:16 - 2015-04-03 19:10 - 00003950 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-17 13:16 - 2015-04-03 19:10 - 00003714 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-15 10:02 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2015-05-13 22:11 - 2015-04-03 18:23 - 00000000 ____D () C:\Users\tom\Graphisoft
2015-05-13 20:22 - 2015-04-03 18:07 - 00000000 ____D () C:\Users\tom\Documents\BIMx
2015-05-13 19:54 - 2015-04-03 17:20 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-05-13 19:54 - 2015-04-03 17:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-05-13 19:54 - 2013-09-29 21:09 - 00114394 _____ () C:\Windows\PFRO.log
2015-05-13 19:54 - 2013-08-22 16:44 - 00482968 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-13 03:08 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-05-13 03:08 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-13 02:34 - 2015-04-03 17:06 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-05-13 02:33 - 2015-04-03 17:07 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-05-13 02:33 - 2015-04-03 16:10 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-13 02:31 - 2015-04-03 16:10 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-13 02:29 - 2015-04-03 17:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-13 02:29 - 2013-08-22 15:25 - 00000167 _____ () C:\Windows\win.ini
2015-05-13 02:27 - 2013-09-30 06:01 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-12 22:21 - 2015-04-06 10:40 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-05-09 23:29 - 2015-04-03 18:07 - 00002238 ____H () C:\Users\tom\Documents\Default.rdp
2015-05-09 23:25 - 2015-04-03 17:10 - 00000892 _____ () C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-05-09 21:55 - 2015-04-03 19:10 - 00000000 ____D () C:\totalcmd
2015-05-09 21:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\FxsTmp
2015-05-09 20:34 - 2015-04-03 17:18 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-05-09 20:34 - 2015-04-03 17:18 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-05-09 20:34 - 2015-04-03 17:18 - 00272248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-05-09 20:34 - 2015-04-03 17:18 - 00137288 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-05-09 20:34 - 2015-04-03 17:18 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-05-09 20:34 - 2015-04-03 17:18 - 00089944 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-05-09 20:34 - 2015-04-03 17:18 - 00065736 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-05-09 20:34 - 2015-04-03 17:18 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-05-09 20:34 - 2015-04-03 17:18 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-05-06 22:28 - 2015-04-03 15:50 - 00000000 ____D () C:\Users\tom
2015-05-06 02:43 - 2015-04-03 15:50 - 00000000 ____D () C:\Users\tom\AppData\Local\Packages
2015-05-05 19:59 - 2013-08-22 17:38 - 00792568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-05-05 19:59 - 2013-08-22 17:38 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-05-01 00:21 - 2015-04-06 10:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2015-04-29 00:11 - 2015-04-03 17:41 - 00000000 ____D () C:\Users\tom\AppData\Roaming\Abvent_Artlantis5
2015-04-29 00:09 - 2015-04-04 13:05 - 00000000 ____D () C:\Users\tom\AppData\Roaming\Abvent_Artlantis4

==================== Files in the root of some directories =======

2015-04-03 19:05 - 2015-05-27 11:33 - 0007615 _____ () C:\Users\tom\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
C:\Users\tom\AppData\Local\Temp\FreemakeVideoConverterFull.exe
C:\Users\tom\AppData\Local\Temp\ose00000.exe
C:\Users\tom\AppData\Local\Temp\ose00001.exe
C:\Users\tom\AppData\Local\Temp\Quarantine.exe
C:\Users\tom\AppData\Local\Temp\sfamcc00001.dll
C:\Users\tom\AppData\Local\Temp\sfamcc00002.dll
C:\Users\tom\AppData\Local\Temp\sfareca00002.dll
C:\Users\tom\AppData\Local\Temp\sfextra.dll
C:\Users\tom\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-19 08:22




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:238.13 GB) (Free:95.03 GB) NTFS
Drive d: (500) (Fixed) (Total:465.76 GB) (Free:20.9 GB) NTFS
Drive e: (2TB) (Fixed) (Total:1863.01 GB) (Free:19.24 GB) NTFS
Drive f: (400) (Fixed) (Total:372.61 GB) (Free:228.56 GB) NTFS
Drive g: (320) (Fixed) (Total:298.09 GB) (Free:151.19 GB) NTFS
Drive i: () (Removable) (Total:29.42 GB) (Free:20.71 GB) NTFS

Available physical RAM: 5666.97 MB
Total physical RAM: 7873.98 MB
Percentage of memory in use: 28%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: A17A446C)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 7029E132)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238.1 GB) - (Type=07 NTFS)
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: DDF21388)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 372.6 GB) (Disk ID: 20E72FF9)
Partition 1: (Active) - (Size=372.6 GB) - (Type=07 NTFS)
Disk: 4 (Size: 298.1 GB) (Disk ID: 0E010E01)
Partition 1: (Not Active) - (Size=298.1 GB) - (Type=07 NTFS)
Disk: 5 (MBR Code: Windows 7 or 8) (Size: 29.4 GB) (Disk ID: 00000000)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Users\tom\SkyDrive:ms-properties

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\tom\Desktop" je 10009 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

[Rudy]

Zdravím!
Spustte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

[tomorn]

Po restartu iniciovaném AdwCleanerem se počítač ještě jednou sám restartoval na základě "modré smrti".
Log:
# AdwCleaner v4.205 - Log vytvořen 28/05/2015 v 19:48:20
# Aktualizováno 21/05/2015 by Xplode
# Databáze : 2015-05-25.3 [Server]
# Operační system : Windows 8.1 Pro (x64)
# Uživatelské jméno : tom - TOMAS-PC
# Spuštěno z : C:\Users\tom\Desktop\adwcleaner_4.205.exe
# Nastavení : Čištění

***** [ Služby ] *****


***** [ Soubory / Složky ] *****


***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****


***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Google Chrome v43.0.2357.81


-\\ Opera v29.0.1795.60


*************************

AdwCleaner[R0].txt - [1421 bytů] - [28/05/2015 08:40:41]
AdwCleaner[R1].txt - [879 bytů] - [28/05/2015 19:47:43]
AdwCleaner[S0].txt - [1431 bytů] - [28/05/2015 08:41:21]
AdwCleaner[S1].txt - [805 bytů] - [28/05/2015 19:48:20]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [862 bytů] ##########

[Rudy]

Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:

Start
HKU\S-1-5-21-1228592731-2117178040-1850598332-1001\...\MountPoints2: {20f1ad07-da12-11e4-8252-08626629286f} - "G:\Setup.exe"
HKU\S-1-5-21-1228592731-2117178040-1850598332-1001\...\MountPoints2: {605fede8-da92-11e4-8258-08626629286f} - "I:\setup.exe"
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
R2 Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-06-08] (Nero AG)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [537896 2008-06-24] (Nero AG)
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Users\tom\AppData\Local\Temp
AlternateDataStreams: C:\Users\tom\SkyDrive:ms-properties
End

Na ploše je příliš mnoho dat (GB). Vytvořte adresář v C:\Users\tom, do kterého data z plochy přesuňte a na plochu si kvůli snazšímu přístupu dejte zástupce. Velké množství dat zpomaluje start systému.

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[tomorn]

Pokud to nevadí nějaké funkci tak bych data na ploše nechal, start systému jde i tak rychle, mám rychlé SSD, počítač využívá i sestra, laický uživatel.

log:
Fix result of Farbar Recovery Scan Tool (x64) Version: 27-05-2015 01
Ran by tom at 2015-05-28 20:22:58 Run:1
Running from C:\Users\tom\Desktop
Loaded Profiles: tom (Available Profiles: tom & Guest)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKU\S-1-5-21-1228592731-2117178040-1850598332-1001\...\MountPoints2: {20f1ad07-da12-11e4-8252-08626629286f} - "G:\Setup.exe"
HKU\S-1-5-21-1228592731-2117178040-1850598332-1001\...\MountPoints2: {605fede8-da92-11e4-8258-08626629286f} - "I:\setup.exe"
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
R2 Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-06-08] (Nero AG)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [537896 2008-06-24] (Nero AG)
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Users\tom\AppData\Local\Temp
AlternateDataStreams: C:\Users\tom\SkyDrive:ms-properties
End
*****************

"HKU\S-1-5-21-1228592731-2117178040-1850598332-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{20f1ad07-da12-11e4-8252-08626629286f}" => key Removed successfully
HKCR\CLSID\{20f1ad07-da12-11e4-8252-08626629286f} => key not found.
"HKU\S-1-5-21-1228592731-2117178040-1850598332-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{605fede8-da92-11e4-8258-08626629286f}" => key Removed successfully
HKCR\CLSID\{605fede8-da92-11e4-8258-08626629286f} => key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value Removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value Removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value Removed successfully
Nero BackItUp Scheduler 3 => Unable to stop service.
Nero BackItUp Scheduler 3 => Service Removed successfully
NMIndexingService => Service Removed successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.

"C:\Users\tom\AppData\Local\Temp" folder move:

Could not move "C:\Users\tom\AppData\Local\Temp" folder => Scheduled to move on reboot.

"C:\Users\tom\SkyDrive" => ":ms-properties" ADS not found.

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-05-28 20:25:17)<=

C:\Users\tom\AppData\Local\Temp => Moved successfully

==== End of Fixlog 20:25:17 ====

[Rudy]

Já vám to jen doporučuji. Přikázat vám to nemohu. Ze zkušeností vím, že 10GB dat na ploše je nezdravý jev. Smazáno. nastala nějaká změna?

[tomorn]

Bohužel žádnou změnu nepozoruji. PC se chová stejně jako jsem popisoval v prvním příspěvku.

[Rudy]

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

[tomorn]

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 28. 5. 2015
Čas skenování: 23:29:55
Protokol:
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2015.05.28.08
Databáze rootkitů: v2015.05.24.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: tom

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 399874
Uplynulý čas: 5 min, 32 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

[Rudy]

Toto je OK. Ještě zkusíme ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

[tomorn]

Combofix nefujguje. Píše, že není podporovaný operační systém. Prý podporuje mimo jiné Windows 8(32/64 bit). Já mám Windows 8.1. Případně můžu poslat printscreen.

[Rudy]

Njn Win8.1. Ten není podporován. Zkuste částečnou obnovu systému.