Prosím o kontrolu, děkuji

Zpráva

#16 Příspěvek od **JaRon** » 11 pro 2015 07:19

su problemy aj po vycisteni

artmle9 · #17 Příspěvek od **artmle9** » 11 pro 2015 21:13

Stále ten samý problém

#18 Příspěvek od **JaRon** » 12 pro 2015 14:01

prescanuj PC s AVPTool a TDSSKiller

artmle9 · #19 Příspěvek od **artmle9** » 12 pro 2015 17:30

Bohužel stále stejný problém.

#20 Příspěvek od **altrok** » 13 pro 2015 11:35

Dejte logy FRST.txt a Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

artmle9 · #21 Příspěvek od **artmle9** » 13 pro 2015 11:51

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:12-12-2015 01
Ran by Lukáš Kilhof (administrator) on LK-PC (13-12-2015 11:49:53)
Running from C:\Users\Lukáš Kilhof\Desktop
Loaded Profiles: Lukáš Kilhof (Available Profiles: Lukáš Kilhof & DefaultAppPool)
Platform: Windows 10 Home (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe
(ASUSTeK Computer Inc.) C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Red Bend Ltd.) C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\ASPG.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
() C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
() C:\Windows\vsnpstd3.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ASUS) C:\Windows\AsScrPro.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(forum.viry.cz) C:\Users\Lukáš Kilhof\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [3738344 2015-10-09] (ELAN Microelectronics Corp.)
HKLM\...\Run: [snpstd3] => C:\WINDOWS\vsnpstd3.exe [835584 2007-05-10] ()
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3738344 2015-10-09] (ELAN Microelectronics Corp.)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2244096 2009-07-13] (VIA)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [8493624 2009-07-07] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [159744 2009-04-20] (ASUS)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [46368 2010-03-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [29984 2010-03-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PPort12reminder] => C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe [328992 2010-02-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2011-04-20] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5564784 2015-07-20] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7004376 2015-11-28] (AVAST Software)
HKU\S-1-5-21-563694034-3119439484-3167028291-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-11-28] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{5f49ab4a-a68a-49eb-b047-79036642765b}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-563694034-3119439484-3167028291-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-11-28] (AVAST Software)
BHO-x32: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll [2009-02-06] (Zeon Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-11-28] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-28] (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-28] (Oracle Corporation)
DPF: HKLM-x32 {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/CZ/Core/Player/2020PlayerAX_IKEA_Win32.cab

FireFox:
========
FF ProfilePath: C:\Users\Lukáš Kilhof\AppData\Roaming\Mozilla\Firefox\Profiles\eewe149m.default
FF NewTab: about:newtab
FF Homepage: hxxps://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-09] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-09] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2012-04-14] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-28] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-05] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Extension: Google Translator for Firefox - C:\Users\Lukáš Kilhof\AppData\Roaming\Mozilla\Firefox\Profiles\eewe149m.default\extensions\translator@zoli.bod.xpi [2015-11-29]
FF Extension: Adblock Plus - C:\Users\Lukáš Kilhof\AppData\Roaming\Mozilla\Firefox\Profiles\eewe149m.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-11-29]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-28]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] () [File not signed]
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [174416 2015-11-28] (AVAST Software)
S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed]
R2 DMAgent; C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe [402432 2009-07-30] (Red Bend Ltd.) [File not signed]
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [144104 2015-10-09] (ELAN Microelectronics Corp.)
R2 FastBootAgent; C:\Windows\SysWOW64\Fast Boot\FastBootAgent.exe [306232 2009-07-24] (ASUSTeK Computer Inc.)
S2 MySql; C:\apache\mysql\bin\mysqld-nt.exe [1089536 2001-01-22] () [File not signed]
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-09] (Nuance Communications, Inc.)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [36504 2015-06-22] (VIA Technologies, Inc.)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2015-07-20] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [306552 2015-07-20] (Western Digital Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R2 WiMAXAppSrv; C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe [1048576 2009-07-30] (Intel(R) Corporation) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
S3 wxpSvc; C:\Program Files (x86)\webcamXP 5\wService.exe [5023744 2011-07-27] (Moonware Studios) [File not signed]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-11-28] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-11-28] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-11-28] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-11-28] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1059656 2015-11-28] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449992 2015-11-28] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [154256 2015-11-28] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-11-28] (AVAST Software)
R3 athr; C:\Windows\System32\drivers\athwbx.sys [3837440 2013-08-14] (Qualcomm Atheros Communications, Inc.)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2015-08-20] (DT Soft Ltd)
R1 eusk2par; C:\Windows\system32\Drivers\eusk2par-amd64.sys [32336 2008-12-18] (Aladdin Knowledge Systems Ltd.)
S3 HTCAND64; C:\Windows\System32\Drivers\ANDROIDUSB.sys [33736 2009-11-02] (HTC, Corporation) [File not signed]
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [15416 2009-07-20] ( )
S3 SNPSTD3; C:\Windows\system32\DRIVERS\snpstd3.sys [10916352 2009-07-03] (Sonix Co. Ltd.)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 whfltr2k; C:\Windows\System32\DRIVERS\whfltr2k.sys [9600 2007-01-26] () [File not signed]
U3 idsvc; no ImagePath
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
U3 wpcsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-13 11:41 - 2015-12-13 11:41 - 00016148 _____ C:\WINDOWS\system32\LK-PC_Lukáš Kilhof_HistoryPrediction.bin
2015-12-12 16:19 - 2015-12-12 16:40 - 00263040 _____ C:\TDSSKiller.3.1.0.8_12.12.2015_16.19.48_log.txt
2015-12-12 14:51 - 2015-12-12 16:12 - 00000000 ____D C:\KVRT_Data
2015-12-12 14:51 - 2015-12-12 14:51 - 00478392 ____N (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\D79DF22C.sys
2015-12-12 14:51 - 2015-12-12 14:51 - 00085600 ____N (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\20393985.sys
2015-12-11 20:21 - 2015-12-11 20:21 - 00000000 ____D C:\Users\Lukáš Kilhof\AppData\Local\NetworkTiles
2015-12-10 19:08 - 2015-12-10 19:08 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-12-10 19:08 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-12-10 19:08 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-12-10 08:58 - 2015-12-10 08:06 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-12-10 08:57 - 2015-12-10 08:57 - 00000000 ____D C:\Users\Luk▀▄ Kilhof\AppData\LocalLow\Sun
2015-12-09 08:07 - 2015-12-09 08:12 - 00000000 ____D C:\AdwCleaner
2015-12-08 19:57 - 2015-12-01 08:01 - 02115936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-12-08 19:57 - 2015-12-01 06:51 - 07523840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2015-12-08 19:57 - 2015-12-01 05:59 - 05455360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2015-12-08 19:57 - 2015-11-25 06:42 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-12-08 19:57 - 2015-11-25 06:41 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-12-08 19:57 - 2015-11-25 06:33 - 03622272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-08 19:57 - 2015-11-25 06:27 - 01366680 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-12-08 19:57 - 2015-11-25 06:12 - 04047288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-12-08 19:57 - 2015-11-25 06:11 - 01532984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-12-08 19:57 - 2015-11-25 06:09 - 01310880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-12-08 19:57 - 2015-11-25 06:01 - 02879024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-08 19:57 - 2015-11-25 05:49 - 01569280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2015-12-08 19:57 - 2015-11-25 05:48 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMediaManager.dll
2015-12-08 19:57 - 2015-11-25 05:44 - 21872640 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-08 19:57 - 2015-11-25 05:42 - 24592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-08 19:57 - 2015-11-25 05:37 - 02350592 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-12-08 19:57 - 2015-11-25 05:36 - 01710592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2015-12-08 19:57 - 2015-11-25 05:35 - 00929792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-12-08 19:57 - 2015-11-25 05:35 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
2015-12-08 19:57 - 2015-11-25 05:34 - 12504576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-08 19:57 - 2015-11-25 05:31 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll
2015-12-08 19:57 - 2015-11-25 05:30 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll
2015-12-08 19:57 - 2015-11-25 05:30 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-12-08 19:57 - 2015-11-25 05:29 - 01649152 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-12-08 19:57 - 2015-11-25 05:29 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll
2015-12-08 19:57 - 2015-11-25 05:28 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-12-08 19:57 - 2015-11-25 05:28 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-12-08 19:57 - 2015-11-25 05:27 - 02180608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-12-08 19:57 - 2015-11-25 05:25 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-12-08 19:57 - 2015-11-25 05:23 - 19323392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-08 19:57 - 2015-11-25 05:23 - 03588096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-08 19:57 - 2015-11-25 05:23 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-12-08 19:57 - 2015-11-25 05:22 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-12-08 19:57 - 2015-11-25 05:22 - 01383424 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-08 19:57 - 2015-11-25 05:22 - 00603648 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll
2015-12-08 19:57 - 2015-11-25 05:19 - 01795584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-12-08 19:57 - 2015-11-25 05:18 - 01233920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2015-12-08 19:57 - 2015-11-25 05:17 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-12-08 19:57 - 2015-11-25 05:16 - 01442816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2015-12-08 19:57 - 2015-11-25 05:16 - 00786432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
2015-12-08 19:57 - 2015-11-25 05:13 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-12-08 19:57 - 2015-11-25 05:11 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ninput.dll
2015-12-08 19:57 - 2015-11-25 05:10 - 18801664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-08 19:57 - 2015-11-25 05:10 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-12-08 19:57 - 2015-11-25 05:10 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-12-08 19:57 - 2015-11-25 05:08 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2015-12-08 19:57 - 2015-11-25 05:05 - 11263488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-08 19:57 - 2015-11-25 05:04 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-12-08 19:57 - 2015-11-25 05:04 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll
2015-12-08 19:57 - 2015-11-25 05:04 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-12-08 19:56 - 2015-12-01 07:03 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\gpuenergydrv.sys
2015-12-08 19:56 - 2015-12-01 06:54 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2015-12-08 19:56 - 2015-12-01 06:49 - 04792320 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-12-08 19:56 - 2015-12-01 06:02 - 03580416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-12-08 19:56 - 2015-11-25 06:42 - 00168288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.exe
2015-12-08 19:56 - 2015-11-25 06:40 - 00516448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-12-08 19:56 - 2015-11-25 06:32 - 00113184 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2015-12-08 19:56 - 2015-11-25 05:59 - 00092992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2015-12-08 19:56 - 2015-11-25 05:49 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
2015-12-08 19:56 - 2015-11-25 05:49 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-08 19:56 - 2015-11-25 05:49 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
2015-12-08 19:56 - 2015-11-25 05:48 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EthernetMediaManager.dll
2015-12-08 19:56 - 2015-11-25 05:36 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
2015-12-08 19:56 - 2015-11-25 05:30 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2015-12-08 19:56 - 2015-11-25 05:26 - 00849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2015-12-08 19:56 - 2015-11-25 05:26 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-12-08 19:56 - 2015-11-25 05:25 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2015-12-08 19:56 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeoqw.dll
2015-12-08 19:56 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZST.DLL
2015-12-08 19:56 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZEL.DLL
2015-12-08 19:56 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZE.DLL
2015-12-08 19:56 - 2015-11-25 05:19 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2015-12-08 19:56 - 2015-11-25 05:10 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-12-08 19:56 - 2015-11-25 05:07 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
2015-12-08 19:56 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeoqw.dll
2015-12-08 19:56 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZST.DLL
2015-12-08 19:56 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZEL.DLL
2015-12-08 19:56 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZE.DLL
2015-12-08 19:56 - 2015-11-25 03:52 - 00775312 _____ C:\WINDOWS\SysWOW64\locale.nls
2015-12-08 19:56 - 2015-11-25 03:52 - 00775312 _____ C:\WINDOWS\system32\locale.nls
2015-12-08 09:24 - 2015-12-08 09:24 - 00000000 ____D C:\Users\LukßÜ Kilhof\AppData\LocalLow\Sun
2015-12-08 09:23 - 2015-12-08 09:23 - 00000000 ____D C:\Users\Luk▀▄ Kilhof
2015-12-08 08:33 - 2015-12-08 09:19 - 00000000 ____D C:\zoek_backup
2015-12-01 19:51 - 2015-12-11 16:00 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-01 19:51 - 2015-12-10 19:08 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-01 19:50 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-11-29 12:24 - 2015-11-29 12:25 - 00000000 ____D C:\rsit
2015-11-29 12:24 - 2015-11-29 12:24 - 01222144 _____ C:\Users\Lukáš Kilhof\Downloads\RSITx64.exe
2015-11-29 12:24 - 2015-11-29 12:24 - 00000000 ____D C:\Program Files\trend micro
2015-11-29 11:48 - 2015-12-11 17:19 - 00001248 _____ C:\Users\Lukáš Kilhof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-11-29 11:48 - 2015-11-29 11:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-11-29 11:47 - 2015-11-29 11:47 - 42988160 _____ C:\Users\Lukáš Kilhof\Downloads\Firefox Setup 42.0.exe
2015-11-29 10:27 - 2015-11-29 10:27 - 00000000 ____D C:\Users\Lukáš Kilhof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2015-11-29 10:26 - 2015-11-29 10:26 - 00004256 _____ C:\Users\Lukáš Kilhof\Documents\cc_20151129_102617.reg
2015-11-28 23:25 - 2015-11-28 23:25 - 00089900 _____ C:\Users\Lukáš Kilhof\Documents\cc_20151128_232510.reg
2015-11-28 15:28 - 2015-11-28 15:25 - 00386096 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-11-28 15:26 - 2015-12-11 17:21 - 00002013 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2015-11-28 15:26 - 2015-12-09 19:53 - 00004280 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-11-28 15:26 - 2015-11-28 15:26 - 00000000 ____D C:\Users\Lukáš Kilhof\AppData\Roaming\AVAST Software
2015-11-28 15:26 - 2015-11-28 15:25 - 00273784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-11-28 15:26 - 2015-11-28 15:25 - 00154256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-11-28 15:25 - 2015-11-28 15:25 - 01059656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-11-28 15:25 - 2015-11-28 15:25 - 00449992 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-11-28 15:25 - 2015-11-28 15:25 - 00097648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-11-28 15:25 - 2015-11-28 15:25 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-11-28 15:25 - 2015-11-28 15:25 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-11-28 15:25 - 2015-11-28 15:25 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-11-28 15:25 - 2015-11-28 15:25 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-11-28 15:24 - 2015-11-28 15:24 - 00000000 ____D C:\ProgramData\AVAST Software
2015-11-28 15:24 - 2015-11-28 15:24 - 00000000 ____D C:\Program Files\AVAST Software
2015-11-28 14:17 - 2015-11-28 14:18 - 00000000 ____D C:\Program Files (x86)\FileHippo.com
2015-11-28 11:57 - 2015-12-13 09:43 - 00004204 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{CA5749B0-4168-4219-B4F1-443000905E89}
2015-11-28 11:57 - 2015-11-28 11:57 - 00000000 ____D C:\Users\Lukáš Kilhof\AppData\Local\Chromium
2015-11-26 08:23 - 2015-12-11 17:20 - 00008192 _____ C:\WINDOWS\SysWOW64\WDPABKP.dat
2015-11-22 14:23 - 2015-11-22 14:23 - 00003268 _____ C:\Users\Lukáš Kilhof\Documents\cc_20151122_142350.reg
2015-11-22 14:23 - 2015-11-22 14:23 - 00003268 _____ C:\Users\Lukáš Kilhof\Documents\cc_20151122_142303.reg
2015-11-22 14:22 - 2015-11-22 14:22 - 00003268 _____ C:\Users\Lukáš Kilhof\Documents\cc_20151122_142155.reg
2015-11-22 14:21 - 2015-11-22 14:21 - 00010280 _____ C:\Users\Lukáš Kilhof\Documents\cc_20151122_142109.reg
2015-11-22 14:20 - 2015-11-22 14:20 - 00117486 _____ C:\Users\Lukáš Kilhof\Documents\cc_20151122_142008.reg
2015-11-22 14:02 - 2015-11-22 14:11 - 00000000 ____D C:\wdisplay
2015-11-22 10:15 - 2015-12-01 08:01 - 00000000 ____D C:\Wswin
2015-11-15 15:43 - 2015-11-15 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TopCD
2015-11-15 15:40 - 2015-11-15 15:43 - 00000000 ____D C:\Program Files\Richard Burns Rally
2015-11-13 19:34 - 2015-11-13 19:34 - 00000000 ____D C:\WINDOWS\System32\Tasks\NCH Software

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-13 11:49 - 2015-02-25 20:03 - 00000000 ____D C:\FRST
2015-12-13 11:34 - 2015-04-04 08:11 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-13 11:26 - 2015-05-16 08:57 - 00000972 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-13 09:40 - 2015-05-16 08:57 - 00000968 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-12 21:49 - 2012-06-17 09:45 - 00002259 _____ C:\WINDOWS\epplauncher.mif
2015-12-12 16:27 - 2015-07-10 12:04 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-12 16:27 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-12 16:13 - 2012-06-17 12:22 - 00000000 ____D C:\Users\Lukáš Kilhof\AppData\Roaming\Tyre
2015-12-11 17:21 - 2015-10-19 15:39 - 00002523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-12-11 17:21 - 2015-08-14 15:37 - 00002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-12-11 17:21 - 2015-08-07 16:15 - 00001540 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-11 17:21 - 2015-03-15 18:28 - 00001154 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pixillion Image Converter.lnk
2015-12-11 17:21 - 2013-08-27 16:26 - 00001092 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 8.lnk
2015-12-11 17:21 - 2013-01-26 21:59 - 00001295 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-12-11 17:21 - 2012-08-29 20:41 - 00001364 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-12-11 17:21 - 2012-08-02 21:21 - 00001432 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-12-11 17:21 - 2012-08-02 21:20 - 00002508 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2015-12-11 17:21 - 2012-06-17 12:13 - 00001104 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2015-12-11 17:21 - 2009-10-01 05:57 - 00001204 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD VDeck.lnk
2015-12-11 17:21 - 2009-10-01 05:48 - 00000999 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat.com.lnk
2015-12-11 17:20 - 2015-08-23 18:41 - 00001192 _____ C:\Users\Lukáš Kilhof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram.lnk
2015-12-11 17:20 - 2015-08-07 16:35 - 00002418 _____ C:\Users\Lukáš Kilhof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-11 17:20 - 2015-08-07 16:33 - 00001049 _____ C:\Users\Lukáš Kilhof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Volitelné funkce.lnk
2015-12-11 17:20 - 2013-03-26 19:07 - 00001868 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Software Updates.lnk
2015-12-11 17:18 - 2015-07-10 13:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-11 17:18 - 2015-07-10 10:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-12-11 16:47 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\rescache
2015-12-11 16:33 - 2013-02-13 17:41 - 00000000 ____D C:\Users\Lukáš Kilhof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-12-11 16:01 - 2015-08-07 16:30 - 00000000 ____D C:\Users\Lukáš Kilhof\AppData\Local\Packages
2015-12-10 08:58 - 2015-07-10 10:05 - 00000000 ____D C:\Windows
2015-12-09 19:57 - 2014-06-21 06:58 - 00000000 ____D C:\Users\Lukáš Kilhof\AppData\Local\Adobe
2015-12-09 19:50 - 2015-07-10 13:20 - 00339520 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-09 08:23 - 2015-08-07 16:04 - 02039120 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-09 08:23 - 2015-07-10 17:02 - 00843554 _____ C:\WINDOWS\system32\perfh005.dat
2015-12-09 08:23 - 2015-07-10 17:02 - 00192782 _____ C:\WINDOWS\system32\perfc005.dat
2015-12-09 08:23 - 2015-07-10 12:02 - 00000000 ____D C:\WINDOWS\INF
2015-12-09 08:16 - 2013-03-14 08:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-09 08:16 - 2013-03-14 08:07 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-09 08:13 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-08 20:28 - 2009-10-01 05:28 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-08 20:27 - 2013-03-14 08:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-08 20:25 - 2015-07-10 11:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-08 20:24 - 2013-07-25 14:09 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-08 20:18 - 2012-12-01 20:57 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-12-05 19:21 - 2014-10-26 12:51 - 00004030 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-05 19:21 - 2014-10-26 12:51 - 00003798 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-01 01:32 - 2015-10-05 14:19 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-12-01 01:32 - 2015-10-05 14:19 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-29 11:48 - 2014-07-01 17:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-29 10:27 - 2012-06-17 10:18 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-11-28 23:20 - 2009-10-01 06:02 - 00002476 _____ C:\WINDOWS\system32\AutoRunFilter.ini
2015-11-28 23:20 - 2009-10-01 06:02 - 00001835 _____ C:\WINDOWS\system32\ServiceFilter.ini
2015-11-28 23:18 - 2015-08-07 16:06 - 00000000 ____D C:\Users\Lukáš Kilhof
2015-11-28 22:03 - 2013-08-17 17:07 - 00000000 ____D C:\Users\Lukáš Kilhof\AppData\LocalLow\KMPlayer
2015-11-28 16:00 - 2012-06-17 12:15 - 00000000 ____D C:\Users\Lukáš Kilhof\AppData\Local\Google
2015-11-28 16:00 - 2012-06-17 12:15 - 00000000 ____D C:\Program Files (x86)\Google
2015-11-28 14:19 - 2012-06-17 12:22 - 00000000 ____D C:\ProgramData\Tyre
2015-11-28 13:20 - 2014-11-30 17:40 - 00000000 ____D C:\ProgramData\Oracle
2015-11-28 13:16 - 2014-11-30 17:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-11-28 13:16 - 2012-08-31 20:09 - 00000000 ____D C:\Program Files (x86)\Java
2015-11-28 13:15 - 2015-09-11 06:59 - 00000000 ____D C:\Users\Lukáš Kilhof\.oracle_jre_usage
2015-11-28 13:15 - 2012-08-31 20:10 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-11-22 20:29 - 2013-12-26 22:47 - 00000000 ____D C:\Program Files (x86)\Weather Capture Advance
2015-11-22 14:18 - 2015-08-07 16:56 - 00000000 ___DC C:\WINDOWS\Panther
2015-11-22 14:18 - 2012-10-18 16:40 - 00000000 ____D C:\Users\Lukáš Kilhof\AppData\Roaming\DAEMON Tools Lite
2015-11-22 14:16 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-11-22 14:16 - 2014-09-04 12:51 - 00000000 ____D C:\Users\Lukáš Kilhof\Documents\ReceptyData
2015-11-15 15:34 - 2015-03-15 18:28 - 00000000 ____D C:\ProgramData\NCH Software
2015-11-15 15:34 - 2015-03-15 18:28 - 00000000 ____D C:\Program Files (x86)\NCH Software
2015-11-14 03:31 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\appraiser

==================== Files in the root of some directories =======

2007-06-12 17:34 - 2007-06-12 17:34 - 0035822 _____ () C:\Program Files (x86)\Common Files\ASPG_icon.ico
2008-05-22 16:35 - 2008-05-22 16:35 - 0051962 _____ () C:\Program Files (x86)\Common Files\banner.jpg
2009-04-08 18:31 - 2009-04-08 18:31 - 0106496 _____ () C:\Program Files (x86)\Common Files\CPInstallAction.dll
2008-08-12 05:45 - 2008-08-12 05:45 - 0155648 _____ (ASUS) C:\Program Files (x86)\Common Files\MSIactionall.dll
2013-10-26 18:59 - 2013-10-26 18:59 - 0000037 ___SH () C:\Users\Lukáš Kilhof\AppData\Local\70149b02515b3bb20dd492.47983420
2012-12-06 06:47 - 2012-12-06 06:47 - 0003584 _____ () C:\Users\Lukáš Kilhof\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-12-30 18:00 - 2014-12-30 18:00 - 0000870 _____ () C:\Users\Lukáš Kilhof\AppData\Local\recently-used.xbel
2012-06-17 15:00 - 2012-06-17 15:00 - 0000057 _____ () C:\ProgramData\Ament.ini
2013-07-09 19:17 - 2013-07-09 19:17 - 0000095 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2013-07-09 19:16 - 2013-07-09 19:16 - 0000089 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.64.bc
2009-10-01 05:42 - 2009-10-01 05:43 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2009-10-01 05:42 - 2009-10-01 05:42 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

==================== MBR and Partition Table ==================

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Luk�� Kilhof\Desktop" je 2 MB.

***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AmIcoSinglun64
C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ETDWare
C:\Program Files\Elantech\ETDCtrl.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM
C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Setwallpaper
c:\programdata\SetWallpaper.cmd [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmartClock
C:\Program Files (x86)\SmartClock\SmartClock.exe /boot [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snpstd3
C:\Windows\vsnpstd3.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WD Quick View
C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FancyStart daemon.lnk
C:\Windows\Installer\{60D6618B-153F-4353-8185-908E676E5888}\_DCE9A4DB2A5F2786140FA3.exe -d [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Luk�� Kilhof^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Trillian.lnk
C:\PROGRA~2\Trillian\trillian.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Luk�� Kilhof^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^WinMySQLadmin.lnk
C:\apache\mysql\bin\WINMYS~1.EXE

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000

==================== End Of Log ==============================

artmle9 · #22 Příspěvek od **artmle9** » 13 pro 2015 11:53

Additional scan result of Farbar Recovery Scan Tool (x64) Version:12-12-2015 01
Ran by Lukáš Kilhof (2015-12-13 11:51:10)
Running from C:\Users\Lukáš Kilhof\Desktop
Windows 10 Home (X64) (2015-08-07 15:30:36)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-563694034-3119439484-3167028291-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-563694034-3119439484-3167028291-503 - Limited - Disabled)
Guest (S-1-5-21-563694034-3119439484-3167028291-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-563694034-3119439484-3167028291-1006 - Limited - Enabled)
Lukáš Kilhof (S-1-5-21-563694034-3119439484-3167028291-1000 - Administrator - Enabled) => C:\Users\Lukáš Kilhof

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AC3Filter 1.63b (HKLM-x32\...\AC3Filter_is1) (Version: 1.63b - Alexander Vigovsky)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Activation Assistant for the 2007 Microsoft Office suites (HKLM-x32\...\Activation Assistant for the 2007 Microsoft Office suites) (Version: - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (x32 Version: 1.0 - Microsoft Corporation) Hidden
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated)
Adobe Flash Player 20 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 20.0.0.228 - Adobe Systems Incorporated)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{5A22D889-FBDD-4AE8-86EC-089D45FC133E}) (Version: 1.2.17.25001 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.2.17.25001 - Alcor Micro Corp.) Hidden
Any Video Converter 3.5.5 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com)
AnyPic JPG to PDF Converter 1.0.2 (HKLM-x32\...\{ADD050EC-6B50-437F-807B-FF9F29216FA5}_is1) (Version: - AnyPic Soft)
Apple Application Support (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo Burning Studio 6 FREE v.6.81 (HKLM-x32\...\Ashampoo Burning Studio 6 FREE_is1) (Version: 6.8.1 - Ashampoo GmbH & Co. KG)
ASUS AI Recovery (HKLM-x32\...\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}) (Version: 1.0.6 - ASUS)
ASUS CopyProtect (HKLM-x32\...\{6B77A7F6-DD63-4F13-A6FF-83137A5AC354}) (Version: 1.0.0015 - ASUS)
ASUS FancyStart (HKLM-x32\...\{60D6618B-153F-4353-8185-908E676E5888}) (Version: 1.0.5 - ASUSTeK Computer Inc.)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS)
ASUS MultiFrame (HKLM-x32\...\{9D48531D-2135-49FC-BC29-ACCDA5396A76}) (Version: 1.0.0019 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{1686C4D1-B1FD-42E8-B7A8-FB4C4DBA5BA8}) (Version: 1.1.19 - ASUS)
ASUS SmartLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0007 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0028 - ASUS)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.17 - asus)
Asus_Camera_ScreenSaver (HKLM-x32\...\Asus_Camera_ScreenSaver) (Version: 2.0.0009 - ASUS)
Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.16 - Atheros Communications Inc.)
ATK Generic Function Service (HKLM-x32\...\{D3D54F3E-C5C3-443D-978F-87A72E5616E8}) (Version: 1.00.0008 - ATK)
ATK Hotkey (HKLM-x32\...\{7C05592D-424B-46CB-B505-E0013E8E75C9}) (Version: 1.0.0051 - ASUS)
ATK Media (HKLM-x32\...\{D1E5870E-E3E5-4475-98A6-ADD614524ADF}) (Version: 2.0.0005 - ASUS)
ATKOSD2 (HKLM-x32\...\{3B05F2FB-745B-4012-ADF2-439F36B2E70B}) (Version: 7.0.0005 - ASUS)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2241 - AVAST Software)
Brother MFL-Pro Suite DCP-7065DN (HKLM-x32\...\{3ACCCFB3-7B17-4E9F-ACB0-46868FCD4487}) (Version: 1.0.9.0 - Brother Industries, Ltd.)
CCleaner (HKLM\...\CCleaner) (Version: 3.19 - Piriform)
CoreAAC Audio Decoder (remove only) (HKLM-x32\...\CoreAAC Audio Decoder) (Version: - )
CropImage 1.00 (HKLM-x32\...\CropImage_is1) (Version: - Milan Travnicek)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.46.1.0328 - DT Soft Ltd)
Defraggler (HKLM\...\Defraggler) (Version: 2.16 - Piriform)
ELAN Touchpad 15.9.5.3_X64_WHQL (HKLM\...\Elantech) (Version: 15.9.5.3 - ELAN Microelectronic Corp.)
Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.3 - ASUS)
FormatFactory 2.95 (HKLM-x32\...\FormatFactory) (Version: 2.95 - Free Time)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Free YouTube to MP3 Converter version 3.12.46.923 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.46.923 - DVDVideoSoft Ltd.)
GIMP 2.8.0 (HKLM\...\GIMP-2_is1) (Version: 2.8.0 - The GIMP Team)
Google Earth (HKLM-x32\...\{28E82311-8616-11E1-BEB0-B8AC6F97B88E}) (Version: 6.2.2.6613 - Google)
Google Earth Pro (HKLM-x32\...\{44FC61F0-2F8A-11E3-8CAE-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2021 - Intel Corporation)
Intel® PROSet/Wireless WiMAX Software (HKLM\...\{FAE224AF-B15E-448B-88FA-1839A7570CF8}) (Version: 1.04.0000 - Intel Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Jpeg Resampler Vs 6+ (HKLM-x32\...\JpegResampler2010_is1) (Version: - Jpeg Resampler)
Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
KMPlayer (HKLM-x32\...\The KMPlayer) (Version: 3.9.1.135 - PandoraTV)
Malwarebytes Anti-Malware verze 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MKVToolNix 5.6.0 (HKLM-x32\...\MKVToolNix) (Version: 5.6.0 - Moritz Bunkus)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 42.0 (x86 cs) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 cs)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Need for Speed Underground 2 (HKLM-x32\...\{909F8EBC-EC7F-48FF-0085-475D818F0F31}) (Version: - )
NCH Toolbox (HKLM-x32\...\ToolBox) (Version: - NCH Software)
Nuance PaperPort 12 (HKLM-x32\...\{DA715959-CFF1-48A2-B3BB-98B9E569C6AC}) (Version: 12.1.0000 - Nuance Communications, Inc.)
Nuance PDF Viewer Plus (HKLM-x32\...\{28656860-4728-433C-8AD4-D1A930437BC8}) (Version: 5.30.3290 - Nuance Communications, Inc)
Old Calculator for Windows 10 (HKLM-x32\...\OldCalcForWin10) (Version: 1.0 - hxxp://winaero.com)
PaperPort Image Printer 64-bit (HKLM\...\{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}) (Version: 1.00.0001 - Nuance Communications, Inc.)
PDFTools Version 1.3 (08/26/2007) (HKLM-x32\...\PDFTools_is1) (Version: 1.3 - www.SheelApps.com - Sheel Khanna)
Platform (x32 Version: 1.34 - VIA Technologies, Inc.) Hidden
Pracovní kalendář (HKLM-x32\...\Pracovní kalendář) (Version: - )
Quicksys RegDefrag 2.9 (HKLM-x32\...\{5D26BF7B-BEF6-477D-8FC1-0C1C159B6364}_is1) (Version: - )
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
rajče průvodce verze 1.59.40.255 (HKLM-x32\...\rajče.net_is1) (Version: - rajče.net)
Recover Files 3.31 (HKLM-x32\...\Recover Files_is1) (Version: - Undelete & Unerase, Inc.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Richard Burns Rally (HKLM-x32\...\{92C7D009-A464-4948-A980-7A3E28CB2F49}_is1) (Version: 1.0 - US - ACTION, s.r.o.)
Scansoft PDF Professional (x32 Version: - ) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SmartClock 2.1 (HKLM-x32\...\SmartClock) (Version: - )
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.22298 - TeamViewer)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: 8.51 - Ghisler Software GmbH)
Trust Webcam (HKLM-x32\...\{ECD03DA7-5952-406A-8156-5F0C93618D1F}) (Version: 5.18.1211.103 - Sonix)
Tyre (HKLM\...\Tyre_is1) (Version: 6.4.4.1 - 't Schrijverke)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
UxStyle Core Beta (HKLM\...\{8E363055-15E5-4D8A-9C69-A0A9DE9A3337}) (Version: 0.2.1.1 - The Within Network, LLC)
VIA Platform Device Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.34 - VIA Technologies, Inc.)
WD Quick View (HKLM-x32\...\{10E4655D-047D-472A-AE5C-CCEF665B47E8}) (Version: 2.4.12.1 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{17A76C9D-91D4-4E01-922D-1B3000DEB9F1}) (Version: 2.4.12.1 - Western Digital Technologies, Inc.)
WD SmartWare Installer (HKLM-x32\...\{979a4332-3eb0-4561-9f74-a4fb871cf2bd}) (Version: 2.4.12.1 - Western Digital Technologies, Inc.)
Weather Capture Advance (HKLM-x32\...\{E10017D0-CDC3-4205-87F8-B1AC58124DE9}_is1) (Version: - )
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{4B4451CE-D1E6-4BDE-B4B2-59F03BB83B7C}) (Version: 14.0.8050.1202 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.26.0 - ASUS)
WinRAR 4.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.10 - ASUS)
WsWin V2.98.0 - 2015-08-31 (HKLM-x32\...\PC-Wetterstation_is1) (Version: 2.98.0 - Werner Krenn)
Xvid 1.2.2 final uninstall (HKLM-x32\...\Xvid_is1) (Version: 1.2 - Xvid team (Koepi))

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Restore Points =========================

28-11-2015 15:59:33 Revo Uninstaller's restore point - Google Chrome
05-12-2015 18:58:23 Naplánovaný kontrolní bod
08-12-2015 08:36:04 zoek.exe restore point
08-12-2015 19:51:25 JRT Pre-Junkware Removal
11-12-2015 15:58:24 dbes

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2015-12-10 08:10 - 00000753 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {005C09B9-13E3-48F4-9851-6B4FF0639F50} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {01C995FF-D178-4E7B-AC4A-9E950006A207} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {0837D897-84CB-4E30-A8DD-807937A81DFC} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {0F1FC558-90E6-41AA-8D37-4FBE69053762} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {148318FC-5974-4508-A415-B3AFD16E5DDB} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {1C77D171-4A67-4470-89BA-6252929BC9CA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {292745A5-7765-4CFD-85C3-FE8691912849} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-12-08] (Microsoft Corporation)
Task: {29308477-8F7E-4D4F-92D5-F1534E61B6F5} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {2AFDB3D3-02A5-4F39-B732-9E90184F1514} - \Ball Form -> No File <==== ATTENTION
Task: {2C53893E-00E8-4E50-A00A-B724E06988CA} - System32\Tasks\{D09FAE56-5A9B-41F1-B1C3-246D720EF022} => C:\Program Files (x86)\Network Stumbler\NetStumbler.exe
Task: {2FFCF9C3-61EE-4659-9F8F-729AF7B9CD80} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {301166CC-3CD0-4627-B480-9A010C0636F5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-09] (Adobe Systems Incorporated)
Task: {313E2F38-6D00-4DAC-90D9-C596BAF49F0D} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {33802523-AB21-4F8F-A10C-77AA33B098E1} - System32\Tasks\{F24BF22E-2FFB-432B-8FB3-BE7512B8A11A} => pcalua.exe -a "C:\Program Files (x86)\Nuance\PaperPort\ScannerWizardU.exe" -c /A [PaperPort 12.1] /L [czh]
Task: {3496A396-D5D1-414F-AB8F-1F0060379788} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2009-07-29] (ATK)
Task: {3C9616B2-742C-4820-AFAE-F3D2459E9677} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {3D966D87-5FE5-4FBC-8E90-DB0F48E454DB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {3E3E65EA-6693-4ACC-947D-206853F50D65} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {3E84B87D-E72F-4682-9C7A-EE47F15B150A} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe
Task: {42145BE5-4059-431F-919A-1A381C5966DE} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {4AB58050-BE96-4FE1-AEFE-2F1EB2597D5A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {5A3F1012-0F07-4730-A478-1D72DEE3EF78} - System32\Tasks\NCH Software\ExpressBurnSevenDays => C:\Program Files (x86)\NCH Software\ExpressBurn\ExpressBurn.exe
Task: {63B6CC4D-92BE-47CF-81C4-6FE592788A70} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {6436DE78-1813-4690-9DBD-30658CCBFD03} - System32\Tasks\{8A7892DF-9BE2-4249-9409-E3CC635B980B} => C:\Program Files (x86)\WS32\Wswin32.exe
Task: {67A4DA67-AA40-44A6-84C4-93B0EBC4599B} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {67BA13F5-23BA-4ECC-903C-924D2464AD8B} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2009-07-24] ()
Task: {6C265910-FA5A-4220-928A-2F837DEDD469} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {6CDD8F65-9A1F-42C2-8749-C95235BC06DA} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {6FECF9BE-AED8-4627-80ED-91FF5361960F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {773492A6-4F08-4DAF-9C1B-778BC17ACAED} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {78588675-6CF3-4E50-B5B1-1EC34EAA2F6B} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {7DDF9673-8D0B-4652-B795-1BEAD1206B65} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {85EDAE30-84D9-42C7-B93D-A0C926CCDE87} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {8815C381-04BB-44AE-AAFE-2A6806E2106E} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK)
Task: {8955A4AD-F32B-43CA-BDCC-09AF9ECD3416} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-11-28] (AVAST Software)
Task: {8EABE69A-8617-435F-8F98-AFAB8F43B7A7} - \ASUSControlDeck -> No File <==== ATTENTION
Task: {90DEFD96-8D9E-48B2-8582-D317B804BDCB} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {9705D9EB-1D45-4922-BA16-15AE241B3E9C} - System32\Tasks\{AB2C805F-7EC5-4878-84C6-013C49A34901} => C:\Program Files (x86)\Network Stumbler\NetStumbler.exe
Task: {9A2D8E71-CCF8-42E7-9973-4E5C76636A9B} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {AA921623-B84A-4EC8-A6DA-5D46323FC6D9} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {B4944A9F-7F4C-4EBF-B50A-42E3D7F08708} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {BE98C7E8-2A03-47B0-8547-748BA88B5988} - System32\Tasks\ASPG => C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe [2009-06-29] (ASUS)
Task: {C778374C-94FE-41B0-B705-5FC952201AC0} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {CB14DF3D-517B-48BC-BD72-DDCD3DD1A1F1} - System32\Tasks\{EE69E637-4FF8-478B-A0E7-AEFF0B12D2E6} => C:\Program Files (x86)\Gmail Notifier\Gmail Notifier.exe
Task: {D46443C3-EE5E-4E03-8E84-E5F92F3E36FA} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {DD548504-31EE-43FF-A573-1E9BCB56DC76} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {E3868EE1-AD80-4E22-A106-AC89CA413807} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {E3B7F7F3-C090-48E0-A4BD-8E381FCC9077} - System32\Tasks\hpUrlLauncher.exe_{CA1F916B-B2BD-4D0B-BBB8-88346365F9F3} => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\utils\hpUrlLauncher.exe
Task: {E4334EF6-4D26-4578-8902-49B26FB5F842} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {E959E007-A71C-4952-8EA8-22DE146D6227} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {F0496437-71B1-4E96-9E9C-3BC2F52CDE46} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {F51C5B4B-29E9-4FFE-9DE9-E009E91A4EA8} - System32\Tasks\{D5471058-19F6-4E7D-999C-C673108949FC} => C:\Program Files (x86)\Network Stumbler\NetStumbler.exe
Task: {FA7F8F84-6FB5-4135-8561-0E896171E9F9} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {FACB8164-0888-403B-B4E6-7F59329EA90F} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {FBC8485F-A585-489F-8E2C-C65FEABC1BEF} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {FF87BC2B-9AB8-40C9-AFD6-6B664988C57E} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-05-18] (ASUS)
Task: {FFEE4F98-789F-4BC5-9EBF-91D4AC658C46} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

#23 Příspěvek od **Roli** » 13 pro 2015 17:25

artmle9 píše:Zdravím,

FF jsem komplet odinstaloval přes Revouninstaler, ale po opětovné instalaci mi to dělá opět. Používám ADBlock.

Tento problém mám cca 14 dní, co se mi nechtěně nainstaloval ... (bohužel již nevím jak se jmenuje, ale je smazaný).

Pomozte mi prosím
dík

Zdravím,

tak sem taky vlezu než přijde kolega, ten Adblock odinstaluj, objevují se totiž fake verze které právě dělají to opačné než se od nich očekává.

artmle9 · #24 Příspěvek od **artmle9** » 13 pro 2015 17:40

Odinstalováno, dám vědět.

artmle9 · #25 Příspěvek od **artmle9** » 13 pro 2015 17:41

Tak bohužel ...

#26 Příspěvek od **altrok** » 13 pro 2015 20:12

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

na plose bude ulozen fixlog, jehoz obsah vlozte do pristi odpovedi

Kód: Vybrat vše

Start
File: C:\Program Files (x86)\WS32\Wswin32.exe
File: C:\Program Files (x86)\Network Stumbler\NetStumbler.exe
File: C:\Program Files (x86)\Gmail Notifier\Gmail Notifier.exe
File: C:\WINDOWS\SysWOW64\WDPABKP.dat
2015-12-10 08:58 - 2015-12-10 08:06 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-12-08 08:33 - 2015-12-08 09:19 - 00000000 ____D C:\zoek_backup
2015-11-29 12:24 - 2015-11-29 12:25 - 00000000 ____D C:\rsit
2015-11-29 12:24 - 2015-11-29 12:24 - 01222144 _____ C:\Users\Lukáš Kilhof\Downloads\RSITx64.exe
2015-11-29 12:24 - 2015-11-29 12:24 - 00000000 ____D C:\Program Files\trend micro
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
CMD: dir "C:\PROGRA~1"
CMD: dir "C:\PROGRA~2"
CMD: dir "C:\PROGRA~3"
CMD: dir "%localappdata%"
CMD: dir "%appdata%"
End

artmle9 · #27 Příspěvek od **artmle9** » 14 pro 2015 15:36

Fix result of Farbar Recovery Scan Tool (x64) Version:12-12-2015 01
Ran by Lukáš Kilhof (2015-12-14 15:36:06) Run:2
Running from C:\Users\Lukáš Kilhof\Desktop
Loaded Profiles: Lukáš Kilhof (Available Profiles: Lukáš Kilhof & DefaultAppPool)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
File: C:\Program Files (x86)\WS32\Wswin32.exe
File: C:\Program Files (x86)\Network Stumbler\NetStumbler.exe
File: C:\Program Files (x86)\Gmail Notifier\Gmail Notifier.exe
File: C:\WINDOWS\SysWOW64\WDPABKP.dat
2015-12-10 08:58 - 2015-12-10 08:06 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-12-08 08:33 - 2015-12-08 09:19 - 00000000 ____D C:\zoek_backup
2015-11-29 12:24 - 2015-11-29 12:25 - 00000000 ____D C:\rsit
2015-11-29 12:24 - 2015-11-29 12:24 - 01222144 _____ C:\Users\Lukáš Kilhof\Downloads\RSITx64.exe
2015-11-29 12:24 - 2015-11-29 12:24 - 00000000 ____D C:\Program Files\trend micro
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
CMD: dir "C:\PROGRA~1"
CMD: dir "C:\PROGRA~2"
CMD: dir "C:\PROGRA~3"
CMD: dir "%localappdata%"
CMD: dir "%appdata%"
End
*****************

========================= File: C:\Program Files (x86)\WS32\Wswin32.exe ========================

"C:\Program Files (x86)\WS32\Wswin32.exe" => not found.
====== End of File: ======

========================= File: C:\Program Files (x86)\Network Stumbler\NetStumbler.exe ========================

"C:\Program Files (x86)\Network Stumbler\NetStumbler.exe" => not found.
====== End of File: ======

========================= File: C:\Program Files (x86)\Gmail Notifier\Gmail Notifier.exe ========================

"C:\Program Files (x86)\Gmail Notifier\Gmail Notifier.exe" => not found.
====== End of File: ======

========================= File: C:\WINDOWS\SysWOW64\WDPABKP.dat ========================

File not signed
MD5: AF95C412B646058A8B44DCAF35A9BBA6
Creation and modification date: 2015-11-26 08:23 - 2015-12-11 17:20
Size: 0008192
Attributes: ----A
Company Name:
Internal Name:
Original Name:
Product:
Description:
File Version:
Product Version:
Copyright:

====== End of File: ======

C:\WINDOWS\zoek-delete.exe => moved successfully
C:\zoek_backup => moved successfully
C:\rsit => moved successfully
C:\Users\Lukáš Kilhof\Downloads\RSITx64.exe => moved successfully
C:\Program Files\trend micro => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully

========= dir "C:\PROGRA~1" =========

Volume in drive C is OS
Volume Serial Number is 6ACF-EB19

Directory of C:\PROGRA~1

14.12.2015 15:36 <DIR> .
14.12.2015 15:36 <DIR> ..
01.10.2009 06:02 <DIR> ASUS
01.10.2009 05:58 <DIR> ATKGFNEX
28.11.2015 15:24 <DIR> AVAST Software
17.06.2012 12:09 <DIR> CCleaner
07.08.2015 16:09 <DIR> Common Files
29.11.2013 21:39 <DIR> Defraggler
07.08.2015 16:09 <DIR> DVD Maker
19.10.2015 15:47 <DIR> Elantech
17.06.2012 12:13 <DIR> GIMP 2
06.10.2013 15:17 <DIR> Intel
09.12.2015 08:13 <DIR> Internet Explorer
07.08.2015 16:09 <DIR> Microsoft Games
17.06.2012 12:01 <DIR> Microsoft Office
09.12.2015 08:16 <DIR> Microsoft Silverlight
07.08.2015 16:44 <DIR> MSBuild
26.03.2013 19:08 <DIR> Nuance
01.10.2009 06:00 <DIR> P4G
07.08.2015 16:44 <DIR> Reference Assemblies
15.11.2015 15:43 <DIR> Richard Burns Rally
10.07.2015 15:35 <DIR> Tyre
07.08.2015 16:02 <DIR> VIA
09.11.2013 15:44 <DIR> Weather Capture Advance
07.08.2015 16:47 <DIR> Western Digital
10.07.2015 17:02 <DIR> Windows Defender
10.09.2015 21:00 <DIR> Windows Journal
26.01.2013 21:58 <DIR> Windows Live
07.08.2015 16:09 <DIR> Windows Mail
10.07.2015 17:02 <DIR> Windows Media Player
10.07.2015 12:04 <DIR> Windows Multimedia Platform
07.08.2015 16:28 <DIR> Windows NT
10.07.2015 17:02 <DIR> Windows Photo Viewer
10.07.2015 12:04 <DIR> Windows Portable Devices
17.06.2012 12:07 <DIR> WinRAR
06.10.2013 15:20 <DIR> Yota
0 File(s) 0 bytes
36 Dir(s) 189�995�118�592 bytes free

========= End of CMD: =========

========= dir "C:\PROGRA~2" =========

Volume in drive C is OS
Volume Serial Number is 6ACF-EB19

Directory of C:\PROGRA~2

10.12.2015 19:08 <DIR> .
10.12.2015 19:08 <DIR> ..
10.11.2013 18:16 <DIR> AC3Filter
14.08.2015 15:37 <DIR> Adobe
01.10.2009 05:53 <DIR> AmIcoSingLun
09.10.2012 18:34 <DIR> AnvSoft
03.10.2012 18:21 <DIR> AnyPic JPG to PDF Converter
19.10.2015 15:39 <DIR> Apple Software Update
19.12.2012 19:09 <DIR> Ashampoo
07.08.2015 16:09 <DIR> ASUS
26.03.2013 19:10 <DIR> Brother
26.03.2013 19:10 <DIR> Browny02
28.11.2015 13:15 <DIR> Common Files
26.03.2013 19:10 <DIR> ControlCenter4
15.03.2015 16:23 <DIR> CropImage
17.06.2012 10:33 <DIR> CyberLink
20.08.2015 14:42 <DIR> DAEMON Tools Lite
26.09.2014 23:06 <DIR> DVDVideoSoft
27.10.2013 12:46 <DIR> EA GAMES
28.11.2015 14:18 <DIR> FileHippo.com
17.06.2012 12:10 <DIR> FreeTime
28.11.2015 16:00 <DIR> Google
20.05.2015 17:29 <DIR> Howard
20.02.2013 20:27 <DIR> HTC
01.07.2012 09:44 <DIR> Intel
09.12.2015 08:13 <DIR> Internet Explorer
28.11.2015 13:16 <DIR> Java
01.09.2012 14:29 <DIR> JpegResampler2010
10.12.2015 19:08 <DIR> Malwarebytes Anti-Malware
05.08.2012 09:09 <DIR> Microsoft
31.01.2013 18:39 <DIR> Microsoft Office
09.12.2015 08:16 <DIR> Microsoft Silverlight
29.08.2012 20:35 <DIR> Microsoft SkyDrive
17.06.2012 09:34 <DIR> Microsoft SQL Server Compact Edition
17.06.2012 12:03 <DIR> Microsoft Visual Studio
17.06.2012 12:01 <DIR> Microsoft Visual Studio 8
01.09.2012 08:52 <DIR> Microsoft Works
07.08.2015 16:09 <DIR> Microsoft.NET
04.08.2012 20:25 <DIR> MKVToolNix
29.11.2015 11:48 <DIR> Mozilla Firefox
29.11.2015 11:48 <DIR> Mozilla Maintenance Service
09.06.2015 20:27 <DIR> MP3Gain
07.08.2015 16:16 <DIR> MSBuild
10.08.2012 19:20 <DIR> MSXML 4.0
15.11.2015 15:34 <DIR> NCH Software
27.04.2014 16:15 <DIR> NCH Swift Sound
26.03.2013 19:07 <DIR> Nuance
30.11.2014 17:39 <DIR> PDFTools
21.02.2013 16:53 <DIR> PLANstudio
17.06.2012 12:23 <DIR> Pracovn� kalend��_203
23.02.2015 19:14 <DIR> Quicksys
19.10.2015 15:40 <DIR> QuickTime
12.04.2015 16:25 <DIR> rajce
13.10.2015 18:57 <DIR> Recover Files
07.08.2015 16:44 <DIR> Reference Assemblies
23.09.2012 09:49 <DIR> Seznam.cz
16.04.2015 14:47 <DIR> Skype
20.01.2013 18:16 <DIR> SmartClock
30.09.2012 11:16 <DIR> SpeedFan
27.08.2013 16:26 <DIR> TeamViewer
09.07.2015 12:34 <DIR> The KMPlayer
15.10.2012 16:28 <DIR> TmNationsForever
26.08.2012 17:35 <DIR> TreasureUP
23.03.2014 12:02 <DIR> UX Pack
01.10.2009 05:57 <DIR> VIA
29.11.2015 10:27 <DIR> VS Revo Group
22.11.2015 20:29 <DIR> Weather Capture Advance
08.09.2013 16:09 <DIR> WeatherMate
27.04.2014 17:24 <DIR> webcamXP 5
07.08.2015 16:47 <DIR> Western Digital
10.07.2015 17:02 <DIR> Windows Defender
26.01.2013 21:58 <DIR> Windows Live
07.08.2015 16:09 <DIR> Windows Mail
10.07.2015 17:02 <DIR> Windows Media Player
10.07.2015 12:04 <DIR> Windows Multimedia Platform
10.07.2015 12:04 <DIR> Windows NT
10.07.2015 17:02 <DIR> Windows Photo Viewer
10.07.2015 12:04 <DIR> Windows Portable Devices
25.01.2014 21:05 <DIR> Ws32en
10.11.2013 18:17 <DIR> Xvid
0 File(s) 0 bytes
80 Dir(s) 189�995�114�496 bytes free

========= End of CMD: =========

========= dir "C:\PROGRA~3" =========

Volume in drive C is OS
Volume Serial Number is 6ACF-EB19

Directory of C:\PROGRA~3

14.08.2015 15:37 <DIR> Adobe
17.06.2012 15:00 57 Ament.ini
01.10.2009 05:53 <DIR> AmUStor
19.10.2015 15:39 <DIR> Apple
19.10.2015 15:39 <DIR> Apple Computer
19.12.2012 19:09 <DIR> ashampoo
02.08.2012 21:02 <DIR> ASUS
28.11.2015 15:24 <DIR> AVAST Software
10.08.2012 19:30 <DIR> Brother
26.03.2013 19:10 <DIR> ControlCenter4
18.10.2012 16:48 <DIR> DAEMON Tools Lite
01.02.2013 08:30 <DIR> Extreme Picture Finder
10.08.2012 19:24 <DIR> FLEXnet
20.02.2013 20:14 <DIR> HTC
10.03.2013 18:21 <DIR> IMSIDesign
09.11.2013 15:33 <DIR> Informer Technologies, Inc
23.03.2014 11:56 <DIR> IsolatedStorage
10.12.2015 19:08 <DIR> Malwarebytes
22.11.2013 08:20 <DIR> McAfee
08.12.2015 20:28 <DIR> Microsoft Help
07.08.2015 16:34 <DIR> Microsoft OneDrive
28.10.2013 16:55 <DIR> Microsoft SkyDrive
09.07.2013 19:17 95 Microsoft.SqlServer.Compact.400.32.bc
09.07.2013 19:16 89 Microsoft.SqlServer.Compact.400.64.bc
20.02.2013 20:13 <DIR> Motorola
17.06.2012 09:54 <DIR> Mozilla
15.11.2015 15:34 <DIR> NCH Software
27.04.2014 16:15 <DIR> NCH Swift Sound
26.03.2013 19:08 <DIR> Nuance
28.11.2015 13:20 <DIR> Oracle
16.10.2013 18:11 <DIR> P4G
24.10.2012 15:04 <DIR> PMS
10.07.2015 17:05 <DIR> regid.1991-06.com.microsoft
26.01.2013 18:53 <DIR> Samsung
26.03.2013 19:07 <DIR> ScanSoft
16.04.2015 14:47 <DIR> Skype
31.08.2012 20:10 <DIR> Sun
11.03.2013 21:07 <DIR> Temp
14.07.2013 09:09 <DIR> tmp
09.12.2012 14:21 <DIR> TomTom
14.10.2012 12:46 <DIR> TrackMania
28.11.2015 14:19 <DIR> Tyre
10.07.2015 13:22 <DIR> USOPrivate
10.07.2015 13:22 <DIR> USOShared
27.04.2014 19:33 <DIR> webcamXP 5
07.08.2015 16:47 <DIR> Western Digital
06.10.2013 15:20 <DIR> Yota
26.03.2013 19:07 <DIR> zeon
01.10.2009 05:43 105 {40BF1E83-20EB-11D8-97C5-0009C5020658}.log
01.10.2009 05:42 107 {C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
5 File(s) 453 bytes
45 Dir(s) 189�995�114�496 bytes free

========= End of CMD: =========

========= dir "%localappdata%" =========

Volume in drive C is OS
Volume Serial Number is 6ACF-EB19

Directory of C:\Users\Luk�� Kilhof\AppData\Local

14.12.2015 15:33 <DIR> .
14.12.2015 15:33 <DIR> ..
09.12.2015 19:57 <DIR> Adobe
19.10.2015 15:39 <DIR> Apple
16.10.2013 18:11 <DIR> Apps
16.10.2013 18:11 <DIR> ASUS
26.08.2015 17:51 <DIR> CEF
28.11.2015 11:57 <DIR> Chromium
08.08.2015 16:23 <DIR> Comms
06.12.2012 06:47 3�584 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
28.11.2015 12:15 <DIR> Diagnostics
25.01.2014 17:38 <DIR> Downloaded Installations
01.09.2015 07:45 <DIR> ElevatedDiagnostics
04.09.2014 12:20 <DIR> FileMaker
30.12.2014 18:00 <DIR> fontconfig
18.09.2015 22:08 90�136 GDIPFONTCACHEV1.DAT
30.12.2014 17:59 <DIR> gegl-0.2
28.11.2015 16:00 <DIR> Google
01.06.2015 14:44 <DIR> GWX
16.10.2013 18:11 <DIR> HP
26.10.2013 18:59 <DIR> IsolatedStorage
16.10.2013 18:23 <DIR> Macromedia
16.10.2013 18:11 <DIR> MetaGeek,_LLC
20.08.2015 14:54 <DIR> Microsoft
27.12.2014 22:24 <DIR> Microsoft Games
17.06.2012 11:50 <DIR> Microsoft Help
07.08.2015 16:35 <DIR> MicrosoftEdge
01.11.2013 10:42 <DIR> Mozilla
24.10.2012 15:05 <DIR> MPlayer
11.12.2015 20:21 <DIR> NetworkTiles
29.12.2014 19:54 <DIR> NFS Underground 2
11.12.2015 16:01 <DIR> Packages
15.06.2013 20:44 <DIR> Programs
07.08.2015 16:32 <DIR> Publishers
30.12.2014 18:00 870 recently-used.xbel
16.10.2013 18:11 <DIR> Samsung
16.10.2013 18:11 <DIR> Seven Zip
01.09.2014 07:53 <DIR> Skype
14.12.2015 15:36 <DIR> Temp
07.08.2015 16:30 <DIR> TileDataLayer
09.12.2012 14:21 <DIR> TomTom
07.08.2015 17:04 <DIR> VirtualStore
16.10.2013 18:11 <DIR> Western Digital
16.10.2013 18:11 <DIR> Western_Digital_Technolog
27.04.2014 15:53 <DIR> Windows Live
3 File(s) 94�590 bytes
42 Dir(s) 189�995�110�400 bytes free

========= End of CMD: =========

========= dir "%appdata%" =========

Volume in drive C is OS
Volume Serial Number is 6ACF-EB19

Directory of C:\Users\Luk�� Kilhof\AppData\Roaming

08.12.2015 19:54 <DIR> .
08.12.2015 19:54 <DIR> ..
08.03.2015 15:32 <DIR> .purple
14.08.2015 16:53 <DIR> Adobe
10.11.2013 18:12 <DIR> AnvSoft
16.10.2013 18:11 <DIR> AnyPic JPG to PDF Converter
04.09.2014 12:20 <DIR> Apliko11FMR
19.10.2015 15:55 <DIR> Apple Computer
29.08.2012 17:23 <DIR> ArcSoft
19.12.2012 19:13 <DIR> Ashampoo
28.11.2015 15:26 <DIR> AVAST Software
16.10.2013 18:11 <DIR> Brother
19.04.2015 18:41 <DIR> ControlCenter4
17.07.2014 18:42 <DIR> Czechcrowncoin
22.11.2015 14:18 <DIR> DAEMON Tools Lite
25.05.2015 07:25 <DIR> DMCache
26.09.2014 23:07 <DIR> DVDVideoSoft
21.07.2012 19:07 <DIR> EssentialPIM
16.10.2013 18:10 <DIR> FLEXnet
20.05.2015 16:35 <DIR> GHISLER
30.09.2012 11:03 <DIR> HpUpdate
16.10.2013 18:11 <DIR> HTC
17.06.2012 09:39 <DIR> Identities
02.08.2012 18:06 <DIR> InstallShield
13.12.2012 18:18 <DIR> IObit
16.10.2013 18:11 <DIR> Jpeg Resampler
16.10.2013 18:13 <DIR> Macromedia
14.07.2009 08:44 <DIR> Media Center Programs
04.08.2012 20:25 <DIR> mkvtoolnix
21.02.2013 18:22 <DIR> Mobile Atlas Creator
01.07.2014 17:20 <DIR> Mozilla
29.11.2013 20:21 <DIR> MultiBit
10.08.2012 19:25 <DIR> Nuance
22.06.2014 11:37 <DIR> Samsung
27.10.2015 08:53 <DIR> Skype
11.09.2015 06:59 <DIR> Sun
26.01.2013 21:01 <DIR> TeachMe
28.11.2013 19:25 <DIR> TeamViewer
09.12.2012 14:21 <DIR> TomTom
26.02.2015 19:16 <DIR> Trillian
12.12.2015 16:13 <DIR> Tyre
01.03.2013 22:29 <DIR> Wargaming.net
05.08.2012 10:36 <DIR> WebCam Recorder
17.06.2012 12:10 <DIR> WinRAR
0 File(s) 0 bytes
44 Dir(s) 189�995�106�304 bytes free

========= End of CMD: =========

==== End of Fixlog 15:36:09 ====

artmle9 · #28 Příspěvek od **artmle9** » 14 pro 2015 15:45

Problém stále stejný

#29 Příspěvek od **altrok** » 14 pro 2015 18:19

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix
na plose bude ulozen fixlog, jehoz obsah vlozte do pristi odpovedi
Kód: Vybrat vše
```
Start
Folder: C:\Users\Lukáš Kilhof\AppData\Local\NetworkTiles
End
```

artmle9 · #30 Příspěvek od **artmle9** » 14 pro 2015 18:28

Fix result of Farbar Recovery Scan Tool (x64) Version:12-12-2015 01
Ran by Lukáš Kilhof (2015-12-14 18:28:20) Run:3
Running from C:\Users\Lukáš Kilhof\Desktop
Loaded Profiles: Lukáš Kilhof (Available Profiles: Lukáš Kilhof & DefaultAppPool)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
Folder: C:\Users\Lukáš Kilhof\AppData\Local\NetworkTiles
End
*****************

========================= Folder: C:\Users\Lukáš Kilhof\AppData\Local\NetworkTiles ========================

====== End of Folder: ======

==== End of Fixlog 18:28:20 ====

VIRY.CZ

Prosím o kontrolu, děkuji

Re: Prosím o kontrolu, děkuji

Re: Prosím o kontrolu, děkuji

Re: Prosím o kontrolu, děkuji

Re: Prosím o kontrolu, děkuji

Re: Prosím o kontrolu, děkuji

Re: Prosím o kontrolu, děkuji

Re: Prosím o kontrolu, děkuji

Re: Prosím o kontrolu, děkuji

Re: Prosím o kontrolu, děkuji

Re: Prosím o kontrolu, děkuji

Re: Prosím o kontrolu, děkuji

Re: Prosím o kontrolu, děkuji

Re: Prosím o kontrolu, děkuji

Re: Prosím o kontrolu, děkuji

Re: Prosím o kontrolu, děkuji