Systém se semtam blokne,některé programy házejí chybky...

Zpráva

jakubatorus · #1 Příspěvek od **jakubatorus** » 26 úno 2016 10:03

Logfile of random's system information tool 1.10 (written by random/random)
Run by Kuba at 2016-02-26 09:49:33
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 5 GB (15%) free of 33 GB
Total RAM: 1977 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:49:49, on 26.2.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18205)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Windows\system32\GWX\GWX.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\RtHDVCpl.exe
C:\Users\Kuba\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Users\Kuba\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
D:\Download\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Kuba.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://services.eshield.com/general/new ... 5068C2}&i=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://services.eshield.com/general/new ... 5068C2}&i=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: SuggestMeYesBHO - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKCU\..\Run: [SoftonicAssistant] "C:\Users\Kuba\AppData\Local\SoftonicAssistant\SoftonicAssistant.exe"
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Kuba\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Kuba\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Kuba\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Dropbox Update Service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Dropbox Update Service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files\Sony\Sony PC Companion\PCCService.exe

--
End of file - 5738 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskMachineUA.job - C:\Program Files\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3039181005-700603003-780986539-1001Core.job - C:\Users\Kuba\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3039181005-700603003-780986539-1001UA.job - C:\Users\Kuba\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\m2gicx4a.default-1447741692704

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "www.gmail.com"
prefs.js - "keyword.URL" - "http://search.eshield.com/serp?guid={D6 ... _search&k="

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@software602.cz/602XML Filler]
"Description"=602XML Filler Plugin
"Path"=C:\Program Files\Software602\602XML\Filler\npfiller.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\m2gicx4a.default-1447741692704\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\m2gicx4a.default-1447741692704\searchplugins\
firmycz.xml
zbocz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}]
AC-Pro - C:\Program Files\AutocompletePro\AutocompletePro.dll [2010-07-14 97760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08 1725056]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-02-11 137752]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-02-11 171032]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-02-11 172568]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2016-01-29 986872]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2014-11-09 6183456]
"Skytel"=C:\Windows\Skytel.exe [2014-11-09 1826816]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"Dropbox"=C:\Program Files\Dropbox\Client\Dropbox.exe [2016-02-16 25122080]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SoftonicAssistant"=C:\Users\Kuba\AppData\Local\SoftonicAssistant\SoftonicAssistant.exe [2016-02-18 1846216]
"cz.seznam.software.autoupdate"=C:\Users\Kuba\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Kuba\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2016-01-18 50615936]
"Google Update"=C:\Users\Kuba\AppData\Local\Google\Update\GoogleUpdate.exe [2016-01-21 144200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13 1085656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner.exe [2015-01-20 5496600]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cheapster]
C:\Program Files\Cheapster\msilnk.exe [2014-12-30 288768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirtualCloneDrive]
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2013-03-10 88984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Empowering Technology Launcher.lnk]
C:\Acer\EMPOWE~1\EAPLAU~1.EXE [2007-04-14 535336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-02-11 228864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-02-26 09:49:34 ----D---- C:\Program Files\trend micro
2016-02-26 09:49:33 ----D---- C:\rsit
2016-02-25 23:03:36 ----A---- C:\Windows\system32\stkMonitor.dll
2016-02-25 23:03:26 ----D---- C:\Program Files\Amazon
2016-02-23 17:06:01 ----D---- C:\ProgramData\3c3cc06b-4541-0
2016-02-23 17:05:58 ----D---- C:\ProgramData\3c3cc06b-21b7-1
2016-02-23 17:04:33 ----D---- C:\Users\Kuba\AppData\Roaming\Opera Software
2016-02-23 17:02:50 ----D---- C:\Program Files\Opera
2016-02-19 22:09:55 ----D---- C:\Program Files\Adobe
2016-02-12 10:37:15 ----D---- C:\Program Files\Mozilla Firefox
2016-02-10 14:02:56 ----A---- C:\Windows\system32\invagent.dll
2016-02-10 14:02:56 ----A---- C:\Windows\system32\generaltel.dll
2016-02-10 14:02:56 ----A---- C:\Windows\system32\devinv.dll
2016-02-10 14:02:56 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-02-10 14:02:56 ----A---- C:\Windows\system32\appraiser.dll
2016-02-10 14:02:56 ----A---- C:\Windows\system32\aeinv.dll
2016-02-10 14:02:56 ----A---- C:\Windows\system32\acmigration.dll
2016-02-10 14:02:46 ----A---- C:\Windows\system32\ole32.dll
2016-02-10 14:02:11 ----A---- C:\Windows\system32\shell32.dll
2016-02-10 14:02:10 ----A---- C:\Windows\explorer.exe
2016-02-10 14:02:09 ----A---- C:\Windows\system32\ExplorerFrame.dll
2016-02-10 14:02:09 ----A---- C:\Windows\system32\authui.dll
2016-02-10 14:01:46 ----A---- C:\Windows\system32\InkEd.dll
2016-02-10 14:01:45 ----A---- C:\Windows\system32\jnwmon.dll
2016-02-10 14:01:44 ----A---- C:\Windows\system32\win32k.sys
2016-02-10 14:01:41 ----A---- C:\Windows\system32\rdpudd.dll
2016-02-10 14:01:41 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2016-02-10 14:01:41 ----A---- C:\Windows\system32\rdpcorets.dll
2016-02-10 14:01:40 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-02-10 14:01:33 ----A---- C:\Windows\system32\ntdll.dll
2016-02-10 14:01:33 ----A---- C:\Windows\system32\EncDec.dll
2016-02-10 14:01:33 ----A---- C:\Windows\system32\CPFilters.dll
2016-02-10 14:01:32 ----A---- C:\Windows\system32\ntkrnlpa.exe
2016-02-10 14:01:31 ----A---- C:\Windows\system32\KernelBase.dll
2016-02-10 14:01:31 ----A---- C:\Windows\system32\kernel32.dll
2016-02-10 14:01:29 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-02-10 14:01:29 ----A---- C:\Windows\system32\advapi32.dll
2016-02-10 14:01:28 ----A---- C:\Windows\system32\mtxoci.dll
2016-02-10 14:01:28 ----A---- C:\Windows\system32\msorcl32.dll
2016-02-10 14:01:28 ----A---- C:\Windows\system32\kerberos.dll
2016-02-10 14:01:26 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-02-10 14:01:26 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-02-10 14:01:25 ----A---- C:\Windows\system32\winsrv.dll
2016-02-10 14:01:25 ----A---- C:\Windows\system32\lsasrv.dll
2016-02-10 14:01:24 ----A---- C:\Windows\system32\wdigest.dll
2016-02-10 14:01:24 ----A---- C:\Windows\system32\TSpkg.dll
2016-02-10 14:01:24 ----A---- C:\Windows\system32\sspicli.dll
2016-02-10 14:01:24 ----A---- C:\Windows\system32\srcore.dll
2016-02-10 14:01:24 ----A---- C:\Windows\system32\smss.exe
2016-02-10 14:01:24 ----A---- C:\Windows\system32\schannel.dll
2016-02-10 14:01:24 ----A---- C:\Windows\system32\rpcrt4.dll
2016-02-10 14:01:24 ----A---- C:\Windows\system32\ncrypt.dll
2016-02-10 14:01:24 ----A---- C:\Windows\system32\msv1_0.dll
2016-02-10 14:01:24 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-02-10 14:01:24 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-02-10 14:01:24 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-02-10 14:01:24 ----A---- C:\Windows\system32\csrsrv.dll
2016-02-10 14:01:24 ----A---- C:\Windows\system32\cryptbase.dll
2016-02-10 14:01:24 ----A---- C:\Windows\system32\conhost.exe
2016-02-10 14:01:24 ----A---- C:\Windows\system32\apisetschema.dll
2016-02-10 14:01:23 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 14:01:23 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 14:01:23 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 14:01:23 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 14:01:23 ----A---- C:\Windows\system32\sspisrv.dll
2016-02-10 14:01:23 ----A---- C:\Windows\system32\srclient.dll
2016-02-10 14:01:23 ----A---- C:\Windows\system32\secur32.dll
2016-02-10 14:01:23 ----A---- C:\Windows\system32\rstrui.exe
2016-02-10 14:01:23 ----A---- C:\Windows\system32\lsass.exe
2016-02-10 14:01:23 ----A---- C:\Windows\system32\credssp.dll
2016-02-10 14:01:23 ----A---- C:\Windows\system32\auditpol.exe
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 14:01:22 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 14:01:21 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 14:01:21 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-02-10 14:01:21 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 14:01:21 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 14:01:21 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-02-10 14:01:21 ----A---- C:\Windows\system32\msobjs.dll
2016-02-10 14:01:21 ----A---- C:\Windows\system32\msaudite.dll
2016-02-10 14:01:21 ----A---- C:\Windows\system32\adtschema.dll
2016-02-10 14:00:46 ----A---- C:\Windows\system32\urlmon.dll
2016-02-10 14:00:45 ----A---- C:\Windows\system32\ieui.dll
2016-02-10 14:00:45 ----A---- C:\Windows\system32\ieframe.dll
2016-02-10 14:00:43 ----A---- C:\Windows\system32\mshtml.dll
2016-02-10 14:00:42 ----A---- C:\Windows\system32\iertutil.dll
2016-02-10 14:00:21 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-02-10 14:00:21 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-02-10 14:00:21 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-02-10 14:00:20 ----A---- C:\Windows\system32\occache.dll
2016-02-10 14:00:20 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-02-10 14:00:20 ----A---- C:\Windows\system32\iernonce.dll
2016-02-10 14:00:20 ----A---- C:\Windows\system32\ie4uinit.exe
2016-02-10 14:00:19 ----A---- C:\Windows\system32\jsproxy.dll
2016-02-10 14:00:19 ----A---- C:\Windows\system32\ieUnatt.exe
2016-02-10 14:00:19 ----A---- C:\Windows\system32\iedkcs32.dll
2016-02-10 14:00:18 ----A---- C:\Windows\system32\msfeeds.dll
2016-02-10 14:00:18 ----A---- C:\Windows\system32\jscript9diag.dll
2016-02-10 14:00:18 ----A---- C:\Windows\system32\inseng.dll
2016-02-10 14:00:18 ----A---- C:\Windows\system32\ieapfltr.dll
2016-02-10 14:00:18 ----A---- C:\Windows\system32\dxtmsft.dll
2016-02-10 14:00:16 ----A---- C:\Windows\system32\webcheck.dll
2016-02-10 14:00:16 ----A---- C:\Windows\system32\msrating.dll
2016-02-10 14:00:16 ----A---- C:\Windows\system32\iesetup.dll
2016-02-10 14:00:15 ----A---- C:\Windows\system32\wininet.dll
2016-02-10 14:00:15 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-02-10 14:00:14 ----A---- C:\Windows\system32\dxtrans.dll
2016-02-10 14:00:10 ----A---- C:\Windows\system32\mshtmled.dll
2016-02-10 14:00:09 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-02-10 14:00:09 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-02-10 14:00:05 ----A---- C:\Windows\system32\jscript9.dll
2016-02-10 14:00:04 ----A---- C:\Windows\system32\vbscript.dll
2016-02-10 14:00:04 ----A---- C:\Windows\system32\jscript.dll
2016-02-10 13:59:43 ----A---- C:\Windows\system32\wuaueng.dll
2016-02-10 13:59:42 ----A---- C:\Windows\system32\wuwebv.dll
2016-02-10 13:59:42 ----A---- C:\Windows\system32\wups2.dll
2016-02-10 13:59:42 ----A---- C:\Windows\system32\wups.dll
2016-02-10 13:59:42 ----A---- C:\Windows\system32\wudriver.dll
2016-02-10 13:59:42 ----A---- C:\Windows\system32\wucltux.dll
2016-02-10 13:59:42 ----A---- C:\Windows\system32\wuauclt.exe
2016-02-10 13:59:42 ----A---- C:\Windows\system32\wuapp.exe
2016-02-10 13:59:42 ----A---- C:\Windows\system32\wuapi.dll
2016-02-10 13:59:42 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2016-02-10 13:59:42 ----A---- C:\Windows\system32\WinSetupUI.dll

======List of files/folders modified in the last 1 month======

2016-02-26 09:49:47 ----D---- C:\Windows\Prefetch
2016-02-26 09:49:34 ----RD---- C:\Program Files
2016-02-26 09:49:33 ----D---- C:\Windows\Temp
2016-02-26 09:41:25 ----D---- C:\Users\Kuba\AppData\Roaming\Seznam.cz
2016-02-26 09:40:27 ----D---- C:\Windows\system32\config
2016-02-26 09:40:05 ----D---- C:\Windows\SoftwareDistribution
2016-02-26 09:38:58 ----D---- C:\Windows\inf
2016-02-26 09:38:48 ----D---- C:\Windows
2016-02-26 09:38:25 ----D---- C:\Users\Kuba\AppData\Roaming\Skype
2016-02-26 09:37:25 ----SHD---- C:\System Volume Information
2016-02-26 09:32:26 ----D---- C:\Windows\System32
2016-02-26 09:32:26 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-02-26 07:48:57 ----D---- C:\Windows\winsxs
2016-02-26 00:07:25 ----D---- C:\Users\Kuba\AppData\Roaming\uTorrent
2016-02-26 00:06:11 ----D---- C:\Users\Kuba\AppData\Roaming\vlc
2016-02-24 22:33:54 ----D---- C:\Windows\system32\catroot
2016-02-24 22:33:29 ----SHD---- C:\Windows\Installer
2016-02-24 22:32:48 ----D---- C:\Windows\system32\drivers
2016-02-24 22:32:44 ----D---- C:\Program Files\Microsoft Security Client
2016-02-23 17:15:23 ----HD---- C:\ProgramData
2016-02-23 17:15:23 ----D---- C:\Program Files\Common Files
2016-02-23 17:14:14 ----D---- C:\Windows\system32\Tasks
2016-02-23 17:14:13 ----D---- C:\Windows\Tasks
2016-02-20 07:54:01 ----D---- C:\Windows\rescache
2016-02-20 07:22:02 ----D---- C:\Windows\debug
2016-02-19 22:09:58 ----D---- C:\Program Files\Common Files\Adobe
2016-02-19 22:09:35 ----D---- C:\ProgramData\Adobe
2016-02-19 21:38:18 ----D---- C:\Program Files\Dropbox
2016-02-15 12:28:35 ----D---- C:\Program Files\Mozilla Maintenance Service
2016-02-11 13:52:49 ----D---- C:\Windows\Microsoft.NET
2016-02-11 13:49:39 ----RSD---- C:\Windows\assembly
2016-02-11 08:37:23 ----SD---- C:\Windows\system32\CompatTel
2016-02-11 08:37:23 ----D---- C:\Windows\system32\appraiser
2016-02-11 08:37:22 ----D---- C:\Windows\AppPatch
2016-02-11 08:37:21 ----D---- C:\Windows\system32\cs-CZ
2016-02-11 08:37:21 ----D---- C:\Windows\cs-CZ
2016-02-11 08:37:20 ----D---- C:\Program Files\Windows Journal
2016-02-11 08:37:13 ----D---- C:\Windows\system32\en-US
2016-02-11 08:37:13 ----D---- C:\Program Files\Internet Explorer
2016-02-11 00:11:50 ----D---- C:\Windows\system32\MRT
2016-02-11 00:07:14 ----A---- C:\Windows\system32\MRT.exe
2016-02-11 00:03:58 ----D---- C:\Windows\system32\catroot2
2016-02-10 10:27:32 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2016-02-04 11:08:39 ----D---- C:\ProgramData\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-11-13 253704]
R0 PxHelp20;PxHelp20; C:\Windows\system32\DRIVERS\PxHelp20.sys [2003-10-28 20016]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2013-03-04 30616]
R1 MpKsl60262bbd;MpKsl60262bbd; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{04024964-3B44-41C8-BAFB-0EC08AACD4B5}\MpKsl60262bbd.sys [2016-02-26 39168]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-07-13 1035776]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-10-05 1221632]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2011-02-11 9036800]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2014-11-09 2152344]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-11-13 104664]
R3 RTSTOR;Realtek USB 2.0 Card Reader; C:\Windows\system32\drivers\RTSTOR.SYS [2008-03-11 61440]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2013-07-24 29696]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmb.sys [2011-08-17 18176]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s0017bus;Sony Ericsson Device 0017 driver (WDM); C:\Windows\system32\DRIVERS\s0017bus.sys [2008-10-21 86824]
S3 s0017mdfl;Sony Ericsson Device 0017 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s0017mdfl.sys [2008-10-21 15016]
S3 s0017mdm;Sony Ericsson Device 0017 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s0017mdm.sys [2008-10-21 114600]
S3 s0017mgmt;Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s0017mgmt.sys [2008-10-21 108328]
S3 s0017nd5;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS); C:\Windows\system32\DRIVERS\s0017nd5.sys [2008-10-21 26024]
S3 s0017obex;Sony Ericsson Device 0017 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s0017obex.sys [2008-10-21 104616]
S3 s0017unic;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM); C:\Windows\system32\DRIVERS\s0017unic.sys [2008-10-21 109736]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2016-01-08 1433216]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2016-01-08 1773696]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-01-29 22216]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2016-01-29 292816]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 dbupdate;Dropbox Update Service (dbupdate); C:\Program Files\Dropbox\Update\DropboxUpdate.exe [2015-10-14 136048]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10 269504]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 dbupdatem;Dropbox Update Service (dbupdatem); C:\Program Files\Dropbox\Update\DropboxUpdate.exe [2015-10-14 136048]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-01-22 102912]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-02-12 146888]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-11 45744]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

#2 Příspěvek od **Márty84** » 26 úno 2016 11:49

Zdravim

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

jakubatorus · #3 Příspěvek od **jakubatorus** » 26 úno 2016 13:33

Tak to vypadá, že je to bloknutý... Zadrhlo se to(OTL) u jakéhosi Scanning HKEY_current_user

Mám to vypnout a zkusit znovu?

Jinak díky moc za pomoc...

jakubatorus · #4 Příspěvek od **jakubatorus** » 26 úno 2016 15:25

Tak mi to nevyšlo ani napodruhé. Píše to canot create file....... cmd.bat

#5 Příspěvek od **Márty84** » 26 úno 2016 20:22

Obcas se to stane, ze OTL tuhle chybku vyhodi

Spustte ho podle stejneho navodu jeste jednou, ale s timto upravenym skriptem

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

jakubatorus · #6 Příspěvek od **jakubatorus** » 27 úno 2016 09:56

OTL logfile created on: 27.2.2016 0:33:02 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Kuba\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18204)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,93 Gb Total Physical Memory | 0,64 Gb Available Physical Memory | 33,24% Memory free
3,86 Gb Paging File | 2,33 Gb Available in Paging File | 60,25% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 31,76 Gb Total Space | 4,67 Gb Free Space | 14,70% Space Free | Partition Type: NTFS
Drive D: | 117,19 Gb Total Space | 26,97 Gb Free Space | 23,01% Space Free | Partition Type: NTFS
Drive E: | 3,70 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: KUBA-PC | User Name: Kuba | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2016.02.26 15:21:12 | 001,264,128 | ---- | M] () -- C:\Program Files\SaveSnap\SaveSnap.exe
PRC - [2016.02.26 11:54:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Kuba\Desktop\OTL.exe
PRC - [2016.02.12 10:37:37 | 000,392,136 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2016.01.29 18:44:58 | 000,292,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\NisSrv.exe
PRC - [2016.01.29 18:44:56 | 000,022,216 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2016.01.29 17:56:10 | 000,986,872 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2016.01.22 06:12:59 | 002,973,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2016.01.08 10:47:10 | 001,433,216 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
PRC - [2016.01.08 10:44:00 | 001,773,696 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
PRC - [2015.12.13 23:48:02 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2015.12.08 22:53:17 | 000,443,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\GWX\GWX.exe
PRC - [2015.05.26 12:38:58 | 000,457,384 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
PRC - [2014.11.09 03:33:07 | 000,204,800 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Users\Kuba\AppData\Local\Temp\RtkBtMnt.exe
PRC - [2014.11.09 03:06:01 | 006,183,456 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2014.11.08 14:06:10 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2013.05.16 14:25:04 | 001,062,472 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Seznam.cz\szninstall.exe
PRC - [2011.10.10 11:55:04 | 000,085,344 | ---- | M] (Software602 a.s.) -- C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
PRC - [2009.07.14 02:14:46 | 000,115,200 | ---- | M] () -- \\?\C:\Windows\System32\wbem\WMIADAP.EXE

========== Modules (No Company Name) ==========

MOD - [2016.02.26 15:21:12 | 001,264,128 | ---- | M] () -- C:\Program Files\SaveSnap\SaveSnap.exe
MOD - [2016.01.11 10:36:54 | 000,932,032 | R--- | M] () -- C:\Program Files\Skype\Phone\ssScreenVVS2.dll
MOD - [2015.05.26 12:38:58 | 000,457,384 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
MOD - [2015.05.26 12:38:34 | 000,862,888 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Seznam.cz\bin\lightspeed.dll
MOD - [2015.05.26 12:37:42 | 000,078,504 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Seznam.cz\bin\13248libfoxloader.dll
MOD - [2015.02.17 09:35:00 | 000,764,416 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Seznam.cz\bin\libchinst.dll
MOD - [2013.05.16 14:25:04 | 001,062,472 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Seznam.cz\szninstall.exe

========== Services (SafeList) ==========

SRV - [2016.02.12 10:37:35 | 000,146,888 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2016.02.10 10:27:33 | 000,269,504 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2016.01.29 18:44:58 | 000,292,816 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2016.01.29 18:44:56 | 000,022,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2016.01.22 06:52:03 | 000,102,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV - [2016.01.08 10:47:10 | 001,433,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
SRV - [2016.01.08 10:44:00 | 001,773,696 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
SRV - [2015.12.13 23:48:02 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2015.10.14 12:27:29 | 000,136,048 | ---- | M] (Dropbox, Inc.) [On_Demand | Stopped] -- C:\Program Files\Dropbox\Update\DropboxUpdate.exe -- (dbupdatem)
SRV - [2015.10.14 12:27:29 | 000,136,048 | ---- | M] (Dropbox, Inc.) [Auto | Stopped] -- C:\Program Files\Dropbox\Update\DropboxUpdate.exe -- (dbupdate)
SRV - [2015.07.22 18:53:34 | 000,937,984 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\diagtrack.dll -- (DiagTrack)
SRV - [2015.07.09 12:14:04 | 000,327,296 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013.05.27 05:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2013.02.04 17:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
SRV - [2011.10.10 11:55:04 | 000,085,344 | ---- | M] (Software602 a.s.) [Auto | Running] -- C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe -- (602XML Updater)
SRV - [2009.07.14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
DRV - [2016.02.26 09:47:49 | 000,039,168 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{04024964-3B44-41C8-BAFB-0EC08AACD4B5}\MpKsl60262bbd.sys -- (MpKsl60262bbd)
DRV - [2015.11.13 08:50:26 | 000,104,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
DRV - [2013.10.02 01:42:31 | 000,049,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2012.08.23 15:44:32 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2011.08.17 08:56:22 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010.11.20 13:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010.11.20 13:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010.11.20 13:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010.11.20 10:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010.11.20 10:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010.11.20 10:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2009.10.05 16:31:50 | 001,221,632 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2009.09.28 09:22:00 | 000,315,392 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\yk62x86.sys -- (yukonw7)
DRV - [2009.07.14 00:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2009.07.13 23:13:48 | 001,035,776 | ---- | M] (LSI Corp) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2008.10.21 09:22:48 | 000,114,600 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0017mdm.sys -- (s0017mdm)
DRV - [2008.10.21 09:22:48 | 000,109,736 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0017unic.sys -- (s0017unic)
DRV - [2008.10.21 09:22:48 | 000,108,328 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0017mgmt.sys -- (s0017mgmt)
DRV - [2008.10.21 09:22:48 | 000,104,616 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0017obex.sys -- (s0017obex)
DRV - [2008.10.21 09:22:48 | 000,086,824 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0017bus.sys -- (s0017bus)
DRV - [2008.10.21 09:22:48 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0017nd5.sys -- (s0017nd5)
DRV - [2008.10.21 09:22:48 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0017mdfl.sys -- (s0017mdfl)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-3039181005-700603003-780986539-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://services.eshield.com/general/new ... 5068C2}&i=
IE - HKU\S-1-5-21-3039181005-700603003-780986539-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://services.eshield.com/general/new ... 5068C2}&i=
IE - HKU\S-1-5-21-3039181005-700603003-780986539-1001\..\SearchScopes,DefaultScope = {28951497-967B-453A-8D3C-0269CDDB00B2}
IE - HKU\S-1-5-21-3039181005-700603003-780986539-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IESR02
IE - HKU\S-1-5-21-3039181005-700603003-780986539-1001\..\SearchScopes\{28951497-967B-453A-8D3C-0269CDDB00B2}: "URL" = http://search.eshield.com/serp?guid={D6 ... earchTerms}
IE - HKU\S-1-5-21-3039181005-700603003-780986539-1001\..\SearchScopes\{CC52D1F4-FDD2-4F99-A0A8-A38DA731C81E}: "URL" = http://search.yahoo.com/search?p={searc ... type=11433
IE - HKU\S-1-5-21-3039181005-700603003-780986539-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.countryCode: "CZ"
FF - prefs.js..browser.search.region: "CZ"
FF - prefs.js..browser.search.selectedEngine: "Seznam"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.gmail.com"
FF - prefs.js..extensions.enabledAddons: sendtokindle%40amazon.com:1.0.2.75
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:44.0.2
FF - prefs.js..keyword.URL: "http://search.eshield.com/serp?guid={D6 ... _search&k="

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_20_0_0_306.dll ()
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@software602.cz/602XML Filler: C:\Program Files\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Kuba\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Kuba\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 44.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 44.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 44.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 44.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2014.11.13 21:55:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kuba\AppData\Roaming\Mozilla\Extensions
[2016.02.24 18:10:42 | 000,000,000 | R--D | M] (No name found) -- C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\m2gicx4a.default-1447741692704\extensions
[2016.01.21 17:32:37 | 000,000,000 | ---D | M] (Seznam liĹˇtiÄŤka) -- C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\m2gicx4a.default-1447741692704\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
[2015.11.17 07:51:45 | 000,213,019 | ---- | M] () (No name found) -- C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\m2gicx4a.default-1447741692704\extensions\jid0-GokC6R49cBZciOKniufAR4QKFWc@jetpack.xpi
[2015.12.11 09:05:47 | 000,356,971 | ---- | M] () (No name found) -- C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\m2gicx4a.default-1447741692704\extensions\sendtokindle@amazon.com.xpi
[2016.02.24 09:14:00 | 000,010,686 | ---- | M] () (No name found) -- C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\m2gicx4a.default-1447741692704\extensions\{963162af-4179-4365-b207-8d0b078b58c3}.xpi
[2016.02.24 18:10:41 | 001,013,992 | ---- | M] () (No name found) -- C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\m2gicx4a.default-1447741692704\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2015.12.07 14:25:56 | 000,007,315 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\m2gicx4a.default-1447741692704\searchplugins\firmycz.xml
[2015.12.07 14:25:56 | 000,002,261 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\m2gicx4a.default-1447741692704\searchplugins\zbocz.xml
[2016.02.12 10:37:16 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2016.02.12 10:37:38 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

========== Chrome ==========

CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.0_1\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.1_0\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjcoccminpbgmiffhifdcnelpojeeb\12.10.6.15045_0\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\8.0.0.9098_0\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_1\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\

O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll (SimplyGen)
O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O4 - HKLM..\Run: [Dropbox] C:\Program Files\Dropbox\Client\Dropbox.exe (Dropbox, Inc.)
O4 - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [seznam-listicka-distribuce] C:\Program Files\Seznam.cz\distribution\szninstall.exe ()
O4 - HKU\S-1-5-21-3039181005-700603003-780986539-1001..\Run: [cz.seznam.software.autoupdate] C:\Users\Kuba\AppData\Roaming\Seznam.cz\szninstall.exe ()
O4 - HKU\S-1-5-21-3039181005-700603003-780986539-1001..\Run: [cz.seznam.software.szndesktop] C:\Users\Kuba\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe ()
O4 - HKU\S-1-5-21-3039181005-700603003-780986539-1001..\Run: [SoftonicAssistant] C:\Users\Kuba\AppData\Local\SoftonicAssistant\SoftonicAssistant.exe ()
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] C:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] C:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SaveSnap.lnk = C:\Program Files\SaveSnap\SaveSnap.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1C3F8AD8-487A-4418-A567-D672E0EC739F}: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3E966D8C-37C8-466B-8CC5-460CE697463C}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2012.12.25 02:11:48 | 000,049,718 | R--- | M] () - E:\AutoList.wpl -- [ CDFS ]
O32 - AutoRun File - [2012.12.25 02:11:48 | 000,000,036 | R--- | M] () - E:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{b5c02712-c04d-11dc-8475-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{b5c02712-c04d-11dc-8475-806e6f6e6963}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL E:\AutoList.wpl
O33 - MountPoints2\{d0af9815-9139-11e5-9ef8-001d72dfc152}\Shell - "" = AutoRun
O33 - MountPoints2\{d0af9815-9139-11e5-9ef8-001d72dfc152}\Shell\AutoRun\command - "" = G:\iStudio.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2016.02.26 15:21:13 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSnap
[2016.02.26 15:21:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SaveSnap
[2016.02.26 15:21:10 | 000,000,000 | ---D | C] -- C:\Program Files\SaveSnap
[2016.02.26 11:54:54 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Kuba\Desktop\OTL.exe
[2016.02.26 09:49:34 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2016.02.26 09:49:33 | 000,000,000 | ---D | C] -- C:\rsit
[2016.02.25 23:03:36 | 000,083,264 | ---- | C] (Amazon.com, Inc.) -- C:\Windows\System32\stkMonitor.dll
[2016.02.25 23:03:26 | 000,000,000 | ---D | C] -- C:\Program Files\Amazon
[2016.02.23 17:06:01 | 000,000,000 | ---D | C] -- C:\ProgramData\3c3cc06b-4541-0
[2016.02.23 17:05:58 | 000,000,000 | ---D | C] -- C:\ProgramData\3c3cc06b-21b7-1
[2016.02.23 17:04:52 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\Opera Software
[2016.02.23 17:04:33 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Opera Software
[2016.02.23 17:02:50 | 000,000,000 | ---D | C] -- C:\Program Files\Opera
[2016.02.21 21:16:50 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2016.02.21 21:16:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2016.02.19 22:09:55 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2016.02.19 21:37:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
[2016.02.12 10:37:15 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2016.02.10 14:02:56 | 001,198,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appraiser.dll
[2016.02.10 14:02:56 | 000,949,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aeinv.dll
[2016.02.10 14:02:56 | 000,591,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\invagent.dll
[2016.02.10 14:02:56 | 000,544,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\generaltel.dll
[2016.02.10 14:02:56 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\devinv.dll
[2016.02.10 14:02:56 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\acmigration.dll
[2016.02.10 14:02:56 | 000,022,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CompatTelRunner.exe
[2016.02.10 14:02:10 | 002,973,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2016.02.10 14:02:09 | 001,805,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
[2016.02.10 14:02:09 | 001,498,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
[2016.02.10 14:01:46 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\InkEd.dll
[2016.02.10 14:01:45 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jnwmon.dll
[2016.02.10 14:01:44 | 002,386,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2016.02.10 14:01:41 | 002,745,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorets.dll
[2016.02.10 14:01:41 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpudd.dll
[2016.02.10 14:01:41 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RdpGroupPolicyExtension.dll
[2016.02.10 14:01:33 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll
[2016.02.10 14:01:33 | 000,535,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
[2016.02.10 14:01:32 | 003,993,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2016.02.10 14:01:29 | 003,938,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2016.02.10 14:01:28 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msorcl32.dll
[2016.02.10 14:01:25 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2016.02.10 14:01:24 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2016.02.10 14:01:24 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
[2016.02.10 14:01:24 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2016.02.10 14:01:24 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2016.02.10 14:01:24 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apisetschema.dll
[2016.02.10 14:01:23 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
[2016.02.10 14:01:23 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\auditpol.exe
[2016.02.10 14:01:23 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
[2016.02.10 14:01:23 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2016.02.10 14:01:23 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2016.02.10 14:01:23 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2016.02.10 14:01:23 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2016.02.10 14:01:22 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2016.02.10 14:01:22 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2016.02.10 14:01:22 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2016.02.10 14:01:22 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2016.02.10 14:01:22 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2016.02.10 14:01:22 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2016.02.10 14:01:22 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.02.10 14:01:22 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2016.02.10 14:01:22 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2016.02.10 14:01:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2016.02.10 14:01:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2016.02.10 14:01:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2016.02.10 14:01:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2016.02.10 14:01:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2016.02.10 14:01:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2016.02.10 14:01:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2016.02.10 14:01:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2016.02.10 14:01:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2016.02.10 14:01:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2016.02.10 14:01:21 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adtschema.dll
[2016.02.10 14:01:21 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msaudite.dll
[2016.02.10 14:01:21 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msobjs.dll
[2016.02.10 14:01:21 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2016.02.10 14:01:21 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2016.02.10 14:01:21 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2016.02.10 14:01:21 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2016.02.10 14:01:21 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2016.02.10 14:00:46 | 002,724,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2016.02.10 14:00:45 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2016.02.10 14:00:21 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollector.exe
[2016.02.10 14:00:21 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\JavaScriptCollectionAgent.dll
[2016.02.10 14:00:21 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwproxystub.dll
[2016.02.10 14:00:20 | 000,684,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2016.02.10 14:00:20 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2016.02.10 14:00:20 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2016.02.10 14:00:19 | 000,341,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2016.02.10 14:00:19 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2016.02.10 14:00:19 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2016.02.10 14:00:18 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2016.02.10 14:00:18 | 000,687,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2016.02.10 14:00:18 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9diag.dll
[2016.02.10 14:00:18 | 000,416,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2016.02.10 14:00:18 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2016.02.10 14:00:17 | 002,050,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2016.02.10 14:00:16 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2016.02.10 14:00:16 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2016.02.10 14:00:15 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollectorres.dll
[2016.02.10 14:00:14 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2016.02.10 14:00:11 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2016.02.10 14:00:09 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2016.02.10 14:00:09 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MshtmlDac.dll
[2016.02.10 14:00:05 | 004,611,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2016.02.10 13:59:42 | 002,956,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2016.02.10 13:59:42 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2016.02.10 13:59:42 | 000,174,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2016.02.10 13:59:42 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2016.02.10 13:59:42 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSetupUI.dll
[2016.02.10 13:59:42 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2016.02.10 13:59:42 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2016.02.10 13:59:42 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2016.02.10 13:59:42 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wu.upgrade.ps.dll

========== Files - Modified Within 30 Days ==========

[2016.02.27 00:35:22 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2016.02.27 00:33:01 | 000,668,792 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2016.02.27 00:33:01 | 000,654,140 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2016.02.27 00:33:01 | 000,141,420 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2016.02.27 00:33:01 | 000,122,012 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2016.02.27 00:32:12 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\DropboxUpdateTaskMachineUA.job
[2016.02.27 00:27:49 | 000,000,888 | ---- | M] () -- C:\Windows\tasks\DropboxUpdateTaskMachineCore.job
[2016.02.27 00:27:21 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2016.02.27 00:27:16 | 1554,665,472 | -HS- | M] () -- C:\hiberfil.sys
[2016.02.26 16:59:39 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2016.02.26 16:59:37 | 000,000,958 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3039181005-700603003-780986539-1001UA.job
[2016.02.26 15:49:31 | 000,020,480 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2016.02.26 15:49:31 | 000,020,480 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2016.02.26 15:26:42 | 004,196,406 | ---- | M] () -- C:\Users\Kuba\Desktop\pl2.bmp
[2016.02.26 15:23:08 | 004,196,406 | ---- | M] () -- C:\Users\Kuba\Desktop\plocha.bmp
[2016.02.26 15:21:13 | 000,001,887 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SaveSnap.lnk
[2016.02.26 11:54:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Kuba\Desktop\OTL.exe
[2016.02.25 23:05:43 | 000,001,587 | ---- | M] () -- C:\Users\Kuba\Desktop\SendToKindle.exe – zástupce (2).lnk
[2016.02.25 23:05:30 | 000,001,587 | ---- | M] () -- C:\Users\Kuba\Desktop\SendToKindle.exe – zástupce.lnk
[2016.02.25 23:03:36 | 000,083,264 | ---- | M] (Amazon.com, Inc.) -- C:\Windows\System32\stkMonitor.dll
[2016.02.25 13:52:09 | 000,070,656 | ---- | M] () -- C:\Users\Kuba\¨horor
[2016.02.25 13:50:28 | 000,070,657 | ---- | M] () -- C:\Users\Kuba\k
[2016.02.24 22:33:33 | 000,001,912 | ---- | M] () -- C:\Windows\epplauncher.mif
[2016.02.19 22:10:03 | 000,002,017 | ---- | M] () -- C:\Users\Public\Desktop\Acrobat Reader DC.lnk
[2016.02.19 21:29:52 | 000,002,358 | ---- | M] () -- C:\Users\Kuba\Desktop\Google Chrome.lnk
[2016.02.19 20:33:22 | 000,012,137 | ---- | M] () -- C:\Users\Kuba\Documents\I will translate.odt
[2016.02.11 08:39:43 | 000,286,144 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2016.02.10 10:27:32 | 000,796,864 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2016.02.10 10:27:32 | 000,142,528 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2016.02.06 10:54:50 | 002,724,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2016.02.06 10:38:27 | 000,476,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2016.02.03 10:18:10 | 000,000,906 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3039181005-700603003-780986539-1001Core.job

========== Files Created - No Company Name ==========

[2016.02.26 15:26:42 | 004,196,406 | ---- | C] () -- C:\Users\Kuba\Desktop\pl2.bmp
[2016.02.26 15:23:08 | 004,196,406 | ---- | C] () -- C:\Users\Kuba\Desktop\plocha.bmp
[2016.02.26 15:21:13 | 000,001,887 | ---- | C] () -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SaveSnap.lnk
[2016.02.26 12:00:56 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2016.02.25 23:05:43 | 000,001,587 | ---- | C] () -- C:\Users\Kuba\Desktop\SendToKindle.exe – zástupce (2).lnk
[2016.02.25 23:05:30 | 000,001,587 | ---- | C] () -- C:\Users\Kuba\Desktop\SendToKindle.exe – zástupce.lnk
[2016.02.25 13:52:09 | 000,070,656 | ---- | C] () -- C:\Users\Kuba\¨horor
[2016.02.25 13:50:25 | 000,070,657 | ---- | C] () -- C:\Users\Kuba\k
[2016.02.19 22:10:03 | 000,002,017 | ---- | C] () -- C:\Users\Public\Desktop\Acrobat Reader DC.lnk
[2016.02.19 22:10:02 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
[2016.02.19 20:33:18 | 000,012,137 | ---- | C] () -- C:\Users\Kuba\Documents\I will translate.odt
[2016.01.18 08:23:23 | 000,000,000 | ---- | C] () -- C:\Users\Kuba\AppData\Local\{860649A0-996C-42EA-9542-4802D1E50C9A}
[2015.01.25 07:48:46 | 000,082,064 | ---- | C] () -- C:\Windows\cadkasdeinst01cz.exe
[2014.12.06 20:33:08 | 000,053,248 | ---- | C] () -- C:\Windows\System32\pxhpinst.exe
[2014.12.06 20:32:49 | 000,000,155 | ---- | C] () -- C:\Windows\winamp.ini
[2014.11.09 03:07:32 | 000,001,694 | ---- | C] () -- C:\Windows\RtDefLvl.ini
[2014.11.09 03:07:31 | 000,000,520 | ---- | C] () -- C:\Windows\System32\drivers\RTEQEX1.dat
[2014.11.09 03:07:31 | 000,000,520 | ---- | C] () -- C:\Windows\System32\drivers\RTEQEX0.dat
[2014.11.09 03:07:31 | 000,000,008 | ---- | C] () -- C:\Windows\System32\drivers\rtkhdaud.dat
[2014.11.06 19:49:50 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2014.11.06 19:48:44 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2014.11.06 15:26:54 | 001,277,960 | ---- | C] () -- C:\Windows\System32\602convert.dll

========== ZeroAccess Check ==========

[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2016.01.22 07:05:58 | 012,877,824 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2015.09.16 18:07:15 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\602Installer
[2015.09.16 18:08:30 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\602XML
[2015.01.25 07:49:03 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\CAD-KAS
[2015.09.12 10:09:43 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\calibre
[2015.09.23 06:23:41 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Canneverbe Limited
[2015.10.14 12:29:07 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Dropbox
[2015.01.30 14:55:20 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\FreeAudioPack
[2015.10.18 13:45:33 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Maxthon3
[2015.04.26 18:32:25 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Mobile Atlas Creator
[2014.12.08 10:35:18 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\OpenOffice
[2016.02.23 17:04:33 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Opera Software
[2016.02.27 00:33:16 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Seznam.cz
[2015.09.29 19:38:18 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Software602
[2015.07.11 22:24:31 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\u-turn
[2016.02.26 00:07:25 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\uTorrent
[2015.07.11 21:24:01 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Zpevnikator

========== Purity Check ==========

jakubatorus · #7 Příspěvek od **jakubatorus** » 27 úno 2016 09:57

========== Custom Scans ==========

< >
[2009.07.14 05:53:46 | 000,032,572 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2009.07.14 05:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2014.11.15 10:22:28 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2015.10.14 12:27:49 | 000,000,888 | ---- | C] () -- C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
[2015.10.14 12:27:50 | 000,000,892 | ---- | C] () -- C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
[2016.01.21 10:24:30 | 000,000,906 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3039181005-700603003-780986539-1001Core.job
[2016.01.21 10:24:33 | 000,000,958 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3039181005-700603003-780986539-1001UA.job

< >

< MD5 for: ATAPI.SYS >
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_a5025d31bee4647c\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_df26d4d57fdef5b0\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_dfc9143c98e9a6c4\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2009.07.14 02:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2010.11.20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\System32\autochk.exe
[2010.11.20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 00:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_5f7fb206051affbb\cdrom.sys
[2010.11.20 09:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\drivers\cdrom.sys
[2010.11.20 09:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_6381e09675524225\cdrom.sys
[2010.11.20 09:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_61b0c5ce02098355\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2016.01.22 06:12:59 | 002,973,184 | ---- | M] (Microsoft Corporation) MD5=2A156D5EBF221EF2A6AE7CE452324DAC -- C:\Windows\explorer.exe
[2016.01.22 06:12:59 | 002,973,184 | ---- | M] (Microsoft Corporation) MD5=2A156D5EBF221EF2A6AE7CE452324DAC -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.19135_none_53a73c47d80e17a9\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2016.01.22 07:07:00 | 002,973,696 | ---- | M] (Microsoft Corporation) MD5=CEA6C2000AEC6CAF3CD6F3F73848E40A -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.23338_none_5433dbd6f129009f\explorer.exe

< MD5 for: HAL.DLL >
[2010.11.20 13:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\System32\hal.dll
[2010.11.20 13:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_ad305c8fb7ec5060\hal.dll
[2009.07.14 02:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_aaff48c7bafdccc6\hal.dll

< MD5 for: SCECLI.DLL >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll

< MD5 for: SVCHOST.EXE >
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe

< MD5 for: TCPIP.SYS >
[2009.07.14 02:19:10 | 001,285,712 | ---- | M] (Microsoft Corporation) MD5=2CC3D75488ABD3EC628BBB9A4FC84EFC -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_b2f46875c7b9d667\tcpip.sys
[2010.11.20 13:30:12 | 001,290,112 | ---- | M] (Microsoft Corporation) MD5=37E8FA3779668837CA9E2C36D2415949 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_b5257c3dc4a85a01\tcpip.sys
[2014.04.05 03:25:01 | 001,294,272 | ---- | M] (Microsoft Corporation) MD5=5579DD18546999F5D0EC39D018726C6B -- C:\Windows\System32\drivers\tcpip.sys
[2014.04.05 03:25:01 | 001,294,272 | ---- | M] (Microsoft Corporation) MD5=5579DD18546999F5D0EC39D018726C6B -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18438_none_b513c4dfc4b513b9\tcpip.sys
[2014.11.08 14:06:27 | 001,309,120 | ---- | M] (Microsoft Corporation) MD5=6C4F3D92764FFA22D28061A4D9235446 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22444_none_b58e8eb0ddde6cf1\tcpip.sys
[2014.11.08 14:06:27 | 001,294,272 | ---- | M] (Microsoft Corporation) MD5=CA59F7C570AF70BC174F477CFE2D9EE3 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_b4fa2013c4c8ebf1\tcpip.sys
[2012.10.03 17:44:01 | 001,308,040 | ---- | M] (Microsoft Corporation) MD5=D490DD0A91B4EAC3B4EE08D11EE37C31 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_b5a428d6ddce3d9a\tcpip.sys
[2012.10.03 17:58:30 | 001,293,680 | ---- | M] (Microsoft Corporation) MD5=E23A56F843E2AEBBB209D0ACCA73C640 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_b4ef7439c4d0da52\tcpip.sys
[2014.04.05 03:16:21 | 001,310,144 | ---- | M] (Microsoft Corporation) MD5=EA47AB18E289333AB94397D77CA6E3A1 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22648_none_b59293a4dddacc9b\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2014.07.16 03:56:14 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=4F37B93C14AEE313BEC52A23AFB15C2E -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_7224b2134c7555fa\winlogon.exe
[2014.07.17 02:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\System32\winlogon.exe
[2014.07.17 02:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_71a5e34e334f9d18\winlogon.exe
[2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009.07.14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
[2014.03.04 10:17:02 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=998507B046BA314CE8245364C686FA67 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_71da23b23327143c\winlogon.exe
[2014.03.04 11:39:02 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=D53972F87D850CD2EB4B29B60CAFDD77 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_7255f1994c4f8119\winlogon.exe

< >

< %systemroot%*.* /U /s >
[6 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\8110f7bfefa19d75c2720aeee6ad8e13\*.tmp files -> C:\Windows\SoftwareDistribution\Download\8110f7bfefa19d75c2720aeee6ad8e13\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2015.09.16 18:07:15 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\602Installer
[2015.09.16 18:08:30 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\602XML
[2015.01.30 15:05:43 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Adobe
[2015.01.25 07:49:03 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\CAD-KAS
[2015.09.12 10:09:43 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\calibre
[2015.09.23 06:23:41 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Canneverbe Limited
[2015.10.14 12:29:07 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Dropbox
[2016.01.26 12:38:26 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\dvdcss
[2015.01.30 14:55:20 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\FreeAudioPack
[2014.11.06 11:41:56 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Identities
[2014.11.09 03:39:18 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\InstallShield
[2014.11.15 10:39:43 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Macromedia
[2015.10.18 13:45:33 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Maxthon3
[2009.07.14 10:20:06 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Media Center Programs
[2015.07.18 07:36:03 | 000,000,000 | --SD | M] -- C:\Users\Kuba\AppData\Roaming\Microsoft
[2015.04.26 18:32:25 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Mobile Atlas Creator
[2014.11.13 21:55:24 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Mozilla
[2014.12.08 10:35:18 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\OpenOffice
[2016.02.23 17:04:33 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Opera Software
[2016.02.27 00:33:16 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Seznam.cz
[2016.02.27 00:31:27 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Skype
[2015.09.29 19:38:18 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Software602
[2015.07.11 22:24:31 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\u-turn
[2016.02.26 00:07:25 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\uTorrent
[2016.02.26 00:06:11 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\vlc
[2014.12.09 16:08:12 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Winamp
[2014.12.02 16:28:03 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\WinRAR
[2015.07.11 21:24:01 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Zpevnikator

< %APPDATA%\*.exe /s >
[2015.02.28 03:13:16 | 001,794,840 | ---- | M] (Maxthon International ltd.) -- C:\Users\Kuba\AppData\Roaming\Maxthon3\Public\MxUp\MxUp.exe
[2014.11.09 13:12:51 | 000,010,134 | R--- | M] () -- C:\Users\Kuba\AppData\Roaming\Microsoft\Installer\{72199E33-4F2A-4B7F-8E25-95DDDD50A678}\_A8E2051B6F0E47454AC3CD.exe
[2013.05.16 14:25:04 | 001,062,472 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Seznam.cz\szninstall.exe
[2013.05.16 14:26:24 | 002,589,256 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Seznam.cz\sznsetup.exe
[2013.04.16 11:52:34 | 000,055,808 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Seznam.cz\bin\ffkill.exe
[2015.05.26 12:36:54 | 000,073,896 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
[2015.05.26 12:38:58 | 000,457,384 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
[2015.05.26 12:38:44 | 000,103,080 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe
[2012.05.04 09:41:02 | 002,330,136 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Seznam.cz\install\sznsetup.exe
[2014.04.14 00:00:00 | 000,042,496 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\uTorrent\uninstall.exe
[2014.04.14 00:00:00 | 000,398,760 | ---- | M] (BitTorrent, Inc.) -- C:\Users\Kuba\AppData\Roaming\uTorrent\utorrent.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2016.02.26 16:59:39 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2016.02.27 00:27:49 | 000,000,888 | ---- | M] () -- C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
[2016.02.27 00:32:12 | 000,000,892 | ---- | M] () -- C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
[2016.02.03 10:18:10 | 000,000,906 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3039181005-700603003-780986539-1001Core.job
[2016.02.26 16:59:37 | 000,000,958 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3039181005-700603003-780986539-1001UA.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2016.02.27 00:37:58 | 000,020,480 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2016.02.27 00:37:58 | 000,020,480 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2016.02.27 00:33:01 | 000,141,420 | ---- | M] () -- C:\Windows\system32\perfc005.dat
[2016.02.27 00:33:01 | 000,122,012 | ---- | M] () -- C:\Windows\system32\perfc009.dat
[2016.02.27 00:33:01 | 000,668,792 | ---- | M] () -- C:\Windows\system32\perfh005.dat
[2016.02.27 00:33:01 | 000,654,140 | ---- | M] () -- C:\Windows\system32\perfh009.dat
[2016.02.27 00:33:01 | 001,583,226 | ---- | M] () -- C:\Windows\system32\PerfStringBackup.INI
[2016.02.25 23:03:36 | 000,083,264 | ---- | M] (Amazon.com, Inc.) -- C:\Windows\system32\stkMonitor.dll

< %SYSTEMDRIVE%\*.exe >

< >

< *crack* /s >

< *keygen* /s >

< *AntiWPA* /s >

< *loader* /s >
[2016.01.12 19:47:08 | 000,014,800 | ---- | M] () -- \Program Files\Dropbox\Client\_win32sysloader.pyd
[2016.01.12 19:33:56 | 000,004,328 | ---- | M] () -- \Program Files\Dropbox\Client\QtQuick\Controls\Private\TableViewItemDelegateLoader.qml
[2016.01.12 19:33:56 | 000,004,726 | ---- | M] () -- \Program Files\Dropbox\Client\QtQuick\Controls\Private\TreeViewItemDelegateLoader.qml
[2014.09.12 11:06:38 | 000,076,088 | ---- | M] () -- \Program Files\Maxthon\Bin\MxAppLoader.exe
[2015.08.05 10:58:26 | 000,700,928 | ---- | M] () -- \Program Files\Maxthon\Bin\MxDownloader.dll
[2015.04.17 03:14:24 | 000,086,768 | ---- | M] () -- \Program Files\Maxthon\Core\Webkit\Npplugins\gameloader.exe
[2014.07.29 12:34:32 | 000,029,696 | ---- | M] () -- \Program Files\OpenOffice 4\program\javaloader.uno.dll
[2014.08.13 08:30:44 | 000,005,813 | ---- | M] () -- \Program Files\OpenOffice 4\program\pythonloader.py
[2014.07.29 12:34:34 | 000,020,992 | ---- | M] () -- \Program Files\OpenOffice 4\program\pythonloader.uno.dll
[2014.08.13 09:09:38 | 000,000,171 | ---- | M] () -- \Program Files\OpenOffice 4\program\pythonloader.uno.ini
[2014.08.13 08:11:40 | 000,003,868 | ---- | M] () -- \Program Files\OpenOffice 4\program\classes\unoloader.jar
[2014.07.29 08:07:24 | 000,013,501 | ---- | M] () -- \Program Files\OpenOffice 4\program\python-core-2.7.6\lib\unittest\loader.py
[2015.02.18 16:27:02 | 000,031,516 | ---- | M] () -- \Program Files\Seznam.cz\distribution\install\cz.seznam.software.libfoxloader-3.1.2-win32.zip
[2015.02.26 11:43:22 | 000,000,273 | ---- | M] () -- \Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjcoccminpbgmiffhifdcnelpojeeb\12.10.6.15045_0\js\URILoaderContentScript.js
[2015.05.26 12:37:42 | 000,078,504 | ---- | M] () -- \Users\Kuba\AppData\Roaming\Seznam.cz\bin\13248libfoxloader.dll
[2015.05.26 12:35:36 | 000,079,872 | ---- | M] () -- \Users\Kuba\AppData\Roaming\Seznam.cz\bin\13251libfoxloader-x64.dll
[2015.10.08 16:57:09 | 000,000,165 | ---- | M] () -- \Users\Kuba\AppData\Roaming\Seznam.cz\conf\szndesktop.d\libfoxloader.conf
[2013.04.02 14:39:42 | 000,031,516 | ---- | M] () -- \Users\Kuba\AppData\Roaming\Seznam.cz\install\cz.seznam.software.libfoxloader-3.1.2-win32.zip
[2015.01.06 15:17:14 | 000,000,665 | ---- | M] () -- \Users\Kuba\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_libfoxloader_3_2_5.install.bat
[2015.01.06 15:17:14 | 000,000,117 | ---- | M] () -- \Users\Kuba\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_libfoxloader_3_2_5.uninstall.bat
[2009.07.14 13:25:34 | 002,202,645 | R--- | M] () -- \Windows\Setup\SCRIPTS\Windows7Loader.exe
[2016.01.22 06:59:07 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2009.07.14 05:54:01 | 000,003,532 | ---- | M] () -- \Windows\System32\Tasks\Microsoft\Windows\WindowsColorSystem\Calibration Loader
[2015.10.15 05:08:34 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.19021_cs-cz_353bd0bd5b56a48b.manifest
[2015.10.15 05:08:34 | 000,034,752 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.19021_cs-cz_353bd0bd5b56a48b_winload.exe.mui_3bc5b827
[2015.10.15 05:08:34 | 000,030,144 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.19021_cs-cz_353bd0bd5b56a48b_winresume.exe.mui_ff8b5358
[2015.10.15 05:08:35 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.19021_none_5d201c45caf40abe.manifest
[2015.10.15 05:08:36 | 000,521,384 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.19021_none_5d201c45caf40abe_winload.exe_75835076
[2015.10.15 05:08:36 | 000,455,752 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.19021_none_5d201c45caf40abe_winresume.exe_85cd1215
[2009.07.14 03:17:38 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 03:17:38 | 000,017,472 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23_spldr.sys_98bd87a0
[2015.05.13 06:04:43 | 000,000,612 | ---- | M] () -- \Windows\winsxs\FileMaps\programdata_microsoft_diagnosis_asimovuploader_0413bca0c3dfdda4.cdf-ms
[2009.07.14 09:42:11 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2015.02.03 04:54:10 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_352654f75b66aedd.manifest
[2015.08.04 19:15:30 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18950_cs-cz_351a888d5b6fabc5.manifest
[2015.10.01 19:23:11 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.19021_cs-cz_353bd0bd5b56a48b.manifest
[2014.12.13 02:50:10 | 000,002,777 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22908_cs-cz_35e2355e745d8d6b.manifest
[2015.01.12 23:09:15 | 000,002,777 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_cs-cz_35c59380747413ec.manifest
[2015.01.16 07:24:33 | 000,002,777 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_cs-cz_35c794147472469a.manifest
[2015.01.27 05:12:13 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22943_cs-cz_35b1f43c74827e7c.manifest
[2015.02.03 05:04:47 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22948_cs-cz_35b6f5ae747dfd2f.manifest
[2015.03.17 06:30:44 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23002_cs-cz_35dc0bc4746328a3.manifest
[2015.04.27 20:41:46 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23040_cs-cz_35aecb80748565b9.manifest
[2015.05.25 19:50:50 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_cs-cz_35905c50749bec3a.manifest
[2015.07.15 04:32:43 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_cs-cz_35ca6efa746fc308.manifest
[2015.07.15 19:44:27 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_cs-cz_35bf9f0e7477def9.manifest
[2015.07.23 02:24:51 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23142_cs-cz_35b0cdfa7483958e.manifest
[2015.08.04 19:38:06 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23153_cs-cz_35a6fe58748acad6.manifest
[2015.09.28 21:45:05 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23223_cs-cz_35c770027472742a.manifest
[2015.10.01 19:14:51 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23226_cs-cz_35ca70e0746fc02f.manifest
[2015.10.20 02:19:05 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23250_cs-cz_35a3ff60748d7bf8.manifest
[2015.12.30 20:30:42 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23313_cs-cz_35d241d4746a5560.manifest
[2016.01.17 01:54:34 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23334_cs-cz_35bda2467479a699.manifest
[2016.01.22 07:42:13 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23338_cs-cz_35c1a36e74760bf5.manifest
[2009.07.14 02:47:46 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_5afd1055cdfa75b9.manifest
[2010.11.20 05:02:40 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953.manifest
[2015.02.03 04:32:58 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_5d0aa07fcb041510.manifest
[2015.08.04 19:12:04 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18950_none_5cfed415cb0d11f8.manifest
[2015.10.01 19:21:33 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.19021_none_5d201c45caf40abe.manifest
[2014.12.12 07:03:57 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22908_none_5dc680e6e3faf39e.manifest
[2015.01.12 04:35:19 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22921_none_5da9df08e4117a1f.manifest
[2015.01.14 07:45:13 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22923_none_5dabdf9ce40faccd.manifest
[2015.01.27 04:51:15 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22943_none_5d963fc4e41fe4af.manifest
[2015.02.03 04:54:42 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22948_none_5d9b4136e41b6362.manifest
[2015.03.17 06:06:11 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23002_none_5dc0574ce4008ed6.manifest
[2015.04.27 20:17:27 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23040_none_5d931708e422cbec.manifest
[2015.05.25 19:35:55 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23072_none_5d74a7d8e439526d.manifest
[2015.07.15 04:25:32 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23126_none_5daeba82e40d293b.manifest
[2015.07.15 19:16:39 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23136_none_5da3ea96e415452c.manifest
[2015.07.23 01:23:37 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23142_none_5d951982e420fbc1.manifest
[2015.08.04 19:18:44 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23153_none_5d8b49e0e4283109.manifest
[2015.09.28 21:46:19 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23223_none_5dabbb8ae40fda5d.manifest
[2015.10.01 19:05:19 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23226_none_5daebc68e40d2662.manifest
[2015.10.20 02:15:07 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23250_none_5d884ae8e42ae22b.manifest
[2015.12.30 20:23:44 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23313_none_5db68d5ce407bb93.manifest
[2016.01.17 01:43:34 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23334_none_5da1edcee4170ccc.manifest
[2016.01.22 07:39:54 | 000,004,224 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23338_none_5da5eef6e4137228.manifest
[2009.07.14 02:52:31 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 05:56:23 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_0a96fc99dd17f16b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 05:44:10 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_0b12ca80f6405e48\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 05:45:15 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 02:48:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.05.09 04:08:08 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18847_none_0c9bd9e5da27bd35\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.16 19:34:24 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.19131_none_0ca08403da2536ca\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.22 06:59:07 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.19135_none_0ca4852bda219c26\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 05:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.03.04 11:35:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22616_none_0d44e078f32df860\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.04.12 03:03:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22653_none_0d169feaf3511c1f\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.05.09 06:34:47 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23049_none_0d274f66f343c2ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.17 01:09:50 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23334_none_0d2d2392f3401fc0\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.22 06:58:11 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23338_none_0d3124baf33c851c\api-ms-win-core-libraryloader-l1-1-0.dll

< *minodlogin* /s >

< *tnod* /s >

< *AutoKMS* /s >

< *activator* /s >

< *serial* /s >
[2015.12.11 23:12:28 | 000,434,368 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.41212.0\System.Runtime.Serialization.dll
[2016.01.14 07:14:36 | 001,164,288 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.41212.0\System.Runtime.Serialization.ni.dll
[2014.07.10 23:24:10 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2010.11.05 02:53:39 | 000,090,112 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2015.10.31 20:24:58 | 000,005,120 | ---- | M] () -- \Users\Kuba\AppData\Roaming\Maxthon3\Users\guest\LocalStorage\http_www.serialzone.cz_0.localstorage
[2015.10.31 20:24:58 | 000,005,672 | ---- | M] () -- \Users\Kuba\AppData\Roaming\Maxthon3\Users\guest\LocalStorage\http_www.serialzone.cz_0.localstorage-journal
[2015.10.31 20:14:32 | 001,763,328 | ---- | M] () -- \Users\Kuba\AppData\Roaming\Maxthon3\Users\guest\LocalStorage\http_www.sledujuserialy.cz_0.localstorage
[2015.10.31 20:14:32 | 000,006,704 | ---- | M] () -- \Users\Kuba\AppData\Roaming\Maxthon3\Users\guest\LocalStorage\http_www.sledujuserialy.cz_0.localstorage-journal
[2013.07.08 13:43:48 | 000,011,776 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2014.06.24 00:43:20 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013.07.08 13:45:28 | 000,090,112 | ---- | M] () -- \Windows\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2014.07.10 23:24:10 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2016.02.11 08:47:38 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\7f8e76c5817e18659ff1c6e6a0b27ff1\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.11.09 02:30:33 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\91eb4f41130c65ef17f0fee1d3ab48fb\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2016.02.11 13:34:21 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\966c8ea1f8ee9956e5e5897bd6d7967a\System.Runtime.Serialization.ni.dll
[2014.11.09 02:32:30 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\b1e0939384cc320d6ac7b8921ccc2877\System.Runtime.Serialization.ni.dll
[2016.02.11 00:01:54 | 000,306,176 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runt9064068c#\b99998a01b9bf8a7540c9f78846a1016\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2016.02.11 00:01:54 | 000,000,440 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runt9064068c#\b99998a01b9bf8a7540c9f78846a1016\System.Runtime.Serialization.Formatters.Soap.ni.dll.aux
[2016.02.11 00:02:39 | 002,803,200 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\09d2bd27d9df95bc3096cac9430aae04\System.Runtime.Serialization.ni.dll
[2016.02.11 00:02:39 | 000,000,980 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\09d2bd27d9df95bc3096cac9430aae04\System.Runtime.Serialization.ni.dll.aux
[2015.01.24 12:23:15 | 000,025,600 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.84e525b7#\ad0261438ff8f46e093faa717226ebef\System.Xml.Serialization.ni.dll
[2015.01.24 12:23:15 | 000,000,284 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.84e525b7#\ad0261438ff8f46e093faa717226ebef\System.Xml.Serialization.ni.dll.aux
[2014.04.12 00:48:40 | 001,051,888 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\65FC11932FE9AB9348A62CB73DDC6058\4.5.51209\System.Runtime.Serialization.dll.x86
[2014.04.12 00:48:40 | 001,051,888 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\65FC11932FE9AB9348A62CB73DDC6058\4.5.51209\System.Runtime.Serialization.dll_gac_x86
[2014.04.11 23:48:40 | 000,028,000 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2014.04.12 00:48:40 | 000,133,432 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2014.04.11 23:08:06 | 000,029,472 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Json\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Json.dll
[2014.04.11 23:08:06 | 000,029,512 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Primitives\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Primitives.dll
[2014.04.11 23:48:40 | 000,113,952 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2014.04.11 23:08:06 | 000,029,976 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Xml\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Xml.dll
[2014.07.23 01:17:44 | 001,050,840 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2014.04.11 23:08:06 | 000,045,800 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
[2014.04.11 23:08:06 | 000,029,928 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.XmlSerializer\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Xml.XmlSerializer.dll
[2014.06.24 00:43:20 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.05 02:53:33 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2014.07.10 23:24:11 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2014.07.23 01:17:44 | 001,050,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2014.04.12 00:48:40 | 000,133,432 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2014.04.11 23:08:06 | 000,029,472 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Json.dll
[2014.04.11 23:08:06 | 000,029,512 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Primitives.dll
[2014.04.11 23:08:06 | 000,029,976 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Xml.dll
[2014.04.11 23:08:06 | 000,045,800 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Serialization.dll
[2014.04.11 23:08:06 | 000,029,928 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.XmlSerializer.dll
[2014.04.11 23:48:40 | 000,028,000 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2014.04.11 23:48:40 | 000,113,952 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2009.07.14 02:16:13 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll
[2009.07.14 09:43:17 | 000,005,120 | ---- | M] () -- \Windows\System32\cs-CZ\serialui.dll.mui
[2009.07.14 00:45:33 | 000,083,456 | ---- | M] () -- \Windows\System32\drivers\serial.sys
[2009.07.14 09:43:30 | 000,009,728 | ---- | M] () -- \Windows\System32\drivers\cs-CZ\serial.sys.mui
[2009.07.13 23:13:45 | 001,068,032 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\mdmmotsm.inf_x86_neutral_c1415d9789c54b89\smserial.sys
[2009.07.14 00:45:33 | 000,083,456 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_x86_neutral_c1a802e06677f73f\serial.sys
[2009.07.13 23:09:18 | 000,031,232 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_x86_neutral_63e72c669d043f14\grserial.sys
[2009.07.14 03:18:03 | 000,002,762 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486.manifest
[2009.07.14 03:18:03 | 000,015,952 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486_kdcom.dll_db5e7744
[2009.07.14 09:43:55 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed_serialui.dll.mui_7d29d2a3
[2009.07.14 03:18:51 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a_serialui.dll_bea29328
[2009.07.14 02:52:33 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896.manifest
[2010.11.20 05:06:16 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c.manifest
[2014.07.02 06:57:49 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.18523_none_a6803b1074d97c29.manifest
[2014.07.14 03:04:09 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.18532_none_a681522274d87bdf.manifest
[2014.07.02 07:07:46 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22733_none_8fb394768e7ff5d7.manifest
[2014.07.14 03:04:27 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22743_none_8fb494c08e7f0f2e.manifest
[2009.07.14 09:42:43 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0.manifest
[2014.07.02 07:50:42 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.18523_cs-cz_342b81c984259c43.manifest
[2014.07.14 04:14:58 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.18532_cs-cz_342c98db84249bf9.manifest
[2014.07.02 21:15:55 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22733_cs-cz_1d5edb2f9dcc15f1.manifest
[2014.07.14 04:04:07 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22743_cs-cz_1d5fdb799dcb2f48.manifest
[2009.07.14 02:51:52 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9.manifest
[2010.11.20 05:05:38 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f.manifest
[2014.07.02 07:00:03 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.18523_none_d6c370aa9c807d5c.manifest
[2014.07.14 03:06:40 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.18532_none_d6c487bc9c7f7d12.manifest
[2014.07.02 07:10:04 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22733_none_bff6ca10b626f70a.manifest
[2014.07.14 03:06:53 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22743_none_bff7ca5ab6261061.manifest
[2009.07.14 02:49:26 | 000,002,762 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486.manifest
[2009.07.14 02:45:27 | 000,000,866 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.1.7600.16385_none_2c93290b67c98d09.manifest
[2009.07.14 02:57:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b.manifest
[2010.11.20 05:10:46 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1.manifest
[2014.07.02 06:58:58 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.18523_none_db9e1c77dd57179e.manifest
[2014.07.14 03:05:25 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.18532_none_db9f3389dd561754.manifest
[2014.07.02 07:08:55 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22733_none_c4d175ddf6fd914c.manifest
[2014.07.14 03:05:41 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22743_none_c4d27627f6fcaaa3.manifest
[2009.06.10 22:23:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_1c9a3ec1e01c684b\System.Runtime.Serialization.Formatters.Soap.dll
[2014.06.24 00:43:20 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7601.18523_none_1c70653de072abde\System.Runtime.Serialization.Formatters.Soap.dll
[2014.06.24 00:43:36 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7601.22733_none_05a3bea3fa19258c\System.Runtime.Serialization.Formatters.Soap.dll
[2009.07.14 09:43:23 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7600.16385_cs-cz_d5c3552dd9b47144\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.07.08 13:43:48 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7601.18523_cs-cz_d5997ba9da0ab4d7\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.06.10 22:14:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896\System.Runtime.Serialization.dll
[2010.11.05 02:52:39 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c\System.Runtime.Serialization.dll
[2014.03.09 22:47:42 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.18523_none_a6803b1074d97c29\System.Runtime.Serialization.dll
[2014.07.10 23:24:11 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.18532_none_a681522274d87bdf\System.Runtime.Serialization.dll
[2014.03.17 15:38:28 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22733_none_8fb394768e7ff5d7\System.Runtime.Serialization.dll
[2014.07.08 00:27:52 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22743_none_8fb494c08e7f0f2e\System.Runtime.Serialization.dll
[2009.07.14 09:43:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0\System.RunTime.Serialization.Resources.dll
[2013.07.08 13:45:28 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.18523_cs-cz_342b81c984259c43\System.RunTime.Serialization.Resources.dll
[2013.07.08 13:45:28 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.18532_cs-cz_342c98db84249bf9\System.RunTime.Serialization.Resources.dll
[2013.07.09 07:47:35 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22733_cs-cz_1d5edb2f9dcc15f1\System.RunTime.Serialization.Resources.dll
[2013.07.09 07:47:35 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22743_cs-cz_1d5fdb799dcb2f48\System.RunTime.Serialization.Resources.dll
[2009.06.10 22:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9\System.Runtime.Serialization.dll
[2010.11.05 02:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f\System.Runtime.Serialization.dll
[2014.03.09 22:47:42 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.18523_none_d6c370aa9c807d5c\System.Runtime.Serialization.dll
[2014.07.10 23:24:10 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.18532_none_d6c487bc9c7f7d12\System.Runtime.Serialization.dll
[2014.03.17 15:38:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22733_none_bff6ca10b626f70a\System.Runtime.Serialization.dll
[2014.07.08 00:27:52 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22743_none_bff7ca5ab6261061\System.Runtime.Serialization.dll
[2009.07.13 23:13:45 | 001,068,032 | ---- | M] () -- \Windows\winsxs\x86_mdmmotsm.inf_31bf3856ad364e35_6.1.7600.16385_none_7a97936f8a972896\smserial.sys
[2009.07.14 09:43:15 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_c002c1170ca9a88f\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.05 02:53:33 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_c233d4df09982c29\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.05 02:53:33 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.18523_cs-cz_c227ede109a14864\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.05 02:53:33 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.22731_cs-cz_c2a4bc1222c8ce98\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.07.14 09:43:17 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed\serialui.dll.mui
[2009.07.14 02:16:13 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a\serialui.dll
[2009.07.14 09:43:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_5d4a68b4b3d26ecc\System.RunTime.Serialization.Resources.dll
[2010.11.05 02:53:39 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_5f7b7c7cb0c0f266\System.RunTime.Serialization.Resources.dll
[2010.11.05 02:53:39 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.18523_cs-cz_5f6f957eb0ca0ea1\System.RunTime.Serialization.Resources.dll
[2010.11.05 02:53:39 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.22733_cs-cz_5fee6443c9efc783\System.RunTime.Serialization.Resources.dll
[2009.07.14 09:43:30 | 000,009,728 | ---- | M] () -- \Windows\winsxs\x86_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_c48c78a9ad8ff996\serial.sys.mui
[2009.07.14 00:45:33 | 000,083,456 | ---- | M] () -- \Windows\winsxs\x86_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_f86e06d519b1d9a4\serial.sys
[2009.07.13 23:09:18 | 000,031,232 | ---- | M] () -- \Windows\winsxs\x86_smartcrd.inf_31bf3856ad364e35_6.1.7600.16385_none_7280378295916274\grserial.sys
[2009.06.10 22:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b\System.Runtime.Serialization.dll
[2010.11.05 02:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1\System.Runtime.Serialization.dll
[2014.03.09 22:47:42 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.18523_none_db9e1c77dd57179e\System.Runtime.Serialization.dll
[2014.07.10 23:24:10 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.18532_none_db9f3389dd561754\System.Runtime.Serialization.dll
[2014.03.17 15:38:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22733_none_c4d175ddf6fd914c\System.Runtime.Serialization.dll
[2014.07.08 00:27:52 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22743_none_c4d27627f6fcaaa3\System.Runtime.Serialization.dll

< *w7lxe* /s >

< End of report >

jakubatorus · #8 Příspěvek od **jakubatorus** » 27 úno 2016 09:58

OTL Extras logfile created on: 27.2.2016 0:33:03 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Kuba\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18204)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,93 Gb Total Physical Memory | 0,64 Gb Available Physical Memory | 33,24% Memory free
3,86 Gb Paging File | 2,33 Gb Available in Paging File | 60,25% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 31,76 Gb Total Space | 4,67 Gb Free Space | 14,70% Space Free | Partition Type: NTFS
Drive D: | 117,19 Gb Total Space | 26,97 Gb Free Space | 23,01% Space Free | Partition Type: NTFS
Drive E: | 3,70 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: KUBA-PC | User Name: Kuba | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-3039181005-700603003-780986539-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- C:\Users\Kuba\AppData\Local\SoftonicAssistant\SoftonicAssistant.exe %1 ()
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Winamp.Bookmark] -- "D:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "D:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "D:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{093CA016-3BB6-43BD-A4A8-4F580EAD4723}" = lport=10243 | protocol=6 | dir=in | app=system |
"{13B3D03A-B7AC-4370-BECA-583081CB48FF}" = lport=2869 | protocol=6 | dir=in | app=system |
"{17EA9913-AED1-47AA-9FF2-B2FAA51A14CF}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{186B339C-2EC5-43DD-8D88-9EA6B5636BF6}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1EFBEDC7-2A5C-4A8D-893A-CA0BFE7D32E6}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{20BABCF5-A92F-4D58-B266-B5DA99126D5A}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{2D29ED74-92C0-4A65-9C16-E491235410CF}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{42F2921C-A9C0-4068-AEF0-B553AAE397CB}" = lport=138 | protocol=17 | dir=in | app=system |
"{566CC191-C516-45AD-92C8-961E61BD0F90}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{5CE319A2-AF6D-468D-831A-CBA8EA751272}" = rport=138 | protocol=17 | dir=out | app=system |
"{93B1FD03-B5B2-45E3-96FC-46940318A604}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9A58446A-6B63-46D4-80E9-F4E7ABA37C3C}" = rport=139 | protocol=6 | dir=out | app=system |
"{9D25D06C-4E64-427D-A8ED-E7953566410D}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{AD83EECC-9E2C-4D9D-A92B-7A9220576F5B}" = rport=10243 | protocol=6 | dir=out | app=system |
"{E543F133-483E-4CF3-AFBE-57CEDB1A515F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{E6FAECC1-F166-4ABD-8C72-C240BCC5EB89}" = lport=445 | protocol=6 | dir=in | app=system |
"{EA19A0D0-87DD-4D8A-8F3E-EF62AFADA87B}" = rport=445 | protocol=6 | dir=out | app=system |
"{EADDC306-FAD5-46BB-9697-FEB3B4D92DFD}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{F0CD7A68-AA57-4F7C-B567-9BDF91334B80}" = lport=137 | protocol=17 | dir=in | app=system |
"{F512DFF0-4982-4482-9331-903D53CEEAAE}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{F5FB05FB-6264-4554-BDC8-C61FB8514EC9}" = lport=139 | protocol=6 | dir=in | app=system |
"{F690767A-223E-49F3-B96A-E395D573BE28}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F8F0BB5A-3CCC-46B6-B645-84B7CDCEDE23}" = rport=137 | protocol=17 | dir=out | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1EC411FC-A93F-4C65-AAB8-9869E72BAFD0}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{20B8B708-48D7-4A45-B21D-67E637B38629}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{2152154A-8B3B-4021-AB96-AFE8F50713C2}" = protocol=6 | dir=in | app=d:\program files\winamp\winamp.exe |
"{24166381-0B5F-4700-AD99-612D7A84D64D}" = protocol=17 | dir=in | app=c:\program files\maxthon\bin\maxthon.exe |
"{2DCB9E02-B01C-4723-B5FA-EB4CE1044C7F}" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"{334EADB4-481D-43ED-8E16-8613FCBA657A}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{3864DF3D-F85B-4ADE-96C9-11A316E09077}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3DFE9979-CE5A-48AA-9243-D288FECDAC88}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{484F005E-CF56-4F3C-8984-98F0A79B3A12}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{53A3D4B9-0C74-46FF-AB9D-700DF85D3C00}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{5681DF73-5ECA-4D59-8920-63BD68CC01CA}" = protocol=6 | dir=in | app=c:\program files\common files\soft602\langserv.exe |
"{5C29CFF5-780D-4D85-9FCE-8FCA5C997AD7}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{66C25C73-D39B-46E5-8F83-36DAF3AF893A}" = protocol=17 | dir=in | app=d:\program files\winamp\winamp.exe |
"{6DB1F7E9-7FE0-4DD6-80D1-202A2BD0094D}" = dir=in | app=c:\program files\dropbox\client\dropbox.exe |
"{70EE8356-C119-472F-9CDA-99F2E59A7EA4}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{76044282-FF8B-4D09-B72E-1A265EFFE537}" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"{79ECDC44-FB44-49AF-9043-0EB4DA6531B9}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{86524154-702F-4BB2-8BFF-38A583069ED6}" = protocol=17 | dir=in | app=c:\program files\maxthon\bin\mxup.exe |
"{88A7A6B3-D417-4C31-B022-1E0EE45294A1}" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"{A5A6A8BC-CF78-4CD4-9D05-B4E7690DA362}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{A763241C-FE84-4DED-BF71-2E723E63AC7D}" = protocol=6 | dir=in | app=c:\program files\maxthon\bin\mxup.exe |
"{B72A94FF-824A-4E81-892D-D4388B579D01}" = protocol=17 | dir=in | app=c:\program files\common files\soft602\langserv.exe |
"{C888396D-D415-487B-AF77-0D049CE44025}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{CA6DFCE3-B742-4577-8119-B6D8831D86B3}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{CC706867-92C3-4C10-A4F3-2F0AC27D0027}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{D335541B-ED92-4C98-B478-FA568278C0EA}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{DE28309D-6678-4261-AB47-ACCC4EF3A06C}" = protocol=6 | dir=in | app=c:\program files\maxthon\bin\maxthon.exe |
"{E2B19B40-4561-4EB9-BD84-BCEB5F3FCEF1}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{EB353CFB-DFC7-4572-B14F-C69046ED145C}" = protocol=6 | dir=out | app=system |
"{FE303664-F2CE-4A95-B2BD-E74C1DF63DBC}" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{2F5FF00E-7568-4ECB-936E-F855D9F1C8A3}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{42DF7C52-1718-4D73-AF51-062C45D89BA5}C:\users\kuba\appdata\roaming\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\users\kuba\appdata\roaming\utorrent\utorrent.exe |
"TCP Query User{4A83FBC8-CE9A-4779-8323-E3D9863D0177}C:\users\kuba\appdata\roaming\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\users\kuba\appdata\roaming\utorrent\utorrent.exe |
"UDP Query User{933CD6A5-7BA9-4DED-82E2-F53E8CED5621}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{D1F8E95F-4370-4446-A68F-C894BDA5E931}C:\users\kuba\appdata\roaming\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\users\kuba\appdata\roaming\utorrent\utorrent.exe |
"UDP Query User{E5A7D471-E6AF-46D0-91EA-2C2396FF483C}C:\users\kuba\appdata\roaming\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\users\kuba\appdata\roaming\utorrent\utorrent.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{099218A5-A723-43DC-8DB5-6173656A1E94}" = Dropbox Update Helper
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros for Acer Driver v7.6.0.126_Foxconn Installation Program
"{3911CF56-9EF2-39BA-846A-C27BD3CD0685}" = Microsoft .NET Framework 4.5.2
"{69EDC871-8A8A-34A8-B511-FF7CE3C4B0B7}" = Microsoft .NET Framework 4.5.2 (CSY)
"{6D1221A9-17BF-4EC0-81F2-27D30EC30701}" = Skype Click to Call
"{72199E33-4F2A-4B7F-8E25-95DDDD50A678}" = Acer System Information
"{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}" = Avanquest update
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{929CE49F-1CA7-4CF3-A9A1-6D757443C63F}" = Microsoft Games for Windows - LIVE Redistributable
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029" = Microsoft .NET Framework 4.5.2 (čeština)
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.2
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-0804-1033-1959-001824166751}" = Adobe Refresh Manager
"{AC76BA86-7AD7-1029-7B44-AC0F074E4100}" = Adobe Acrobat Reader DC - Czech
"{BF455BD4-60BB-4E6E-867A-B4F57BC1164B}" = Microsoft Security Client
"{C560D6E7-E40A-435D-8B71-62CBCF1701B2}" = OpenOffice 4.1.1
"{C680853D-3D54-40C9-BB13-FD1665556A18}" = Software602 Form Filler
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.235
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FC965A47-4839-40CA-B618-18F486F042C6}" = Skype™ 7.18
"Adobe Flash Player NPAPI" = Adobe Flash Player 20 NPAPI
"Audio MP3 Editor_is1" = Audio MP3 Editor 5.80
"AutocompletePro3_is1" = AutocompletePro
"CCleaner" = CCleaner
"Dropbox" = Dropbox
"Free Mp3/Wma/Ogg Converter_is1" = Free Mp3/Wma/Ogg Converter 4.0.1
"Cheapster_FF" = Cheapster for Firefox
"Maxthon3" = Maxthon Cloud Browser
"Microsoft Security Client" = Microsoft Security Essentials
"Mozilla Firefox 44.0.2 (x86 cs)" = Mozilla Firefox 44.0.2 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"PDF Editor 4" = PDF Editor 4
"SaveSnap" = SaveSnap
"SendToKindle" = Amazon Send to Kindle
"VirtualCloneDrive" = VirtualCloneDrive
"VLC media player" = VLC media player
"Winamp" = Winamp
"WinRAR archiver" = WinRAR 5.21 (32-bit)

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3039181005-700603003-780986539-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"4be18d36df03b2e1" = Map Grabber
"Google Chrome" = Google Chrome
"SeznamInstall" = Seznam Software
"SoftonicAssistant" = Softonic Assistant

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 14.1.2016 2:46:25 | Computer Name = Kuba-PC | Source = Windows Search Service | ID = 7010
Description =

Error - 14.1.2016 4:20:03 | Computer Name = Kuba-PC | Source = Application Hang | ID = 1002
Description = Program firefox.exe verze 43.0.4.5848 přestal spolupracovat se systémem
Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto
problému, vyhledejte historii problému v ovládacím panelu Centrum akcí. ID procesu:
2c8 Čas spuštění: 01d14e9d349f8141 Čas ukončení: 178 Cesta k aplikaci: C:\Program
Files\Mozilla Firefox\firefox.exe ID hlášení: 8f0f49a7-ba97-11e5-9660-001d72dfc152

Error - 28.1.2016 6:34:15 | Computer Name = Kuba-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: vlc.exe, verze: 2.2.1.0, časové razítko:
0x00000004 Název chybujícího modulu: libqt4_plugin.dll, verze: 2.2.1.0, časové razítko:
0x00020002 Kód výjimky: 0x40000015 Posun chyby: 0x007ca10a ID chybujícího procesu:
0x954 Čas spuštění chybující aplikace: 0x01d159b06541ecf8 Cesta k chybující aplikaci:
C:\Program Files\VideoLAN\VLC\vlc.exe Cesta k chybujícímu modulu: C:\Program Files\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll
ID
zprávy: ad11d748-c5aa-11e5-8d51-001d72dfc152

Error - 1.2.2016 16:04:29 | Computer Name = Kuba-PC | Source = Application Hang | ID = 1002
Description = Program firefox.exe verze 43.0.4.5848 přestal spolupracovat se systémem
Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto
problému, vyhledejte historii problému v ovládacím panelu Centrum akcí. ID procesu:
394 Čas spuštění: 01d15c3fa6b70c32 Čas ukončení: 1110 Cesta k aplikaci: C:\Program
Files\Mozilla Firefox\firefox.exe ID hlášení: f349d03f-c91e-11e5-8d1e-001d72dfc152

Error - 9.2.2016 13:11:27 | Computer Name = Kuba-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: vlc.exe, verze: 2.2.1.0, časové razítko:
0x00000004 Název chybujícího modulu: libqt4_plugin.dll, verze: 2.2.1.0, časové razítko:
0x00020002 Kód výjimky: 0x40000015 Posun chyby: 0x007ca10a ID chybujícího procesu:
0x1220 Čas spuštění chybující aplikace: 0x01d1635cdb7ed665 Cesta k chybující aplikaci:
C:\Program Files\VideoLAN\VLC\vlc.exe Cesta k chybujícímu modulu: C:\Program Files\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll
ID
zprávy: 270eca2d-cf50-11e5-a93e-001d72dfc152

Error - 16.2.2016 11:52:50 | Computer Name = Kuba-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: vlc.exe, verze: 2.2.1.0, časové razítko:
0x00000004 Název chybujícího modulu: libqt4_plugin.dll, verze: 2.2.1.0, časové razítko:
0x00020002 Kód výjimky: 0x40000015 Posun chyby: 0x007ca10a ID chybujícího procesu:
0x8dc Čas spuštění chybující aplikace: 0x01d168d1958dbcd0 Cesta k chybující aplikaci:
C:\Program Files\VideoLAN\VLC\vlc.exe Cesta k chybujícímu modulu: C:\Program Files\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll
ID
zprávy: 548e9e82-d4c5-11e5-9682-001d72dfc152

Error - 24.2.2016 5:18:11 | Computer Name = Kuba-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: GSpot.exe, verze: 2.7.0.1, časové razítko:
0x45de4c87 Název chybujícího modulu: GSpot.exe, verze: 2.7.0.1, časové razítko:
0x45de4c87 Kód výjimky: 0xc0000005 Posun chyby: 0x0005ac0c ID chybujícího procesu:
0x464 Čas spuštění chybující aplikace: 0x01d16ee42c48986c Cesta k chybující aplikaci:
D:\Download\subwizard0911\GSpot.exe Cesta k chybujícímu modulu: D:\Download\subwizard0911\GSpot.exe
ID
zprávy: 85d1b7b5-dad7-11e5-8dab-001d72dfc152

Error - 24.2.2016 5:18:28 | Computer Name = Kuba-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: GSpot.exe, verze: 2.7.0.1, časové razítko:
0x45de4c87 Název chybujícího modulu: GSpot.exe, verze: 2.7.0.1, časové razítko:
0x45de4c87 Kód výjimky: 0xc0000005 Posun chyby: 0x0005ac0c ID chybujícího procesu:
0xb00 Čas spuštění chybující aplikace: 0x01d16ee44fea35fc Cesta k chybující aplikaci:
D:\Download\subwizard0911\GSpot.exe Cesta k chybujícímu modulu: D:\Download\subwizard0911\GSpot.exe
ID
zprávy: 904f43f8-dad7-11e5-8dab-001d72dfc152

Error - 26.2.2016 3:59:57 | Computer Name = Kuba-PC | Source = System Restore | ID = 8210
Description =

Error - 26.2.2016 4:35:45 | Computer Name = Kuba-PC | Source = System Restore | ID = 8210
Description =

[ System Events ]
Error - 29.6.2015 15:18:22 | Computer Name = Kuba-PC | Source = Service Control Manager | ID = 7009
Description = Při čekání na připojení služby Služba Zasílání zpráv o chybách systému
Windows bylo dosaženo časového limitu (30000 ms).

Error - 30.6.2015 17:35:09 | Computer Name = Kuba-PC | Source = DCOM | ID = 10010
Description =

Error - 1.7.2015 1:06:02 | Computer Name = Kuba-PC | Source = Microsoft-Windows-WLAN-AutoConfig | ID = 10000
Description = Rozšiřující modul sítě WLAN se nepodařilo spustit. Cesta k modulu:
C:\Windows\system32\athihvs.dll Kód chyby: 126

Error - 1.7.2015 1:21:39 | Computer Name = Kuba-PC | Source = DCOM | ID = 10010
Description =

Error - 1.7.2015 15:51:43 | Computer Name = Kuba-PC | Source = Microsoft-Windows-WLAN-AutoConfig | ID = 10000
Description = Rozšiřující modul sítě WLAN se nepodařilo spustit. Cesta k modulu:
C:\Windows\system32\athihvs.dll Kód chyby: 126

Error - 2.7.2015 0:54:42 | Computer Name = Kuba-PC | Source = VDS Basic Provider | ID = 33554433
Description =

Error - 2.7.2015 1:14:07 | Computer Name = Kuba-PC | Source = DCOM | ID = 10010
Description =

Error - 2.7.2015 11:06:55 | Computer Name = Kuba-PC | Source = Microsoft-Windows-WLAN-AutoConfig | ID = 10000
Description = Rozšiřující modul sítě WLAN se nepodařilo spustit. Cesta k modulu:
C:\Windows\system32\athihvs.dll Kód chyby: 126

Error - 3.7.2015 14:06:07 | Computer Name = Kuba-PC | Source = Microsoft-Windows-WLAN-AutoConfig | ID = 10000
Description = Rozšiřující modul sítě WLAN se nepodařilo spustit. Cesta k modulu:
C:\Windows\system32\athihvs.dll Kód chyby: 126

Error - 3.7.2015 14:06:53 | Computer Name = Kuba-PC | Source = DCOM | ID = 10010
Description =

< End of report >

#9 Příspěvek od **Márty84** » 27 úno 2016 11:09

Vyfotte mi nejakou tu "chybku" programu.

Jak je to s legalitou systemu? Ultimate neni zrovna bezna domaci verze

jakubatorus · #10 Příspěvek od **jakubatorus** » 27 úno 2016 11:58

No, windowsi mám nainstalovaný ze servisu mobilů/pc, a nejčastěji mi padá mozzilla, a to se blbě fotí, páč se mi to vždy blokne. Taky mi začal blbnout send to kindle, a Vlc se často kousne... Víc si teď nevybavuji...

#11 Příspěvek od **Márty84** » 27 úno 2016 16:03

Bohuzel je tam pouzity nelegalni aktivator windowsu a pravidla fora mi nedovoluji pokracovat

Hovori jasne http://forum.viry.cz/viewtopic.php?f=12&t=115512

Pomáhat NELZE:
2) Pokud stroj uživatele prokazatelně obsahuje nelegální hostitelský čí ochranný software
(operační systém, antivir, firewall, atd.), je nutné navést uživatele k nápravě, např. skrze neplacený software,
a začít řešit, až v době kdy je PC "v pořádku". V případě že uživatel nechce na pravidla přistoupit,
je nutné jej vyzvat ať fórum opustí, a vrátí se až je splní.

jakubatorus · #12 Příspěvek od **jakubatorus** » 27 úno 2016 21:36

Jasný, chápu, jen jsem byl ujištěn, že widle v pc, které jsem dostal jsou legál, ale je fakt, že jsem se tím dál nezabýval... Jinak teda, díky za ochotu, škoda.Jinak je něco co bys mi doporučil? Přemejšlel jsem o linuxu, ale nemůžu se dostat skrz participation, protože mám předem rozdělený disk. No, ale to pořeším asi s někým jiným. Ať se daří.

#13 Příspěvek od **Márty84** » 27 úno 2016 22:13

Tim, ze je tam pochybny system, muzou byt chyby zpusobene i nejakou systemovou chybou. Jinak muzete zkusit ADWCleaner, MBAM, CCleaner a Defraggler.

Nemate zac!

Mejte se a treba zase nekdy, snad s lepsim vysledkem

VIRY.CZ

Systém se semtam blokne,některé programy házejí chybky...

Systém se semtam blokne,některé programy házejí chybky...

Re: Systém se semtam blokne,některé programy házejí chybky..

Re: Systém se semtam blokne,některé programy házejí chybky..

Re: Systém se semtam blokne,některé programy házejí chybky..

Re: Systém se semtam blokne,některé programy házejí chybky..

otl

Re: Systém se semtam blokne,některé programy házejí chybky..

Extras

Re: Systém se semtam blokne,některé programy házejí chybky..

Re: Systém se semtam blokne,některé programy házejí chybky..

Re: Systém se semtam blokne,některé programy házejí chybky..

Re: Systém se semtam blokne,některé programy házejí chybky..

Re: Systém se semtam blokne,některé programy házejí chybky..