nefunguje tlačítko start a nejdou mi vkládat fotky na fora

[marwen67]

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 27-04-2017
Ran by Uživatel (30-04-2017 10:25:05)
Running from C:\Users\Uživatel\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) (2010-12-23 13:42:50)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-337945140-2478265338-1714748291-500 - Administrator - Disabled)
Guest (S-1-5-21-337945140-2478265338-1714748291-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-337945140-2478265338-1714748291-1002 - Limited - Enabled)
UpdatusUser (S-1-5-21-337945140-2478265338-1714748291-1003 - Limited - Enabled) => C:\Users\UpdatusUser
Uživatel (S-1-5-21-337945140-2478265338-1714748291-1000 - Administrator - Enabled) => C:\Users\Uživatel

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 25.0.0.134 - Adobe Systems Incorporated)
Adobe Flash Player 25 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 25.0.0.148 - Adobe Systems Incorporated)
Adobe Flash Player 25 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 25.0.0.148 - Adobe Systems Incorporated)
Adobe Flash Player 25 PPAPI (HKLM\...\Adobe Flash Player PPAPI) (Version: 25.0.0.148 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM\...\Adobe Shockwave Player) (Version: 12.2.8.198 - Adobe Systems, Inc.)
Aktualizace NVIDIA 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
AnvSoft Flash Banner Maker Trial 1.00 (HKLM\...\AnvSoft Flash Banner Maker Trial) (Version: 1.00 - AnvSoft, Inc.)
Apple Mobile Device Support (HKLM\...\{D9F3D66A-9885-4DDD-A800-9DDF488359A1}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 17.3.2291 - AVAST Software)
Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
Camtasia Studio 8 (HKLM\...\{A0FC961E-DC6D-4144-9277-ECDBB99D0AB9}) (Version: 8.5.1.1962 - TechSmith Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Drakensang Online (HKLM\...\Drakensang Online) (Version: - )
FastStone Capture 5.3 (HKLM\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
FMW 1 (Version: 1.143.3 - AVG Technologies) Hidden
FORM studio (HKLM\...\FSCZ_is1) (Version: - KASTNER software s.r.o.)
Google Earth (HKLM\...\{F6430171-B86B-4639-839E-374913E7911D}) (Version: 7.1.8.3036 - Google)
Google Chrome (HKLM\...\Google Chrome) (Version: 58.0.3029.81 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.33.5 - Google Inc.) Hidden
HellSpy Klient verze 0.8.0 (HKLM\...\{553E24F0-09FD-4BCB-9CF0-4FC0F6DB95D1}_is1) (Version: 0.8.0 - HellSpy.com)
iCloud (HKLM\...\{C3867553-D9F8-416E-8F14-EFF234A48577}) (Version: 5.1.0.34 - Apple Inc.)
Idle Processor Utilization Services version IPUS 2.01 (HKLM\...\{01B48F87-6485-49EC-8B7C-18EBD4DB2433}_is1) (Version: IPUS 2.01 - Idle Processor Utilization Services, LLC)
IrfanView 4.44 (32-bit) (HKLM\...\IrfanView) (Version: 4.44 - Irfan Skiljan)
iTunes (HKLM\...\{B7C4ABF3-59A7-47AB-A72E-956BA5B4841C}) (Version: 12.5.5.5 - Apple Inc.)
Java 8 Update 121 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Klikni a spusť 2010 (HKLM\...\Office14.Click2Run) (Version: 14.0.4763.1011 - Microsoft Corporation)
Microsoft Office Starter 2010 - čeština (HKLM\...\{90140011-0066-0405-0000-0000000FF1CE}) (Version: 14.0.4763.1011 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 43.0.1 (x86 cs) (HKLM\...\Mozilla Firefox 43.0.1 (x86 cs)) (Version: 43.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MultiBit 0.5.18 (HKLM\...\MultiBit 0.5.18) (Version: 0.5.18 - )
OpenOffice.org 3.3 (HKLM\...\{D5B94160-4A07-4956-9C73-8C5EEFEF180F}) (Version: 3.3.9567 - OpenOffice.org)
Opera Stable 44.0.2510.1449 (HKLM\...\Opera 44.0.2510.1449) (Version: 44.0.2510.1449 - Opera Software)
Ovládací panel NVIDIA 364.72 (Version: 364.72 - NVIDIA Corporation) Hidden
Podpora aplikací Apple (32bitová) (HKLM\...\{26356515-5821-40FA-9C3D-9785052A1062}) (Version: 4.3.1 - Apple Inc.)
QuickTime 7 (HKLM\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Realtek Card Reader (HKLM\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31222 - Realtek Semiconduct Corp.)
Sada Compatibility Pack pro systém Office 2007 (HKLM\...\{90120000-0020-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
SafeZone Stable 3.55.2393.596 (Version: 3.55.2393.596 - Avast Software) Hidden
Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.9.12585 - Skype Technologies S.A.)
Skype™ 7.33 (HKLM\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
Surfing Protection (HKLM\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 12 (HKLM\...\TeamViewer) (Version: 12.0.75813 - TeamViewer)
TerraExplorer (HKLM\...\TerraExplorer) (Version: 5.1.0 - Skyline Software Systems, Inc.)
Total Uninstall 6.18.1 (HKLM\...\Total Uninstall 6_is1) (Version: 6.18.1 - Gavrila Martau)
UmmyVideoDownloader (HKLM\...\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1) (Version: 1.7.2.0 - ) <==== ATTENTION
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Zoom (HKU\S-1-5-21-337945140-2478265338-1714748291-1000\...\ZoomUMX) (Version: 3.5 - Zoom Video Communications, Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-337945140-2478265338-1714748291-1000_Classes\CLSID\{0002DF01-0000-0000-C000-000000000046}\localserver32 -> C:\Program Files\Maxthon3\Bin\Maxthon.exe => No File
CustomCLSID: HKU\S-1-5-21-337945140-2478265338-1714748291-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Uživatel\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-337945140-2478265338-1714748291-1000_Classes\CLSID\{BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B}\InprocServer32 -> C:\PROGRAM FILES\ZONER\PHOTO STUDIO 13\PROGRAM32\SHELLEXT.DLL (ZONER software)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1AE579E3-C4BB-4005-87F8-13C007EFBC8F} - System32\Tasks\{159CE3FB-4D00-46BB-BBFA-F08D44A9B882} => pcalua.exe -a "C:\Program Files\InstallShield Installation Information\{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}\ICQ7.exe" -c -runfromtemp -l0x0009 -removeonly
Task: {1DD9CADE-87A9-4E88-AE38-FF2066487A69} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {29A3DA67-2CC4-4CBB-A766-29081D6F4954} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {3119E29F-B2FC-4E85-85FE-07E7BAD872DB} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\system32\Macromed\Flash\FlashUtil32_25_0_0_148_pepper.exe [2017-04-13] (Adobe Systems Incorporated)
Task: {5D42B7D6-6E76-4917-B314-584AA2A157EC} - System32\Tasks\{63A63E0E-4235-4E88-9363-7439465BC6D3} => pcalua.exe -a C:\Windows\System32\CNMCP79.exe -d C:\Windows\system32\ -c "-PRINTERNAMECanon iP5200" "-HELPERDLLC:\ProgramData\CanonBJ\IJPrinter\CNMWindows\Canon iP5200 Installer\Inst2\cnmis.dll" "-RCDLLcnmi0405.dll"
Task: {655AF19F-F535-4D93-9D7B-54211961CD57} - System32\Tasks\Driver Booster SkipUAC (Uživatel) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe
Task: {67608FCA-5214-4816-A8B4-5DC106BD36C2} - System32\Tasks\{49A0A498-59CD-40EC-9CF6-D82C05E46445} => C:\Program Files\Skype\Phone\Skype.exe [2017-03-14] (Skype Technologies S.A.)
Task: {6911D1FA-BB19-4279-9297-6A77D07C38A0} - System32\Tasks\0116tbUpdateInfo => C:\ProgramData\Avg_Update_0116tb\0116tb_{BBB07E84-DD90-43DE-BBC5-E2E876C20C20}.exe
Task: {6BF0F5F3-1D18-448F-9C68-CFD1158D21A5} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-04-27] (AVAST Software)
Task: {71C60AB3-39A0-42ED-96F0-A6C580EBFFB4} - System32\Tasks\{A5A30433-EBBB-4524-BEAA-80DE53704E39} => C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVH.EXE [2015-03-18] (Microsoft Corporation)
Task: {7BE0D9A0-10CC-42CC-AF5B-E2CDC46E4E9E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-02] (Adobe Systems Incorporated)
Task: {80221C1F-A6EF-4864-A85D-3D1DFABD72B4} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe
Task: {8A2614ED-DE2F-4911-A67F-4551BA3672C3} - System32\Tasks\{6FA33E6F-F484-4141-9371-1CC40AC523FA} => C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVH.EXE [2015-03-18] (Microsoft Corporation)
Task: {8D139113-BA0A-4686-9B57-16E88F08FBA3} - System32\Tasks\SafeZone scheduled Autoupdate 1493270142 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-03-22] (Avast Software)
Task: {904EE841-17F8-426B-8F25-05F691BEFB46} - System32\Tasks\ASC9_PerformanceMonitor => C:\Program Files\IObit\Advanced SystemCare\Monitor.exe
Task: {9145FF90-B254-4A03-B004-880ACE999591} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {9468B852-7967-495B-A553-7EDF11E5AB1B} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-04-27] (AVAST Software)
Task: {9D4393A6-2A92-42B6-B49B-45843DA53951} - System32\Tasks\ASC9_SkipUac_Uživatel => C:\Program Files\IObit\Advanced SystemCare\ASC.exe
Task: {9DCEB103-14DE-4995-A3AC-C485B92BF420} - System32\Tasks\{1D49B9B7-FEE7-4ACA-881C-D40C6AD505F9} => pcalua.exe -a "C:\Program Files\GildenIdent\uninstall.exe" -d C:\Users\Uživatel\Desktop -c "C:\Users\Uživatel\Desktop\Gildeident.cfg"
Task: {A329CDBA-E874-44C7-B0E3-6BC8D61CFD86} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {AC55C5D0-B620-44C8-8EA5-017882DD350B} - System32\Tasks\{1A4B2EF0-50BB-445D-B947-F47C6519BA82} => C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVH.EXE [2015-03-18] (Microsoft Corporation)
Task: {B28FB0B5-D8DD-47BA-B384-89E17DE7BFD1} - System32\Tasks\Opera scheduled Autoupdate 1427814813 => C:\Program Files\Opera\launcher.exe [2017-04-25] (Opera Software)
Task: {B4252693-A242-494A-B8B9-723C60C1A385} - System32\Tasks\{7E684FFB-FF71-42F3-BBE5-3A1E0E0E88F0} => C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVH.EXE [2015-03-18] (Microsoft Corporation)
Task: {BAE249FA-B5DF-4DA6-9165-655F30CA1771} - System32\Tasks\FRAPS => C:\Fraps\fraps.exe
Task: {CB5B7A40-79D2-4C76-AC7A-4EF41B28C407} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {D9AA0494-7505-4C4F-9D0B-2796B63E75D0} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-337945140-2478265338-1714748291-1000Core => C:\Users\Uživatel\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {DD19D818-9AC4-49EF-A1B5-4BC25CA454CD} - System32\Tasks\{A912F527-02D5-4838-913B-C5C43D8B050F} => C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVH.EXE [2015-03-18] (Microsoft Corporation)
Task: {DE8699D2-8A05-42F7-8A85-5162AF47D26A} - no filepath
Task: {E522B171-40FC-4348-98D3-3AA6A9897220} - System32\Tasks\AVG EUpdate Task => avgsetupx.exe
Task: {EC82FE03-CAE1-4372-9FA4-9A3648D75914} - System32\Tasks\AVG\PC Tuneup 2011\Integrator\Start On Windows Logon => C:\Program Files\AVG\AVG PC Tuneup 2011\BoostSpeed.exe [2010-11-30] (AVG)
Task: {ECD1D605-218A-4BCF-BAAB-B8FEE76CE4B1} - System32\Tasks\{2240E126-37AE-4FEC-B47B-B5E61ED9B47B} => C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVH.EXE [2015-03-18] (Microsoft Corporation)
Task: {EF93925A-8B70-4F39-8E62-14947D837E70} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-04-13] (Adobe Systems Incorporated)
Task: {FAF5EB55-5C73-46F8-854F-5CD1FA461618} - System32\Tasks\{1B940AC9-7927-4818-A9AA-6D8AF9E4F332} => pcalua.exe -a "C:\Users\Uživatel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O3M0I6Y2\nsinstall.exe" -d C:\Users\Uživatel\Desktop
Task: {FD004040-4C36-4B4F-A95A-24E211CC4E5C} - System32\Tasks\{6BDA398D-9EDD-4DBF-8081-6C66ED9309C6} => pcalua.exe -a "C:\Users\Uživatel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W38PG6D4\perito2011czhome.exe" -d C:\Users\Uživatel\Desktop
Task: {FE7E6B37-5075-4F5B-9A55-50EBDA3274F7} - System32\Tasks\{4E06F8A2-4BC6-426D-8940-740ABF1FBD05} => C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVH.EXE [2015-03-18] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Uživatel\Desktop\Miroslav - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"
ShortcutWithArgument: C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Spouštěč aplikací Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Spouštěč aplikací Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\Uživatel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"

==================== Loaded Modules (Whitelisted) ==============

2017-04-27 07:11 - 2017-04-27 07:11 - 00170216 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-04-27 07:11 - 2017-04-27 07:11 - 00176480 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-04-30 06:35 - 2017-04-30 06:35 - 06026480 _____ () C:\Program Files\AVAST Software\Avast\defs\17042900\algo.dll
2017-04-27 07:11 - 2017-04-27 07:11 - 00653520 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-04-27 07:11 - 2017-04-27 07:11 - 00230632 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2012-11-18 21:12 - 2016-03-22 04:13 - 00122936 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2016-03-18 22:56 - 2016-03-18 22:56 - 00080184 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-04-22 01:08 - 2016-04-22 01:08 - 01047864 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-04-27 07:11 - 2017-04-27 07:11 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-04-27 07:11 - 2017-04-27 07:11 - 00293936 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-04-27 05:44 - 2017-04-19 06:04 - 02864984 _____ () C:\Program Files\Google\Chrome\Application\58.0.3029.81\libglesv2.dll
2017-04-27 05:44 - 2017-04-19 06:04 - 00087384 _____ () C:\Program Files\Google\Chrome\Application\58.0.3029.81\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Program Files\Common Files\microsoft shared:ALeCumMN75IHQ6xvlIeI5x [2296]
AlternateDataStreams: C:\Program Files\Common Files\microsoft shared:kmROGaZq6mzQA7o8qab1K35NWJl9 [2360]
AlternateDataStreams: C:\Users\Uživatel\Local Settings:SL_{42726572-7361-6369-352e-30312e303030} [177]
AlternateDataStreams: C:\Users\Uživatel\AppData\Local:SL_{42726572-7361-6369-352e-30312e303030} [177]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2017-04-30 07:50 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-337945140-2478265338-1714748291-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 78.157.167.7 - 78.157.167.57
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\Services: AdvancedSystemCareService9 => 2
MSCONFIG\Services: IMFservice => 2
MSCONFIG\Services: NMIndexingService => 3
MSCONFIG\Services: PnkBstrA => 2
MSCONFIG\Services: VIAKaraokeService => 2
MSCONFIG\Services: vToolbarUpdater40.3.1 => 2
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: cz.seznam.software.szndesktop => "C:\Users\Uživatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
MSCONFIG\startupreg: seznam-listicka-distribuce => "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [VirtualPC-In-UDP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-UDP-2] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-TCP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [{42B2663E-BED4-43BD-90D7-CE8F2A938741}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{DFCBC0C5-8666-4E06-A279-562031537C89}] => (Allow) LPort=2869
FirewallRules: [{AAD34814-11D2-4894-8671-1BAE7ED46B03}] => (Allow) LPort=1900
FirewallRules: [{CB1F6EB1-8E0A-4E73-8DD8-F6629CC5B75A}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{9504B228-D513-413B-8958-ADCE44F7FCEF}] => (Allow) C:\Program Files\Windows Live\Mesh\MOE.exe
FirewallRules: [{1239E4B9-5720-4233-BB07-E10801505D85}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{B9D2F458-F4D1-4158-9560-B893EC22C563}] => (Allow) C:\Program Files\ICQ7.2\ICQ.exe
FirewallRules: [{94ED2A4A-CECF-4BD0-8955-2C36237A3267}] => (Allow) C:\Program Files\ICQ7.2\ICQ.exe
FirewallRules: [{A13ACE07-545C-400E-AE53-0269B52DEA71}] => (Allow) C:\Program Files\ICQ7.2\ICQ.exe
FirewallRules: [{0917D4A7-964B-44FA-85E2-43613BB6DBF8}] => (Allow) C:\Program Files\ICQ7.2\ICQ.exe
FirewallRules: [{3CC42F99-D3AE-4506-8CC9-01DF5C9E7961}] => (Allow) C:\Program Files\ICQ7.2\aolload.exe
FirewallRules: [{33E8D2B2-C6BB-4BB3-A953-117488CE34CE}] => (Allow) C:\Program Files\ICQ7.2\aolload.exe
FirewallRules: [{5916281F-AE30-4E36-8B28-51F558BA08F1}] => (Allow) C:\Program Files\ICQ7.2\aolload.exe
FirewallRules: [{4EB1DC6D-C514-4010-BD39-66635D309F42}] => (Allow) C:\Program Files\ICQ7.2\aolload.exe
FirewallRules: [TCP Query User{0AA8189D-88C0-4F36-8502-72D3A5232A26}C:\program files\internet explorer\iexplore.exe] => (Allow) C:\program files\internet explorer\iexplore.exe
FirewallRules: [UDP Query User{0BCA5FC3-8477-412B-8416-3B6E827A2B38}C:\program files\internet explorer\iexplore.exe] => (Allow) C:\program files\internet explorer\iexplore.exe
FirewallRules: [TCP Query User{4760C47E-7BA2-40E6-BCA3-95688FD4DFE1}C:\program files\wolfenstein - enemy territory\et.exe] => (Allow) C:\program files\wolfenstein - enemy territory\et.exe
FirewallRules: [UDP Query User{6364F6A6-4BC0-47B7-BE39-4F3462525E46}C:\program files\wolfenstein - enemy territory\et.exe] => (Allow) C:\program files\wolfenstein - enemy territory\et.exe
FirewallRules: [TCP Query User{FB70166A-7040-46DD-BFA3-6BDB106550C2}C:\hry\wolfenstein\activision\wolfenstein\mp\wolf2mplite.exe] => (Block) C:\hry\wolfenstein\activision\wolfenstein\mp\wolf2mplite.exe
FirewallRules: [UDP Query User{5515A5B0-49B1-4042-93FF-BDD5B2FE3B5C}C:\hry\wolfenstein\activision\wolfenstein\mp\wolf2mplite.exe] => (Block) C:\hry\wolfenstein\activision\wolfenstein\mp\wolf2mplite.exe
FirewallRules: [TCP Query User{0853F775-0EA8-4113-ABF2-BBDAFE806804}C:\program files\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files\google\google earth\plugin\geplugin.exe
FirewallRules: [UDP Query User{D8A73D52-DFB8-4679-8EC8-E9CFB84A19C7}C:\program files\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files\google\google earth\plugin\geplugin.exe
FirewallRules: [TCP Query User{63DF7A49-53AF-4DC6-AAA2-B1A97D81AFCA}C:\hry\aof\age2_x1.exe] => (Allow) C:\hry\aof\age2_x1.exe
FirewallRules: [UDP Query User{AA525443-58BB-4A24-87E1-1A51924547A1}C:\hry\aof\age2_x1.exe] => (Allow) C:\hry\aof\age2_x1.exe
FirewallRules: [TCP Query User{745A2B33-851F-497D-B2CF-BFCA17A76BFC}C:\hry\aof\empires2.exe] => (Block) C:\hry\aof\empires2.exe
FirewallRules: [UDP Query User{1E2F9B9F-6D0E-43B7-A3AA-7422392CC875}C:\hry\aof\empires2.exe] => (Block) C:\hry\aof\empires2.exe
FirewallRules: [TCP Query User{C6415D40-84AE-4A01-9752-622148F14EFC}C:\program files\activision\modern warfare 2\iw4mp.exe] => (Block) C:\program files\activision\modern warfare 2\iw4mp.exe
FirewallRules: [UDP Query User{E1073DA7-DCA0-4FDD-915A-406C351BF4E4}C:\program files\activision\modern warfare 2\iw4mp.exe] => (Block) C:\program files\activision\modern warfare 2\iw4mp.exe
FirewallRules: [TCP Query User{2484F049-D105-46E0-A9F6-2066AA9BCE6E}C:\windows\system32\dplaysvr.exe] => (Block) C:\windows\system32\dplaysvr.exe
FirewallRules: [UDP Query User{EE9F6691-F29E-4189-8264-DEFC250D0845}C:\windows\system32\dplaysvr.exe] => (Block) C:\windows\system32\dplaysvr.exe
FirewallRules: [TCP Query User{7B768C48-F947-4E69-B145-F7327B626B2E}C:\program files\mozilla firefox\plugin-container.exe] => (Allow) C:\program files\mozilla firefox\plugin-container.exe
FirewallRules: [UDP Query User{3496F14C-73F9-4A1B-9C21-EF96071EED60}C:\program files\mozilla firefox\plugin-container.exe] => (Allow) C:\program files\mozilla firefox\plugin-container.exe
FirewallRules: [TCP Query User{939AF054-2A5A-498E-9CD3-1987326700D6}C:\hry\aoe 2\age2_x1.exe] => (Allow) C:\hry\aoe 2\age2_x1.exe
FirewallRules: [UDP Query User{4140B220-3AC5-4A79-AF9D-229BB9C17B6E}C:\hry\aoe 2\age2_x1.exe] => (Allow) C:\hry\aoe 2\age2_x1.exe
FirewallRules: [TCP Query User{8992F78E-AEFA-44AD-BDA1-8D0319AACF91}C:\hry\aoe 2\empires2.exe] => (Allow) C:\hry\aoe 2\empires2.exe
FirewallRules: [UDP Query User{25022767-216B-4F4F-BCFA-78CD30050207}C:\hry\aoe 2\empires2.exe] => (Allow) C:\hry\aoe 2\empires2.exe
FirewallRules: [TCP Query User{EDB336B3-1C58-4F8E-89D6-2DACE21B5937}C:\program files\spyware terminator\spywareterminatorupdate.exe] => (Block) C:\program files\spyware terminator\spywareterminatorupdate.exe
FirewallRules: [UDP Query User{36D4ECD1-5ACA-4EEE-9D26-3A9AFB521FFF}C:\program files\spyware terminator\spywareterminatorupdate.exe] => (Block) C:\program files\spyware terminator\spywareterminatorupdate.exe
FirewallRules: [{75467141-58A6-4471-B9A9-CCCCBCF65177}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{E6E00637-7D02-475F-8591-4D4118F1C830}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{8CC0F0DF-600D-49FD-989B-6FDEF57EECBD}] => (Allow) C:\Program Files\AVG\AVG2013\avgmfapx.exe
FirewallRules: [{ED9A4849-0E08-48E3-8816-5198881EE0AE}] => (Allow) C:\Program Files\AVG\AVG2013\avgmfapx.exe
FirewallRules: [TCP Query User{97B07265-2C94-4E99-A22D-84DE04EA5AE0}C:\hry\aoe 2\empires2.exe] => (Block) C:\hry\aoe 2\empires2.exe
FirewallRules: [UDP Query User{8B2B6B2E-C019-4ED2-BFAF-2F2FFB040203}C:\hry\aoe 2\empires2.exe] => (Block) C:\hry\aoe 2\empires2.exe
FirewallRules: [TCP Query User{14B1C590-A8B2-42A5-BC69-DD3253A4950D}C:\hry\aoe 2\age2_x1.exe] => (Block) C:\hry\aoe 2\age2_x1.exe
FirewallRules: [UDP Query User{00AD4DF8-2124-4B4C-B0EA-79BEBD658546}C:\hry\aoe 2\age2_x1.exe] => (Block) C:\hry\aoe 2\age2_x1.exe
FirewallRules: [{AD6632A0-F93C-4CBC-940D-C2B2A4EE10C8}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{8DEFDFCB-C18E-495F-BCD9-B7FD1F875C5D}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{8D26AD9E-1D4E-45DB-8232-00A058CC209B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{89F52551-29C3-4411-99A2-B6F7871C5EA3}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{0DD30D97-8C14-4A56-A701-A0C0F5EE8DA8}] => (Allow) C:\Users\Default\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
FirewallRules: [{492C9B05-AA6C-4D53-9526-3DB2009A13A7}] => (Allow) LPort=8317
FirewallRules: [{6D683FF2-7A05-44CB-9C53-F11E65BB995A}] => (Allow) C:\Program Files\AVG\Av\avgmfapx.exe
FirewallRules: [{C56F128D-03DF-43CC-B3DA-3FEB65C19306}] => (Allow) C:\Program Files\AVG\Av\avgmfapx.exe
FirewallRules: [{F4FF04C4-5B64-4ABA-8076-2204DA2B44A5}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{388F3827-B210-4D15-BD9B-5105F873A468}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D9637846-A2FD-4D11-A3C8-BFBF88ED860D}] => (Allow) C:\Program Files\Opera\43.0.2442.1144\opera.exe
FirewallRules: [{332E2A5B-B1EF-4C6D-9630-79BE714B08C8}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{AAE9F474-21F5-474B-9079-8203D38EAD05}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{165ED7A6-DEDA-4EDE-AFCA-F94EE43DF7F5}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{F76EDAFA-078A-43C6-A1F9-42EF7EE7B74C}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{BFD6A3B8-352E-4BE5-96AE-815F37C8672C}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{F37384C1-F982-468F-93D8-20D75464B491}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.596\SZBrowser.exe
FirewallRules: [{1143738A-E390-4C8B-87F7-184352DB1DCF}] => (Allow) C:\Program Files\Opera\44.0.2510.1449\opera.exe

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============

Name: Malwarebytes Anti-Exploit
Description: Malwarebytes Anti-Exploit
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ESProtectionDriver
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Teredo Tunneling Pseudo-Interface
Description: Adaptér tunelového režimu Microsoft Teredo
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Symantec Eraser Control driver
Description: Symantec Eraser Control driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: eeCtrl
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/30/2017 10:24:45 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4110) (User: )
Description: Nepodařilo se přidat certifikát do úložiště kořenových certifikačních autorit třetích stran. Chyba: Přístup byl odepřen.

Error: (04/30/2017 10:24:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4110) (User: )
Description: Nepodařilo se přidat certifikát do úložiště kořenových certifikačních autorit třetích stran. Chyba: Přístup byl odepřen.

Error: (04/30/2017 10:24:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4110) (User: )
Description: Nepodařilo se přidat certifikát do úložiště kořenových certifikačních autorit třetích stran. Chyba: Přístup byl odepřen.

Error: (04/30/2017 10:24:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4110) (User: )
Description: Nepodařilo se přidat certifikát do úložiště kořenových certifikačních autorit třetích stran. Chyba: Přístup byl odepřen.

Error: (04/30/2017 10:24:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4110) (User: )
Description: Nepodařilo se přidat certifikát do úložiště kořenových certifikačních autorit třetích stran. Chyba: Přístup byl odepřen.

Error: (04/30/2017 10:24:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4110) (User: )
Description: Nepodařilo se přidat certifikát do úložiště kořenových certifikačních autorit třetích stran. Chyba: Přístup byl odepřen.

Error: (04/30/2017 10:24:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4110) (User: )
Description: Nepodařilo se přidat certifikát do úložiště kořenových certifikačních autorit třetích stran. Chyba: Přístup byl odepřen.

Error: (04/30/2017 10:24:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4110) (User: )
Description: Nepodařilo se přidat certifikát do úložiště kořenových certifikačních autorit třetích stran. Chyba: Přístup byl odepřen.

Error: (04/30/2017 10:24:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4110) (User: )
Description: Nepodařilo se přidat certifikát do úložiště kořenových certifikačních autorit třetích stran. Chyba: Přístup byl odepřen.

Error: (04/30/2017 10:24:43 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4110) (User: )
Description: Nepodařilo se přidat certifikát do úložiště kořenových certifikačních autorit třetích stran. Chyba: Přístup byl odepřen.


System errors:
=============
Error: (04/30/2017 07:53:26 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba NVIDIA Update Service Daemon neuspěla při spuštění v důsledku následující chyby:
Služba nebyla zahájena, protože se nepodařilo přihlásit.

Error: (04/30/2017 07:53:26 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Služba nvUpdatusService se nemohla přihlásit jako .\UpdatusUser s aktuálně konfigurovaným heslem z důvodu následující chyby:
Přihlašovací chyba: Platnost hesla pro tuto registraci vypršela.


Chcete-li zajistit správnou konfiguraci služby, použijte modul snap-in Služby konzoly Microsoft Management Console (MMC).

Error: (04/30/2017 07:51:51 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba aswbIDSAgent ukončena s chybou %%-536753635, specifickou pro službu.

Error: (04/30/2017 07:51:23 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
cdrom
eeCtrl
ESProtectionDriver
MBAMSwissArmy
sfdrv01a
sfsync02

Error: (04/30/2017 07:50:24 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Malwarebytes Service neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (04/30/2017 07:50:04 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AVG Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (04/30/2017 07:50:04 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby AVG Service bylo dosaženo časového limitu (30000 ms).

Error: (04/30/2017 07:49:55 AM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: NT AUTHORITY)
Description: Službě Plánovač úloh se při spuštění nepodařilo načíst úlohy. Další údaje: Hodnota chyby: 2147942402

Error: (04/30/2017 07:49:36 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba MBAMChameleon neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (04/30/2017 07:49:19 AM) (Source: Application Popup) (EventID: 875) (User: )
Description: Načtení ovladače sfdrv01a.sys je blokováno.


CodeIntegrity:
===================================
Date: 2015-03-31 20:14:56.578
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\VIAPropPageExt.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-03-31 20:14:56.454
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\VIAPropPageExt.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-03-31 20:14:56.240
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\VIAPropPageExt.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-03-31 20:14:56.099
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\VIAPropPageExt.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3 CPU 540 @ 3.07GHz
Percentage of memory in use: 44%
Total physical RAM: 3575.05 MB
Available physical RAM: 1985.38 MB
Total Virtual: 7148.42 MB
Adittion :
Available Virtual: 5579.93 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:923.69 GB) (Free:794.35 GB) NTFS ==>[drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 762BA9E3)
Partition 1: (Active) - (Size=923.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=7.8 GB) - (Type=27)

==================== End of Addition.txt ============================

[Márty84]

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\U§ivatel\Desktop" je 2264 MB.

Velikost plochy by nemela presahovat 200 - 300 MB! Brzdi to chod pc. Cili ji trosku uklidte a na plochu dejte jen zastupce. Jen pozor na obcasnou chybu, ze uzivatele maji na plose slozku, v ni dalsi a v ni dalsi a do te to schovaji. To je sice hezke, ale plochu to nezmensi, jen je to v jinem supliku



Otevrete si poznamkovy blok a zkopirujte do nej tento skript

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguirnx.exe [220944 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [164152 2017-01-19] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
GroupPolicy\User: Restriction ? <======= ATTENTION

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-337945140-2478265338-1714748291-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-337945140-2478265338-1714748291-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM -> DefaultScope {E233D2E1-4CA8-426B-BF7B-7300219D1B1E} URL =
SearchScopes: HKLM -> {225AE7F6-F524-4762-9E7D-0573F0ADB1FF} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-337945140-2478265338-1714748291-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-337945140-2478265338-1714748291-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-337945140-2478265338-1714748291-1000 -> {7C698FED-C9B7-4A5C-9F93-0DB22634DE16} URL =
SearchScopes: HKU\S-1-5-21-337945140-2478265338-1714748291-1000 -> {b4c83735-a4ca-42fd-97db-ed6f758f068e} URL = hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-07-03] (Google Inc.)
BHO: Ukazatel S-Rank -> {EA837F48-5AD1-443E-AE34-FFE03CBF3099} -> C:\Program Files\Seznam.cz\core.3.dll [2011-03-10] ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-07-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-337945140-2478265338-1714748291-1000 -> No Name - {34AB3C4C-DA1A-4067-96F4-31452C7CFE65} - No File
Toolbar: HKU\S-1-5-21-337945140-2478265338-1714748291-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-07-03] (Google Inc.)

FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> ftp", "77.245.242.230"
FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> ftp_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> http", "77.245.242.230"
FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> http_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> ssl", "77.245.242.230"
FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> ssl_port", 8080
FF Extension: (No Name) - C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\speedanalysis03@SpeedAnalysis.com.xpi [not found]
FF Extension: (No Name) - C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\freegames4357@BestOffers [not found]
FF Extension: (No Name) - C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\speedtest4354@BestOffers [not found]
FF Extension: (No Name) - C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\addon@defaulttab.com.xpi [not found]
FF Extension: (No Name) - C:\Program Files\di0Re-markit\175.xpi [not found]
FF Extension: (No Name) - C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\avg@toolbar.xpi [not found]
FF Extension: (No Name) - C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\7go@7go.com.xpi [not found]
FF Extension: (No Name) - C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\yasearch@yandex.ru.xpi [not found]
FF Extension: (Skype Click to Call) - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2016-05-26] [not signed]
FF Extension: (Skype Click to Call) - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2016-05-26] [not signed]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF => not found
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF => not found
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]

CHR HomePage: Profile 1 -> mysearch.avg.com
CHR DefaultSearchURL: Profile 1 -> hxxps://mysearch.avg.com/search?rvt=1&sap=dsp&q={searchTerms}
CHR DefaultSearchKeyword: Profile 1 -> https://mysearch.avg.com
CHR DefaultSuggestURL: Profile 1 -> hxxps://toolbar.avg.com/acp?q={searchTerms}&o=1
CHR Extension: (AVG SafePrice) - C:\Users\UĹľivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbckjcfnjmoiinpgddefodcighgikkgn [2017-03-13]
CHR Extension: (AVG Secure Search) - C:\Users\UĹľivatel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2017-04-26]
CHR Extension: (SuperPay.Me Toolbar) - C:\Users\UĹľivatel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\iahagolkpaghhinaljhjihagjgomdokb [2015-01-23] [UpdateUrl: hxxps://s3.amazonaws.com/com.alexa.tool ... update.xml] <==== ATTENTION

R2 AdobeARMservice; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [82640 2017-02-02] (Adobe Systems Incorporated) [File not signed]
S2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [935184 2016-12-06] (AVG Technologies CZ, s.r.o.) [File not signed]
S2 gupdate; C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc.) [File not signed]
S3 gupdatem; C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc.) [File not signed]
S3 gusvc; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [194032 2016-07-03] (Google) [File not signed]
S4 NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [382248 2007-11-15] (Nero AG) [File not signed]
R2 SeaPort; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [249648 2011-02-25] (Microsoft Corporation) [File not signed]
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [48912 2017-02-21] (AVG Technologies CZ, s.r.o.) [File not signed]
S2 MBAMService; "C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe" [X]
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [37664 2013-05-27] (AVG Technologies) [File not signed]
S1 eeCtrl; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [X]
S1 ESProtectionDriver; \??\C:\Windows\system32\drivers\mbae.sys [X]
S2 MBAMChameleon; \SystemRoot\system32\drivers\MBAMChameleon.sys [X]
S3 MBAMFarflt; \??\C:\Windows\system32\drivers\farflt.sys [X]
S3 MBAMProtection; \??\C:\Windows\system32\drivers\mbam.sys [X]
S0 MBAMSwissArmy; system32\drivers\MBAMSwissArmy.sys [X]
S3 MBAMWebProtection; \??\C:\Windows\system32\drivers\mwac.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]

AlternateDataStreams: C:\Program Files\Common Files\microsoft shared:ALeCumMN75IHQ6xvlIeI5x [2296]
AlternateDataStreams: C:\Program Files\Common Files\microsoft shared:kmROGaZq6mzQA7o8qab1K35NWJl9 [2360]
AlternateDataStreams: C:\Users\UĹľivatel\Local Settings:SL_{42726572-7361-6369-352e-30312e303030} [177]
AlternateDataStreams: C:\Users\UĹľivatel\AppData\Local:SL_{42726572-7361-6369-352e-30312e303030} [177]

DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce

Task: {DE8699D2-8A05-42F7-8A85-5162AF47D26A} - no filepath
Task: {E522B171-40FC-4348-98D3-3AA6A9897220} - System32\Tasks\AVG EUpdate Task => avgsetupx.exe
Task: {EC82FE03-CAE1-4372-9FA4-9A3648D75914} - System32\Tasks\AVG\PC Tuneup 2011\Integrator\Start On Windows Logon => C:\Program Files\AVG\AVG PC Tuneup 2011\BoostSpeed.exe [2010-11-30] (AVG)
Task: {6911D1FA-BB19-4279-9297-6A77D07C38A0} - System32\Tasks\0116tbUpdateInfo => C:\ProgramData\Avg_Update_0116tb\0116tb_{BBB07E84-DD90-43DE-BBC5-E2E876C20C20}.exe
Task: {9D4393A6-2A92-42B6-B49B-45843DA53951} - System32\Tasks\ASC9_SkipUac_Uživatel => C:\Program Files\IObit\Advanced SystemCare\ASC.exe

Hosts:
EmptyTemp:
Reboot:
End

Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev fixlist a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte FRST jako spravce, kliknete na napis Fix a program vykona prikazy.
Po restartu pc by se mel objevit novy log - s nazvem fixlog, ten mi sem zase zkopirujte.

[marwen67]

Fix result of Farbar Recovery Scan Tool (x86) Version: 27-04-2017
Ran by Uživatel (30-04-2017 21:36:52) Run:1
Running from C:\Users\Uživatel\Desktop
Loaded Profiles: Uživatel (Available Profiles: Uživatel & UpdatusUser)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguirnx.exe [220944 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [164152 2017-01-19] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
GroupPolicy\User: Restriction ? <======= ATTENTION

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-337945140-2478265338-1714748291-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-337945140-2478265338-1714748291-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM -> DefaultScope {E233D2E1-4CA8-426B-BF7B-7300219D1B1E} URL =
SearchScopes: HKLM -> {225AE7F6-F524-4762-9E7D-0573F0ADB1FF} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-337945140-2478265338-1714748291-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97 ... -SearchBox
SearchScopes: HKU\S-1-5-21-337945140-2478265338-1714748291-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97 ... -SearchBox
SearchScopes: HKU\S-1-5-21-337945140-2478265338-1714748291-1000 -> {7C698FED-C9B7-4A5C-9F93-0DB22634DE16} URL =
SearchScopes: HKU\S-1-5-21-337945140-2478265338-1714748291-1000 -> {b4c83735-a4ca-42fd-97db-ed6f758f068e} URL = hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97 ... -SearchBox
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-07-03] (Google Inc.)
BHO: Ukazatel S-Rank -> {EA837F48-5AD1-443E-AE34-FFE03CBF3099} -> C:\Program Files\Seznam.cz\core.3.dll [2011-03-10] ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-07-03] (Google Inc.)
Toolbar: HKU\S-1-5-21-337945140-2478265338-1714748291-1000 -> No Name - {34AB3C4C-DA1A-4067-96F4-31452C7CFE65} - No File
Toolbar: HKU\S-1-5-21-337945140-2478265338-1714748291-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-07-03] (Google Inc.)

FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> ftp", "77.245.242.230"
FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> ftp_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> http", "77.245.242.230"
FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> http_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> ssl", "77.245.242.230"
FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> ssl_port", 8080
FF Extension: (No Name) - C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\speedanalysis03@SpeedAnalysis.com.xpi [not found]
FF Extension: (No Name) - C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\freegames4357@BestOffers [not found]
FF Extension: (No Name) - C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\speedtest4354@BestOffers [not found]
FF Extension: (No Name) - C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\addon@defaulttab.com.xpi [not found]
FF Extension: (No Name) - C:\Program Files\di0Re-markit\175.xpi [not found]
FF Extension: (No Name) - C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\avg@toolbar.xpi [not found]
FF Extension: (No Name) - C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\7go@7go.com.xpi [not found]
FF Extension: (No Name) - C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\yasearch@yandex.ru.xpi [not found]
FF Extension: (Skype Click to Call) - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2016-05-26] [not signed]
FF Extension: (Skype Click to Call) - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2016-05-26] [not signed]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF => not found
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF => not found
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]

CHR HomePage: Profile 1 -> mysearch.avg.com
CHR DefaultSearchURL: Profile 1 -> hxxps://mysearch.avg.com/search?rvt=1&sap=dsp&q={searchTerms}
CHR DefaultSearchKeyword: Profile 1 -> https://mysearch.avg.com
CHR DefaultSuggestURL: Profile 1 -> hxxps://toolbar.avg.com/acp?q={searchTerms}&o=1
CHR Extension: (AVG SafePrice) - C:\Users\UĹľivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbckjcfnjmoiinpgddefodcighgikkgn [2017-03-13]
CHR Extension: (AVG Secure Search) - C:\Users\UĹľivatel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2017-04-26]
CHR Extension: (SuperPay.Me Toolbar) - C:\Users\UĹľivatel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\iahagolkpaghhinaljhjihagjgomdokb [2015-01-23] [UpdateUrl: hxxps://s3.amazonaws.com/com.alexa.tool ... update.xml] <==== ATTENTION

R2 AdobeARMservice; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [82640 2017-02-02] (Adobe Systems Incorporated) [File not signed]
S2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [935184 2016-12-06] (AVG Technologies CZ, s.r.o.) [File not signed]
S2 gupdate; C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc.) [File not signed]
S3 gupdatem; C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc.) [File not signed]
S3 gusvc; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [194032 2016-07-03] (Google) [File not signed]
S4 NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [382248 2007-11-15] (Nero AG) [File not signed]
R2 SeaPort; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [249648 2011-02-25] (Microsoft Corporation) [File not signed]
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [48912 2017-02-21] (AVG Technologies CZ, s.r.o.) [File not signed]
S2 MBAMService; "C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe" [X]
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [37664 2013-05-27] (AVG Technologies) [File not signed]
S1 eeCtrl; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [X]
S1 ESProtectionDriver; \??\C:\Windows\system32\drivers\mbae.sys [X]
S2 MBAMChameleon; \SystemRoot\system32\drivers\MBAMChameleon.sys [X]
S3 MBAMFarflt; \??\C:\Windows\system32\drivers\farflt.sys [X]
S3 MBAMProtection; \??\C:\Windows\system32\drivers\mbam.sys [X]
S0 MBAMSwissArmy; system32\drivers\MBAMSwissArmy.sys [X]
S3 MBAMWebProtection; \??\C:\Windows\system32\drivers\mwac.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]

AlternateDataStreams: C:\Program Files\Common Files\microsoft shared:ALeCumMN75IHQ6xvlIeI5x [2296]
AlternateDataStreams: C:\Program Files\Common Files\microsoft shared:kmROGaZq6mzQA7o8qab1K35NWJl9 [2360]
AlternateDataStreams: C:\Users\UĹľivatel\Local Settings:SL_{42726572-7361-6369-352e-30312e303030} [177]
AlternateDataStreams: C:\Users\UĹľivatel\AppData\Local:SL_{42726572-7361-6369-352e-30312e303030} [177]

DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce

Task: {DE8699D2-8A05-42F7-8A85-5162AF47D26A} - no filepath
Task: {E522B171-40FC-4348-98D3-3AA6A9897220} - System32\Tasks\AVG EUpdate Task => avgsetupx.exe
Task: {EC82FE03-CAE1-4372-9FA4-9A3648D75914} - System32\Tasks\AVG\PC Tuneup 2011\Integrator\Start On Windows Logon => C:\Program Files\AVG\AVG PC Tuneup 2011\BoostSpeed.exe [2010-11-30] (AVG)
Task: {6911D1FA-BB19-4279-9297-6A77D07C38A0} - System32\Tasks\0116tbUpdateInfo => C:\ProgramData\Avg_Update_0116tb\0116tb_{BBB07E84-DD90-43DE-BBC5-E2E876C20C20}.exe
Task: {9D4393A6-2A92-42B6-B49B-45843DA53951} - System32\Tasks\ASC9_SkipUac_Uživatel => C:\Program Files\IObit\Advanced SystemCare\ASC.exe

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Error: (0) Failed to create a restore point.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => value removed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AvgUi => value removed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\iTunesHelper => value removed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully.

"C:\Windows\system32\GroupPolicy\User" folder move:

Could not move "C:\Windows\system32\GroupPolicy\User" => Scheduled to move on reboot.

C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully.
HKU\S-1-5-21-337945140-2478265338-1714748291-1000\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Search Page => value removed successfully.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page => value removed successfully.
HKU\S-1-5-21-337945140-2478265338-1714748291-1000\Software\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{225AE7F6-F524-4762-9E7D-0573F0ADB1FF} => key removed successfully.
HKCR\CLSID\{225AE7F6-F524-4762-9E7D-0573F0ADB1FF} => key not found.
HKU\S-1-5-21-337945140-2478265338-1714748291-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully.
HKU\S-1-5-21-337945140-2478265338-1714748291-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key removed successfully.
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found.
HKU\S-1-5-21-337945140-2478265338-1714748291-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7C698FED-C9B7-4A5C-9F93-0DB22634DE16} => key removed successfully.
HKCR\CLSID\{7C698FED-C9B7-4A5C-9F93-0DB22634DE16} => key not found.
HKU\S-1-5-21-337945140-2478265338-1714748291-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{b4c83735-a4ca-42fd-97db-ed6f758f068e} => key removed successfully.
HKCR\CLSID\{b4c83735-a4ca-42fd-97db-ed6f758f068e} => key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7} => key removed successfully.
HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7} => key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099} => key removed successfully.
HKCR\CLSID\{EA837F48-5AD1-443E-AE34-FFE03CBF3099} => key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => value removed successfully.
HKCR\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => key not found.
HKU\S-1-5-21-337945140-2478265338-1714748291-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{34AB3C4C-DA1A-4067-96F4-31452C7CFE65} => value removed successfully.
HKCR\CLSID\{34AB3C4C-DA1A-4067-96F4-31452C7CFE65} => key not found.
HKU\S-1-5-21-337945140-2478265338-1714748291-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value removed successfully.
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => key not found.
Firefox Proxy settings were reset.
FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> ftp_port", 8080 => not found
FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> http", "77.245.242.230" => not found
FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> http_port", 8080 => not found
FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> ssl", "77.245.242.230" => not found
FF NetworkProxy: Mozilla\Firefox\Profiles\1cb3hkxn.default -> ssl_port", 8080 => not found
C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\speedanalysis03@SpeedAnalysis.com.xpi => path removed successfully.
C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\freegames4357@BestOffers => path removed successfully.
C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\speedtest4354@BestOffers => path removed successfully.
C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\addon@defaulttab.com.xpi => path removed successfully.
C:\Program Files\di0Re-markit\175.xpi => path removed successfully.
C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\avg@toolbar.xpi => path removed successfully.
C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\7go@7go.com.xpi => path removed successfully.
C:\Users\UĹľivatel\AppData\Roaming\Mozilla\Firefox\Profiles\1cb3hkxn.default\extensions\yasearch@yandex.ru.xpi => path removed successfully.

"C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}" folder move:

Could not move "C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}" => Scheduled to move on reboot.


"C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}" folder move:

Could not move "C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}" => Scheduled to move on reboot.

HKLM\Software\Mozilla\Firefox\Extensions\\wrc@avast.com => value removed successfully.
HKLM\Software\Mozilla\Firefox\Extensions\\sp@avast.com => value removed successfully.
HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin => key removed successfully.
Chrome HomePage => removed successfully.
Chrome DefaultSearchURL => removed successfully.
Chrome DefaultSearchKeyword => removed successfully.
Chrome DefaultSuggestURL => removed successfully.
C:\Users\UĹľivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbckjcfnjmoiinpgddefodcighgikkgn => not found.
C:\Users\UĹľivatel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\chfdnecihphmhljaaejmgoiahnihplgn => not found.
C:\Users\UĹľivatel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\iahagolkpaghhinaljhjihagjgomdokb <==== ATTENTION => not found.
HKLM\System\CurrentControlSet\Services\AdobeARMservice => key removed successfully.
AdobeARMservice => service removed successfully.
HKLM\System\CurrentControlSet\Services\avgsvc => key removed successfully.
avgsvc => service removed successfully.
HKLM\System\CurrentControlSet\Services\gupdate => key removed successfully.
gupdate => service removed successfully.
HKLM\System\CurrentControlSet\Services\gupdatem => key removed successfully.
gupdatem => service removed successfully.
HKLM\System\CurrentControlSet\Services\gusvc => key removed successfully.
gusvc => service removed successfully.
HKLM\System\CurrentControlSet\Services\NMIndexingService => key removed successfully.
NMIndexingService => service removed successfully.
HKLM\System\CurrentControlSet\Services\SeaPort => key removed successfully.
SeaPort => service removed successfully.
UxTuneUp => Service stopped successfully.
HKLM\System\CurrentControlSet\Services\UxTuneUp => key removed successfully.
UxTuneUp => service removed successfully.
HKLM\System\CurrentControlSet\Services\MBAMService => key removed successfully.
MBAMService => service removed successfully.
avgtp => Service stopped successfully.
HKLM\System\CurrentControlSet\Services\avgtp => key removed successfully.
avgtp => service removed successfully.
HKLM\System\CurrentControlSet\Services\eeCtrl => key removed successfully.
eeCtrl => service removed successfully.
HKLM\System\CurrentControlSet\Services\ESProtectionDriver => key removed successfully.
ESProtectionDriver => service removed successfully.
HKLM\System\CurrentControlSet\Services\MBAMChameleon => key removed successfully.
MBAMChameleon => service removed successfully.
HKLM\System\CurrentControlSet\Services\MBAMFarflt => key removed successfully.
MBAMFarflt => service removed successfully.
HKLM\System\CurrentControlSet\Services\MBAMProtection => key removed successfully.
MBAMProtection => service removed successfully.
HKLM\System\CurrentControlSet\Services\MBAMSwissArmy => key removed successfully.
MBAMSwissArmy => service removed successfully.
HKLM\System\CurrentControlSet\Services\MBAMWebProtection => key removed successfully.
MBAMWebProtection => service removed successfully.
HKLM\System\CurrentControlSet\Services\taphss6 => key removed successfully.
taphss6 => service removed successfully.
C:\Program Files\Common Files\microsoft shared => ":ALeCumMN75IHQ6xvlIeI5x" ADS removed successfully..
C:\Program Files\Common Files\microsoft shared => ":kmROGaZq6mzQA7o8qab1K35NWJl9" ADS removed successfully..
"C:\Users\UĹľivatel\Local Settings" => ":SL_{42726572-7361-6369-352e-30312e303030}" ADS not found.
"C:\Users\UĹľivatel\AppData\Local" => ":SL_{42726572-7361-6369-352e-30312e303030}" ADS not found.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM => key removed successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop => key removed successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DE8699D2-8A05-42F7-8A85-5162AF47D26A} => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE8699D2-8A05-42F7-8A85-5162AF47D26A} => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{E522B171-40FC-4348-98D3-3AA6A9897220} => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E522B171-40FC-4348-98D3-3AA6A9897220} => key removed successfully.
C:\Windows\System32\Tasks\AVG EUpdate Task => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVG EUpdate Task => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{EC82FE03-CAE1-4372-9FA4-9A3648D75914} => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EC82FE03-CAE1-4372-9FA4-9A3648D75914} => key removed successfully.
C:\Windows\System32\Tasks\AVG\PC Tuneup 2011\Integrator\Start On Windows Logon => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVG\PC Tuneup 2011\Integrator\Start On Windows Logon => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6911D1FA-BB19-4279-9297-6A77D07C38A0} => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6911D1FA-BB19-4279-9297-6A77D07C38A0} => key removed successfully.
C:\Windows\System32\Tasks\0116tbUpdateInfo => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\0116tbUpdateInfo => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9D4393A6-2A92-42B6-B49B-45843DA53951} => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9D4393A6-2A92-42B6-B49B-45843DA53951} => key removed successfully.
C:\Windows\System32\Tasks\ASC9_SkipUac_Uživatel => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASC9_SkipUac_Uživatel => key removed successfully.
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 3164571 B
Java, Flash, Steam htmlcache => 506 B
Windows/system/drivers => 114167110 B
Edge => 0 B
Chrome => 553240745 B
Firefox => 69627199 B
Opera => 9715424 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 33058 B
Public => 0 B
ProgramData => 0 B
systemprofile => 21276281 B
LocalService => 0 B
NetworkService => 0 B
Uživatel => 243192592 B
UpdatusUser => 33058 B

RecycleBin => 0 B
EmptyTemp: => 975.5 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 30-04-2017 21:39:29)

C:\Windows\system32\GroupPolicy\User => is moved successfully
C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} => is moved successfully
C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} => is moved successfully

==== End of Fixlog 21:39:29 ====

[Márty84]

Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

Prejmenujte ComboFix na Uninstall a spustte ho. CF by se mel odinstalovat.

DelFix https://toolslib.net/downloads/finish/2/

• Stahnete a spustte
• Ponechte zatrzitkou pouze u volby Remove disinfection tools
• Kliknete na Run

Stahnete Ccleaner http://www.filehippo.com/download_ccleaner a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!
(Pokud je v pc vice uzivatelskych uctu, pouzijte program i v nich)

Defragmentujte disk(y) (SSD Disky ne!)
Stahnete program Defraggler https://www.piriform.com/defraggler/download/standard
Pri instalaci opet pozor na toolbar a dalsi nesmysly.
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.




Pak napiste, jak to s pc vypada.

[marwen67]

tak jsem konečně provedl vše jak je psáno a tlačítko strat ani další věci co mi nefungovali stále nefungují.. takže pc je dle vašich návodu už čisté ale problém přetrvává.. nevím zda se to třeba neprojevilo nějakou aktualizací nebo co ..

[Márty84]

Ano, pc je ciste. Pravdepodobne byl naboreny system. Mohla to byt klidne i nejaka vadna aktualizace, ale bez bodu obnovy se to bude tezko davat zpatky. Ja docela podezrivam i Advanced SystemCare. Nebylo by to poprve, co poslal system do kytek.

Muzete udelat opravnou instalaci systemu, pripadne to zkusit opravit pomoci treba fix it http://www.stahuj.centrum.cz/utility_a_ ... it-center/ , nebo Windows 7 Managerem http://www.stahuj.centrum.cz/utility_a_ ... 7-manager/