Stránka 2 z 2

Re: Poprosím o preventivku

Napsal: 16 led 2015 01:55
od JohnnieM
opět? Pokaždé se mě na to zeptáte, odpovím vám pokaždé stejně. Ano.

Re: Poprosím o preventivku

Napsal: 16 led 2015 02:05
od altrok
:arrow: Mazneme ask (adware), ktery jste si tam pravdepodobne natahl s instalaci javy...

:arrow: Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
  • ukoncete vsechny programy
  • kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
  • kliknete na Scan, pote na Clean
  • po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

Re: Poprosím o preventivku

Napsal: 16 led 2015 02:14
od JohnnieM
Zde prosím


# AdwCleaner v4.107 - Report created 16/01/2015 at 02:10:01
# Updated 07/01/2015 by Xplode
# Database : 2015-01-13.2 [Live]
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Jirka - JIRKA-PC
# Running from : C:\Users\Jirka\Desktop\adwcleaner_4.107.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : APNMCP

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\AskPartnerNetwork
Folder Deleted : C:\ProgramData\ytd video downloader
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader
Folder Deleted : C:\Program Files (x86)\AskPartnerNetwork
Folder Deleted : C:\Program Files (x86)\GreenTree Applications
Folder Deleted : C:\Users\Jirka\AppData\Local\Temp\apn
Folder Deleted : C:\Users\Jirka\AppData\Local\AskPartnerNetwork

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BBBAD530-6952-46D3-AAF2-7BDC9BE4577E}
Key Deleted : HKCU\Software\AskPartnerNetwork
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKLM\SOFTWARE\AskPartnerNetwork
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}
Key Deleted : [x64] HKLM\SOFTWARE\AskPartnerNetwork
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17496

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v34.0.5 (x86 en-US)


*************************

AdwCleaner[R0].txt - [3512 octets] - [16/01/2015 02:08:39]
AdwCleaner[S0].txt - [3020 octets] - [16/01/2015 02:10:01]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3080 octets] ##########

Re: Poprosím o preventivku

Napsal: 16 led 2015 02:16
od altrok
:arrow: Dejte novy log FRST.txt, prilozte i Addition.txt. Pri druhem a dalsim spusteni musite explicitne zatrhnout volbu Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

Re: Poprosím o preventivku

Napsal: 16 led 2015 02:20
od JohnnieM
Log


Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2015 01
Ran by Jirka (administrator) on JIRKA-PC on 16-01-2015 02:19:41
Running from C:\Users\Jirka\Desktop
Loaded Profiles: Jirka (Available profiles: Jirka)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
() C:\Windows\SysWOW64\ASGT.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\GPUTweak.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(BitTorrent Inc.) C:\Users\Jirka\AppData\Roaming\uTorrent\utorrent.exe
(QIP.ru) C:\Users\Jirka\AppData\Roaming\QipGuard\QipGuard.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(KYE) C:\Program Files (x86)\Genius\Manticore\MTHid.exe
() C:\Program Files (x86)\Genius\Maurus X\mousehid.exe
() C:\Program Files (x86)\Genius\Maurus X\trayicon.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Cm108Sound] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm108.dll,CMICtrlWnd
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2763776 2009-10-28] (VIA)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-08] (AVAST Software)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [Manticore] => C:\Program Files (x86)\Genius\Manticore\MThid.exe [293376 2013-10-29] (KYE)
HKLM-x32\...\Run: [Maurus X] => C:\Program Files (x86)\Genius\Maurus X\mousehid.exe [309248 2013-01-25] ()
HKU\S-1-5-21-944241523-2248144938-686439-1001\...\Run: [uTorrent] => C:\Users\Jirka\AppData\Roaming\uTorrent\utorrent.exe [1331792 2014-07-11] (BitTorrent Inc.)
HKU\S-1-5-21-944241523-2248144938-686439-1001\...\Run: [QIP Internet Guardian] => C:\Users\Jirka\AppData\Roaming\QipGuard\QipGuard.exe [436720 2014-06-23] (QIP.ru)
HKU\S-1-5-21-944241523-2248144938-686439-1001\...\MountPoints2: {46db0fe8-24fe-11e4-9ad1-bcaec554d10e} - G:\setup\rsrc\Autorun.exe
HKU\S-1-5-21-944241523-2248144938-686439-1001\...\MountPoints2: {aa38687b-9af2-11e4-b6ed-bcaec554d10e} - I:\LG_PC_Programs.exe
HKU\S-1-5-21-944241523-2248144938-686439-1001\...\MountPoints2: {dc32c87b-2cdc-11e4-bfac-bcaec554d10e} - H:\VZW_Software_upgrade_assistant.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TMMonitor.lnk
ShortcutTarget: TMMonitor.lnk -> C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe (ArcSoft, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Search App by Ask -> {5347542D-5350-006A-76A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-SP\Passport_x64.dll" No File
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Search App by Ask -> {5347542D-5350-006A-76A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-SP\Passport.dll" No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Search App by Ask - {5347542D-5350-006A-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-SP\Passport_x64.dll" No File
Toolbar: HKLM-x32 - Search App by Ask - {5347542D-5350-006A-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-SP\Passport.dll" No File
Hosts: 127.0.0.1 activate.adobe.com
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\zzyy9cfa.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Extension: Adblock Plus - C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\zzyy9cfa.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-27]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-08-13]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-30]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [90112 2009-08-19] (ASUSTeK Computer Inc.) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-30] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-30] (Avast Software)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-06-08] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2011-11-28] (AnvSoft Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-30] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-30] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-30] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-30] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-30] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-30] ()
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2013-07-02] (ASUSTeK Computer Inc.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 RTL2832UBDA; C:\Windows\SysWOW64\drivers\RTL2832UBDA.sys [114080 2009-07-06] (REALTEK SEMICONDUCTOR Corp.)
R3 RTL2832UUSB; C:\Windows\SysWOW64\Drivers\RTL2832UUSB.sys [38944 2009-07-06] (REALTEK SEMICONDUCTOR Corp.)
R3 RTL2832U_IRHID; C:\Windows\SysWOW64\DRIVERS\RTL2832U_IRHID.sys [42912 2009-07-13] (Realtek)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-30] (Avast Software)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-16 02:13 - 2015-01-16 02:13 - 00000197 _____ () C:\Windows\system32\2015-01-16-01-13-38.001-AvastVBoxSVC.exe-3552.log
2015-01-16 02:11 - 2013-07-02 16:29 - 00024824 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys
2015-01-16 02:10 - 2015-01-16 02:10 - 00000310 _____ () C:\Windows\PFRO.log
2015-01-16 02:08 - 2015-01-16 02:10 - 00000000 ____D () C:\AdwCleaner
2015-01-16 02:07 - 2015-01-16 02:07 - 02191360 _____ () C:\Users\Jirka\Desktop\adwcleaner_4.107.exe
2015-01-16 01:35 - 2015-01-16 01:35 - 00039053 _____ () C:\Users\Jirka\Desktop\Addition.txt
2015-01-16 01:34 - 2015-01-16 02:19 - 00013255 _____ () C:\Users\Jirka\Desktop\FRST.txt
2015-01-16 01:34 - 2015-01-16 02:19 - 00000000 ____D () C:\FRST
2015-01-16 01:30 - 2015-01-16 01:30 - 02125312 _____ (Farbar) C:\Users\Jirka\Desktop\FRST64.exe
2015-01-15 18:59 - 2015-01-15 18:59 - 00000197 _____ () C:\Windows\system32\2015-01-15-17-59-12.035-AvastVBoxSVC.exe-2376.log
2015-01-15 10:30 - 2015-01-15 10:30 - 00002126 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2015-01-15 10:30 - 2015-01-15 10:30 - 00002114 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2015-01-14 23:40 - 2015-01-14 23:40 - 00000197 _____ () C:\Windows\system32\2015-01-14-22-40-18.001-AvastVBoxSVC.exe-2612.log
2015-01-14 23:30 - 2014-12-19 04:30 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 23:30 - 2014-12-19 04:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll
2015-01-14 23:30 - 2014-12-12 07:07 - 05553080 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 23:30 - 2014-12-12 07:07 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-01-14 23:30 - 2014-12-12 07:05 - 00617384 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-01-14 23:30 - 2014-12-12 06:45 - 03977656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-14 23:30 - 2014-12-12 06:45 - 03921848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-14 23:30 - 2014-12-06 05:31 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 23:30 - 2014-12-06 05:31 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-01-14 23:30 - 2014-12-06 05:18 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-14 23:30 - 2014-12-06 05:18 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-14 23:30 - 2014-10-29 03:16 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-01-14 23:29 - 2014-12-19 04:30 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-01-14 23:29 - 2014-12-19 04:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-01-14 23:29 - 2014-12-19 04:03 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-01-14 23:29 - 2014-12-19 04:03 - 00087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-01-14 23:29 - 2014-12-19 02:53 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 23:29 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 16:18 - 2015-01-14 16:18 - 00000197 _____ () C:\Windows\system32\2015-01-14-15-18-45.049-AvastVBoxSVC.exe-3348.log
2015-01-13 11:27 - 2015-01-13 11:27 - 00000000 ____D () C:\Program Files (x86)\LG Electronics
2015-01-13 11:21 - 2015-01-13 11:22 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Jirka\Downloads\mbam-setup-2.0.4.1028.exe
2015-01-13 10:38 - 2015-01-13 11:15 - 00000000 ____D () C:\Users\Jirka\Downloads\Knights_of_the_Old_Republic_v1.0_www.revdl.com
2015-01-13 08:09 - 2015-01-13 08:09 - 00000197 _____ () C:\Windows\system32\2015-01-13-07-09-36.037-AvastVBoxSVC.exe-3876.log
2015-01-12 17:52 - 2015-01-12 17:53 - 00000197 _____ () C:\Windows\system32\2015-01-12-16-52-58.082-AvastVBoxSVC.exe-5636.log
2015-01-12 17:07 - 2015-01-12 17:07 - 00000197 _____ () C:\Windows\system32\2015-01-12-16-07-08.097-AvastVBoxSVC.exe-2428.log
2015-01-12 08:19 - 2015-01-12 08:19 - 00000197 _____ () C:\Windows\system32\2015-01-12-07-19-32.082-AvastVBoxSVC.exe-4252.log
2015-01-11 08:55 - 2015-01-11 08:55 - 00000197 _____ () C:\Windows\system32\2015-01-11-07-55-20.090-AvastVBoxSVC.exe-2060.log
2015-01-10 15:49 - 2015-01-10 15:49 - 00000197 _____ () C:\Windows\system32\2015-01-10-14-49-48.029-AvastVBoxSVC.exe-3116.log
2015-01-10 08:23 - 2015-01-10 08:23 - 00000197 _____ () C:\Windows\system32\2015-01-10-07-23-05.001-AvastVBoxSVC.exe-3160.log
2015-01-08 18:11 - 2015-01-08 18:11 - 00000197 _____ () C:\Windows\system32\2015-01-08-17-11-12.034-AvastVBoxSVC.exe-3244.log
2015-01-04 10:53 - 2015-01-04 10:53 - 00000000 ____D () C:\Program Files\Recuva
2015-01-04 08:47 - 2015-01-04 08:47 - 00000197 _____ () C:\Windows\system32\2015-01-04-07-47-46.013-AvastVBoxSVC.exe-3044.log
2015-01-03 10:02 - 2015-01-03 10:02 - 00000197 _____ () C:\Windows\system32\2015-01-03-09-02-29.016-AvastVBoxSVC.exe-4564.log
2015-01-03 09:54 - 2015-01-16 02:19 - 00013004 _____ () C:\Windows\setupact.log
2015-01-03 09:54 - 2015-01-03 09:54 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-03 09:32 - 2015-01-03 09:32 - 00081148 _____ () C:\Users\Public\Documents\cc_20150103_093206.reg
2015-01-03 09:32 - 2015-01-03 09:32 - 00001814 _____ () C:\Users\Public\Documents\cc_20150103_093232_1.reg
2015-01-02 18:34 - 2015-01-02 18:34 - 00000197 _____ () C:\Windows\system32\2015-01-02-17-34-03.099-AvastVBoxSVC.exe-2396.log
2015-01-02 08:27 - 2015-01-02 08:27 - 00000197 _____ () C:\Windows\system32\2015-01-02-07-27-41.031-AvastVBoxSVC.exe-5616.log
2015-01-01 22:10 - 2015-01-11 17:09 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\TS3Client
2015-01-01 22:10 - 2015-01-01 22:10 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2015-01-01 14:19 - 2015-01-01 14:19 - 00000197 _____ () C:\Windows\system32\2015-01-01-13-19-56.070-AvastVBoxSVC.exe-4268.log
2014-12-30 07:55 - 2014-12-30 07:55 - 00000197 _____ () C:\Windows\system32\2014-12-30-06-55-35.087-AvastVBoxSVC.exe-3128.log
2014-12-29 20:21 - 2014-12-29 20:21 - 00000197 _____ () C:\Windows\system32\2014-12-29-19-21-30.020-AvastVBoxSVC.exe-3188.log
2014-12-29 14:06 - 2014-12-13 01:47 - 00620176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-12-29 14:04 - 2014-12-13 11:08 - 32099472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 25460552 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 24764232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 20465808 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 18594432 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 16040184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 13288360 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 13202520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 10770120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 10710160 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 10345280 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-12-29 14:04 - 2014-12-13 11:08 - 03610440 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 03248968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 01895056 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434709.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 01556624 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434709.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 00994384 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 00968336 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 00942400 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 00928072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 00906560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 00876976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 00353224 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 00306328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 00178632 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-12-29 14:04 - 2014-12-13 11:08 - 00165760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-12-29 14:04 - 2014-10-09 18:02 - 00195728 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-12-29 14:04 - 2014-10-09 18:02 - 00030536 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-12-29 14:04 - 2014-10-09 08:17 - 01540240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2014-12-29 12:07 - 2014-11-22 11:46 - 00038032 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-12-29 12:07 - 2014-11-22 11:46 - 00032400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-12-29 09:05 - 2014-12-29 09:05 - 00000197 _____ () C:\Windows\system32\2014-12-29-08-05-10.084-AvastVBoxSVC.exe-4108.log
2014-12-28 18:32 - 2014-12-28 18:32 - 00000197 _____ () C:\Windows\system32\2014-12-28-17-32-48.070-AvastVBoxSVC.exe-3952.log
2014-12-26 22:01 - 2014-12-26 22:01 - 00000197 _____ () C:\Windows\system32\2014-12-26-21-01-48.028-AvastVBoxSVC.exe-5500.log
2014-12-26 09:27 - 2014-12-26 09:27 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\StarDrive
2014-12-26 09:25 - 2014-12-26 09:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2014-12-26 08:40 - 2014-12-26 08:40 - 00000197 _____ () C:\Windows\system32\2014-12-26-07-40-28.094-AvastVBoxSVC.exe-3108.log
2014-12-25 08:33 - 2014-12-25 08:33 - 00000197 _____ () C:\Windows\system32\2014-12-25-07-33-40.018-AvastVBoxSVC.exe-3312.log
2014-12-23 19:24 - 2014-12-23 19:24 - 00000197 _____ () C:\Windows\system32\2014-12-23-18-24-40.078-AvastVBoxSVC.exe-2372.log
2014-12-23 19:03 - 2014-12-23 19:03 - 00001079 _____ () C:\Users\Public\Desktop\ASUS GPU Tweak.lnk
2014-12-23 19:03 - 2014-12-23 19:03 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS
2014-12-23 09:28 - 2014-12-23 09:29 - 00000000 ____D () C:\Users\Jirka\AppData\Local\BladesOfTime
2014-12-23 08:44 - 2014-12-23 08:46 - 00000000 ____D () C:\Users\Jirka\AppData\Local\Urban Trial Freestyle
2014-12-22 15:28 - 2014-12-22 15:28 - 00000000 ____D () C:\Users\Jirka\Documents\Gamepires
2014-12-22 08:13 - 2015-01-10 15:49 - 00000000 ____D () C:\Users\Jirka\Desktop\Systémové
2014-12-22 08:13 - 2015-01-02 14:36 - 00000000 ____D () C:\Users\Jirka\Desktop\Komunikace
2014-12-22 08:11 - 2014-12-22 08:13 - 00000000 ____D () C:\Users\Jirka\Desktop\AUDIO-VIDEO
2014-12-22 08:10 - 2014-12-22 08:16 - 00000000 ____D () C:\Users\Jirka\Desktop\HRY
2014-12-22 06:59 - 2014-12-22 06:59 - 00000197 _____ () C:\Windows\system32\2014-12-22-05-59-46.028-AvastVBoxSVC.exe-2436.log
2014-12-21 09:02 - 2014-12-21 09:02 - 00000197 _____ () C:\Windows\system32\2014-12-21-08-02-48.018-AvastVBoxSVC.exe-4220.log
2014-12-20 19:31 - 2014-12-20 19:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vietcong
2014-12-20 19:31 - 2014-12-20 19:31 - 00000000 ____D () C:\Program Files (x86)\Cenega Czech
2014-12-20 18:50 - 2015-01-10 20:51 - 00000000 ____D () C:\Users\Jirka\Documents\ManiaPlanet
2014-12-20 18:50 - 2015-01-10 20:27 - 00000000 ____D () C:\ProgramData\ManiaPlanet
2014-12-20 18:50 - 2014-12-20 18:50 - 00000000 ____D () C:\Program Files (x86)\ManiaPlanet
2014-12-20 16:15 - 2014-12-20 16:15 - 00000000 __SHD () C:\Windows\ftpcache
2014-12-20 12:24 - 2014-12-20 12:25 - 00000000 ____D () C:\Games
2014-12-20 10:05 - 2014-12-20 10:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unreal Tournament G.O.T.Y. Edition
2014-12-20 10:03 - 2014-12-20 10:28 - 00000000 ____D () C:\UnrealTournament
2014-12-20 09:20 - 2014-12-20 09:20 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2014-12-20 09:17 - 2014-12-20 09:17 - 00000197 _____ () C:\Windows\system32\2014-12-20-08-17-56.088-AvastVBoxSVC.exe-3412.log
2014-12-19 23:16 - 2014-12-19 23:16 - 00003234 _____ () C:\Windows\System32\Tasks\{4562DD8E-5AB1-4DBC-A76B-1A767D14A0D8}
2014-12-19 21:05 - 2014-12-22 15:26 - 00000000 ____D () C:\ProgramData\Package Cache
2014-12-19 20:00 - 2014-12-19 21:51 - 00000000 ____D () C:\Program Files (x86)\Warcraft3 Frozen trone
2014-12-19 19:54 - 2014-12-19 23:16 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2014-12-19 17:15 - 2014-12-19 17:15 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Serious Sam 2 Patch 2.066.00
2014-12-19 17:14 - 2014-12-19 17:16 - 00000000 ____D () C:\Program Files (x86)\Serious Sam 2
2014-12-19 17:14 - 2014-12-19 17:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Serious Sam 2
2014-12-19 17:14 - 2014-12-19 17:14 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Serious Sam 2
2014-12-19 16:27 - 2014-12-20 18:50 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-12-19 16:25 - 2014-12-20 16:24 - 00000331 _____ () C:\Windows\game.ini
2014-12-19 16:25 - 2014-12-20 16:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Activision
2014-12-19 16:23 - 2014-12-20 16:17 - 00000000 ____D () C:\Program Files (x86)\Activision
2014-12-19 16:20 - 2014-12-19 16:20 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\PowerISO
2014-12-19 16:19 - 2014-12-19 16:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
2014-12-19 16:19 - 2014-12-19 16:19 - 00000000 ____D () C:\Program Files (x86)\PowerISO
2014-12-19 16:19 - 2013-10-23 15:11 - 00129944 _____ (Power Software Ltd) C:\Windows\system32\Drivers\scdemu.sys
2014-12-19 14:55 - 2014-12-19 14:55 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
2014-12-19 14:54 - 2014-12-20 10:05 - 00000000 ____D () C:\Counter-Strike 1.6
2014-12-19 08:11 - 2014-12-19 08:11 - 00000197 _____ () C:\Windows\system32\2014-12-19-07-11-29.004-AvastVBoxSVC.exe-3672.log
2014-12-18 17:48 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-18 17:48 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-18 08:11 - 2014-12-18 08:11 - 00000197 _____ () C:\Windows\system32\2014-12-18-07-11-04.048-AvastVBoxSVC.exe-3448.log
2014-12-17 18:36 - 2014-12-26 10:50 - 00000000 ____D () C:\Users\Jirka\Desktop\Steam
2014-12-17 18:05 - 2014-12-17 18:05 - 00000000 ____D () C:\Users\Jirka\AppData\Local\Wooky_s.r.o
2014-12-17 17:57 - 2014-12-17 18:08 - 00000000 ____D () C:\Users\Jirka\AppData\Local\Mobilbonus

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-16 02:18 - 2014-08-13 19:16 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\uTorrent
2015-01-16 02:18 - 2009-07-14 05:45 - 00021072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-16 02:18 - 2009-07-14 05:45 - 00021072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-16 02:15 - 2014-08-13 17:42 - 01360505 _____ () C:\Windows\WindowsUpdate.log
2015-01-16 02:11 - 2014-10-07 18:30 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-16 02:11 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-16 01:47 - 2014-08-13 19:15 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-15 18:56 - 2014-08-13 18:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-15 18:52 - 2014-09-10 17:05 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\ViberPC
2015-01-15 18:52 - 2014-09-10 17:03 - 00000000 ____D () C:\Users\Jirka\AppData\Local\Viber
2015-01-15 10:30 - 2014-09-20 18:11 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2015-01-15 09:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-01-14 23:40 - 2014-09-26 17:03 - 00000000 ____D () C:\Users\Jirka\AppData\Local\CrashDumps
2015-01-14 23:34 - 2014-08-13 18:52 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 23:31 - 2014-08-13 18:52 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-14 16:17 - 2014-08-13 19:39 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-01-13 19:51 - 2014-08-13 19:15 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-13 19:51 - 2014-08-13 19:15 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-13 19:51 - 2014-08-13 19:15 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-01-13 11:26 - 2010-11-21 10:27 - 00668138 _____ () C:\Windows\system32\perfh005.dat
2015-01-13 11:26 - 2010-11-21 10:27 - 00140798 _____ () C:\Windows\system32\perfc005.dat
2015-01-13 11:26 - 2009-07-14 06:13 - 01582262 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-12 03:05 - 2014-08-14 19:52 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-01-10 17:39 - 2014-08-15 13:45 - 00000000 ____D () C:\Program Files (x86)\StepMania
2015-01-06 04:36 - 2010-11-21 04:27 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-01-03 10:02 - 2014-08-14 16:40 - 00000000 ____D () C:\Users\Jirka\AppData\Local\Adobe
2015-01-03 09:31 - 2014-09-30 17:05 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\Sony
2015-01-03 09:29 - 2014-08-13 19:05 - 00000000 ____D () C:\Program Files\CCleaner
2015-01-02 18:21 - 2014-08-16 19:26 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\Skype
2014-12-29 14:07 - 2014-08-13 18:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-12-25 15:01 - 2014-08-13 18:04 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\Adobe
2014-12-23 19:04 - 2014-08-13 18:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-12-23 19:03 - 2014-08-13 18:32 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-12-23 19:03 - 2014-08-13 18:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2014-12-23 19:03 - 2014-08-13 18:22 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-12-20 19:33 - 2014-09-14 17:34 - 00000000 ____D () C:\Hry
2014-12-20 18:42 - 2014-10-18 15:54 - 00000000 ____D () C:\Program Files (x86)\DOSBox-0.74
2014-12-20 10:02 - 2014-10-26 08:11 - 00000000 ____D () C:\Users\Jirka\Documents\Euro Truck Simulator 2
2014-12-20 09:14 - 2009-07-14 06:08 - 00032540 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-12-19 23:51 - 2014-11-19 18:25 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-12-19 23:51 - 2014-08-16 19:26 - 00000000 ____D () C:\ProgramData\Skype
2014-12-19 23:16 - 2014-10-11 13:51 - 00000000 ____D () C:\Users\Jirka\AppData\Local\Ubisoft Game Launcher
2014-12-19 23:16 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-12-19 21:05 - 2014-12-15 12:14 - 00000000 ____D () C:\Users\Jirka\AppData\Local\Ubisoft
2014-12-17 20:29 - 2014-08-13 19:28 - 00000000 ____D () C:\Windows\SysWOW64\directx

Some content of TEMP:
====================
C:\Users\Jirka\AppData\Local\Temp\Quarantine.exe
C:\Users\Jirka\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-15 09:04

==================== End Of Log ============================

Re: Poprosím o preventivku

Napsal: 16 led 2015 02:22
od JohnnieM
Addition



Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-01-2015 01
Ran by Jirka at 2015-01-16 02:20:19
Running from C:\Users\Jirka\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 16.0.0.245 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.257 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Aktualizace NVIDIA 16.18.9 (Version: 16.18.9 - NVIDIA Corporation) Hidden
Alien Isolation version 1.0.0 (HKLM-x32\...\Alien Isolation_is1) (Version: 1.0.0 - REPACKY BY TOMI2K9)
Altap Salamander 2.54 (HKLM-x32\...\Altap Salamander 2.54) (Version: 2.54 - ALTAP)
Any Video Converter Ultimate 5.6.4 (HKLM-x32\...\Any Video Converter Ultimate_is1) (Version: - Any-Video-Converter.com)
ArcSoft TotalMedia 3.5 (HKLM-x32\...\{74292F90-895A-4FC6-A692-9641532B1B63}) (Version: 3.5.28.291 - ArcSoft)
Assassins Creed IV - Black Flag 1.01 (HKLM-x32\...\{9DF5E81T-0C6U-4FZ7-ABG5-3E5KE3F1BG2Z}_is1) (Version: - )
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.4.9.2 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.4.9.2 - ASUSTek COMPUTER INC.) Hidden
ASUSUpdate (HKLM-x32\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version: 7.17.13 - ASUSTeK Computer Inc.)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
Blades of Time (HKLM-x32\...\Steam App 208670) (Version: - Gaijin Entertainment Corporation)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version: - Gearbox Software)
Call of Duty(R) 2 (HKLM-x32\...\InstallShield_{D0A05794-48C2-4424-A15A-9F20FCFDD374}) (Version: 1.00.0000 - Activision)
Call of Duty(R) 2 (x32 Version: 1.00.0000 - Activision) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) (HKLM-x32\...\InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}) (Version: 1.00.0000 - Activision)
Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.00.0000 - Activision) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Counter-Strike 1.6 v42 (HKU\S-1-5-21-944241523-2248144938-686439-1001\...\Counter-Strike 1.6_is1) (Version: - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve)
CPUID CPU-Z 1.71 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
Crysis 3 v1.0.0.1 (HKLM-x32\...\Crysis 3_is1) (Version: - )
Euro Truck Simulator 2 - v1.10.1.18s + 13xDLC (HKLM-x32\...\Euro Truck Simulator 2_is1) (Version: - )
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Gas Guzzlers Extreme (HKLM-x32\...\Steam App 243800) (Version: - Gamepires)
GX GAMING CAVIMANUS HEADSET (HKLM\...\C-Media CM108 Like Sound Driver) (Version: - )
HD Tune Pro 5.50 (HKLM-x32\...\HD Tune Pro_is1) (Version: - EFD Software)
Heroes of Might and Magic 3 Complete (HKLM-x32\...\Heroes of Might and Magic 3 Complete_is1) (Version: - GOG.com)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
K-Lite Mega Codec Pack 10.8.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.8.5 - )
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
LG United Mobile Drivers (HKLM-x32\...\{5DB849D6-9392-4FB7-9ABB-87ED433152E5}) (Version: 3.8.1 - LG Electronics)
ManiaPlanet (HKLM-x32\...\ManiaPlanet_is1) (Version: - Nadeo)
Manticore Gaming Keyboard (HKLM-x32\...\{0DAEFA4F-E394-4D1F-8F1A-6A2180561290}}_is1) (Version: - )
Maurus X Gaming Mouse (HKLM-x32\...\{96690D24-F5F9-440C-8E3C-1078ECEB21E9}}_is1) (Version: - )
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox 34.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 en-US)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.3.0 - Mozilla)
Mozilla Thunderbird 31.3.0 (x86 cs) (HKLM-x32\...\Mozilla Thunderbird 31.3.0 (x86 cs)) (Version: 31.3.0 - Mozilla)
Native Instruments Traktor DJ Studio 3 (HKLM-x32\...\Native Instruments Traktor DJ Studio 3) (Version: - )
Nuclear Dawn (HKLM-x32\...\Steam App 17710) (Version: - InterWave Studios)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.62.40 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation)
NVIDIA Ovladač 3D Vision 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.09 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.09 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Ogg Codecs 0.81.15562 (HKLM-x32\...\Ogg Codecs) (Version: 0.81.15562 - Xiph.Org)
OpenOffice 4.1.0 (HKLM-x32\...\{43245B34-BAEA-4716-B877-38E7E7026698}) (Version: 4.10.9764 - Apache Software Foundation)
Ovládací panel NVIDIA 347.09 (Version: 347.09 - NVIDIA Corporation) Hidden
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Platform (x32 Version: 1.34 - VIA Technologies, Inc.) Hidden
Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve)
PowerISO (HKLM-x32\...\PowerISO) (Version: 5.8 - Power Software Ltd)
QIP 2012 4.0.9379 (HKU\S-1-5-21-944241523-2248144938-686439-1001\...\QIP 2012) (Version: 4.0.9379 - )
QIP Infium 3.0.9040 (HKU\S-1-5-21-944241523-2248144938-686439-1001\...\QIP Infium) (Version: 3.0.9040 - )
QIP Internet Guardian (HKU\S-1-5-21-944241523-2248144938-686439-1001\...\QipGuard) (Version: - )
REALTEK DTV USB DEVICE (HKLM-x32\...\{DDBB7C89-1A09-441E-AA0F-6AA465755C17}) (Version: 1.00.0000 - Realtek)
Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform)
Saints Row IV (HKLM-x32\...\Steam App 206420) (Version: - Deep Silver Volition)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version: - Volition)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.14.0 - SAMSUNG Electronics Co., Ltd.)
Sanctum 2 (HKLM-x32\...\Steam App 210770) (Version: - Coffee Stain Studios)
Search App by Ask (HKLM-x32\...\{5347542D-5350-006A-76A7-A758B70C1500}) (Version: 12.21.0.3795 - APN, LLC) <==== ATTENTION
Serious Sam 2 (HKLM-x32\...\SeriousSam2) (Version: - )
SHIELD Streaming (Version: 3.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.18.9 - NVIDIA Corporation) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Sniper Elite 3 (HKLM-x32\...\U25pcGVyRWxpdGUz_is1) (Version: 1 - )
Sniper Ghost Warrior 2 (HKLM-x32\...\Sniper Ghost Warrior 2_R.G. Mechanics_is1) (Version: - R.G. Mechanics, Galfimbul)
StarDrive (HKLM-x32\...\Steam App 220660) (Version: - Zero Sum Games)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
StepMania (remove only) (HKLM-x32\...\StepMania) (Version: - )
Stereoscopic Player (HKLM-x32\...\{08580357-5B9C-481B-B2A0-FB62C6C2781B}) (Version: 2.2.7 - 3dtv.at)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Tom Clancy's Ghost Recon Phantoms - EU (HKLM-x32\...\Steam App 272350) (Version: - Ubisoft Singapore)
Unreal Tournament G.O.T.Y. Edition (HKLM-x32\...\UnrealTournament) (Version: - )
Urban Trial Freestyle (HKLM-x32\...\Steam App 243450) (Version: - Tate Multimedia)
Vegas Pro 12.0 (64-bit) (HKLM\...\{A7500970-FE98-11E1-B560-F04DA23A5C58}) (Version: 12.0.367 - Sony)
VIA Platforma Ovladače zařízení (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.34 - VIA Technologies, Inc.)
Viber (HKU\S-1-5-21-944241523-2248144938-686439-1001\...\Viber) (Version: 3.0.0.134678 - Viber Media Inc)
Vietcong & Vietcong: Fist Alpha (HKLM-x32\...\{DCF5C463-BD5C-4982-91F9-2C3F8F9E9C88}) (Version: 1.06 - )
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points =========================

19-11-2014 20:48:11 Nainstalováno rozhraní DirectX
19-11-2014 22:09:22 Windows Update
22-11-2014 16:49:53 Nainstalováno rozhraní DirectX
25-11-2014 18:04:14 Windows Update
29-11-2014 02:57:51 Windows Update
30-11-2014 19:41:41 avast! antivirus system restore point
03-12-2014 05:23:45 Windows Update
10-12-2014 02:54:55 Windows Update
12-12-2014 00:24:52 Windows Update
15-12-2014 12:13:32 Nainstalováno rozhraní DirectX
16-12-2014 15:41:26 Windows Update
18-12-2014 17:48:43 Windows Update
19-12-2014 16:22:03 Installed Call of Duty(R) 2
19-12-2014 21:05:15 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
19-12-2014 23:17:11 Removed Ubisoft Game Launcher
20-12-2014 09:51:22 Windows Update
20-12-2014 09:52:01 Windows Update
20-12-2014 16:16:27 Installed Call of Duty(R) 4 - Modern Warfare(TM)
20-12-2014 18:50:29 Nainstalováno rozhraní DirectX
20-12-2014 19:31:16 Instalováno Vietcong & Vietcong: Fist Alpha
22-12-2014 15:25:07 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
22-12-2014 15:25:51 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005
22-12-2014 15:26:22 Nainstalováno rozhraní DirectX
23-12-2014 11:49:33 Windows Update
23-12-2014 19:03:17 Installed ASUS GPU Tweak
23-12-2014 19:19:39 Configured ASUS GPU Tweak
26-12-2014 09:25:24 Nainstalováno rozhraní DirectX
26-12-2014 09:26:18 Nainstalováno rozhraní DirectX
26-12-2014 09:26:44 Nainstalováno rozhraní DirectX
26-12-2014 18:11:53 Windows Update
30-12-2014 12:25:03 Windows Update
02-01-2015 18:29:04 Windows Update
07-01-2015 07:08:30 Windows Update
13-01-2015 11:26:21 Installed LG United Mobile Drivers.
14-01-2015 23:30:25 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2014-08-14 16:52 - 00000852 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {00003EAA-E332-4E54-8F15-72545BF00417} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {11325E10-B9A9-46C2-9D68-436813846961} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2014-11-14] ()
Task: {3B783F72-5688-4205-8971-59D778702AE6} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-11-30] (AVAST Software)
Task: {84E12352-7E92-4F5F-8747-FEF173B3252A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-13] (Adobe Systems Incorporated)
Task: {92CB977E-2361-463D-92FF-99103B2850D3} - System32\Tasks\ASUS\ASUS Update Checker => C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe [2009-12-28] (ASUSTeK Computer Inc.)
Task: {D021E197-D9E1-4495-AC2D-3ED05E158A26} - System32\Tasks\{4562DD8E-5AB1-4DBC-A76B-1A767D14A0D8} => pcalua.exe -a "C:\Program Files (x86)\Ubisoft\Ivory Tower\The Crew (Russian)\Support\InsHelper.exe" -c CallUplayProtocol Uninstall 507
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-10-07 18:29 - 2014-12-13 09:03 - 00117576 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-01-17 11:24 - 2012-01-17 11:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2014-11-30 19:42 - 2014-11-30 19:42 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2014-11-30 19:42 - 2014-11-30 19:42 - 05851328 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2014-08-13 18:22 - 2009-05-07 09:51 - 00071680 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2014-08-13 18:22 - 2009-05-07 09:53 - 00379392 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2014-08-13 18:22 - 2008-01-18 07:50 - 00098816 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\VMicApi.dll
2014-08-13 18:22 - 2009-10-28 03:26 - 47601664 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Skin.dll
2014-12-08 16:11 - 2013-01-25 01:36 - 00309248 _____ () C:\Program Files (x86)\Genius\Maurus X\mousehid.exe
2014-12-08 16:11 - 2013-01-24 09:54 - 00222720 _____ () C:\Program Files (x86)\Genius\Maurus X\trayicon.exe
2015-01-15 22:58 - 2015-01-15 22:58 - 02910720 _____ () C:\Program Files\AVAST Software\Avast\defs\15011502\algo.dll
2014-11-30 19:42 - 2014-11-30 19:42 - 04495336 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll
2013-09-24 17:22 - 2013-09-24 17:22 - 00258048 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Vender.dll
2013-10-07 10:30 - 2013-10-07 10:30 - 00053248 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Exeio.dll
2014-11-18 21:04 - 2014-06-23 13:35 - 00378864 _____ () C:\Users\Jirka\AppData\Roaming\QipGuard\chrome.dll
2014-08-13 18:48 - 2007-04-19 08:33 - 00035584 _____ () C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\uPiApi.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
2014-08-13 18:48 - 2008-11-26 15:59 - 00131584 _____ () C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\AbilisWinUsb.dll
2014-08-13 18:48 - 2008-10-22 15:01 - 00200704 _____ () C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\VendorCmdRW.dll
2014-11-30 19:43 - 2014-11-30 19:43 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-12-08 16:10 - 2013-01-15 17:06 - 00061952 _____ () C:\Program Files (x86)\Genius\Manticore\HidDevice.dll
2014-12-08 16:10 - 2011-10-11 17:32 - 00054784 _____ () C:\Program Files (x86)\Genius\Manticore\KBHook1.dll
2014-12-08 16:11 - 2013-01-16 09:06 - 00061952 _____ () C:\Program Files (x86)\Genius\Maurus X\HidDevice.dll
2014-12-09 08:27 - 2014-12-09 08:27 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-944241523-2248144938-686439-500 - Administrator - Disabled)
Guest (S-1-5-21-944241523-2248144938-686439-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-944241523-2248144938-686439-1002 - Limited - Enabled)
Jirka (S-1-5-21-944241523-2248144938-686439-1001 - Administrator - Enabled) => C:\Users\Jirka

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/16/2015 02:11:37 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/15/2015 06:57:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/15/2015 09:04:43 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Generování kontextu aktivace pro C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1 se nezdařilo. Chyba v souboru manifestu nebo zásad C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2 na řádku C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Součást 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (01/14/2015 11:40:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: RemoteControlServer.exe, verze: 2.2.1.4, časové razítko: 0x537f52c5
Název chybujícího modulu: KERNELBASE.dll, verze: 6.1.7601.18409, časové razítko: 0x5315a05a
Kód výjimky: 0xc000041d
Posun chyby: 0x000000000000940d
ID chybujícího procesu: 0x454
Čas spuštění chybující aplikace: 0xRemoteControlServer.exe0
Cesta k chybující aplikaci: RemoteControlServer.exe1
Cesta k chybujícímu modulu: RemoteControlServer.exe2
ID zprávy: RemoteControlServer.exe3

Error: (01/14/2015 11:40:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: RemoteControlServer.exe, verze: 2.2.1.4, časové razítko: 0x537f52c5
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x000007fe8f30b399
ID chybujícího procesu: 0x454
Čas spuštění chybující aplikace: 0xRemoteControlServer.exe0
Cesta k chybující aplikaci: RemoteControlServer.exe1
Cesta k chybujícímu modulu: RemoteControlServer.exe2
ID zprávy: RemoteControlServer.exe3

Error: (01/14/2015 11:40:07 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: RemoteControlServer.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
Stack:
at RemoteControlServer.Server.getApp(System.String)
at RemoteControlServer.Server.getCurrentApp()
at RemoteControlServer.MainWindow.refreshUi()
at RemoteControlServer.MainWindow.initialize()
at RemoteControlServer.MainWindow.MainWindow_Loaded(System.Object, System.Windows.RoutedEventArgs)
at System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
at System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
at MS.Internal.FrameworkObject.OnLoaded(System.Windows.RoutedEventArgs)
at System.Windows.BroadcastEventHelper.BroadcastEvent(System.Windows.DependencyObject, System.Windows.RoutedEvent)
at System.Windows.BroadcastEventHelper.BroadcastLoadedEvent(System.Object)
at System.Windows.Media.MediaContext.FireLoadedPendingCallbacks()
at System.Windows.Media.MediaContext.FireInvokeOnRenderCallbacks()
at System.Windows.Media.MediaContext.RenderMessageHandlerCore(System.Object)
at System.Windows.Media.MediaContext.RenderMessageHandler(System.Object)
at System.Windows.Interop.HwndTarget.OnResize()
at System.Windows.Interop.HwndTarget.HandleMessage(MS.Internal.Interop.WindowMessage, IntPtr, IntPtr)
at System.Windows.Interop.HwndSource.HwndTargetFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
at System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
at MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
at System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
at MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
at MS.Win32.UnsafeNativeMethods.ShowWindow(System.Runtime.InteropServices.HandleRef, Int32)
at MS.Win32.UnsafeNativeMethods.ShowWindow(System.Runtime.InteropServices.HandleRef, Int32)
at System.Windows.Window.ShowHelper(System.Object)
at System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
at MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
at System.Windows.Threading.DispatcherOperation.InvokeImpl()
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
at System.Windows.Threading.DispatcherOperation.Invoke()
at System.Windows.Threading.Dispatcher.ProcessQueue()
at System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
at System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
at MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
at System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
at MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
at MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
at MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
at System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
at System.Windows.Application.RunInternal(System.Windows.Window)
at System.Windows.Application.Run()
at RemoteControlServer.Application.Main()

Error: (01/14/2015 11:38:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/14/2015 05:51:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: FlashPlayerPlugin_16_0_0_257.exe, verze: 16.0.0.257, časové razítko: 0x54925c1d
Název chybujícího modulu: FlashPlayerPlugin_16_0_0_257.exe, verze: 16.0.0.257, časové razítko: 0x54925c1d
Kód výjimky: 0x40000015
Posun chyby: 0x00017600
ID chybujícího procesu: 0x15d8
Čas spuštění chybující aplikace: 0xFlashPlayerPlugin_16_0_0_257.exe0
Cesta k chybující aplikaci: FlashPlayerPlugin_16_0_0_257.exe1
Cesta k chybujícímu modulu: FlashPlayerPlugin_16_0_0_257.exe2
ID zprávy: FlashPlayerPlugin_16_0_0_257.exe3

Error: (01/14/2015 04:16:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/13/2015 00:55:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: RemoteControlServer.exe, verze: 2.2.1.4, časové razítko: 0x537f52c5
Název chybujícího modulu: KERNELBASE.dll, verze: 6.1.7601.18409, časové razítko: 0x5315a05a
Kód výjimky: 0xc000041d
Posun chyby: 0x000000000000940d
ID chybujícího procesu: 0x498
Čas spuštění chybující aplikace: 0xRemoteControlServer.exe0
Cesta k chybující aplikaci: RemoteControlServer.exe1
Cesta k chybujícímu modulu: RemoteControlServer.exe2
ID zprávy: RemoteControlServer.exe3


System errors:
=============
Error: (01/16/2015 02:10:04 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (01/16/2015 02:10:04 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Stínová kopie svazku byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (01/16/2015 02:10:04 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Windows Media Player Network Sharing byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (01/16/2015 02:10:04 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba NVIDIA Streamer Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (01/16/2015 02:10:04 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba NVIDIA Network Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (01/16/2015 02:10:04 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba NVIDIA GeForce Experience Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (01/16/2015 02:10:04 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba ASUS System Control Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (01/16/2015 02:10:04 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba ASGT byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (01/16/2015 02:10:04 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba ArcSoft Connect Daemon byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (01/16/2015 02:10:04 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba zařazování tisku byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 60000 milisekund: Restartovat službu.


Microsoft Office Sessions:
=========================
Error: (01/16/2015 02:11:37 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/15/2015 06:57:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/15/2015 09:04:43 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files\CCleaner\CCleaner.exe

Error: (01/14/2015 11:40:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: RemoteControlServer.exe2.2.1.4537f52c5KERNELBASE.dll6.1.7601.184095315a05ac000041d000000000000940d45401d0304afd43b350C:\Users\Jirka\Desktop\Systémové\RemoteControlServer.exeC:\Windows\system32\KERNELBASE.dll52807254-9c3e-11e4-a70d-bcaec554d10e

Error: (01/14/2015 11:40:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: RemoteControlServer.exe2.2.1.4537f52c5unknown0.0.0.000000000c0000005000007fe8f30b39945401d0304afd43b350C:\Users\Jirka\Desktop\Systémové\RemoteControlServer.exeunknown4b8bd27c-9c3e-11e4-a70d-bcaec554d10e

Error: (01/14/2015 11:40:07 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: RemoteControlServer.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
Stack:
at RemoteControlServer.Server.getApp(System.String)
at RemoteControlServer.Server.getCurrentApp()
at RemoteControlServer.MainWindow.refreshUi()
at RemoteControlServer.MainWindow.initialize()
at RemoteControlServer.MainWindow.MainWindow_Loaded(System.Object, System.Windows.RoutedEventArgs)
at System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
at System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
at MS.Internal.FrameworkObject.OnLoaded(System.Windows.RoutedEventArgs)
at System.Windows.BroadcastEventHelper.BroadcastEvent(System.Windows.DependencyObject, System.Windows.RoutedEvent)
at System.Windows.BroadcastEventHelper.BroadcastLoadedEvent(System.Object)
at System.Windows.Media.MediaContext.FireLoadedPendingCallbacks()
at System.Windows.Media.MediaContext.FireInvokeOnRenderCallbacks()
at System.Windows.Media.MediaContext.RenderMessageHandlerCore(System.Object)
at System.Windows.Media.MediaContext.RenderMessageHandler(System.Object)
at System.Windows.Interop.HwndTarget.OnResize()
at System.Windows.Interop.HwndTarget.HandleMessage(MS.Internal.Interop.WindowMessage, IntPtr, IntPtr)
at System.Windows.Interop.HwndSource.HwndTargetFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
at System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
at MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
at System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
at MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
at MS.Win32.UnsafeNativeMethods.ShowWindow(System.Runtime.InteropServices.HandleRef, Int32)
at MS.Win32.UnsafeNativeMethods.ShowWindow(System.Runtime.InteropServices.HandleRef, Int32)
at System.Windows.Window.ShowHelper(System.Object)
at System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
at MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
at System.Windows.Threading.DispatcherOperation.InvokeImpl()
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
at System.Windows.Threading.DispatcherOperation.Invoke()
at System.Windows.Threading.Dispatcher.ProcessQueue()
at System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
at System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
at MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
at System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
at MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
at MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
at MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
at System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
at System.Windows.Application.RunInternal(System.Windows.Window)
at System.Windows.Application.Run()
at RemoteControlServer.Application.Main()

Error: (01/14/2015 11:38:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/14/2015 05:51:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: FlashPlayerPlugin_16_0_0_257.exe16.0.0.25754925c1dFlashPlayerPlugin_16_0_0_257.exe16.0.0.25754925c1d400000150001760015d801d0300da47f07e8C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_257.exeC:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_257.exe96131584-9c0d-11e4-8d2b-bcaec554d10e

Error: (01/14/2015 04:16:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/13/2015 00:55:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: RemoteControlServer.exe2.2.1.4537f52c5KERNELBASE.dll6.1.7601.184095315a05ac000041d000000000000940d49801d02f27bded9564C:\Users\Jirka\Desktop\Systémové\RemoteControlServer.exeC:\Windows\system32\KERNELBASE.dll053c156c-9b1b-11e4-b6ed-bcaec554d10e


==================== Memory info ===========================

Processor: AMD Athlon(tm) II X2 250 Processor
Percentage of memory in use: 26%
Total physical RAM: 8191.18 MB
Available physical RAM: 6004.48 MB
Total Pagefile: 16380.54 MB
Available Pagefile: 14164.7 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.76 GB) (Free:59.48 GB) NTFS
Drive d: () (Fixed) (Total:698.64 GB) (Free:209.4 GB) NTFS
Drive e: () (Fixed) (Total:297.99 GB) (Free:123.75 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 27E06331)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 698.6 GB) (Disk ID: 41629760)
Partition 1: (Not Active) - (Size=698.6 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 572BA418)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Re: Poprosím o preventivku

Napsal: 16 led 2015 02:28
od altrok
:arrow: Vypnete trvale Windows Defender - http://windows.microsoft.com/cs-cz/wind ... =windows-7

  • Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
  • ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
  • znovu spustte FRST a kliknete na Fix
  • po restartu na Vas vyskoci fixlog (pripadne bude ulozen na Plose), jehoz obsah mi vlozte do pristi odpovedi

    Kód: Vybrat vše

    Start
    CloseProcesses:
    HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
    HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
    HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
    HKU\S-1-5-21-944241523-2248144938-686439-1001\...\MountPoints2: {46db0fe8-24fe-11e4-9ad1-bcaec554d10e} - G:\setup\rsrc\Autorun.exe
    HKU\S-1-5-21-944241523-2248144938-686439-1001\...\MountPoints2: {aa38687b-9af2-11e4-b6ed-bcaec554d10e} - I:\LG_PC_Programs.exe
    HKU\S-1-5-21-944241523-2248144938-686439-1001\...\MountPoints2: {dc32c87b-2cdc-11e4-bfac-bcaec554d10e} - H:\VZW_Software_upgrade_assistant.exe
    
    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    BHO: Search App by Ask -> {5347542D-5350-006A-76A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-SP\Passport_x64.dll" No File
    BHO-x32: Search App by Ask -> {5347542D-5350-006A-76A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-SP\Passport.dll" No File
    Toolbar: HKLM - Search App by Ask - {5347542D-5350-006A-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-SP\Passport_x64.dll" No File
    Toolbar: HKLM-x32 - Search App by Ask - {5347542D-5350-006A-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-SP\Passport.dll" No File
    S3 VGPU; System32\drivers\rdvgkmd.sys [X]
    
    2015-01-16 02:08 - 2015-01-16 02:10 - 00000000 ____D () C:\AdwCleaner
    2015-01-16 02:07 - 2015-01-16 02:07 - 02191360 _____ () C:\Users\Jirka\Desktop\adwcleaner_4.107.exe
    2015-01-16 01:35 - 2015-01-16 01:35 - 00039053 _____ () C:\Users\Jirka\Desktop\Addition.txt
    2015-01-16 01:34 - 2015-01-16 02:19 - 00013255 _____ () C:\Users\Jirka\Desktop\FRST.txt
    Hosts:
    EmptyTemp:
    End
    

Re: Poprosím o preventivku

Napsal: 16 led 2015 02:41
od JohnnieM
asi už pomalu usínám, doufám že jsem to udělal správně




Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 15-01-2015 01
Ran by Jirka at 2015-01-16 02:36:29 Run:1
Running from C:\Users\Jirka\Desktop
Loaded Profiles: Jirka (Available profiles: Jirka)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKU\S-1-5-21-944241523-2248144938-686439-1001\...\MountPoints2: {46db0fe8-24fe-11e4-9ad1-bcaec554d10e} - G:\setup\rsrc\Autorun.exe
HKU\S-1-5-21-944241523-2248144938-686439-1001\...\MountPoints2: {aa38687b-9af2-11e4-b6ed-bcaec554d10e} - I:\LG_PC_Programs.exe
HKU\S-1-5-21-944241523-2248144938-686439-1001\...\MountPoints2: {dc32c87b-2cdc-11e4-bfac-bcaec554d10e} - H:\VZW_Software_upgrade_assistant.exe

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Search App by Ask -> {5347542D-5350-006A-76A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-SP\Passport_x64.dll" No File
BHO-x32: Search App by Ask -> {5347542D-5350-006A-76A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-SP\Passport.dll" No File
Toolbar: HKLM - Search App by Ask - {5347542D-5350-006A-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-SP\Passport_x64.dll" No File
Toolbar: HKLM-x32 - Search App by Ask - {5347542D-5350-006A-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-SP\Passport.dll" No File
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

2015-01-16 02:08 - 2015-01-16 02:10 - 00000000 ____D () C:\AdwCleaner
2015-01-16 02:07 - 2015-01-16 02:07 - 02191360 _____ () C:\Users\Jirka\Desktop\adwcleaner_4.107.exe
2015-01-16 01:35 - 2015-01-16 01:35 - 00039053 _____ () C:\Users\Jirka\Desktop\Addition.txt
2015-01-16 01:34 - 2015-01-16 02:19 - 00013255 _____ () C:\Users\Jirka\Desktop\FRST.txt
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\NvBackend => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS5ServiceManager => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
"HKU\S-1-5-21-944241523-2248144938-686439-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{46db0fe8-24fe-11e4-9ad1-bcaec554d10e}" => Key deleted successfully.
HKCR\CLSID\{46db0fe8-24fe-11e4-9ad1-bcaec554d10e} => Key not found.
"HKU\S-1-5-21-944241523-2248144938-686439-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{aa38687b-9af2-11e4-b6ed-bcaec554d10e}" => Key deleted successfully.
HKCR\CLSID\{aa38687b-9af2-11e4-b6ed-bcaec554d10e} => Key not found.
"HKU\S-1-5-21-944241523-2248144938-686439-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dc32c87b-2cdc-11e4-bfac-bcaec554d10e}" => Key deleted successfully.
HKCR\CLSID\{dc32c87b-2cdc-11e4-bfac-bcaec554d10e} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5347542D-5350-006A-76A7-7A786E7484D7}" => Key deleted successfully.
"HKCR\CLSID\{5347542D-5350-006A-76A7-7A786E7484D7}" => Key deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5347542D-5350-006A-76A7-7A786E7484D7}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{5347542D-5350-006A-76A7-7A786E7484D7}" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{5347542D-5350-006A-76A7-7A786E7484D7} => value deleted successfully.
HKCR\CLSID\{5347542D-5350-006A-76A7-7A786E7484D7} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{5347542D-5350-006A-76A7-7A786E7484D7} => value deleted successfully.
HKCR\Wow6432Node\CLSID\{5347542D-5350-006A-76A7-7A786E7484D7} => Key not found.
VGPU => Service deleted successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Jirka\Desktop\adwcleaner_4.107.exe => Moved successfully.
C:\Users\Jirka\Desktop\Addition.txt => Moved successfully.
C:\Users\Jirka\Desktop\FRST.txt => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 383.1 MB temporary data.


The system needed a reboot.

==== End of Fixlog 02:36:36 ====

Re: Poprosím o preventivku

Napsal: 16 led 2015 02:43
od altrok
Spravne :thumbsup: Taky uz mi to neleze do hlavy :o


Takze jeste uklidime.
A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

Re: Poprosím o preventivku

Napsal: 16 led 2015 02:46
od JohnnieM
Ode mě ještě ne, musím poděkovat za velkou ochotu hlavně takhle v noci, ani jsem nedoufal že to bude hned hotové, přeji dobrou noc a zase někdy nashledanou.

Re: Poprosím o preventivku

Napsal: 16 led 2015 02:50
od altrok
Druhy PC byl az na ten adware (od Javy) a par drobnosti cisty.. aktivni havet nevidno.

Nemate zac. Dobrou noc :bye: