VIRY.CZ

Prosím o kontrolu logu(snad se mi to teď povede) nb s OS W7 Home P..,x32, verze OEM. Bylo na něm pravděpodobně nainstalováno více antivirových programů (nevím jestli současně) a asi nebyly korektně odinstalované.Při pokusu o načtení stránek se vždy zobrazí "nelze se připojit k internetu". Připojení probíhalo přes WiFi i kabelem na TPLink WDR3600. Síť je zobrazena jako aktivní.Logy přikládám.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-10-2014
Ran by Uživatel (administrator) on UZIVATEL-PC on 24-10-2014 14:06:38
Running from E:\
Loaded Profile: Uživatel (Available profiles: Uživatel & Spravce)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ZOOM\TpScrex.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Massive Media) C:\Users\Uživatel\AppData\Roaming\Massive Media\Twoo.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
(Lenovo Group Limited) C:\Program Files\ThinkPad\Utilities\SCHTASK.EXE
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [186248 2012-09-20] (Lenovo.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [SoundMAXPnP] => C:\Program Files\Analog Devices\Core\smax4pnp.exe [1314816 2009-05-18] (Analog Devices, Inc.)
HKLM\...\Run: [seznam-listicka-distribuce] => C:\Program Files\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM\...\Run: [PWMTRV] => rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWMTR32V.DLL,PwrMgrBkGndMonitor
HKLM\...\Run: [PrivDogService] => "C:\Program Files\AdTrustMedia\PrivDog\1.8.0.15\trustedadssvc.exe"
HKLM\...\Run: [CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}] => "C:\ProgramData\cis5AC.exe" --PostUninstall {81EFDD93-DBBE-415B-BE6E-49B9664E3E82}
HKLM\...\Run: [CIS_{15198508-521A-4D69-8E5B-B94A6CCFF805}] => "C:\ProgramData\cis895A.exe" --PostUninstall {15198508-521A-4D69-8E5B-B94A6CCFF805}
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-3250058756-2919187754-1548671718-1000\...\Run: [Twoo] => "C:\Users\U~ivatel\AppData\Roaming\Massive Media\Twoo.exe"
HKU\S-1-5-21-3250058756-2919187754-1548671718-1000\...\Run: [GoobzoYouTubeAccelerator] => "C:\Program Files\YouTube Accelerator\YouTubeAccelerator.exe" /startup
HKU\S-1-5-21-3250058756-2919187754-1548671718-1000\...\Run: [cz.seznam.software.szndesktop] => "C:\Users\U~ivatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
HKU\S-1-5-21-3250058756-2919187754-1548671718-1000\...\Run: [cz.seznam.software.autoupdate] => "C:\Users\U~ivatel\AppData\Roaming\Seznam.cz\szninstall.exe" -c
HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Windows\System32\ctfmon.exe ctfmon.exe
HKU\S-1-5-18\...\MountPoints2: D - D:\setup.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass FF RunOnce.lnk
ShortcutTarget: Install LastPass FF RunOnce.lnk -> C:\Program Files\Common Files\lpuninstall.exe (LastPass)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files\Common Files\lpuninstall.exe (LastPass)
Startup: C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [GDriveBlacklistedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedEditOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedViewOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncingOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: Internet Explorer proxy is enabled.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=13415
SearchScopes: HKCU - {13263606-F809-44EF-B511-F5E44B66D891} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13415
SearchScopes: HKCU - {2455DD80-407F-461A-ACE9-6BB9330959FB} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_13415
SearchScopes: HKCU - {3A7937BE-D583-4610-8D11-7B3EAE6678C9} URL = http://encyklopedie.seznam.cz/search?q= ... arch_13415
SearchScopes: HKCU - {552CD365-565B-43F7-8DB9-73F95AE463CD} URL = http://search.seznam.cz/?q={searchTerms ... arch_13415
SearchScopes: HKCU - {5E6D54ED-1319-41C7-B6B3-71CEFEDB9C61} URL = http://www.mapy.cz/?query={searchTerms} ... arch_13415
SearchScopes: HKCU - {7E61B005-0656-4120-B623-E59FD75E3517} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13415
SearchScopes: HKCU - {85F89050-4B32-4DB8-81ED-8A8DCD112494} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
SearchScopes: HKCU - {EB4D188E-9804-4483-9A74-C69DDF28D63F} URL = http://www.novinky.cz/hledej?w={searchT ... arch_13415
SearchScopes: HKCU - {F2632338-4E03-4EB2-A794-BEB4FA5D3032} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_13415
BHO: No Name -> {11111111-1111-1111-1111-110611191115} -> No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files\LastPass\LPToolbar.dll (LastPass)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files\LastPass\LPToolbar.dll (LastPass)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog9 01 C:\Program Files\YouTube Accelerator\ytalsp.dll File Not found ()
Winsock: Catalog9 02 C:\Program Files\YouTube Accelerator\ytalsp.dll File Not found ()
Winsock: Catalog9 03 C:\Program Files\YouTube Accelerator\ytalsp.dll File Not found ()
Winsock: Catalog9 04 C:\Program Files\YouTube Accelerator\ytalsp.dll File Not found ()
Winsock: Catalog9 05 C:\Program Files\YouTube Accelerator\ytalsp.dll File Not found ()
Winsock: Catalog9 06 C:\Program Files\YouTube Accelerator\ytalsp.dll File Not found ()
Winsock: Catalog9 07 C:\Program Files\YouTube Accelerator\ytalsp.dll File Not found ()
Winsock: Catalog9 08 C:\Program Files\YouTube Accelerator\ytalsp.dll File Not found ()
Winsock: Catalog9 09 C:\Program Files\YouTube Accelerator\ytalsp.dll File Not found ()
Winsock: Catalog9 10 C:\Program Files\YouTube Accelerator\ytalsp.dll File Not found ()
Winsock: Catalog9 11 C:\Program Files\YouTube Accelerator\ytalsp.dll File Not found ()
Winsock: Catalog9 12 C:\Program Files\YouTube Accelerator\ytalsp.dll File Not found ()
Winsock: Catalog9 25 C:\Program Files\YouTube Accelerator\ytalsp.dll File Not found ()
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\dfp0giax.default
FF Homepage: https://www.seznam.cz/?logged=1
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: S3.Google Translator - C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\dfp0giax.default\Extensions\s3google@translator.xpi [2014-10-20]
FF Extension: Speed Dial - C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\dfp0giax.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2014-10-20]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Profile: C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-31]
CHR Extension: (Disk Google) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-31]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2014-10-01]
CHR Extension: (YouTube) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-31]
CHR Extension: (Vyhledávání Google) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-31]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-10-01]
CHR Extension: (Peněženka Google) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-01]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2014-10-01]
CHR Extension: (Gmail) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-31]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx []

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 LENOVO.MICMUTE; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [101736 2011-07-12] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [127336 2011-07-12] (Lenovo Group Limited)
S3 PwmEWSvc; C:\Program Files\ThinkPad\Utilities\PWMEWSVC.EXE [1665088 2012-09-24] (Lenovo Group Limited)
S3 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
R2 TPHKLOAD; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [131432 2011-07-12] (Lenovo Group Limited)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-10-02] ()
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [38472 2013-11-22] (The OpenVPN Project)
R3 e1express; C:\Windows\System32\DRIVERS\e1e6232.sys [231640 2011-08-23] (Intel Corporation)
R2 NPF; C:\Windows\system32\drivers\npf.sys [35088 2014-10-23] (CACE Technologies, Inc.)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13464 2014-10-20] ()
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S2 SPDRIVER_1.37.0.1323; \??\C:\Program Files\ShopperPro\JSDriver\1.37.0.1323\jsdrv.sys [X]
U1 StarOpen; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-24 14:06 - 2014-10-24 14:06 - 00000000 ____D () C:\FRST
2014-10-24 13:57 - 2014-10-24 13:57 - 00029696 _____ () C:\Users\Uživatel\AppData\Local\MSGBOX.EXE
2014-10-24 13:35 - 2014-10-24 13:35 - 00000000 ____D () C:\rsit
2014-10-24 13:35 - 2014-10-24 13:35 - 00000000 ____D () C:\Program Files\trend micro
2014-10-24 12:04 - 2014-10-24 12:32 - 00000000 ____D () C:\Users\Uživatel\AppData\Local\Microsoft Games
2014-10-24 11:59 - 2014-10-24 11:59 - 00001964 _____ () C:\Windows\PFRO.log
2014-10-23 22:03 - 2014-10-24 12:01 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-10-23 18:14 - 2014-10-23 18:14 - 00281104 _____ (CACE Technologies, Inc.) C:\Windows\system32\wpcap.dll
2014-10-23 18:14 - 2014-10-23 18:14 - 00096784 _____ (CACE Technologies, Inc.) C:\Windows\system32\packet.dll
2014-10-23 18:14 - 2014-10-23 18:14 - 00035088 _____ (CACE Technologies, Inc.) C:\Windows\system32\Drivers\npf.sys
2014-10-23 18:14 - 2014-10-23 18:14 - 00000000 ____D () C:\Users\Uživatel\AppData\Local\NETGEARGenie
2014-10-23 18:13 - 2014-10-23 19:43 - 00000000 ____D () C:\Program Files\NETGEAR Genie
2014-10-23 15:02 - 2014-10-23 15:02 - 00008192 _____ () C:\Users\Uživatel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-10-23 14:30 - 2014-10-24 12:02 - 00022890 _____ () C:\Windows\WindowsUpdate.log
2014-10-23 02:44 - 2014-10-23 02:44 - 00001088 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-10-23 02:44 - 2014-10-23 02:44 - 00001076 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-10-23 02:44 - 2014-10-23 02:44 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-10-23 02:16 - 2014-10-23 02:16 - 00000975 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Uninstall 6.lnk
2014-10-23 02:16 - 2014-10-23 02:16 - 00000963 _____ () C:\Users\Public\Desktop\Total Uninstall 6.lnk
2014-10-23 02:16 - 2014-10-23 02:16 - 00000000 ____D () C:\ProgramData\Martau
2014-10-23 02:16 - 2014-10-23 02:16 - 00000000 ____D () C:\Program Files\Total Uninstall 6
2014-10-23 00:47 - 2014-10-23 00:47 - 00001834 _____ () C:\Users\Public\Desktop\Defraggler.lnk
2014-10-23 00:47 - 2014-10-23 00:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
2014-10-23 00:47 - 2014-10-23 00:47 - 00000000 ____D () C:\Program Files\Defraggler
2014-10-23 00:46 - 2014-10-24 12:00 - 00001684 _____ () C:\Windows\setupact.log
2014-10-23 00:46 - 2014-10-23 00:46 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-22 21:13 - 2014-10-22 21:13 - 00000000 ____D () C:\Users\Uživatel\AppData\Local\Microsoft_Corporation
2014-10-22 16:23 - 2014-10-22 16:23 - 00000000 ____H () C:\Users\Uživatel\Documents\Default.rdp
2014-10-22 11:19 - 2014-10-22 11:19 - 00077359 _____ () C:\Users\Uživatel\Documents\chybička.xps
2014-10-21 17:15 - 2014-10-21 17:15 - 00000416 _____ () C:\Windows\Tasks\CIS_{15198508-521A-4D69-8E5B-B94A6CCFF805}.job
2014-10-21 17:15 - 2014-10-21 17:15 - 00000414 _____ () C:\Windows\Tasks\CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}.job
2014-10-21 00:16 - 2014-10-21 00:16 - 00000000 ____D () C:\Users\Spravce\AppData\Roaming\LastPass
2014-10-20 20:37 - 2014-10-20 20:37 - 01976320 _____ () C:\Users\Uživatel\Downloads\adwcleaner_4.000.exe
2014-10-20 20:29 - 2014-10-20 20:29 - 01243336 _____ (společnost Microsoft Corporation) C:\Users\Uživatel\Downloads\wlsetup-web(1).exe
2014-10-20 20:00 - 2014-10-20 20:02 - 00000000 ____D () C:\Users\Uživatel\AppData\Roaming\Nero
2014-10-20 17:37 - 2014-10-21 17:16 - 00887312 _____ () C:\Windows\system32\Drivers\sfi.dat
2014-10-20 17:34 - 2014-10-21 17:12 - 00000000 ____D () C:\Program Files\Comodo
2014-10-20 17:34 - 2014-10-20 17:34 - 00000000 ____D () C:\ProgramData\Adtrustmedia
2014-10-20 17:33 - 2014-10-20 17:33 - 00000000 ____D () C:\ProgramData\Comodo Downloader
2014-10-20 17:32 - 2014-10-21 17:18 - 00000000 ____D () C:\ProgramData\Comodo
2014-10-20 17:25 - 2014-10-20 17:30 - 230403216 _____ (COMODO) C:\Users\Uživatel\Downloads\cispremium_installer.exe
2014-10-20 17:19 - 2014-10-20 19:22 - 00000000 ____D () C:\Program Files\SmartPCFixer
2014-10-20 15:10 - 2014-10-20 16:28 - 00000000 ____D () C:\Windows\455F074C814E4520B69B5584BD90400C.TMP
2014-10-20 15:10 - 2014-10-20 15:10 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard
2014-10-18 21:31 - 2014-10-20 17:06 - 00000000 ____D () C:\Windows\Minidump
2014-10-18 18:40 - 2014-10-18 18:40 - 00000000 ____D () C:\Users\Uživatel\AppData\Roaming\PeerNetworking
2014-10-17 13:35 - 2014-10-17 13:36 - 01053460 _____ () C:\Users\Uživatel\Downloads\install_flashplayer15x32au_mssa_aaa_aih.exe
2014-10-15 10:47 - 2014-10-10 03:44 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-15 10:47 - 2014-10-10 03:44 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-15 10:47 - 2014-10-10 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-15 10:47 - 2014-09-29 02:41 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-15 10:46 - 2014-10-07 04:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-15 10:46 - 2014-09-26 00:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-15 10:46 - 2014-09-26 00:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-15 10:46 - 2014-09-26 00:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-15 10:46 - 2014-09-26 00:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-15 10:46 - 2014-09-26 00:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-15 10:46 - 2014-09-19 03:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-15 10:46 - 2014-09-19 03:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-15 10:46 - 2014-09-19 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-15 10:46 - 2014-09-19 03:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-15 10:46 - 2014-09-19 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-15 10:46 - 2014-09-19 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-15 10:46 - 2014-09-19 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-15 10:46 - 2014-09-19 02:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-15 10:46 - 2014-09-19 02:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-15 10:46 - 2014-09-19 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-15 10:46 - 2014-09-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-15 10:46 - 2014-09-19 02:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-15 10:46 - 2014-09-19 02:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-15 10:46 - 2014-09-19 02:50 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-15 10:46 - 2014-09-19 02:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-15 10:46 - 2014-09-19 02:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-15 10:46 - 2014-09-19 02:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-15 10:46 - 2014-09-19 02:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-15 10:46 - 2014-09-19 02:20 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-15 10:46 - 2014-09-19 02:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-15 10:46 - 2014-09-19 02:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-15 10:46 - 2014-09-19 01:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-15 10:46 - 2014-09-19 01:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-15 10:46 - 2014-09-19 01:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-15 10:46 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-15 10:46 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-15 10:46 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-15 10:46 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-15 10:45 - 2014-09-18 03:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-15 10:45 - 2014-09-13 03:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-15 10:45 - 2014-09-05 03:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-15 10:45 - 2014-08-29 03:44 - 02744320 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-15 10:45 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-15 10:45 - 2014-07-17 03:39 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-15 10:45 - 2014-07-17 03:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-15 10:45 - 2014-07-17 03:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-15 10:45 - 2014-07-17 03:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-15 10:45 - 2014-07-17 03:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-15 10:45 - 2014-07-17 03:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-15 10:45 - 2014-07-17 03:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-15 10:44 - 2014-07-07 03:40 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 03208704 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2014-10-15 10:44 - 2014-07-07 03:39 - 03970488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-10-15 10:44 - 2014-07-07 03:39 - 03914680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-10-15 10:44 - 2014-07-07 03:28 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2014-10-15 10:44 - 2014-06-28 02:21 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-10-15 10:44 - 2014-06-28 02:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-10-15 10:44 - 2014-06-28 02:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2014-10-15 10:43 - 2014-08-19 04:41 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2014-10-15 10:43 - 2014-08-19 04:41 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2014-10-15 10:43 - 2014-08-19 04:41 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2014-10-15 10:43 - 2014-08-19 04:40 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2014-10-15 10:43 - 2014-08-19 04:40 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2014-10-15 10:43 - 2014-08-19 03:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2014-10-15 10:43 - 2014-07-07 03:40 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2014-10-15 10:43 - 2014-07-07 03:40 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-10-15 10:43 - 2014-07-07 03:40 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2014-10-15 10:43 - 2014-07-07 03:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-10-15 10:43 - 2014-07-07 03:40 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2014-10-15 10:43 - 2014-07-07 03:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2014-10-15 10:43 - 2014-07-07 03:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2014-10-15 10:43 - 2014-07-07 03:39 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-10-15 10:43 - 2014-07-07 03:39 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-10-15 10:43 - 2014-07-07 03:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2014-10-15 10:43 - 2014-07-07 03:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-10-15 10:43 - 2014-07-07 03:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2014-10-08 16:01 - 2014-10-08 16:01 - 02025120 _____ () C:\Users\Uživatel\Downloads\Smlouva.pdf.zip
2014-10-02 21:35 - 2014-10-20 16:59 - 00000000 ____D () C:\Users\Uživatel\AppData\Roaming\AVAST Software
2014-10-02 21:33 - 2014-10-02 21:33 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-10-02 12:51 - 2014-10-02 12:51 - 00000017 _____ () C:\Users\Uživatel\AppData\Local\resmon.resmoncfg
2014-10-02 09:29 - 2014-10-02 09:29 - 00099263 _____ () C:\Users\Uživatel\Documents\Bez názvu (3).wma
2014-10-01 21:14 - 2014-10-01 21:14 - 00001698 _____ () C:\Windows\Tasks\THAGUQRU.job
2014-10-01 21:14 - 2014-10-01 21:14 - 00001348 _____ () C:\Windows\Tasks\MFZWJ.job
2014-10-01 21:03 - 2014-10-20 20:45 - 00000000 ____D () C:\Program Files\YTAHelper
2014-10-01 21:03 - 2014-10-20 20:42 - 00000000 ____D () C:\ProgramData\TEMP
2014-10-01 21:02 - 2014-10-01 21:02 - 00172032 _____ (Jin Hui E-mail: jinhui@jcomsoft.com Web: http://www.jcomsoft.com) C:\Windows\system32\AniGIF.ocx
2014-10-01 21:02 - 2014-10-01 21:02 - 00000000 ____D () C:\Users\Uživatel\AppData\Local\CrashRpt
2014-10-01 20:59 - 2014-10-01 20:59 - 00000000 ____D () C:\Program Files\Seznam.cz
2014-10-01 20:58 - 2014-10-20 19:35 - 00000000 ____D () C:\Users\Uživatel\AppData\Roaming\Seznam.cz
2014-10-01 20:29 - 2014-10-01 20:30 - 60840857 _____ () C:\Users\Uživatel\Downloads\uTorr(1).wmv
2014-10-01 20:29 - 2014-10-01 20:29 - 31810478 _____ () C:\Users\Uživatel\Downloads\Torrent zrychlené stahování[1](1).mp4
2014-10-01 20:05 - 2014-10-01 20:05 - 60840857 _____ () C:\Users\Uživatel\Downloads\uTorr.wmv
2014-10-01 20:05 - 2014-10-01 20:05 - 31810478 _____ () C:\Users\Uživatel\Downloads\Torrent zrychlené stahování[1].mp4
2014-10-01 15:07 - 2014-10-01 15:07 - 11249152 _____ (LastPass) C:\Program Files\Common Files\lpuninstall.exe
2014-10-01 15:07 - 2014-10-01 15:07 - 00001172 _____ () C:\Users\Public\Desktop\My LastPass Vault.lnk
2014-10-01 15:07 - 2014-10-01 15:07 - 00000000 ____D () C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
2014-10-01 15:07 - 2014-10-01 15:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
2014-10-01 15:07 - 2014-10-01 15:07 - 00000000 ____D () C:\Program Files\LastPass
2014-10-01 15:05 - 2014-10-01 15:05 - 11249152 _____ (LastPass) C:\Users\Uživatel\Downloads\lastpass.exe
2014-10-01 14:32 - 2014-10-01 14:33 - 59520167 _____ () C:\Users\Uživatel\Downloads\Úschovna.wmv
2014-10-01 14:28 - 2014-10-01 14:28 - 00220493 _____ () C:\Users\Uživatel\Documents\Bez názvu (2).wma
2014-10-01 14:03 - 2014-10-21 21:10 - 00002521 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-10-01 14:03 - 2014-10-21 21:10 - 00000000 ___RD () C:\Program Files\Skype
2014-10-01 14:03 - 2014-10-21 21:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-10-01 14:03 - 2014-10-01 14:03 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-10-01 08:42 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-09-30 16:06 - 2014-09-30 16:06 - 00000000 ____D () C:\Program Files\Analog Devices
2014-09-24 10:36 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-24 13:35 - 2010-11-20 23:01 - 01628642 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-24 13:23 - 2009-07-14 06:53 - 00032576 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-24 13:23 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-24 12:07 - 2009-07-14 06:34 - 00028944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-24 12:07 - 2009-07-14 06:34 - 00028944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-24 11:59 - 2012-04-30 20:30 - 00000000 ____D () C:\Windows\OEM
2014-10-24 01:01 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-24 00:24 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2014-10-24 00:05 - 2014-03-18 18:55 - 00000000 ____D () C:\Windows\pss
2014-10-23 02:47 - 2013-04-11 15:43 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-10-23 02:34 - 2014-03-28 09:58 - 00000000 ____D () C:\Users\Uživatel\AppData\Local\Google
2014-10-22 16:53 - 2014-03-28 09:58 - 00000000 ____D () C:\Users\Uživatel
2014-10-22 16:51 - 2014-03-31 18:35 - 00000000 ____D () C:\Users\Spravce
2014-10-21 21:12 - 2014-04-07 19:56 - 00000000 ____D () C:\Users\Uživatel\AppData\Roaming\Skype
2014-10-21 21:10 - 2013-04-12 18:45 - 00000000 ____D () C:\ProgramData\Skype
2014-10-21 17:18 - 2014-03-28 10:13 - 00000000 ____D () C:\Users\Uživatel\AppData\Local\VirtualStore
2014-10-21 17:02 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-10-21 17:00 - 2014-05-06 19:50 - 00000000 ____D () C:\Users\Uživatel\AppData\Roaming\vlc
2014-10-21 17:00 - 2014-03-21 18:10 - 00000000 ____D () C:\Windows\%LocalAppData%
2014-10-21 17:00 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-10-21 17:00 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat
2014-10-21 00:16 - 2014-03-31 18:35 - 00000000 ____D () C:\Users\Spravce\AppData\Local\Google
2014-10-20 20:43 - 2014-05-06 17:20 - 00000000 ____D () C:\AdwCleaner
2014-10-20 20:43 - 2014-03-28 09:58 - 00001099 _____ () C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-10-20 20:37 - 2013-04-12 14:11 - 00000974 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3250058756-2919187754-1548671718-1000UA.job
2014-10-20 20:32 - 2013-04-11 16:15 - 00002096 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-10-20 20:32 - 2013-04-11 16:10 - 00000944 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-20 19:55 - 2013-04-12 11:32 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-20 19:30 - 2014-09-02 16:51 - 00013464 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-10-20 19:30 - 2013-04-11 16:10 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-20 16:59 - 2009-07-14 04:04 - 00002577 _____ () C:\Windows\system32\config.nt
2014-10-20 16:37 - 2013-04-12 14:11 - 00000922 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3250058756-2919187754-1548671718-1000Core.job
2014-10-20 16:30 - 2013-06-14 18:03 - 00000000 ____D () C:\ProgramData\MFAData
2014-10-16 16:35 - 2013-06-24 10:30 - 00000000 ____D () C:\LADA
2014-10-16 11:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-10-15 18:04 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-15 17:07 - 2009-07-14 06:33 - 00408304 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-15 17:03 - 2014-05-06 16:51 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-15 12:28 - 2013-04-22 12:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-15 12:24 - 2013-08-19 19:19 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-15 12:04 - 2013-04-11 16:28 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-04 11:22 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\system32\restore
2014-10-02 14:41 - 2009-07-14 04:04 - 00000580 _____ () C:\Windows\win.ini
2014-10-02 11:04 - 2013-05-24 17:14 - 00000000 ____D () C:\léciva_uhrady
2014-10-01 15:52 - 2013-01-31 11:43 - 00035316 _____ () C:\QcOSD.txt
2014-09-30 16:02 - 2013-01-31 11:42 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-09-25 15:49 - 2014-05-06 17:37 - 00000000 ____D () C:\Users\Uživatel\AppData\Local\Windows Live

Some content of TEMP:
====================
C:\Users\Spravce\AppData\Local\Temp\UNINSTALL.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-10-16 11:14

==================== End Of Log ============================

info.txt logfile of random's system information tool 1.10 2014-10-24 13:35:27

======MBR======

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

======Uninstall list======

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{650DE870-ECA3-4E63-8D77-778512BE5D4C}" "1029" "0"
Defraggler-->"C:\Program Files\Defraggler\uninst.exe"
Google Chrome-->"C:\Program Files\Google\Chrome\Application\38.0.2125.104\Installer\setup.exe" --uninstall --multi-install --chrome --system-level
Microsoft .NET Framework 4.5.1 (CSY)-->MsiExec.exe /X{123F4E9B-80E6-3A84-BDD4-3CB3AC59ABF0}
Microsoft .NET Framework 4.5.1 (čeština)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\CSY\\Setup.exe /repair /x86 /lcid 1029
Microsoft .NET Framework 4.5.1-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\\Setup.exe /repair /x86
Microsoft .NET Framework 4.5.1-->MsiExec.exe /X{4903D172-DCCB-392F-93A3-34CA9D47FE3D}
Microsoft Office Access MUI (Czech) 2010-->MsiExec.exe /X{90140000-0015-0405-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2010-->MsiExec.exe /X{90140000-0016-0405-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2010-->MsiExec.exe /X{90140000-00BA-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2010-->MsiExec.exe /X{90140000-0044-0405-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2010-->MsiExec.exe /X{90140000-00A1-0405-0000-0000000FF1CE}
Microsoft Office Outlook Connector-->MsiExec.exe /X{95140000-007A-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2010-->MsiExec.exe /X{90140000-001A-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2010-->MsiExec.exe /X{90140000-0018-0405-0000-0000000FF1CE}
Microsoft Office Professional Plus 2010-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2010-->MsiExec.exe /X{90140000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2010-->MsiExec.exe /X{90140000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2010-->MsiExec.exe /X{90140000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2010-->MsiExec.exe /X{90140000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2010-->MsiExec.exe /X{90140000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2010-->MsiExec.exe /X{90140000-002C-0405-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Czech) 2010-->MsiExec.exe /X{90140000-0019-0405-0000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2010-->MsiExec.exe /X{90140000-006E-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2010-->MsiExec.exe /X{90140000-001B-0405-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
Mozilla Firefox 33.0 (x86 cs)-->"C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
Mozilla Maintenance Service-->"C:\Program Files\Mozilla Maintenance Service\uninstall.exe"
Security Update for Microsoft .NET Framework 4.5.1 (KB2894854v2)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {1531A92E-2552-384F-B942-06A5D18DFA13}
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {8086EDC0-3409-3560-B108-44FC46882443}
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {FED9B2BC-E6D7-3409-B4C9-99AF8AC65725}
Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {054F96E9-E89B-3DDB-AA70-A65194B921B4}
Security Update for Microsoft .NET Framework 4.5.1 (KB2972107)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {CBD8D84A-257A-3A60-9819-5DF166F9CD25}
Security Update for Microsoft .NET Framework 4.5.1 (KB2972216)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {4DC3F78D-5CCF-37B9-9A05-EDDC456F4F20}
Security Update for Microsoft .NET Framework 4.5.1 (KB2979578v2)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {1863F765-CBE8-3EB3-B434-CA6B6DF2561E}
Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{0665F3BA-FCE2-4CB1-ACDD-19544B0E4C14}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{4D6FE7B6-559F-4DAC-92CF-A01C24046AEB}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2760781) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0405-0000-0000000FF1CE}" "{A5B39813-17B0-4481-B19E-9C57C0BF1EE0}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2810073) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{1EE5FA17-F624-438C-B7AC-7C5A41E90FA2}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{7AC3F78E-ECA0-45F4-A9CC-3E885DA23662}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2880971) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{5EE42B42-1159-435C-898A-2A3298453B20}" "1029" "0"
Security Update for Microsoft Office 2010 (KB2881071) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{0BC570F0-7352-4A3A-B2A2-CA56ADA7375F}" "1029" "0"
Security Update for Microsoft Word 2010 (KB2883013) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{80CEB9D6-F98A-47DD-B41C-DD40B7561AFD}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0015-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0016-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0018-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0019-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001A-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001B-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0405-0000-0000000FF1CE}" "{A71E3AD4-5545-4D59-9F11-75F363563C6A}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0407-0000-0000000FF1CE}" "{8925227F-C7B5-4C95-AB58-4FCF2433DAEE}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0409-0000-0000000FF1CE}" "{09A9DF49-DA06-4093-A2FD-F339211E39EA}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-041B-0000-0000000FF1CE}" "{0C337AF5-E6A7-4B6B-8F8E-08F9C6F956B4}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-002C-0405-0000-0000000FF1CE}" "{EA82267F-4AAB-46BA-AD6A-9EBB544D0EF7}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0044-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-006E-0405-0000-0000000FF1CE}" "{2C911571-C8B6-400B-B323-417C1806E866}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-00A1-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-00BA-0405-0000-0000000FF1CE}" "{DAB3EE22-FB0E-401F-9418-E9F0B08AEB39}" "1029" "0"
Total Uninstall 6.7.1-->"C:\Program Files\Total Uninstall 6\unins000.exe"
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}" "1029" "0"
Update for Microsoft Excel 2010 (KB2889836) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{9179FC17-97A8-4D98-9E09-05720AF5D44E}" "1029" "0"
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{302A8FE3-EBF5-486C-A431-16A1CD914443}" "1029" "0"
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}" "1029" "0"
Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{39767ECA-1731-45DB-AB5B-6BF40E151D66}" "1029" "0"
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}" "1029" "0"
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}" "1029" "0"
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{287A1E92-9E41-4BC1-8920-B3D0E9220800}" "1029" "0"
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{9D69691D-823D-4C3E-9B12-563A3F520366}" "1029" "0"
Update for Microsoft Office 2010 (KB2687502) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0409-0000-0000000FF1CE}" "{7DE7DF97-82FE-4B3A-AB8D-1621F9CC464A}" "1029" "0"
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}" "1029" "0"
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{5AA578BB-759C-40FD-9661-A737C0884541}" "1029" "0"
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}" "1029" "0"
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{BA610006-2C39-4419-9834-CF61AB24810A}" "1029" "0"
Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}" "1029" "0"
Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{B0D672F7-883E-4279-8E75-D97A5445AB46}" "1029" "0"
Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}" "1029" "0"
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001F-0407-0000-0000000FF1CE}" "{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}" "1029" "0"
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{51CCA922-A0CC-47C4-8910-6936D97CAC2E}" "1029" "0"
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{2AB483F1-C86E-427A-83B4-23889B03512D}" "1029" "0"
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001A-0405-0000-0000000FF1CE}" "{D02AE7ED-5B00-4251-B7D5-F9590899EEEA}" "1029" "0"
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}" "1029" "0"
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0018-0405-0000-0000000FF1CE}" "{7F5448C9-AC6C-41E4-8C35-66288813014C}" "1029" "0"
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{F9F5A080-AF38-4966-9A6B-C43DCA465035}" "1029" "0"
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{7B29D8B8-6A87-496C-A65E-B935E740448A}" "1029" "0"
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{38CF30E4-3348-4BD1-A859-B630C355A56F}" "1029" "0"
Windows Driver Package - Broadcom (BTHUSB) Bluetooth (04/08/2010 6.3.5.430)-->C:\PROGRA~1\DIFX\7F01D4C0B2897E27\DPInst.exe /u C:\Windows\System32\DriverStore\FileRepository\btusbflt.inf_x86_neutral_caf93dc5cff50120\btusbflt.inf
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800)-->C:\PROGRA~1\DIFX\7F01D4C0B2897E27\DPInst.exe /u C:\Windows\System32\DriverStore\FileRepository\bcbthid32.inf_x86_neutral_6c4f31312ffe9ed6\bcbthid32.inf
Windows Live Communications Platform-->MsiExec.exe /I{41C61308-6CFD-4D54-AB6A-7136ED08A18E}
Windows Live Essentials-->C:\Program Files\Windows Live\Installer\wlarp.exe
Windows Live Essentials-->MsiExec.exe /I{9A470EA9-FF86-4C0E-992C-572BF2B9D6FF}
Windows Live Family Safety-->MsiExec.exe /I{2BC9C2FF-E0B7-40F9-B1A5-6F80663C301B}
Windows Live Family Safety-->MsiExec.exe /X{C74DCAC0-DDB3-4135-A70C-0553BF9490BC}
Windows Live ID Sign-in Assistant-->MsiExec.exe /I{8256F87F-8554-4457-8C3D-3F3324697D9F}
Windows Live Installer-->MsiExec.exe /I{659CB81C-B54E-4DF1-B618-F35777393A54}
Windows Live Mail-->MsiExec.exe /I{3EE8FA69-F2A5-4BDB-9E23-3ABB2421B4FA}
Windows Live Mail-->MsiExec.exe /I{B775C26B-EAA8-4A11-ACBF-76E52DF6B805}
Windows Live Messenger-->MsiExec.exe /X{88B9357F-0845-465F-96B9-50976FB9C6C2}
Windows Live Messenger-->MsiExec.exe /X{E703613B-BDAB-433E-A66A-DE0263E3D35D}
Windows Live MIME IFilter-->MsiExec.exe /I{286DDBD0-6355-428F-8BD5-822CF08606EC}
Windows Live Photo Common-->MsiExec.exe /X{1D6432B4-E24D-405E-A4AB-D7E6D088CBC9}
Windows Live PIMT Platform-->MsiExec.exe /I{B2611F8A-EFE7-4E88-875D-19F0EFAE87E4}
Windows Live SOXE Definitions-->MsiExec.exe /I{D1893000-EA77-493C-8DDD-E262436E959B}
Windows Live SOXE-->MsiExec.exe /I{CDC1AB00-01FF-4FC7-816A-16C67F0923C0}
Windows Live UX Platform Language Pack-->MsiExec.exe /I{E100E2B5-F2EF-4955-AB7A-C3F2125A3BCD}
Windows Live UX Platform-->MsiExec.exe /I{00F9DB8C-65D7-4D47-AB5F-F698EE38580D}
Windows Live Writer Resources-->MsiExec.exe /X{E5807449-CA84-42F6-9CE3-A0E2BDA9E24B}
Windows Live Writer-->MsiExec.exe /X{04BE4035-3C8E-4B48-BFB8-1655849C0C8B}
Windows Live Writer-->MsiExec.exe /X{124A05DC-3C47-4EEF-85CE-56D6C1CAE62B}
Windows Live Writer-->MsiExec.exe /X{714E162E-CD4F-4F1B-8302-7F5179409C25}

======System event log======

Computer Name: Uživatel-PC
Event Code: 7036
Message: Stav služby Mozilla Maintenance Service byl změněn na: Zastaveno
Record Number: 101262
Source Name: Service Control Manager
Time Written: 20140618114753.436567-000
Event Type: Informace
User:

Computer Name: Uživatel-PC
Event Code: 7036
Message: Stav služby Funkčnost aplikací byl změněn na: Spuštěno
Record Number: 101261
Source Name: Service Control Manager
Time Written: 20140618114713.352659-000
Event Type: Informace
User:

Computer Name: Uživatel-PC
Event Code: 7036
Message: Stav služby Mozilla Maintenance Service byl změněn na: Spuštěno
Record Number: 101260
Source Name: Service Control Manager
Time Written: 20140618114712.460608-000
Event Type: Informace
User:

Computer Name: Uživatel-PC
Event Code: 7036
Message: Stav služby Služba Plánovač multimédií byl změněn na: Zastaveno
Record Number: 101259
Source Name: Service Control Manager
Time Written: 20140618112952.290799-000
Event Type: Informace
User:

Computer Name: Uživatel-PC
Event Code: 7036
Message: Stav služby Hostitel diagnostického systému byl změněn na: Zastaveno
Record Number: 101258
Source Name: Service Control Manager
Time Written: 20140618111834.622649-000
Event Type: Informace
User:

=====Application event log=====

Computer Name: Uživatel-PC
Event Code: 1003
Message: Služba Ochrana softwaru dokončila kontrolu stavu licencování.
ID aplikace=55c92734-d682-4d71-983e-d6ec3f16059f
Stav licencování=
1: 01f5fc37-a99e-45c5-b65e-d762f3518ead, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
2: 2e7d060d-4714-40f2-9896-1e4f15b612ad, 1, 1 [(0 )(1 )(2 [0x00000000, 0, 0], [( 5 0xC004F009 30 0)( 5 0xC004F009 30 0)( 1 0x00000000 0 0 msft:rm/algorithm/flags/1.0 0x00000000 0)(?)(?)( 9 0x00000000 0xC004F009)])]
3: 3b965dfc-31d9-4903-886f-873a0382776c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
4: 586bc076-c93d-429a-afe5-a69fbc644e88, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
5: 5e017a8a-f3f9-4167-b1bd-ba3e236a4d8f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
6: 5e35dc43-389b-47c5-b889-2088b06738cb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
7: 6a7d5d8a-92af-4e6a-af4b-8fddaec800e5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
8: 9ab82e0c-ffc9-4107-baa1-c65a8bd3ccc3, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
9: 9f83d90f-a151-4665-ae69-30b3f63ec659, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
10: a63275f4-530c-48a7-b0d3-4f00d688d151, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
11: b8a4bb91-69b1-460d-93f8-40e0670af04a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
12: d2c04e90-c3dd-4260-b0f3-f845f5d27d64, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
13: e68b141f-4dfa-4387-b3b7-e65c4889216e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
14: ee4e1629-bcdc-4b42-a68f-b92e135f78d7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
15: 4a8149bb-7d61-49f4-8822-82c7bf88d64b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
16: afd5f68f-b70f-4000-a21d-28dbc8be8b07, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

Record Number: 544
Source Name: Microsoft-Windows-Security-SPP
Time Written: 20130403091001.000000-000
Event Type: Informace
User:

Computer Name: WIN-9F78VTD9RAE
Event Code: 1532
Message: Služba Profil uživatele byla zastavena.

Record Number: 543
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20130218134142.162292-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: WIN-9F78VTD9RAE
Event Code: 1003
Message: Služba Windows Search byla spuštěna.

Record Number: 542
Source Name: Microsoft-Windows-Search
Time Written: 20130218134139.000000-000
Event Type: Informace
User:

Computer Name: WIN-9F78VTD9RAE
Event Code: 1013
Message: Služba Windows Search byla řádně zastavena.

Record Number: 541
Source Name: Microsoft-Windows-Search
Time Written: 20130218134139.000000-000
Event Type: Informace
User:

Computer Name: WIN-9F78VTD9RAE
Event Code: 103
Message: Windows (2872) Windows: Databázový stroj zastavil instanci (0).
Record Number: 540
Source Name: ESENT
Time Written: 20130218134139.000000-000
Event Type: Informace
User:

=====Security event log=====

Computer Name: Uživatel-PC
Event Code: 5061
Message: Kryptografická operace.

Předmět:
ID zabezpečení: S-1-5-19
Název účtu: LOCAL SERVICE
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e5

Kryptografické parametry:
Název poskytovatele: Microsoft Software Key Storage Provider
Název algoritmu: RSA
Název klíče: 4c5145d7-86a3-48b0-aa6a-1d3e0436f4fb
Typ klíče: Klíč počítače

Kryptografická operace:
Operace: Otevřít klíč
Návratový kód: 0x0
Record Number: 20711
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140303193816.126170-000
Event Type: Úspěšný audit
User:

Computer Name: Uživatel-PC
Event Code: 5058
Message: Operace se souborem klíče.

Předmět:
ID zabezpečení: S-1-5-19
Název účtu: LOCAL SERVICE
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e5

Kryptografické parametry:
Název poskytovatele: Microsoft Software Key Storage Provider
Název algoritmu: Není k dispozici.
Název klíče: 4c5145d7-86a3-48b0-aa6a-1d3e0436f4fb
Typ klíče: Klíč počítače

Informace o operaci se souborem klíče:
Cesta k souboru: C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ef1b3d277aadb47436314ebed46cd8cf_31cf8020-75ba-4ea4-8d1a-be411f60f2a6
Operace: Čtení trvalého klíče ze souboru
Návratový kód: 0x0
Record Number: 20710
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140303193816.126170-000
Event Type: Úspěšný audit
User:

Computer Name: Uživatel-PC
Event Code: 6281
Message: Integrita kódu určila, že hodnoty hash stránky souboru bitové kopie nejsou platné. Soubor může být bez hodnot hash stránky nesprávně podepsán nebo poškozen z důvodu neoprávněné změny. Neplatné hodnoty hash mohou ukazovat na potenciální chybu diskového zařízení.

Název souboru: \Device\HarddiskVolume2\Windows\System32\AEADIAPR.dll
Record Number: 20709
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140303193759.741233-000
Event Type: Neúspěšný audit
User:

Computer Name: Uživatel-PC
Event Code: 6281
Message: Integrita kódu určila, že hodnoty hash stránky souboru bitové kopie nejsou platné. Soubor může být bez hodnot hash stránky nesprávně podepsán nebo poškozen z důvodu neoprávněné změny. Neplatné hodnoty hash mohou ukazovat na potenciální chybu diskového zařízení.

Název souboru: \Device\HarddiskVolume2\Windows\System32\AEADIAPR.dll
Record Number: 20708
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140303193757.495105-000
Event Type: Neúspěšný audit
User:

Computer Name: Uživatel-PC
Event Code: 5061
Message: Kryptografická operace.

Předmět:
ID zabezpečení: S-1-5-19
Název účtu: LOCAL SERVICE
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e5

Kryptografické parametry:
Název poskytovatele: Microsoft Software Key Storage Provider
Název algoritmu: RSA
Název klíče: 4c5145d7-86a3-48b0-aa6a-1d3e0436f4fb
Typ klíče: Klíč počítače

Kryptografická operace:
Operace: Otevřít klíč
Návratový kód: 0x0
Record Number: 20707
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140303193718.125853-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\Program Files\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\ThinkPad\Bluetooth Software\;C:\Program Files\Windows Live\Shared
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 14 Stepping 8, GenuineIntel
"PROCESSOR_REVISION"=0e08
"windows_tracing_logfile"=C:\BVTBin\Tests\installpackage\csilogfile.log
"windows_tracing_flags"=3
"configsetroot"=%SystemRoot%\ConfigSetRoot
"TVT"=C:\Program Files\Lenovo
"TSMPATH"=C:\Program Files\ThinkPad\UltraNav Utility

-----------------EOF-----------------

Zdravim

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

Pokud ho havet blokuje, pouzijte jeden z nasledujicich - i ty prejmenovane
Rkill EXE:
http://download.bleepingcomputer.com/grinler/rkill.exe

Rkill iExplore.exe:
http://download.bleepingcomputer.com/gr ... xplore.exe

Rkill uSeRiNiT.exe:
http://download.bleepingcomputer.com/gr ... eRiNiT.exe

Rkill WiNlOgOn.exe:
http://download.bleepingcomputer.com/gr ... NlOgOn.exe
Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
Spustte tradicne dvojklikem - program probehne do par sekund a ukonci i svou cinnost
RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
Na plose vznikne log Rkill.txt ten mi sem vlozte
Ted nerestartujte PC - prisli byste o ucinek RKillu

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK

Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
Pokud mate Win XP spustte pod uctem Spravce\Administratora
Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

Rkill 2.6.8 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2014 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 10/24/2014 08:40:05 PM in x86 mode.
Windows Version: Windows 7 Home Premium Service Pack 1

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Active Proxy Server Detected

* Proxy Disabled.
* ProxyOverride value deleted.
* ProxyServer value deleted.
* AutoConfigURL value deleted.
* Proxy settings were backed up to Registry file.

Checking Registry for malware related settings:

* No issues found in the Registry.

Backup Registry file created at:
C:\Users\Uživatel\Desktop\rkill\rkill-10-24-2014-08-40-09.reg

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* Windows Firewall Disabled

[HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = dword:00000000

Checking Windows Service Integrity:

* Windows Update (wuauserv) is not Running.
Startup Type set to: Automatic (Delayed Start)

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* No issues found.

Program finished at: 10/24/2014 08:42:15 PM
Execution time: 0 hours(s), 2 minute(s), and 9 seconds(s)

ComboFix 14-10-24.01 - Uživatel 24.10.2014 20:52:16.1.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.2550.1539 [GMT 2:00]
Spuštěný z: E:\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Uživatel\AppData\Local\MSGBOX.EXE
c:\windows\PFRO.log
c:\windows\system32\Packet.dll
c:\windows\system32\wpcap.dll
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_NPF
-------\Legacy_SPDRIVER_1.37.0.1323
-------\Service_SPDRIVER_1.37.0.1323
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-09-24 do 2014-10-24 )))))))))))))))))))))))))))))))
.
.
2014-10-24 18:59 . 2014-10-24 19:03 -------- d-----w- c:\users\Uživatel\AppData\Local\temp
2014-10-24 18:59 . 2014-10-24 18:59 -------- d-----w- c:\users\TEMP\AppData\Local\temp
2014-10-24 12:06 . 2014-10-24 12:07 -------- d-----w- C:\FRST
2014-10-24 11:37 . 2014-10-24 11:37 62576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{77D862FB-FD33-4610-8258-FCE1D57A3D58}\offreg.dll
2014-10-24 11:35 . 2014-10-24 11:35 -------- d-----w- C:\rsit
2014-10-24 11:35 . 2014-10-24 11:35 -------- d-----w- c:\program files\trend micro
2014-10-24 10:04 . 2014-10-24 10:32 -------- d-----w- c:\users\Uživatel\AppData\Local\Microsoft Games
2014-10-23 16:14 . 2014-10-23 16:14 -------- d-----w- c:\users\Uživatel\AppData\Local\NETGEARGenie
2014-10-23 16:14 . 2014-10-23 16:14 35088 ----a-w- c:\windows\system32\drivers\npf.sys
2014-10-23 16:13 . 2014-10-23 17:43 -------- d-----w- c:\program files\NETGEAR Genie
2014-10-23 00:16 . 2014-10-23 00:16 -------- d-----w- c:\programdata\Martau
2014-10-23 00:16 . 2014-10-23 00:16 -------- d-----w- c:\program files\Total Uninstall 6
2014-10-22 22:47 . 2014-10-22 22:47 -------- d-----w- c:\program files\Defraggler
2014-10-22 19:13 . 2014-10-22 19:13 -------- d-----w- c:\users\Uživatel\AppData\Local\Microsoft_Corporation
2014-10-20 22:16 . 2014-10-20 22:16 -------- d-----w- c:\users\Spravce\AppData\Roaming\LastPass
2014-10-20 18:00 . 2014-10-20 18:02 -------- d-----w- c:\users\Uživatel\AppData\Roaming\Nero
2014-10-20 15:37 . 2014-10-21 15:16 887312 ----a-w- c:\windows\system32\drivers\sfi.dat
2014-10-20 15:34 . 2014-10-20 15:34 -------- d-----w- c:\programdata\Adtrustmedia
2014-10-20 15:34 . 2014-10-21 15:12 -------- d-----w- c:\program files\Comodo
2014-10-20 15:33 . 2014-10-20 15:33 -------- d-----w- c:\programdata\Comodo Downloader
2014-10-20 15:32 . 2014-10-21 15:18 -------- d-----w- c:\programdata\Comodo
2014-10-20 15:19 . 2014-10-20 17:22 -------- d-----w- c:\program files\SmartPCFixer
2014-10-20 13:10 . 2014-10-20 14:28 -------- d-----w- c:\windows\455F074C814E4520B69B5584BD90400C.TMP
2014-10-20 13:10 . 2014-10-20 13:10 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2014-10-18 16:40 . 2014-10-18 16:40 -------- d-----w- c:\users\Uživatel\AppData\Roaming\PeerNetworking
2014-10-17 11:06 . 2014-09-09 01:24 8806800 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{77D862FB-FD33-4610-8258-FCE1D57A3D58}\mpengine.dll
2014-10-15 08:47 . 2014-09-29 00:41 2379264 ----a-w- c:\windows\system32\win32k.sys
2014-10-15 08:47 . 2014-10-10 01:44 230912 ----a-w- c:\windows\system32\generaltel.dll
2014-10-15 08:47 . 2014-10-10 01:44 396288 ----a-w- c:\windows\system32\aepdu.dll
2014-10-15 08:47 . 2014-10-10 01:39 302592 ----a-w- c:\windows\system32\aeinv.dll
2014-10-15 08:45 . 2014-08-29 01:44 2744320 ----a-w- c:\windows\system32\rdpcorets.dll
2014-10-15 08:45 . 2014-09-05 01:52 5703168 ----a-w- c:\windows\system32\mstscax.dll
2014-10-15 08:45 . 2014-09-13 01:40 67072 ----a-w- c:\windows\system32\packager.dll
2014-10-15 08:45 . 2014-09-18 01:32 2363904 ----a-w- c:\windows\system32\msi.dll
2014-10-15 08:45 . 2014-07-17 01:39 523264 ----a-w- c:\windows\system32\termsrv.dll
2014-10-15 08:45 . 2014-07-17 01:40 157696 ----a-w- c:\windows\system32\winsta.dll
2014-10-15 08:45 . 2014-07-17 01:39 304128 ----a-w- c:\windows\system32\winlogon.exe
2014-10-15 08:45 . 2014-07-17 01:39 130048 ----a-w- c:\windows\system32\rdpcorekmts.dll
2014-10-15 08:45 . 2014-07-17 01:03 184320 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2014-10-15 08:45 . 2014-07-17 01:39 65536 ----a-w- c:\windows\system32\TSpkg.dll
2014-10-15 08:45 . 2014-07-17 01:39 17408 ----a-w- c:\windows\system32\credssp.dll
2014-10-15 08:45 . 2014-07-17 01:02 31232 ----a-w- c:\windows\system32\drivers\tssecsrv.sys
2014-10-15 08:43 . 2014-07-07 01:40 504320 ----a-w- c:\windows\system32\msscp.dll
2014-10-02 19:35 . 2014-10-20 14:59 -------- d-----w- c:\users\Uživatel\AppData\Roaming\AVAST Software
2014-10-02 19:33 . 2014-10-02 19:33 24184 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2014-10-01 19:03 . 2014-10-20 18:45 -------- d-----w- c:\program files\YTAHelper
2014-10-01 19:02 . 2014-10-01 19:02 172032 ----a-w- c:\windows\system32\AniGIF.ocx
2014-10-01 19:02 . 2014-10-01 19:03 -------- d-----w- c:\users\Uživatel\AppData\Local\Installer
2014-10-01 19:02 . 2014-10-01 19:02 -------- d-----w- c:\users\Uživatel\AppData\Local\CrashRpt
2014-10-01 18:59 . 2014-10-01 18:59 -------- d-----w- c:\program files\Seznam.cz
2014-10-01 18:58 . 2014-10-20 17:35 -------- d-----w- c:\users\Uživatel\AppData\Roaming\Seznam.cz
2014-10-01 13:07 . 2014-10-01 13:07 11249152 ----a-w- c:\program files\Common Files\lpuninstall.exe
2014-10-01 13:07 . 2014-10-01 13:07 -------- d-----w- c:\program files\LastPass
2014-10-01 12:03 . 2014-10-01 12:03 -------- d-----w- c:\program files\Common Files\Skype
2014-10-01 12:03 . 2014-10-21 19:10 -------- d-----r- c:\program files\Skype
2014-10-01 06:42 . 2014-09-25 01:40 519680 ----a-w- c:\windows\system32\qdvd.dll
2014-09-30 14:06 . 2014-09-30 14:06 -------- d-----w- c:\program files\Analog Devices
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-10-20 17:30 . 2014-09-02 14:51 13464 ----a-w- c:\windows\system32\drivers\SWDUMon.sys
2014-09-15 07:06 . 2013-01-31 09:24 231568 ------w- c:\windows\system32\MpSigStub.exe
2014-09-10 17:55 . 2013-04-12 09:32 701104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-09-10 17:55 . 2013-04-12 09:32 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-09-09 21:47 . 2014-09-24 08:36 2048 ----a-w- c:\windows\system32\tzres.dll
2014-09-02 13:05 . 2012-07-17 12:37 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-08-23 01:46 . 2014-08-28 09:02 305152 ----a-w- c:\windows\system32\gdi32.dll
2014-08-01 11:35 . 2014-09-10 10:29 793600 ----a-w- c:\windows\system32\TSWorkspace.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-05-06 15:38 223432 ----a-w- c:\users\Uživatel\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-05-06 15:38 223432 ----a-w- c:\users\Uživatel\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-05-06 15:38 223432 ----a-w- c:\users\Uživatel\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2014-08-08 08:34 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2014-08-08 08:34 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2014-08-08 08:34 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2014-08-08 08:34 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2014-08-08 08:34 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2014-08-08 08:34 579400 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Twoo"="c:\users\Uživatel\AppData\Roaming\Massive Media\Twoo.exe" [2013-10-03 10476000]
"cz.seznam.software.szndesktop"="c:\users\Uživatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" [2013-04-12 92664]
"cz.seznam.software.autoupdate"="c:\users\Uživatel\AppData\Roaming\Seznam.cz\szninstall.exe" [2013-05-16 1062472]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TpShocks"="TpShocks.exe" [2012-09-20 186248]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2009-05-18 1314816]
"seznam-listicka-distribuce"="c:\program files\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
"PWMTRV"="c:\progra~1\ThinkPad\UTILIT~1\PWMTR32V.DLL" [2012-09-24 4446784]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-08-06 150552]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-08-06 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-08-06 173592]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-08-21 959176]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart 0"="c:\windows\System32\ctfmon.exe" [2009-07-14 8704]
.
c:\users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - c:\program files\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\ThinkPad\Bluetooth Software\BTTray.exe [2011-1-24 804128]
Install LastPass FF RunOnce.lnk - c:\program files\Common Files\lpuninstall.exe -q -name=LastPass -ffuuid support@lastpass.com [2014-10-1 11249152]
Install LastPass IE RunOnce.lnk - c:\program files\Common Files\lpuninstall.exe -p -name=LastPass -ffuuid support@lastpass.com [2014-10-1 11249152]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\LENOVO\HOTKEY\MICMUTE.exe [2011-07-12 101736]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2014-04-03 315008]
R3 aswTap;avast! SecureLine TAP Adapter v3;c:\windows\system32\DRIVERS\aswTap.sys [2013-11-22 38472]
R3 DozeSvc;Lenovo Doze Mode Service;c:\program files\ThinkPad\Utilities\DOZESVC.EXE [2012-09-24 280640]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-09-19 108032]
R3 Power Manager DBC Service;Power Manager DBC Service;c:\program files\ThinkPad\Utilities\PWMDBSVC.EXE [2012-09-24 1666112]
R3 PwmEWSvc;Cisco EnergyWise Enabler;c:\program files\ThinkPad\Utilities\PWMEWSVC.EXE [2012-09-24 1665088]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
R3 SWDUMon;SWDUMon;c:\windows\system32\DRIVERS\SWDUMon.sys [2014-10-20 13464]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-04-09 1343400]
S0 DozeHDD;DozeHDD;c:\windows\System32\DRIVERS\DozeHDD.sys [2012-09-24 25416]
S0 TPDIGIMN;TPDIGIMN;c:\windows\System32\DRIVERS\ApsHM86.sys [2012-09-06 20328]
S1 lenovo.smi;Lenovo System Interface Driver;c:\windows\system32\DRIVERS\smiif32.sys [2010-09-07 13680]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [2014-10-02 24184]
S2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll;c:\program files\LENOVO\VIRTSCRL\lvvsst.exe [2011-07-12 127336]
S2 TPHKLOAD;Lenovo Hotkey Client Loader;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe [2011-07-12 131432]
S2 TPHKSVC;On Screen Display;c:\program files\LENOVO\HOTKEY\TPHKSVC.exe [2011-07-12 142696]
S3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2010-04-08 45736]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-10-20 18:22 1089352 ----a-w- c:\program files\Google\Chrome\Application\38.0.2125.104\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-10-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-12 17:55]
.
2014-10-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-04-11 14:10]
.
2014-10-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-04-11 14:10]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/?clid=13415
mStart Page = hxxp://www.google.com
IE: LastPass - file://c:\users\Uživatel\AppData\LocalLow\LastPass\context.html?cmd=lastpass
IE: LastPass Vyplňování formulářů - file://c:\users\Uživatel\AppData\LocalLow\LastPass\context.html?cmd=fillforms
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\ThinkPad\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\dfp0giax.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.seznam.cz/?logged=1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKCU-Run-GoobzoYouTubeAccelerator - c:\program files\YouTube Accelerator\YouTubeAccelerator.exe
HKLM-Run-PrivDogService - c:\program files\AdTrustMedia\PrivDog\1.8.0.15\trustedadssvc.exe
HKLM-Run-CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82} - c:\programdata\cis5AC.exe
HKLM-Run-CIS_{15198508-521A-4D69-8E5B-B94A6CCFF805} - c:\programdata\cis895A.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(1248)
c:\program files\ThinkPad\Bluetooth Software\btncopy.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\ibmpmsvc.exe
c:\windows\System32\WUDFHost.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\system32\AEADISRV.EXE
c:\program files\ThinkPad\Bluetooth Software\btwdins.exe
c:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\windows\system32\DRIVERS\xaudio.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\progra~1\LENOVO\VIRTSCRL\virtscrl.exe
c:\windows\system32\taskhost.exe
c:\program files\LENOVO\HOTKEY\tposdsvc.exe
c:\program files\Lenovo\HOTKEY\TPONSCR.exe
c:\program files\Lenovo\Zoom\TpScrex.exe
c:\program files\Synaptics\SynTP\SynTPEnh.exe
c:\windows\System32\WUDFHost.exe
c:\windows\servicing\TrustedInstaller.exe
c:\program files\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
c:\windows\system32\conhost.exe
c:\program files\Synaptics\SynTP\SynTPLpr.exe
c:\windows\system32\sppsvc.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\DllHost.exe
.
**************************************************************************
.
Celkový čas: 2014-10-24 21:09:17 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-10-24 19:09
.
Před spuštěním: Volných bajtů: 21 613 064 192
Po spuštění: Volných bajtů: 20 973 150 208
.
- - End Of File - - 80466328CEA352014353BA6ECFA2BFC6
A36C5E4F47E84449FF07ED3517B43A31

Děkuji mnohokrát a omlouvám se, že jsem se ozval až nyní. Já poslušně čekal na případné další pokyny a tak jsem funkčnost vyzkoušel až teď. Vypadá to, že vše funguje. Ještě jednou VELKÉ DÍK

Jeste tam udelame drobne opravy

Odinstalujte Combofix

Prejmenujte ComboFix na Uninstall
Spustte jej
Tohle smaze Combofix a jeho slozky

Dejte novy log z FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-10-2014
Ran by Uživatel (administrator) on UZIVATEL-PC on 25-10-2014 10:41:47
Running from F:\
Loaded Profile: Uživatel (Available profiles: Uživatel & Spravce)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Comodo Security Solutions, Inc.) C:\Program Files\Common Files\COMODO\launcher_service.exe
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\cmdagent.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
() C:\Program Files\Comodo\Dragon\dragon_updater.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Comodo Security Solutions, Inc.) C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\cavwp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ZOOM\TpScrex.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Comodo Security Solutions, Inc.) C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\CisTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\cis.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTStackServer.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
(Comodo Security Solutions, Inc.) C:\Program Files\Comodo\GeekBuddy\unit_manager.exe
(Comodo Security Solutions, Inc.) C:\Program Files\Comodo\GeekBuddy\unit.exe
(Microsoft Corporation) C:\32788R22FWJFW\cmd.3XE

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [186248 2012-09-20] (Lenovo.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [SoundMAXPnP] => C:\Program Files\Analog Devices\Core\smax4pnp.exe [1314816 2009-05-18] (Analog Devices, Inc.)
HKLM\...\Run: [PWMTRV] => rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWMTR32V.DLL,PwrMgrBkGndMonitor
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [tvncontrol] => C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-02-27] (Comodo Security Solutions, Inc.)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1225944 2014-03-25] (COMODO)
HKU\S-1-5-21-3250058756-2919187754-1548671718-1000\...\Run: [Twoo] => "C:\Users\U~ivatel\AppData\Roaming\Massive Media\Twoo.exe"
HKU\S-1-5-21-3250058756-2919187754-1548671718-1000\...\Run: [cz.seznam.software.szndesktop] => "C:\Users\U~ivatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
HKU\S-1-5-21-3250058756-2919187754-1548671718-1000\...\Run: [cz.seznam.software.autoupdate] => "C:\Users\U~ivatel\AppData\Roaming\Seznam.cz\szninstall.exe" -c
HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Windows\System32\ctfmon.exe ctfmon.exe
HKU\S-1-5-18\...\MountPoints2: D - D:\setup.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass FF RunOnce.lnk
ShortcutTarget: Install LastPass FF RunOnce.lnk -> C:\Program Files\Common Files\lpuninstall.exe (LastPass)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files\Common Files\lpuninstall.exe (LastPass)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk
ShortcutTarget: Start GeekBuddy.lnk -> C:\Program Files\Comodo\GeekBuddy\launcher.exe (Comodo Security Solutions, Inc.)
Startup: C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [GDriveBlacklistedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedEditOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedViewOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncingOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
SearchScopes: HKCU - {13263606-F809-44EF-B511-F5E44B66D891} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13415
SearchScopes: HKCU - {2455DD80-407F-461A-ACE9-6BB9330959FB} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_13415
SearchScopes: HKCU - {3A7937BE-D583-4610-8D11-7B3EAE6678C9} URL = http://encyklopedie.seznam.cz/search?q= ... arch_13415
SearchScopes: HKCU - {552CD365-565B-43F7-8DB9-73F95AE463CD} URL = http://search.seznam.cz/?q={searchTerms ... arch_13415
SearchScopes: HKCU - {5E6D54ED-1319-41C7-B6B3-71CEFEDB9C61} URL = http://www.mapy.cz/?query={searchTerms} ... arch_13415
SearchScopes: HKCU - {7E61B005-0656-4120-B623-E59FD75E3517} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13415
SearchScopes: HKCU - {85F89050-4B32-4DB8-81ED-8A8DCD112494} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
SearchScopes: HKCU - {EB4D188E-9804-4483-9A74-C69DDF28D63F} URL = http://www.novinky.cz/hledej?w={searchT ... arch_13415
SearchScopes: HKCU - {F2632338-4E03-4EB2-A794-BEB4FA5D3032} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_13415
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files\LastPass\LPToolbar.dll (LastPass)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files\LastPass\LPToolbar.dll (LastPass)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\dfp0giax.default
FF Homepage: https://www.seznam.cz/?logged=1
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: S3.Google Translator - C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\dfp0giax.default\Extensions\s3google@translator.xpi [2014-10-20]
FF Extension: Speed Dial - C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\dfp0giax.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2014-10-20]
FF Extension: Adblock Plus - C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\dfp0giax.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-24]
FF Extension: Tab Mix Plus - C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\dfp0giax.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2014-10-24]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Profile: C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-31]
CHR Extension: (Disk Google) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-31]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2014-10-01]
CHR Extension: (YouTube) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-31]
CHR Extension: (Vyhledávání Google) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-31]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-10-01]
CHR Extension: (Peněženka Google) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-01]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2014-10-01]
CHR Extension: (Gmail) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-31]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx []

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 CLPSLauncher; C:\Program Files\Common Files\COMODO\launcher_service.exe [70352 2014-02-27] (Comodo Security Solutions, Inc.)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5306504 2014-04-16] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [1663192 2014-03-25] (COMODO)
R2 DragonUpdater; C:\Program Files\Comodo\Dragon\dragon_updater.exe [2135232 2014-05-21] ()
R2 GeekBuddyRSP; C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-02-27] (Comodo Security Solutions, Inc.)
S2 LENOVO.MICMUTE; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [101736 2011-07-12] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [127336 2011-07-12] (Lenovo Group Limited)
S3 PwmEWSvc; C:\Program Files\ThinkPad\Utilities\PWMEWSVC.EXE [1665088 2012-09-24] (Lenovo Group Limited)
S3 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
S3 SystemExplorerHelpService; C:\Program Files\System Explorer\service\SystemExplorerService.exe [567144 2014-08-13] (Mister Group)
R2 TPHKLOAD; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [131432 2011-07-12] (Lenovo Group Limited)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-10-02] ()
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [38472 2013-11-22] (The OpenVPN Project)
R1 CFRMD; C:\Windows\System32\DRIVERS\CFRMD.sys [35064 2014-06-26] (Windows (R) Win 7 DDK provider)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [20072 2014-04-16] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [607168 2014-04-16] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [43728 2014-04-16] (COMODO)
R3 e1express; C:\Windows\System32\DRIVERS\e1e6232.sys [231640 2011-08-23] (Intel Corporation)
R1 HMD; C:\Windows\System32\DRIVERS\hmd.sys [15400 2014-06-26] ()
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [92656 2014-04-16] (COMODO)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13464 2014-10-20] ()
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\UIVATE~1\AppData\Local\Temp\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
U1 StarOpen; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-25 10:38 - 2014-10-25 10:42 - 00000000 ___SD () C:\32788R22FWJFW
2014-10-25 02:45 - 2014-10-25 02:49 - 00000000 ____D () C:\Users\Uživatel\TapinRadio
2014-10-25 02:45 - 2014-10-25 02:45 - 00000960 _____ () C:\Users\Uživatel\Desktop\TapinRadio.lnk
2014-10-25 02:45 - 2014-10-25 02:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TapinRadio
2014-10-25 02:45 - 2014-10-25 02:45 - 00000000 ____D () C:\Program Files\TapinRadio
2014-10-25 02:43 - 2014-10-25 02:43 - 10464363 _____ (Raimersoft ) C:\Users\Uživatel\Downloads\tapinradio_setup.exe
2014-10-25 02:37 - 2014-10-25 10:34 - 00000112 _____ () C:\Windows\setupact.log
2014-10-25 02:37 - 2014-10-25 02:37 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-25 02:19 - 2014-10-25 02:23 - 00000000 ____D () C:\ProgramData\SystemExplorer
2014-10-25 02:19 - 2014-10-25 02:19 - 02097120 _____ (Mister Group ) C:\Users\Uživatel\Downloads\SystemExplorerSetup_594.exe
2014-10-25 02:19 - 2014-10-25 02:19 - 00001015 _____ () C:\Users\Public\Desktop\System Explorer.lnk
2014-10-25 02:19 - 2014-10-25 02:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Explorer
2014-10-25 02:19 - 2014-10-25 02:19 - 00000000 ____D () C:\Program Files\System Explorer
2014-10-25 02:10 - 2014-10-25 02:10 - 00001189 _____ () C:\Users\Public\Desktop\Ashampoo Photo Optimizer FREE.lnk
2014-10-25 02:10 - 2014-10-25 02:10 - 00000000 ____D () C:\Users\Uživatel\AppData\Local\Ashampoo Photo Optimizer
2014-10-25 02:10 - 2014-10-25 02:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2014-10-25 02:10 - 2014-10-25 02:10 - 00000000 ____D () C:\Program Files\Ashampoo
2014-10-25 02:09 - 2014-10-25 02:09 - 10431416 _____ (ashampoo GmbH & Co. KG ) C:\Users\Uživatel\Downloads\ashampoo_photo_optimizer_free_120_5023.exe
2014-10-25 01:56 - 2014-10-25 01:56 - 00001287 _____ () C:\Users\Uživatel\Desktop\Photo Gallery.lnk
2014-10-25 01:04 - 2014-10-25 01:10 - 00000000 ____D () C:\Program Files\Cheat Engine 6.4
2014-10-25 01:04 - 2014-10-25 01:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2014-10-25 00:38 - 2014-10-25 01:22 - 00001162 _____ () C:\Users\Uživatel\Desktop\µTorrent.lnk
2014-10-25 00:38 - 2014-10-25 00:46 - 00000000 ____D () C:\Users\Uživatel\AppData\Roaming\uTorrent
2014-10-25 00:38 - 2014-10-25 00:38 - 00000000 ____D () C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2014-10-25 00:37 - 2014-10-25 00:38 - 01939048 _____ (emc) C:\Users\Uživatel\Downloads\uTorrent221.exe
2014-10-25 00:31 - 2014-10-25 02:36 - 00019506 _____ () C:\Windows\system32\Drivers\fvstore.dat
2014-10-25 00:31 - 2014-10-25 00:31 - 00000000 ___HD () C:\VTRoot
2014-10-25 00:19 - 2014-10-25 00:19 - 00017642 _____ () C:\Users\Uživatel\Documents\CisReport_x86_v7.0.317799.4142_20141025-001905.zip
2014-10-25 00:00 - 2014-10-25 00:00 - 00001888 _____ () C:\Users\Public\Desktop\COMODO Internet Security.lnk
2014-10-24 23:55 - 2014-10-25 00:00 - 00000000 ___SD () C:\ProgramData\Shared Space
2014-10-24 23:54 - 2014-10-25 00:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2014-10-24 23:54 - 2014-10-24 23:54 - 00001980 _____ () C:\Users\Public\Desktop\GeekBuddy.lnk
2014-10-24 23:54 - 2014-10-24 23:54 - 00001045 _____ () C:\Users\Public\Desktop\Comodo Dragon.lnk
2014-10-24 23:54 - 2014-10-24 23:54 - 00000000 ____D () C:\Program Files\Common Files\COMODO
2014-10-24 23:53 - 2014-10-24 23:56 - 00000000 ____D () C:\Program Files\Comodo
2014-10-24 23:53 - 2014-10-24 23:53 - 00048392 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2014-10-24 23:47 - 2014-10-24 23:50 - 218252480 _____ (COMODO) C:\Users\Uživatel\Downloads\cispremium_installer_5997_92.exe
2014-10-24 21:09 - 2014-10-24 21:09 - 00019838 _____ () C:\ComboFix.txt
2014-10-24 20:49 - 2014-10-24 21:09 - 00000000 ____D () C:\Qoobox
2014-10-24 20:49 - 2014-10-24 21:09 - 00000000 ____D () C:\ComboFix
2014-10-24 20:49 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-10-24 20:49 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-10-24 20:49 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-10-24 20:49 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-10-24 20:49 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-10-24 20:49 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-10-24 20:49 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-10-24 20:49 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-10-24 20:48 - 2014-10-24 21:08 - 00000000 ____D () C:\Windows\erdnt
2014-10-24 20:40 - 2014-10-24 20:42 - 00003094 _____ () C:\Users\Uživatel\Desktop\Rkill.txt
2014-10-24 20:40 - 2014-10-24 20:40 - 00000000 ____D () C:\Users\Uživatel\Desktop\rkill
2014-10-24 14:06 - 2014-10-25 10:42 - 00000000 ____D () C:\FRST
2014-10-24 13:35 - 2014-10-24 13:35 - 00000000 ____D () C:\rsit
2014-10-24 13:35 - 2014-10-24 13:35 - 00000000 ____D () C:\Program Files\trend micro
2014-10-24 12:04 - 2014-10-24 12:32 - 00000000 ____D () C:\Users\Uživatel\AppData\Local\Microsoft Games
2014-10-23 22:03 - 2014-10-25 10:35 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-10-23 18:14 - 2014-10-23 18:14 - 00035088 _____ (CACE Technologies, Inc.) C:\Windows\system32\Drivers\npf.sys
2014-10-23 18:14 - 2014-10-23 18:14 - 00000000 ____D () C:\Users\Uživatel\AppData\Local\NETGEARGenie
2014-10-23 18:13 - 2014-10-23 19:43 - 00000000 ____D () C:\Program Files\NETGEAR Genie
2014-10-23 15:02 - 2014-10-23 15:02 - 00008192 _____ () C:\Users\Uživatel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-10-23 14:30 - 2014-10-25 10:42 - 00083185 _____ () C:\Windows\WindowsUpdate.log
2014-10-23 02:44 - 2014-10-23 02:44 - 00001088 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-10-23 02:44 - 2014-10-23 02:44 - 00001076 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-10-23 02:44 - 2014-10-23 02:44 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-10-23 02:16 - 2014-10-23 02:16 - 00000975 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Uninstall 6.lnk
2014-10-23 02:16 - 2014-10-23 02:16 - 00000963 _____ () C:\Users\Public\Desktop\Total Uninstall 6.lnk
2014-10-23 02:16 - 2014-10-23 02:16 - 00000000 ____D () C:\ProgramData\Martau
2014-10-23 02:16 - 2014-10-23 02:16 - 00000000 ____D () C:\Program Files\Total Uninstall 6
2014-10-23 00:47 - 2014-10-23 00:47 - 00001834 _____ () C:\Users\Public\Desktop\Defraggler.lnk
2014-10-23 00:47 - 2014-10-23 00:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
2014-10-23 00:47 - 2014-10-23 00:47 - 00000000 ____D () C:\Program Files\Defraggler
2014-10-22 21:13 - 2014-10-22 21:13 - 00000000 ____D () C:\Users\Uživatel\AppData\Local\Microsoft_Corporation
2014-10-22 16:23 - 2014-10-22 16:23 - 00000000 ____H () C:\Users\Uživatel\Documents\Default.rdp
2014-10-22 11:19 - 2014-10-22 11:19 - 00077359 _____ () C:\Users\Uživatel\Documents\chybička.xps
2014-10-21 00:16 - 2014-10-21 00:16 - 00000000 ____D () C:\Users\Spravce\AppData\Roaming\LastPass
2014-10-20 20:29 - 2014-10-20 20:29 - 01243336 _____ (společnost Microsoft Corporation) C:\Users\Uživatel\Downloads\wlsetup-web(1).exe
2014-10-20 20:00 - 2014-10-20 20:02 - 00000000 ____D () C:\Users\Uživatel\AppData\Roaming\Nero
2014-10-20 17:37 - 2014-10-25 10:34 - 00919712 _____ () C:\Windows\system32\Drivers\sfi.dat
2014-10-20 17:34 - 2014-10-20 17:34 - 00000000 ____D () C:\ProgramData\Adtrustmedia
2014-10-20 17:33 - 2014-10-20 17:33 - 00000000 ____D () C:\ProgramData\Comodo Downloader
2014-10-20 17:32 - 2014-10-25 00:00 - 00000000 ____D () C:\ProgramData\Comodo
2014-10-20 17:19 - 2014-10-20 19:22 - 00000000 ____D () C:\Program Files\SmartPCFixer
2014-10-20 15:10 - 2014-10-20 16:28 - 00000000 ____D () C:\Windows\455F074C814E4520B69B5584BD90400C.TMP
2014-10-20 15:10 - 2014-10-20 15:10 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard
2014-10-18 21:31 - 2014-10-20 17:06 - 00000000 ____D () C:\Windows\Minidump
2014-10-18 18:40 - 2014-10-18 18:40 - 00000000 ____D () C:\Users\Uživatel\AppData\Roaming\PeerNetworking
2014-10-17 13:35 - 2014-10-17 13:36 - 01053460 _____ () C:\Users\Uživatel\Downloads\install_flashplayer15x32au_mssa_aaa_aih.exe
2014-10-15 10:47 - 2014-10-10 03:44 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-15 10:47 - 2014-10-10 03:44 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-15 10:47 - 2014-10-10 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-15 10:47 - 2014-09-29 02:41 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-15 10:46 - 2014-10-07 04:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-15 10:46 - 2014-09-26 00:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-15 10:46 - 2014-09-26 00:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-15 10:46 - 2014-09-26 00:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-15 10:46 - 2014-09-26 00:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-15 10:46 - 2014-09-26 00:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-15 10:46 - 2014-09-19 03:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-15 10:46 - 2014-09-19 03:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-15 10:46 - 2014-09-19 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-15 10:46 - 2014-09-19 03:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-15 10:46 - 2014-09-19 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-15 10:46 - 2014-09-19 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-15 10:46 - 2014-09-19 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-15 10:46 - 2014-09-19 02:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-15 10:46 - 2014-09-19 02:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-15 10:46 - 2014-09-19 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-15 10:46 - 2014-09-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-15 10:46 - 2014-09-19 02:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-15 10:46 - 2014-09-19 02:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-15 10:46 - 2014-09-19 02:50 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-15 10:46 - 2014-09-19 02:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-15 10:46 - 2014-09-19 02:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-15 10:46 - 2014-09-19 02:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-15 10:46 - 2014-09-19 02:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-15 10:46 - 2014-09-19 02:20 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-15 10:46 - 2014-09-19 02:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-15 10:46 - 2014-09-19 02:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-15 10:46 - 2014-09-19 01:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-15 10:46 - 2014-09-19 01:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-15 10:46 - 2014-09-19 01:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-15 10:46 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-15 10:46 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-15 10:46 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-15 10:46 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-15 10:45 - 2014-09-18 03:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-15 10:45 - 2014-09-13 03:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-15 10:45 - 2014-09-05 03:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-15 10:45 - 2014-08-29 03:44 - 02744320 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-15 10:45 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-15 10:45 - 2014-07-17 03:39 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-15 10:45 - 2014-07-17 03:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-15 10:45 - 2014-07-17 03:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-15 10:45 - 2014-07-17 03:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-15 10:45 - 2014-07-17 03:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-15 10:45 - 2014-07-17 03:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-15 10:45 - 2014-07-17 03:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-15 10:44 - 2014-07-07 03:40 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 03208704 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-10-15 10:44 - 2014-07-07 03:40 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2014-10-15 10:44 - 2014-07-07 03:39 - 03970488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-10-15 10:44 - 2014-07-07 03:39 - 03914680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-10-15 10:44 - 2014-07-07 03:28 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2014-10-15 10:44 - 2014-06-28 02:21 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-10-15 10:44 - 2014-06-28 02:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-10-15 10:44 - 2014-06-28 02:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2014-10-15 10:43 - 2014-08-19 04:41 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2014-10-15 10:43 - 2014-08-19 04:41 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2014-10-15 10:43 - 2014-08-19 04:41 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2014-10-15 10:43 - 2014-08-19 04:40 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2014-10-15 10:43 - 2014-08-19 04:40 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2014-10-15 10:43 - 2014-08-19 03:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2014-10-15 10:43 - 2014-07-07 03:40 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2014-10-15 10:43 - 2014-07-07 03:40 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-10-15 10:43 - 2014-07-07 03:40 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2014-10-15 10:43 - 2014-07-07 03:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-10-15 10:43 - 2014-07-07 03:40 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2014-10-15 10:43 - 2014-07-07 03:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2014-10-15 10:43 - 2014-07-07 03:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2014-10-15 10:43 - 2014-07-07 03:39 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-10-15 10:43 - 2014-07-07 03:39 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-10-15 10:43 - 2014-07-07 03:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2014-10-15 10:43 - 2014-07-07 03:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-10-15 10:43 - 2014-07-07 03:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2014-10-08 16:01 - 2014-10-08 16:01 - 02025120 _____ () C:\Users\Uživatel\Downloads\Smlouva.pdf.zip
2014-10-02 21:35 - 2014-10-20 16:59 - 00000000 ____D () C:\Users\Uživatel\AppData\Roaming\AVAST Software
2014-10-02 21:33 - 2014-10-02 21:33 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-10-02 12:51 - 2014-10-02 12:51 - 00000017 _____ () C:\Users\Uživatel\AppData\Local\resmon.resmoncfg
2014-10-01 21:03 - 2014-10-20 20:45 - 00000000 ____D () C:\Program Files\YTAHelper
2014-10-01 21:03 - 2014-10-20 20:42 - 00000000 ____D () C:\ProgramData\TEMP
2014-10-01 21:02 - 2014-10-01 21:02 - 00172032 _____ (Jin Hui E-mail: jinhui@jcomsoft.com Web: http://www.jcomsoft.com) C:\Windows\system32\AniGIF.ocx
2014-10-01 21:02 - 2014-10-01 21:02 - 00000000 ____D () C:\Users\Uživatel\AppData\Local\CrashRpt
2014-10-01 20:59 - 2014-10-01 20:59 - 00000000 ____D () C:\Program Files\Seznam.cz
2014-10-01 20:58 - 2014-10-25 02:46 - 00000000 ____D () C:\Users\Uživatel\AppData\Roaming\Seznam.cz
2014-10-01 15:07 - 2014-10-01 15:07 - 11249152 _____ (LastPass) C:\Program Files\Common Files\lpuninstall.exe
2014-10-01 15:07 - 2014-10-01 15:07 - 00001172 _____ () C:\Users\Public\Desktop\My LastPass Vault.lnk
2014-10-01 15:07 - 2014-10-01 15:07 - 00000000 ____D () C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
2014-10-01 15:07 - 2014-10-01 15:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
2014-10-01 15:07 - 2014-10-01 15:07 - 00000000 ____D () C:\Program Files\LastPass
2014-10-01 15:05 - 2014-10-01 15:05 - 11249152 _____ (LastPass) C:\Users\Uživatel\Downloads\lastpass.exe
2014-10-01 14:32 - 2014-10-01 14:33 - 59520167 _____ () C:\Users\Uživatel\Downloads\Úschovna.wmv
2014-10-01 14:03 - 2014-10-21 21:10 - 00002521 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-10-01 14:03 - 2014-10-21 21:10 - 00000000 ___RD () C:\Program Files\Skype
2014-10-01 14:03 - 2014-10-21 21:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-10-01 14:03 - 2014-10-01 14:03 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-10-01 08:42 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-09-30 16:06 - 2014-09-30 16:06 - 00000000 ____D () C:\Program Files\Analog Devices

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-25 10:42 - 2009-07-14 06:34 - 00028944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-25 10:42 - 2009-07-14 06:34 - 00028944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-25 10:41 - 2010-11-20 23:01 - 01628642 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-25 10:35 - 2013-04-11 16:10 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-25 10:34 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-25 02:45 - 2014-03-28 09:58 - 00000000 ____D () C:\Users\Uživatel
2014-10-25 02:28 - 2013-04-11 16:10 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-25 01:55 - 2013-04-12 11:32 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-25 00:16 - 2014-08-21 17:19 - 00000000 ____D () C:\Users\Uživatel\AppData\Local\Adobe
2014-10-25 00:15 - 2013-04-12 11:32 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-10-25 00:15 - 2013-04-12 11:32 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-10-24 22:38 - 2014-04-07 19:56 - 00000000 ____D () C:\Users\Uživatel\AppData\Roaming\Skype
2014-10-24 21:09 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2014-10-24 21:09 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-10-24 21:03 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2014-10-24 21:00 - 2009-07-14 04:03 - 53215232 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-10-24 21:00 - 2009-07-14 04:03 - 31719424 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-10-24 21:00 - 2009-07-14 04:03 - 00786432 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-10-24 21:00 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-10-24 21:00 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\SAM.bak
2014-10-24 13:23 - 2009-07-14 06:53 - 00032576 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-24 11:59 - 2012-04-30 20:30 - 00000000 ____D () C:\Windows\OEM
2014-10-24 01:01 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-24 00:24 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2014-10-24 00:05 - 2014-03-18 18:55 - 00000000 ____D () C:\Windows\pss
2014-10-23 02:47 - 2013-04-11 15:43 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-10-23 02:34 - 2014-03-28 09:58 - 00000000 ____D () C:\Users\Uživatel\AppData\Local\Google
2014-10-22 16:51 - 2014-03-31 18:35 - 00000000 ____D () C:\Users\Spravce
2014-10-21 21:10 - 2013-04-12 18:45 - 00000000 ____D () C:\ProgramData\Skype
2014-10-21 17:18 - 2014-03-28 10:13 - 00000000 ____D () C:\Users\Uživatel\AppData\Local\VirtualStore
2014-10-21 17:02 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-10-21 17:00 - 2014-05-06 19:50 - 00000000 ____D () C:\Users\Uživatel\AppData\Roaming\vlc
2014-10-21 17:00 - 2014-03-21 18:10 - 00000000 ____D () C:\Windows\%LocalAppData%
2014-10-21 17:00 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-10-21 17:00 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat
2014-10-21 00:16 - 2014-03-31 18:35 - 00000000 ____D () C:\Users\Spravce\AppData\Local\Google
2014-10-20 20:43 - 2014-05-06 17:20 - 00000000 ____D () C:\AdwCleaner
2014-10-20 20:43 - 2014-03-28 09:58 - 00001099 _____ () C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-10-20 20:32 - 2013-04-11 16:15 - 00002096 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-10-20 19:30 - 2014-09-02 16:51 - 00013464 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-10-20 16:59 - 2009-07-14 04:04 - 00002577 _____ () C:\Windows\system32\config.nt
2014-10-20 16:30 - 2013-06-14 18:03 - 00000000 ____D () C:\ProgramData\MFAData
2014-10-16 16:35 - 2013-06-24 10:30 - 00000000 ____D () C:\LADA
2014-10-16 11:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-10-15 18:04 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-15 17:07 - 2009-07-14 06:33 - 00408304 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-15 17:03 - 2014-05-06 16:51 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-15 12:28 - 2013-04-22 12:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-15 12:24 - 2013-08-19 19:19 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-15 12:04 - 2013-04-11 16:28 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-04 11:22 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\system32\restore
2014-10-02 14:41 - 2009-07-14 04:04 - 00000580 _____ () C:\Windows\win.ini
2014-10-02 11:04 - 2013-05-24 17:14 - 00000000 ____D () C:\léciva_uhrady
2014-10-01 15:52 - 2013-01-31 11:43 - 00035316 _____ () C:\QcOSD.txt
2014-09-30 16:02 - 2013-01-31 11:42 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-09-25 15:49 - 2014-05-06 17:37 - 00000000 ____D () C:\Users\Uživatel\AppData\Local\Windows Live

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-10-16 11:14

==================== End Of Log ============================

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
CloseProcesses:

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-3250058756-2919187754-1548671718-1000\...\Run: [Twoo] => "C:\Users\U~ivatel\AppData\Roaming\Massive Media\Twoo.exe"
HKU\S-1-5-21-3250058756-2919187754-1548671718-1000\...\Run: [cz.seznam.software.szndesktop] => "C:\Users\U~ivatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
HKU\S-1-5-21-3250058756-2919187754-1548671718-1000\...\Run: [cz.seznam.software.autoupdate] => "C:\Users\U~ivatel\AppData\Roaming\Seznam.cz\szninstall.exe" -c
HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Windows\System32\ctfmon.exe ctfmon.exe
HKU\S-1-5-18\...\MountPoints2: D - D:\setup.exe

S3 catchme; \??\C:\Users\UIVATE~1\AppData\Local\Temp\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
U1 StarOpen; No ImagePath

Hosts:
EmptyTemp:
Reboot:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 26-10-2014
Ran by Uživatel at 2014-10-26 19:59:49 Run:1
Running from C:\Users\Uživatel\Desktop
Loaded Profile: Uživatel (Available profiles: Uživatel & Spravce)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
CloseProcesses:

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-3250058756-2919187754-1548671718-1000\...\Run: [Twoo] => "C:\Users\U~ivatel\AppData\Roaming\Massive Media\Twoo.exe"
HKU\S-1-5-21-3250058756-2919187754-1548671718-1000\...\Run: [cz.seznam.software.szndesktop] => "C:\Users\U~ivatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
HKU\S-1-5-21-3250058756-2919187754-1548671718-1000\...\Run: [cz.seznam.software.autoupdate] => "C:\Users\U~ivatel\AppData\Roaming\Seznam.cz\szninstall.exe" -c
HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Windows\System32\ctfmon.exe ctfmon.exe
HKU\S-1-5-18\...\MountPoints2: D - D:\setup.exe

S3 catchme; \??\C:\Users\UIVATE~1\AppData\Local\Temp\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
U1 StarOpen; No ImagePath
*****************

Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\BCSSync => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKU\S-1-5-21-3250058756-2919187754-1548671718-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Twoo => value deleted successfully.
HKU\S-1-5-21-3250058756-2919187754-1548671718-1000\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.szndesktop => value deleted successfully.
HKU\S-1-5-21-3250058756-2919187754-1548671718-1000\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.autoupdate => value deleted successfully.
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Application Restart #0 => value deleted successfully.
"HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\S-1-5-18" => Key not found.
catchme => Service deleted successfully.
esgiguard => Service deleted successfully.
StarOpen => Service deleted successfully.

The system needed a reboot.

==== End of Fixlog ====

Jak se chova PC

Načte se vše, ale trvá to dlouho-cca. 1 min.

Myslím tím samotné otevření prohlížeče. Pak otevírání konkrétních stránek už je svižnější

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Po spusteni probehne stazeni databaze
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

# AdwCleaner v4.002 - Report created 27/10/2014 at 14:54:20
# DB v2014-10-26.6
# Updated 27/10/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : Uživatel - UZIVATEL-PC
# Running from : C:\Users\Uživatel\Downloads\adwcleaner_4.002.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files\YTAHelper
Folder Deleted : C:\Users\Uživatel\AppData\Local\CrashRpt

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17344

-\\ Mozilla Firefox v33.0 (x86 cs)

-\\ Google Chrome v38.0.2125.104

*************************

AdwCleaner[R0].txt - [895 octets] - [27/10/2014 14:46:54]
AdwCleaner[R1].txt - [954 octets] - [27/10/2014 14:50:35]
AdwCleaner[S0].txt - [873 octets] - [27/10/2014 14:54:20]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [932 octets] ##########

Nejaka zmena?

Především velké díky za pomoc, jinak asi rychlejší to už zřejmě nebude, ale hlavní je funkčnost. On ten nb taky asi už není žádná "hitparáda", ale hlavně, že je nyní funkční.

VIRY.CZ

nelze se připojit k internetu

nelze se připojit k internetu

Re: nelze se připojit k internetu

Re: nelze se připojit k internetu

Re: nelze se připojit k internetu

Re: nelze se připojit k internetu

Re: nelze se připojit k internetu

Re: nelze se připojit k internetu

Re: nelze se připojit k internetu

Re: nelze se připojit k internetu

Re: nelze se připojit k internetu

Re: nelze se připojit k internetu

Re: nelze se připojit k internetu

Re: nelze se připojit k internetu

Re: nelze se připojit k internetu

Re: nelze se připojit k internetu