VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosím o preventivní kontrolu s menším podezřením na Viry

https://forum.viry.cz:443/viewtopic.php?t=141423

Stránka 1 z 2

Prosím o preventivní kontrolu s menším podezřením na Viry

Napsal: 21 lis 2014 14:54
od metys
Logfile of random's system information tool 1.10 (written by random/random)
Run by Ondra at 2014-11-21 14:48:07
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 250 GB (26%) free of 954 GB
Total RAM: 3072 MB (25% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:48:13, on 21.11.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17420)
Boot mode: Normal

Running processes:
C:\Users\Ondra\AppData\Roaming\uTorrent\uTorrent.exe
C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\SupTab\HpUI.exe
C:\Program Files (x86)\SupTab\Loader32.exe
C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Ondra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1 ... 4_80F322A9
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1 ... 4_80F322A9
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1 ... 4_80F322A9
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds& ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds& ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1 ... 4_80F322A9
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll
O2 - BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Ondra\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?')
O4 - HKUS\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?')
O4 - HKUS\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?')
O4 - HKUS\S-1-5-21-2214932203-3473591513-427715778-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun (User '?')
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: COMODO Dragon Update Service (DragonUpdater) - Comodo Security Solutions, Inc. - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: IePlugin Services (IePluginServices) - Cherished Technololgy LIMITED - C:\ProgramData\IePluginServices\PluginService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WindowsMangerProtect Service (WindowsMangerProtect) - Fuyu LIMITED - C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9039 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\ProgramData\IePluginServices\PluginService.exe -service
C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe -service
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Users\Ondra\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
"C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe"
taskeng.exe {630FF104-C976-4A07-9CCF-9E30F562F3A9}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-5537ca6e-e55e-48bb-b684-9f8be8a266eb -SystemEventPortName:HostProcess-3a526685-7a9a-49fd-81b0-bbea3af5ea76 -IoCancelEventPortName:HostProcess-81db4e77-b2e8-4e9b-b898-f3d731935d05 -NonStateChangingEventPortName:HostProcess-aa124c11-aace-4752-aee1-99614c922718 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:f791209e-da3f-4897-967c-9617d9c313a7 -DeviceGroupId:WpdFsGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2836.0.1040258660\964219221" --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,3,12,22 --reduce-gpu-sandbox --gpu-vendor-id=0x1002 --gpu-device-id=0x9442 --gpu-driver-vendor="ATI Technologies Inc." --gpu-driver-version=8.632.1.2000 --ignored=" --type=renderer " /prefetch:822062411
"C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --channel="2836.2.1721640215\1044771850" /prefetch:673131151
"C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --channel="2836.3.1875663323\144680650" /prefetch:673131151
"C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --channel="2836.4.133719583\2044799206" /prefetch:673131151
"C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --channel="2836.5.1924518447\443119874" /prefetch:673131151
"C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --channel="2836.6.534979649\662440051" /prefetch:673131151
"C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --channel="2836.7.1749693333\2011666527" /prefetch:673131151
"C:\Program Files (x86)\SupTab\HpUI.exe" -run
"C:\Program Files (x86)\SupTab\Loader64.exe"
"C:\Program Files (x86)\SupTab\Loader32.exe"
"C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="2836.9.250888770\96818978" /prefetch:673131151
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\wuauclt.exe"
"C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="2836.10.1924391121\782081951" --ppapi-flash-args --lang=cs --ignored=" --type=renderer " /prefetch:-632637702

"C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="2836.21.1053948753\933359253" /prefetch:673131151
"C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="2836.23.828117604\971279409" /prefetch:673131151
"C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="2836.29.1614212949\360130891" /prefetch:673131151
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe"
"C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_12/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/group_01/ --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="2836.33.1189023569\1368304718" /prefetch:673131151
C:\Windows\system32\wbem\wmiprvse.exe
taskmgr.exe /3
"C:\Users\Ondra\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2214932203-3473591513-427715778-1000Core.job - C:\Users\Ondra\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2214932203-3473591513-427715778-1000UA.job - C:\Users\Ondra\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09 96128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
IETabPage Class - C:\Program Files (x86)\SupTab\SupTab.dll [2014-11-01 514016]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
"uTorrent"=C:\Users\Ondra\AppData\Roaming\uTorrent\uTorrent.exe [2014-10-27 1385808]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~3\PERFOR~1\PERFOR~2.DLL"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-21 14:46:47 ----D---- C:\rsit
2014-11-21 14:46:47 ----D---- C:\Program Files\trend micro
2014-11-19 07:35:45 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2014-11-19 07:35:45 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-11-19 07:35:45 ----A---- C:\Windows\system32\pku2u.dll
2014-11-19 07:35:45 ----A---- C:\Windows\system32\kerberos.dll
2014-11-16 11:40:11 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2014-11-16 11:40:11 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2014-11-16 11:40:11 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-11-16 11:40:11 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-11-16 11:40:10 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2014-11-16 11:40:10 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2014-11-16 11:40:10 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-11-16 11:40:10 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-11-16 11:40:09 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2014-11-16 11:40:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2014-11-16 11:40:09 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-11-16 11:40:09 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-11-16 11:40:08 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2014-11-16 11:40:08 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-11-16 11:40:07 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2014-11-16 11:40:07 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2014-11-16 11:40:07 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-11-16 11:40:07 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-11-16 11:40:06 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2014-11-16 11:40:06 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2014-11-16 11:40:06 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2014-11-16 11:40:06 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-11-16 11:40:06 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-11-16 11:40:06 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-11-16 11:40:04 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2014-11-16 11:40:04 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2014-11-16 11:40:04 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-11-16 11:40:04 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-11-16 11:40:02 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2014-11-16 11:40:02 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2014-11-16 11:40:02 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-11-16 11:40:02 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-11-16 11:40:00 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2014-11-16 11:40:00 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2014-11-16 11:40:00 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-11-16 11:40:00 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-11-16 11:39:58 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2014-11-16 11:39:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2014-11-16 11:39:58 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-11-16 11:39:58 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-11-16 11:39:56 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2014-11-16 11:39:56 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-11-16 11:39:55 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2014-11-16 11:39:55 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2014-11-16 11:39:55 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2014-11-16 11:39:55 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2014-11-16 11:39:55 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-11-16 11:39:55 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-11-16 11:39:55 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-11-16 11:39:55 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-11-16 11:39:53 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2014-11-16 11:39:53 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2014-11-16 11:39:53 ----A---- C:\Windows\system32\xinput1_3.dll
2014-11-16 11:39:53 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-11-16 11:39:52 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2014-11-16 11:39:52 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-11-16 11:39:51 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2014-11-16 11:39:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2014-11-16 11:39:51 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-11-16 11:39:51 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-11-16 11:39:49 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2014-11-16 11:39:49 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2014-11-16 11:39:49 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-11-16 11:39:49 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-11-16 11:39:48 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2014-11-16 11:39:48 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2014-11-16 11:39:48 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-11-16 11:39:48 ----A---- C:\Windows\system32\d3dx10.dll
2014-11-16 11:39:45 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2014-11-16 11:39:45 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-11-16 11:39:44 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2014-11-16 11:39:44 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2014-11-16 11:39:44 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-11-16 11:39:44 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-11-16 11:39:43 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2014-11-16 11:39:43 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-11-16 11:39:42 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2014-11-16 11:39:42 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2014-11-16 11:39:42 ----A---- C:\Windows\system32\xinput1_2.dll
2014-11-16 11:39:42 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-11-16 11:39:41 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2014-11-16 11:39:41 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2014-11-16 11:39:41 ----A---- C:\Windows\system32\xinput1_1.dll
2014-11-16 11:39:41 ----A---- C:\Windows\system32\xactengine2_2.dll
2014-11-16 11:39:40 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2014-11-16 11:39:40 ----A---- C:\Windows\system32\xactengine2_1.dll
2014-11-16 11:39:31 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2014-11-16 11:39:31 ----A---- C:\Windows\system32\d3dx9_30.dll
2014-11-16 11:39:30 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2014-11-16 11:39:30 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2014-11-16 11:39:30 ----A---- C:\Windows\system32\xactengine2_0.dll
2014-11-16 11:39:30 ----A---- C:\Windows\system32\x3daudio1_0.dll
2014-11-16 11:39:29 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2014-11-16 11:39:29 ----A---- C:\Windows\system32\d3dx9_29.dll
2014-11-16 11:39:27 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2014-11-16 11:39:27 ----A---- C:\Windows\system32\d3dx9_28.dll
2014-11-16 11:39:25 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2014-11-16 11:39:25 ----A---- C:\Windows\system32\d3dx9_27.dll
2014-11-16 11:39:22 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2014-11-16 11:39:22 ----A---- C:\Windows\system32\d3dx9_26.dll
2014-11-16 11:39:21 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2014-11-16 11:39:21 ----A---- C:\Windows\system32\d3dx9_25.dll
2014-11-16 11:39:19 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2014-11-16 11:39:19 ----A---- C:\Windows\system32\d3dx9_24.dll
2014-11-16 11:39:00 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2014-11-16 11:38:45 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2014-11-16 11:38:45 ----A---- C:\Windows\SYSWOW64\pbsvc.exe
2014-11-16 11:31:38 ----D---- C:\Program Files (x86)\Activision
2014-11-15 21:44:38 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2014-11-12 08:36:32 ----A---- C:\Windows\system32\generaltel.dll
2014-11-12 08:36:31 ----A---- C:\Windows\system32\aepdu.dll
2014-11-12 08:36:30 ----A---- C:\Windows\system32\aeinv.dll
2014-11-12 08:36:28 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-11-12 08:36:28 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-11-12 08:36:28 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2014-11-12 08:36:28 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2014-11-12 08:36:28 ----A---- C:\Windows\system32\termsrv.dll
2014-11-12 08:36:28 ----A---- C:\Windows\system32\msaudite.dll
2014-11-12 08:36:28 ----A---- C:\Windows\system32\lsasrv.dll
2014-11-12 08:36:28 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-11-12 08:36:28 ----A---- C:\Windows\system32\adtschema.dll
2014-11-12 08:36:23 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-11-12 08:36:23 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-11-12 08:36:23 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-11-12 08:36:23 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-11-12 08:36:23 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-11-12 08:36:23 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-11-12 08:36:23 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-11-12 08:36:23 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-11-12 08:36:23 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-11-12 08:36:23 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 08:36:23 ----A---- C:\Windows\system32\iernonce.dll
2014-11-12 08:36:23 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-11-12 08:36:23 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-11-12 08:36:23 ----A---- C:\Windows\system32\ie4uinit.exe
2014-11-12 08:36:22 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-11-12 08:36:22 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-11-12 08:36:21 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-11-12 08:36:21 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-11-12 08:36:21 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-11-12 08:36:21 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-11-12 08:36:21 ----A---- C:\Windows\system32\urlmon.dll
2014-11-12 08:36:21 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 08:36:21 ----A---- C:\Windows\system32\iedkcs32.dll
2014-11-12 08:36:20 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-11-12 08:36:20 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-11-12 08:36:20 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-11-12 08:36:20 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 08:36:20 ----A---- C:\Windows\system32\msfeeds.dll
2014-11-12 08:36:20 ----A---- C:\Windows\system32\iesetup.dll
2014-11-12 08:36:20 ----A---- C:\Windows\system32\dxtrans.dll
2014-11-12 08:36:19 ----A---- C:\Windows\system32\iertutil.dll
2014-11-12 08:36:19 ----A---- C:\Windows\system32\ieapfltr.dll
2014-11-12 08:36:18 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-11-12 08:36:18 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-11-12 08:36:18 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-11-12 08:36:18 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-11-12 08:36:18 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-11-12 08:36:18 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-11-12 08:36:18 ----A---- C:\Windows\system32\jsproxy.dll
2014-11-12 08:36:18 ----A---- C:\Windows\system32\ieUnatt.exe
2014-11-12 08:36:17 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-11-12 08:36:17 ----A---- C:\Windows\system32\mshtmled.dll
2014-11-12 08:36:17 ----A---- C:\Windows\system32\ieui.dll
2014-11-12 08:36:17 ----A---- C:\Windows\system32\ieframe.dll
2014-11-12 08:36:17 ----A---- C:\Windows\system32\dxtmsft.dll
2014-11-12 08:36:16 ----A---- C:\Windows\system32\wininet.dll
2014-11-12 08:36:16 ----A---- C:\Windows\system32\vbscript.dll
2014-11-12 08:36:16 ----A---- C:\Windows\system32\jscript9diag.dll
2014-11-12 08:36:16 ----A---- C:\Windows\system32\jscript9.dll
2014-11-12 08:36:15 ----A---- C:\Windows\system32\msrating.dll
2014-11-12 08:36:15 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-11-12 08:36:15 ----A---- C:\Windows\system32\mshtml.dll
2014-11-12 08:35:34 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-11-12 08:35:34 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-11-12 08:35:34 ----A---- C:\Windows\system32\msxml3r.dll
2014-11-12 08:35:34 ----A---- C:\Windows\system32\msxml3.dll
2014-11-12 08:35:34 ----A---- C:\Windows\system32\IMJP10K.DLL
2014-11-12 08:35:33 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL
2014-11-12 08:35:32 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-11-12 08:35:32 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2014-11-12 08:35:32 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-11-12 08:35:32 ----A---- C:\Windows\system32\EncDump.dll
2014-11-12 08:35:32 ----A---- C:\Windows\system32\audiosrv.dll
2014-11-12 08:35:32 ----A---- C:\Windows\system32\AudioSes.dll
2014-11-12 08:35:32 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-11-12 08:35:32 ----A---- C:\Windows\system32\AudioEng.dll
2014-11-12 08:35:31 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-11-12 08:35:31 ----A---- C:\Windows\system32\packager.dll
2014-11-12 08:35:26 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-11-12 08:35:26 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-11-12 08:35:26 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-11-12 08:35:26 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-11-12 08:35:26 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-11-12 08:35:26 ----A---- C:\Windows\system32\wdigest.dll
2014-11-12 08:35:26 ----A---- C:\Windows\system32\TSpkg.dll
2014-11-12 08:35:26 ----A---- C:\Windows\system32\schannel.dll
2014-11-12 08:35:26 ----A---- C:\Windows\system32\ncrypt.dll
2014-11-12 08:35:26 ----A---- C:\Windows\system32\msv1_0.dll
2014-11-12 08:35:25 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-11-12 08:35:25 ----A---- C:\Windows\system32\credssp.dll
2014-11-12 08:35:21 ----A---- C:\Windows\system32\win32k.sys
2014-11-12 08:35:19 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-11-12 08:35:19 ----A---- C:\Windows\system32\msi.dll
2014-11-12 08:35:14 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-11-12 08:35:14 ----A---- C:\Windows\system32\oleaut32.dll
2014-11-08 10:38:41 ----N---- C:\Windows\UniFISH.exe
2014-11-03 11:09:52 ----D---- C:\Program Files (x86)\Reincubate
2014-11-01 14:50:04 ----D---- C:\ProgramData\374311380
2014-11-01 14:38:50 ----D---- C:\ProgramData\IePluginServices
2014-11-01 14:38:45 ----D---- C:\Program Files (x86)\SupTab
2014-11-01 14:38:41 ----D---- C:\ProgramData\WindowsMangerProtect
2014-10-24 13:11:55 ----D---- C:\Program Files (x86)\DOSBox-0.74

======List of files/folders modified in the last 1 month======

2014-11-21 14:48:06 ----D---- C:\Windows\Temp
2014-11-21 14:47:56 ----D---- C:\Windows\Prefetch
2014-11-21 14:47:18 ----D---- C:\Users\Ondra\AppData\Roaming\uTorrent
2014-11-21 14:46:47 ----RD---- C:\Program Files
2014-11-21 14:44:56 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-11-21 14:44:53 ----D---- C:\Windows\system32\drivers
2014-11-21 14:16:20 ----D---- C:\Windows\System32
2014-11-21 14:16:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-11-21 09:29:00 ----D---- C:\Windows\system32\config
2014-11-19 17:15:02 ----D---- C:\Downloads
2014-11-19 17:02:50 ----D---- C:\Windows\winsxs
2014-11-19 17:02:35 ----D---- C:\Windows\SysWOW64
2014-11-19 12:12:08 ----SHD---- C:\System Volume Information
2014-11-19 07:34:27 ----D---- C:\Windows\system32\catroot2
2014-11-19 07:34:27 ----D---- C:\Windows\system32\catroot
2014-11-18 21:26:34 ----D---- C:\Windows\system32\Tasks
2014-11-18 21:26:32 ----D---- C:\Program Files (x86)\Opera
2014-11-16 11:39:40 ----RSD---- C:\Windows\assembly
2014-11-16 11:38:45 ----D---- C:\Windows\system32\LogFiles
2014-11-16 11:38:42 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-11-16 11:38:41 ----SHD---- C:\Windows\Installer
2014-11-16 11:31:38 ----RD---- C:\Program Files (x86)
2014-11-16 11:07:55 ----D---- C:\Users\Ondra\AppData\Roaming\DAEMON Tools Lite
2014-11-13 16:58:14 ----D---- C:\Windows\rescache
2014-11-13 09:17:30 ----D---- C:\Windows\Microsoft.NET
2014-11-12 21:48:59 ----SD---- C:\Windows\system32\CompatTel
2014-11-12 21:48:55 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-11-12 21:48:55 ----D---- C:\Windows\system32\cs-CZ
2014-11-12 21:48:53 ----D---- C:\Program Files\Internet Explorer
2014-11-12 21:48:52 ----D---- C:\Windows\SYSWOW64\en-US
2014-11-12 21:48:51 ----D---- C:\Windows\system32\en-US
2014-11-12 21:48:49 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-10 10:32:01 ----D---- C:\Users\Ondra\AppData\Roaming\The Creative Assembly
2014-11-10 09:44:24 ----D---- C:\Windows
2014-11-09 22:40:00 ----D---- C:\Windows\SYSWOW64\directx
2014-11-09 22:39:51 ----D---- C:\Windows\Logs
2014-11-09 22:39:50 ----HD---- C:\Windows\msdownld.tmp
2014-11-09 22:39:42 ----D---- C:\Windows\inf
2014-11-08 10:48:26 ----D---- C:\Program Files\OpenTTD
2014-11-08 08:21:52 ----D---- C:\Program Files (x86)\WarThunder
2014-11-04 14:30:58 ----N---- C:\Windows\system32\MpSigStub.exe
2014-11-01 14:50:04 ----HD---- C:\ProgramData
2014-10-23 12:19:10 ----D---- C:\Windows\Minidump

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-05-22 283200]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2013-06-13 314016]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2013-06-13 43680]
R3 athur;Atheros AR9271 Wireless Network Adapter Service; C:\Windows\system32\DRIVERS\athurx.sys [2009-12-31 1783296]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 6037504]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-11-21 129752]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960]
S3 hitmanpro37;HitmanPro 3.7 Support Driver; \??\C:\Windows\system32\drivers\hitmanpro37.sys [2013-08-19 32000]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 xnacc;Služba ovladače pro řadič XBOX 360 pro systém Windows; C:\Windows\system32\DRIVERS\xnacc.sys [2009-07-14 679936]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 203264]
R2 DragonUpdater;COMODO Dragon Update Service; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2014-05-27 2139328]
R2 IePluginServices;IePlugin Services; C:\ProgramData\IePluginServices\PluginService.exe [2014-11-01 714208]
R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-11-16 66872]
R2 WindowsMangerProtect;WindowsMangerProtect Service; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [2014-11-01 530408]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-23 116648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-23 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-06 114688]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [2014-04-09 289256]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-07-04 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Re: Prosím o preventivní kontrolu s menším podezřením na Vir

Napsal: 21 lis 2014 16:18
od altrok
Zdravim :bye:

:arrow: Odinstalujte McAfee Security Scan

:arrow: Prehledl jsem antivir... pouzivate nejaky?

Re: Prosím o preventivní kontrolu s menším podezřením na Vir

Napsal: 21 lis 2014 18:16
od metys
Dobrý den,

teď momentálně ne, nikdy jsem nenašel nějaký dobrý, který by byl zadarmo a fungoval po celou dobu a ne jenom na zkušební období. :)

Re: Prosím o preventivní kontrolu s menším podezřením na Vir

Napsal: 21 lis 2014 18:21
od altrok
:arrow: Mezi bezplatnymi antiviry se dlouhodobe na prednich prickach drzi avast! nebo Avira. Volba je zajiste na Vas, takze po nainstalovani antiviru pokracujte nasledujicimi kroky.

:arrow: V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

:arrow: Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
  • ukoncete vsechny programy
  • kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
  • kliknete na Scan, pote na Clean
  • po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

Re: Prosím o preventivní kontrolu s menším podezřením na Vir

Napsal: 22 lis 2014 16:25
od metys
# AdwCleaner v4.101 - Report created 22/11/2014 at 16:21:46
# Updated 09/11/2014 by Xplode
# Database : 2014-11-16.1 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Ondra - ONDRA-PC
# Running from : C:\Users\Ondra\Downloads\adwcleaner_4.101.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AllSaVeR
Folder Deleted : C:\ProgramData\SaaVEENewaaAPPzi
Folder Deleted : C:\ProgramData\4b16db869c3512f7
Folder Deleted : C:\Users\Ondra\AppData\Roaming\eCyber
Folder Deleted : C:\Users\Ondra\AppData\Roaming\iSafe
Folder Deleted : C:\Users\Ondra\Documents\Optimizer Pro
Folder Deleted : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdbamjmkkinapnnhmgpoenkmjnbodhh
Folder Deleted : C:\Users\Ondra\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja
File Deleted : C:\Windows\System32\drivers\iSafeKrnlBoot.sys
File Deleted : C:\Windows\System32\log\iSafeKrnlCall.log
File Deleted : C:\Users\Ondra\daemonprocess.txt

***** [ Scheduled Tasks ] *****

Task Deleted : LaunchSignup

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D15D1EF3-B615-46FE-8407-8D40E5389274}
Key Deleted : HKCU\Software\Optimizer Pro
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\SOFTWARE\iSafe
Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\PERFOR~1\PERFOR~2.DLL
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\sweet-page.com

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17420


-\\ Google Chrome v

[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://searchou.com/?q={searchTerms}&id=80f322a9000000000000940c6d89cb7c
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www1.delta-search.com/?q={searchTerms}&affID=119816&tt=gc_&babsrc=SP_ss&mntrId=80F3940C6D89CB7C
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-4&o=APN10267&locale=en_CZ&apn_uid=45bd96c9-0889-473d-acdb-9bcbed35e91d&apn_ptnrs=%5EAGY&apn_sauid=39959B27-3072-4577-BA59-3E9972C99C92&apn_dtid=%5EYYYYYY%5EYY%5ECZ&q={searchTerms}
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-4&o=APN10267&locale=en_CZ&apn_uid=45bd96c9-0889-473d-acdb-9bcbed35e91d&apn_ptnrs=%5EAGY&apn_sauid=39959B27-3072-4577-BA59-3E9972C99C92&apn_dtid=%5EYYYYYY%5EYY%5ECZ&q={searchTerms}
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.sweet-page.com/web/?type=ds&ts=1414 ... earchTerms}
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : mmdbamjmkkinapnnhmgpoenkmjnbodhh

-\\ Chromium v

[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://searchou.com/?q={searchTerms}&id=80f322a9000000000000940c6d89cb7c
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www1.delta-search.com/?q={searchTerms}&affID=119816&tt=gc_&babsrc=SP_ss&mntrId=80F3940C6D89CB7C
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-4&o=APN10267&locale=en_CZ&apn_uid=45bd96c9-0889-473d-acdb-9bcbed35e91d&apn_ptnrs=%5EAGY&apn_sauid=39959B27-3072-4577-BA59-3E9972C99C92&apn_dtid=%5EYYYYYY%5EYY%5ECZ&q={searchTerms}
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-4&o=APN10267&locale=en_CZ&apn_uid=45bd96c9-0889-473d-acdb-9bcbed35e91d&apn_ptnrs=%5EAGY&apn_sauid=39959B27-3072-4577-BA59-3E9972C99C92&apn_dtid=%5EYYYYYY%5EYY%5ECZ&q={searchTerms}
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.sweet-page.com/web/?type=ds&ts=1414 ... earchTerms}

-\\ Comodo Dragon v33.1.0.1

[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://searchou.com/?q={searchTerms}&id=80f322a9000000000000940c6d89cb7c
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www1.delta-search.com/?q={searchTerms}&affID=119816&tt=gc_&babsrc=SP_ss&mntrId=80F3940C6D89CB7C
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-4&o=APN10267&locale=en_CZ&apn_uid=45bd96c9-0889-473d-acdb-9bcbed35e91d&apn_ptnrs=%5EAGY&apn_sauid=39959B27-3072-4577-BA59-3E9972C99C92&apn_dtid=%5EYYYYYY%5EYY%5ECZ&q={searchTerms}
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-4&o=APN10267&locale=en_CZ&apn_uid=45bd96c9-0889-473d-acdb-9bcbed35e91d&apn_ptnrs=%5EAGY&apn_sauid=39959B27-3072-4577-BA59-3E9972C99C92&apn_dtid=%5EYYYYYY%5EYY%5ECZ&q={searchTerms}
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.sweet-page.com/web/?type=ds&ts=1414 ... earchTerms}
[C:\Users\Ondra\AppData\Local\Comodo\Dragon\User Data\Default\preferences] - Deleted [Extension] : cmaiofennmphjldldcpphcechfnnohja

-\\ Opera v26.0.1656.24

[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://searchou.com/?q={searchTerms}&id=80f322a9000000000000940c6d89cb7c
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www1.delta-search.com/?q={searchTerms}&affID=119816&tt=gc_&babsrc=SP_ss&mntrId=80F3940C6D89CB7C
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-4&o=APN10267&locale=en_CZ&apn_uid=45bd96c9-0889-473d-acdb-9bcbed35e91d&apn_ptnrs=%5EAGY&apn_sauid=39959B27-3072-4577-BA59-3E9972C99C92&apn_dtid=%5EYYYYYY%5EYY%5ECZ&q={searchTerms}
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-4&o=APN10267&locale=en_CZ&apn_uid=45bd96c9-0889-473d-acdb-9bcbed35e91d&apn_ptnrs=%5EAGY&apn_sauid=39959B27-3072-4577-BA59-3E9972C99C92&apn_dtid=%5EYYYYYY%5EYY%5ECZ&q={searchTerms}
[C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.sweet-page.com/web/?type=ds&ts=1414 ... earchTerms}

*************************

AdwCleaner[R0].txt - [4072 octets] - [22/11/2014 16:16:48]
AdwCleaner[R1].txt - [4132 octets] - [22/11/2014 16:20:07]
AdwCleaner[S0].txt - [7771 octets] - [22/11/2014 16:21:46]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7831 octets] ##########

Re: Prosím o preventivní kontrolu s menším podezřením na Vir

Napsal: 22 lis 2014 17:34
od altrok
:arrow: Ulozte na plochu zoek.exe http://hijackthis.nl/smeenk/zoek.htm
  • spustte jako spravce
  • do velkeho okna zkopirujte script uvedeny nize
  • kliknete na Run script
  • po restartu na Vas vyskoci log (pripadne jej najdete v C:\zoek-results.log) - vlozte mi jej do pristi odpovedi

    Kód: Vybrat vše

    autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

Re: Prosím o preventivní kontrolu s menším podezřením na Vir

Napsal: 23 lis 2014 11:37
od metys
Zoek.exe v5.0.0.0 Updated 21-11-2014
Tool run by Ondra on ne 23.11.2014 at 11:21:41,93.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Ondra\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

23.11.2014 11:23:12 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~3\ohomfhagonjjnhpchclppbhcigoggclj deleted
C:\Windows\syswow64\appdata deleted
C:\Users\Ondra\AppData\LocalLow\{AF304D65-5F24-19EE-84A6-EC2710294379} deleted
C:\Users\Ondra\AppData\Local\Packages\windows_ie_ac_001\AC\{AE595AC9-2DCC-4351-A1C7-5DBCAD5D9877} deleted
C:\Users\Ondra\AppData\Local\Packages\windows_ie_ac_001\AC\{AF304D65-5F24-19EE-84A6-EC2710294379} deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\Packages\windows_ie_ac_001\AC\{4563AAC6-7FEF-CA32-61B5-7E86EA5B72ED} deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\Packages\windows_ie_ac_001\AC\{C1FED2F6-A57A-C724-08A4-D5F9769B6C7C} deleted
C:\Users\Ondra\.android deleted
C:\PROGRA~3\InstallMate deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Ondra\AppData\Local\cache deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\GPT.INI deleted
C:\Windows\Syswow64\GroupPolicy\gpt.ini deleted
C:\Windows\SysWow64\searchplugins deleted
C:\Windows\SysWow64\Extensions deleted
"C:\ProgramData\b194ed65131ae49cb992f96e2b115d42_c" deleted
"C:\PROGRA~3\gdlfonnkihbmklapodikpajffkcaobni\gdlfonnkihbmklapodikpajffkcaobni.crx" deleted
"C:\PROGRA~3\gdlfonnkihbmklapodikpajffkcaobni\update.xml" deleted
"C:\PROGRA~3\gdlfonnkihbmklapodikpajffkcaobni" deleted

==== Chromium Look ======================

Comodo Drag&Drop Service - Ondra\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aneodkojaglhnkkdbbdnmmmgimlcaogo
Comodo Web Inspector - Ondra\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdngekjahnmlkinegnhdmmbcfnmbclnn
Comodo Media Downloader - Ondra\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dihmnpngfonlhjmgkflpnibiaaliendo
Free proxy server - Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahpmdfdhaidjhbfcakeibbhokidgjibm
ADBlocknWatch - Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdlfonnkihbmklapodikpajffkcaobni
AdBlock - Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
ScriptBlock - Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcdjknjpbnhdoabbngpmfekaecnpajba

==== Chromium Startpages ======================

C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "http://seznam.cz/",
"urls_to_restore_on_startup": [ "http://www.sweet-page.com/?type=hp&ts=1 ... 4_80F322A9" ]


==== Chromium Fix ======================

C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahpmdfdhaidjhbfcakeibbhokidgjibm deleted successfully
C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ahpmdfdhaidjhbfcakeibbhokidgjibm_0.localstorage deleted successfully
C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ahpmdfdhaidjhbfcakeibbhokidgjibm_0.localstorage-journal deleted successfully
C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdlfonnkihbmklapodikpajffkcaobni deleted successfully
C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gdlfonnkihbmklapodikpajffkcaobni_0.localstorage deleted successfully
C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gdlfonnkihbmklapodikpajffkcaobni_0.localstorage-journal deleted successfully
C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcdjknjpbnhdoabbngpmfekaecnpajba deleted successfully
C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hcdjknjpbnhdoabbngpmfekaecnpajba_0.localstorage deleted successfully
C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hcdjknjpbnhdoabbngpmfekaecnpajba_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{33BB0A4E-99AF-4226-BDF6-49120163DE86}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] not found

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0191A6B0-1154-4C22-9182-23A95BBE92D9} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE11SR"

==== Reset Google Chrome ======================

C:\Users\Ondra\AppData\Local\Comodo\Dragon\User Data\Default\Preferences was reset successfully
C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Ondra\AppData\Roaming\Opera Software\Opera Stable\Preferences was reset successfully
C:\Users\Ondra\AppData\Local\Comodo\Dragon\User Data\Default\Web Data was reset successfully
C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Ondra\AppData\Roaming\Opera Software\Opera Stable\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F7F10887-4242-2499-D6BF-02878E1D8A18} deleted successfully
HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Ondra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Ondra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ULZI2WBW will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Ondra\AppData\Local\Opera Software\Opera Stable\Cache emptied successfully
C:\Users\Ondra\AppData\Local\Comodo\Dragon\User Data\Default\Cache emptied successfully
C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=125 folders=60 17687013 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Ondra\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Ondra\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\MpCmdRun.log" not found
"C:\Users\Ondra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ULZI2WBW" not found

==== EOF on ne 23.11.2014 at 11:34:43,43 ======================

Re: Prosím o preventivní kontrolu s menším podezřením na Vir

Napsal: 23 lis 2014 11:43
od altrok
:arrow: Dejte novy log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

Re: Prosím o preventivní kontrolu s menším podezřením na Vir

Napsal: 23 lis 2014 11:57
od metys
FRST

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-11-2014 01
Ran by Ondra (administrator) on ONDRA-PC on 23-11-2014 11:55:47
Running from C:\Users\Ondra\Downloads
Loaded Profile: Ondra (Available profiles: Ondra)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(BitTorrent Inc.) C:\Users\Ondra\AppData\Roaming\uTorrent\uTorrent.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Google Inc.) C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Ondra\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-2214932203-3473591513-427715778-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-2214932203-3473591513-427715778-1000\...\Run: [uTorrent] => C:\Users\Ondra\AppData\Roaming\uTorrent\uTorrent.exe [1385808 2014-10-27] (BitTorrent Inc.)
HKU\S-1-5-21-2214932203-3473591513-427715778-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-2214932203-3473591513-427715778-1000\...\MountPoints2: E - E:\Setup.exe
HKU\S-1-5-21-2214932203-3473591513-427715778-1000\...\MountPoints2: F - F:\Setup.exe
HKU\S-1-5-21-2214932203-3473591513-427715778-1000\...\MountPoints2: {67bc0d1c-c319-11e2-9990-001fd0b2f1ee} - E:\setup\rsrc\Autorun.exe
HKU\S-1-5-21-2214932203-3473591513-427715778-1000\...409d6c4515e9\InprocServer32: [Default-shell32] <==== ATTENTION!

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = seznam.cz
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = seznam.cz
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = seznam.cz
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2214932203-3473591513-427715778-1000 -> DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2214932203-3473591513-427715778-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2214932203-3473591513-427715778-1000 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
Winsock: Catalog5 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5 05 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Winsock: Catalog5-x64 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 05 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Tcpip\Parameters: [DhcpNameServer] 89.203.192.1 89.203.192.2

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2214932203-3473591513-427715778-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Ondra\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-2214932203-3473591513-427715778-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Ondra\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-2214932203-3473591513-427715778-1000: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-23]
CHR Extension: (Disk Google) - C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-23]
CHR Extension: (YouTube) - C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-23]
CHR Extension: (Vyhledávání Google) - C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-23]
CHR Extension: (No Name) - C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-03]
CHR Extension: (Peněženka Google) - C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-25]
CHR Extension: (Gmail) - C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-23]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2139328 2014-05-27] (Comodo Security Solutions, Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2014-11-16] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-06-13] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-05-22] (DT Soft Ltd)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [32000 2013-08-19] ()
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-06-13] ()

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-23 11:55 - 2014-11-23 11:56 - 00009091 _____ () C:\Users\Ondra\Downloads\FRST.txt
2014-11-23 11:55 - 2014-11-23 11:55 - 00000000 ____D () C:\FRST
2014-11-23 11:54 - 2014-11-23 11:54 - 02118144 _____ (Farbar) C:\Users\Ondra\Downloads\FRST64.exe
2014-11-23 11:33 - 2014-11-23 11:21 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-11-23 11:30 - 2014-11-23 11:34 - 00000000 ____D () C:\zoek
2014-11-23 11:22 - 2014-11-23 11:34 - 00010783 _____ () C:\zoek-results.log
2014-11-23 11:21 - 2014-11-23 11:31 - 00000000 ____D () C:\zoek_backup
2014-11-23 11:21 - 2014-11-23 11:21 - 01294848 _____ () C:\Users\Ondra\Downloads\zoek.exe
2014-11-22 16:10 - 2014-11-22 16:21 - 00000000 ____D () C:\AdwCleaner
2014-11-22 16:10 - 2014-11-22 16:10 - 02140160 _____ () C:\Users\Ondra\Downloads\adwcleaner_4.101.exe
2014-11-22 16:08 - 2014-11-22 16:09 - 04862664 _____ (AVAST Software) C:\Users\Public\Desktop\avast_free_antivirus_setup_online.exe
2014-11-22 16:08 - 2014-11-22 16:09 - 04862664 _____ (AVAST Software) C:\Users\Ondra\Downloads\avast_free_antivirus_setup_online.exe
2014-11-22 14:11 - 2014-11-22 14:11 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-11-22 03:06 - 2014-11-22 03:06 - 00021376 _____ () C:\Users\Ondra\Downloads\Annabelle(0000245050).zip
2014-11-21 15:56 - 2014-11-21 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-11-21 15:56 - 2014-11-21 15:56 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-11-21 15:55 - 2014-11-21 15:55 - 01138397 _____ () C:\Users\Ondra\Downloads\7z922.exe
2014-11-21 14:57 - 2014-11-23 11:34 - 00027282 _____ () C:\Windows\PFRO.log
2014-11-21 14:46 - 2014-11-21 14:48 - 00000000 ____D () C:\Program Files\trend micro
2014-11-21 14:46 - 2014-11-21 14:46 - 01222144 _____ () C:\Users\Ondra\Downloads\RSITx64.exe
2014-11-21 14:46 - 2014-11-21 14:46 - 00000000 ____D () C:\rsit
2014-11-19 17:59 - 2014-11-19 17:59 - 00028669 _____ () C:\Users\Ondra\Downloads\Rendition(0000104158).zip
2014-11-19 09:13 - 2014-11-19 09:13 - 00038640 _____ () C:\Users\Ondra\Downloads\The-Hobbit-The-Desolation-of-Smaug(0000233750).zip
2014-11-19 08:35 - 2014-11-19 08:36 - 00023907 _____ () C:\Users\Ondra\Downloads\House-of-Cards-S02E04(0000232598).zip
2014-11-19 07:35 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 07:35 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-19 07:35 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-19 07:35 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-18 09:51 - 2014-11-18 09:51 - 00000098 ____H () C:\Users\Ondra\Downloads\.~lock.Zpráva pro studenty AA2P na 10. 11. a 11.11.2014.doc#
2014-11-18 09:46 - 2014-11-18 09:46 - 00000098 ____H () C:\Users\Ondra\Downloads\.~lock.Zpráva pro studenty AA2P na (17.11.) a 18.11.2014.docx#
2014-11-17 10:31 - 2014-11-17 10:31 - 00001808 _____ () C:\Users\Ondra\Desktop\CoDWaW.lnk
2014-11-16 13:17 - 2014-11-16 13:17 - 00000000 ____D () C:\Users\Ondra\AppData\Local\PunkBuster
2014-11-16 13:17 - 2014-11-16 13:17 - 00000000 ____D () C:\Users\Ondra\AppData\Local\Activision
2014-11-16 11:40 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-11-16 11:40 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-11-16 11:40 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-11-16 11:40 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-11-16 11:40 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-11-16 11:40 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-11-16 11:40 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-11-16 11:40 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-11-16 11:40 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-11-16 11:40 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-11-16 11:40 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-11-16 11:40 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-11-16 11:40 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-11-16 11:40 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-11-16 11:40 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-11-16 11:40 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-11-16 11:40 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-11-16 11:40 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-11-16 11:40 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-11-16 11:40 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-11-16 11:40 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-11-16 11:40 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-11-16 11:40 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-11-16 11:40 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-11-16 11:40 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-11-16 11:40 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-11-16 11:40 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-11-16 11:40 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-11-16 11:40 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-11-16 11:40 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-11-16 11:40 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-11-16 11:40 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-11-16 11:40 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-11-16 11:40 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-11-16 11:40 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-11-16 11:40 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-11-16 11:39 - 2014-11-17 10:31 - 00111928 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-11-16 11:39 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-11-16 11:39 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-11-16 11:39 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-11-16 11:39 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-11-16 11:39 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-11-16 11:39 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-11-16 11:39 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-11-16 11:39 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-11-16 11:39 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-11-16 11:39 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-11-16 11:39 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-11-16 11:39 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-11-16 11:39 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-11-16 11:39 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-11-16 11:39 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-11-16 11:39 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-11-16 11:39 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-11-16 11:39 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-11-16 11:39 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-11-16 11:39 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-11-16 11:39 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-11-16 11:39 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-11-16 11:39 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-11-16 11:39 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-11-16 11:39 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-11-16 11:39 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-11-16 11:39 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-11-16 11:39 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-11-16 11:39 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-11-16 11:39 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-11-16 11:39 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-11-16 11:39 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-11-16 11:39 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-11-16 11:39 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-11-16 11:39 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-11-16 11:39 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-11-16 11:39 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-11-16 11:39 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-11-16 11:39 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-11-16 11:39 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-11-16 11:39 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-11-16 11:39 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-11-16 11:39 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-11-16 11:39 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-11-16 11:39 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-11-16 11:39 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-11-16 11:39 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-11-16 11:39 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-11-16 11:39 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-11-16 11:39 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-11-16 11:39 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-11-16 11:39 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-11-16 11:39 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-11-16 11:39 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-11-16 11:39 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-11-16 11:39 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-11-16 11:39 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-11-16 11:39 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-11-16 11:39 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-11-16 11:39 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-11-16 11:39 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-11-16 11:39 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-11-16 11:39 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-11-16 11:39 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-11-16 11:39 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-11-16 11:39 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-11-16 11:39 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-11-16 11:39 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-11-16 11:38 - 2014-11-16 11:38 - 00682280 _____ () C:\Windows\SysWOW64\pbsvc.exe
2014-11-16 11:38 - 2014-11-16 11:38 - 00066872 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-11-16 11:31 - 2014-11-16 11:31 - 00000000 ____D () C:\Program Files (x86)\Activision
2014-11-16 11:18 - 2008-11-07 21:12 - 3177971712 _____ () C:\Users\Ondra\Desktop\rld-cod5.iso
2014-11-16 10:58 - 2007-11-06 20:52 - 2491711488 _____ () C:\Users\Ondra\Desktop\Hra Call Of Duty 4.iso
2014-11-15 21:44 - 2014-11-15 21:44 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-11-13 09:03 - 2014-11-13 09:07 - 00000000 ____D () C:\Users\Ondra\Downloads\slovinský jazyk
2014-11-12 08:36 - 2014-11-07 20:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 08:36 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-12 08:36 - 2014-11-06 05:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 08:36 - 2014-11-06 05:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 08:36 - 2014-11-06 05:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 08:36 - 2014-11-06 04:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 08:36 - 2014-11-06 04:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 08:36 - 2014-11-06 04:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 08:36 - 2014-11-06 04:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 08:36 - 2014-11-06 04:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 08:36 - 2014-11-06 04:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 08:36 - 2014-11-06 04:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 08:36 - 2014-11-06 04:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 08:36 - 2014-11-06 04:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 08:36 - 2014-11-06 04:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 08:36 - 2014-11-06 04:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 08:36 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-12 08:36 - 2014-11-06 04:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 08:36 - 2014-11-06 04:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 08:36 - 2014-11-06 04:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 08:36 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-12 08:36 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-12 08:36 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-12 08:36 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-12 08:36 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-12 08:36 - 2014-11-06 04:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 08:36 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-12 08:36 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-12 08:36 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-12 08:36 - 2014-11-06 04:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 08:36 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-12 08:36 - 2014-11-06 04:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 08:36 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-12 08:36 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-12 08:36 - 2014-11-06 03:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 08:36 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-12 08:36 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 08:36 - 2014-11-06 03:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 08:36 - 2014-11-06 03:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 08:36 - 2014-11-06 03:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 08:36 - 2014-11-06 03:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 08:36 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-12 08:36 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-12 08:36 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-12 08:36 - 2014-11-06 03:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 08:36 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-12 08:36 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-12 08:36 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-12 08:36 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-12 08:36 - 2014-11-06 03:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 08:36 - 2014-11-06 03:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 08:36 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-12 08:36 - 2014-11-06 02:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 08:36 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-12 08:36 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-12 08:36 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-12 08:36 - 2014-11-05 18:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 08:36 - 2014-11-05 18:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 08:36 - 2014-11-05 18:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 08:36 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 08:36 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 08:36 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 08:36 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 08:36 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 08:36 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-12 08:36 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-12 08:36 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-12 08:36 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-12 08:35 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 08:35 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-12 08:35 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 08:35 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-11-12 08:35 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 08:35 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-11-12 08:35 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 08:35 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 08:35 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 08:35 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 08:35 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 08:35 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 08:35 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-12 08:35 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-12 08:35 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-12 08:35 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 08:35 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 08:35 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 08:35 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 08:35 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 08:35 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 08:35 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-12 08:35 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-12 08:35 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-12 08:35 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-12 08:35 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-12 08:35 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-12 08:35 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 08:35 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 08:35 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-12 08:35 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-12 08:35 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 08:35 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-10 10:43 - 2009-03-03 19:43 - 24965481 _____ () C:\Users\Ondra\Desktop\patch_en.pack
2014-11-10 10:42 - 2010-02-24 21:36 - 00000000 ____D () C:\Users\Ondra\Downloads\Empire Total War čeština
2014-11-10 09:44 - 2014-11-23 11:34 - 00001736 _____ () C:\Windows\setupact.log
2014-11-10 09:44 - 2014-11-10 09:44 - 00000000 _____ () C:\Windows\setuperr.log
2014-11-09 22:40 - 2014-11-09 22:40 - 00000959 _____ () C:\Users\Ondra\Desktop\Empire Total War by Synergy.lnk
2014-11-09 22:39 - 2014-11-16 11:40 - 00020376 _____ () C:\Windows\DirectX.log
2014-11-08 10:48 - 2014-11-08 10:48 - 00000796 _____ () C:\Users\Public\Desktop\OpenTTD.lnk
2014-11-08 10:48 - 2014-11-08 10:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenTTD
2014-11-08 10:38 - 2014-11-09 16:13 - 00000000 ____D () C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microprose
2014-11-08 10:38 - 1996-09-30 19:46 - 00024576 ____N () C:\Windows\UniFISH.exe
2014-11-08 09:34 - 2014-11-08 10:28 - 00000000 ____D () C:\Users\Ondra\Downloads\Transport-tycoon-deluxe-CZ
2014-11-05 09:08 - 2014-11-05 09:08 - 00009594 _____ () C:\Users\Ondra\Documents\Metelka možný časový rozvrh.ods
2014-11-03 11:09 - 2014-11-03 11:09 - 00001200 _____ () C:\Users\Public\Desktop\DMG Extractor.lnk
2014-11-03 11:09 - 2014-11-03 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reincubate
2014-11-03 11:09 - 2014-11-03 11:09 - 00000000 ____D () C:\Program Files (x86)\Reincubate
2014-10-24 13:15 - 2014-10-24 13:15 - 00000000 ____D () C:\Users\Ondra\AppData\Local\DOSBox
2014-10-24 13:11 - 2014-10-24 13:11 - 00001918 _____ () C:\Users\Public\Desktop\DOSBox 0.74.lnk
2014-10-24 13:11 - 2014-10-24 13:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DOSBox-0.74
2014-10-24 13:11 - 2014-10-24 13:11 - 00000000 ____D () C:\Program Files (x86)\DOSBox-0.74

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-23 11:55 - 2013-05-23 14:32 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-23 11:54 - 2014-07-30 16:14 - 00000000 ____D () C:\Users\Ondra\AppData\Roaming\uTorrent
2014-11-23 11:54 - 2013-05-23 14:32 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-23 11:50 - 2013-05-23 14:32 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-23 11:49 - 2013-05-23 14:32 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-23 11:41 - 2009-07-14 05:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-23 11:41 - 2009-07-14 05:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-23 11:38 - 2013-05-22 20:34 - 01404938 _____ () C:\Windows\WindowsUpdate.log
2014-11-23 11:34 - 2014-01-30 22:41 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-11-23 11:34 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-23 11:31 - 2013-05-22 20:54 - 00000000 ____D () C:\Users\Ondra
2014-11-23 11:31 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-11-23 11:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-11-23 11:04 - 2013-05-22 21:33 - 00000962 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2214932203-3473591513-427715778-1000UA.job
2014-11-22 16:28 - 2013-05-23 14:02 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-11-22 16:21 - 2014-08-08 16:03 - 00000000 ____D () C:\Windows\system32\log
2014-11-22 16:09 - 2013-05-23 14:30 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-11-22 15:37 - 2014-10-05 13:40 - 00003830 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1412512799
2014-11-22 13:06 - 2013-05-22 21:33 - 00000910 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2214932203-3473591513-427715778-1000Core.job
2014-11-22 02:08 - 2010-11-21 10:27 - 05184552 _____ () C:\Windows\system32\perfh005.dat
2014-11-22 02:08 - 2010-11-21 10:27 - 01677440 _____ () C:\Windows\system32\perfc005.dat
2014-11-22 02:08 - 2009-07-14 06:13 - 00006256 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-21 16:00 - 2013-05-23 14:00 - 00000000 ____D () C:\Users\Public\Documents\Sports Interactive
2014-11-21 16:00 - 2013-05-23 14:00 - 00000000 ____D () C:\Users\Ondra\Documents\Sports Interactive
2014-11-21 16:00 - 2013-05-23 14:00 - 00000000 ____D () C:\Users\Ondra\AppData\Local\Sports Interactive
2014-11-21 15:35 - 2013-05-28 12:36 - 00000000 ____D () C:\Users\Ondra\Documents\OpenTTD
2014-11-21 14:45 - 2014-07-06 09:21 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-21 14:44 - 2014-07-06 09:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-11-21 14:44 - 2014-07-06 09:20 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-11-21 14:44 - 2013-07-04 15:36 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-11-18 21:26 - 2014-10-15 17:05 - 00001045 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 26.lnk
2014-11-18 11:34 - 2013-07-24 08:06 - 00000000 ____D () C:\Users\Ondra\Desktop\Serialy
2014-11-16 11:40 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-11-16 11:38 - 2013-05-25 10:10 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-16 11:07 - 2013-05-22 21:42 - 00000000 ____D () C:\Users\Ondra\AppData\Roaming\DAEMON Tools Lite
2014-11-13 16:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-11-12 21:50 - 2009-07-14 05:45 - 00323952 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-12 21:48 - 2014-07-06 09:08 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-09 22:40 - 2013-05-25 08:34 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-11-09 22:39 - 2013-05-25 08:34 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-11-08 10:48 - 2013-05-28 12:35 - 00000000 ____D () C:\Program Files\OpenTTD
2014-11-08 08:21 - 2013-08-31 13:36 - 00000000 ____D () C:\Program Files (x86)\WarThunder
2014-11-04 14:30 - 2010-11-21 04:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-04 13:43 - 2014-09-13 14:18 - 00000000 ____D () C:\Users\Ondra\Desktop\metyho ultra mega mix!
2014-11-03 21:20 - 2013-05-22 20:55 - 00000000 ____D () C:\Users\Ondra\AppData\Local\VirtualStore
2014-11-01 14:48 - 2013-05-23 14:02 - 00001841 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-11-01 14:48 - 2013-05-23 14:02 - 00001829 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-11-01 14:48 - 2013-05-22 21:34 - 00002326 _____ () C:\Users\Ondra\Desktop\Google Chrome.lnk
2014-11-01 14:48 - 2013-05-22 20:55 - 00001393 _____ () C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-15 15:21

==================== End Of Log ============================

Re: Prosím o preventivní kontrolu s menším podezřením na Vir

Napsal: 23 lis 2014 11:58
od metys
Addition


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-11-2014 01
Ran by Ondra at 2014-11-23 11:56:57
Running from C:\Users\Ondra\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2214932203-3473591513-427715778-1000\...\uTorrent) (Version: 3.4.2.34944 - BitTorrent Inc.)
7-Zip 9.22beta (HKLM-x32\...\7-Zip) (Version: - )
Adobe Reader XI (11.0.09) - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
ANNO 1404 (HKLM-x32\...\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}) (Version: 1.00.0000 - Ubisoft)
Anno 1404 (x32 Version: 1.00.0000 - Ubisoft) Hidden
Call of Duty(R) - World at War(TM) (HKLM-x32\...\InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}) (Version: 1.0 - Activision)
Call of Duty(R) - World at War(TM) (x32 Version: 1.0 - Activision) Hidden
Call of Juarez - Bound in Blood (HKLM-x32\...\InstallShield_{FEFAF112-4DA8-479C-89E2-7DE25091711A}) (Version: 1.00.0000 - Ubisoft)
Call of Juarez - Bound in Blood (x32 Version: 1.00.0000 - Ubisoft) Hidden
Call of Juarez Gunslinger (c) Ubisoft version 1 (HKLM-x32\...\Q2FsbG9mSnVhcmV6R3Vuc2xpbmdlcg==_is1) (Version: 1 - )
CCleaner (HKLM\...\CCleaner) (Version: 4.15 - Piriform)
Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 33.1.0.1 - Comodo)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
DMG Extractor (HKLM-x32\...\DMGExtractor) (Version: 1.1.1.1 - Reincubate Ltd)
Football Manager 2013 verze 13.3.3 (HKLM-x32\...\{04BDADD5-B981-49DB-90F0-DE11F19C50B4}_is1) (Version: 13.3.3 - SEGA)
FormatFactory 3.3.1.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.1.0 - Format Factory)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.2.53.5169 - Gretech Corporation)
Google Chrome (HKU\S-1-5-21-2214932203-3473591513-427715778-1000\...\Google Chrome) (Version: 31.0.1650.63 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
Mafia Game (HKLM-x32\...\Mafia Game) (Version: - )
Mafia II (HKLM-x32\...\Mafia II_is1) (Version: - )
Malwarebytes Anti-Malware verze 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Mortal Kombat Komplete Edition (HKLM-x32\...\Mortal Kombat Komplete Edition_is1) (Version: - Warner Bros. Interactive Entertainment)
MPC-HC 1.7.6 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.6 - MPC-HC Team)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero BurnLite 10 (HKLM-x32\...\{842BEE12-CCCB-43F4-ABAF-CBA6DFE2583D}) (Version: 10.0.10600 - Nero AG)
Nero BurnLite 10 (HKLM-x32\...\{AB627AF2-9C7E-4DBD-816B-3B2646B81E89}) (Version: 10.0.10500.5.100 - Nero AG)
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
OpenOffice.org 3.4.1 (HKLM-x32\...\{1E0AF527-0B8E-4F8A-BA27-CB3C359998C6}) (Version: 3.41.9593 - Apache Software Foundation)
OpenTTD 1.3.0 (HKLM-x32\...\OpenTTD) (Version: 1.3.0 - OpenTTD)
Opera 12.17 (HKLM-x32\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA)
Opera Stable 26.0.1656.24 (HKLM-x32\...\Opera 26.0.1656.24) (Version: 26.0.1656.24 - Opera Software ASA)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.0.9.5 - Rockstar Games)
Shockwave (HKLM-x32\...\Shockwave) (Version: - )
SPMT (HKLM-x32\...\{A2C3A640-2B29-4772-BC76-AA5989FFB532}) (Version: 3.1.0 - SPMT)
System Requirements Lab Detection (HKLM-x32\...\{A4116C68-BA33-4AA2-AA2D-6F290A03ECB7}) (Version: 2.2.3.0 - Husdawg, LLC)
The Battle for Middle-earth (tm) (HKLM-x32\...\{3F290582-3F4E-4B96-009C-E0BABAA40C42}) (Version: - )
The Battle for Middle-earth (tm) II (HKLM-x32\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version: - )
The Lord of the Rings, The Rise of the Witch-king (HKLM-x32\...\{B931FB80-537A-4600-00AD-AC5DEDB6C25B}) (Version: - )
Total War ROME II (HKLM-x32\...\VG90YWxXYXJST01FSUk=_is1) (Version: 1 - )
TrackMania Nations ESWC 0.1.7.5 (HKLM-x32\...\TmNations_is1) (Version: - Nadeo)
Transport Tycoon Deluxe (HKLM-x32\...\ft_Transport Tycoon Deluxe) (Version: - )
War Thunder Launcher 1.0.1.269 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - 2013 Gaijin Entertainment Corporation)
WinRAR 4.20 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
World in Conflict (HKLM-x32\...\{F11ADC64-C89E-47F4-A0B3-3665FF859397}) (Version: 1.0.0.0 - Massive Entertainment AB)
World of Warplanes (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C813EU}_is1) (Version: - Wargaming.net)
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.1) (Version: 1.3.1 - Xvid Team)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points =========================

15-11-2014 20:44:04 Installed System Requirements Lab Detection
16-11-2014 10:27:25 Installed Call of Duty(R) - World at War(TM)
18-11-2014 08:16:05 Windows Update
19-11-2014 11:11:54 Windows Update
23-11-2014 10:22:53 zoek.exe restore point

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2014-11-23 11:23 - 00000840 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1456F7AE-36C0-4354-A180-9BE7D3DED15C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-23] (Google Inc.)
Task: {289B7FDD-9913-41F0-A960-68197E577750} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-06-24] (Piriform Ltd)
Task: {62753ABB-84E2-4DB4-B946-99010479DA5A} - System32\Tasks\Opera scheduled Autoupdate 1412512799 => C:\Program Files (x86)\Opera\launcher.exe [2014-11-20] (Opera Software)
Task: {7C79C9F8-FB35-40B8-899D-C0F4C52D34F8} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2214932203-3473591513-427715778-1000Core => C:\Users\Ondra\AppData\Local\Google\Update\GoogleUpdate.exe [2013-05-22] (Google Inc.)
Task: {A0FB320C-8DFC-46E3-84B8-68E69A184AFB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2214932203-3473591513-427715778-1000UA => C:\Users\Ondra\AppData\Local\Google\Update\GoogleUpdate.exe [2013-05-22] (Google Inc.)
Task: {ABC28588-4ABA-4943-AFD4-55913A3AF252} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-23] (Google Inc.)
Task: {C0947D4B-E0E3-49E7-B095-2A346C6CA62D} - System32\Tasks\Google Updater and Installer => C:\Users\Ondra\AppData\Local\Google\Update\GoogleUpdate.exe [2013-05-22] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2214932203-3473591513-427715778-1000Core.job => C:\Users\Ondra\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2214932203-3473591513-427715778-1000UA.job => C:\Users\Ondra\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-11-16 11:38 - 2014-11-16 11:38 - 00066872 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2013-12-05 23:12 - 2013-12-04 03:47 - 00702416 _____ () C:\Users\Ondra\AppData\Local\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-05 23:12 - 2013-12-04 03:47 - 00099792 _____ () C:\Users\Ondra\AppData\Local\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-05 23:12 - 2013-12-04 03:48 - 04055504 _____ () C:\Users\Ondra\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-05 23:12 - 2013-12-04 03:48 - 00399312 _____ () C:\Users\Ondra\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-05 23:12 - 2013-12-04 03:47 - 01619408 _____ () C:\Users\Ondra\AppData\Local\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-05 23:12 - 2013-12-04 03:48 - 13586896 _____ () C:\Users\Ondra\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-2214932203-3473591513-427715778-500 - Administrator - Disabled)
Guest (S-1-5-21-2214932203-3473591513-427715778-501 - Limited - Disabled)
Ondra (S-1-5-21-2214932203-3473591513-427715778-1000 - Administrator - Enabled) => C:\Users\Ondra

==================== Faulty Device Manager Devices =============

Name: Microsoft ISATAP Adapter
Description: Microsoft ISATAP Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Teredo Tunneling Pseudo-Interface
Description: Adaptér tunelového režimu Microsoft Teredo
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/23/2014 11:36:18 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2014 10:47:06 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/22/2014 04:24:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/22/2014 03:33:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/22/2014 01:36:41 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/22/2014 09:47:29 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/22/2014 02:08:33 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Uvolnění řetězců čítačů výkonu pro službu WmiApRpl (WmiApRpl) se nezdařilo. První hodnota DWORD v datové oblasti obsahuje kód chyby.

Error: (11/22/2014 02:08:33 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error: (11/22/2014 02:08:33 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error: (11/22/2014 02:04:10 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (11/23/2014 11:34:39 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba IKE and AuthIP IPsec Keying Modules závisí na službě Služba BFE (Base Filtering Engine), která neuspěla při spuštění v důsledku následující chyby:
%%5

Error: (11/23/2014 11:34:38 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Brána Windows Firewall závisí na službě Služba BFE (Base Filtering Engine), která neuspěla při spuštění v důsledku následující chyby:
%%5

Error: (11/23/2014 11:34:38 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba BFE (Base Filtering Engine) byla ukončena s následující chybou:
%%5

Error: (11/23/2014 11:34:34 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (11/23/2014 11:34:34 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (11/23/2014 11:31:12 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (11/23/2014 11:31:11 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (11/23/2014 11:31:11 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (11/23/2014 11:31:10 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (11/23/2014 11:31:09 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.


Microsoft Office Sessions:
=========================
Error: (11/23/2014 11:36:18 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2014 10:47:06 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/22/2014 04:24:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/22/2014 03:33:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/22/2014 01:36:41 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/22/2014 09:47:29 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/22/2014 02:08:33 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (11/22/2014 02:08:33 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Performance1637070000000000000000000009030000

Error: (11/22/2014 02:08:33 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Performance1637070000000000000000000009030000

Error: (11/22/2014 02:04:10 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info ===========================

Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 6000+
Percentage of memory in use: 41%
Total physical RAM: 3071.55 MB
Available physical RAM: 1796.12 MB
Total Pagefile: 6141.29 MB
Available Pagefile: 4481.44 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.51 GB) (Free:242.24 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (My Disc) (CDROM) (Total:3.26 GB) (Free:0 GB) CDFS
Drive e: (CODWAW) (CDROM) (Total:6.96 GB) (Free:0 GB) UDF
Drive f: () (Removable) (Total:0.94 GB) (Free:0.89 GB) FAT
Drive g: (NOVÝ SVAZEK) (Removable) (Total:7.59 GB) (Free:7.59 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1659F4AD)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 964 MB) (Disk ID: 91F72D24)
Partition 1: (Active) - (Size=964 MB) - (Type=06)

========================================================
Disk: 2 (Size: 7.6 GB) (Disk ID: 20796B73)
No partition Table on disk 2.

==================== End Of Log ============================

Re: Prosím o preventivní kontrolu s menším podezřením na Vir

Napsal: 23 lis 2014 12:18
od altrok
:arrow: Stale nikde nevidim bezici antivir.

Re: Prosím o preventivní kontrolu s menším podezřením na Vir

Napsal: 23 lis 2014 12:52
od metys
zkusil jsem Avast, ale při instalaci mně to hlásí chybu:
Služba BFE(Base Filtering Engine) neběží

a dále mě to nenechá pokračovat v instalaci....

Jinak bych vám rád předem poděkoval za trpělivost :)

Re: Prosím o preventivní kontrolu s menším podezřením na Vir

Napsal: 23 lis 2014 13:23
od altrok
:arrow: Proc jste mi o tom nerekl drive?

:arrow: Pro domazani avastu, ktery do Vaseho PC jiz neco nakopiroval, pouzijte http://files.avast.com/iavs9x/avastclear.exe

:arrow: Start -> Spustit -> services.msc -> polozku Sluzba BFE (Base Filtering Engine) zapnete (dvojklik na polozku a vyberte moznost Spustit a pote Pouzit). Zkuste avast! nainstalovat ted.

Re: Prosím o preventivní kontrolu s menším podezřením na Vir

Napsal: 23 lis 2014 16:49
od metys
zkusil jsem to, ale po dvojkliku mi to hodí chybu:

Systém Windows nemohl v počítači Local Computer spustit službu Služba BFE
Chyba 5: přístup byl odepřen

Re: Prosím o preventivní kontrolu s menším podezřením na Vir

Napsal: 24 lis 2014 19:01
od altrok
:arrow: Postupujte, dle navodu kolegy
vyosek píše: :arrow: Stahnete Service Repair http://kb.eset.com/library/ESET/KB%20Te ... Repair.exe
  • Ulozte nejlepe na Plochu
  • Spustte a potvrdte Yes abyste potvrdil reinstalaci sluzeb
  • Nasledne kliknutim na Yes potvrdte restart PC
  • Na Plose vznikne slozka CC Support, najdete tam log SvcRepair.txt - mel by byt CC Support\Logs\SvcRepair.txt - vlozte mi jej sem
:arrow: Stahnete Farbar Service Scanner http://download.bleepingcomputer.com/farbar/FSS.exe
  • Ulozte nejlepe na Plochu
  • U vsech polozek udelejte zatrzitko (tim je oznacite pro skenovani)
  • Kliknete na Scan
  • Po dokonceni skenu se objevi log FSS.txt ten sem vlozte
:arrow: Nakonec zkuste opet nainstalovat avast!
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz