Prosím o kontrolu Logu

[zdenek_s]

Dobrý den.

Byl by někdo ochotný mi prosím zkontrolovat Log ? Jedu v nouzovém režimu jelikož mi zkolobovala grafická karta . Zítra má přijít nová a tak bych chtěl mít PC v pořádku. Trápí mě tu nějaká havěť, která mě neustále redirectuje na stránky a vyskakuje okna co nechci a prohlížeč mám plný reklam.

PC jsem čerstě přeinstalovat (systém mám originální) a chystám se začít hezky nanovo a po vánocích prověst upgrade pamětí RAM a HDD.

Zde je log:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-11-2014
Ran by Zdenek (administrator) on ZDENEK-PC on 23-11-2014 20:31:29
Running from C:\Users\Zdenek\Downloads
Loaded Profile: Zdenek (Available profiles: Zdenek)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 8
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.122\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.122\nacl64.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKU\S-1-5-21-861407083-2921192448-2687365285-1001\...\Run: [uTorrent] => C:\Users\Zdenek\AppData\Roaming\uTorrent\uTorrent.exe [1385808 2014-11-16] (BitTorrent Inc.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-861407083-2921192448-2687365285-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.default-search.net?sid=503&a ... 34&src=hmp
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = http://www.default-search.net/search?si ... earchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = http://www.default-search.net/search?si ... earchTerms}
SearchScopes: HKU\S-1-5-21-861407083-2921192448-2687365285-1001 -> {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL =
SearchScopes: HKU\S-1-5-21-861407083-2921192448-2687365285-1001 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = http://www.default-search.net/search?si ... earchTerms}
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKU\S-1-5-21-861407083-2921192448-2687365285-1001 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Tcpip\Parameters: [DhcpNameServer] 10.100.160.1 10.100.160.7

FireFox:
========
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (deal4me) - C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkjcfajbbkfkjbnomcopbdnaoeemgnek [2014-11-16]
CHR Extension: (Mini Clock) - C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\Extensions\lenkmnngkococopcblkldbgnamhdhllb [2014-11-16]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)


==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38216 2014-10-03] (NVIDIA Corporation)
S4 NVHDA; system32\drivers\nvhda64v.sys [X]
S3 NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-23 20:31 - 2014-11-23 20:31 - 00005755 _____ () C:\Users\Zdenek\Downloads\FRST.txt
2014-11-23 20:30 - 2014-11-23 20:31 - 00000000 ____D () C:\FRST
2014-11-23 20:30 - 2014-11-23 20:30 - 02118144 _____ (Farbar) C:\Users\Zdenek\Downloads\FRST64.exe
2014-11-23 20:29 - 2014-11-23 20:29 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenek\Downloads\Nepotvrzeno 113520.crdownload
2014-11-23 16:36 - 2014-11-23 16:36 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-11-23 16:34 - 2014-11-23 16:34 - 00000000 ____D () C:\Users\Zdenek\AppData\Roaming\Macromedia
2014-11-23 16:34 - 2014-11-23 16:34 - 00000000 ____D () C:\Users\Zdenek\AppData\Roaming\Adobe
2014-11-22 13:38 - 2014-11-23 14:55 - 00000000 ____D () C:\Users\Zdenek\Downloads\Ztraceni (LOST) 1-6 rada CZ
2014-11-21 18:48 - 2014-11-21 19:26 - 00000000 ____D () C:\Users\Zdenek\Downloads\How.to.Train.Your.Dragon.2.2014.BDRip.XviD.DD2.0.CZ.SK-TreZzoR
2014-11-21 18:48 - 2014-11-21 18:48 - 00018478 _____ () C:\Users\Zdenek\Downloads\[CzT]Jak_vycvicit_draka_2_How_to_Train_Your_Dragon_2_2014_CZ_SK_.torrent
2014-11-17 21:33 - 2014-11-17 21:33 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-17 21:33 - 2014-11-17 21:33 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-17 21:33 - 2014-11-17 21:33 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-17 21:32 - 2014-11-17 21:33 - 00000000 ____D () C:\Users\Zdenek\AppData\Local\Adobe
2014-11-17 21:32 - 2014-11-17 21:32 - 00000000 ____D () C:\Windows\system32\Macromed
2014-11-17 17:40 - 2014-11-17 17:40 - 00399224 _____ (Premium Installer ) C:\Users\Zdenek\Downloads\setup (2).exe
2014-11-17 15:23 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-11-17 15:23 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-11-17 15:17 - 2014-11-17 15:19 - 00000000 ____D () C:\Users\Zdenek\Downloads\Nero Burning ROM 2014 v15.0.05300 ML Incl. Crack + Key [ATOM]
2014-11-17 14:01 - 2014-11-17 14:01 - 00000000 ____D () C:\Users\Zdenek\AppData\Roaming\Nero
2014-11-17 14:00 - 2014-11-23 16:30 - 00000000 ____D () C:\ProgramData\Nero
2014-11-17 13:55 - 2014-11-17 13:55 - 32747816 _____ (Nero AG) C:\Users\Zdenek\Downloads\Nero_BurnLite-10.0.10600.exe
2014-11-17 13:13 - 2014-11-17 13:13 - 00000000 ____D () C:\ProgramData\374311380
2014-11-17 13:04 - 2014-11-17 13:04 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-11-17 13:04 - 2014-11-17 13:04 - 00000000 ____D () C:\ProgramData\Sun
2014-11-17 13:04 - 2014-11-17 13:04 - 00000000 ____D () C:\ProgramData\Oracle
2014-11-17 13:04 - 2014-11-17 13:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-11-17 13:04 - 2014-11-17 13:04 - 00000000 ____D () C:\Program Files (x86)\Java
2014-11-17 13:03 - 2014-11-17 13:03 - 00638888 _____ (Oracle Corporation) C:\Users\Zdenek\Downloads\chromeinstall-8u25 (1).exe
2014-11-17 13:01 - 2014-11-17 13:04 - 00000000 ____D () C:\Users\Zdenek\Downloads\Skrillex - Recess (2014) {FLAC} vtwin88cube
2014-11-17 13:01 - 2014-11-17 13:01 - 00638888 _____ (Oracle Corporation) C:\Users\Zdenek\Downloads\chromeinstall-8u25.exe
2014-11-17 13:01 - 2014-11-17 13:01 - 00409968 _____ (Premium Installer ) C:\Users\Zdenek\Downloads\setup (1).exe
2014-11-17 12:55 - 2014-11-17 12:55 - 00409968 _____ (Premium Installer ) C:\Users\Zdenek\Downloads\setup.exe
2014-11-16 14:26 - 2014-11-17 13:58 - 00000000 ____D () C:\ProgramData\saferweb
2014-11-16 14:26 - 2014-11-17 13:13 - 00000000 ____D () C:\ProgramData\2c44e489d10ca72d
2014-11-16 14:26 - 2014-11-16 14:26 - 00000000 ____D () C:\ProgramData\WorldWideCoupon
2014-11-16 13:50 - 2014-11-16 13:50 - 00000000 ____D () C:\Users\Zdenek\Documents\Optimizer Pro
2014-11-16 13:47 - 2014-11-16 13:47 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-11-16 13:45 - 2014-11-17 15:26 - 00000000 ____D () C:\Users\Zdenek\AppData\Roaming\RHEng
2014-11-16 13:45 - 2014-11-17 15:26 - 00000000 ____D () C:\Users\Zdenek\AppData\Roaming\OpenCandy
2014-11-16 13:45 - 2014-11-16 13:45 - 00000853 _____ () C:\Users\Zdenek\Desktop\µTorrent.lnk
2014-11-16 13:45 - 2014-11-16 13:45 - 00000833 _____ () C:\Users\Zdenek\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-11-16 03:42 - 2014-11-23 16:30 - 00000000 ____D () C:\Users\Zdenek\AppData\Roaming\uTorrent
2014-11-16 03:42 - 2014-11-23 15:47 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-16 03:42 - 2014-11-16 03:42 - 00124668 _____ () C:\Users\Zdenek\Downloads\[CzT]Ztraceni_Lost_1_6_serie_2004_2011.torrent
2014-11-16 03:42 - 2014-11-16 03:42 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-16 03:42 - 2014-11-16 03:42 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-16 03:40 - 2014-11-16 03:40 - 01936208 _____ (BitTorrent Inc.) C:\Users\Zdenek\Downloads\uTorrent.exe
2014-11-14 17:11 - 2014-11-14 17:11 - 00001409 _____ () C:\Users\Zdenek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-11-14 17:10 - 2014-11-14 17:11 - 00001443 _____ () C:\Users\Zdenek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-14 17:10 - 2014-11-14 17:10 - 00000020 ___SH () C:\Users\Zdenek\ntuser.ini
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Šablony
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Soubory cookie
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Poslední
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Okolní tiskárny
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Okolní síť
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Nabídka Start
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Dokumenty
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Documents\Obrázky
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Documents\Hudba
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Documents\Filmy
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Data aplikací
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\AppData\Local\Data aplikací
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Public\Documents\Obrázky
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Public\Documents\Hudba
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Public\Documents\Filmy
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Šablony
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Soubory cookie
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Poslední
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Okolní tiskárny
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Okolní síť
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Nabídka Start
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Dokumenty
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Documents\Obrázky
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Documents\Hudba
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Documents\Filmy
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Data aplikací
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Data aplikací
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Obrázky
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Hudba
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Filmy
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Data aplikací
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\ProgramData\Šablony
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\ProgramData\Plocha
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\ProgramData\Oblíbené položky
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\ProgramData\Nabídka Start
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\ProgramData\Dokumenty
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\ProgramData\Data aplikací
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 __SHD () C:\Recovery
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 ____D () C:\Users\Zdenek\AppData\Local\VirtualStore
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 ____D () C:\Users\Zdenek
2014-11-14 17:10 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Zdenek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-14 17:10 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Zdenek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-14 17:07 - 2014-11-23 20:09 - 00103970 _____ () C:\Windows\WindowsUpdate.log
2014-11-14 17:07 - 2014-11-14 17:07 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-11-14 17:07 - 2014-11-14 17:07 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-11-14 17:07 - 2014-11-14 17:07 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-11-14 17:04 - 2014-11-14 17:10 - 00000000 ____D () C:\Windows\Panther

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-23 20:11 - 2011-04-12 09:34 - 00665706 _____ () C:\Windows\system32\perfh005.dat
2014-11-23 20:11 - 2011-04-12 09:34 - 00139402 _____ () C:\Windows\system32\perfc005.dat
2014-11-23 20:11 - 2009-07-14 06:13 - 01575230 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-23 20:08 - 2004-01-14 09:46 - 00000000 ____D () C:\Users\Zdenek\AppData\Local\NVIDIA Corporation
2014-11-23 20:08 - 2004-01-14 09:42 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-11-23 20:08 - 2004-01-14 09:42 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-11-23 20:08 - 2004-01-14 09:35 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-11-23 20:05 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-23 20:05 - 2009-07-14 05:51 - 00030563 _____ () C:\Windows\setupact.log
2014-11-23 20:05 - 2004-01-14 09:43 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-23 16:37 - 2009-07-14 05:45 - 00016640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-23 16:37 - 2009-07-14 05:45 - 00016640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-23 16:28 - 2010-11-21 04:47 - 00006944 _____ () C:\Windows\PFRO.log
2014-11-23 16:28 - 2004-01-15 09:55 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-17 19:18 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-17 13:59 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-11-14 17:10 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-11-14 17:10 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-11-14 17:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-11-14 17:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-11-14 17:08 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-14 17:07 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-11-14 17:07 - 2009-07-14 05:46 - 00002790 _____ () C:\Windows\DtcInstall.log
2014-11-14 17:07 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-11-14 17:05 - 2009-07-14 05:45 - 00274736 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-14 17:03 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-11-14 17:03 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-11-04 14:30 - 2010-11-21 04:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-04 01:04 - 2004-01-14 09:42 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-11-04 01:04 - 2004-01-14 09:42 - 00059592 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 31891784 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 24555208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 20985544 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 20923712 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 19966344 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 18514080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 17259848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 16884632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 14031448 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 13943904 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 13207184 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-11-04 01:04 - 2004-01-14 09:36 - 11397208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 11335408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 04289168 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 04009672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 03238040 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 02849736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434465.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434465.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 00987520 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 00962704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 00934216 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 00922256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 00898192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 00870624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 00352016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 00303600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-11-04 01:04 - 2004-01-14 09:36 - 00027094 _____ () C:\Windows\system32\nvinfo.pb
2014-11-03 23:02 - 2004-01-14 09:42 - 06882448 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-11-03 23:02 - 2004-01-14 09:42 - 03531464 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-11-03 23:02 - 2004-01-14 09:42 - 02558792 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-11-03 23:02 - 2004-01-14 09:42 - 00935232 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-11-03 23:02 - 2004-01-14 09:42 - 00385352 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-11-03 23:02 - 2004-01-14 09:42 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-11-03 12:58 - 2004-01-14 09:42 - 04099264 _____ () C:\Windows\system32\nvcoproc.bin

Some content of TEMP:
====================
C:\Users\Zdenek\AppData\Local\Temp\nvStInst.exe
C:\Users\Zdenek\AppData\Local\Temp\optprosetup.exe
C:\Users\Zdenek\AppData\Local\Temp\~33A.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-16 14:28

==================== End Of Log ============================

Děkuji

[zdenek_s]

Za ten warez se omlouvám :/ .. koukáme s přítelkyní na filmy. A nero jsem vymazal, nakonec to vyřešil freeware audio burner.

[vyosek]

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Po spusteni probehne stazeni databaze
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  resethosts;
  emptyclsid;
  IEdefaults;
  FFdefaults;
  CHRdefaults;
  emptyIEcache;
  emptyFFcache;
  emptyCHRcache;
  emptyalltemp;
  emptyflash;
  emptyjava;
  emptyrecycle.bin;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

[zdenek_s]

# AdwCleaner v4.101 - Report created 23/11/2014 at 20:44:44
# Updated 09/11/2014 by Xplode
# Database : 2014-11-23.7 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Zdenek - ZDENEK-PC
# Running from : C:\Users\Zdenek\Downloads\adwcleaner_4.101.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\374311380
Folder Deleted : C:\ProgramData\WorldWideCoupon
Folder Deleted : C:\ProgramData\saferweb
Folder Deleted : C:\ProgramData\2c44e489d10ca72d
Folder Deleted : C:\Users\Zdenek\AppData\Local\Temp\AskSearch
Folder Deleted : C:\Users\Zdenek\AppData\LocalLow\DataMngr
Folder Deleted : C:\Users\Zdenek\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Zdenek\AppData\Roaming\RHEng
Folder Deleted : C:\Users\Zdenek\Documents\Optimizer Pro
Folder Deleted : C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkjcfajbbkfkjbnomcopbdnaoeemgnek

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\.
Key Deleted : HKLM\SOFTWARE\Classes\..9
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{46b3a426-ef1c-4e8e-b3f1-df79d5344ca2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{46b3a426-ef1c-4e8e-b3f1-df79d5344ca2}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{46b3a426-ef1c-4e8e-b3f1-df79d5344ca2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4613B1C1-FBC0-43C3-A4B9-B1D6CD360BB3}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Deleted : HKCU\Software\Linkey
Key Deleted : HKCU\Software\Optimizer Pro
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\SOFTWARE\SmdmF
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F488658-35A7-2AB8-A756-560BA8F103C3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37476589-E48E-439E-A706-56189E2ED4C4}_is1

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.7601.17514

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Google Chrome v38.0.2125.122

[C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : fkjcfajbbkfkjbnomcopbdnaoeemgnek

*************************

AdwCleaner[R0].txt - [4770 octets] - [23/11/2014 20:43:44]
AdwCleaner[S0].txt - [3955 octets] - [23/11/2014 20:44:44]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4015 octets] ##########

A zde ten druhý:


Zoek.exe v5.0.0.0 Updated 23-11-2014
Tool run by Zdenek on ne 23.11.2014 at 20:47:18,04.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Safe Mode NETWORK Internet Access Detected
Launched: C:\Users\Zdenek\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\AGEIA Technologies deleted successfully
C:\Users\Zdenek\AppData\Local\Adobe deleted successfully
C:\Users\Zdenek\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Chromium Look ======================

Mini Clock - Zdenek\AppData\Local\Google\Chrome\User Data\Default\Extensions\lenkmnngkococopcblkldbgnamhdhllb

==== Chromium Fix ======================

C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\Extensions\lenkmnngkococopcblkldbgnamhdhllb deleted successfully
C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lenkmnngkococopcblkldbgnamhdhllb_0.localstorage deleted successfully
C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lenkmnngkococopcblkldbgnamhdhllb_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"

==== Reset Google Chrome ======================

C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Zdenek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Zdenek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=8 folders=2 254176 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Zdenek\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Zdenek\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Zdenek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found

==== EOF on ne 23.11.2014 at 20:53:37,95 ======================

[vyosek]

Poprosim o novy log z FRST

[zdenek_s]

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-11-2014
Ran by Zdenek at 2014-11-23 21:00:52
Running from C:\Users\Zdenek\Downloads
Boot Mode: Safe Mode (with Networking)
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-861407083-2921192448-2687365285-1001\...\uTorrent) (Version: 3.4.2.35702 - BitTorrent Inc.)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.223 - Adobe Systems Incorporated)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.122 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile CSY Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile CSY Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended CSY Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended CSY Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
NVIDIA Systémový software PhysX 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points =========================

14-01-2004 08:37:26 Windows Update
14-01-2004 08:43:43 Nainstalováno rozhraní DirectX
16-11-2014 13:35:02 Naplánovaný kontrolní bod
17-11-2014 12:56:03 Nainstalováno: Microsoft Visual C++ 2005 Redistributable
17-11-2014 12:59:49 Installed Nero BurnLite 10.
17-11-2014 14:23:11 Nainstalováno rozhraní DirectX
17-11-2014 14:23:19 Nainstalováno rozhraní DirectX
22-11-2014 18:40:11 Windows Update
23-11-2014 15:29:34 Removed Ask Toolbar.
23-11-2014 15:30:07 Removed Nero BurnLite 10.
23-11-2014 15:37:12 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2014-11-23 20:47 - 00000840 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {75F0F1FB-9BEC-479C-895D-29EA8636C0C4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2004-01-15] (Google Inc.)
Task: {CF375501-7044-47D0-A0C1-2CE2F6667400} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2004-01-15] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============


==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-861407083-2921192448-2687365285-500 - Administrator - Disabled)
Guest (S-1-5-21-861407083-2921192448-2687365285-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-861407083-2921192448-2687365285-1002 - Limited - Enabled)
Zdenek (S-1-5-21-861407083-2921192448-2687365285-1001 - Administrator - Enabled) => C:\Users\Zdenek

==================== Faulty Device Manager Devices =============

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Řadič USB (Universal Serial Bus)
Description: Řadič USB (Universal Serial Bus)
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/23/2014 08:55:07 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2014 08:47:51 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Vytvoření bodu obnovení se nezdařilo (Proces = C:\Windows\system32\wbem\wmiprvse.exe; Popis = zoek.exe restore point; Chyba = 0x8007043c).

Error: (11/23/2014 08:47:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2014 08:08:21 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2014 04:30:31 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2014 04:12:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2014 04:09:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2014 02:26:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/22/2014 00:42:50 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/21/2014 06:40:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (11/23/2014 09:00:48 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (11/23/2014 09:00:48 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (11/23/2014 09:00:48 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (11/23/2014 08:55:48 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (11/23/2014 08:55:48 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (11/23/2014 08:55:48 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (11/23/2014 08:55:40 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084wuauserv{E60687F7-01A1-40AA-86AC-DB1CBF673334}

Error: (11/23/2014 08:53:50 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (11/23/2014 08:53:50 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (11/23/2014 08:53:50 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Prohledávání počítačů závisí na službě Server, která neuspěla při spuštění v důsledku následující chyby:
%%1068


Microsoft Office Sessions:
=========================
Error: (11/23/2014 08:55:07 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2014 08:47:51 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\wbem\wmiprvse.exezoek.exe restore point0x8007043c

Error: (11/23/2014 08:47:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2014 08:08:21 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2014 04:30:31 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2014 04:12:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2014 04:09:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2014 02:26:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/22/2014 00:42:50 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/21/2014 06:40:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5 CPU 760 @ 2.80GHz
Percentage of memory in use: 15%
Total physical RAM: 4091.49 MB
Available physical RAM: 3473.77 MB
Total Pagefile: 8181.18 MB
Available Pagefile: 7578.08 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:439.36 GB) (Free:411.76 GB) NTFS
Drive d: () (Fixed) (Total:492.06 GB) (Free:399.43 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 48C03554)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=439.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=492.1 GB) - (Type=07 NTFS)

==================== End Of Log ============================

[vyosek]

Jeste poprosim o log FRST.txt

[zdenek_s]

Tady je

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-11-2014
Ran by Zdenek (administrator) on ZDENEK-PC on 23-11-2014 21:10:13
Running from C:\Users\Zdenek\Downloads
Loaded Profile: Zdenek (Available profiles: Zdenek)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\DFDWiz.exe
(BitTorrent Inc.) C:\Users\Zdenek\AppData\Roaming\uTorrent\uTorrent.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\dfrgui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\S-1-5-21-861407083-2921192448-2687365285-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Tcpip\Parameters: [DhcpNameServer] 10.100.160.1 10.100.160.7

FireFox:
========
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-23]
CHR Extension: (Dokumenty Google) - C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-23]
CHR Extension: (Disk Google) - C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-23]
CHR Extension: (YouTube) - C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-23]
CHR Extension: (Vyhledávání Google) - C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-23]
CHR Extension: (Tabulky Google) - C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-23]
CHR Extension: (Gmail) - C:\Users\Zdenek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-23]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)


==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38216 2014-10-03] (NVIDIA Corporation)
S4 NVHDA; system32\drivers\nvhda64v.sys [X]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [X]
S3 NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-23 21:04 - 2014-11-23 21:04 - 00000000 ____D () C:\Users\Zdenek\AppData\Local\VirtualStore
2014-11-23 20:52 - 2014-11-23 20:47 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-11-23 20:47 - 2014-11-23 20:53 - 00005904 _____ () C:\zoek-results.log
2014-11-23 20:47 - 2014-11-23 20:52 - 00000000 ____D () C:\zoek_backup
2014-11-23 20:42 - 2014-11-23 20:44 - 00000000 ____D () C:\AdwCleaner
2014-11-23 20:42 - 2014-11-23 20:42 - 02140160 _____ () C:\Users\Zdenek\Downloads\adwcleaner_4.101.exe
2014-11-23 20:42 - 2014-11-23 20:42 - 01294848 _____ () C:\Users\Zdenek\Downloads\zoek.exe
2014-11-23 20:31 - 2014-11-23 21:10 - 00005460 _____ () C:\Users\Zdenek\Downloads\FRST.txt
2014-11-23 20:31 - 2014-11-23 21:01 - 00014925 _____ () C:\Users\Zdenek\Downloads\Addition.txt
2014-11-23 20:30 - 2014-11-23 21:10 - 00000000 ____D () C:\FRST
2014-11-23 20:30 - 2014-11-23 20:30 - 02118144 _____ (Farbar) C:\Users\Zdenek\Downloads\FRST64.exe
2014-11-23 16:36 - 2014-11-23 16:36 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-11-23 16:34 - 2014-11-23 16:34 - 00000000 ____D () C:\Users\Zdenek\AppData\Roaming\Macromedia
2014-11-23 16:34 - 2014-11-23 16:34 - 00000000 ____D () C:\Users\Zdenek\AppData\Roaming\Adobe
2014-11-22 13:38 - 2014-11-23 21:04 - 00000000 ____D () C:\Users\Zdenek\Downloads\Ztraceni (LOST) 1-6 rada CZ
2014-11-21 18:48 - 2014-11-21 19:26 - 00000000 ____D () C:\Users\Zdenek\Downloads\How.to.Train.Your.Dragon.2.2014.BDRip.XviD.DD2.0.CZ.SK-TreZzoR
2014-11-21 18:48 - 2014-11-21 18:48 - 00018478 _____ () C:\Users\Zdenek\Downloads\[CzT]Jak_vycvicit_draka_2_How_to_Train_Your_Dragon_2_2014_CZ_SK_.torrent
2014-11-17 21:33 - 2014-11-17 21:33 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-17 21:33 - 2014-11-17 21:33 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-17 21:33 - 2014-11-17 21:33 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-17 21:32 - 2014-11-17 21:32 - 00000000 ____D () C:\Windows\system32\Macromed
2014-11-17 17:40 - 2014-11-17 17:40 - 00399224 _____ (Premium Installer ) C:\Users\Zdenek\Downloads\setup (2).exe
2014-11-17 15:23 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-11-17 15:23 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-11-17 15:17 - 2014-11-17 15:19 - 00000000 ____D () C:\Users\Zdenek\Downloads\Nero Burning ROM 2014 v15.0.05300 ML Incl. Crack + Key [ATOM]
2014-11-17 14:01 - 2014-11-17 14:01 - 00000000 ____D () C:\Users\Zdenek\AppData\Roaming\Nero
2014-11-17 14:00 - 2014-11-23 16:30 - 00000000 ____D () C:\ProgramData\Nero
2014-11-17 13:55 - 2014-11-17 13:55 - 32747816 _____ (Nero AG) C:\Users\Zdenek\Downloads\Nero_BurnLite-10.0.10600.exe
2014-11-17 13:04 - 2014-11-17 13:04 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-11-17 13:04 - 2014-11-17 13:04 - 00000000 ____D () C:\ProgramData\Sun
2014-11-17 13:04 - 2014-11-17 13:04 - 00000000 ____D () C:\ProgramData\Oracle
2014-11-17 13:04 - 2014-11-17 13:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-11-17 13:04 - 2014-11-17 13:04 - 00000000 ____D () C:\Program Files (x86)\Java
2014-11-17 13:03 - 2014-11-17 13:03 - 00638888 _____ (Oracle Corporation) C:\Users\Zdenek\Downloads\chromeinstall-8u25 (1).exe
2014-11-17 13:01 - 2014-11-17 13:04 - 00000000 ____D () C:\Users\Zdenek\Downloads\Skrillex - Recess (2014) {FLAC} vtwin88cube
2014-11-17 13:01 - 2014-11-17 13:01 - 00638888 _____ (Oracle Corporation) C:\Users\Zdenek\Downloads\chromeinstall-8u25.exe
2014-11-17 13:01 - 2014-11-17 13:01 - 00409968 _____ (Premium Installer ) C:\Users\Zdenek\Downloads\setup (1).exe
2014-11-17 12:55 - 2014-11-17 12:55 - 00409968 _____ (Premium Installer ) C:\Users\Zdenek\Downloads\setup.exe
2014-11-16 13:47 - 2014-11-16 13:47 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-11-16 13:45 - 2014-11-16 13:45 - 00000853 _____ () C:\Users\Zdenek\Desktop\µTorrent.lnk
2014-11-16 13:45 - 2014-11-16 13:45 - 00000833 _____ () C:\Users\Zdenek\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-11-16 03:42 - 2014-11-23 21:08 - 00000000 ____D () C:\Users\Zdenek\AppData\Roaming\uTorrent
2014-11-16 03:42 - 2014-11-23 15:47 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-16 03:42 - 2014-11-16 03:42 - 00124668 _____ () C:\Users\Zdenek\Downloads\[CzT]Ztraceni_Lost_1_6_serie_2004_2011.torrent
2014-11-16 03:42 - 2014-11-16 03:42 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-16 03:42 - 2014-11-16 03:42 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-16 03:40 - 2014-11-16 03:40 - 01936208 _____ (BitTorrent Inc.) C:\Users\Zdenek\Downloads\uTorrent.exe
2014-11-14 17:11 - 2014-11-14 17:11 - 00001409 _____ () C:\Users\Zdenek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-11-14 17:10 - 2014-11-14 17:11 - 00001443 _____ () C:\Users\Zdenek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-14 17:10 - 2014-11-14 17:10 - 00000020 ___SH () C:\Users\Zdenek\ntuser.ini
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Šablony
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Soubory cookie
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Poslední
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Okolní tiskárny
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Okolní síť
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Nabídka Start
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Dokumenty
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Documents\Obrázky
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Documents\Hudba
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Documents\Filmy
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\Data aplikací
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Zdenek\AppData\Local\Data aplikací
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Public\Documents\Obrázky
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Public\Documents\Hudba
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Public\Documents\Filmy
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Šablony
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Soubory cookie
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Poslední
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Okolní tiskárny
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Okolní síť
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Nabídka Start
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Dokumenty
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Documents\Obrázky
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Documents\Hudba
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Documents\Filmy
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\Data aplikací
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Data aplikací
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Obrázky
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Hudba
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Filmy
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Data aplikací
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\ProgramData\Šablony
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\ProgramData\Plocha
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\ProgramData\Oblíbené položky
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\ProgramData\Nabídka Start
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\ProgramData\Dokumenty
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 _SHDL () C:\ProgramData\Data aplikací
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 __SHD () C:\Recovery
2014-11-14 17:10 - 2014-11-14 17:10 - 00000000 ____D () C:\Users\Zdenek
2014-11-14 17:10 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Zdenek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-14 17:10 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Zdenek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-14 17:07 - 2014-11-23 21:04 - 00111832 _____ () C:\Windows\WindowsUpdate.log
2014-11-14 17:07 - 2014-11-14 17:07 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-11-14 17:07 - 2014-11-14 17:07 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-11-14 17:07 - 2014-11-14 17:07 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-11-14 17:04 - 2014-11-14 17:10 - 00000000 ____D () C:\Windows\Panther

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-23 21:08 - 2011-04-12 09:34 - 00665706 _____ () C:\Windows\system32\perfh005.dat
2014-11-23 21:08 - 2011-04-12 09:34 - 00139402 _____ () C:\Windows\system32\perfc005.dat
2014-11-23 21:08 - 2009-07-14 06:13 - 01575230 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-23 21:05 - 2009-07-14 05:45 - 00016640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-23 21:05 - 2009-07-14 05:45 - 00016640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-23 21:04 - 2004-01-14 09:42 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-11-23 21:03 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-23 21:03 - 2009-07-14 05:51 - 00031031 _____ () C:\Windows\setupact.log
2014-11-23 21:03 - 2004-01-15 09:55 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-23 20:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-11-23 20:56 - 2004-01-14 09:42 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-11-23 20:53 - 2010-11-21 04:47 - 00007600 _____ () C:\Windows\PFRO.log
2014-11-23 20:08 - 2004-01-14 09:46 - 00000000 ____D () C:\Users\Zdenek\AppData\Local\NVIDIA Corporation
2014-11-17 19:18 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-17 13:59 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-11-14 17:10 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-11-14 17:10 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-11-14 17:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-11-14 17:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-11-14 17:08 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-14 17:07 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-11-14 17:07 - 2009-07-14 05:46 - 00002790 _____ () C:\Windows\DtcInstall.log
2014-11-14 17:07 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-11-14 17:05 - 2009-07-14 05:45 - 00274736 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-14 17:03 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-11-14 17:03 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-11-04 14:30 - 2010-11-21 04:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-16 14:28

==================== End Of Log ============================

[zdenek_s]

Já to popletl a dal jsem omylem log Addition.txt

[vyosek]

Addition se tez hodi, ale neni tak dulezity

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  CloseProcesses:
  
  HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
  2014-11-23 20:52 - 2014-11-23 20:47 - 00024064 _____ () C:\Windows\zoek-delete.exe
  2014-11-23 20:47 - 2014-11-23 20:53 - 00005904 _____ () C:\zoek-results.log
  2014-11-23 20:47 - 2014-11-23 20:52 - 00000000 ____D () C:\zoek_backup
  2014-11-23 20:42 - 2014-11-23 20:44 - 00000000 ____D () C:\AdwCleaner
  2014-11-23 20:42 - 2014-11-23 20:42 - 02140160 _____ () C:\Users\Zdenek\Downloads\adwcleaner_4.101.exe
  2014-11-23 20:42 - 2014-11-23 20:42 - 01294848 _____ () C:\Users\Zdenek\Downloads\zoek.exe
  2014-11-23 20:31 - 2014-11-23 21:10 - 00005460 _____ () C:\Users\Zdenek\Downloads\FRST.txt
  2014-11-23 20:31 - 2014-11-23 21:01 - 00014925 _____ () C:\Users\Zdenek\Downloads\Addition.txt
  
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  
  Hosts:
  EmptyTemp:
  Reboot:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

[zdenek_s]

Snad jsem to zvládnul:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 23-11-2014
Ran by Zdenek at 2014-11-23 21:15:41 Run:1
Running from C:\Users\Zdenek\Downloads
Loaded Profile: Zdenek (Available profiles: Zdenek)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
2014-11-23 20:52 - 2014-11-23 20:47 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-11-23 20:47 - 2014-11-23 20:53 - 00005904 _____ () C:\zoek-results.log
2014-11-23 20:47 - 2014-11-23 20:52 - 00000000 ____D () C:\zoek_backup
2014-11-23 20:42 - 2014-11-23 20:44 - 00000000 ____D () C:\AdwCleaner
2014-11-23 20:42 - 2014-11-23 20:42 - 02140160 _____ () C:\Users\Zdenek\Downloads\adwcleaner_4.101.exe
2014-11-23 20:42 - 2014-11-23 20:42 - 01294848 _____ () C:\Users\Zdenek\Downloads\zoek.exe
2014-11-23 20:31 - 2014-11-23 21:10 - 00005460 _____ () C:\Users\Zdenek\Downloads\FRST.txt
2014-11-23 20:31 - 2014-11-23 21:01 - 00014925 _____ () C:\Users\Zdenek\Downloads\Addition.txt

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Zdenek\Downloads\adwcleaner_4.101.exe => Moved successfully.
C:\Users\Zdenek\Downloads\zoek.exe => Moved successfully.
C:\Users\Zdenek\Downloads\FRST.txt => Moved successfully.
C:\Users\Zdenek\Downloads\Addition.txt => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 54.5 MB temporary data.


The system needed a reboot.

==== End of Fixlog ====

[vyosek]

Naprosto v poradku

Tak jeste uklidime

DelFix https://toolslib.net/downloads/finish/2/

• Stahnete a spustte
• Ponechte zatrzitkou pouze u volby Remote disinfection tools
• Kliknete na Run

Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

[zdenek_s]

Mockrát děkuji uvedené kroky jsem provedl. Moc si vážím vaší práce , nejsem zde poprvé a vždy se mi dostalo přímo profesionální pomocti.Dívím se, že v dnešní době jsou lidé, kteří tohle vše dělají zdarma a jen kvůli tomu pomáhat ostatním. Budu hlásat dobré jméno těchto bezchybných stránek

Nyní pár dotazů

Mám CCcleaner nechat nainstalovaný a spuštěný v pozadí?
Je zde nějaká možnost blokovat reklamy v prohlížeči ? Chvíli koukám po grafických kartách a už se mi všude ukazuje jestli si nějakou náhodu nechci koupit (Existuje nějaký solidní ADblock ?)

A dále se mi pořád ukazuje hláška že je něco v něpořádku s diskem a žebych si měl co nejdřívě udělat zálohu. Ale předpokládám že disk má to nejlepší zasebou.

Jak jsem říkal zítra bude nová Grafika. Po vánocích koupím jiný disk )tak snad zatím vydží) a přidám dalších 4 GB RAM.

A teď už jedině s antivirem

[vyosek]

CCleaner si nechte a klidne at probiha na pozadi monitoring - je to velmi sikovna utilitka

Ja pouzivam klasicky AdBlock

• Chrome https://chrome.google.com/webstore/deta ... idom?hl=cs
• Firefox https://addons.mozilla.org/cs/firefox/a ... lock-plus/

Pokud windows hlasi chyby disku, bude uz opravdu po smrti, takze zalohovat-zalohovat-zalohovat. Jednoho krasne dne uz nemusi PC nabehnout

Z bezplatnych antiviru mohu doporucit Avast Free. Z placenych pak doporucuji jiz komplexni balicky - Avast Internet Security, ESET Smart Security