VIRY.CZ

Logfile of random's system information tool 1.10 (written by random/random)
Run by Zdeněk at 2015-01-12 16:19:34
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 6 GB (13%) free of 50 GB
Total RAM: 3582 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:19:41, on 12.1.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Marias\mar.exe
C:\PROGRA~1\MICROS~1\Office15\OUTLOOK.EXE
C:\Windows\system32\msconfig.exe
C:\Windows\system32\mmc.exe
C:\Windows\system32\perfmon.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Zdeněk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TNP4BVS8\RSIT.exe
C:\Program Files\trend micro\Zdeněk.exe
C:\Windows\system32\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [GarminExpressTrayApp] "C:\Program Files\Garmin\Express Tray\ExpressTray.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [GarminExpressTrayApp] "C:\Program Files\Garmin\Express Tray\ExpressTray.exe" (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - (no file)
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

--
End of file - 5786 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-10-22 153248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-10 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-08-04 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL [2014-01-23 707800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2014-11-12 1729744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-08-04 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-01-09 5227112]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-08 500208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-07-22 402432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\Zdeněk\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Users\Zdeněk\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DXDllRegExe]
dxdllreg.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Family Tree Builder Update]
D:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe [2013-11-12 2532864]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FixCamera]
C:\WINDOWS\FixCamera.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarminExpressTrayApp]
C:\Program Files\Garmin\Express Tray\ExpressTray.exe [2014-08-07 688984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager]
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2003-06-26 212992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
D:\Program Files\HP Software Update\HPWuSchd.exe [2003-06-25 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HTC Sync Loader]
C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe -startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Windows\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSpeedUp]
C:\Program Files\Zrychleni Pocitace\PCSUNotifier.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2014-11-27 30524520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snp2std]
C:\Windows\vsnp2std.exe [2006-09-25 344064]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorShield]
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2013-04-03 2777736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdater]
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2013-04-03 3684488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\tsnp2std]
C:\Windows\tsnp2std.exe [2006-09-27 270336]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-01-12 16:19:34 ----D---- C:\rsit
2015-01-12 16:19:34 ----D---- C:\Program Files\trend micro
2014-12-21 15:51:08 ----D---- C:\Users\Zdeněk\AppData\Roaming\QuickScan
2014-12-18 07:08:38 ----A---- C:\Windows\system32\ieUnatt.exe
2014-12-13 17:25:02 ----D---- C:\ProgramData\Nikon
2014-12-13 16:11:36 ----D---- C:\Users\Zdeněk\AppData\Roaming\Nikon
2014-12-13 16:09:53 ----D---- C:\ProgramData\boost_interprocess
2014-12-13 16:08:11 ----H---- C:\ProgramData\PKP_DLes.DAT
2014-12-13 16:07:38 ----D---- C:\Program Files\Common Files\Nikon
2014-12-13 16:07:34 ----A---- C:\Windows\system32\ATL71.DLL
2014-12-13 16:07:29 ----H---- C:\ProgramData\PKP_DLev.DAT
2014-12-13 16:07:29 ----H---- C:\ProgramData\PKP_DLet.DAT
2014-12-13 16:07:29 ----D---- C:\ProgramData\Ultima_T15
2014-12-13 16:07:29 ----D---- C:\ProgramData\EnterNHelp
2014-12-13 16:07:00 ----D---- C:\ProgramData\54F3DE4E-B7BA-4EBD-8B3B-385D272CC583

======List of files/folders modified in the last 1 month======

2015-01-12 16:19:41 ----D---- C:\Windows\Prefetch
2015-01-12 16:19:36 ----D---- C:\Windows\Temp
2015-01-12 16:19:34 ----D---- C:\Program Files
2015-01-12 15:42:17 ----D---- C:\Windows\System32
2015-01-12 14:30:57 ----D---- C:\Windows\system32\config
2015-01-12 14:06:43 ----D---- C:\Users\Zdeněk\AppData\Roaming\vlc
2015-01-12 14:04:10 ----D---- C:\Users\Zdeněk\AppData\Roaming\Skype
2015-01-12 13:57:08 ----SHD---- C:\Windows\Installer
2015-01-09 18:07:05 ----D---- C:\Windows
2015-01-09 13:50:11 ----D---- C:\Windows\inf
2015-01-09 09:27:10 ----SHD---- C:\System Volume Information
2015-01-07 09:59:32 ----D---- C:\Windows\system32\catroot2
2015-01-06 04:36:02 ----N---- C:\Windows\system32\MpSigStub.exe
2015-01-05 09:41:10 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-12-21 16:11:33 ----D---- C:\Windows\Tasks
2014-12-21 16:11:33 ----D---- C:\Windows\system32\Tasks
2014-12-19 04:13:19 ----D---- C:\Windows\debug
2014-12-19 03:56:07 ----D---- C:\Windows\system32\drivers
2014-12-19 03:49:43 ----HD---- C:\ProgramData
2014-12-18 07:38:04 ----D---- C:\Windows\winsxs
2014-12-18 07:08:03 ----D---- C:\Windows\system32\catroot
2014-12-13 16:42:38 ----RSD---- C:\Windows\assembly
2014-12-13 16:41:21 ----D---- C:\ProgramData\Microsoft Help
2014-12-13 16:09:29 ----HD---- C:\Program Files\InstallShield Installation Information
2014-12-13 16:08:38 ----D---- C:\Program Files\Common Files\InstallShield
2014-12-13 16:07:38 ----D---- C:\Program Files\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-10 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-10 206248]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-10 81768]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-22 787800]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-21 423784]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-19 388096]
R1 sp_rsdrv2;Spyware Terminator 2012 Realtime Shield Driver; \??\C:\Windows\system32\drivers\sp_rsdrv2.sys [2011-06-21 32768]
R2 Aspi32;Aspi32; C:\Windows\System32\drivers\aspi32.sys [2009-10-11 16512]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-10 24184]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-10 70384]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-10 91496]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2014-11-10 218192]
R3 AndNetDiag;LGE AndroidNet USB Serial Port; C:\Windows\system32\DRIVERS\lgandnetdiag.sys [2014-07-07 24064]
R3 ANDNetModem;LGE AndroidNet USB Modem; C:\Windows\system32\DRIVERS\lgandnetmodem.sys [2014-07-07 28672]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-13 347264]
R3 SNP2STD;USB2.0 PC Camera (SNP2STD); C:\Windows\system32\DRIVERS\snp2sxp.sys [2006-09-26 12160512]
R3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 andnetndis;LGE AndroidNet NDIS Ethernet Adapter; C:\Windows\system32\DRIVERS\lgandnetndis.sys [2014-05-27 74240]
S3 aswTap;avast! SecureLine TAP Adapter v3; C:\Windows\system32\DRIVERS\aswTap.sys [2014-07-05 38984]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\Windows\system32\DRIVERS\HPZid412.sys [2005-10-21 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\Windows\system32\DRIVERS\HPZipr12.sys [2005-10-21 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\Windows\system32\DRIVERS\HPZius12.sys [2003-08-11 21488]
S3 HTCAND32;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2012-12-07 23040]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 15872]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-10 50344]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2014-11-10 3192344]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-22 102912]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 150600]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-10-01 4846168]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-06-06 1343400]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
S4 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 176128]
S4 Garmin Core Update Service;Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [2014-08-07 438616]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-06-06 116648]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-06-06 116648]
S4 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-08-04 194032]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\system32\HPZipm12.exe [2003-08-11 65795]
S4 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-04-03 315008]
S4 ssinstall;SInstalátor; C:\Windows\System32\ssins.exe [2014-05-19 2324216]
S4 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files\Spyware Terminator\st_rsser.exe [2013-04-03 587912]
S4 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

-----------------EOF-----------------

Zdravim

Pokud nepouzivate, odinstalujte Google Toolbar. Log jinak vypada ciste, takze jen rychla preventivka.

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/

• ukoncete vsechny programy
• kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
• kliknete na Scan, pote na Clean
• po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

# AdwCleaner v4.107 - Report created 14/01/2015 at 09:32:05
# Updated 07/01/2015 by Xplode
# Database : 2015-01-13.2 [Live]
# Operating System : Windows 7 Professional Service Pack 1 (32 bits)
# Username : Zdeněk - ZDENĚK-PC
# Running from : C:\Users\Zdeněk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5UQDQ3NV\adwcleaner_4.107.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files\MyPC Backup
Folder Deleted : C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Key Deleted : HKLM\SOFTWARE\microsoft\shared tools\msconfig\startupreg\PCSpeedUp
Key Deleted : HKCU\Software\Softonic

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Google Chrome v39.0.2171.95

[C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^HJ^man000^YYA^&si=pconvIE&ptb=3EB634BE-DF87-47DE-B72A-B26F2B7F2981&ind=2013112515&n=77fda8c3&psa=&st=sb&searchfor={searchTerms}
[C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.crawler.com/search/dispatcher.aspx? ... tbid=60347
[C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.search.ask.com/web?tpid=FF3-V7C&o=A ... erms}&psv=

*************************

AdwCleaner[R0].txt - [2030 octets] - [14/01/2015 09:30:04]
AdwCleaner[S0].txt - [1967 octets] - [14/01/2015 09:32:05]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2027 octets] ##########

Díky!!Zdenrs

Dejte novy log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 15-01-2015
Ran by Zdeněk at 2015-01-15 16:19:22
Running from C:\Users\Zdeněk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TNP4BVS8
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

1300 (Version: 5.31.1.27 - Hewlett-Packard) Hidden
1300_Help (Version: 5.31.1.27 - Hewlett-Packard) Hidden
1300Tour (Version: 5.31.1.27 - Hewlett-Packard) Hidden
1300Trb (Version: 5.31.1.27 - Hewlett-Packard) Hidden
Adobe Photoshop CS5 (HKLM\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Czech (HKLM\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
AiO_Scan (Version: 5.31.1.27 - Hewlett-Packard) Hidden
AIOMinimal (Version: 5.31.1.27 - Hewlett-Packard) Hidden
AiOSoftware (Version: 5.31.1.27 - Hewlett-Packard) Hidden
ANT Drivers Installer x86 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Avast Free Antivirus (HKLM\...\avast) (Version: 10.0.2208 - AVAST Software)
Balíček ovladače systému Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Balíček ovladače systému Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
BECHEROVKA MARIÁŠ (HKLM\...\BECHEROVKA MARIÁŠ_is1) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 4.02 - Piriform)
CDex - Open Source Digital Audio CD Extractor (HKLM\...\CDex) (Version: 1.73.0.2014 - Georgy Berdyshev)
Convert MOV to AVI 1.0 (HKLM\...\{A39EA3C8-7BF3-4FA7-9A67-3D3611BAE59E}_is1) (Version: - convertmovtoavi.com)
Elevated Installer (Version: 3.2.17.0 - Garmin Ltd or its subsidiaries) Hidden
Fax (Version: 5.31.1.27 - Hewlett-Packard) Hidden
FormatFactory 3.2.1.0 (HKLM\...\FormatFactory) (Version: 3.2.1.0 - Free Time)
Garmin Express (HKLM\...\{b43ffffb-1adc-4bcb-b277-7844ebff94da}) (Version: 3.2.17.0 - Garmin Ltd or its subsidiaries)
Garmin Express (Version: 3.2.17.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (Version: 3.2.17.0 - Garmin Ltd or its subsidiaries) Hidden
GoldWave v5.52 (HKLM\...\GoldWave v5.52) (Version: - )
GoldWave v5.69 (HKLM\...\GoldWave v5.69) (Version: 5.69 - GoldWave Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Chrome (HKLM\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
HP PSC & OfficeJet 3.0 (HKLM\...\{F38FA38A-7E5A-4209-88ED-4DE21CD20EEF}) (Version: 3.0 - HP)
HP Software Update (HKLM\...\{CC0A24CB-87C9-4F1C-A1F2-F87D8D4DDCAF}) (Version: 1.0.18.20030625 - Hewlett-Packard)
IPTInstaller (HKLM\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.8 - HTC)
LG PC Suite (HKLM\...\LG PC Suite) (Version: 5.3.22.20141205 - LG Electronics)
LG United Mobile Driver (HKLM\...\{2A3A4BD6-6CE0-4e2a-80D2-1D0FF6ACBFBA}) (Version: 3.12.3.0 - LG Electronics)
Microsoft .NET Framework 1.1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 1.1 Czech Language Pack (HKLM\...\{5E65E94D-69F2-4850-9E93-6459C53A0F50}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.1 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office FrontPage 2003 (HKLM\...\{90170405-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Language Pack 2013 - Czech/čeština (HKLM\...\Office15.OMUI.cs-cz) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyHeritage Family Tree Builder (HKLM\...\Family Tree Builder) (Version: 7.0.0.7128 - MyHeritage.com)
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Overland (Version: 1.76.0 - Hewlett-Packard) Hidden
PDF Settings CS5 (Version: 10.0 - Adobe Systems Incorporated) Hidden
Photo! 3D Album and Photo! 3D ScreenSaver 1.2 (HKLM\...\My Pictures Editor_is1) (Version: - )
Picture Control Utility 2 (HKLM\...\{4946D03F-421F-480D-96C9-D6CF90640D33}) (Version: 2.0.1 - Nikon)
PrintScreen (Version: 5.31.0.147 - Hewlett-Packard) Hidden
Readme (Version: 5.31.1.27 - Hewlett-Packard) Hidden
Scan (Version: 3.1.0.0 - Hewlett-Packard) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM\...\{90150000-0100-0405-0000-0000000FF1CE}_Office15.OMUI.cs-cz_{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}) (Version: - Microsoft)
Seznam Instalátor (HKLM\...\ssinstall) (Version: - Seznam.cz)
Seznam Software (HKU\S-1-5-21-1563119665-3996211366-461964742-1000\...\SeznamInstall) (Version: - Seznam.cz)
Skype Click to Call (HKLM\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.22 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.107 - Skype Technologies S.A.)
Spyware Terminator 2012 (HKLM\...\{56736259-613E-4A3B-B428-6235F2E76F44}_is1) (Version: 3.0.0.82 - Crawler.com)
Total Commander (Remove or Repair) (HKLM\...\Totalcmd) (Version: 8.01 - Ghisler Software GmbH)
USB2.0 WEB CAMERA (HKLM\...\{75438C0E-9925-412E-AD85-D0E71C6CE2ED}) (Version: 5.7.3.117 - )
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Movie Maker (HKLM\...\Windows Movie Maker) (Version: 6.0.6002.18005 - Microsoft Corporation)
Windows Movie Maker 2.6 (HKLM\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points =========================

14-01-2015 09:41:06 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {03C520CD-88EE-4C0C-93FF-CDDD30FE2A5C} - System32\Tasks\{F5C6E32F-4066-4B7E-8163-C9657C844F27} => D:\Program Files\Digital Imaging\bin\Hpqdirec.exe
Task: {05C2EFAB-0CC0-4FF3-B0FF-EFAA62429DB6} - System32\Tasks\{85CB66A6-2929-49ED-95FA-81637A0E8DC7} => pcalua.exe -a C:\Users\Zdeněk\Downloads\auxsetup.exe -d C:\Users\Zdeněk\Downloads
Task: {08B0799F-FE7C-4A2A-954A-DA1B2A7336F5} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Zdeněk-PC-Zdeněk Zdeněk-PC => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2014-11-12] (Microsoft Corporation)
Task: {1740A68B-EF1D-4866-801F-4434C4DC6D68} - System32\Tasks\{84839E41-7FA8-4A17-B1B4-6B81C36EC530} => D:\Program Files\Digital Imaging\bin\hpqthb08.exe
Task: {174F84DA-6364-45B8-B20B-69B231B5171E} - System32\Tasks\{40B8BA56-C149-45C6-8F8C-5087764B5958} => D:\Program Files\Digital Imaging\bin\Hpqdirec.exe
Task: {1A0866CC-3402-4983-A9F5-4C00178AEB90} - System32\Tasks\{204BCDD2-7958-44B6-AC54-D92B9C1BF85C} => D:\Program Files\Digital Imaging\bin\hpqthb08.exe
Task: {1DDD173A-4AFB-4E6E-87A2-2EBBB7B24EE7} - System32\Tasks\{89B1983A-0674-4386-82EF-85B1134A6416} => pcalua.exe -a E:\setup.exe -d E:\
Task: {1E4E27E3-D8C5-4FC0-A737-E452E8A6324F} - System32\Tasks\AdobeAAMUpdater-1.0-Zdeněk-PC-Zdeněk => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-08] (Adobe Systems Incorporated)
Task: {2439A461-09D7-41CB-82B3-8DCA4DCB5E3F} - System32\Tasks\{3B6FC303-9F9A-4BD5-81E0-5A967636B393} => C:\Program Files\Digital Imaging\bin\Hpqdirec.exe
Task: {29420D12-6081-4F8B-8DC0-B2E88D77A4DA} - System32\Tasks\{6E5B40F1-E553-4005-B9F4-F0990E82A247} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files\Digital Imaging\bin\hpqthb08.exe"
Task: {3CFBC366-5314-4943-8DA3-3AC11430B418} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {4A6E8D48-1ED4-412B-8FBB-BA868C9F189C} - System32\Tasks\{3782700E-12E1-40EE-8A2D-28A6B9D3DF57} => D:\Program Files\Digital Imaging\bin\Hpqdirec.exe
Task: {4CC4FCF9-ED0C-4816-9F42-C98384FC2FAD} - System32\Tasks\{17E4AADF-7D10-4FFD-B5CC-AA92782E9D42} => D:\Program Files\Digital Imaging\bin\Hpqdirec.exe
Task: {51216DBF-08A6-4B20-AF33-A978926F906A} - System32\Tasks\{90EFE98A-141C-40C7-BA5E-997042DE2891} => D:\Program Files\Digital Imaging\bin\Hpqdirec.exe
Task: {699B6A19-C9A7-4015-AC0D-B22008210EEF} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {6FAECFDA-9153-48A9-907B-1868ECFE8F4C} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-11-10] (AVAST Software)
Task: {72AC4E19-A4B3-41B5-8B6A-E704C12B9CB2} - System32\Tasks\{903DC659-8C35-44A7-9391-DB141B32239F} => D:\Program Files\Digital Imaging\bin\Hpqdirec.exe
Task: {731FB162-090E-4C1A-B6B2-CD5C461159F1} - System32\Tasks\{BC51928C-61F1-4637-9856-DEB703677C81} => C:\Program Files\Digital Imaging\bin\hpqthb08.exe
Task: {88BA583A-7CCE-4417-8F23-05626C0418C0} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {9EF299F4-07DB-4778-BE00-E58D0C337FA1} - System32\Tasks\{2B30C945-AE9C-43C4-9632-0DEA18E104F9} => C:\Program Files\Digital Imaging\bin\hpqthb08.exe
Task: {A478A713-BCEF-4CEB-AFA2-49939FA0678A} - System32\Tasks\{584E6619-64BF-473C-9E79-F10ABF0B8709} => pcalua.exe -a E:\setup.exe -d E:\
Task: {B2B98D31-EF6D-49BB-BF2C-056F92A7B31A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)
Task: {BD39AFB6-F070-45E2-A64C-5568994A67BB} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {C4E2314E-70A9-4EEF-B981-DC1519AFEB8B} - System32\Tasks\GarminUpdaterTask => C:\Program Files\Garmin\Express Self Updater\ExpressSelfUpdater.exe [2014-08-07] ()
Task: {C88A3A16-F6F3-4F9A-B93B-EC7D27B930E1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-06-06] (Google Inc.)
Task: {D7B1066E-ABAE-45B4-9CF8-EAD8A3C1A2E8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {DCE91BDD-2539-4EDE-8573-5C87C0D4A4AB} - System32\Tasks\{0FBC28A7-5D42-4686-9350-2F22DC8128D6} => D:\Program Files\Digital Imaging\bin\Hpqdirec.exe
Task: {E582E64B-A6E0-4209-9F25-18E45290BE3E} - System32\Tasks\{07D40241-6076-4332-A6F6-DC922EACD7D8} => C:\Program Files\Digital Imaging\bin\hpqthb08.exe
Task: {F14E7C55-684B-47C8-8765-B2F3063C859C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-06-06] (Google Inc.)
Task: {F79B4DD2-2792-4B9E-9D2A-2E0465D5422E} - System32\Tasks\{33B8CBF2-5C2A-41A8-B35E-4FB9EC2FE689} => D:\Program Files\Digital Imaging\bin\Hpqdirec.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2015-01-15 10:23 - 2015-01-15 10:23 - 02910720 _____ () C:\Program Files\AVAST Software\Avast\defs\15011500\algo.dll
2014-11-10 15:41 - 2014-11-10 15:41 - 02151544 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxVMM.dll
2014-11-10 15:41 - 2014-11-10 15:41 - 00021488 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxREM.dll
2014-11-10 15:41 - 2014-11-10 15:41 - 04474224 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2014-11-10 15:41 - 2014-11-10 15:41 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-11-10 15:41 - 2014-11-10 15:41 - 00317632 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2011-07-19 05:53 - 2011-07-19 05:53 - 08240142 _____ () D:\Program Files\FreeTime\FormatFactory\FFModules\Encoder\mencoder.exe
2011-07-19 05:33 - 2011-07-19 05:33 - 09253902 _____ () D:\Program Files\FreeTime\FormatFactory\FFModules\Encoder\avcodec-53.dll
2011-07-19 05:33 - 2011-07-19 05:33 - 00145422 _____ () D:\Program Files\FreeTime\FormatFactory\FFModules\Encoder\avutil-51.dll
2011-07-19 05:33 - 2011-07-19 05:33 - 01040910 _____ () D:\Program Files\FreeTime\FormatFactory\FFModules\Encoder\avformat-53.dll
2011-07-19 05:33 - 2011-07-19 05:33 - 00167950 _____ () D:\Program Files\FreeTime\FormatFactory\FFModules\Encoder\postproc-51.dll
2011-07-19 05:33 - 2011-07-19 05:33 - 00240142 _____ () D:\Program Files\FreeTime\FormatFactory\FFModules\Encoder\swscale-2.dll
2010-03-15 04:31 - 2010-03-15 04:31 - 00165376 _____ () D:\Program Files\FreeTime\FormatFactory\FFModules\Encoder\mplayer\unrar.dll
2014-09-25 12:31 - 2014-09-25 12:31 - 01754296 _____ () C:\Program Files\Microsoft Office\Office15\tmpod.dll
2014-01-23 14:55 - 2014-01-23 14:55 - 01030312 _____ () C:\Program Files\Microsoft Office\Office15\ADDINS\UmOutlookAddin.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 2
MSCONFIG\Services: AMD External Events Utility => 2
MSCONFIG\Services: APNMCP => 2
MSCONFIG\Services: defragsvc => 3
MSCONFIG\Services: Garmin Core Update Service => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: PassThru Service => 2
MSCONFIG\Services: Pml Driver HPZ12 => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: ssinstall => 2
MSCONFIG\Services: ST2012_Svc => 2
MSCONFIG\Services: SwitchBoard => 3
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: cz.seznam.software.autoupdate => "C:\Users\Zdeněk\AppData\Roaming\Seznam.cz\szninstall.exe" -c
MSCONFIG\startupreg: cz.seznam.software.szndesktop => "C:\Users\Zdeněk\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
MSCONFIG\startupreg: DXDllRegExe => dxdllreg.exe
MSCONFIG\startupreg: Family Tree Builder Update => D:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe
MSCONFIG\startupreg: FixCamera => C:\WINDOWS\FixCamera.exe
MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files\Garmin\Express Tray\ExpressTray.exe"
MSCONFIG\startupreg: HP Component Manager => "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
MSCONFIG\startupreg: HP Software Update => "D:\Program Files\HP Software Update\HPWuSchd.exe"
MSCONFIG\startupreg: HTC Sync Loader => "C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
MSCONFIG\startupreg: NeroFilterCheck => C:\Windows\system32\NeroCheck.exe
MSCONFIG\startupreg: seznam-listicka-distribuce => "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: snp2std => C:\Windows\vsnp2std.exe
MSCONFIG\startupreg: SpywareTerminatorShield => C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
MSCONFIG\startupreg: SpywareTerminatorUpdater => C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
MSCONFIG\startupreg: SwitchBoard => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: tsnp2std => C:\Windows\tsnp2std.exe

========================= Accounts: ==========================

Administrator (S-1-5-21-1563119665-3996211366-461964742-500 - Administrator - Disabled)
ASPNET (S-1-5-21-1563119665-3996211366-461964742-1004 - Limited - Enabled)
Guest (S-1-5-21-1563119665-3996211366-461964742-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1563119665-3996211366-461964742-1002 - Limited - Enabled)
Zdeněk (S-1-5-21-1563119665-3996211366-461964742-1000 - Administrator - Enabled) => C:\Users\Zdeněk

==================== Faulty Device Manager Devices =============

Name: Multimediální adaptér
Description: Multimediální adaptér
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/15/2015 11:28:31 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1 se nezdařilo.
Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (01/13/2015 09:28:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: mar.exe, verze: 0.0.0.0, časové razítko: 0x2a425e19
Název chybujícího modulu: mar.exe, verze: 0.0.0.0, časové razítko: 0x2a425e19
Kód výjimky: 0xc0000005
Posun chyby: 0x00002dc4
ID chybujícího procesu: 0x9c
Čas spuštění chybující aplikace: 0xmar.exe0
Cesta k chybující aplikaci: mar.exe1
Cesta k chybujícímu modulu: mar.exe2
ID zprávy: mar.exe3

Error: (01/12/2015 05:58:12 PM) (Source: MsiInstaller) (EventID: 1024) (User: Zdeněk-PC)
Description: Aktualizaci {AC76BA86-7AD7-0000-2550-7A8C40011010} produktu Adobe Reader XI (11.0.09) - Czech nebylo možné nainstalovat. Kód chyby: 1625. Instalační služba systému Windows může vytvořit soubor protokolu s informacemi, které usnadní řešení potíží při instalaci softwaru. Další informace naleznete na webu na adrese http://go.microsoft.com/fwlink/?LinkId=23127

Error: (01/12/2015 05:09:52 PM) (Source: MsiInstaller) (EventID: 1024) (User: Zdeněk-PC)
Description: Aktualizaci {AC76BA86-7AD7-0000-2550-7A8C40011010} produktu Adobe Reader XI (11.0.09) - Czech nebylo možné nainstalovat. Kód chyby: 1625. Instalační služba systému Windows může vytvořit soubor protokolu s informacemi, které usnadní řešení potíží při instalaci softwaru. Další informace naleznete na webu na adrese http://go.microsoft.com/fwlink/?LinkId=23127

Error: (01/12/2015 01:57:08 PM) (Source: MsiInstaller) (EventID: 1024) (User: Zdeněk-PC)
Description: Aktualizaci {AC76BA86-7AD7-0000-2550-7A8C40011010} produktu Adobe Reader XI (11.0.09) - Czech nebylo možné nainstalovat. Kód chyby: 1625. Instalační služba systému Windows může vytvořit soubor protokolu s informacemi, které usnadní řešení potíží při instalaci softwaru. Další informace naleznete na webu na adrese http://go.microsoft.com/fwlink/?LinkId=23127

Error: (01/12/2015 09:53:46 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Zálohování nebylo dokončeno, protože došlo k chybě při zápisu do umístění zálohy F:\. Chyba: Umístění zálohy nebylo nalezeno nebo není platné. Zkontrolujte nastavení zálohování a umístění zálohy. (0x81000006).

Error: (01/07/2015 04:11:10 PM) (Source: MsiInstaller) (EventID: 1024) (User: Zdeněk-PC)
Description: Aktualizaci {AC76BA86-7AD7-0000-2550-7A8C40011010} produktu Adobe Reader XI (11.0.09) - Czech nebylo možné nainstalovat. Kód chyby: 1625. Instalační služba systému Windows může vytvořit soubor protokolu s informacemi, které usnadní řešení potíží při instalaci softwaru. Další informace naleznete na webu na adrese http://go.microsoft.com/fwlink/?LinkId=23127

Error: (01/06/2015 03:40:56 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1 se nezdařilo.
Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (01/05/2015 04:40:06 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Index nebyl inicializován.

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (01/05/2015 04:40:06 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Aplikace nebyla inicializována.

Kontext: aplikace Windows

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)


System errors:
=============
Error: (01/15/2015 04:02:48 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba HP Network Devices Support byla ukončena s následující chybou:
%%126

Error: (01/15/2015 04:00:25 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (01/15/2015 04:00:25 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (01/15/2015 10:24:48 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba HP Network Devices Support byla ukončena s následující chybou:
%%126

Error: (01/15/2015 10:22:35 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (01/15/2015 10:22:35 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (01/14/2015 00:09:43 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba HP Network Devices Support byla ukončena s následující chybou:
%%126

Error: (01/14/2015 00:07:31 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (01/14/2015 00:07:31 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (01/14/2015 09:36:13 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba HP Network Devices Support byla ukončena s následující chybou:
%%126


Microsoft Office Sessions:
=========================
Error: (01/15/2015 11:28:31 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"d:\totalcmd\TCUNIN64.EXE

Error: (01/13/2015 09:28:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mar.exe0.0.0.02a425e19mar.exe0.0.0.02a425e19c000000500002dc49c01d02f6f1844dd50D:\Program Files\Marias\mar.exeD:\Program Files\Marias\mar.exeb1fd4f90-9b62-11e4-a39c-001e8c07eb64

Error: (01/12/2015 05:58:12 PM) (Source: MsiInstaller) (EventID: 1024) (User: Zdeněk-PC)
Description: Adobe Reader XI (11.0.09) - Czech{AC76BA86-7AD7-0000-2550-7A8C40011010}1625(NULL)(NULL)(NULL)

Error: (01/12/2015 05:09:52 PM) (Source: MsiInstaller) (EventID: 1024) (User: Zdeněk-PC)
Description: Adobe Reader XI (11.0.09) - Czech{AC76BA86-7AD7-0000-2550-7A8C40011010}1625(NULL)(NULL)(NULL)

Error: (01/12/2015 01:57:08 PM) (Source: MsiInstaller) (EventID: 1024) (User: Zdeněk-PC)
Description: Adobe Reader XI (11.0.09) - Czech{AC76BA86-7AD7-0000-2550-7A8C40011010}1625(NULL)(NULL)(NULL)

Error: (01/12/2015 09:53:46 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: F:\Umístění zálohy nebylo nalezeno nebo není platné. Zkontrolujte nastavení zálohování a umístění zálohy. (0x81000006)

Error: (01/07/2015 04:11:10 PM) (Source: MsiInstaller) (EventID: 1024) (User: Zdeněk-PC)
Description: Adobe Reader XI (11.0.09) - Czech{AC76BA86-7AD7-0000-2550-7A8C40011010}1625(NULL)(NULL)(NULL)

Error: (01/06/2015 03:40:56 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"d:\totalcmd\TCUNIN64.EXE

Error: (01/05/2015 04:40:06 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (01/05/2015 04:40:06 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Kontext: aplikace Windows

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)


==================== Memory info ===========================

Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 5200+
Percentage of memory in use: 38%
Total physical RAM: 3582.49 MB
Available physical RAM: 2212.86 MB
Total Pagefile: 7163.27 MB
Available Pagefile: 5618.88 MB
Total Virtual: 2047.88 MB
Available Virtual: 1917.04 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:48.83 GB) (Free:11.11 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:249.25 GB) (Free:209.78 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: B111B111)
Partition 1: (Active) - (Size=48.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=249.3 GB) - (Type=OF Extended)

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 15-01-2015
Ran by Zdeněk at 2015-01-15 16:19:22
Running from C:\Users\Zdeněk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TNP4BVS8
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

1300 (Version: 5.31.1.27 - Hewlett-Packard) Hidden
1300_Help (Version: 5.31.1.27 - Hewlett-Packard) Hidden
1300Tour (Version: 5.31.1.27 - Hewlett-Packard) Hidden
1300Trb (Version: 5.31.1.27 - Hewlett-Packard) Hidden
Adobe Photoshop CS5 (HKLM\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Czech (HKLM\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
AiO_Scan (Version: 5.31.1.27 - Hewlett-Packard) Hidden
AIOMinimal (Version: 5.31.1.27 - Hewlett-Packard) Hidden
AiOSoftware (Version: 5.31.1.27 - Hewlett-Packard) Hidden
ANT Drivers Installer x86 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Avast Free Antivirus (HKLM\...\avast) (Version: 10.0.2208 - AVAST Software)
Balíček ovladače systému Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Balíček ovladače systému Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
BECHEROVKA MARIÁŠ (HKLM\...\BECHEROVKA MARIÁŠ_is1) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 4.02 - Piriform)
CDex - Open Source Digital Audio CD Extractor (HKLM\...\CDex) (Version: 1.73.0.2014 - Georgy Berdyshev)
Convert MOV to AVI 1.0 (HKLM\...\{A39EA3C8-7BF3-4FA7-9A67-3D3611BAE59E}_is1) (Version: - convertmovtoavi.com)
Elevated Installer (Version: 3.2.17.0 - Garmin Ltd or its subsidiaries) Hidden
Fax (Version: 5.31.1.27 - Hewlett-Packard) Hidden
FormatFactory 3.2.1.0 (HKLM\...\FormatFactory) (Version: 3.2.1.0 - Free Time)
Garmin Express (HKLM\...\{b43ffffb-1adc-4bcb-b277-7844ebff94da}) (Version: 3.2.17.0 - Garmin Ltd or its subsidiaries)
Garmin Express (Version: 3.2.17.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (Version: 3.2.17.0 - Garmin Ltd or its subsidiaries) Hidden
GoldWave v5.52 (HKLM\...\GoldWave v5.52) (Version: - )
GoldWave v5.69 (HKLM\...\GoldWave v5.69) (Version: 5.69 - GoldWave Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Chrome (HKLM\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
HP PSC & OfficeJet 3.0 (HKLM\...\{F38FA38A-7E5A-4209-88ED-4DE21CD20EEF}) (Version: 3.0 - HP)
HP Software Update (HKLM\...\{CC0A24CB-87C9-4F1C-A1F2-F87D8D4DDCAF}) (Version: 1.0.18.20030625 - Hewlett-Packard)
IPTInstaller (HKLM\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.8 - HTC)
LG PC Suite (HKLM\...\LG PC Suite) (Version: 5.3.22.20141205 - LG Electronics)
LG United Mobile Driver (HKLM\...\{2A3A4BD6-6CE0-4e2a-80D2-1D0FF6ACBFBA}) (Version: 3.12.3.0 - LG Electronics)
Microsoft .NET Framework 1.1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 1.1 Czech Language Pack (HKLM\...\{5E65E94D-69F2-4850-9E93-6459C53A0F50}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.1 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office FrontPage 2003 (HKLM\...\{90170405-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Language Pack 2013 - Czech/čeština (HKLM\...\Office15.OMUI.cs-cz) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyHeritage Family Tree Builder (HKLM\...\Family Tree Builder) (Version: 7.0.0.7128 - MyHeritage.com)
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Overland (Version: 1.76.0 - Hewlett-Packard) Hidden
PDF Settings CS5 (Version: 10.0 - Adobe Systems Incorporated) Hidden
Photo! 3D Album and Photo! 3D ScreenSaver 1.2 (HKLM\...\My Pictures Editor_is1) (Version: - )
Picture Control Utility 2 (HKLM\...\{4946D03F-421F-480D-96C9-D6CF90640D33}) (Version: 2.0.1 - Nikon)
PrintScreen (Version: 5.31.0.147 - Hewlett-Packard) Hidden
Readme (Version: 5.31.1.27 - Hewlett-Packard) Hidden
Scan (Version: 3.1.0.0 - Hewlett-Packard) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM\...\{90150000-0100-0405-0000-0000000FF1CE}_Office15.OMUI.cs-cz_{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}) (Version: - Microsoft)
Seznam Instalátor (HKLM\...\ssinstall) (Version: - Seznam.cz)
Seznam Software (HKU\S-1-5-21-1563119665-3996211366-461964742-1000\...\SeznamInstall) (Version: - Seznam.cz)
Skype Click to Call (HKLM\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.22 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.107 - Skype Technologies S.A.)
Spyware Terminator 2012 (HKLM\...\{56736259-613E-4A3B-B428-6235F2E76F44}_is1) (Version: 3.0.0.82 - Crawler.com)
Total Commander (Remove or Repair) (HKLM\...\Totalcmd) (Version: 8.01 - Ghisler Software GmbH)
USB2.0 WEB CAMERA (HKLM\...\{75438C0E-9925-412E-AD85-D0E71C6CE2ED}) (Version: 5.7.3.117 - )
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Movie Maker (HKLM\...\Windows Movie Maker) (Version: 6.0.6002.18005 - Microsoft Corporation)
Windows Movie Maker 2.6 (HKLM\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points =========================

14-01-2015 09:41:06 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {03C520CD-88EE-4C0C-93FF-CDDD30FE2A5C} - System32\Tasks\{F5C6E32F-4066-4B7E-8163-C9657C844F27} => D:\Program Files\Digital Imaging\bin\Hpqdirec.exe
Task: {05C2EFAB-0CC0-4FF3-B0FF-EFAA62429DB6} - System32\Tasks\{85CB66A6-2929-49ED-95FA-81637A0E8DC7} => pcalua.exe -a C:\Users\Zdeněk\Downloads\auxsetup.exe -d C:\Users\Zdeněk\Downloads
Task: {08B0799F-FE7C-4A2A-954A-DA1B2A7336F5} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Zdeněk-PC-Zdeněk Zdeněk-PC => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2014-11-12] (Microsoft Corporation)
Task: {1740A68B-EF1D-4866-801F-4434C4DC6D68} - System32\Tasks\{84839E41-7FA8-4A17-B1B4-6B81C36EC530} => D:\Program Files\Digital Imaging\bin\hpqthb08.exe
Task: {174F84DA-6364-45B8-B20B-69B231B5171E} - System32\Tasks\{40B8BA56-C149-45C6-8F8C-5087764B5958} => D:\Program Files\Digital Imaging\bin\Hpqdirec.exe
Task: {1A0866CC-3402-4983-A9F5-4C00178AEB90} - System32\Tasks\{204BCDD2-7958-44B6-AC54-D92B9C1BF85C} => D:\Program Files\Digital Imaging\bin\hpqthb08.exe
Task: {1DDD173A-4AFB-4E6E-87A2-2EBBB7B24EE7} - System32\Tasks\{89B1983A-0674-4386-82EF-85B1134A6416} => pcalua.exe -a E:\setup.exe -d E:\
Task: {1E4E27E3-D8C5-4FC0-A737-E452E8A6324F} - System32\Tasks\AdobeAAMUpdater-1.0-Zdeněk-PC-Zdeněk => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-08] (Adobe Systems Incorporated)
Task: {2439A461-09D7-41CB-82B3-8DCA4DCB5E3F} - System32\Tasks\{3B6FC303-9F9A-4BD5-81E0-5A967636B393} => C:\Program Files\Digital Imaging\bin\Hpqdirec.exe
Task: {29420D12-6081-4F8B-8DC0-B2E88D77A4DA} - System32\Tasks\{6E5B40F1-E553-4005-B9F4-F0990E82A247} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files\Digital Imaging\bin\hpqthb08.exe"
Task: {3CFBC366-5314-4943-8DA3-3AC11430B418} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {4A6E8D48-1ED4-412B-8FBB-BA868C9F189C} - System32\Tasks\{3782700E-12E1-40EE-8A2D-28A6B9D3DF57} => D:\Program Files\Digital Imaging\bin\Hpqdirec.exe
Task: {4CC4FCF9-ED0C-4816-9F42-C98384FC2FAD} - System32\Tasks\{17E4AADF-7D10-4FFD-B5CC-AA92782E9D42} => D:\Program Files\Digital Imaging\bin\Hpqdirec.exe
Task: {51216DBF-08A6-4B20-AF33-A978926F906A} - System32\Tasks\{90EFE98A-141C-40C7-BA5E-997042DE2891} => D:\Program Files\Digital Imaging\bin\Hpqdirec.exe
Task: {699B6A19-C9A7-4015-AC0D-B22008210EEF} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {6FAECFDA-9153-48A9-907B-1868ECFE8F4C} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-11-10] (AVAST Software)
Task: {72AC4E19-A4B3-41B5-8B6A-E704C12B9CB2} - System32\Tasks\{903DC659-8C35-44A7-9391-DB141B32239F} => D:\Program Files\Digital Imaging\bin\Hpqdirec.exe
Task: {731FB162-090E-4C1A-B6B2-CD5C461159F1} - System32\Tasks\{BC51928C-61F1-4637-9856-DEB703677C81} => C:\Program Files\Digital Imaging\bin\hpqthb08.exe
Task: {88BA583A-7CCE-4417-8F23-05626C0418C0} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {9EF299F4-07DB-4778-BE00-E58D0C337FA1} - System32\Tasks\{2B30C945-AE9C-43C4-9632-0DEA18E104F9} => C:\Program Files\Digital Imaging\bin\hpqthb08.exe
Task: {A478A713-BCEF-4CEB-AFA2-49939FA0678A} - System32\Tasks\{584E6619-64BF-473C-9E79-F10ABF0B8709} => pcalua.exe -a E:\setup.exe -d E:\
Task: {B2B98D31-EF6D-49BB-BF2C-056F92A7B31A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)
Task: {BD39AFB6-F070-45E2-A64C-5568994A67BB} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {C4E2314E-70A9-4EEF-B981-DC1519AFEB8B} - System32\Tasks\GarminUpdaterTask => C:\Program Files\Garmin\Express Self Updater\ExpressSelfUpdater.exe [2014-08-07] ()
Task: {C88A3A16-F6F3-4F9A-B93B-EC7D27B930E1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-06-06] (Google Inc.)
Task: {D7B1066E-ABAE-45B4-9CF8-EAD8A3C1A2E8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {DCE91BDD-2539-4EDE-8573-5C87C0D4A4AB} - System32\Tasks\{0FBC28A7-5D42-4686-9350-2F22DC8128D6} => D:\Program Files\Digital Imaging\bin\Hpqdirec.exe
Task: {E582E64B-A6E0-4209-9F25-18E45290BE3E} - System32\Tasks\{07D40241-6076-4332-A6F6-DC922EACD7D8} => C:\Program Files\Digital Imaging\bin\hpqthb08.exe
Task: {F14E7C55-684B-47C8-8765-B2F3063C859C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-06-06] (Google Inc.)
Task: {F79B4DD2-2792-4B9E-9D2A-2E0465D5422E} - System32\Tasks\{33B8CBF2-5C2A-41A8-B35E-4FB9EC2FE689} => D:\Program Files\Digital Imaging\bin\Hpqdirec.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2015-01-15 10:23 - 2015-01-15 10:23 - 02910720 _____ () C:\Program Files\AVAST Software\Avast\defs\15011500\algo.dll
2014-11-10 15:41 - 2014-11-10 15:41 - 02151544 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxVMM.dll
2014-11-10 15:41 - 2014-11-10 15:41 - 00021488 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxREM.dll
2014-11-10 15:41 - 2014-11-10 15:41 - 04474224 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2014-11-10 15:41 - 2014-11-10 15:41 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-11-10 15:41 - 2014-11-10 15:41 - 00317632 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2011-07-19 05:53 - 2011-07-19 05:53 - 08240142 _____ () D:\Program Files\FreeTime\FormatFactory\FFModules\Encoder\mencoder.exe
2011-07-19 05:33 - 2011-07-19 05:33 - 09253902 _____ () D:\Program Files\FreeTime\FormatFactory\FFModules\Encoder\avcodec-53.dll
2011-07-19 05:33 - 2011-07-19 05:33 - 00145422 _____ () D:\Program Files\FreeTime\FormatFactory\FFModules\Encoder\avutil-51.dll
2011-07-19 05:33 - 2011-07-19 05:33 - 01040910 _____ () D:\Program Files\FreeTime\FormatFactory\FFModules\Encoder\avformat-53.dll
2011-07-19 05:33 - 2011-07-19 05:33 - 00167950 _____ () D:\Program Files\FreeTime\FormatFactory\FFModules\Encoder\postproc-51.dll
2011-07-19 05:33 - 2011-07-19 05:33 - 00240142 _____ () D:\Program Files\FreeTime\FormatFactory\FFModules\Encoder\swscale-2.dll
2010-03-15 04:31 - 2010-03-15 04:31 - 00165376 _____ () D:\Program Files\FreeTime\FormatFactory\FFModules\Encoder\mplayer\unrar.dll
2014-09-25 12:31 - 2014-09-25 12:31 - 01754296 _____ () C:\Program Files\Microsoft Office\Office15\tmpod.dll
2014-01-23 14:55 - 2014-01-23 14:55 - 01030312 _____ () C:\Program Files\Microsoft Office\Office15\ADDINS\UmOutlookAddin.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 2
MSCONFIG\Services: AMD External Events Utility => 2
MSCONFIG\Services: APNMCP => 2
MSCONFIG\Services: defragsvc => 3
MSCONFIG\Services: Garmin Core Update Service => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: PassThru Service => 2
MSCONFIG\Services: Pml Driver HPZ12 => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: ssinstall => 2
MSCONFIG\Services: ST2012_Svc => 2
MSCONFIG\Services: SwitchBoard => 3
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: cz.seznam.software.autoupdate => "C:\Users\Zdeněk\AppData\Roaming\Seznam.cz\szninstall.exe" -c
MSCONFIG\startupreg: cz.seznam.software.szndesktop => "C:\Users\Zdeněk\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
MSCONFIG\startupreg: DXDllRegExe => dxdllreg.exe
MSCONFIG\startupreg: Family Tree Builder Update => D:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe
MSCONFIG\startupreg: FixCamera => C:\WINDOWS\FixCamera.exe
MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files\Garmin\Express Tray\ExpressTray.exe"
MSCONFIG\startupreg: HP Component Manager => "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
MSCONFIG\startupreg: HP Software Update => "D:\Program Files\HP Software Update\HPWuSchd.exe"
MSCONFIG\startupreg: HTC Sync Loader => "C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
MSCONFIG\startupreg: NeroFilterCheck => C:\Windows\system32\NeroCheck.exe
MSCONFIG\startupreg: seznam-listicka-distribuce => "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: snp2std => C:\Windows\vsnp2std.exe
MSCONFIG\startupreg: SpywareTerminatorShield => C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
MSCONFIG\startupreg: SpywareTerminatorUpdater => C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
MSCONFIG\startupreg: SwitchBoard => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: tsnp2std => C:\Windows\tsnp2std.exe

========================= Accounts: ==========================

Administrator (S-1-5-21-1563119665-3996211366-461964742-500 - Administrator - Disabled)
ASPNET (S-1-5-21-1563119665-3996211366-461964742-1004 - Limited - Enabled)
Guest (S-1-5-21-1563119665-3996211366-461964742-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1563119665-3996211366-461964742-1002 - Limited - Enabled)
Zdeněk (S-1-5-21-1563119665-3996211366-461964742-1000 - Administrator - Enabled) => C:\Users\Zdeněk

==================== Faulty Device Manager Devices =============

Name: Multimediální adaptér
Description: Multimediální adaptér
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/15/2015 11:28:31 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1 se nezdařilo.
Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (01/13/2015 09:28:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: mar.exe, verze: 0.0.0.0, časové razítko: 0x2a425e19
Název chybujícího modulu: mar.exe, verze: 0.0.0.0, časové razítko: 0x2a425e19
Kód výjimky: 0xc0000005
Posun chyby: 0x00002dc4
ID chybujícího procesu: 0x9c
Čas spuštění chybující aplikace: 0xmar.exe0
Cesta k chybující aplikaci: mar.exe1
Cesta k chybujícímu modulu: mar.exe2
ID zprávy: mar.exe3

Error: (01/12/2015 05:58:12 PM) (Source: MsiInstaller) (EventID: 1024) (User: Zdeněk-PC)
Description: Aktualizaci {AC76BA86-7AD7-0000-2550-7A8C40011010} produktu Adobe Reader XI (11.0.09) - Czech nebylo možné nainstalovat. Kód chyby: 1625. Instalační služba systému Windows může vytvořit soubor protokolu s informacemi, které usnadní řešení potíží při instalaci softwaru. Další informace naleznete na webu na adrese http://go.microsoft.com/fwlink/?LinkId=23127

Error: (01/12/2015 05:09:52 PM) (Source: MsiInstaller) (EventID: 1024) (User: Zdeněk-PC)
Description: Aktualizaci {AC76BA86-7AD7-0000-2550-7A8C40011010} produktu Adobe Reader XI (11.0.09) - Czech nebylo možné nainstalovat. Kód chyby: 1625. Instalační služba systému Windows může vytvořit soubor protokolu s informacemi, které usnadní řešení potíží při instalaci softwaru. Další informace naleznete na webu na adrese http://go.microsoft.com/fwlink/?LinkId=23127

Error: (01/12/2015 01:57:08 PM) (Source: MsiInstaller) (EventID: 1024) (User: Zdeněk-PC)
Description: Aktualizaci {AC76BA86-7AD7-0000-2550-7A8C40011010} produktu Adobe Reader XI (11.0.09) - Czech nebylo možné nainstalovat. Kód chyby: 1625. Instalační služba systému Windows může vytvořit soubor protokolu s informacemi, které usnadní řešení potíží při instalaci softwaru. Další informace naleznete na webu na adrese http://go.microsoft.com/fwlink/?LinkId=23127

Error: (01/12/2015 09:53:46 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Zálohování nebylo dokončeno, protože došlo k chybě při zápisu do umístění zálohy F:\. Chyba: Umístění zálohy nebylo nalezeno nebo není platné. Zkontrolujte nastavení zálohování a umístění zálohy. (0x81000006).

Error: (01/07/2015 04:11:10 PM) (Source: MsiInstaller) (EventID: 1024) (User: Zdeněk-PC)
Description: Aktualizaci {AC76BA86-7AD7-0000-2550-7A8C40011010} produktu Adobe Reader XI (11.0.09) - Czech nebylo možné nainstalovat. Kód chyby: 1625. Instalační služba systému Windows může vytvořit soubor protokolu s informacemi, které usnadní řešení potíží při instalaci softwaru. Další informace naleznete na webu na adrese http://go.microsoft.com/fwlink/?LinkId=23127

Error: (01/06/2015 03:40:56 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1 se nezdařilo.
Závislé sestavení Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (01/05/2015 04:40:06 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Index nebyl inicializován.

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (01/05/2015 04:40:06 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Aplikace nebyla inicializována.

Kontext: aplikace Windows

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)


System errors:
=============
Error: (01/15/2015 04:02:48 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba HP Network Devices Support byla ukončena s následující chybou:
%%126

Error: (01/15/2015 04:00:25 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (01/15/2015 04:00:25 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (01/15/2015 10:24:48 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba HP Network Devices Support byla ukončena s následující chybou:
%%126

Error: (01/15/2015 10:22:35 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (01/15/2015 10:22:35 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (01/14/2015 00:09:43 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba HP Network Devices Support byla ukončena s následující chybou:
%%126

Error: (01/14/2015 00:07:31 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (01/14/2015 00:07:31 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (01/14/2015 09:36:13 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba HP Network Devices Support byla ukončena s následující chybou:
%%126


Microsoft Office Sessions:
=========================
Error: (01/15/2015 11:28:31 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"d:\totalcmd\TCUNIN64.EXE

Error: (01/13/2015 09:28:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mar.exe0.0.0.02a425e19mar.exe0.0.0.02a425e19c000000500002dc49c01d02f6f1844dd50D:\Program Files\Marias\mar.exeD:\Program Files\Marias\mar.exeb1fd4f90-9b62-11e4-a39c-001e8c07eb64

Error: (01/12/2015 05:58:12 PM) (Source: MsiInstaller) (EventID: 1024) (User: Zdeněk-PC)
Description: Adobe Reader XI (11.0.09) - Czech{AC76BA86-7AD7-0000-2550-7A8C40011010}1625(NULL)(NULL)(NULL)

Error: (01/12/2015 05:09:52 PM) (Source: MsiInstaller) (EventID: 1024) (User: Zdeněk-PC)
Description: Adobe Reader XI (11.0.09) - Czech{AC76BA86-7AD7-0000-2550-7A8C40011010}1625(NULL)(NULL)(NULL)

Error: (01/12/2015 01:57:08 PM) (Source: MsiInstaller) (EventID: 1024) (User: Zdeněk-PC)
Description: Adobe Reader XI (11.0.09) - Czech{AC76BA86-7AD7-0000-2550-7A8C40011010}1625(NULL)(NULL)(NULL)

Error: (01/12/2015 09:53:46 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: F:\Umístění zálohy nebylo nalezeno nebo není platné. Zkontrolujte nastavení zálohování a umístění zálohy. (0x81000006)

Error: (01/07/2015 04:11:10 PM) (Source: MsiInstaller) (EventID: 1024) (User: Zdeněk-PC)
Description: Adobe Reader XI (11.0.09) - Czech{AC76BA86-7AD7-0000-2550-7A8C40011010}1625(NULL)(NULL)(NULL)

Error: (01/06/2015 03:40:56 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"d:\totalcmd\TCUNIN64.EXE

Error: (01/05/2015 04:40:06 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (01/05/2015 04:40:06 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Kontext: aplikace Windows

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)


==================== Memory info ===========================

Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 5200+
Percentage of memory in use: 38%
Total physical RAM: 3582.49 MB
Available physical RAM: 2212.86 MB
Total Pagefile: 7163.27 MB
Available Pagefile: 5618.88 MB
Total Virtual: 2047.88 MB
Available Virtual: 1917.04 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:48.83 GB) (Free:11.11 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:249.25 GB) (Free:209.78 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: B111B111)
Partition 1: (Active) - (Size=48.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=249.3 GB) - (Type=OF Extended)

==================== End Of Log ============================

Stažení FRSTL Launcheru se nepovedlo!Díky za další informace !Zdenrs

Postaci mi log FRST.txt ze samotneho FRST.exe (bez FRSTLauncheru).

Ran by Zdeněk (administrator) on ZDENĚK-PC on 16-01-2015 16:54:00
Running from C:\Users\Zdeněk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RZ4LSDH5
Loaded Profiles: Zdeněk (Available profiles: Zdeněk)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\OUTLOOK.EXE
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-09] (AVAST Software)
HKU\S-1-5-21-1563119665-3996211366-461964742-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1563119665-3996211366-461964742-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-1563119665-3996211366-461964742-1000\...\MountPoints2: {5fb6302c-3a49-11e4-8317-001e8c07eb64} - G:\LGAutoRun.exe
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files\Garmin\Express Tray\ExpressTray.exe [688984 2014-08-07] (Garmin Ltd or its subsidiaries)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1563119665-3996211366-461964742-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> 4887FCB530EC403C8D9EEF66C94562FF URL = http://search.seznam.cz/?q={searchTerms ... arch_12454
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> {596BE5E3-131E-4BA2-AABB-F4EE99CBB40B} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> {6546A32F-7525-4F1F-BD26-68A1AF1B85B2} URL = http://encyklopedie.seznam.cz/search?q= ... arch_12454
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> {6B1E1E31-0209-4D5C-A918-CD90869134EB} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> {72DD9207-6CA9-46A7-A44B-B27841701C19} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_12454
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> {A2E7DDF5-AE53-4C13-B6FE-64929AFBAD75} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_12454
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> {B9466D84-53D7-48DD-9E1E-FFA181898D8A} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_12454
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> {CD85DAE8-24FA-4D4D-A0A4-2B3D932EC3E2} URL = http://www.novinky.cz/hledej?w={searchT ... arch_12454
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> {E4784CAB-1305-48AF-90AC-5D6EC89E5EDA} URL = http://www.mapy.cz/?query={searchTerms} ... arch_12454
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

FireFox:
========
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> D:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-06-06]

Chrome:
=======
CHR Profile: C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-09-16]
CHR Extension: (Peněženka Google) - C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-19]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-10]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
CHR HKU\S-1-5-21-1563119665-3996211366-461964742-1000\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - No Path

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-10] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3192344 2014-11-10] (Avast Software)
S4 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [438616 2014-08-07] (Garmin Ltd or its subsidiaries)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S4 ssinstall; C:\Windows\System32\ssins.exe [2324216 2014-05-19] (PS Media s.r.o.)
S4 ST2012_Svc; C:\Program Files\Spyware Terminator\st_rsser.exe [587912 2013-04-03] (Crawler.com)
S4 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S2 HPSLPSVC; C:\Users\Zdeněk\AppData\Local\Temp\7zS5095\hpslpsvc32.dll [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag.sys [24064 2014-07-07] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem.sys [28672 2014-07-07] (LG Electronics Inc.)
S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis.sys [74240 2014-05-27] (LG Electronics Inc.)
R2 Aspi32; C:\Windows\System32\drivers\aspi32.sys [16512 2009-10-11] (Adaptec) [File not signed]
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-11-10] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2014-11-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-11-10] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-11-10] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787800 2014-11-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423784 2014-11-21] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [91496 2014-11-10] (AVAST Software)
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [38984 2014-07-05] (The OpenVPN Project)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206248 2014-11-10] ()
S3 HPZid412; C:\Windows\System32\DRIVERS\HPZid412.sys [49920 2005-10-21] (HP)
S3 HPZipr12; C:\Windows\System32\DRIVERS\HPZipr12.sys [16496 2005-10-21] (HP)
S3 HPZius12; C:\Windows\System32\DRIVERS\HPZius12.sys [21488 2003-08-11] (HP)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R3 SNP2STD; C:\Windows\System32\DRIVERS\snp2sxp.sys [12160512 2006-09-26] () [File not signed]
R1 sp_rsdrv2; C:\Windows\system32\drivers\sp_rsdrv2.sys [32768 2011-06-21] () [File not signed]
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [218192 2014-11-10] (Avast Software)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-16 16:52 - 2015-01-16 16:52 - 00015327 _____ () C:\Users\Zdeněk\Desktop\LM.bat
2015-01-16 16:19 - 2015-01-16 16:19 - 00000197 _____ () C:\Windows\system32\2015-01-16-15-19-07.041-AvastVBoxSVC.exe-2304.log
2015-01-15 16:31 - 2015-01-16 16:52 - 00029696 _____ () C:\Users\Zdeněk\AppData\Local\MSGBOX.EXE
2015-01-15 16:18 - 2015-01-16 16:54 - 00000000 ____D () C:\FRST
2015-01-15 10:23 - 2015-01-15 10:23 - 00000197 _____ () C:\Windows\system32\2015-01-15-09-23-10.098-AvastVBoxSVC.exe-2168.log
2015-01-15 10:22 - 2015-01-16 16:18 - 00000168 _____ () C:\Windows\setupact.log
2015-01-15 10:22 - 2015-01-15 10:22 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-14 12:40 - 2015-01-14 12:40 - 00000247 _____ () C:\Windows\system32\2015-01-14-11-40-36.096-aswFe.exe-2896.log
2015-01-14 12:09 - 2015-01-14 12:40 - 00000247 _____ () C:\Windows\system32\2015-01-14-11-09-55.064-aswFe.exe-2084.log
2015-01-14 12:09 - 2015-01-14 12:09 - 00000197 _____ () C:\Windows\system32\2015-01-14-11-09-52.097-AvastVBoxSVC.exe-1512.log
2015-01-14 09:45 - 2015-01-14 09:45 - 00000247 _____ () C:\Windows\system32\2015-01-14-08-45-34.050-aswFe.exe-1108.log
2015-01-14 09:45 - 2015-01-14 09:45 - 00000197 _____ () C:\Windows\system32\2015-01-14-08-45-31.044-AvastVBoxSVC.exe-3104.log
2015-01-14 09:36 - 2015-01-14 09:36 - 00000197 _____ () C:\Windows\system32\2015-01-14-08-36-25.076-AvastVBoxSVC.exe-396.log
2015-01-14 09:30 - 2015-01-14 09:32 - 00000000 ____D () C:\AdwCleaner
2015-01-14 08:46 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 08:46 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-01-14 08:46 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 08:46 - 2014-12-11 18:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 08:46 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 08:45 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 08:42 - 2015-01-14 08:42 - 00000197 _____ () C:\Windows\system32\2015-01-14-07-42-31.044-AvastVBoxSVC.exe-336.log
2015-01-13 16:44 - 2015-01-13 16:44 - 00000197 _____ () C:\Windows\system32\2015-01-13-15-44-00.082-AvastVBoxSVC.exe-1172.log
2015-01-12 16:19 - 2015-01-12 16:19 - 00000000 ____D () C:\rsit
2015-01-12 16:19 - 2015-01-12 16:19 - 00000000 ____D () C:\Program Files\trend micro
2015-01-12 15:42 - 2015-01-12 15:42 - 00000197 _____ () C:\Windows\system32\2015-01-12-14-42-17.027-AvastVBoxSVC.exe-1348.log
2015-01-10 14:46 - 2015-01-10 14:46 - 00000197 _____ () C:\Windows\system32\2015-01-10-13-46-42.024-AvastVBoxSVC.exe-1832.log
2015-01-10 08:47 - 2015-01-10 08:47 - 00000247 _____ () C:\Windows\system32\2015-01-10-07-47-12.032-aswFe.exe-4296.log
2015-01-10 08:41 - 2015-01-10 08:47 - 00000247 _____ () C:\Windows\system32\2015-01-10-07-41-49.042-aswFe.exe-2016.log
2015-01-10 08:41 - 2015-01-10 08:41 - 00000197 _____ () C:\Windows\system32\2015-01-10-07-41-44.015-AvastVBoxSVC.exe-1416.log
2015-01-08 15:57 - 2015-01-08 15:57 - 00000197 _____ () C:\Windows\system32\2015-01-08-14-57-09.019-AvastVBoxSVC.exe-2188.log
2015-01-08 09:53 - 2015-01-08 09:53 - 00000197 _____ () C:\Windows\system32\2015-01-08-08-53-26.028-AvastVBoxSVC.exe-1552.log
2015-01-07 15:44 - 2015-01-07 15:44 - 00000659 _____ () C:\Users\Zdeněk\Desktop\foto2015 – zástupce.lnk
2015-01-07 15:40 - 2015-01-07 15:40 - 00000197 _____ () C:\Windows\system32\2015-01-07-14-40-37.094-AvastVBoxSVC.exe-796.log
2015-01-06 14:43 - 2015-01-06 14:43 - 00000197 _____ () C:\Windows\system32\2015-01-06-13-43-27.008-AvastVBoxSVC.exe-1292.log
2015-01-06 07:10 - 2015-01-06 07:11 - 00000197 _____ () C:\Windows\system32\2015-01-06-06-10-37.090-AvastVBoxSVC.exe-2596.log
2015-01-05 16:40 - 2015-01-05 16:40 - 00000197 _____ () C:\Windows\system32\2015-01-05-15-40-10.070-AvastVBoxSVC.exe-324.log
2015-01-05 10:14 - 2015-01-05 10:14 - 00000000 ____D () C:\Users\Zdeněk\AppData\Local\CDex
2015-01-05 10:14 - 2015-01-05 10:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDex
2015-01-05 08:23 - 2015-01-05 08:23 - 00000197 _____ () C:\Windows\system32\2015-01-05-07-23-17.069-AvastVBoxSVC.exe-2332.log
2015-01-04 08:58 - 2015-01-04 08:58 - 00000197 _____ () C:\Windows\system32\2015-01-04-07-58-04.068-AvastVBoxSVC.exe-1632.log
2015-01-04 08:33 - 2015-01-04 08:33 - 00000197 _____ () C:\Windows\system32\2015-01-04-07-33-14.078-AvastVBoxSVC.exe-2228.log
2015-01-03 15:43 - 2015-01-03 15:43 - 00000197 _____ () C:\Windows\system32\2015-01-03-14-43-27.051-AvastVBoxSVC.exe-1556.log
2015-01-03 10:18 - 2015-01-03 10:19 - 00000197 _____ () C:\Windows\system32\2015-01-03-09-18-58.091-AvastVBoxSVC.exe-1548.log
2015-01-02 15:15 - 2015-01-02 15:15 - 00000197 _____ () C:\Windows\system32\2015-01-02-14-15-03.073-AvastVBoxSVC.exe-1564.log
2015-01-02 10:06 - 2015-01-02 10:06 - 00000197 _____ () C:\Windows\system32\2015-01-02-09-06-11.087-AvastVBoxSVC.exe-2176.log
2015-01-02 09:04 - 2015-01-02 09:04 - 00000197 _____ () C:\Windows\system32\2015-01-02-08-04-19.045-AvastVBoxSVC.exe-2152.log
2015-01-01 21:34 - 2015-01-01 21:34 - 00000197 _____ () C:\Windows\system32\2015-01-01-20-34-35.049-AvastVBoxSVC.exe-1236.log
2015-01-01 16:49 - 2015-01-01 16:50 - 00000197 _____ () C:\Windows\system32\2015-01-01-15-49-37.010-AvastVBoxSVC.exe-1336.log
2015-01-01 08:59 - 2015-01-01 09:00 - 00000197 _____ () C:\Windows\system32\2015-01-01-07-59-47.052-AvastVBoxSVC.exe-2056.log
2014-12-31 15:41 - 2014-12-31 15:41 - 00000197 _____ () C:\Windows\system32\2014-12-31-14-41-34.050-AvastVBoxSVC.exe-1752.log
2014-12-30 18:08 - 2014-12-30 18:08 - 00000197 _____ () C:\Windows\system32\2014-12-30-17-08-08.048-AvastVBoxSVC.exe-2284.log
2014-12-30 16:21 - 2014-12-30 16:21 - 00000197 _____ () C:\Windows\system32\2014-12-30-15-21-22.085-AvastVBoxSVC.exe-1912.log
2014-12-30 10:11 - 2014-12-30 10:12 - 00000197 _____ () C:\Windows\system32\2014-12-30-09-11-39.082-AvastVBoxSVC.exe-2356.log
2014-12-29 17:12 - 2014-12-29 17:12 - 00000197 _____ () C:\Windows\system32\2014-12-29-16-12-13.028-AvastVBoxSVC.exe-1332.log
2014-12-29 16:42 - 2014-12-29 16:42 - 00000197 _____ () C:\Windows\system32\2014-12-29-15-42-37.052-AvastVBoxSVC.exe-1548.log
2014-12-29 15:35 - 2014-12-29 15:35 - 00000197 _____ () C:\Windows\system32\2014-12-29-14-35-18.077-AvastVBoxSVC.exe-2236.log
2014-12-29 09:31 - 2014-12-29 09:31 - 00000000 ____D () C:\Users\Zdeněk\Documents\Vlastní šablony Office
2014-12-29 09:04 - 2014-12-29 09:05 - 00000197 _____ () C:\Windows\system32\2014-12-29-08-04-55.076-AvastVBoxSVC.exe-1356.log
2014-12-28 15:37 - 2014-12-28 15:37 - 00000197 _____ () C:\Windows\system32\2014-12-28-14-37-35.036-AvastVBoxSVC.exe-2264.log
2014-12-28 11:11 - 2014-12-28 11:11 - 00000197 _____ () C:\Windows\system32\2014-12-28-10-11-13.042-AvastVBoxSVC.exe-2732.log
2014-12-28 08:43 - 2014-12-28 08:43 - 00000197 _____ () C:\Windows\system32\2014-12-28-07-43-34.048-AvastVBoxSVC.exe-2356.log
2014-12-27 21:11 - 2014-12-27 21:12 - 00000197 _____ () C:\Windows\system32\2014-12-27-20-11-55.064-AvastVBoxSVC.exe-2372.log
2014-12-27 15:59 - 2014-12-27 16:00 - 00000197 _____ () C:\Windows\system32\2014-12-27-14-59-50.068-AvastVBoxSVC.exe-2232.log
2014-12-27 09:01 - 2014-12-27 09:01 - 00000247 _____ () C:\Windows\system32\2014-12-27-08-01-02.038-aswFe.exe-2268.log
2014-12-27 08:57 - 2014-12-27 09:00 - 00000247 _____ () C:\Windows\system32\2014-12-27-07-57-01.033-aswFe.exe-3956.log
2014-12-26 08:46 - 2014-12-26 08:47 - 00000197 _____ () C:\Windows\system32\2014-12-26-07-46-56.095-AvastVBoxSVC.exe-1884.log
2014-12-25 21:14 - 2014-12-25 21:15 - 00000197 _____ () C:\Windows\system32\2014-12-25-20-14-58.018-AvastVBoxSVC.exe-2172.log
2014-12-25 15:36 - 2014-12-25 15:37 - 00000197 _____ () C:\Windows\system32\2014-12-25-14-36-32.014-AvastVBoxSVC.exe-1128.log
2014-12-25 08:50 - 2014-12-25 08:50 - 00000197 _____ () C:\Windows\system32\2014-12-25-07-50-18.037-AvastVBoxSVC.exe-1912.log
2014-12-23 15:58 - 2014-12-23 15:58 - 00000247 _____ () C:\Windows\system32\2014-12-23-14-58-18.084-aswFe.exe-4876.log
2014-12-23 15:53 - 2014-12-23 15:58 - 00000247 _____ () C:\Windows\system32\2014-12-23-14-53-21.010-aswFe.exe-312.log
2014-12-23 15:53 - 2014-12-23 15:53 - 00000197 _____ () C:\Windows\system32\2014-12-23-14-53-17.023-AvastVBoxSVC.exe-2612.log
2014-12-23 10:20 - 2014-12-23 10:21 - 00000197 _____ () C:\Windows\system32\2014-12-23-09-20-36.089-AvastVBoxSVC.exe-2068.log
2014-12-23 08:02 - 2014-12-23 08:02 - 00000197 _____ () C:\Windows\system32\2014-12-23-07-02-25.037-AvastVBoxSVC.exe-2072.log
2014-12-22 12:32 - 2014-12-22 12:32 - 00000197 _____ () C:\Windows\system32\2014-12-22-11-32-23.091-AvastVBoxSVC.exe-2152.log
2014-12-22 10:12 - 2014-12-25 15:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Convert MOV to AVI
2014-12-22 09:04 - 2014-12-22 09:04 - 00000197 _____ () C:\Windows\system32\2014-12-22-08-04-12.067-AvastVBoxSVC.exe-1124.log
2014-12-21 16:14 - 2014-12-21 16:14 - 00000197 _____ () C:\Windows\system32\2014-12-21-15-14-42.088-AvastVBoxSVC.exe-1412.log
2014-12-21 15:51 - 2014-12-21 15:51 - 00000000 ____D () C:\Users\Zdeněk\AppData\Roaming\QuickScan
2014-12-21 14:39 - 2014-12-21 14:39 - 00000197 _____ () C:\Windows\system32\2014-12-21-13-39-27.087-AvastVBoxSVC.exe-2636.log
2014-12-21 10:07 - 2014-12-21 10:08 - 00000197 _____ () C:\Windows\system32\2014-12-21-09-07-44.053-AvastVBoxSVC.exe-1592.log
2014-12-20 21:38 - 2014-12-20 21:38 - 00000197 _____ () C:\Windows\system32\2014-12-20-20-38-06.059-AvastVBoxSVC.exe-1584.log
2014-12-20 20:45 - 2014-12-20 20:46 - 00000197 _____ () C:\Windows\system32\2014-12-20-19-45-54.091-AvastVBoxSVC.exe-1936.log
2014-12-20 15:43 - 2014-12-20 15:43 - 00000247 _____ () C:\Windows\system32\2014-12-20-14-43-28.021-aswFe.exe-5016.log
2014-12-20 15:39 - 2014-12-20 15:43 - 00000247 _____ () C:\Windows\system32\2014-12-20-14-39-30.002-aswFe.exe-2756.log
2014-12-20 15:39 - 2014-12-20 15:39 - 00000197 _____ () C:\Windows\system32\2014-12-20-14-39-27.075-AvastVBoxSVC.exe-3896.log
2014-12-20 13:45 - 2014-12-20 13:45 - 00000197 _____ () C:\Windows\system32\2014-12-20-12-45-13.097-AvastVBoxSVC.exe-2044.log
2014-12-20 11:50 - 2014-12-20 11:51 - 00000197 _____ () C:\Windows\system32\2014-12-20-10-50-30.075-AvastVBoxSVC.exe-1108.log
2014-12-19 10:16 - 2014-12-19 10:17 - 00000197 _____ () C:\Windows\system32\2014-12-19-09-16-31.089-AvastVBoxSVC.exe-1356.log
2014-12-19 07:31 - 2014-12-19 07:31 - 00000247 _____ () C:\Windows\system32\2014-12-19-06-31-27.048-aswFe.exe-5548.log
2014-12-19 07:26 - 2014-12-19 07:31 - 00000247 _____ () C:\Windows\system32\2014-12-19-06-26-49.002-aswFe.exe-2504.log
2014-12-19 07:26 - 2014-12-19 07:26 - 00000197 _____ () C:\Windows\system32\2014-12-19-06-26-43.099-AvastVBoxSVC.exe-236.log
2014-12-18 07:08 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-16 16:48 - 2013-06-06 16:16 - 00000000 ____D () C:\Users\Zdeněk\AppData\Roaming\Skype
2015-01-16 16:40 - 2013-08-25 17:43 - 00000000 ____D () C:\Users\Zdeněk\AppData\Roaming\vlc
2015-01-16 16:40 - 2013-06-10 09:37 - 00000000 ____D () C:\Users\Zdeněk\Documents\Soubory aplikace Outlook
2015-01-16 16:26 - 2009-07-14 05:34 - 00025424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-16 16:26 - 2009-07-14 05:34 - 00025424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-16 16:24 - 2014-06-14 05:56 - 01961522 _____ () C:\Windows\WindowsUpdate.log
2015-01-16 16:18 - 2013-06-06 15:50 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-16 16:18 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-15 16:02 - 2013-06-06 15:50 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-14 13:05 - 2014-10-28 17:13 - 00000000 ____D () C:\Users\Zdeněk\AppData\Local\CrashDumps
2015-01-14 09:45 - 2013-08-14 15:12 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 09:42 - 2013-06-06 15:29 - 110348472 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-14 09:32 - 2013-06-06 15:50 - 00000000 ____D () C:\Program Files\Google
2015-01-14 09:02 - 2013-06-06 15:50 - 00000000 ____D () C:\Users\Zdeněk\AppData\Local\Google
2015-01-12 16:22 - 2014-02-03 18:11 - 00007680 _____ () C:\Users\Zdeněk\AppData\Local\Resmon.ResmonCfg
2015-01-11 13:12 - 2009-07-14 05:53 - 00032606 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-01-06 15:00 - 2014-11-22 13:50 - 00000755 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\LG PC Suite.Lnk
2015-01-06 15:00 - 2014-09-12 08:30 - 00000755 _____ () C:\Users\Public\Desktop\LG PC Suite.Lnk
2015-01-06 15:00 - 2014-09-12 08:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG PC Suite
2015-01-06 04:36 - 2013-06-06 14:47 - 00249488 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-01-05 09:41 - 2013-06-05 20:15 - 01619152 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-29 09:31 - 2013-06-09 05:21 - 00000000 ____D () C:\Users\Zdeněk\Documents\Hasiči
2014-12-22 12:58 - 2013-06-05 20:10 - 00000000 ____D () C:\Users\Zdeněk
2014-12-19 07:18 - 2009-07-14 05:33 - 03810160 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-19 03:47 - 2013-06-06 15:28 - 00123280 _____ () C:\Users\Zdeněk\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-19 03:17 - 2013-06-06 16:24 - 00000000 ____D () C:\Users\Zdeněk\AppData\Local\GHISLER

Some content of TEMP:
====================
C:\Users\Zdeněk\AppData\Local\Temp\Quarantine.exe
C:\Users\Zdeněk\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed




LastRegBack: 2015-01-15 11:26

Snad je to ono??!!Díky ! Zdenrs










==================== End Of Log ============================

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-01-2015 01
Ran by Zdeněk (administrator) on ZDENĚK-PC on 17-01-2015 15:30:46
Running from D:\filmy
Loaded Profiles: Zdeněk (Available profiles: Zdeněk)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Farbar) D:\filmy\FRST (1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-09] (AVAST Software)
HKU\S-1-5-21-1563119665-3996211366-461964742-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1563119665-3996211366-461964742-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-1563119665-3996211366-461964742-1000\...\MountPoints2: {5fb6302c-3a49-11e4-8317-001e8c07eb64} - G:\LGAutoRun.exe
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files\Garmin\Express Tray\ExpressTray.exe [688984 2014-08-07] (Garmin Ltd or its subsidiaries)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1563119665-3996211366-461964742-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> 4887FCB530EC403C8D9EEF66C94562FF URL = http://search.seznam.cz/?q={searchTerms ... arch_12454
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> {596BE5E3-131E-4BA2-AABB-F4EE99CBB40B} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> {6546A32F-7525-4F1F-BD26-68A1AF1B85B2} URL = http://encyklopedie.seznam.cz/search?q= ... arch_12454
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> {6B1E1E31-0209-4D5C-A918-CD90869134EB} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> {72DD9207-6CA9-46A7-A44B-B27841701C19} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_12454
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> {A2E7DDF5-AE53-4C13-B6FE-64929AFBAD75} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_12454
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> {B9466D84-53D7-48DD-9E1E-FFA181898D8A} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_12454
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> {CD85DAE8-24FA-4D4D-A0A4-2B3D932EC3E2} URL = http://www.novinky.cz/hledej?w={searchT ... arch_12454
SearchScopes: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> {E4784CAB-1305-48AF-90AC-5D6EC89E5EDA} URL = http://www.mapy.cz/?query={searchTerms} ... arch_12454
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-1563119665-3996211366-461964742-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

FireFox:
========
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> D:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-06-06]

Chrome:
=======
CHR Profile: C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-09-16]
CHR Extension: (Peněženka Google) - C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-19]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-10]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
CHR HKU\S-1-5-21-1563119665-3996211366-461964742-1000\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - No Path

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-10] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3192344 2014-11-10] (Avast Software)
S4 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [438616 2014-08-07] (Garmin Ltd or its subsidiaries)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S4 ssinstall; C:\Windows\System32\ssins.exe [2324216 2014-05-19] (PS Media s.r.o.)
S4 ST2012_Svc; C:\Program Files\Spyware Terminator\st_rsser.exe [587912 2013-04-03] (Crawler.com)
S4 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S2 HPSLPSVC; C:\Users\Zdeněk\AppData\Local\Temp\7zS5095\hpslpsvc32.dll [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag.sys [24064 2014-07-07] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem.sys [28672 2014-07-07] (LG Electronics Inc.)
S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis.sys [74240 2014-05-27] (LG Electronics Inc.)
R2 Aspi32; C:\Windows\System32\drivers\aspi32.sys [16512 2009-10-11] (Adaptec) [File not signed]
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-11-10] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2014-11-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-11-10] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-11-10] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787800 2014-11-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423784 2014-11-21] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [91496 2014-11-10] (AVAST Software)
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [38984 2014-07-05] (The OpenVPN Project)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206248 2014-11-10] ()
S3 HPZid412; C:\Windows\System32\DRIVERS\HPZid412.sys [49920 2005-10-21] (HP)
S3 HPZipr12; C:\Windows\System32\DRIVERS\HPZipr12.sys [16496 2005-10-21] (HP)
S3 HPZius12; C:\Windows\System32\DRIVERS\HPZius12.sys [21488 2003-08-11] (HP)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R3 SNP2STD; C:\Windows\System32\DRIVERS\snp2sxp.sys [12160512 2006-09-26] () [File not signed]
R1 sp_rsdrv2; C:\Windows\system32\drivers\sp_rsdrv2.sys [32768 2011-06-21] () [File not signed]
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [218192 2014-11-10] (Avast Software)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-17 15:19 - 2015-01-17 15:20 - 00000197 _____ () C:\Windows\system32\2015-01-17-14-19-58.038-AvastVBoxSVC.exe-2256.log
2015-01-17 10:31 - 2015-01-17 10:31 - 00000197 _____ () C:\Windows\system32\2015-01-17-09-31-23.041-AvastVBoxSVC.exe-2356.log
2015-01-16 16:52 - 2015-01-16 16:52 - 00015327 _____ () C:\Users\Zdeněk\Desktop\LM.bat
2015-01-16 16:19 - 2015-01-16 16:19 - 00000197 _____ () C:\Windows\system32\2015-01-16-15-19-07.041-AvastVBoxSVC.exe-2304.log
2015-01-15 16:31 - 2015-01-16 16:52 - 00029696 _____ () C:\Users\Zdeněk\AppData\Local\MSGBOX.EXE
2015-01-15 16:18 - 2015-01-17 15:30 - 00000000 ____D () C:\FRST
2015-01-15 10:23 - 2015-01-15 10:23 - 00000197 _____ () C:\Windows\system32\2015-01-15-09-23-10.098-AvastVBoxSVC.exe-2168.log
2015-01-15 10:22 - 2015-01-17 15:19 - 00000280 _____ () C:\Windows\setupact.log
2015-01-15 10:22 - 2015-01-15 10:22 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-14 12:40 - 2015-01-14 12:40 - 00000247 _____ () C:\Windows\system32\2015-01-14-11-40-36.096-aswFe.exe-2896.log
2015-01-14 12:09 - 2015-01-14 12:40 - 00000247 _____ () C:\Windows\system32\2015-01-14-11-09-55.064-aswFe.exe-2084.log
2015-01-14 12:09 - 2015-01-14 12:09 - 00000197 _____ () C:\Windows\system32\2015-01-14-11-09-52.097-AvastVBoxSVC.exe-1512.log
2015-01-14 09:45 - 2015-01-14 09:45 - 00000247 _____ () C:\Windows\system32\2015-01-14-08-45-34.050-aswFe.exe-1108.log
2015-01-14 09:45 - 2015-01-14 09:45 - 00000197 _____ () C:\Windows\system32\2015-01-14-08-45-31.044-AvastVBoxSVC.exe-3104.log
2015-01-14 09:36 - 2015-01-14 09:36 - 00000197 _____ () C:\Windows\system32\2015-01-14-08-36-25.076-AvastVBoxSVC.exe-396.log
2015-01-14 09:30 - 2015-01-14 09:32 - 00000000 ____D () C:\AdwCleaner
2015-01-14 08:46 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 08:46 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-01-14 08:46 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 08:46 - 2014-12-11 18:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 08:46 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 08:45 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 08:42 - 2015-01-14 08:42 - 00000197 _____ () C:\Windows\system32\2015-01-14-07-42-31.044-AvastVBoxSVC.exe-336.log
2015-01-13 16:44 - 2015-01-13 16:44 - 00000197 _____ () C:\Windows\system32\2015-01-13-15-44-00.082-AvastVBoxSVC.exe-1172.log
2015-01-12 16:19 - 2015-01-12 16:19 - 00000000 ____D () C:\rsit
2015-01-12 16:19 - 2015-01-12 16:19 - 00000000 ____D () C:\Program Files\trend micro
2015-01-12 15:42 - 2015-01-12 15:42 - 00000197 _____ () C:\Windows\system32\2015-01-12-14-42-17.027-AvastVBoxSVC.exe-1348.log
2015-01-10 14:46 - 2015-01-10 14:46 - 00000197 _____ () C:\Windows\system32\2015-01-10-13-46-42.024-AvastVBoxSVC.exe-1832.log
2015-01-10 08:47 - 2015-01-10 08:47 - 00000247 _____ () C:\Windows\system32\2015-01-10-07-47-12.032-aswFe.exe-4296.log
2015-01-10 08:41 - 2015-01-10 08:47 - 00000247 _____ () C:\Windows\system32\2015-01-10-07-41-49.042-aswFe.exe-2016.log
2015-01-10 08:41 - 2015-01-10 08:41 - 00000197 _____ () C:\Windows\system32\2015-01-10-07-41-44.015-AvastVBoxSVC.exe-1416.log
2015-01-08 15:57 - 2015-01-08 15:57 - 00000197 _____ () C:\Windows\system32\2015-01-08-14-57-09.019-AvastVBoxSVC.exe-2188.log
2015-01-08 09:53 - 2015-01-08 09:53 - 00000197 _____ () C:\Windows\system32\2015-01-08-08-53-26.028-AvastVBoxSVC.exe-1552.log
2015-01-07 15:44 - 2015-01-07 15:44 - 00000659 _____ () C:\Users\Zdeněk\Desktop\foto2015 – zástupce.lnk
2015-01-07 15:40 - 2015-01-07 15:40 - 00000197 _____ () C:\Windows\system32\2015-01-07-14-40-37.094-AvastVBoxSVC.exe-796.log
2015-01-06 14:43 - 2015-01-06 14:43 - 00000197 _____ () C:\Windows\system32\2015-01-06-13-43-27.008-AvastVBoxSVC.exe-1292.log
2015-01-06 07:10 - 2015-01-06 07:11 - 00000197 _____ () C:\Windows\system32\2015-01-06-06-10-37.090-AvastVBoxSVC.exe-2596.log
2015-01-05 16:40 - 2015-01-05 16:40 - 00000197 _____ () C:\Windows\system32\2015-01-05-15-40-10.070-AvastVBoxSVC.exe-324.log
2015-01-05 10:14 - 2015-01-05 10:14 - 00000000 ____D () C:\Users\Zdeněk\AppData\Local\CDex
2015-01-05 10:14 - 2015-01-05 10:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDex
2015-01-05 08:23 - 2015-01-05 08:23 - 00000197 _____ () C:\Windows\system32\2015-01-05-07-23-17.069-AvastVBoxSVC.exe-2332.log
2015-01-04 08:58 - 2015-01-04 08:58 - 00000197 _____ () C:\Windows\system32\2015-01-04-07-58-04.068-AvastVBoxSVC.exe-1632.log
2015-01-04 08:33 - 2015-01-04 08:33 - 00000197 _____ () C:\Windows\system32\2015-01-04-07-33-14.078-AvastVBoxSVC.exe-2228.log
2015-01-03 15:43 - 2015-01-03 15:43 - 00000197 _____ () C:\Windows\system32\2015-01-03-14-43-27.051-AvastVBoxSVC.exe-1556.log
2015-01-03 10:18 - 2015-01-03 10:19 - 00000197 _____ () C:\Windows\system32\2015-01-03-09-18-58.091-AvastVBoxSVC.exe-1548.log
2015-01-02 15:15 - 2015-01-02 15:15 - 00000197 _____ () C:\Windows\system32\2015-01-02-14-15-03.073-AvastVBoxSVC.exe-1564.log
2015-01-02 10:06 - 2015-01-02 10:06 - 00000197 _____ () C:\Windows\system32\2015-01-02-09-06-11.087-AvastVBoxSVC.exe-2176.log
2015-01-02 09:04 - 2015-01-02 09:04 - 00000197 _____ () C:\Windows\system32\2015-01-02-08-04-19.045-AvastVBoxSVC.exe-2152.log
2015-01-01 21:34 - 2015-01-01 21:34 - 00000197 _____ () C:\Windows\system32\2015-01-01-20-34-35.049-AvastVBoxSVC.exe-1236.log
2015-01-01 16:49 - 2015-01-01 16:50 - 00000197 _____ () C:\Windows\system32\2015-01-01-15-49-37.010-AvastVBoxSVC.exe-1336.log
2015-01-01 08:59 - 2015-01-01 09:00 - 00000197 _____ () C:\Windows\system32\2015-01-01-07-59-47.052-AvastVBoxSVC.exe-2056.log
2014-12-31 15:41 - 2014-12-31 15:41 - 00000197 _____ () C:\Windows\system32\2014-12-31-14-41-34.050-AvastVBoxSVC.exe-1752.log
2014-12-30 18:08 - 2014-12-30 18:08 - 00000197 _____ () C:\Windows\system32\2014-12-30-17-08-08.048-AvastVBoxSVC.exe-2284.log
2014-12-30 16:21 - 2014-12-30 16:21 - 00000197 _____ () C:\Windows\system32\2014-12-30-15-21-22.085-AvastVBoxSVC.exe-1912.log
2014-12-30 10:11 - 2014-12-30 10:12 - 00000197 _____ () C:\Windows\system32\2014-12-30-09-11-39.082-AvastVBoxSVC.exe-2356.log
2014-12-29 17:12 - 2014-12-29 17:12 - 00000197 _____ () C:\Windows\system32\2014-12-29-16-12-13.028-AvastVBoxSVC.exe-1332.log
2014-12-29 16:42 - 2014-12-29 16:42 - 00000197 _____ () C:\Windows\system32\2014-12-29-15-42-37.052-AvastVBoxSVC.exe-1548.log
2014-12-29 15:35 - 2014-12-29 15:35 - 00000197 _____ () C:\Windows\system32\2014-12-29-14-35-18.077-AvastVBoxSVC.exe-2236.log
2014-12-29 09:31 - 2014-12-29 09:31 - 00000000 ____D () C:\Users\Zdeněk\Documents\Vlastní šablony Office
2014-12-29 09:04 - 2014-12-29 09:05 - 00000197 _____ () C:\Windows\system32\2014-12-29-08-04-55.076-AvastVBoxSVC.exe-1356.log
2014-12-28 15:37 - 2014-12-28 15:37 - 00000197 _____ () C:\Windows\system32\2014-12-28-14-37-35.036-AvastVBoxSVC.exe-2264.log
2014-12-28 11:11 - 2014-12-28 11:11 - 00000197 _____ () C:\Windows\system32\2014-12-28-10-11-13.042-AvastVBoxSVC.exe-2732.log
2014-12-28 08:43 - 2014-12-28 08:43 - 00000197 _____ () C:\Windows\system32\2014-12-28-07-43-34.048-AvastVBoxSVC.exe-2356.log
2014-12-27 21:11 - 2014-12-27 21:12 - 00000197 _____ () C:\Windows\system32\2014-12-27-20-11-55.064-AvastVBoxSVC.exe-2372.log
2014-12-27 15:59 - 2014-12-27 16:00 - 00000197 _____ () C:\Windows\system32\2014-12-27-14-59-50.068-AvastVBoxSVC.exe-2232.log
2014-12-27 09:01 - 2014-12-27 09:01 - 00000247 _____ () C:\Windows\system32\2014-12-27-08-01-02.038-aswFe.exe-2268.log
2014-12-27 08:57 - 2014-12-27 09:00 - 00000247 _____ () C:\Windows\system32\2014-12-27-07-57-01.033-aswFe.exe-3956.log
2014-12-26 08:46 - 2014-12-26 08:47 - 00000197 _____ () C:\Windows\system32\2014-12-26-07-46-56.095-AvastVBoxSVC.exe-1884.log
2014-12-25 21:14 - 2014-12-25 21:15 - 00000197 _____ () C:\Windows\system32\2014-12-25-20-14-58.018-AvastVBoxSVC.exe-2172.log
2014-12-25 15:36 - 2014-12-25 15:37 - 00000197 _____ () C:\Windows\system32\2014-12-25-14-36-32.014-AvastVBoxSVC.exe-1128.log
2014-12-25 08:50 - 2014-12-25 08:50 - 00000197 _____ () C:\Windows\system32\2014-12-25-07-50-18.037-AvastVBoxSVC.exe-1912.log
2014-12-23 15:58 - 2014-12-23 15:58 - 00000247 _____ () C:\Windows\system32\2014-12-23-14-58-18.084-aswFe.exe-4876.log
2014-12-23 15:53 - 2014-12-23 15:58 - 00000247 _____ () C:\Windows\system32\2014-12-23-14-53-21.010-aswFe.exe-312.log
2014-12-23 15:53 - 2014-12-23 15:53 - 00000197 _____ () C:\Windows\system32\2014-12-23-14-53-17.023-AvastVBoxSVC.exe-2612.log
2014-12-23 10:20 - 2014-12-23 10:21 - 00000197 _____ () C:\Windows\system32\2014-12-23-09-20-36.089-AvastVBoxSVC.exe-2068.log
2014-12-23 08:02 - 2014-12-23 08:02 - 00000197 _____ () C:\Windows\system32\2014-12-23-07-02-25.037-AvastVBoxSVC.exe-2072.log
2014-12-22 12:32 - 2014-12-22 12:32 - 00000197 _____ () C:\Windows\system32\2014-12-22-11-32-23.091-AvastVBoxSVC.exe-2152.log
2014-12-22 10:12 - 2014-12-25 15:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Convert MOV to AVI
2014-12-22 09:04 - 2014-12-22 09:04 - 00000197 _____ () C:\Windows\system32\2014-12-22-08-04-12.067-AvastVBoxSVC.exe-1124.log
2014-12-21 16:14 - 2014-12-21 16:14 - 00000197 _____ () C:\Windows\system32\2014-12-21-15-14-42.088-AvastVBoxSVC.exe-1412.log
2014-12-21 15:51 - 2014-12-21 15:51 - 00000000 ____D () C:\Users\Zdeněk\AppData\Roaming\QuickScan
2014-12-21 14:39 - 2014-12-21 14:39 - 00000197 _____ () C:\Windows\system32\2014-12-21-13-39-27.087-AvastVBoxSVC.exe-2636.log
2014-12-21 10:07 - 2014-12-21 10:08 - 00000197 _____ () C:\Windows\system32\2014-12-21-09-07-44.053-AvastVBoxSVC.exe-1592.log
2014-12-20 21:38 - 2014-12-20 21:38 - 00000197 _____ () C:\Windows\system32\2014-12-20-20-38-06.059-AvastVBoxSVC.exe-1584.log
2014-12-20 20:45 - 2014-12-20 20:46 - 00000197 _____ () C:\Windows\system32\2014-12-20-19-45-54.091-AvastVBoxSVC.exe-1936.log
2014-12-20 15:43 - 2014-12-20 15:43 - 00000247 _____ () C:\Windows\system32\2014-12-20-14-43-28.021-aswFe.exe-5016.log
2014-12-20 15:39 - 2014-12-20 15:43 - 00000247 _____ () C:\Windows\system32\2014-12-20-14-39-30.002-aswFe.exe-2756.log
2014-12-20 15:39 - 2014-12-20 15:39 - 00000197 _____ () C:\Windows\system32\2014-12-20-14-39-27.075-AvastVBoxSVC.exe-3896.log
2014-12-20 13:45 - 2014-12-20 13:45 - 00000197 _____ () C:\Windows\system32\2014-12-20-12-45-13.097-AvastVBoxSVC.exe-2044.log
2014-12-20 11:50 - 2014-12-20 11:51 - 00000197 _____ () C:\Windows\system32\2014-12-20-10-50-30.075-AvastVBoxSVC.exe-1108.log
2014-12-19 10:16 - 2014-12-19 10:17 - 00000197 _____ () C:\Windows\system32\2014-12-19-09-16-31.089-AvastVBoxSVC.exe-1356.log
2014-12-19 07:31 - 2014-12-19 07:31 - 00000247 _____ () C:\Windows\system32\2014-12-19-06-31-27.048-aswFe.exe-5548.log
2014-12-19 07:26 - 2014-12-19 07:31 - 00000247 _____ () C:\Windows\system32\2014-12-19-06-26-49.002-aswFe.exe-2504.log
2014-12-19 07:26 - 2014-12-19 07:26 - 00000197 _____ () C:\Windows\system32\2014-12-19-06-26-43.099-AvastVBoxSVC.exe-236.log
2014-12-18 07:08 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-17 15:26 - 2013-06-10 09:37 - 00000000 ____D () C:\Users\Zdeněk\Documents\Soubory aplikace Outlook
2015-01-17 15:26 - 2009-07-14 05:34 - 00025424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-17 15:26 - 2009-07-14 05:34 - 00025424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-17 15:23 - 2014-06-14 05:56 - 01993872 _____ () C:\Windows\WindowsUpdate.log
2015-01-17 15:19 - 2013-06-06 15:50 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-17 15:19 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-17 11:04 - 2013-06-08 05:47 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-01-17 11:02 - 2013-06-06 15:50 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-16 16:48 - 2013-06-06 16:16 - 00000000 ____D () C:\Users\Zdeněk\AppData\Roaming\Skype
2015-01-16 16:40 - 2013-08-25 17:43 - 00000000 ____D () C:\Users\Zdeněk\AppData\Roaming\vlc
2015-01-14 13:05 - 2014-10-28 17:13 - 00000000 ____D () C:\Users\Zdeněk\AppData\Local\CrashDumps
2015-01-14 09:45 - 2013-08-14 15:12 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 09:42 - 2013-06-06 15:29 - 110348472 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-14 09:32 - 2013-06-06 15:50 - 00000000 ____D () C:\Program Files\Google
2015-01-14 09:02 - 2013-06-06 15:50 - 00000000 ____D () C:\Users\Zdeněk\AppData\Local\Google
2015-01-12 16:22 - 2014-02-03 18:11 - 00007680 _____ () C:\Users\Zdeněk\AppData\Local\Resmon.ResmonCfg
2015-01-11 13:12 - 2009-07-14 05:53 - 00032606 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-01-06 15:00 - 2014-11-22 13:50 - 00000755 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\LG PC Suite.Lnk
2015-01-06 15:00 - 2014-09-12 08:30 - 00000755 _____ () C:\Users\Public\Desktop\LG PC Suite.Lnk
2015-01-06 15:00 - 2014-09-12 08:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG PC Suite
2015-01-06 04:36 - 2013-06-06 14:47 - 00249488 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-01-05 09:41 - 2013-06-05 20:15 - 01619152 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-29 09:31 - 2013-06-09 05:21 - 00000000 ____D () C:\Users\Zdeněk\Documents\Hasiči
2014-12-22 12:58 - 2013-06-05 20:10 - 00000000 ____D () C:\Users\Zdeněk
2014-12-19 07:18 - 2009-07-14 05:33 - 03810160 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-19 03:47 - 2013-06-06 15:28 - 00123280 _____ () C:\Users\Zdeněk\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-19 03:17 - 2013-06-06 16:24 - 00000000 ____D () C:\Users\Zdeněk\AppData\Local\GHISLER

==================== Files in the root of some directories =======
2014-04-20 06:07 - 2014-04-20 06:08 - 50063360 _____ () C:\Program Files\GUT1564.tmp
2013-06-27 16:11 - 2013-06-27 16:11 - 0000132 _____ () C:\Users\Zdeněk\AppData\Roaming\Adobe Formát GIF CS5 – předvolby
2014-09-30 14:02 - 2014-09-30 14:02 - 0000132 _____ () C:\Users\Zdeněk\AppData\Roaming\Adobe Formát PNG CS5 – předvolby
2014-12-13 16:07 - 2014-12-13 17:27 - 0000000 _____ () C:\Users\Zdeněk\AppData\Roaming\Kernel Extension
2014-12-13 16:07 - 2014-12-13 17:27 - 0000000 _____ () C:\Users\Zdeněk\AppData\Roaming\Keychains
2013-09-03 06:13 - 2013-09-03 06:13 - 0000241 _____ () C:\Users\Zdeněk\AppData\Roaming\MPUI.ini
2013-09-08 06:49 - 2013-09-08 06:49 - 0003584 _____ () C:\Users\Zdeněk\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-06-06 15:28 - 2013-06-06 15:28 - 0000094 _____ () C:\Users\Zdeněk\AppData\Local\fusioncache.dat
2015-01-15 16:31 - 2015-01-16 16:52 - 0029696 _____ () C:\Users\Zdeněk\AppData\Local\MSGBOX.EXE
2014-02-03 18:11 - 2015-01-12 16:22 - 0007680 _____ () C:\Users\Zdeněk\AppData\Local\Resmon.ResmonCfg
2013-06-06 14:54 - 2013-11-12 07:56 - 0009675 _____ () C:\ProgramData\hpzinstall.log
2014-12-13 17:27 - 2014-12-13 17:27 - 0000000 _____ () C:\ProgramData\Jingles
2014-12-13 17:27 - 2014-12-13 17:27 - 0000000 _____ () C:\ProgramData\Keyboard Layouts
2014-12-13 16:08 - 2014-12-13 17:28 - 0000000 ____H () C:\ProgramData\PKP_DLes.DAT
2014-12-13 16:07 - 2014-12-13 17:27 - 0000000 ____H () C:\ProgramData\PKP_DLet.DAT
2014-12-13 16:07 - 2014-12-13 17:27 - 0000000 ____H () C:\ProgramData\PKP_DLev.DAT

Some content of TEMP:
====================
C:\Users\Zdeněk\AppData\Local\Temp\Quarantine.exe
C:\Users\Zdeněk\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-15 11:26

Omlouvám se , ale frst . exe nemůžu najít.Sory !Zdenrs
Zkoušel jsem všechno možné!

==================== End Of Log ============================

FRST.exe mate v D:\filmy - presunte jej na plochu, pak pokracujte dle navodu viz vyse

Fix ve FRSTu mně nejde spustit , píše:look you don´t knoww to do to prevent damage to the tool will exit.
Dál moje znalosti nesahají.
Zdraví Zdenrs

Nic se nedeje... nejak to zmakneme

Postupujte dle nasledujiciho navodu

• ulozte na plochu tento soubor http://leteckaposta.cz/565938842
• ulozte na plochu a spustte http://download.bleepingcomputer.com/dl ... 2/FRST.exe
• kliknete na Fix
• po restartu pocitace na plose budete mit fixlog.txt - ten mi zaslete v pristi odpovedi

Při pokusu o spuštění downoland.... frst.exe se objeví:
The Download link has expired!

The links to our downloads expire after 10 minutes. You will be redirected in three seconds to the proper page to download the program.


Asi mám počkat??!!Nechám to zase na zítra!Díky!