Tak zde je ten log z FRST.Jen tak pro zajímavost PC už 3 den bezproblému.Nevím.
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-02-2015
Ran by Volary (administrator) on VOLARY-PC on 06-02-2015 14:37:30
Running from C:\Users\Volary\Desktop
Loaded Profiles: Volary (Available profiles: Volary)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\SeaPort.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Volary\Desktop\FRSTLauncher (3).exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5581888 2014-02-24] (ESET)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3838800 2014-12-13] (LogMeIn Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1698060100-2237741513-2834387809-1001\...\Run: [zASRockInstantBoot] => [X]
HKU\S-1-5-21-1698060100-2237741513-2834387809-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [458456 2014-12-19] (ZONER software)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll (Microsoft Corporation.)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1215155.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKU\S-1-5-21-1698060100-2237741513-2834387809-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Volary\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF HKLM\...\Thunderbird\Extensions: [
eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-09-17]
FF HKLM-x32\...\Thunderbird\Extensions: [
eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
Chrome:
=======
CHR HomePage: Default -> hxxp://
www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://
www.seznam.cz/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Volary\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Volary\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-17]
CHR Extension: (Dokumenty Google) - C:\Users\Volary\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-17]
CHR Extension: (Disk Google) - C:\Users\Volary\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-17]
CHR Extension: (YouTube) - C:\Users\Volary\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-17]
CHR Extension: (Facebook) - C:\Users\Volary\AppData\Local\Google\Chrome\User Data\Default\Extensions\boeajhmfdjldchidhphikilcgdacljfm [2014-11-16]
CHR Extension: (Vyhledávání Google) - C:\Users\Volary\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-17]
CHR Extension: (Tabulky Google) - C:\Users\Volary\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-17]
CHR Extension: (AdBlock) - C:\Users\Volary\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-17]
CHR Extension: (theHunter) - C:\Users\Volary\AppData\Local\Google\Chrome\User Data\Default\Extensions\jangaedeekciafhlanphhnalogmhefmo [2014-11-16]
CHR Extension: (Google Docs Viewer (by Google)) - C:\Users\Volary\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkjmcfdcdbbkdacicmpokoddagejpknh [2014-11-16]
CHR Extension: (Ghostery) - C:\Users\Volary\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2015-02-01]
CHR Extension: (Peněženka Google) - C:\Users\Volary\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-17]
CHR Extension: (Gmail) - C:\Users\Volary\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-17]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.) [File not signed]
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1343408 2014-02-24] (ESET)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2014-12-02] (LogMeIn, Inc.)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2014-12-24] (Electronic Arts)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2014-10-03] ()
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
S3 EvolveVirtualAdapter; C:\Windows\System32\DRIVERS\evolve.sys [21656 2014-09-17] (Echobit, LLC)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2014-10-03] ()
S3 massfilter_hs; C:\Windows\system32\drivers\massfilter_hs.sys [20232 2012-06-20] (HandSet Incorporated)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2015-01-26] ()
R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1276928 2009-11-25] (VIA Technologies, Inc.) [File not signed]
S3 zghsmdm; C:\Windows\System32\DRIVERS\zghsmdm.sys [122624 2011-01-13] (ZTE Incorporated) [File not signed]
S3 zghsser; system32\DRIVERS\zghsser.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-06 14:37 - 2015-02-06 14:37 - 00011730 _____ () C:\Users\Volary\Desktop\FRST.txt
2015-02-06 14:37 - 2015-02-06 14:37 - 00000000 ____D () C:\FRST
2015-02-06 14:35 - 2015-02-06 14:34 - 00112640 _____ (forum.viry.cz) C:\Users\Volary\Desktop\FRSTLauncher (3).exe
2015-02-06 14:33 - 2015-02-06 14:33 - 02131968 _____ (Farbar) C:\Users\Volary\Desktop\FRST64.exe
2015-02-06 13:48 - 2015-02-06 13:53 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0420b3067b1b1.job
2015-02-06 13:48 - 2015-02-06 13:48 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1d0420b3067b1b1
2015-02-05 19:12 - 2015-02-05 19:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2015-02-05 19:12 - 2015-02-05 19:12 - 00000000 ____D () C:\Program Files\CPUID
2015-02-05 15:27 - 2015-02-05 15:27 - 00000000 ____D () C:\ProgramData\Riot Games
2015-02-05 15:26 - 2015-02-05 15:26 - 00001613 _____ () C:\Users\Public\Desktop\League of Legends.lnk
2015-02-05 15:26 - 2015-02-05 15:26 - 00000000 ____D () C:\Riot Games
2015-02-05 15:26 - 2015-02-05 15:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2015-02-05 15:26 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2015-02-05 15:26 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2015-02-05 15:26 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2015-02-04 20:21 - 2015-02-04 20:21 - 00002966 _____ () C:\Windows\System32\Tasks\{6FD8D239-3BF5-4638-B776-6D6DCF6B1C0C}
2015-02-04 18:50 - 2015-02-04 18:50 - 00001136 _____ () C:\Users\Volary\Desktop\Application-x64 – zástupce.lnk
2015-02-03 15:13 - 2015-02-04 13:11 - 00001138 _____ () C:\Users\Public\Desktop\Banished.lnk
2015-02-01 16:40 - 2015-02-01 16:40 - 00000000 ____D () C:\Users\Volary\Documents\Banished
2015-02-01 16:22 - 2015-02-01 16:22 - 00000000 ____D () C:\Program Files (x86)\Hry
2015-01-26 19:59 - 2015-02-03 15:03 - 00000000 ____D () C:\Windows\system32\SRSLabs
2015-01-26 17:44 - 2015-01-26 17:44 - 00000000 ____D () C:\Windows\System32\Tasks\Úlohy prohlížeče událostí
2015-01-25 14:02 - 2015-02-04 10:38 - 00002288 _____ () C:\Windows\PFRO.log
2015-01-25 14:01 - 2015-02-04 10:37 - 00000000 ____D () C:\AdwCleaner
2015-01-25 13:29 - 2015-02-06 14:36 - 00008064 _____ () C:\Windows\setupact.log
2015-01-25 13:29 - 2015-01-25 13:29 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-24 17:53 - 2015-01-25 12:52 - 00000000 ____D () C:\Program Files (x86)\Counter-Strike 1.6 Standalone
2015-01-23 14:44 - 2015-01-23 14:44 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2015-01-23 14:35 - 2015-01-23 14:35 - 00058394 _____ () C:\Windows\SysWOW64\CCCInstall_201501231435301005.log
2015-01-23 14:35 - 2015-01-23 14:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-01-23 14:35 - 2015-01-23 14:35 - 00000000 ____D () C:\ProgramData\ATI
2015-01-21 19:23 - 2015-02-03 15:03 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-01-21 19:23 - 2015-01-21 19:23 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-20 20:01 - 2015-01-20 20:01 - 00000000 ____D () C:\Users\Volary\AppData\Roaming\AMD
2015-01-20 17:54 - 2015-01-20 17:54 - 00000000 ____D () C:\Program Files (x86)\AMD
2015-01-20 17:52 - 2015-01-23 14:41 - 00000000 ____D () C:\AMD
2015-01-18 21:15 - 2015-01-18 21:15 - 00000000 ___SH () C:\Users\Volary\AppData\Local\LumaEmu
2015-01-18 21:15 - 2015-01-18 21:15 - 00000000 ____D () C:\Users\Volary\Documents\Klei
2015-01-18 20:14 - 2015-01-18 20:14 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2015-01-16 19:25 - 2015-02-02 17:38 - 00000000 ____D () C:\Users\Volary\AppData\Local\CrashDumps
2015-01-15 06:53 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-15 06:53 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-01-15 06:53 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-01-15 06:53 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-01-15 06:53 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-15 06:53 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-15 06:53 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-01-14 08:14 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 08:13 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 08:13 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 08:13 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-14 08:13 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-14 08:12 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-13 20:40 - 2015-01-20 21:03 - 00000000 ____D () C:\Users\Volary\Documents\ClownfishSoundTemp
2015-01-10 15:03 - 2015-01-10 15:03 - 00000896 _____ () C:\Users\Volary\Desktop\CraftWorld – zástupce.lnk
2015-01-10 14:30 - 2015-01-10 14:30 - 00000000 ____D () C:\Users\Volary\AppData\Roaming\dekovir
2015-01-08 20:43 - 2015-01-08 20:43 - 00000000 ____D () C:\Users\Volary\Documents\Skype Voice Records
2015-01-08 20:43 - 2015-01-08 20:43 - 00000000 ____D () C:\Users\Volary\Documents\Clownfish Avatars
2015-01-08 20:25 - 2015-01-08 20:29 - 00129905 _____ () C:\Users\Volary\Desktop\Akce a Reakce.ppsx
2015-01-08 20:25 - 2015-01-08 20:25 - 01157632 _____ () C:\Users\Volary\Desktop\Akce a Reakce.ppt
2015-01-08 18:29 - 2015-01-08 18:29 - 00000901 _____ () C:\Users\Public\Desktop\The Witcher 2 - Assassins of Kings Enhanced Edition.lnk
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-06 13:54 - 2014-09-17 15:28 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-06 13:53 - 2014-09-17 15:28 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-06 13:50 - 2009-07-14 05:45 - 00025424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-06 13:50 - 2009-07-14 05:45 - 00025424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-06 13:48 - 2014-09-17 15:28 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-06 13:48 - 2014-09-17 15:28 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-06 13:47 - 2014-09-17 14:56 - 01689333 _____ () C:\Windows\WindowsUpdate.log
2015-02-06 13:46 - 2014-09-24 16:51 - 00000000 ____D () C:\Users\Volary\AppData\Local\LogMeIn Hamachi
2015-02-06 13:43 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-06 07:40 - 2014-09-24 16:45 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-05 21:20 - 2014-09-17 18:05 - 00000000 ____D () C:\Users\Volary\AppData\Roaming\Skype
2015-02-05 17:39 - 2014-09-17 17:11 - 00000000 ____D () C:\Users\Volary\AppData\Roaming\uTorrent
2015-02-05 16:40 - 2014-09-24 16:45 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-05 16:40 - 2014-09-24 16:45 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-05 16:40 - 2014-09-24 16:45 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-05 15:26 - 2014-09-17 17:53 - 00000000 ____D () C:\Users\Volary\AppData\Roaming\Riot Games
2015-02-05 15:20 - 2014-09-18 14:11 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2015-02-04 20:38 - 2014-09-17 17:33 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-02-04 20:32 - 2014-09-18 18:42 - 00000000 ____D () C:\Windows\SysWOW64\directx
2015-02-04 17:46 - 2014-09-22 14:09 - 00000000 ____D () C:\Program Files (x86)\WarThunder
2015-02-03 15:13 - 2014-11-07 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hry
2015-02-03 15:05 - 2014-09-17 15:00 - 00000000 ____D () C:\Users\Volary
2015-02-03 15:03 - 2014-10-05 14:48 - 00000000 ____D () C:\Users\Volary\AppData\Roaming\vlc
2015-02-03 15:03 - 2014-09-20 17:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-02-03 15:03 - 2014-09-20 17:03 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-02-03 15:03 - 2014-09-18 16:28 - 00000000 ____D () C:\Program Files (x86)\CrystalDiskInfo
2015-02-03 15:03 - 2014-09-17 15:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-03 15:03 - 2014-09-17 15:08 - 00000000 ____D () C:\Program Files (x86)\VIA
2015-02-03 15:03 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2015-02-03 15:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-03 15:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-02-03 15:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2015-02-01 14:28 - 2014-09-20 17:03 - 00000000 ____D () C:\ProgramData\Origin
2015-01-31 14:54 - 2014-09-17 17:02 - 00000000 ____D () C:\Users\Volary\AppData\Roaming\ICQ
2015-01-27 19:44 - 2014-10-28 17:24 - 00000124 _____ () C:\Users\Volary\Desktop\Zing.txt
2015-01-26 19:54 - 2014-09-18 17:14 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2015-01-25 14:10 - 2014-09-17 15:50 - 00000000 ____D () C:\Users\Volary\AppData\Roaming\Raptr
2015-01-25 14:10 - 2014-09-17 15:50 - 00000000 ____D () C:\Program Files (x86)\Raptr
2015-01-25 13:47 - 2009-07-14 16:18 - 00668542 _____ () C:\Windows\system32\perfh005.dat
2015-01-25 13:47 - 2009-07-14 16:18 - 00141202 _____ () C:\Windows\system32\perfc005.dat
2015-01-25 13:47 - 2009-07-14 06:13 - 01583226 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-25 12:56 - 2014-09-29 16:53 - 00000000 ____D () C:\Users\Volary\AppData\Roaming\DAEMON Tools Lite
2015-01-24 20:36 - 2014-09-17 19:57 - 00000000 ____D () C:\Users\Volary\AppData\Roaming\.minecraft
2015-01-24 09:53 - 2014-09-22 14:09 - 00000000 ____D () C:\Users\Volary\Documents\My Games
2015-01-24 01:02 - 2014-09-20 17:04 - 00000000 ____D () C:\Users\Volary\AppData\Roaming\Origin
2015-01-23 14:44 - 2014-09-17 15:49 - 00000000 ____D () C:\ProgramData\AMD
2015-01-23 14:42 - 2014-09-17 15:49 - 00000000 ____D () C:\Program Files\AMD
2015-01-23 14:32 - 2014-09-17 15:45 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-01-23 14:30 - 2014-09-17 15:48 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-22 17:59 - 2014-09-18 16:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2015-01-22 16:34 - 2015-01-04 16:32 - 00000000 ____D () C:\Users\Volary\Desktop\Nová složka (3)
2015-01-14 09:34 - 2014-09-18 14:29 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 09:30 - 2014-09-18 14:29 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-11 20:17 - 2014-09-17 18:05 - 00000000 ____D () C:\ProgramData\Skype
2015-01-11 20:16 - 2014-09-17 18:24 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-01-09 14:47 - 2014-10-03 14:10 - 00000000 ____D () C:\Program Files (x86)\Zaklínač
2015-01-09 14:47 - 2014-09-17 15:08 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-08 18:33 - 2014-11-07 15:17 - 00000000 ____D () C:\Users\Volary\Documents\Witcher 2
2015-01-08 18:29 - 2014-11-19 14:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-01-08 18:29 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
==================== Files in the root of some directories =======
2015-01-18 21:15 - 2015-01-18 21:15 - 0000000 ___SH () C:\Users\Volary\AppData\Local\LumaEmu
2014-11-02 16:14 - 2014-11-02 16:14 - 0001040 _____ () C:\Users\Volary\AppData\Local\MRDownloader.nast
2014-11-30 15:26 - 2014-11-30 15:26 - 0007605 _____ () C:\Users\Volary\AppData\Local\Resmon.ResmonCfg
Some content of TEMP:
====================
C:\Users\Volary\AppData\Local\Temp\BingBarSetup-Partner.exe
C:\Users\Volary\AppData\Local\Temp\Quarantine.exe
C:\Users\Volary\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Volary\AppData\Local\Temp\sfareca00001.dll
C:\Users\Volary\AppData\Local\Temp\sqlite3.dll
C:\Users\Volary\AppData\Local\Temp\Uninstaller-1272.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-02-03 15:57
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:149.05 GB) (Free:43.07 GB) NTFS
Drive g: (Vladan) (Fixed) (Total:232.88 GB) (Free:132.56 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Available physical RAM: 2684.95 MB
Total physical RAM: 4095.3 MB
Percentage of memory in use: 34%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: AEB1256A)
Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS)
Disk: 1 (Size: 149.1 GB) (Disk ID: 68A7E822)
Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0420b3067b1b1.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: ESET Smart Security 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personální firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Volary\Desktop" je 9 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ApnTBMon
"C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EvolveClient
"C:\Program Files\Echobit\Evolve\EvolveClient.exe" -autorun [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HDAudDeck
C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ
"C:\Program Files (x86)\ICQ7M\ICQ.exe" silent loginmode=4 [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Raptr
C:\PROGRA~2\Raptr\raptrstub.exe --startup [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VIAAUD
C:\Program Files (x86)\VIA\VIAudioi\VDeck\VIAAUD.exe [x]
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================