VIRY.CZ

Dobry den,

prosim o pomoc. Vypina se PC nahodile a porad vyskakuji reklamy.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Honza at 2015-01-30 23:02:34
Microsoft® Windows Vista™ Business Service Pack 2
System drive C: has 552 GB (77%) free of 715 GB
Total RAM: 3070 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:02:37, on 30.1.2015
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16599)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\conime.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Honza\Desktop\RSIT (1).exe
C:\Program Files\trend micro\Honza.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&t ... JDWQ839240
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&t ... JDWQ839240
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type= ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type= ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&t ... JDWQ839240
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RTHDVCPL] "C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe" -s
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\RunOnce: [Adobe Speed Launcher] 1422653831
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3177871084-2805199809-1159702625-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'UpdatusUser')
O4 - Global Startup: WDDMStatus.lnk = C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
O4 - Global Startup: WDSmartWare.lnk = C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: WD SmartWare Drive Manager (WDDMService) - WDC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
O23 - Service: WD SmartWare Background Service (WDSmartWareBackgroundService) - Memeo - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
O23 - Service: WindowsMangerProtect Service (WindowsMangerProtect) - Fuyu LIMITED - C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe

--
End of file - 5824 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\at245sol.default

prefs.js - "browser.search.useDBForOrder" - true

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"faststartff@gmail.com"=C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\at245sol.default\extensions\faststartff@gmail.com

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.296 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_296.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\at245sol.default\extensions\
faststartff@gmail.com
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2013-10-24 12017368]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2014-08-22 974432]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20 1021128]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2014-12-12 5489944]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2015-01-22 6699800]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Adobe Speed Launcher"=1422653831 []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
WDDMStatus.lnk - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
WDSmartWare.lnk - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-01-30 23:02:34 ----D---- C:\rsit
2015-01-30 22:48:23 ----D---- C:\Users\Honza\AppData\Roaming\SUPERAntiSpyware.com
2015-01-30 22:47:53 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2015-01-30 22:47:53 ----D---- C:\Program Files\SUPERAntiSpyware
2015-01-28 21:21:50 ----D---- C:\Hard Disk Sentinel Pro v4.40.6431 CZ - multilanguage (x86,x64) Portable
2015-01-14 19:22:28 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2015-01-14 19:18:03 ----A---- C:\Windows\system32\nlasvc.dll
2015-01-14 19:18:03 ----A---- C:\Windows\system32\nlaapi.dll
2015-01-14 19:18:03 ----A---- C:\Windows\system32\ncsi.dll
2015-01-14 19:17:50 ----A---- C:\Windows\system32\profsvc.dll
2015-01-09 12:39:15 ----A---- C:\Windows\system32\drivers\{7047c095-7864-4834-9a98-3ed508c00424}Gt.sys
2015-01-09 12:36:34 ----D---- C:\Program Files\globalUpdate
2015-01-09 12:28:29 ----D---- C:\Program Files\Seznam.cz
2015-01-09 12:28:14 ----D---- C:\Users\Honza\AppData\Roaming\Seznam.cz
2015-01-09 12:28:14 ----D---- C:\Users\Honza\AppData\Roaming\PHILIPS RQ 1150 user guide

======List of files/folders modified in the last 1 month======

2015-01-30 23:02:37 ----D---- C:\Program Files\trend micro
2015-01-30 23:02:28 ----D---- C:\Windows\Temp
2015-01-30 22:50:24 ----D---- C:\Windows\Prefetch
2015-01-30 22:48:23 ----HD---- C:\ProgramData
2015-01-30 22:47:53 ----RD---- C:\Program Files
2015-01-30 22:41:46 ----D---- C:\Windows\System32
2015-01-30 22:41:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-01-30 03:15:30 ----SHD---- C:\System Volume Information
2015-01-28 21:20:45 ----D---- C:\Windows\system32\Tasks
2015-01-28 20:03:35 ----D---- C:\Windows
2015-01-28 20:03:31 ----D---- C:\Windows\inf
2015-01-27 18:31:39 ----D---- C:\Windows\Minidump
2015-01-25 19:02:43 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2015-01-25 14:45:04 ----SHD---- C:\Windows\Installer
2015-01-25 14:45:04 ----D---- C:\Windows\Tasks
2015-01-18 14:11:13 ----D---- C:\Windows\system32\catroot2
2015-01-18 12:37:52 ----D---- C:\Program Files\CCleaner
2015-01-18 12:35:59 ----D---- C:\Windows\Debug
2015-01-18 12:30:23 ----D---- C:\Program Files\SpeedFan
2015-01-18 12:29:29 ----D---- C:\Program Files\Adobe
2015-01-18 12:28:37 ----HD---- C:\Program Files\InstallShield Installation Information
2015-01-15 18:08:16 ----D---- C:\Windows\system32\drivers
2015-01-14 19:22:32 ----D---- C:\Windows\winsxs
2015-01-14 19:22:31 ----D---- C:\Windows\system32\catroot
2015-01-14 19:22:28 ----D---- C:\Windows\system32\MRT
2015-01-14 19:18:29 ----A---- C:\Windows\system32\mrt.exe
2015-01-11 14:45:57 ----D---- C:\Program Files\AGEIA Technologies
2015-01-11 14:34:29 ----A---- C:\Windows\win.ini
2015-01-09 12:30:00 ----SD---- C:\Users\Honza\AppData\Roaming\Microsoft
2015-01-07 10:20:03 ----D---- C:\Windows\system32\WDI
2014-12-31 12:13:47 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-07-17 231800]
R1 {4351033a-acd6-47da-b89b-8a65492c9234}Gt;{4351033a-acd6-47da-b89b-8a65492c9234}Gt; C:\Windows\system32\drivers\{4351033a-acd6-47da-b89b-8a65492c9234}Gt.sys [2014-12-12 55864]
R1 {7047c095-7864-4834-9a98-3ed508c00424}Gt;{7047c095-7864-4834-9a98-3ed508c00424}Gt; C:\Windows\system32\drivers\{7047c095-7864-4834-9a98-3ed508c00424}Gt.sys [2015-01-08 55864]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [2011-07-22 12880]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [2011-07-12 67664]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-07-17 95920]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2013-12-10 2937432]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2012-12-19 154040]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2013-03-15 8952608]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2012-11-09 454288]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 35328]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [2014-07-23 142648]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-08-22 22192]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-03-15 634144]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-03-15 1266464]
R2 WDDMService;WD SmartWare Drive Manager; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2009-10-14 98304]
R2 WDSmartWareBackgroundService;WD SmartWare Background Service; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [2009-06-16 20480]
R2 WindowsMangerProtect;WindowsMangerProtect Service; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [2014-12-13 485888]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-08-22 288120]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-01-17 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-25 267440]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-01-17 116648]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-01-17 194032]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-06 114288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-09-11 770168]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Po spusteni probehne stazeni databaze
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Dobry den,

dekuji za pomoc.

Tady je první log

# AdwCleaner v4.109 - Report created 01/02/2015 at 22:06:04
# Updated 24/01/2015 by Xplode
# Database : 2015-01-26.1 [Live]
# Operating System : Windows Vista (TM) Business Service Pack 2 (32 bits)
# Username : Honza - HONZA-PC
# Running from : C:\Users\Honza\Desktop\adwcleaner_4.109.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16599

-\\ Mozilla Firefox v32.0.3 (x86 cs)

-\\ Google Chrome v40.0.2214.93

*************************

AdwCleaner[R0].txt - [5001 octets] - [29/11/2014 20:33:02]
AdwCleaner[R1].txt - [4026 octets] - [30/01/2015 23:35:50]
AdwCleaner[R2].txt - [1036 octets] - [01/02/2015 22:02:45]
AdwCleaner[S0].txt - [5242 octets] - [29/11/2014 20:35:14]
AdwCleaner[S1].txt - [3489 octets] - [31/01/2015 06:05:54]
AdwCleaner[S2].txt - [959 octets] - [01/02/2015 22:06:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1018 octets] ##########

Pokracujte Zoekem

Tady je

Zoek.exe v5.0.0.0 Updated 27-01-2015
Tool run by Honza on ne 01.02.2015 at 22:21:16,58.
Microsoft® Windows Vista™ Business 6.0.6002 Service Pack 2 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Honza\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

1.2.2015 22:22:53 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\Program Files\AGEIA Technologies deleted successfully
C:\Program Files\MSXML 4.0 deleted successfully
C:\Program Files\Seznam.cz deleted successfully
C:\Users\Honza\AppData\Local\Samsung deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11E61BB6-B0B2-4BB8-B858-EA59DDE4AAD5} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11FFB453-27AC-47D0-A36F-3B38F7E8CFBE} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{133D6015-CEA1-4EE5-AC11-9E6920E16C97} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{13C66251-C6E6-4EC0-8532-6EC9B66D6B76} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1471AE66-F013-4B66-991A-F35454AA34B3} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1479350F-303B-4151-98F6-AD55A253BA6} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{163EFA3B-C046-4F78-A2BF-29A1F4366414} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{17C54C13-F9F0-4831-BB33-4DBB898DA12C} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{18D00FB4-8659-454A-A433-405E01F917C} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{18EBC8B7-62BF-4A21-88CD-891C52E49DA4} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{18F724EC-1986-4B40-9F11-C0622BB1AD66} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1ABFF9CD-7934-4729-80F0-8D16CCD2DBC7} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1B94C1E2-E653-404E-8D4B-135B3996F52} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1C61F1E0-FF89-4A30-A1D2-45913355ED90} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F65B2ED-51F2-4273-94A3-6629659554C5} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1FA4C810-7D2F-48B4-96C5-139A6CF93AAD} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2048E59A-6AC3-48F8-8BBD-2D951443031} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{226DAAB8-F813-4095-BBFE-A51276E413D} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2358F8B5-25A-4DE5-A6DC-F723601D8BE} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{25223002-9E14-4E82-9336-398FEC509A6C} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2612B1C-1AF6-4DC9-91DD-D9FAAD154F3A} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{27C27E38-3DA6-407F-B3B0-23A0B784C861} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{27F8DD65-FFF9-48B6-BE6-9570BBC89F47} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2A2D674E-AAE3-464A-AE86-F88C254A627} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2B55534A-B363-4C27-8655-3D3D478F5AB2} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2BCFAF76-629A-471F-B84F-8D8A5067276} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2C1D0A19-933D-46E5-A68F-C0A0C609D73} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2DF435C0-E089-41EB-A478-E4E66012AD39} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2DF7698D-35EF-4308-8582-B348E31F164B} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2FE744FB-8EE5-4183-A59E-D2D53E4973F8} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{31802AFD-6AE7-4E48-8622-62409286853F} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{31F35EEB-207-4F6C-97BA-B82F7A669A4B} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3243F936-1990-47F6-97CD-F4B43C60A767} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3312F2F4-D6CA-4915-AA1-FD5AE2FCBDB} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3447D80A-E766-454C-9659-EBC667D74417} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{35F9D00C-C11B-461E-A130-59E9B4115E66} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{39C9CCDC-7967-4149-A23F-289D322F30} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3BD3D14E-B6C5-461A-B053-38F7DBB965} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3C378F84-48A-4B56-8C31-632AFF1C6349} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3C76ABA3-A192-48DC-9FA1-9957EF9F4E} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3D4B1AA2-9DF7-45AB-B666-2BED87EEFA2A} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3DE75BDD-23E4-4C10-9EBD-D342332BFAF} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3E2C4E60-41C2-49AC-9ABC-A21179B44959} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3EAD0289-99D8-45DC-9D38-8BBD6BF6DB98} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3F11744-6321-4937-812A-FB98A09F90AB} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{418A4BCD-B918-40A0-8F0-E0499D49B4D0} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{41FA599A-1828-4843-A797-82429B81DFA} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{43716E1-7360-418D-B43-AE885CAE468C} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{478907EC-EF60-46BE-B48A-FE6B6B7544DC} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{497A6B6B-8E1C-4766-89E0-1AC534AE6436} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{49BAFE0B-9674-4F23-928D-33B42E79C784} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4D447B2D-A477-4196-860-EE419AF0A0BA} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4D6ADF12-D966-445F-AC39-29E8C8CDA77B} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4F5FDA47-87CA-47BC-91AE-939962C16E} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{506A9891-5A11-49CD-9041-A2C269B5AE2} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{512A13EE-D0FD-4318-936-85B48D5FDC9E} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{52BBF0A8-4ED2-4F8C-8AE5-428AF1492BEF} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{550C993B-5E95-470F-B89D-E0E4126272B5} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5713F387-751-41A7-BC42-AAE4A0FCC7FC} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5AF42227-9B4E-44DA-8852-A4FADC70ABDB} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5B1DF75D-9514-4928-A9AA-9F2324B99AC7} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5B4DF0A0-DDEE-43F8-94CA-72C03CC358B5} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5F588EAF-C025-4B2E-A2D9-4244C71A9FA2} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5F5D5DB8-D84F-4F9A-92DE-6DEDCB14F65D} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{60EF4891-B073-4E8A-8CC1-AD98D427EECA} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{615B4125-1683-4D04-A056-065F8BE2BBB} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6175B7CB-E1AB-4F72-BC58-B871F3D87060} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{61E2324B-115E-410C-83E8-2D79F7D1394} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6210D4D9-A889-4C77-B189-3DBD56BE5CFB} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62510990-9E30-4486-8CD9-EB34456212D0} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6703C195-B382-4000-AD49-74DF58CDAAA} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{67280C21-1007-43A4-87D-255841D739A} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{67E1C341-F99F-4872-A1A4-F963A084A3} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6870DCFF-F3FF-435C-A547-1CC3A56774DD} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6C2C84E6-D4F4-4205-8F3B-1C1AE771771D} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6C44098D-642F-47DF-A0EC-CEF7F750C2EF} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6EDBA025-EDD4-4887-9BE0-2631439011EB} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6FDC01F6-2638-4B75-ADBC-30EFF2788463} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{700877CD-8345-4C25-AB7C-715E984B5B40} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{709A576B-1329-4FED-9279-75129C57CA6} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{71B7E7E9-E269-4C0C-85CB-6AA6916FF324} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{732BBB9C-F765-48AD-AF25-A34B357BDF} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{73B22E3F-2D65-4C9B-85B6-A9FEC8BB6DA1} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{75DF86E-41B3-402A-A1CE-B6343B4348B6} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{787332E2-D91F-43C2-9E92-932DDC2A7DFF} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{78884553-B3ED-4717-BF3A-DC8CB466FE8C} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{78B33B4B-880D-44A2-A51A-9FD13F6FC85} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7ABA8514-A8AB-4EC3-B497-E3A0C99656A} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7E10257-D074-4CF3-94DA-39EC12CBE} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7E39490D-8159-4D2E-9F5B-D92AF3B9EED7} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7EB1766-5704-43BD-94E8-B21449F3A65} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F567036-88E0-4D79-8385-2F37876C98E4} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{81DC8599-B109-406A-BAC7-C790D67C7B8D} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{863826-4B53-4ED1-AF89-2E790E24B7B} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8675E137-B93D-419F-83C3-656EA3615521} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{877B03CD-3F87-4003-847D-DAC96C96A99} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{881DDC81-A84B-4A25-9499-E1F8B237406D} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{890458A9-1860-404F-971E-AD1EDAFBEC77} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{89069850-46BD-4732-B043-4BF3AF20C14F} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8AA5A956-48AE-44E5-9A2B-E2F4B092080} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8BB25A08-7D81-4684-B56C-7150375CD49F} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8C8BC2D4-7936-4CC7-B245-48B5C21A438B} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8E02B006-8A9E-458E-823E-6B1F41BA8E2} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8FB67397-2712-4599-80BA-6782A0DCEB70} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{908C5D10-53E9-497A-A699-62ACC978EF8F} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{916F630B-F07C-4791-AEED-B2E15A9D2B6} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93EBD763-95B5-4ECE-8542-95ACC5E1FBB} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{948A5C3C-669B-49BC-9AA9-D62638E26AB1} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{971A422E-F1D-422F-92B7-93E75BDC423} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{97AE30EB-7C11-4118-BF77-144979E1DA1F} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{98899BED-5BA-42AE-9AE2-39C594DA47E0} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99B250F2-754F-4D3E-A01E-1A2EDE0B1E9} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9AB2171E-E9D6-4248-879F-2D15AD395D74} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9B835F90-ACE9-4E71-83F3-9E47C05F21FA} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CFC414B-9459-4ED5-B3D4-5C531C98F1} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9D247FD1-38BE-4EEA-AB9F-FBEAB4ADBC78} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9EF4320A-B096-478B-A0E4-40298C53FA6} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A37B8938-A289-425B-9ED8-874381AD89} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A4EE84C3-83CF-4101-A652-4DB20BFD3CE} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A728FE9A-EF3F-4150-8522-18364CF83946} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ADE9A63A-FD15-4F49-A02E-AF523EDF7A} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AEE7EC92-A740-466E-9DE1-F8AC4BC7ABC} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFEFCD0-213B-4180-B484-445E834256A} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B03CF610-90DF-4256-AF21-39F5E2118A5C} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1B79D0E-E350-4894-B914-9495DCB1DB51} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1C164A2-A847-468D-BBE-6E44A16943CC} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B37EC11B-90BA-4766-ABB-F2FD422A50D6} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B3E82D28-DE1E-4AB7-97E4-46C9A144D8B0} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B41E092B-5FAB-42F8-8788-ADA63E5273A1} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B4C08C6A-23F2-4A7B-B4CE-BD587C673D96} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B559C111-184D-4432-A711-29A4EAF9917B} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B5645704-FC6A-47E3-B1DC-648DB5F865CF} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B59CEC68-8D6-4979-ACD4-1CADA5E07397} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B8F3D7E3-E10C-4BC4-B1FA-A9B6FC93D7CE} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B948B4CE-3A6C-4F41-80AA-DA174C4293A} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B9EC482F-68C5-4B91-91FB-6BAF82ABDE2F} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BA35532B-7B09-40F3-B41B-360B874D13F} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BAE159D2-9EAA-40AF-9289-CC673BCB6E93} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB66CAED-DADE-4CF1-A577-80C5C55FDE} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BBD84A5F-6A7-4A3A-AD50-156424D9DE7} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BD37E47F-C0BA-4FD9-B158-2F3F2AE218BD} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BD887142-EC81-41CB-8719-F4CA30B818E} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BE91794-600F-4ACC-9EE1-3E1BB6A061C0} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BEB473DC-7D8A-4A33-80B8-A07F0DCA61} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C0FA85A9-6F09-402C-AB49-35103BD28ABB} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C47CE26F-B8E-4416-8935-8E91F9AA4239} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C54B47C-F977-4531-9749-344F2838E5} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C5CD1D7B-C076-403B-8030-9B64553508A} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CA0D805-F836-4025-B823-F8A3AE93F7BA} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CD53938-995C-4258-B4F9-64BC959A7023} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CED8644D-7084-44DA-A02E-462C7DD3A68} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D27083F8-6CF8-4D84-9FDA-B41D78327BAC} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D37E2F27-E9B1-4F13-A13F-4BB0E4ED5D5F} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D4E7ABE0-A267-4C09-B4A6-CD4D3456FAE} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D4E9217-84C0-44A3-A9D9-3C883199D8A} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D72FE21A-4A8E-4747-ADF5-568325EFA07F} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D883E481-6371-4798-BAC5-FFE389D5C8F9} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D9D9993F-A867-4D73-AFFE-1C712FCAB09D} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB08BA9A-D8D3-4BDE-84B-857EF3D0768A} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DC090F02-3B16-48EB-9A2D-5B2B5DABB751} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD374BFB-9CE5-4D1D-A5B8-DC3631424ED8} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD714927-9B18-4D17-A07A-EFF3553A5CD4} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E03DF37-ADA2-40C1-A1D2-5AE7D2D2A82} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E1E93B99-D013-424B-8072-817F9BCAFC9} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E85E4F9C-EBB5-4E5B-B335-53F49FFDD4E2} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EAA8A2AC-79C7-408A-905E-36BD556520C0} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EE665CD2-5D1C-4569-B6BD-862ABBCB2A3} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EFFC0BFD-C68C-4408-9AF5-53732DD133E} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1D2F20F-341E-4B03-9F28-589DD7283F64} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1D84BE3-97CA-451A-BAB6-F8ED752ED2D5} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F584C7A6-8611-4813-9DF-C131A3AFA25} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F67A3247-38D1-4D9B-B5EE-72DA77E52B95} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F7402FA5-7973-413D-83CD-0DB62F233A4} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F867863-B42-471C-ADFC-B670D38E5B23} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9FA32CD-54F-4515-A321-E95AD646C3BF} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FB4082FD-9573-408C-BFDD-323E2D4CE6A} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FD45CEF8-DADF-4652-B988-A6FB527C1DE5} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FD770D09-4EDE-4815-A828-469D12688ABF} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FDF2BD97-DDC5-4F91-BA53-4A1011AD4E3A} deleted successfully
HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FE64AC2D-A0B9-47B9-8F77-73F76988CBC1} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\at245sol.default\prefs.js:
user_pref("browser.startup.homepage", "https://www.google.com/?trackid=sp-006");
user_pref("browser.search.defaulturl", "https://www.google.com/search/?trackid=sp-006");
user_pref("browser.search.defaultengine", "Google (avast)");
user_pref("browser.search.defaultenginename", "Google (avast)");
user_pref("browser.search.selectedEngine", "Google (avast)");
user_pref("browser.search.order.1", "Google (avast)");
user_pref("keyword.URL", "https://www.google.com/search/?trackid=sp-006");
user_pref("browser.search.useDBForOrder", true);

Added to C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\at245sol.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\at245sol.default

user.js not found
---- Lines Ttessab removed from prefs.js ----
user_pref("extensions.Ttessab.asul", "1420828053895");
user_pref("extensions.Ttessab.aul", "1420828041583");
user_pref("extensions.Ttessab.irl", true);
user_pref("extensions.Ttessab.is", "asp1fncz");
user_pref("extensions.Ttessab.ug", "D67850B6-C79A-44B8-8B77-CC508DB99A62");
---- FireFox user.js and prefs.js backups ----

prefs_01.02.2015_2246_.backup

==== Deleting Files \ Folders ======================

C:\Users\Honza\Downloads\bsplayer267-1076.exe deleted
C:\Windows\system32\GroupPolicy\Machine deleted
C:\Windows\system32\GroupPolicy\User deleted
C:\Windows\system32\GroupPolicy\gpt.ini deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\at245sol.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [30.01.2015 23:29]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\at245sol.default
- Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

AppDir: C:\Program Files\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\at245sol.default
0FC325593893749364EC4A733E7D9100 - C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_296.dll - Shockwave Flash
39309FEDDFA73FAE29EC99A07A55A3E8 - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll - Adobe Acrobat
647670C013AD60DA6F94B6881E6AC9E4 - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll - Adobe Acrobat
D2377C9458EFEB094E38B8C874AA214C - C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll - Google Update
893BF7D2261C56C24F813405D9D018E0 - c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll - Silverlight Plug-In
B6140A0C147234CA38FFB33EA55D3677 - C:\Users\Honza\AppData\Roaming\KB-ext\lib\x86\npPKIComponentNPAPI-kbext.dll - Cryptoplus KB – podepisovací modul
AB87EEFFD18F2BAAFC274E7075EA6C67 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation
8DA2ED6B04EA33F2EAE8BA883F903729 - c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrlui.dll - Microsoft® Silverlight

==== Chromium Look ======================

Google Chrome Version: 40.0.2214.93 (Up to date, latest Stable version: 40.0.2214.93)

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[30.01.2015 23:17]

Avast Online Security - Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Default_Search_URL"="http://www.google.com"
"Search Page"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.seznam.cz/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... urceid=ie7"
{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Unknown Url="Not_Found"
{D6D725B3-9344-4396-A897-A17B25E3325C} Seznam TV Program Url="http://tv.seznam.cz/hledej?w={searchTer ... arch_21882"

==== Reset Google Chrome ======================

C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\Users\Honza\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Honza\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Honza\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\Honza\AppData\Local\Mozilla\Firefox\Profiles\at245sol.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=5 folders=2 781378 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Honza\AppData\Local\Temp will be emptied at reboot
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Honza\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Honza\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted

==== EOF on Łt 03.02.2015 at 8:18:32,76 ======================

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

Zde je další

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-02-2015
Ran by Honza (administrator) on HONZA-PC on 03-02-2015 16:44:38
Running from C:\Users\Honza\Desktop
Loaded Profiles: Honza & UpdatusUser (Available profiles: Honza & UpdatusUser)
Platform: Microsoft® Windows Vista™ Business Service Pack 2 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
(Memeo) C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12017368 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-30] (AVAST Software)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6699800 2015-01-22] (SUPERAntiSpyware)
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\MountPoints2: {b9c0684f-224a-11e4-8186-001d92f7e783} - E:\Startme.exe
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\MountPoints2: {c69405e4-a6ba-11e3-8e3a-001d92f7e783} - "I:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-3177871084-2805199809-1159702625-1003\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk
ShortcutTarget: WDDMStatus.lnk -> C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (WDC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDSmartWare.lnk
ShortcutTarget: WDSmartWare.lnk -> C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe (Western Digital)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3177871084-2805199809-1159702625-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3177871084-2805199809-1159702625-1000 -> {D6D725B3-9344-4396-A897-A17B25E3325C} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_21882
SearchScopes: HKU\S-1-5-21-3177871084-2805199809-1159702625-1003 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Winsock: Catalog5 02 C:\Windows\system32\napinsp.dll [50176] (Společnost Microsoft)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\at245sol.default
FF NewTab: about:newtab
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3177871084-2805199809-1159702625-1000: @kb-ext.cz/PKIComponent -> C:\Users\Honza\AppData\Roaming\KB-ext\lib\x86\npPKIComponentNPAPI-kbext.dll (Komerční banka, a.s.)
FF SearchPlugin: C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\at245sol.default\searchplugins\google-avast.xml
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2015-02-01]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-30]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=14184 ... JDWQ839240
CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=14184 ... JDWQ839240"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-03]
CHR Extension: (Dokumenty Google) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-17]
CHR Extension: (Disk Google) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-17]
CHR Extension: (YouTube) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-17]
CHR Extension: (Vyhledávání Google) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-17]
CHR Extension: (Tabulky Google) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-03]
CHR Extension: (Avast Online Security) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-30]
CHR Extension: (Peněženka Google) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-17]
CHR Extension: (Gmail) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-17]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-01-30]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [142648 2014-07-23] (SUPERAntiSpyware.com)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-01-30] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3192344 2015-01-30] (Avast Software)
R2 WDDMService; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [98304 2009-10-14] (WDC) [File not signed]
R2 WDSmartWareBackgroundService; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [20480 2009-06-16] (Memeo) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2015-01-30] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [73480 2015-01-30] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [55240 2015-01-30] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2015-01-30] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787800 2015-01-30] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423784 2015-01-30] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57928 2015-01-30] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206248 2015-01-30] ()
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [190424 2009-04-11] (Společnost Microsoft)
R3 Ntfs; C:\Windows\system32\Drivers\Ntfs.sys [1082232 2013-03-03] (Společnost Microsoft)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [218192 2015-01-30] (Avast Software)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S1 MpKslc1b103d2; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9CB57A4C-D61E-423F-B41E-596E00EF8666}\MpKslc1b103d2.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-03 16:44 - 2015-02-03 16:44 - 00013147 _____ () C:\Users\Honza\Desktop\FRST.txt
2015-02-03 16:41 - 2015-02-03 16:41 - 01122304 _____ (Farbar) C:\Users\Honza\Desktop\FRST.exe
2015-02-03 16:41 - 2015-02-03 16:41 - 00000000 ____D () C:\Users\Honza\Desktop\FRST-OlderVersion
2015-02-03 08:20 - 2015-02-03 08:20 - 00000197 _____ () C:\Windows\system32\2015-02-03-07-20-31.074-AvastVBoxSVC.exe-3072.log
2015-02-01 22:49 - 2015-02-01 22:21 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-02-01 22:22 - 2015-02-03 08:18 - 00043509 _____ () C:\zoek-results.log
2015-02-01 22:21 - 2015-01-30 23:37 - 01295360 _____ () C:\Users\Honza\Desktop\zoek.exe
2015-02-01 22:20 - 2015-02-01 22:46 - 00000000 ____D () C:\zoek_backup
2015-02-01 22:15 - 2015-02-01 22:15 - 00000197 _____ () C:\Windows\system32\2015-02-01-21-15-15.052-AvastVBoxSVC.exe-3316.log
2015-01-31 11:56 - 2015-01-31 11:56 - 00000197 _____ () C:\Windows\system32\2015-01-31-10-56-23.059-AvastVBoxSVC.exe-3152.log
2015-01-31 11:50 - 2015-01-31 11:50 - 00000197 _____ () C:\Windows\system32\2015-01-31-10-50-53.065-AvastVBoxSVC.exe-3592.log
2015-01-30 23:55 - 2015-01-30 23:55 - 00000247 _____ () C:\Windows\system32\2015-01-30-22-55-09.065-aswFe.exe-228.log
2015-01-30 23:43 - 2015-01-30 23:54 - 00000247 _____ () C:\Windows\system32\2015-01-30-22-43-42.008-aswFe.exe-3444.log
2015-01-30 23:43 - 2015-01-30 23:43 - 00000197 _____ () C:\Windows\system32\2015-01-30-22-43-35.054-AvastVBoxSVC.exe-3212.log
2015-01-30 23:37 - 2015-01-30 23:37 - 01295360 _____ () C:\Users\Honza\Downloads\zoek.exe
2015-01-30 23:35 - 2015-01-30 23:34 - 02194432 _____ () C:\Users\Honza\Desktop\adwcleaner_4.109.exe
2015-01-30 23:34 - 2015-01-30 23:34 - 02194432 _____ () C:\Users\Honza\Downloads\adwcleaner_4.109.exe
2015-01-30 23:29 - 2015-01-30 23:29 - 00151096 _____ () C:\Windows\Minidump\Mini013015-01.dmp
2015-01-30 23:24 - 2015-01-30 23:24 - 00000000 ____D () C:\Windows\system32\vbox
2015-01-30 23:22 - 2015-01-30 23:22 - 00000000 ____D () C:\Users\Honza\AppData\Roaming\AVAST Software
2015-01-30 23:18 - 2015-01-30 23:18 - 00787800 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2015-01-30 23:18 - 2015-01-30 23:18 - 00423784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2015-01-30 23:18 - 2015-01-30 23:18 - 00291352 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-01-30 23:18 - 2015-01-30 23:18 - 00206248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-01-30 23:18 - 2015-01-30 23:18 - 00073480 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2015-01-30 23:18 - 2015-01-30 23:18 - 00057928 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2015-01-30 23:18 - 2015-01-30 23:18 - 00055240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys
2015-01-30 23:18 - 2015-01-30 23:18 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-01-30 23:18 - 2015-01-30 23:18 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-01-30 23:18 - 2015-01-30 23:18 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-01-30 23:18 - 2015-01-30 23:18 - 00001871 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-01-30 23:18 - 2015-01-30 23:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-01-30 23:09 - 2015-01-30 23:09 - 00000000 ____D () C:\Program Files\AVAST Software
2015-01-30 23:08 - 2015-01-30 23:09 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-01-30 23:02 - 2015-01-30 23:02 - 00000000 ____D () C:\rsit
2015-01-30 23:02 - 2015-01-30 23:01 - 00688992 _____ (Swearware) C:\Users\Honza\Desktop\dds.exe
2015-01-30 23:00 - 2015-01-30 23:01 - 00688992 _____ (Swearware) C:\Users\Honza\Downloads\dds.exe
2015-01-30 23:00 - 2015-01-30 23:00 - 01107968 _____ () C:\Users\Honza\Downloads\RSIT (1).exe
2015-01-30 22:59 - 2015-01-30 22:59 - 01121792 _____ (Farbar) C:\Users\Honza\Downloads\FRST (1).exe
2015-01-30 22:56 - 2015-01-30 22:56 - 05006864 _____ (AVAST Software) C:\Users\Honza\Downloads\avast_free_antivirus_setup_online.exe
2015-01-30 22:48 - 2015-01-30 22:48 - 00001800 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2015-01-30 22:48 - 2015-01-30 22:48 - 00000000 ____D () C:\Users\Honza\AppData\Roaming\SUPERAntiSpyware.com
2015-01-30 22:48 - 2015-01-30 22:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2015-01-30 22:47 - 2015-02-03 16:19 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2015-01-30 22:47 - 2015-01-30 22:47 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2015-01-30 22:46 - 2015-01-30 22:47 - 21138032 _____ (SUPERAntiSpyware) C:\Users\Honza\Downloads\SUPERAntiSpyware.exe
2015-01-28 21:30 - 2015-01-28 21:30 - 00000288 _____ () C:\Users\Honza\Documents\cc_20150128_213011.reg
2015-01-28 21:21 - 2015-01-28 21:21 - 00000000 ____D () C:\Hard Disk Sentinel Pro v4.40.6431 CZ - multilanguage (x86,x64) Portable
2015-01-28 21:18 - 2015-01-28 21:18 - 00000000 ____D () C:\Users\Honza\Desktop\Hard Disk Sentinel Pro v4.40.6431 CZ - multilanguage (x86,x64) Portable
2015-01-28 20:03 - 2015-01-28 21:18 - 00000888 _____ () C:\Windows\setupact.log
2015-01-28 20:03 - 2015-01-28 20:03 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-27 18:31 - 2015-01-27 18:31 - 00139768 _____ () C:\Windows\Minidump\Mini012715-01.dmp
2015-01-18 14:10 - 2015-01-30 23:29 - 343802014 _____ () C:\Windows\MEMORY.DMP
2015-01-18 14:10 - 2015-01-18 14:10 - 00152216 _____ () C:\Windows\Minidump\Mini011815-01.dmp
2015-01-18 13:29 - 2015-02-03 08:18 - 00002294 _____ () C:\Windows\PFRO.log
2015-01-18 12:37 - 2015-01-18 12:37 - 05317104 _____ (Piriform Ltd) C:\Users\Honza\Downloads\ccsetup501.exe
2015-01-14 19:22 - 2014-12-19 01:25 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 19:18 - 2014-12-06 04:14 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 19:18 - 2014-12-06 04:14 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-01-14 19:18 - 2014-12-06 04:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2015-01-14 19:17 - 2014-12-06 04:14 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-11 13:36 - 2015-01-11 13:36 - 00000000 ____D () C:\Users\Honza\Documents\Nová složka (2)
2015-01-11 13:36 - 2015-01-11 13:36 - 00000000 ____D () C:\Users\Honza\Documents\Nová složka
2015-01-09 12:28 - 2015-01-11 14:44 - 00000000 ____D () C:\Users\Honza\AppData\Roaming\Seznam.cz
2015-01-09 12:28 - 2015-01-09 12:28 - 00000000 ____D () C:\Users\Honza\AppData\Roaming\PHILIPS RQ 1150 user guide

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-03 16:44 - 2014-11-28 19:51 - 00000000 ____D () C:\FRST
2015-02-03 16:27 - 2008-01-21 02:39 - 02009958 _____ () C:\Windows\WindowsUpdate.log
2015-02-03 16:18 - 2006-11-02 13:47 - 00004096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-03 16:18 - 2006-11-02 13:47 - 00004096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-03 16:02 - 2014-01-12 00:12 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-03 08:18 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-03 08:16 - 2006-11-02 14:01 - 00032550 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-02 00:03 - 2014-01-12 23:26 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-02-01 22:56 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-02-01 22:46 - 2006-11-02 12:18 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-02-01 22:06 - 2014-11-29 20:32 - 00000000 ____D () C:\AdwCleaner
2015-01-31 12:00 - 2008-01-21 07:02 - 00006566 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-30 23:29 - 2014-07-25 15:50 - 00000000 ____D () C:\Windows\Minidump
2015-01-30 23:25 - 2014-01-12 00:06 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-01-30 23:25 - 2014-01-11 23:59 - 00000834 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-30 23:25 - 2014-01-11 23:59 - 00000834 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-30 23:02 - 2014-11-28 20:01 - 00000000 ____D () C:\Program Files\trend micro
2015-01-30 23:00 - 2014-11-30 12:06 - 01107968 _____ () C:\Users\Honza\Desktop\RSIT (1).exe
2015-01-27 17:48 - 2014-01-17 17:50 - 00001971 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-01-25 19:02 - 2014-01-12 00:12 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-01-25 19:02 - 2014-01-12 00:12 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-01-18 12:38 - 2014-08-09 13:54 - 00000804 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-01-18 12:37 - 2014-08-09 13:54 - 00000000 ____D () C:\Program Files\CCleaner
2015-01-18 12:30 - 2014-12-13 13:56 - 00000000 ____D () C:\Program Files\SpeedFan
2015-01-18 12:29 - 2014-01-12 00:18 - 00000000 ____D () C:\Program Files\Adobe
2015-01-18 12:28 - 2014-01-11 20:28 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-01-14 19:22 - 2014-01-11 22:42 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 19:18 - 2006-11-02 11:24 - 110348472 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2015-01-12 19:54 - 2014-01-11 19:23 - 00000000 ____D () C:\Users\Honza\AppData\Local\VirtualStore
2015-01-11 14:34 - 2006-11-02 11:23 - 00000246 _____ () C:\Windows\win.ini
2015-01-11 13:39 - 2014-09-08 21:37 - 00000000 ____D () C:\Users\Honza\Desktop\100ANDRO

==================== Files in the root of some directories =======

2014-01-11 19:23 - 2014-01-13 07:46 - 0000680 _____ () C:\Users\Honza\AppData\Local\d3d9caps.dat
2014-01-13 17:37 - 2014-01-13 17:37 - 0004608 _____ () C:\Users\Honza\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-11 22:53 - 2014-01-11 22:53 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-02-03 08:24

==================== End Of Log ============================

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6699800 2015-01-22] (SUPERAntiSpyware)
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\MountPoints2: {b9c0684f-224a-11e4-8186-001d92f7e783} - E:\Startme.exe
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\MountPoints2: {c69405e4-a6ba-11e3-8e3a-001d92f7e783} - "I:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-3177871084-2805199809-1159702625-1003\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3177871084-2805199809-1159702625-1003 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&t ... JDWQ839240
CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=1418465397&from=sien&uid=SAMSUNGXHD753LJ_S13UJDWQ839240"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S1 MpKslc1b103d2; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9CB57A4C-D61E-423F-B41E-596E00EF8666}\MpKslc1b103d2.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

2015-02-03 16:44 - 2015-02-03 16:44 - 00013147 _____ () C:\Users\Honza\Desktop\FRST.txt
2015-02-03 16:41 - 2015-02-03 16:41 - 00000000 ____D () C:\Users\Honza\Desktop\FRST-OlderVersion
2015-02-03 08:20 - 2015-02-03 08:20 - 00000197 _____ () C:\Windows\system32\2015-02-03-07-20-31.074-AvastVBoxSVC.exe-3072.log
2015-02-01 22:49 - 2015-02-01 22:21 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-02-01 22:22 - 2015-02-03 08:18 - 00043509 _____ () C:\zoek-results.log
2015-02-01 22:21 - 2015-01-30 23:37 - 01295360 _____ () C:\Users\Honza\Desktop\zoek.exe
2015-02-01 22:20 - 2015-02-01 22:46 - 00000000 ____D () C:\zoek_backup
2015-02-01 22:15 - 2015-02-01 22:15 - 00000197 _____ () C:\Windows\system32\2015-02-01-21-15-15.052-AvastVBoxSVC.exe-3316.log
2015-01-31 11:56 - 2015-01-31 11:56 - 00000197 _____ () C:\Windows\system32\2015-01-31-10-56-23.059-AvastVBoxSVC.exe-3152.log
2015-01-31 11:50 - 2015-01-31 11:50 - 00000197 _____ () C:\Windows\system32\2015-01-31-10-50-53.065-AvastVBoxSVC.exe-3592.log
2015-01-30 23:55 - 2015-01-30 23:55 - 00000247 _____ () C:\Windows\system32\2015-01-30-22-55-09.065-aswFe.exe-228.log
2015-01-30 23:43 - 2015-01-30 23:54 - 00000247 _____ () C:\Windows\system32\2015-01-30-22-43-42.008-aswFe.exe-3444.log
2015-01-30 23:43 - 2015-01-30 23:43 - 00000197 _____ () C:\Windows\system32\2015-01-30-22-43-35.054-AvastVBoxSVC.exe-3212.log
2015-01-30 23:37 - 2015-01-30 23:37 - 01295360 _____ () C:\Users\Honza\Downloads\zoek.exe
2015-01-30 23:35 - 2015-01-30 23:34 - 02194432 _____ () C:\Users\Honza\Desktop\adwcleaner_4.109.exe
2015-01-30 23:34 - 2015-01-30 23:34 - 02194432 _____ () C:\Users\Honza\Downloads\adwcleaner_4.109.exe
2015-01-30 23:02 - 2015-01-30 23:02 - 00000000 ____D () C:\rsit
2015-01-30 23:02 - 2015-01-30 23:01 - 00688992 _____ (Swearware) C:\Users\Honza\Desktop\dds.exe
2015-01-30 23:00 - 2015-01-30 23:01 - 00688992 _____ (Swearware) C:\Users\Honza\Downloads\dds.exe
2015-01-30 23:00 - 2015-01-30 23:00 - 01107968 _____ () C:\Users\Honza\Downloads\RSIT (1).exe
2015-01-30 22:59 - 2015-01-30 22:59 - 01121792 _____ (Farbar) C:\Users\Honza\Downloads\FRST (1).exe
2015-01-30 22:56 - 2015-01-30 22:56 - 05006864 _____ (AVAST Software) C:\Users\Honza\Downloads\avast_free_antivirus_setup_online.exe
2015-01-30 22:46 - 2015-01-30 22:47 - 21138032 _____ (SUPERAntiSpyware) C:\Users\Honza\Downloads\SUPERAntiSpyware.exe

Hosts:
EmptyTemp:
Reboot:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 08-02-2015
Ran by Honza at 2015-02-08 21:10:56 Run:1
Running from C:\Users\Honza\Desktop
Loaded Profiles: Honza & UpdatusUser (Available profiles: Honza & UpdatusUser)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6699800 2015-01-22] (SUPERAntiSpyware)
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\MountPoints2: {b9c0684f-224a-11e4-8186-001d92f7e783} - E:\Startme.exe
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\MountPoints2: {c69405e4-a6ba-11e3-8e3a-001d92f7e783} - "I:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-3177871084-2805199809-1159702625-1003\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3177871084-2805199809-1159702625-1003 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&t ... JDWQ839240
CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=14184 ... JDWQ839240"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S1 MpKslc1b103d2; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9CB57A4C-D61E-423F-B41E-596E00EF8666}\MpKslc1b103d2.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

2015-02-03 16:44 - 2015-02-03 16:44 - 00013147 _____ () C:\Users\Honza\Desktop\FRST.txt
2015-02-03 16:41 - 2015-02-03 16:41 - 00000000 ____D () C:\Users\Honza\Desktop\FRST-OlderVersion
2015-02-03 08:20 - 2015-02-03 08:20 - 00000197 _____ () C:\Windows\system32\2015-02-03-07-20-31.074-AvastVBoxSVC.exe-3072.log
2015-02-01 22:49 - 2015-02-01 22:21 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-02-01 22:22 - 2015-02-03 08:18 - 00043509 _____ () C:\zoek-results.log
2015-02-01 22:21 - 2015-01-30 23:37 - 01295360 _____ () C:\Users\Honza\Desktop\zoek.exe
2015-02-01 22:20 - 2015-02-01 22:46 - 00000000 ____D () C:\zoek_backup
2015-02-01 22:15 - 2015-02-01 22:15 - 00000197 _____ () C:\Windows\system32\2015-02-01-21-15-15.052-AvastVBoxSVC.exe-3316.log
2015-01-31 11:56 - 2015-01-31 11:56 - 00000197 _____ () C:\Windows\system32\2015-01-31-10-56-23.059-AvastVBoxSVC.exe-3152.log
2015-01-31 11:50 - 2015-01-31 11:50 - 00000197 _____ () C:\Windows\system32\2015-01-31-10-50-53.065-AvastVBoxSVC.exe-3592.log
2015-01-30 23:55 - 2015-01-30 23:55 - 00000247 _____ () C:\Windows\system32\2015-01-30-22-55-09.065-aswFe.exe-228.log
2015-01-30 23:43 - 2015-01-30 23:54 - 00000247 _____ () C:\Windows\system32\2015-01-30-22-43-42.008-aswFe.exe-3444.log
2015-01-30 23:43 - 2015-01-30 23:43 - 00000197 _____ () C:\Windows\system32\2015-01-30-22-43-35.054-AvastVBoxSVC.exe-3212.log
2015-01-30 23:37 - 2015-01-30 23:37 - 01295360 _____ () C:\Users\Honza\Downloads\zoek.exe
2015-01-30 23:35 - 2015-01-30 23:34 - 02194432 _____ () C:\Users\Honza\Desktop\adwcleaner_4.109.exe
2015-01-30 23:34 - 2015-01-30 23:34 - 02194432 _____ () C:\Users\Honza\Downloads\adwcleaner_4.109.exe
2015-01-30 23:02 - 2015-01-30 23:02 - 00000000 ____D () C:\rsit
2015-01-30 23:02 - 2015-01-30 23:01 - 00688992 _____ (Swearware) C:\Users\Honza\Desktop\dds.exe
2015-01-30 23:00 - 2015-01-30 23:01 - 00688992 _____ (Swearware) C:\Users\Honza\Downloads\dds.exe
2015-01-30 23:00 - 2015-01-30 23:00 - 01107968 _____ () C:\Users\Honza\Downloads\RSIT (1).exe
2015-01-30 22:59 - 2015-01-30 22:59 - 01121792 _____ (Farbar) C:\Users\Honza\Downloads\FRST (1).exe
2015-01-30 22:56 - 2015-01-30 22:56 - 05006864 _____ (AVAST Software) C:\Users\Honza\Downloads\avast_free_antivirus_setup_online.exe
2015-01-30 22:46 - 2015-01-30 22:47 - 21138032 _____ (SUPERAntiSpyware) C:\Users\Honza\Downloads\SUPERAntiSpyware.exe

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run\\WindowsWelcomeCenter => value deleted successfully.
HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run\\WindowsWelcomeCenter => value deleted successfully.
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Windows\CurrentVersion\Run\\WMPNSCFG => value deleted successfully.
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => Value not found.
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Windows\CurrentVersion\Run\\SUPERAntiSpyware => Value not found.
"HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b9c0684f-224a-11e4-8186-001d92f7e783}" => Key deleted successfully.
HKCR\CLSID\{b9c0684f-224a-11e4-8186-001d92f7e783} => Key not found.
"HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c69405e4-a6ba-11e3-8e3a-001d92f7e783}" => Key deleted successfully.
HKCR\CLSID\{c69405e4-a6ba-11e3-8e3a-001d92f7e783} => Key not found.
HKU\S-1-5-21-3177871084-2805199809-1159702625-1003\Software\Microsoft\Windows\CurrentVersion\Run\\WindowsWelcomeCenter => Value not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found.
HKU\S-1-5-21-3177871084-2805199809-1159702625-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found.
Chrome HomePage deleted successfully.
Chrome StartupUrls deleted successfully.
Chrome DefaultSuggestURL deleted successfully.
IpInIp => Service deleted successfully.
MpKslc1b103d2 => Service not found.
NwlnkFlt => Service deleted successfully.
NwlnkFwd => Service deleted successfully.
C:\Users\Honza\Desktop\FRST.txt => Moved successfully.
"C:\Users\Honza\Desktop\FRST-OlderVersion" => File/Directory not found.
C:\Windows\system32\2015-02-03-07-20-31.074-AvastVBoxSVC.exe-3072.log => Moved successfully.
"C:\Windows\zoek-delete.exe" => File/Directory not found.
C:\zoek-results.log => Moved successfully.
"C:\Users\Honza\Desktop\zoek.exe" => File/Directory not found.
C:\zoek_backup => Moved successfully.
C:\Windows\system32\2015-02-01-21-15-15.052-AvastVBoxSVC.exe-3316.log => Moved successfully.
C:\Windows\system32\2015-01-31-10-56-23.059-AvastVBoxSVC.exe-3152.log => Moved successfully.
C:\Windows\system32\2015-01-31-10-50-53.065-AvastVBoxSVC.exe-3592.log => Moved successfully.
C:\Windows\system32\2015-01-30-22-55-09.065-aswFe.exe-228.log => Moved successfully.
C:\Windows\system32\2015-01-30-22-43-42.008-aswFe.exe-3444.log => Moved successfully.
C:\Windows\system32\2015-01-30-22-43-35.054-AvastVBoxSVC.exe-3212.log => Moved successfully.
"C:\Users\Honza\Downloads\zoek.exe" => File/Directory not found.
"C:\Users\Honza\Desktop\adwcleaner_4.109.exe" => File/Directory not found.
"C:\Users\Honza\Downloads\adwcleaner_4.109.exe" => File/Directory not found.
C:\rsit => Moved successfully.
"C:\Users\Honza\Desktop\dds.exe" => File/Directory not found.
"C:\Users\Honza\Downloads\dds.exe" => File/Directory not found.
"C:\Users\Honza\Downloads\RSIT (1).exe" => File/Directory not found.
"C:\Users\Honza\Downloads\FRST (1).exe" => File/Directory not found.
C:\Users\Honza\Downloads\avast_free_antivirus_setup_online.exe => Moved successfully.
"C:\Users\Honza\Downloads\SUPERAntiSpyware.exe" => File/Directory not found.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 311.6 MB temporary data.

The system needed a reboot.

==== End of Fixlog 21:16:40 ====

Já se omlouvám, v záchvatu přehnané aktivity jsem zkoušel ještě bod obnovení z doby než to začalo.
Nevím zda jsem tím Vaši práci nenarušil

Bod obnovení jsem provedl před tímto posledním logem.

Bodem obnovy jste vse co jsme udelali poslal do kytek

Dejte novy log z FRST a mrknem na to

Sem blbec :-/ Omlouvám se.

Zde je nový

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-02-2015
Ran by Honza (administrator) on HONZA-PC on 10-02-2015 20:55:47
Running from C:\Users\Honza\Desktop
Loaded Profiles: Honza & UpdatusUser (Available profiles: Honza & UpdatusUser)
Platform: Microsoft® Windows Vista™ Business Service Pack 2 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
(Memeo) C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Sony) C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Western Digital) C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe
() C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12017368 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-02-08] (AVAST Software)
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\Run: [Sony PC Companion] => C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [466144 2014-11-27] (Sony)
HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\MountPoints2: {3b7e56c7-7aec-11e3-b90e-806e6f6e6963} - D:\setup.exe
HKU\S-1-5-21-3177871084-2805199809-1159702625-1003\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk
ShortcutTarget: WDDMStatus.lnk -> C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (WDC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDSmartWare.lnk
ShortcutTarget: WDSmartWare.lnk -> C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe (Western Digital)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
SearchScopes: HKU\S-1-5-21-3177871084-2805199809-1159702625-1000 -> {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL =
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKU\S-1-5-21-3177871084-2805199809-1159702625-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Winsock: Catalog5 02 C:\Windows\system32\napinsp.dll [50176] (Společnost Microsoft)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\at245sol.default
FF DefaultSearchEngine: BS Player ControlBar B Customized Web Search
FF SelectedSearchEngine: BS Player ControlBar B Customized Web Search
FF Homepage: google.cz
FF Keyword.URL: hxxp://trovi.com/ResultsExt.aspx?ctid=CT3329621&SearchSource=2&CUI=UN17402959512515227&UM=4&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3177871084-2805199809-1159702625-1000: @kb-ext.cz/PKIComponent -> C:\Users\Honza\AppData\Roaming\KB-ext\lib\x86\npPKIComponentNPAPI-kbext.dll (Komerční banka, a.s.)
FF SearchPlugin: C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\at245sol.default\searchplugins\google-avast.xml
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-01-11]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-30]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]

Chrome:
=======
CHR Profile: C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-03]
CHR Extension: (Dokumenty Google) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-17]
CHR Extension: (Disk Google) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-17]
CHR Extension: (YouTube) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-17]
CHR Extension: (Vyhledávání Google) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-17]
CHR Extension: (Tabulky Google) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-03]
CHR Extension: (Avast Online Security) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-02-09]
CHR Extension: (Peněženka Google) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-17]
CHR Extension: (Gmail) - C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-17]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-01-30]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-02-08] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3192344 2015-02-08] (Avast Software)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
R2 WDDMService; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [98304 2009-10-14] (WDC) [File not signed]
R2 WDSmartWareBackgroundService; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [20480 2009-06-16] (Memeo) [File not signed]
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2015-02-08] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [73480 2015-02-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [55240 2015-02-08] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2015-02-08] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787800 2015-02-08] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423784 2015-02-08] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57928 2015-02-08] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206248 2015-02-08] ()
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [190424 2009-04-11] (Společnost Microsoft)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
R3 Ntfs; C:\Windows\system32\Drivers\Ntfs.sys [1082232 2013-03-03] (Společnost Microsoft)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [218192 2015-02-08] (Avast Software)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-10 20:55 - 2015-02-10 20:56 - 00011346 _____ () C:\Users\Honza\Desktop\FRST.txt
2015-02-10 20:55 - 2015-02-10 20:55 - 43874761 _____ () C:\Users\Honza\Downloads\Nepotvrzeno 756267.crdownload
2015-02-09 04:15 - 2015-02-09 04:15 - 00000247 _____ () C:\Windows\system32\2015-02-09-03-15-29.044-aswFe.exe-456.log
2015-02-09 04:06 - 2015-02-09 04:15 - 00000247 _____ () C:\Windows\system32\2015-02-09-03-06-11.013-aswFe.exe-4676.log
2015-02-09 04:06 - 2015-02-09 04:06 - 00000197 _____ () C:\Windows\system32\2015-02-09-03-06-04.091-AvastVBoxSVC.exe-2972.log
2015-02-09 03:59 - 2015-02-09 03:59 - 00000247 _____ () C:\Windows\system32\2015-02-09-02-59-30.039-aswFe.exe-4284.log
2015-02-09 03:59 - 2015-02-09 03:59 - 00000197 _____ () C:\Windows\system32\2015-02-09-02-59-13.066-AvastVBoxSVC.exe-4948.log
2015-02-09 03:25 - 2015-02-09 03:26 - 05006864 _____ (AVAST Software) C:\Users\Honza\Downloads\avast_free_antivirus_setup_online (1).exe
2015-02-08 23:56 - 2015-02-08 23:56 - 00000247 _____ () C:\Windows\system32\2015-02-08-22-56-15.013-aswFe.exe-3892.log
2015-02-08 23:39 - 2015-02-08 23:56 - 00000247 _____ () C:\Windows\system32\2015-02-08-22-39-41.046-aswFe.exe-3904.log
2015-02-08 23:39 - 2015-02-08 23:39 - 00000197 _____ () C:\Windows\system32\2015-02-08-22-39-29.001-AvastVBoxSVC.exe-2136.log
2015-02-08 22:26 - 2014-11-07 02:33 - 00974848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-08 22:03 - 2015-02-08 22:03 - 00000000 ____D () C:\Windows\system32\vbox
2015-02-08 22:02 - 2015-02-08 22:02 - 00001871 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-02-08 22:02 - 2015-02-08 22:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-02-08 22:01 - 2015-02-08 22:02 - 00787800 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2015-02-08 22:01 - 2015-02-08 22:02 - 00423784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2015-02-08 22:01 - 2015-02-08 22:02 - 00073480 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2015-02-08 22:01 - 2015-02-08 22:01 - 00291352 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-02-08 22:01 - 2015-02-08 22:01 - 00206248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-02-08 22:01 - 2015-02-08 22:01 - 00057928 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2015-02-08 22:01 - 2015-02-08 22:01 - 00055240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys
2015-02-08 22:01 - 2015-02-08 22:01 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-02-08 22:01 - 2015-02-08 22:01 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-02-08 22:01 - 2015-02-08 22:01 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-02-08 21:58 - 2014-12-06 04:14 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-02-08 21:58 - 2014-12-03 03:06 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-08 21:54 - 2015-02-08 21:54 - 05006864 _____ (AVAST Software) C:\Users\Honza\Downloads\avast_free_antivirus_setup_online.exe
2015-02-08 21:14 - 2014-11-24 21:44 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-02-08 21:14 - 2014-11-24 21:41 - 12369920 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-08 21:14 - 2014-11-24 21:40 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-08 21:14 - 2014-11-24 21:37 - 09740800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-08 21:14 - 2014-11-24 21:35 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-08 21:14 - 2014-11-24 21:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-08 21:14 - 2014-11-24 21:34 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-08 21:14 - 2014-11-24 21:34 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-02-08 21:14 - 2014-11-24 21:33 - 01802752 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-08 21:14 - 2014-11-24 21:33 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-02-08 21:14 - 2014-11-24 21:33 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-08 21:14 - 2014-11-24 21:33 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-08 21:14 - 2014-11-24 21:33 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-08 21:14 - 2014-11-24 21:33 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-08 21:14 - 2014-11-24 21:33 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-02-08 21:14 - 2014-11-24 21:32 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-08 21:14 - 2014-11-24 21:32 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-08 21:14 - 2014-11-24 21:32 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-08 21:14 - 2014-11-24 21:32 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-08 21:14 - 2014-11-24 21:32 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-08 21:14 - 2014-11-24 21:32 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-02-08 21:14 - 2014-11-24 21:32 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-02-08 21:08 - 2015-02-08 21:08 - 01124352 _____ (Farbar) C:\Users\Honza\Downloads\FRST.exe
2015-02-08 21:08 - 2015-02-08 21:08 - 01124352 _____ (Farbar) C:\Users\Honza\Desktop\FRST.exe
2015-02-08 21:02 - 2014-12-19 01:25 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-02-08 21:01 - 2014-11-04 01:19 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-02-08 21:00 - 2014-12-06 04:14 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-02-08 21:00 - 2014-12-06 04:14 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-02-08 21:00 - 2014-12-06 04:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2015-02-06 16:47 - 2015-02-08 21:03 - 00126692 _____ () C:\Windows\DpInst.log
2015-02-06 16:45 - 2015-02-06 16:45 - 00000000 ____D () C:\ProgramData\Sony
2015-02-06 16:43 - 2015-02-06 16:43 - 00151048 _____ () C:\Windows\Minidump\Mini020615-01.dmp
2015-02-06 08:08 - 2015-02-06 08:08 - 00000197 _____ () C:\Windows\system32\2015-02-06-07-08-34.060-AvastVBoxSVC.exe-2536.log
2015-02-03 16:49 - 2015-02-03 16:49 - 00005741 _____ () C:\Users\Honza\Desktop\Addition.rar
2015-02-03 16:45 - 2015-02-03 16:45 - 00020172 _____ () C:\Users\Honza\Desktop\Addition.txt
2015-02-01 22:49 - 2015-02-06 08:07 - 00000000 ____D () C:\Users\Honza\AppData\Local\Temp(130)
2015-01-30 23:22 - 2015-01-30 23:22 - 00000000 ____D () C:\Users\Honza\AppData\Roaming\AVAST Software
2015-01-30 23:09 - 2015-01-30 23:09 - 00000000 ____D () C:\Program Files\AVAST Software
2015-01-30 23:08 - 2015-01-30 23:09 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-01-30 22:48 - 2015-01-30 22:48 - 00000000 ____D () C:\Users\Honza\AppData\Roaming\SUPERAntiSpyware.com
2015-01-30 22:47 - 2015-02-06 08:07 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2015-01-30 22:47 - 2015-01-30 22:47 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2015-01-28 21:21 - 2015-01-28 21:21 - 00000000 ____D () C:\Hard Disk Sentinel Pro v4.40.6431 CZ - multilanguage (x86,x64) Portable
2015-01-28 21:18 - 2015-01-28 21:18 - 00000000 ____D () C:\Users\Honza\Desktop\Hard Disk Sentinel Pro v4.40.6431 CZ - multilanguage (x86,x64) Portable
2015-01-28 20:03 - 2015-01-28 21:18 - 00000888 _____ () C:\Windows\setupact.log
2015-01-28 20:03 - 2015-01-28 20:03 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-18 13:29 - 2015-02-09 03:24 - 00005248 _____ () C:\Windows\PFRO.log
2015-01-11 13:36 - 2015-01-11 13:36 - 00000000 ____D () C:\Users\Honza\Documents\Nová složka (2)
2015-01-11 13:36 - 2015-01-11 13:36 - 00000000 ____D () C:\Users\Honza\Documents\Nová složka

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-10 20:55 - 2014-11-28 19:51 - 00000000 ____D () C:\FRST
2015-02-10 20:42 - 2014-01-17 17:50 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-10 20:03 - 2006-11-02 13:47 - 00004096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-10 20:03 - 2006-11-02 13:47 - 00004096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-10 20:02 - 2014-01-12 00:12 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-10 19:55 - 2008-01-21 02:39 - 01585065 _____ () C:\Windows\WindowsUpdate.log
2015-02-09 21:43 - 2014-01-17 17:50 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-09 04:09 - 2008-01-21 07:02 - 01531382 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-09 04:03 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-09 03:23 - 2006-11-02 14:01 - 00032594 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-09 03:06 - 2014-01-11 22:42 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-09 03:01 - 2014-01-12 11:51 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-08 23:06 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\rescache
2015-02-08 23:03 - 2014-01-12 00:12 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-02-08 23:03 - 2014-01-12 00:12 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-02-08 22:37 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-02-08 22:06 - 2014-01-12 00:06 - 00002086 _____ () C:\Windows\epplauncher.mif
2015-02-08 21:05 - 2014-01-17 17:50 - 00001971 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-06 16:59 - 2014-01-17 17:50 - 00000000 ____D () C:\Program Files\Google
2015-02-06 16:55 - 2014-01-17 17:50 - 00000000 ____D () C:\Users\Honza\AppData\Local\Google
2015-02-06 16:55 - 2014-01-17 17:50 - 00000000 ____D () C:\ProgramData\Google
2015-02-06 16:50 - 2014-01-12 00:18 - 00002425 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-02-06 16:47 - 2014-08-12 19:58 - 00001879 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2015-02-06 16:47 - 2014-08-12 19:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-02-06 16:47 - 2014-01-11 20:28 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-02-06 16:45 - 2014-01-11 19:23 - 00075728 _____ () C:\Users\Honza\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-06 16:43 - 2014-11-20 19:50 - 214331502 _____ () C:\Windows\MEMORY.DMP
2015-02-06 16:43 - 2014-07-25 15:50 - 00000000 ____D () C:\Windows\Minidump
2015-02-06 16:36 - 2014-09-06 14:39 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-02-06 16:36 - 2014-08-09 13:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-02-06 16:36 - 2014-08-09 13:54 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-06 16:36 - 2014-03-19 09:11 - 00000000 ____D () C:\Users\Honza\AppData\Roaming\.RTS
2015-02-06 16:36 - 2014-01-17 17:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-06 16:36 - 2014-01-12 00:05 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-02-06 16:36 - 2014-01-11 23:59 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-02-06 16:36 - 2014-01-11 19:23 - 00000000 ____D () C:\Users\Honza
2015-02-06 16:36 - 2006-11-02 12:18 - 00000000 __RSD () C:\Windows\Media
2015-02-06 16:36 - 2006-11-02 12:18 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-02-06 16:36 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\spool
2015-02-06 16:36 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\Msdtc
2015-02-06 16:36 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\registration
2015-02-06 16:36 - 2006-11-02 11:22 - 38797312 _____ () C:\Windows\system32\config\software_previous
2015-02-06 16:36 - 2006-11-02 11:22 - 24117248 _____ () C:\Windows\system32\config\system_previous
2015-02-06 16:34 - 2014-10-02 18:19 - 00000000 ____D () C:\Users\Honza\AppData\Local\Tbccint
2015-02-06 16:32 - 2014-10-02 18:19 - 00000000 ____D () C:\ProgramData\Tbccint
2015-02-06 16:31 - 2014-08-12 19:58 - 00000000 ____D () C:\Program Files\Sony
2015-02-06 16:20 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\LogFiles
2015-02-06 16:15 - 2006-11-02 11:22 - 00262144 _____ () C:\Windows\system32\config\sam_previous
2015-02-06 08:07 - 2006-11-02 11:22 - 43778048 _____ () C:\Windows\system32\config\components_previous
2015-02-06 08:07 - 2006-11-02 11:22 - 00262144 _____ () C:\Windows\system32\config\security_previous
2015-02-06 08:07 - 2006-11-02 11:22 - 00262144 _____ () C:\Windows\system32\config\default_previous
2015-02-01 22:06 - 2014-11-29 20:32 - 00000000 ____D () C:\AdwCleaner
2015-01-30 23:02 - 2014-11-28 20:01 - 00000000 ____D () C:\Program Files\trend micro
2015-01-18 12:29 - 2014-01-12 00:18 - 00000000 ____D () C:\Program Files\Adobe
2015-01-12 19:54 - 2014-01-11 19:23 - 00000000 ____D () C:\Users\Honza\AppData\Local\VirtualStore
2015-01-11 14:44 - 2015-01-09 12:28 - 00000000 ____D () C:\Users\Honza\AppData\Roaming\Seznam.cz
2015-01-11 13:39 - 2014-09-08 21:37 - 00000000 ____D () C:\Users\Honza\Desktop\100ANDRO

==================== Files in the root of some directories =======

2014-01-11 19:23 - 2014-01-13 07:46 - 0000680 _____ () C:\Users\Honza\AppData\Local\d3d9caps.dat
2014-01-13 17:37 - 2014-01-13 17:37 - 0004608 _____ () C:\Users\Honza\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-11 22:53 - 2014-01-11 22:53 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-02-10 16:17

==================== End Of Log ============================

Addition mi nelze vložit k příspěvku. Píše nepovolený formát *.txt
Předtím to prolezlo, a teď už ne. Mohu vložit jako obyčejný log ?

Dejte to jako text prispevku

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 08-02-2015
Ran by Honza at 2015-02-10 20:56:25
Running from C:\Users\Honza\Desktop
Boot Mode: Normal
==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (Version: - Microsoft) Hidden
Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) - Czech (HKLM\...\{AC76BA86-7AD7-1029-7B44-AA1000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Aktualizace NVIDIA 1.12.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.12.12 - NVIDIA Corporation)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Avast Free Antivirus (HKLM\...\Avast) (Version: 10.0.2208 - AVAST Software)
BS.Player FREE (HKLM\...\BSPlayerf) (Version: 2.67.1076 - AB Team, d.o.o.)
CCleaner (HKLM\...\CCleaner) (Version: 4.16 - Piriform)
Ekonomický systém Money S3 (HKLM\...\Money S3) (Version: 14.051 (20131218_08) - CÍGLER SOFTWARE, a.s.)
Google Chrome (HKLM\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden
K-Lite Codec Pack 10.2.0 Basic (HKLM\...\KLiteCodecPack_is1) (Version: 10.2.0 - )
Microsoft .NET Framework 3.5 SP1 – jazyková sada – CSY (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - csy) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Mozilla Firefox 31.0 (x86 cs) (HKLM\...\Mozilla Firefox 31.0 (x86 cs)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla)
MSXML 4.0 SP2 (KB927978) (HKLM\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\...\MyFreeCodec) (Version: - )
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.11.9621 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.23.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.23.1 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 314.22 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 314.22 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
Ovládací panel NVIDIA 314.22 (Version: 314.22 - NVIDIA Corporation) Hidden
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 6.252.1109.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7111 - Realtek Semiconductor Corp.)
Samsung Kies3 (HKLM\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14013.45 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (Version: 3.2.14013.45 - Samsung Electronics Co., Ltd.) Hidden
Sony PC Companion 2.10.245 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.245 - Sony)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
WD SmartWare (HKLM\...\{CD0DC280-2489-4464-A2FC-16104676394A}) (Version: 1.1.1.6 - Western Digital)
WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3177871084-2805199809-1159702625-1000_Classes\CLSID\{1BBF13E0-551E-42DD-91F4-1A547443FFDA}\InprocServer32 -> C:\Users\Honza\AppData\Local\Tbccint\Community Alerts\Alert.dll (ClientConnect Ltd.)
CustomCLSID: HKU\S-1-5-21-3177871084-2805199809-1159702625-1000_Classes\CLSID\{be328dbe-9f5b-407f-BAFF-827fc6db1aa4}\InprocServer32 -> C:\Users\Honza\AppData\Roaming\KB-ext\lib\x86\PKIComponentAX-kbext.dll (Komerční banka, a.s.)

==================== Restore Points =========================

20-11-2014 18:41:05 Windows Update
21-11-2014 16:59:38 Naplánovaný kontrolní bod
23-11-2014 10:29:11 Naplánovaný kontrolní bod
24-11-2014 17:25:55 Windows Update
28-11-2014 19:20:11 Windows Update
28-11-2014 19:34:16 Windows Update
02-12-2014 19:19:08 Sony Ericsson PC Suite Drivers
02-12-2014 19:30:31 Windows Update
03-12-2014 18:57:42 Naplánovaný kontrolní bod
04-12-2014 19:48:15 Naplánovaný kontrolní bod
06-12-2014 12:46:41 Windows Update
07-12-2014 15:43:28 Naplánovaný kontrolní bod
09-12-2014 17:01:06 Naplánovaný kontrolní bod
10-12-2014 12:33:16 Windows Update
10-12-2014 15:06:45 Windows Update
13-12-2014 10:39:49 Naplánovaný kontrolní bod
13-12-2014 13:36:44 Windows Update
14-12-2014 12:36:38 Naplánovaný kontrolní bod
17-12-2014 18:56:08 Windows Update
20-12-2014 11:43:16 Naplánovaný kontrolní bod
21-12-2014 20:13:32 Windows Update
26-12-2014 13:10:07 Windows Update
27-12-2014 09:27:06 Naplánovaný kontrolní bod
28-12-2014 12:11:45 Naplánovaný kontrolní bod
29-12-2014 17:20:07 Windows Update
01-01-2015 11:29:08 Naplánovaný kontrolní bod
02-01-2015 15:03:27 Windows Update
05-01-2015 15:25:24 Windows Update
07-01-2015 11:30:37 Naplánovaný kontrolní bod
08-01-2015 17:36:09 Windows Update
08-01-2015 17:50:39 Windows Update
12-01-2015 12:50:11 Windows Update
12-01-2015 16:01:16 Windows Update
13-01-2015 16:53:23 Naplánovaný kontrolní bod
14-01-2015 19:17:19 Windows Update
16-01-2015 17:43:55 Naplánovaný kontrolní bod
17-01-2015 23:08:33 Windows Update
22-01-2015 18:47:28 Windows Update
27-01-2015 18:15:44 Windows Update
30-01-2015 02:55:45 Naplánovaný kontrolní bod
30-01-2015 23:09:13 avast! antivirus system restore point
30-01-2015 23:14:02 avast! antivirus system restore point
30-01-2015 23:57:16 Windows Update
31-01-2015 12:43:08 Naplánovaný kontrolní bod
01-02-2015 22:04:56 Windows Update
01-02-2015 22:22:25 zoek.exe restore point
03-02-2015 00:00:00 Naplánovaný kontrolní bod
05-02-2015 06:11:39 Naplánovaný kontrolní bod
06-02-2015 00:00:01 Naplánovaný kontrolní bod
06-02-2015 16:47:35 Sony Ericsson PC Suite Drivers
08-02-2015 20:58:31 Sony PC Companion
08-02-2015 21:03:03 Sony PC Companion
08-02-2015 21:06:32 avast! antivirus system restore point
08-02-2015 21:10:59 Restore Point Created by FRST
08-02-2015 21:56:29 avast! antivirus system restore point
08-02-2015 21:57:51 Windows Update
09-02-2015 03:00:19 Windows Update
10-02-2015 00:00:01 Naplánovaný kontrolní bod

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-11-02 11:23 - 2015-02-08 21:16 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1AC85BB8-D185-40A1-BBBF-C89A5076AED1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-01-17] (Google Inc.)
Task: {1DA51782-092C-414D-A2BA-AECA6CD8BFA6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-01-17] (Google Inc.)
Task: {2E6CDC2C-FFE8-4495-9FFE-95A699C3FE72} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-07-23] (Piriform Ltd)
Task: {8A4AEB9C-4A3D-414C-B18A-47DC38104B57} - System32\Tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask => C:\Windows\system32\RAServer.exe [2008-01-21] (Společnost Microsoft)
Task: {CDD49A75-C500-4AB5-85A5-52F3A943EBA8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-08] (Adobe Systems Incorporated)
Task: {D58A8CBA-30BF-433E-872A-B6F46750417B} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-02-08] (AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-02-08 22:01 - 2015-02-08 22:01 - 02151544 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxVMM.dll
2015-02-08 22:01 - 2015-02-08 22:01 - 00021488 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxREM.dll
2015-02-08 22:01 - 2015-02-08 22:01 - 04474224 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2015-02-10 20:07 - 2015-02-10 20:07 - 02912768 _____ () C:\Program Files\AVAST Software\Avast\defs\15021001\algo.dll
2015-02-08 22:01 - 2015-02-08 22:01 - 00317632 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2015-02-08 22:01 - 2015-02-08 22:01 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-08-12 19:58 - 2012-04-30 10:57 - 00039936 _____ () C:\Program Files\Sony\Sony PC Companion\TMonitorAPI.dll
2014-08-12 19:58 - 2014-12-04 14:18 - 00241152 _____ () C:\Program Files\Sony\Sony PC Companion\MExplorer.dll
2009-08-19 16:49 - 2009-08-19 16:49 - 00049152 _____ () C:\Program Files\Western Digital\WD SmartWare\Front Parlor\Memeo.API.dll
2009-07-29 16:24 - 2009-07-29 16:24 - 00504293 _____ () C:\Program Files\Western Digital\WD SmartWare\Front Parlor\sqlite3.dll
2014-08-12 19:58 - 2014-06-23 08:07 - 00113376 _____ () C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe
2015-02-08 21:05 - 2015-02-04 10:02 - 09170760 _____ () C:\Program Files\Google\Chrome\Application\40.0.2214.111\pdf.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Honza\Desktop\nabídka.JPG:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Honza\Desktop\nabídka.JPG:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Honza\Desktop\ob.JPG:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Honza\Desktop\ob.JPG:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Honza\Desktop\ro.JPG:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Honza\Desktop\ro.JPG:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Honza\Desktop\TP 1.JPG:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Honza\Desktop\TP 1.JPG:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Honza\Desktop\TP 2.JPG:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Honza\Desktop\TP 2.JPG:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Honza\Desktop\TP 3.JPG:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Honza\Desktop\TP 3.JPG:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Honza\Desktop\TP 4.JPG:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Honza\Desktop\TP 4.JPG:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== Other Registry Areas =====================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3177871084-2805199809-1159702625-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\Wallpaper\img24.jpg
HKU\S-1-5-21-3177871084-2805199809-1159702625-1003\Control Panel\Desktop\\Wallpaper -> C:\windows\Web\Wallpaper\img24.jpg

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== Accounts: =============================

Administrator (S-1-5-21-3177871084-2805199809-1159702625-500 - Administrator - Disabled)
Guest (S-1-5-21-3177871084-2805199809-1159702625-501 - Limited - Disabled)
Honza (S-1-5-21-3177871084-2805199809-1159702625-1000 - Administrator - Enabled) => C:\Users\Honza
UpdatusUser (S-1-5-21-3177871084-2805199809-1159702625-1003 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (02/09/2015 04:03:52 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/09/2015 03:25:13 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/09/2015 03:05:57 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4

Error: (02/09/2015 03:05:57 AM) (Source: Perflib) (EventID: 1010) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4

Error: (02/08/2015 10:14:16 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: NT AUTHORITY)
Description: 0C:\Program Files\AVAST Software\Avast\AvastSvc.exeavast! Antivirus03026216157760

Error: (02/08/2015 10:13:56 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: NT AUTHORITY)
Description: 0C:\Program Files\AVAST Software\Avast\AvastSvc.exeavast! Antivirus0302621615776143003A005C00570069006E0064006F00770073005C004D006900630072006F0073006F00660074002E004E00450054005C004600720061006D00650077006F0072006B005C00760034002E0030002E00330030003300310039005C0053006500740075007000430061006300680065005C00760034002E0035002E00350030003900330038005C004E0065007400460078005F00460075006C006C005F004700440052005F007800380036002E006D00730069000000

Error: (02/08/2015 10:06:35 PM) (Source: Microsoft Security Client Setup) (EventID: 100) (User: Honza-PC)
Description: HRESULT:0x8004FF80
Description:Cannot complete uninstall wizard. An error has prevented the Security Essentials Uninstall Wizard from continuing. Please restart your computer and try again. Error code:0x8004FF80.

Error: (02/08/2015 10:02:48 PM) (Source: MsiInstaller) (EventID: 11921) (User: Honza-PC)
Description: Product: Microsoft Security Client -- Error 1921. Service 'Microsoft Antimalware Service' (MsMpSvc) could not be stopped. Verify that you have sufficient privileges to stop system services.

Error: (02/08/2015 09:56:25 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Chyba služby Stínová kopie svazků: Při dotazu na rozhraní IVssWriterCallback došlo k neočekávané chybě. hr = 0x80070005.
To je často způsobeno nesprávným nastavením zabezpečení v modulu pro zápis nebo žadateli.

Operace:
Shromažďování dat modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {e8132975-6f93-4464-a53e-1050253ae220}
Název modulu pro zápis: System Writer
ID instance modulu pro zápis: {0b00affd-d49d-47ae-8025-7790a3bfec42}

Error: (02/08/2015 09:48:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

System errors:
=============
Error: (02/09/2015 04:03:26 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (4:01:05, 9.2.2015) bylo neočekávané.

Error: (02/09/2015 03:01:32 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Windows Search%%1053

Error: (02/09/2015 03:01:32 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Windows Search

Error: (02/09/2015 03:01:31 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Windows Search%%1053

Error: (02/09/2015 03:01:31 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Windows Search

Error: (02/08/2015 10:27:27 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Windows Search%%1053

Error: (02/08/2015 10:27:27 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Windows Search

Error: (02/08/2015 10:27:27 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Windows Search%%1053

Error: (02/08/2015 10:27:27 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Windows Search

Error: (02/08/2015 10:26:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Windows Search%%1053

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2014-01-12 11:07:08.753
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-01-12 11:07:08.675
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-01-12 11:07:08.597
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-01-12 11:07:08.503
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-01-12 11:07:08.410
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system.

VIRY.CZ

Nahodile restarty PC

Nahodile restarty PC

Re: Nahodile restarty PC

Re: Nahodile restarty PC

Re: Nahodile restarty PC

Re: Nahodile restarty PC

Re: Nahodile restarty PC

Re: Nahodile restarty PC

Re: Nahodile restarty PC

Re: Nahodile restarty PC

Re: Nahodile restarty PC

Re: Nahodile restarty PC

Re: Nahodile restarty PC

Re: Nahodile restarty PC

Re: Nahodile restarty PC

Re: Nahodile restarty PC