VIRY.CZ

Logfile of random's system information tool 1.10 (written by random/random)
Run by Radka at 2015-02-13 11:34:17
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 39 GB (32%) free of 122 GB
Total RAM: 4095 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:34:20, on 13.2.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17631)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\EIZO\ScreenManager Pro for LCD (DDCCI)\LcdctrlDdcci.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Reader_sl.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Radka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
O4 - HKLM\..\Run: [ScreenManager Pro for LCD (DDCCI)] C:\Program Files (x86)\EIZO\ScreenManager Pro for LCD (DDCCI)\LcdctrlDdcci.exe
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHOE.EXE /EPT "EPLTarget\P0000000000000000" /M "Epson Stylus Photo PX830"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [icq] C:\Users\Radka\AppData\Roaming\ICQM\icq.exe -CU
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O9 - Extra button: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\Radka\AppData\Roaming\ICQM\icq.exe (HKCU)
O9 - Extra 'Tools' menuitem: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\Radka\AppData\Roaming\ICQM\icq.exe (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) - ABBYY - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8838 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
taskeng.exe {60B724FF-890F-4955-A0E6-47F659D7550F}
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe" -service
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Windows\System32\spool\drivers\x64\3\E_IATIHOE.EXE" /EPT "EPLTarget\P0000000000000000" /M "Epson Stylus Photo PX830"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
ngservice.exe pipeserver
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\EIZO\ScreenManager Pro for LCD (DDCCI)\LcdctrlDdcci.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files\totalcmd\TOTALCMD64.EXE"
taskeng.exe {C3BE6320-D4BE-4EF5-A96C-BCA6BCFFACAF}
"C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Reader_sl.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4808.0.1675257670\516028960" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,39 --gpu-vendor-id=0x1002 --gpu-device-id=0x68b8 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=13.350.1005.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group9 pct:10i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/EthersuggestPrefixControl/PasswordGeneration/Disabled/QUIC/Disabled/RememberCertificateErrorDecisions/Default/SPDY/Spdy4Enabled-default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4808.4.672324485\1887375724" /prefetch:673131151

"C:\Users\Radka\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Radka\AppData\Roaming\Mozilla\Firefox\Profiles\u7tuejvk.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-12-15 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26 431104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-12-15 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26 431104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-01-30 1332296]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EPLTarget\P0000000000000000"=C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHOE.EXE [2014-04-10 283232]
"AdobeBridge"= []
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"icq"=C:\Users\Radka\AppData\Roaming\ICQM\icq.exe [2014-10-15 35239432]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-01-20 7404312]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-01-27 5227112]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-03-12 767200]
"EEventManager"=C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [2010-10-12 979328]
"ScreenManager Pro for LCD (DDCCI)"=C:\Program Files (x86)\EIZO\ScreenManager Pro for LCD (DDCCI)\LcdctrlDdcci.exe [2012-05-27 4875672]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-02-13 11:07:35 ----D---- C:\rsit
2015-02-13 11:07:35 ----D---- C:\Program Files\trend micro
2015-02-13 10:42:49 ----D---- C:\Program Files\CCleaner
2015-02-12 09:59:52 ----D---- C:\c20006f6df5d06ecafae57
2015-02-12 09:20:47 ----A---- C:\Windows\system32\invagent.dll
2015-02-12 09:20:47 ----A---- C:\Windows\system32\generaltel.dll
2015-02-12 09:20:47 ----A---- C:\Windows\system32\appraiser.dll
2015-02-12 09:20:47 ----A---- C:\Windows\system32\aeinv.dll
2015-02-12 09:20:46 ----A---- C:\Windows\system32\devinv.dll
2015-02-12 09:20:46 ----A---- C:\Windows\system32\aitstatic.exe
2015-02-12 09:20:46 ----A---- C:\Windows\system32\aepdu.dll
2015-02-12 09:20:45 ----A---- C:\Windows\system32\aepic.dll
2015-02-12 09:20:29 ----A---- C:\Windows\system32\schannel.dll
2015-02-12 09:20:27 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-02-12 09:20:27 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-02-12 09:20:25 ----A---- C:\Windows\system32\kerberos.dll
2015-02-12 09:20:23 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-02-12 09:20:22 ----A---- C:\Windows\system32\wdigest.dll
2015-02-12 09:20:22 ----A---- C:\Windows\system32\msv1_0.dll
2015-02-12 09:20:20 ----A---- C:\Windows\system32\ncrypt.dll
2015-02-12 09:20:17 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-02-12 09:20:16 ----A---- C:\Windows\system32\TSpkg.dll
2015-02-12 09:20:14 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-02-12 09:20:12 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-02-12 09:20:11 ----A---- C:\Windows\system32\credssp.dll
2015-02-12 09:20:09 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-02-12 09:19:08 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-02-12 09:19:08 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-02-12 09:19:08 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-02-12 09:19:08 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-02-12 09:19:07 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-02-12 09:19:07 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-02-12 09:19:06 ----A---- C:\Windows\system32\ie4uinit.exe
2015-02-12 09:19:04 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-02-12 09:19:04 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-02-12 09:19:04 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-02-12 09:19:04 ----A---- C:\Windows\system32\iernonce.dll
2015-02-12 09:18:58 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-12 09:18:57 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-02-12 09:18:57 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-02-12 09:18:56 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-02-12 09:18:55 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-02-12 09:18:54 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-02-12 09:18:53 ----A---- C:\Windows\system32\iedkcs32.dll
2015-02-12 09:18:44 ----A---- C:\Windows\system32\urlmon.dll
2015-02-12 09:18:38 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-02-12 09:18:36 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-02-12 09:18:29 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-02-12 09:18:24 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-02-12 09:18:13 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-02-12 09:17:53 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-12 09:17:51 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-02-12 09:17:50 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-02-12 09:17:50 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-02-12 09:17:50 ----A---- C:\Windows\system32\msfeeds.dll
2015-02-12 09:17:50 ----A---- C:\Windows\system32\dxtrans.dll
2015-02-12 09:17:49 ----A---- C:\Windows\system32\iesetup.dll
2015-02-12 09:17:49 ----A---- C:\Windows\system32\ieapfltr.dll
2015-02-12 09:17:48 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-02-12 09:17:48 ----A---- C:\Windows\system32\iertutil.dll
2015-02-12 09:17:47 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-02-12 09:17:47 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-02-12 09:17:47 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-02-12 09:17:47 ----A---- C:\Windows\system32\jsproxy.dll
2015-02-12 09:17:47 ----A---- C:\Windows\system32\ieUnatt.exe
2015-02-12 09:17:46 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-02-12 09:17:08 ----A---- C:\Windows\system32\dxtmsft.dll
2015-02-12 09:17:00 ----A---- C:\Windows\system32\ieui.dll
2015-02-12 09:16:51 ----A---- C:\Windows\system32\ieframe.dll
2015-02-12 09:16:50 ----A---- C:\Windows\system32\mshtmled.dll
2015-02-12 09:16:49 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-02-12 09:16:47 ----A---- C:\Windows\system32\jscript9diag.dll
2015-02-12 09:16:45 ----A---- C:\Windows\system32\jscript9.dll
2015-02-12 09:16:41 ----A---- C:\Windows\system32\vbscript.dll
2015-02-12 09:16:37 ----A---- C:\Windows\system32\wininet.dll
2015-02-12 09:16:23 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-02-12 09:16:22 ----A---- C:\Windows\system32\msrating.dll
2015-02-12 09:16:13 ----A---- C:\Windows\system32\mshtml.dll
2015-02-12 09:15:24 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-02-12 09:15:24 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-02-12 09:15:20 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-02-12 09:15:20 ----A---- C:\Windows\system32\lsasrv.dll
2015-02-12 09:15:20 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-02-12 09:15:20 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-02-12 09:15:20 ----A---- C:\Windows\system32\drivers\cng.sys
2015-02-12 09:15:20 ----A---- C:\Windows\system32\adtschema.dll
2015-02-12 09:15:19 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-02-12 09:15:19 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-02-12 09:15:19 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-02-12 09:15:19 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-02-12 09:15:19 ----A---- C:\Windows\system32\sspisrv.dll
2015-02-12 09:15:19 ----A---- C:\Windows\system32\sspicli.dll
2015-02-12 09:15:19 ----A---- C:\Windows\system32\secur32.dll
2015-02-12 09:15:19 ----A---- C:\Windows\system32\msobjs.dll
2015-02-12 09:15:19 ----A---- C:\Windows\system32\msaudite.dll
2015-02-12 09:15:19 ----A---- C:\Windows\system32\lsass.exe
2015-02-12 09:15:19 ----A---- C:\Windows\system32\auditpol.exe
2015-02-12 09:15:18 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-02-12 09:14:21 ----A---- C:\Windows\system32\crypt32.dll
2015-02-12 09:14:16 ----A---- C:\Windows\system32\cryptsvc.dll
2015-02-12 09:14:15 ----A---- C:\Windows\system32\wintrust.dll
2015-02-12 09:14:14 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-02-12 09:14:14 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-02-12 09:14:14 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-02-12 09:13:11 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2015-02-12 09:13:11 ----A---- C:\Windows\system32\oleaut32.dll
2015-02-12 09:13:09 ----A---- C:\Windows\system32\win32k.sys
2015-02-12 09:12:17 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2015-02-12 09:12:17 ----A---- C:\Windows\system32\scesrv.dll
2015-02-12 09:12:02 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-02-12 09:11:50 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-02-12 09:11:50 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-02-12 09:11:39 ----A---- C:\Windows\system32\srcore.dll
2015-02-12 09:11:39 ----A---- C:\Windows\system32\rstrui.exe
2015-02-12 09:11:23 ----A---- C:\Windows\system32\srclient.dll
2015-02-12 09:11:22 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-02-11 08:40:36 ----ASH---- C:\pagefile.sys
2015-02-10 20:14:27 ----D---- C:\Program Files (x86)\Microsoft Security Client
2015-02-10 20:14:17 ----D---- C:\Program Files\Microsoft Security Client
2015-01-16 17:14:05 ----A---- C:\Windows\AutoKMS.ini
2015-01-16 17:00:27 ----D---- C:\Program Files (x86)\Microsoft Synchronization Services
2015-01-16 16:59:37 ----D---- C:\Windows\PCHEALTH
2015-01-16 16:59:37 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-01-16 16:54:26 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2015-01-16 16:51:52 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2015-01-16 16:50:40 ----D---- C:\Program Files (x86)\Microsoft Office
2015-01-16 16:50:16 ----RHD---- C:\MSOCache
2015-01-16 14:09:18 ----D---- C:\ProgramData\Microsoft Toolkit
2015-01-16 13:54:41 ----D---- C:\Windows\AutoKMS
2015-01-16 13:24:50 ----D---- C:\Program Files\Microsoft Office
2015-01-14 11:49:04 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2015-01-14 08:46:40 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2015-01-14 08:46:40 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2015-01-14 08:46:40 ----A---- C:\Windows\system32\profsvc.dll
2015-01-14 08:46:40 ----A---- C:\Windows\system32\nlasvc.dll
2015-01-14 08:46:39 ----A---- C:\Windows\system32\TSWbPrxy.exe
2015-01-14 08:46:39 ----A---- C:\Windows\system32\drivers\mrxdav.sys

======List of files/folders modified in the last 1 month======

2015-02-13 11:31:29 ----D---- C:\Windows\Temp
2015-02-13 11:25:32 ----D---- C:\Windows\system32\config
2015-02-13 11:21:11 ----D---- C:\Windows
2015-02-13 11:07:35 ----D---- C:\Program Files
2015-02-13 10:46:50 ----D---- C:\Windows\Panther
2015-02-13 10:46:50 ----D---- C:\Windows\inf
2015-02-13 10:46:48 ----D---- C:\Windows\Logs
2015-02-13 10:46:48 ----D---- C:\Windows\debug
2015-02-13 10:43:38 ----D---- C:\Windows\system32\Tasks
2015-02-12 14:44:41 ----SHD---- C:\Windows\Installer
2015-02-12 14:44:37 ----D---- C:\Windows\winsxs
2015-02-12 14:42:47 ----SHD---- C:\System Volume Information
2015-02-12 13:04:58 ----D---- C:\Windows\Microsoft.NET
2015-02-12 12:38:54 ----D---- C:\Windows\System32
2015-02-12 12:36:13 ----SD---- C:\Windows\system32\CompatTel
2015-02-12 12:36:11 ----D---- C:\Windows\system32\appraiser
2015-02-12 11:31:16 ----D---- C:\Windows\system32\catroot2
2015-02-12 11:14:55 ----D---- C:\Windows\SysWOW64
2015-02-12 11:14:55 ----D---- C:\Windows\system32\cs-CZ
2015-02-12 11:14:55 ----D---- C:\Program Files\Internet Explorer
2015-02-12 11:14:54 ----D---- C:\Windows\SYSWOW64\en-US
2015-02-12 11:14:54 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-02-12 11:14:53 ----D---- C:\Windows\system32\en-US
2015-02-12 11:14:51 ----D---- C:\Program Files (x86)\Internet Explorer
2015-02-12 11:14:49 ----D---- C:\Windows\system32\drivers
2015-02-12 10:01:48 ----D---- C:\Windows\system32\catroot
2015-02-12 10:00:38 ----RSD---- C:\Windows\assembly
2015-02-12 09:59:48 ----D---- C:\ProgramData\Package Cache
2015-02-12 09:54:07 ----D---- C:\ProgramData\Microsoft Help
2015-02-12 09:34:02 ----D---- C:\Windows\system32\MRT
2015-02-12 09:29:58 ----A---- C:\Windows\system32\MRT.exe
2015-02-12 08:59:11 ----D---- C:\Program Files (x86)\Opera
2015-02-10 20:14:27 ----SD---- C:\ProgramData\Microsoft
2015-02-10 20:14:27 ----RD---- C:\Program Files (x86)
2015-02-10 20:05:36 ----D---- C:\sdileny
2015-02-10 10:03:57 ----D---- C:\weby
2015-02-09 11:31:49 ----RSD---- C:\Windows\Fonts
2015-02-07 19:04:01 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-02-05 11:30:11 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-02-04 16:03:41 ----D---- C:\ProgramData\Adobe
2015-02-04 09:12:26 ----D---- C:\Windows\Tasks
2015-01-28 10:23:37 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-01-22 12:05:20 ----D---- C:\Program Files (x86)\Common Files
2015-01-22 12:05:13 ----D---- C:\Program Files\Common Files
2015-01-16 18:03:12 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-01-16 17:25:12 ----D---- C:\Program Files (x86)\PDF Architect 2
2015-01-16 17:01:09 ----D---- C:\Program Files (x86)\MSBuild
2015-01-16 16:59:37 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-01-16 16:57:26 ----D---- C:\Program Files\Common Files\Microsoft Shared
2015-01-16 16:52:19 ----D---- C:\Windows\ShellNew
2015-01-16 15:50:37 ----HD---- C:\ProgramData
2015-01-16 15:49:33 ----D---- C:\Program Files\Common Files\System
2015-01-16 15:49:32 ----A---- C:\Windows\win.ini
2015-01-16 13:55:35 ----SD---- C:\Users\Radka\AppData\Roaming\Microsoft
2015-01-15 12:23:27 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-12-15 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-12-15 267632]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-11-15 274696]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-12-15 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-12-15 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-12-15 436624]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-12-15 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-12-15 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-12-15 116728]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-03-12 13929984]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-03-12 636928]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-12-19 94720]
R3 P17;SB Live! 24-bit; C:\Windows\system32\drivers\P17.sys [2007-02-05 1529856]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-11-15 124560]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S4 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2014-12-15 271752]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-03-12 240128]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-12-15 50344]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-01-30 23784]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2014-12-15 4012248]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-10 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05 267440]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-10 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-06-06 136120]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-01-12 114688]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-10-02 114288]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-01-30 366512]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-04-10 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

Dobry den

Zakladni chyba - 2 antiviry. Microsoft Security Essentials odinstalujte.

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

• ukoncete vsechny programy
• kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
• kliknete na Scan, pote na Clean
• po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

# AdwCleaner v4.110 - Logfile created 13/02/2015 at 13:56:16
# Updated 05/02/2015 by Xplode
# Database : 2015-02-13.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Radka - RADKA-PC
# Running from : C:\Users\Radka\Desktop\adwcleaner_4.110.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17631


-\\ Mozilla Firefox v35.0.1 (x86 cs)


-\\ Google Chrome v40.0.2214.111


-\\ Opera v27.0.1689.69


*************************

AdwCleaner[R0].txt - [821 bytes] - [13/02/2015 13:53:55]
AdwCleaner[S0].txt - [749 bytes] - [13/02/2015 13:56:16]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [807 bytes] ##########

Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-02-2015
Ran by Radka (administrator) on RADKA-PC on 13-02-2015 14:11:00
Running from C:\Users\Radka\Desktop
Loaded Profiles: Radka (Available profiles: Radka)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIHOE.EXE
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(EIZO NANAO CORPORATION) C:\Program Files (x86)\EIZO\ScreenManager Pro for LCD (DDCCI)\LcdctrlDdcci.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Radka\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-27] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-03-12] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [ScreenManager Pro for LCD (DDCCI)] => C:\Program Files (x86)\EIZO\ScreenManager Pro for LCD (DDCCI)\LcdctrlDdcci.exe [4875672 2012-05-27] (EIZO NANAO CORPORATION)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-3615519001-3968813098-926827487-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHOE.EXE [283232 2014-04-10] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3615519001-3968813098-926827487-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3615519001-3968813098-926827487-1000\...\Run: [icq] => C:\Users\Radka\AppData\Roaming\ICQM\icq.exe [35239432 2014-10-15] (ICQ)
HKU\S-1-5-21-3615519001-3968813098-926827487-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3615519001-3968813098-926827487-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKU\S-1-5-21-3615519001-3968813098-926827487-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3615519001-3968813098-926827487-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Radka\AppData\Roaming\Mozilla\Firefox\Profiles\u7tuejvk.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3615519001-3968813098-926827487-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Radka\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-04-10]

Chrome:
=======
CHR Profile: C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-15]
CHR Extension: (Dokumenty Google) - C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-10]
CHR Extension: (Disk Google) - C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-10]
CHR Extension: (Duckie Deck – Hry pro děti) - C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkcldaifgljnnnikmmaoceclpcbfdaon [2014-12-08]
CHR Extension: (YouTube) - C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-10]
CHR Extension: (Vyhledávání Google) - C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-10]
CHR Extension: (Tabulky Google) - C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-15]
CHR Extension: (Avast Online Security) - C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-04-10]
CHR Extension: (Peněženka Google) - C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-10]
CHR Extension: (Gmail) - C:\Users\Radka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-10]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-15]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-15] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-15] (Avast Software)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-15] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-15] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-15] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-15] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-15] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-15] ()
U4 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-15] (Avast Software)
S3 GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-13 14:11 - 2015-02-13 14:11 - 00012159 _____ () C:\Users\Radka\Desktop\FRST.txt
2015-02-13 14:10 - 2015-02-13 14:11 - 00000000 ____D () C:\FRST
2015-02-13 14:07 - 2015-02-13 14:07 - 00112640 _____ (forum.viry.cz) C:\Users\Radka\Desktop\FRSTLauncher.exe
2015-02-13 14:04 - 2015-02-13 14:05 - 02134016 _____ (Farbar) C:\Users\Radka\Desktop\FRST64.exe
2015-02-13 13:53 - 2015-02-13 13:56 - 00000000 ____D () C:\AdwCleaner
2015-02-13 13:51 - 2015-02-13 13:51 - 02112512 _____ () C:\Users\Radka\Desktop\adwcleaner_4.110.exe
2015-02-13 12:19 - 2015-02-13 12:19 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2015-02-13 12:19 - 2015-02-13 12:19 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2015-02-13 11:21 - 2015-02-13 13:57 - 00000168 _____ () C:\Windows\setupact.log
2015-02-13 11:21 - 2015-02-13 11:21 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-13 11:20 - 2015-02-13 11:20 - 00000578 _____ () C:\Windows\PFRO.log
2015-02-13 11:07 - 2015-02-13 11:34 - 00000000 ____D () C:\Program Files\trend micro
2015-02-13 11:07 - 2015-02-13 11:07 - 00000000 ____D () C:\rsit
2015-02-13 11:05 - 2015-02-13 11:05 - 01222144 _____ () C:\Users\Radka\Downloads\RSITx64.exe
2015-02-13 10:52 - 2015-02-13 10:52 - 00073250 _____ () C:\Users\Radka\Documents\cc_20150213_105219.reg
2015-02-13 10:43 - 2015-02-13 10:43 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-02-13 10:43 - 2015-02-13 10:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-02-13 10:42 - 2015-02-13 10:43 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-13 10:39 - 2015-02-13 10:40 - 05325208 _____ (Piriform Ltd) C:\Users\Radka\Downloads\ccsetup502.exe
2015-02-13 10:28 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-13 10:28 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-13 10:28 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-13 10:28 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-12 12:38 - 2015-02-12 12:38 - 00000247 _____ () C:\Windows\system32\2015-02-12-11-38-54.074-aswFe.exe-4660.log
2015-02-12 12:38 - 2015-02-12 12:38 - 00000197 _____ () C:\Windows\system32\2015-02-12-11-38-47.084-AvastVBoxSVC.exe-2352.log
2015-02-12 11:59 - 2015-02-12 11:59 - 00000247 _____ () C:\Windows\system32\2015-02-12-10-59-37.006-aswFe.exe-4080.log
2015-02-12 11:59 - 2015-02-12 11:59 - 00000197 _____ () C:\Windows\system32\2015-02-12-10-59-26.004-AvastVBoxSVC.exe-5020.log
2015-02-12 09:59 - 2015-02-12 09:59 - 00000000 ____D () C:\c20006f6df5d06ecafae57
2015-02-12 09:20 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-12 09:20 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-12 09:20 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-12 09:20 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-12 09:20 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-12 09:20 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-12 09:20 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-12 09:20 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-12 09:20 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-12 09:20 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-12 09:20 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-12 09:20 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-12 09:20 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-12 09:20 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-12 09:20 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-12 09:20 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-12 09:20 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-12 09:20 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-12 09:20 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-12 09:20 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-12 09:20 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-12 09:20 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-12 09:19 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-12 09:19 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-12 09:19 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-12 09:19 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-12 09:19 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-12 09:19 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-12 09:19 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-12 09:19 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-12 09:19 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-12 09:19 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-12 09:19 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-12 09:19 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-12 09:18 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-12 09:18 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-12 09:18 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-12 09:18 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-12 09:18 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-12 09:18 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-12 09:18 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-12 09:18 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-12 09:18 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-12 09:18 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-12 09:18 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-12 09:18 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-12 09:18 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-12 09:18 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-12 09:17 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-12 09:17 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-12 09:17 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-12 09:17 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-12 09:17 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-12 09:17 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-12 09:17 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-12 09:17 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-12 09:17 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-12 09:17 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-12 09:17 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-12 09:17 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-12 09:17 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-12 09:17 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-12 09:17 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-12 09:17 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-12 09:17 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-12 09:17 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-12 09:16 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-12 09:16 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-12 09:16 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-12 09:16 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-12 09:16 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-12 09:16 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-12 09:16 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-12 09:16 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-12 09:15 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-12 09:15 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-12 09:15 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-12 09:15 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-12 09:15 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-12 09:15 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-12 09:15 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-12 09:15 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-12 09:15 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-12 09:15 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-12 09:15 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-12 09:15 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-12 09:15 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-12 09:15 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-12 09:15 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-12 09:15 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-12 09:15 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-12 09:15 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-12 09:15 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-12 09:15 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-12 09:14 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-12 09:14 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-12 09:14 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-12 09:14 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-12 09:14 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-02-12 09:14 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-02-12 09:13 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-12 09:13 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-12 09:13 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-12 09:12 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-12 09:12 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-12 09:12 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-12 09:11 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-12 09:11 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-12 09:11 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-12 09:11 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-12 09:11 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-12 09:11 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-12 08:40 - 2015-02-12 08:40 - 00000197 _____ () C:\Windows\system32\2015-02-12-07-40-10.069-AvastVBoxSVC.exe-2560.log
2015-02-11 13:37 - 2015-02-11 13:37 - 00000197 _____ () C:\Windows\system32\2015-02-11-12-37-07.012-AvastVBoxSVC.exe-2476.log
2015-02-11 08:43 - 2015-02-11 08:43 - 00000197 _____ () C:\Windows\system32\2015-02-11-07-43-03.011-AvastVBoxSVC.exe-2676.log
2015-02-10 20:15 - 2015-02-13 13:52 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-02-10 20:04 - 2015-02-10 20:04 - 00000197 _____ () C:\Windows\system32\2015-02-10-19-04-37.058-AvastVBoxSVC.exe-2572.log
2015-02-10 08:31 - 2015-02-10 08:32 - 00000197 _____ () C:\Windows\system32\2015-02-10-07-31-43.047-AvastVBoxSVC.exe-2876.log
2015-02-09 17:59 - 2015-02-09 18:00 - 00000197 _____ () C:\Windows\system32\2015-02-09-16-59-52.052-AvastVBoxSVC.exe-2956.log
2015-02-09 09:41 - 2015-02-09 09:41 - 00000197 _____ () C:\Windows\system32\2015-02-09-08-41-16.069-AvastVBoxSVC.exe-2500.log
2015-02-07 18:38 - 2015-02-07 18:38 - 00000197 _____ () C:\Windows\system32\2015-02-07-17-38-56.012-AvastVBoxSVC.exe-2452.log
2015-02-07 16:05 - 2015-02-07 16:05 - 00000197 _____ () C:\Windows\system32\2015-02-07-15-05-28.031-AvastVBoxSVC.exe-388.log
2015-02-06 16:52 - 2015-02-06 16:53 - 00000197 _____ () C:\Windows\system32\2015-02-06-15-52-41.059-AvastVBoxSVC.exe-2684.log
2015-02-05 09:01 - 2015-02-05 09:02 - 00000197 _____ () C:\Windows\system32\2015-02-05-08-01-51.090-AvastVBoxSVC.exe-2392.log
2015-02-04 15:45 - 2015-02-04 15:45 - 00000197 _____ () C:\Windows\system32\2015-02-04-14-45-02.026-AvastVBoxSVC.exe-2380.log
2015-02-04 08:54 - 2015-02-04 08:55 - 00000197 _____ () C:\Windows\system32\2015-02-04-07-54-48.056-AvastVBoxSVC.exe-2532.log
2015-02-02 08:53 - 2015-02-02 08:54 - 00000197 _____ () C:\Windows\system32\2015-02-02-07-53-54.092-AvastVBoxSVC.exe-2436.log
2015-01-30 19:16 - 2015-01-30 19:16 - 00000247 _____ () C:\Windows\system32\2015-01-30-18-16-45.061-aswFe.exe-4028.log
2015-01-30 19:11 - 2015-01-30 19:16 - 00000247 _____ () C:\Windows\system32\2015-01-30-18-11-41.094-aswFe.exe-1252.log
2015-01-30 19:11 - 2015-01-30 19:11 - 00000197 _____ () C:\Windows\system32\2015-01-30-18-11-33.010-AvastVBoxSVC.exe-4024.log
2015-01-30 19:07 - 2015-01-30 19:08 - 00000197 _____ () C:\Windows\system32\2015-01-30-18-07-56.076-AvastVBoxSVC.exe-2552.log
2015-01-28 09:19 - 2015-01-28 09:20 - 01259560 _____ () C:\Users\Radka\Downloads\7_3c61848c1bdf7c1d5a5b899a220b3cfc.zip
2015-01-27 15:27 - 2015-02-12 08:59 - 00003830 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1398672043
2015-01-19 20:40 - 2015-01-19 20:40 - 00000197 _____ () C:\Windows\system32\2015-01-19-19-40-24.041-AvastVBoxSVC.exe-2492.log
2015-01-19 09:42 - 2015-01-19 09:42 - 00000247 _____ () C:\Windows\system32\2015-01-19-08-42-31.076-aswFe.exe-4796.log
2015-01-19 09:32 - 2015-01-19 09:42 - 00000247 _____ () C:\Windows\system32\2015-01-19-08-32-17.015-aswFe.exe-836.log
2015-01-19 09:31 - 2015-01-19 09:31 - 00000197 _____ () C:\Windows\system32\2015-01-19-08-31-28.007-AvastVBoxSVC.exe-2496.log
2015-01-18 11:32 - 2015-01-18 11:32 - 00000247 _____ () C:\Windows\system32\2015-01-18-10-32-47.014-aswFe.exe-3400.log
2015-01-18 11:27 - 2015-01-18 11:32 - 00000247 _____ () C:\Windows\system32\2015-01-18-10-27-37.087-aswFe.exe-2308.log
2015-01-18 11:25 - 2015-01-18 11:25 - 00000197 _____ () C:\Windows\system32\2015-01-18-10-25-19.087-AvastVBoxSVC.exe-1048.log
2015-01-16 22:28 - 2015-01-16 22:28 - 00000197 _____ () C:\Windows\system32\2015-01-16-21-28-33.020-AvastVBoxSVC.exe-2092.log
2015-01-16 17:39 - 2015-01-16 17:39 - 00000197 _____ () C:\Windows\system32\2015-01-16-16-39-12.017-AvastVBoxSVC.exe-2388.log
2015-01-16 17:19 - 2015-01-16 17:19 - 10705448 _____ (© pdfforge GmbH.) C:\Users\Radka\Downloads\PDF_Architect_Installer_2.0.17.17507.exe
2015-01-16 17:14 - 2015-01-16 17:14 - 00000161 _____ () C:\Windows\AutoKMS.ini
2015-01-16 17:02 - 2015-01-16 17:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-01-16 17:00 - 2015-01-16 17:00 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services
2015-01-16 16:59 - 2015-01-16 16:59 - 00000000 ____D () C:\Windows\PCHEALTH
2015-01-16 16:59 - 2015-01-16 16:59 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-01-16 16:54 - 2015-01-16 16:54 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2015-01-16 16:51 - 2015-01-16 16:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2015-01-16 16:50 - 2015-01-16 16:59 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-01-16 16:50 - 2015-01-16 16:50 - 00000000 __RHD () C:\MSOCache
2015-01-16 16:42 - 2015-01-16 16:42 - 00000197 _____ () C:\Windows\system32\2015-01-16-15-42-43.040-AvastVBoxSVC.exe-3468.log
2015-01-16 14:09 - 2015-01-16 14:09 - 00000000 ____D () C:\ProgramData\Microsoft Toolkit
2015-01-16 13:54 - 2015-02-10 23:05 - 00000000 ____D () C:\Windows\AutoKMS
2015-01-16 13:53 - 2015-01-16 13:53 - 00000000 ____D () C:\Users\Radka\AppData\Local\Microsoft Toolkit
2015-01-16 13:35 - 2015-01-16 13:35 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-01-16 13:24 - 2015-01-16 16:53 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-01-16 09:04 - 2015-01-16 09:04 - 00000197 _____ () C:\Windows\system32\2015-01-16-08-04-27.065-AvastVBoxSVC.exe-3652.log
2015-01-15 15:08 - 2015-01-15 15:08 - 00000197 _____ () C:\Windows\system32\2015-01-15-14-08-19.087-AvastVBoxSVC.exe-2396.log
2015-01-15 12:25 - 2015-01-15 12:25 - 00000197 _____ () C:\Windows\system32\2015-01-15-11-25-05.002-AvastVBoxSVC.exe-3416.log
2015-01-14 12:22 - 2015-01-14 12:22 - 00000197 _____ () C:\Windows\system32\2015-01-14-11-22-23.040-AvastVBoxSVC.exe-2464.log
2015-01-14 11:49 - 2015-01-20 11:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2015-01-14 08:46 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 08:46 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 08:46 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 08:46 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 08:46 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-14 08:46 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-14 08:43 - 2015-01-14 08:43 - 00000197 _____ () C:\Windows\system32\2015-01-14-07-43-15.047-AvastVBoxSVC.exe-2960.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-13 14:04 - 2009-07-14 05:45 - 00029120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-13 14:04 - 2009-07-14 05:45 - 00029120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-13 14:02 - 2014-04-10 01:36 - 02067021 _____ () C:\Windows\WindowsUpdate.log
2015-02-13 13:58 - 2014-04-10 02:37 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-13 13:57 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-13 13:30 - 2014-04-10 08:29 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-13 13:17 - 2014-04-10 02:37 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-13 12:22 - 2014-04-10 20:39 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-13 12:22 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-02-13 11:22 - 2014-04-10 02:38 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-02-13 10:46 - 2014-04-10 02:30 - 00000000 ____D () C:\Windows\Panther
2015-02-13 10:28 - 2014-04-10 08:28 - 00000000 ____D () C:\Users\Radka\AppData\Local\Adobe
2015-02-13 10:21 - 2014-04-10 20:50 - 00003970 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{66A2734B-EA5E-4E9C-8B20-D450DBB616C5}
2015-02-12 12:36 - 2014-12-11 08:53 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-12 12:36 - 2014-04-30 12:29 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-12 11:30 - 2009-07-14 05:45 - 05000048 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-12 09:59 - 2014-04-10 01:52 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-12 09:34 - 2014-04-10 02:36 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-12 09:29 - 2014-04-10 02:36 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-12 08:59 - 2014-04-28 09:00 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-02-11 13:28 - 2014-04-14 10:35 - 00001480 _____ () C:\Users\Radka\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2015-02-11 09:48 - 2014-06-03 22:03 - 00000132 _____ () C:\Users\Radka\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2015-02-10 22:35 - 2014-04-10 21:12 - 00000000 ____D () C:\Users\Radka\AppData\Local\GHISLER
2015-02-10 20:05 - 2014-06-03 20:14 - 00000000 ____D () C:\sdileny
2015-02-10 10:03 - 2014-04-10 23:09 - 00000000 ____D () C:\weby
2015-02-09 11:32 - 2014-04-10 01:44 - 00090976 _____ () C:\Users\Radka\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-07 19:04 - 2011-04-12 09:34 - 00668542 _____ () C:\Windows\system32\perfh005.dat
2015-02-07 19:04 - 2011-04-12 09:34 - 00141202 _____ () C:\Windows\system32\perfc005.dat
2015-02-07 19:04 - 2009-07-14 06:13 - 01583226 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-05 11:30 - 2014-04-10 08:29 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-05 11:30 - 2014-04-10 08:29 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-05 11:30 - 2014-04-10 08:29 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-04 16:03 - 2014-04-10 18:09 - 00000000 ____D () C:\ProgramData\Adobe
2015-02-04 09:12 - 2014-04-10 02:37 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-04 09:12 - 2014-04-10 02:37 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-01-28 10:23 - 2014-10-02 10:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-16 18:03 - 2014-04-10 01:53 - 01557940 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-01-16 17:25 - 2014-12-11 10:12 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2015-01-16 17:01 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2015-01-16 16:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-01-16 16:52 - 2011-04-12 09:45 - 00000000 ____D () C:\Windows\ShellNew
2015-01-16 15:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-01-16 15:49 - 2009-07-14 03:34 - 00000387 _____ () C:\Windows\win.ini
2015-01-15 12:23 - 2014-04-10 20:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

==================== Files in the root of some directories =======

2014-06-03 22:02 - 2014-09-16 13:00 - 0000132 _____ () C:\Users\Radka\AppData\Roaming\Adobe Formát GIF CS6 – předvolby
2014-06-03 22:03 - 2015-02-11 09:48 - 0000132 _____ () C:\Users\Radka\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2014-04-14 10:35 - 2015-02-11 13:28 - 0001480 _____ () C:\Users\Radka\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2014-08-30 12:47 - 2014-08-30 12:47 - 0000714 _____ () C:\Users\Radka\AppData\Local\recently-used.xbel

Some content of TEMP:
====================
C:\Users\Radka\AppData\Local\Temp\Quarantine.exe
C:\Users\Radka\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-13 11:57




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:119.14 GB) (Free:37.75 GB) NTFS

Available physical RAM: 2551.21 MB
Total physical RAM: 4095.27 MB
Percentage of memory in use: 37%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 00AD9B2F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119.1 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Radka\Desktop" je 38 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

• Stahnete Crystal Disk Info (CDI) http://sourceforge.jp/frs/redir.php?m=j ... o6_2_2.zip
• archiv extrahujte a spustte vyextrahovany soubor DiskInfo.exe
• ve spustenem programu kliknete nahore na Upravy -> Kopirovat (log mate nyni zkopirovany ve schrance)
• log vlozte do dalsi odpovedi (Ctrl + V)

• Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
• ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
• znovu spustte FRST a kliknete na Fix
• po restartu na Vas vyskoci fixlog (pripadne bude ulozen na Plose), jehoz obsah mi vlozte do pristi odpovedi

  Kód: Vybrat vše

  Start
  CloseProcesses:
  HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
  HKU\S-1-5-21-3615519001-3968813098-926827487-1000\...\Run: [AdobeBridge] => [X]
  HKU\S-1-5-21-3615519001-3968813098-926827487-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
  
  SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  FF Plugin: @microsoft.com/GENUINE -> disabled No File
  FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
  
  S3 GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS [X]
  
  2015-02-13 14:07 - 2015-02-13 14:07 - 00112640 _____ (forum.viry.cz) C:\Users\Radka\Desktop\FRSTLauncher.exe
  2015-02-13 13:53 - 2015-02-13 13:56 - 00000000 ____D () C:\AdwCleaner
  2015-02-13 13:51 - 2015-02-13 13:51 - 02112512 _____ () C:\Users\Radka\Desktop\adwcleaner_4.110.exe
  2015-02-13 11:07 - 2015-02-13 11:34 - 00000000 ____D () C:\Program Files\trend micro
  2015-02-13 11:07 - 2015-02-13 11:07 - 00000000 ____D () C:\rsit
  2015-02-13 11:05 - 2015-02-13 11:05 - 01222144 _____ () C:\Users\Radka\Downloads\RSITx64.exe
  2015-01-16 17:14 - 2015-01-16 17:14 - 00000161 _____ () C:\Windows\AutoKMS.ini
  2015-01-16 13:54 - 2015-02-10 23:05 - 00000000 ____D () C:\Windows\AutoKMS
  
  Task: {1A2D4F20-2CF0-4496-988B-12F03670E68D} - System32\Tasks\{8BF4A9F4-065D-4049-867D-AFACDA6BDB0B} => pcalua.exe -a B:\setup.exe -d B:\
  Task: {CF79312C-874A-4FC6-A345-02C58B6EC4A2} - \AutoKMS No Task File <==== ATTENTION
  Task: {D351EAAB-CE9E-4D21-AF62-2A4A2EFFC6FE} - System32\Tasks\{6C2C0219-06A8-4347-A778-7989D030FAE6} => pcalua.exe -a B:\SETUP.EXE -d B:\
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  Hosts:
  EmptyTemp:
  End
  

----------------------------------------------------------------------------
CrystalDiskInfo 6.2.2 (C) 2008-2014 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Home Premium SP1 [6.1 Build 7601] (x64)
Date : 2015/02/13 14:45:44

-- Controller Map ----------------------------------------------------------
- ATA Channel 0 (0) [ATA]
- ATA Channel 1 (1) [ATA]
+ PCI Standardní dvoukanálový řadič IDE [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)
+ Řadič Intel(R) ICH8R/ICH9R/ICH10R/DO SATA diskového pole RAID [SCSI]
- Patriot Torqx 2 128GB SS
- TSSTcorp CDDVDW SH-224DB

-- Disk List ---------------------------------------------------------------
(1) Patriot Torqx 2 128GB SSD : 128,0 GB [0/0/0, pd1]

----------------------------------------------------------------------------
(1) Patriot Torqx 2 128GB SSD
----------------------------------------------------------------------------
Model : Patriot Torqx 2 128GB SSD
Firmware : S5FAM005
Serial Number : 78BF0714110800012961
Disk Size : 128,0 GB (8,4/128,0/128,0/128,0)
Buffer Size : Neznámy údaj
Queue Depth : 32
# of Sectors : 250069680
Rotation Rate : ---- (SSD)
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : ---- | SATA/300
Power On Hours : 3252 hod.
Power On Count : 1031 krát
Temperature : Neznámy údaj
Health Status : Dobrý
Features : S.M.A.R.T., APM, 48bit LBA, NCQ, TRIM
APM Level : 0000h [OFF]
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _50 000000000000 Počet chyb čtení
09 100 100 __0 000000000CB4 Hodin v činnosti
0C 100 100 __0 000000000407 Počet cyklů zapnutí zařízení
A8 100 100 __0 000000013509 Specifický pro výrobce
AA _68 _68 _10 0000000001A0 Specifický pro výrobce
AD 100 100 __0 0000005F00C3 Specifický pro výrobce
BB 100 100 _10 000000000000 Specifický pro výrobce
C0 100 100 __0 000000000000 Unsafe Shutdown Count
C7 100 100 _50 000000000000 Specifický pro výrobce
DA 100 100 _50 000000000000 Specifický pro výrobce
F3 100 100 _50 000000000000 Specifický pro výrobce
F4 100 100 _50 00000000005F Specifický pro výrobce
F5 100 100 _50 0000000000C3 Specifický pro výrobce
F6 100 100 _50 000000BEEE4A Specifický pro výrobce
FA 100 100 _50 000000000000 Specifický pro výrobce
FB 100 100 _50 000000000FAD Specifický pro výrobce
FC 100 100 _50 000000000000 Specifický pro výrobce

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0040 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 3738 4246 3037 3134 3131 3038 3030 3031 3239 3631
020: 0000 0000 0000 5335 4641 4D30 3035 5061 7472 696F
030: 7420 546F 7271 7820 3220 3132 3847 4220 5353 4420
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0000 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: C2B0 0EE7 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 0706 0000 004C 0044
080: 01F8 0000 346B 7D09 6063 3469 BC01 6063 203F 001E
090: 001E 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: C2B0 0EE7 0000 0000 0000 0000 4000 0000 0000 0000
110: 0000 0000 0000 0000 0000 0000 0000 0000 0000 4015
120: 4015 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0001
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 0000 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 0001 0000 0000
220: 0000 0000 101F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 00FF 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 A1A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 0B 00 64 64 00 00 00 00 00 00 00 09 12
010: 00 64 64 B4 0C 00 00 00 00 00 0C 12 00 64 64 07
020: 04 00 00 00 00 00 A8 12 00 64 64 09 35 01 00 00
030: 00 00 AA 03 00 44 44 A0 01 00 00 00 00 00 AD 12
040: 00 64 64 C3 00 5F 00 00 00 00 BB 03 00 64 64 00
050: 00 00 00 00 00 00 C0 12 00 64 64 00 00 00 00 00
060: 00 00 C7 12 00 64 64 00 00 00 00 00 00 00 DA 0B
070: 00 64 64 00 00 00 00 00 00 00 F3 02 00 64 64 00
080: 00 00 00 00 00 00 F4 02 00 64 64 5F 00 00 00 00
090: 00 00 F5 02 00 64 64 C3 00 00 00 00 00 00 F6 02
0A0: 00 64 64 4A EE BE 00 00 00 00 FA 02 00 64 64 00
0B0: 00 00 00 00 00 00 FB 02 00 64 64 AD 0F 00 00 00
0C0: 00 00 FC 02 00 64 64 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 FF 00 00 1B
170: 03 00 01 00 01 02 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9C

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 32 00 00 00 00 00 00 00 00 00 00 09 00
010: 00 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00
020: 00 00 00 00 00 00 A8 00 00 00 00 00 00 00 00 00
030: 00 00 AA 0A 00 00 00 00 00 00 00 00 00 00 AD 00
040: 00 00 00 00 00 00 00 00 00 00 BB 0A 00 00 00 00
050: 00 00 00 00 00 00 C0 00 00 00 00 00 00 00 00 00
060: 00 00 C7 32 00 00 00 00 00 00 00 00 00 00 DA 32
070: 00 00 00 00 00 00 00 00 00 00 F3 32 00 00 00 00
080: 00 00 00 00 00 00 F4 32 00 00 00 00 00 00 00 00
090: 00 00 F5 32 00 00 00 00 00 00 00 00 00 00 F6 32
0A0: 00 00 00 00 00 00 00 00 00 00 FA 32 00 00 00 00
0B0: 00 00 00 00 00 00 FB 32 00 00 00 00 00 00 00 00
0C0: 00 00 FC 32 00 00 00 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F4


---------------------------------------------------------------------------------------------------------------------------------


Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 12-02-2015
Ran by Radka at 2015-02-13 14:50:47 Run:1
Running from C:\Users\Radka\Desktop
Loaded Profiles: Radka (Available profiles: Radka)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-3615519001-3968813098-926827487-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3615519001-3968813098-926827487-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

S3 GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS [X]

2015-02-13 14:07 - 2015-02-13 14:07 - 00112640 _____ (forum.viry.cz) C:\Users\Radka\Desktop\FRSTLauncher.exe
2015-02-13 13:53 - 2015-02-13 13:56 - 00000000 ____D () C:\AdwCleaner
2015-02-13 13:51 - 2015-02-13 13:51 - 02112512 _____ () C:\Users\Radka\Desktop\adwcleaner_4.110.exe
2015-02-13 11:07 - 2015-02-13 11:34 - 00000000 ____D () C:\Program Files\trend micro
2015-02-13 11:07 - 2015-02-13 11:07 - 00000000 ____D () C:\rsit
2015-02-13 11:05 - 2015-02-13 11:05 - 01222144 _____ () C:\Users\Radka\Downloads\RSITx64.exe
2015-01-16 17:14 - 2015-01-16 17:14 - 00000161 _____ () C:\Windows\AutoKMS.ini
2015-01-16 13:54 - 2015-02-10 23:05 - 00000000 ____D () C:\Windows\AutoKMS

Task: {1A2D4F20-2CF0-4496-988B-12F03670E68D} - System32\Tasks\{8BF4A9F4-065D-4049-867D-AFACDA6BDB0B} => pcalua.exe -a B:\setup.exe -d B:\
Task: {CF79312C-874A-4FC6-A345-02C58B6EC4A2} - \AutoKMS No Task File <==== ATTENTION
Task: {D351EAAB-CE9E-4D21-AF62-2A4A2EFFC6FE} - System32\Tasks\{6C2C0219-06A8-4347-A778-7989D030FAE6} => pcalua.exe -a B:\SETUP.EXE -d B:\
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => value deleted successfully.
HKU\S-1-5-21-3615519001-3968813098-926827487-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value deleted successfully.
HKU\S-1-5-21-3615519001-3968813098-926827487-1000\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
GMSIPCI => Service deleted successfully.
"C:\Users\Radka\Desktop\FRSTLauncher.exe" => File/Directory not found.
C:\AdwCleaner => Moved successfully.
C:\Users\Radka\Desktop\adwcleaner_4.110.exe => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\rsit => Moved successfully.
C:\Users\Radka\Downloads\RSITx64.exe => Moved successfully.
C:\Windows\AutoKMS.ini => Moved successfully.
C:\Windows\AutoKMS => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1A2D4F20-2CF0-4496-988B-12F03670E68D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1A2D4F20-2CF0-4496-988B-12F03670E68D}" => Key deleted successfully.
C:\Windows\System32\Tasks\{8BF4A9F4-065D-4049-867D-AFACDA6BDB0B} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{8BF4A9F4-065D-4049-867D-AFACDA6BDB0B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{CF79312C-874A-4FC6-A345-02C58B6EC4A2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CF79312C-874A-4FC6-A345-02C58B6EC4A2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoKMS" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D351EAAB-CE9E-4D21-AF62-2A4A2EFFC6FE}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D351EAAB-CE9E-4D21-AF62-2A4A2EFFC6FE}" => Key deleted successfully.
C:\Windows\System32\Tasks\{6C2C0219-06A8-4347-A778-7989D030FAE6} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6C2C0219-06A8-4347-A778-7989D030FAE6}" => Key deleted successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 100.6 MB temporary data.


The system needed a reboot.

==== End of Fixlog 14:50:56 ====

Ted uz jsou logy ciste - havet nevidno. Mate tam SSD, takze tezko rict, zda zrychleni vubec pocitite. Jeste uklidime pouzite nastroje.

• Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
• Oznacte jen moznost "Remove disinfection tools"
• kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

Díky moc za Váš čas. Ať se daří.

Dekuji, i Vam.

Nemate zac, rad jsem pomohl


Mejte se krasne a treba zase nekdy