VIRY.CZ

Logfile of random's system information tool 1.10 (written by random/random)
Run by Limcak at 2015-04-30 08:46:07
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 45 GB (40%) free of 114 GB
Total RAM: 16279 MB (83% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 08:46:16, on 30/04/2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal

Running processes:
C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\VIA XHCI UASP Utility\usb3Monitor.exe
C:\Users\Limcak\AppData\Roaming\uTorrent\uTorrent.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files\Alienware\Command Center\AlienFXHook32Mngr.exe
C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\aida64.exe
C:\Users\Limcak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Limcak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Limcak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Limcak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Limcak\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Limcak.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [GamingAPP] C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Limcak\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Default user')
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Avast Firewall (avast! Firewall) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Alcohol Virtual Drive Auto-mount Service (AxAutoMntSrv) - Alcohol Soft Development Team - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Ashampoo LiveTuner 2 Service (WO_LiveService2) - Unknown owner - C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 11\LiveTunerService.exe

--
End of file - 10214 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\AUDIODG.EXE 0x338
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\Windows\system32\IProsetMonitor.exe
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"
"C:\Program Files\Alienware\Alienware TactX Keyboard CI\txkbci.exe" /SHOWHIDE
"C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\VIA XHCI UASP Utility\usb3Monitor.exe"
"C:\Program Files\SmartTechnology\Software\ProfilerU.exe"
"C:\Program Files\SmartTechnology\Software\SaiMfd.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Windows\System32\StikyNot.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe"
"C:\Users\Limcak\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe"
C:\Windows\system32\viakaraokesrv.exe
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe" /starttray
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 2e1b5f1a-20f3-4457-b63a-8ec4b854c629 1
\??\C:\Windows\system32\conhost.exe "-1798547223-43750109169515595211357032104141322702024052388-16375129081751207645
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-1619362350-143360625-1710141263-467418866446577479-470814912-274656655-182874126
"C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe" /TUStart /pid:3188
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-f6551fbc-5a1e-4706-8ab2-0114c9bc3916 -SystemEventPortName:HostProcess-fe1e456e-8843-4c61-8ea9-aa157b71e49a -IoCancelEventPortName:HostProcess-00b89c55-df99-42fd-98eb-2b82ebc39967 -NonStateChangingEventPortName:HostProcess-ee599c52-30cc-4b92-a0fd-7add6025c2ba -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:97079a19-b878-4d4d-8451-1260473bc952 -DeviceGroupId:WpdFsGroup
"C:\Program Files\Alienware\Command Center\AlienFXHook32Mngr.exe" 459760
\??\C:\Windows\system32\conhost.exe "-1588371588-921516964-164504382-240826922-20230764861386985876-391937451-1227786656
"C:\Program Files\Alienware\Command Center\AlienFXHook64Mngr.exe" 459760
\??\C:\Windows\system32\conhost.exe "1766772287-19578464451588950348-1585616351208954355-94741206-1607936155-150188919
taskeng.exe {2FE15FD6-61E6-4457-85DD-1BCAA68F2AAA}
"C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\aida64.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Users\Limcak\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Limcak\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2236.0.1238642094\745035810" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,40,48 --gpu-vendor-id=0x10de --gpu-device-id=0x1187 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.5012 --ignored=" --type=renderer " /prefetch:822062411
"C:\Users\Limcak\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group2 pct:10b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_DisplayHintTextPrePeriod2/PasswordGeneration/Disabled/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_66/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2236 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2236.2.254066078\1445839081" /prefetch:673131151
"C:\Users\Limcak\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group2 pct:10b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_DisplayHintTextPrePeriod2/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_66/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2236 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2236.14.1429895198\1324888268" /prefetch:673131151
"C:\Users\Limcak\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group2 pct:10b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Stable_DisplayHintTextPrePeriod2/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_66/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=2236 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="2236.15.240721666\279396158" /prefetch:673131151
"C:\Users\Limcak\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player PPAPI Notifier.job - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_pepper.exe -check pepperplugin
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Limcak\AppData\Roaming\Mozilla\Firefox\Profiles\o040zwg2.default

prefs.js - "browser.startup.homepage" - "about:home"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.169 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.169 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

C:\Users\Limcak\AppData\Roaming\Mozilla\Firefox\Profiles\o040zwg2.default\searchplugins\
icqplugin.gif
icqplugin.src

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-12 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-12 565304]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Launch Keyboard CI"=C:\Program Files\Alienware\Alienware TactX Keyboard CI\txkbci.exe [2012-07-11 3439928]
"AlienFX Controller"=C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe [2009-05-20 57672]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-03-28 2673296]
"VIAxHCUtl"=C:\Program Files\VIA XHCI UASP Utility\usb3Monitor []
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-03-28 1570672]
"ProfilerU"=C:\Program Files\SmartTechnology\Software\ProfilerU.exe [2013-04-16 454144]
"SaiMfd"=C:\Program Files\SmartTechnology\Software\SaiMfd.exe [2013-04-16 158208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 427520]
"GamingAPP"=C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp.exe [2015-02-05 7513016]
"uTorrent"=C:\Users\Limcak\AppData\Roaming\uTorrent\uTorrent.exe [2015-04-29 1699920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 112512]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage]
C:\Users\Limcak\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\KiesAirMessage.exe -startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
C:\Program Files (x86)\Samsung\Kies\Kies.exe [2014-05-23 1564992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2014-05-23 311616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ManyCam]
C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe [2014-09-30 5402960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-04-17 31280256]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Limcak^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^superpc_soft_partner.lnk]
C:\PROGRA~3\{86894~1\SUPERP~1.EXE /startup []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-04-12 5512912]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2014-06-27 292848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="(x86)\GS"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=60

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AcroRd32.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ccleaner64.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\earegister.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\excel.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\groove.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\infopath.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iobitunlocker.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iumsvc.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\misc.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msaccess.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msigamingapp.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msoxmled.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mspub.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mstore.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nhl2009.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ois.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\onenote.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\outlook.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\powerpnt.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sgamingapp.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\skype.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\teamviewer.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tunngle.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\unins000.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winword.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wo11.exe]
"Debugger=""C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux1"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"msacm.ac3filter"=ac3filter64.acm
"vidc.ffds"=ff_vfw.dll
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"aux3"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"aux4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-04-30 08:46:07 ----D---- C:\rsit
2015-04-28 14:35:17 ----A---- C:\Windows\system32\FNTCACHE.DAT
2015-04-17 14:50:48 ----HD---- C:\_acestream_cache_
2015-04-17 08:49:21 ----D---- C:\Program Files (x86)\Rockstar Games
2015-04-17 08:49:14 ----D---- C:\Program Files\Rockstar Games
2015-04-15 22:10:46 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-04-15 22:09:20 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-04-15 22:09:20 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-04-15 22:09:20 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-04-15 22:09:20 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-04-15 22:09:20 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-04-15 22:09:20 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-04-15 22:09:20 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-04-15 22:09:20 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-04-15 22:09:20 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-04-15 22:09:20 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-04-15 22:09:20 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-04-15 22:09:20 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-04-15 22:09:20 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-04-15 22:09:20 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-04-15 22:09:20 ----A---- C:\Windows\system32\nvopencl.dll
2015-04-15 22:09:20 ----A---- C:\Windows\system32\nvoglv64.dll
2015-04-15 22:09:20 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-04-15 22:09:20 ----A---- C:\Windows\system32\nvinitx.dll
2015-04-15 22:09:20 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-04-15 22:09:20 ----A---- C:\Windows\system32\NvIFR64.dll
2015-04-15 22:09:20 ----A---- C:\Windows\system32\NvFBC64.dll
2015-04-15 22:09:20 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-04-15 22:09:20 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-04-15 22:09:20 ----A---- C:\Windows\system32\nvcuvid.dll
2015-04-15 22:09:20 ----A---- C:\Windows\system32\nvcuda.dll
2015-04-15 22:09:20 ----A---- C:\Windows\system32\nvcompiler.dll
2015-04-15 22:09:20 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-04-14 09:53:42 ----A---- C:\Windows\system32\nvdispgenco6435012.dll
2015-04-14 09:53:42 ----A---- C:\Windows\system32\nvdispco6435012.dll
2015-04-13 10:52:39 ----SHD---- C:\Config.Msi
2015-04-12 13:14:35 ----A---- C:\Windows\system32\aswBoot.exe
2015-04-12 13:14:34 ----A---- C:\Windows\avastSS.scr
2015-04-12 13:14:32 ----A---- C:\Windows\system32\drivers\aswNdisFlt.sys

======List of files/folders modified in the last 1 month======

2015-04-30 08:46:10 ----D---- C:\Program Files\trend micro
2015-04-30 08:41:17 ----D---- C:\Users\Limcak\AppData\Roaming\uTorrent
2015-04-30 08:26:46 ----D---- C:\Windows\System32
2015-04-30 08:26:46 ----D---- C:\Windows\inf
2015-04-30 08:26:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-04-30 08:20:50 ----D---- C:\ProgramData\NVIDIA
2015-04-30 00:02:02 ----D---- C:\Windows\Temp
2015-04-29 21:48:26 ----D---- C:\Users\Limcak\AppData\Roaming\vlc
2015-04-29 20:00:14 ----D---- C:\Windows\system32\config
2015-04-29 16:10:57 ----D---- C:\Users\Limcak\AppData\Roaming\Skype
2015-04-29 15:48:33 ----RD---- C:\Program Files (x86)
2015-04-29 15:48:33 ----D---- C:\Program Files (x86)\Google
2015-04-29 13:40:11 ----SHD---- C:\Windows\Installer
2015-04-29 13:39:57 ----D---- C:\ProgramData\Skype
2015-04-29 13:03:21 ----SHD---- C:\System Volume Information
2015-04-28 14:35:21 ----AD---- C:\Windows
2015-04-28 14:35:20 ----D---- C:\Windows\debug
2015-04-28 14:31:47 ----D---- C:\Windows\system32\Tasks
2015-04-28 14:30:35 ----D---- C:\Windows\system32\catroot2
2015-04-28 14:29:35 ----D---- C:\Program Files (x86)\MSI
2015-04-28 14:29:35 ----D---- C:\MSI
2015-04-28 14:29:32 ----D---- C:\Windows\SYSWOW64\drivers
2015-04-28 14:29:32 ----D---- C:\Windows\SysWOW64
2015-04-28 14:25:11 ----D---- C:\Program Files (x86)\Steam
2015-04-28 09:34:24 ----D---- C:\Windows\Tasks
2015-04-28 09:34:23 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-04-27 08:25:03 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-04-27 08:25:01 ----D---- C:\Windows\system32\drivers
2015-04-21 08:16:48 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-04-17 14:54:10 ----D---- C:\Windows\Logs
2015-04-17 14:53:42 ----HD---- C:\ProgramData
2015-04-17 14:53:42 ----D---- C:\Program Files
2015-04-17 14:53:34 ----D---- C:\Windows\Microsoft.NET
2015-04-17 06:49:50 ----RSD---- C:\Windows\assembly
2015-04-17 06:21:55 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-04-15 22:11:27 ----D---- C:\ProgramData\NVIDIA Corporation
2015-04-15 22:11:14 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-04-15 22:10:45 ----D---- C:\Temp
2015-04-15 22:10:42 ----D---- C:\Windows\system32\DriverStore
2015-04-15 22:07:47 ----D---- C:\Program Files (x86)\Common Files
2015-04-15 18:10:07 ----D---- C:\Windows\rescache
2015-04-13 11:24:31 ----D---- C:\Windows\system32\wfp
2015-04-13 11:24:31 ----D---- C:\Windows\system32\wbem
2015-04-13 11:23:48 ----D---- C:\Windows\system32\NDF
2015-04-13 11:23:48 ----D---- C:\Windows\security
2015-04-13 11:23:47 ----D---- C:\Windows\winsxs
2015-04-13 11:23:47 ----D---- C:\Windows\registration
2015-04-13 11:23:46 ----SD---- C:\Users\Limcak\AppData\Roaming\Microsoft
2015-04-13 10:53:52 ----D---- C:\Windows\system32\catroot
2015-04-09 01:58:18 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-04-09 01:58:18 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-04-09 01:58:18 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-04-09 01:58:18 ----A---- C:\Windows\system32\nvapi64.dll
2015-04-08 22:30:18 ----A---- C:\Windows\system32\nvsvc64.dll
2015-04-08 22:30:18 ----A---- C:\Windows\system32\nvcpl.dll
2015-04-08 22:30:14 ----A---- C:\Windows\system32\nvvsvc.exe
2015-04-08 22:30:14 ----A---- C:\Windows\system32\nvsvcr.dll
2015-04-08 22:30:14 ----A---- C:\Windows\system32\nvshext.dll
2015-04-08 22:30:13 ----A---- C:\Windows\system32\nvmctray.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdide64;amdide64; C:\Windows\system32\DRIVERS\amdide64.sys [2014-11-16 11944]
R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2015-04-12 449896]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-04-12 65736]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-04-12 271200]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2014-06-27 20464]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2015-03-18 386680]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2015-04-12 28144]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-04-12 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-04-12 1047320]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-04-12 442264]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-04-12 29168]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-04-12 88408]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-04-12 136752]
R2 LiveTuner2PM;Ashampoo LiveTuner 2 Driver; \??\C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 11\LiveTuner64.sys [2014-03-20 14320]
R3 AcpiCtlDrv;AcpiCtlDrv; C:\Windows\system32\DRIVERS\AcpiCtlDrv.sys [2012-07-17 25880]
R3 AIDA64Driver;FinalWire AIDA64 Kernel Driver; \??\C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\kerneld.x64 [2013-03-26 31576]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2015-01-05 139480]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\System32\drivers\asmtxhci.sys [2015-01-05 430808]
R3 cmudaxp;ASUS Xonar DGX Audio Interface; C:\Windows\system32\drivers\cmudaxp.sys [2011-12-20 2727936]
R3 e1dexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver D; C:\Windows\system32\DRIVERS\e1d62x64.sys [2013-08-22 489752]
R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\Windows\system32\DRIVERS\ICCWDT.sys [2013-08-13 27608]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-07-15 4012632]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2014-06-27 383472]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2014-06-27 795120]
R3 ManyCam;ManyCam Virtual Webcam; C:\Windows\system32\DRIVERS\mcvidrv_x64.sys [2012-10-11 44928]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-04-14 25816]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2015-04-30 136408]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-04-14 63704]
R3 mcaudrv_simple;ManyCam Virtual Microphone; C:\Windows\system32\drivers\mcaudrv_x64.sys [2013-01-31 28160]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2014-09-30 129312]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-10-09 195728]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-03-28 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 rtsuvc;USB Video Device; C:\Windows\system32\DRIVERS\rtsuvc.sys [2014-11-16 9101016]
R3 SaiK0CD5;SaiK0CD5; C:\Windows\system32\DRIVERS\SaiK0CD5.sys [2012-09-20 180584]
R3 SaiMini;SaiMini; C:\Windows\system32\DRIVERS\SaiMini.sys [2013-04-30 25120]
R3 SaiNtBus;SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [2013-04-30 52640]
R3 SaiU0CD5;SaiU0CD5; C:\Windows\system32\DRIVERS\SaiU0CD5.sys [2012-09-20 47208]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [2012-09-19 11880]
S1 AsIO;AsIO; SysWow64\drivers\AsIO.sys []
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 6037504]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 cpuz130;cpuz130; \??\C:\Users\Limcak\AppData\Local\Temp\cpuz130\cpuz_x64.sys []
S3 cpuz137;cpuz137; \??\C:\Users\Limcak\AppData\Local\Temp\cpuz137\cpuz137_x64.sys []
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-03-19 109056]
S3 DrvAgent64;DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [2013-09-19 21712]
S3 EsgScanner;EsgScanner; C:\Windows\system32\DRIVERS\EsgScanner.sys []
S3 MSICDSetup;MSICDSetup; \??\D:\CDriver64.sys []
S3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-17 15416]
S3 NTIOLib_1_0_C;NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-03-19 206080]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2015-03-02 141440]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2014-11-16 689840]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S4 IObitUnlocker;IObitUnlocker; \??\C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlocker.sys [2014-03-04 36944]
S4 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2014-11-16 941784]
S4 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\RTL8187B.sys [2009-12-15 446976]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-04-12 343336]
R2 avast! Firewall;Avast Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2015-04-12 107448]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-03-28 1152144]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2014-07-09 261896]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-04-14 1871160]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-04-14 1080120]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-03-28 1878672]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-03-28 22995600]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-04-08 936264]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2015-02-24 76152]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-04-08 410952]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2012-09-19 2365792]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 VIAKaraokeService;VIA Karaoke digital mixer Service; C:\Windows\system32\viakaraokesrv.exe [2014-11-16 27768]
S2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2015-02-18 194032]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2014-02-18 171480]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-03-27 114688]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2014-01-31 887232]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-28 268464]
S4 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 203264]
S4 DfSdkS;Defragmentation-Service; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 11\DfsdkS64.exe [2009-08-24 544768]
S4 GamingApp_Service;GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [2014-12-25 23504]
S4 Intel(R) ME Service;Intel® ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2014-04-03 131544]
S4 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-01-17 174368]
S4 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2014-04-03 154584]
S4 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-01-16 2724128]
S4 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2014-04-03 398296]
S4 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 51456888]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-02-02 114800]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S4 Realtek87B;Realtek87B; C:\Program Files (x86)\Realtek\RTL8187B Wireless LAN Utility\RtlService.exe [2009-12-07 40960]
S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S4 SpyHunter 4 Service;SpyHunter 4 Service; C:\PROGRA~2\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [2014-01-09 770432]
S4 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-11-19 489256]
S4 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2013-12-17 5341536]
S4 TunngleService;TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [2015-01-17 762320]

-----------------EOF-----------------

Krasny den Vam preju

Doporucuji zvysenou opatrnost pri pouzivani TuneUp Utilities 2013.

Odinstalujte SpyHunter - odmita ucast na srovnavacich testech antimalwarovych nastroju a nektere zdroje ho radi mezi tzv. rogueware. Zkratka jeho cinnost i ucinnost je velice diskutabilni.

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

ukoncete vsechny programy
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Scan, pote na Cleaning
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

Dekuji za ochotu. Spyhunter nejde odinstalovat- neni ani mezi vsechny programi a ani ho nevidi totaluinstall. dokonce neni ani polozka uinstall tam kde je nainstalovan. nevim jak se ho mam zbavit

tady je log

# AdwCleaner v4.202 - Log vytvoren 30/04/2015 v 09:49:14
# Aktualizováno 23/04/2015 by Xplode
# Databáze : 2015-04-27.1 [Server]
# Operacní system : Windows 7 Ultimate Service Pack 1 (x64)
# Uživatelské jméno : Limcak - LIMCAK-PC
# Spušteno z : C:\Users\Limcak\Desktop\adwcleaner_4.202.exe
# Nastavení : Cištení

***** [ Služby ] *****

***** [ Soubory / Složky ] *****

***** [ Naplánované úlohy ] *****

***** [ Zástupci ] *****

***** [ Registry ] *****

***** [ Prohlížece ] *****

-\\ Internet Explorer v11.0.9600.17689

-\\ Mozilla Firefox v37.0.2 (x86 cs)

-\\ Google Chrome v

[C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Smazáno [Search Provider] : hxxp://start.iminent.com/?appId=A3A965F2-BD47-4FD5-96DB-75472DCD7CDC&ref=toolbox&q={searchTerms}
[C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Smazáno [Search Provider] : hxxp://taplika.com/results.php?f=4&q={searchTerms}&a=tpl_tuto14_15_08&cd=2XzuyEtN2Y1L1Qzu0Dzz0C0Bzz0AtCzz0AyCtDzz0EyDyB0AtN0D0Tzu0StCtCyEtAtN1L2XzutAtFyBtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StC0AtCyDtDyCyDtDtGtBzzyCyDtG0DyCtDyCtGtCtCtD0EtGtCyE0ByDyCzztD0EyDtAyDyD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0ByCtBtBzztBzzzztGyC0ByCtDtGyEtBtBtDtGzztDyD0AtG0Fzy0D0AtDyE0Bzzzyzz0F0F2Q&cr=332724201&ir=
[C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Smazáno [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3 ... OWGB_sp_ch
[C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Smazáno [Search Provider] : hxxp://uk.ask.com/web?q={searchTerms}
[C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Startup_URLs] : hxxp://www.google.co.uk/", "hxxp://taplika.com/?f=7&a=tpl_tuto14_15_08&cd=2XzuyEtN2Y1L1Qzu0Dzz0C0Bzz0AtCzz0AyCtDzz0EyDyB0AtN0D0Tzu0StCtCyEtAtN1L2XzutAtFyBtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StC0AtCyDtDyCyDtDtGtBzzyCyDtG0DyCtDyCtGtCtCtD0EtGtCyE0ByDyCzztD0EyDtAyDyD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0ByCtBtBzztBzzzztGyC0ByCtDtGyEtBtBtDtGzztDyD0AtG0Fzy0D0AtDyE0Bzzzyzz0F0F2Q&cr=332724201&ir=

-\\ Chromium v

-\\ Comodo Dragon v

-\\ Chrome Canary v

*************************

AdwCleaner[R0].txt - [2514 bytu] - [30/04/2015 09:47:24]
AdwCleaner[R1].txt - [2572 bytu] - [30/04/2015 09:48:21]
AdwCleaner[S0].txt - [2492 bytu] - [30/04/2015 09:49:14]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2550 bytu] ##########

Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

FIRST.TXT

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-04-2015 01
Ran by Limcak (administrator) on LIMCAK-PC on 30-04-2015 10:24:13
Running from C:\Users\Limcak\Desktop
Loaded Profiles: Limcak (Available profiles: Limcak)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\afwServ.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Alienware) C:\Program Files\Alienware\Alienware TactX Keyboard CI\txkbci.exe
(Alienware Corporation) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(VIA Technologies, Inc.) C:\Program Files\VIA XHCI UASP Utility\usb3Monitor.exe
(Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe
(Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(BitTorrent Inc.) C:\Users\Limcak\AppData\Roaming\uTorrent\uTorrent.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Users\Limcak\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Limcak\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Limcak\AppData\Local\Google\Chrome\Application\chrome.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFXHook32Mngr.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFXHook64Mngr.exe
(FinalWire Ltd.) C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\aida64.exe
(Google Inc.) C:\Users\Limcak\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Limcak\AppData\Local\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Limcak\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Launch Keyboard CI] => C:\Program Files\Alienware\Alienware TactX Keyboard CI\txkbci.exe [3439928 2012-07-11] (Alienware)
HKLM\...\Run: [AlienFX Controller] => C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe [57672 2009-05-20] (Alienware Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM\...\Run: [VIAxHCUtl] => C:\Program Files\VIA XHCI UASP Utility\usb3Monitor
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [ProfilerU] => C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2013-04-16] (Saitek)
HKLM\...\Run: [SaiMfd] => C:\Program Files\SmartTechnology\Software\SaiMfd.exe [158208 2013-04-16] (Saitek)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912 2015-04-12] (Avast Software s.r.o.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-06-27] (Intel Corporation)
HKU\S-1-5-21-3450857935-816758065-830484128-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3450857935-816758065-830484128-1000\...\Run: [GamingAPP] => C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp.exe [7513016 2015-02-05] (Micro-Star Int'l Co., Ltd.)
HKU\S-1-5-21-3450857935-816758065-830484128-1000\...\Run: [uTorrent] => C:\Users\Limcak\AppData\Roaming\uTorrent\uTorrent.exe [1699920 2015-04-29] (BitTorrent Inc.)
HKU\S-1-5-21-3450857935-816758065-830484128-1000\...\MountPoints2: {8273ef40-77a2-11e4-b2e2-806e6f6e6963} - D:\setup.exe
HKU\S-1-5-21-3450857935-816758065-830484128-1000\...\MountPoints2: {a88b3e18-59d4-11e4-9ee2-14dae903247a} - P:\LaunchU3.exe -a
HKU\S-1-5-21-3450857935-816758065-830484128-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-3450857935-816758065-830484128-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-18\...\Policies\system: [DisableLockWorkstation] 0
AppInit_DLLs: (x86)\GS => (x86)\GS File Not Found
IFEO\AcroRd32.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\ccleaner64.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\earegister.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\excel.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\groove.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\infopath.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\install.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\iobitunlocker.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\iumsvc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\misc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\msaccess.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\msigamingapp.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\msoxmled.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\mspub.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\mstore.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\nhl2009.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\ois.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\onenote.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\outlook.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\sgamingapp.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\skype.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\teamviewer.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\tunngle.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\unins000.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\winword.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\wo11.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-12] (Avast Software s.r.o.)
BootExecute: autocheck autochk * sh4native Sh4Removal
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-3450857935-816758065-830484128-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3450857935-816758065-830484128-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/
HKU\S-1-5-21-3450857935-816758065-830484128-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKU\S-1-5-21-3450857935-816758065-830484128-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://uk.search.yahoo.com/yhs/search? ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-12] (Avast Software s.r.o.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-12] (Avast Software s.r.o.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

FireFox:
========
FF ProfilePath: C:\Users\Limcak\AppData\Roaming\Mozilla\Firefox\Profiles\o040zwg2.default
FF SelectedSearchEngine: ICQ Search
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-21] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-21] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-04-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-04-03] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Limcak\AppData\Roaming\Mozilla\Firefox\Profiles\o040zwg2.default\searchplugins\icqplugin.gif [2015-03-12]
FF SearchPlugin: C:\Users\Limcak\AppData\Roaming\Mozilla\Firefox\Profiles\o040zwg2.default\searchplugins\icqplugin.src [2015-03-12]
FF Extension: Gmail Notifier (restartless) - C:\Users\Limcak\AppData\Roaming\Mozilla\Firefox\Profiles\o040zwg2.default\Extensions\jid0-GjwrPchS3Ugt7xydvqVK4DQk8Ls@jetpack.xpi [2015-01-22]
FF Extension: Google Translator for Firefox - C:\Users\Limcak\AppData\Roaming\Mozilla\Firefox\Profiles\o040zwg2.default\Extensions\translator@zoli.bod.xpi [2015-01-22]
FF Extension: Adblock Plus - C:\Users\Limcak\AppData\Roaming\Mozilla\Firefox\Profiles\o040zwg2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-22]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-03-19]

Chrome:
=======
CHR HomePage: Default -> https://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.co.uk/", "hxxp://taplika.com/?f=7&a=tpl_tuto14_15_08&cd=2XzuyEtN2Y1L1Qzu0Dzz0C0Bzz0AtCzz0AyCtDzz0EyDyB0AtN0D0Tzu0StCtCyEtAtN1L2XzutAtFyBtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StC0AtCyDtDyCyDtDtGtBzzyCyDtG0DyCtDyCtGtCtCtD0EtGtCyE0ByDyCzztD0EyDtAyDyD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0ByCtBtBzztBzzzztGyC0ByCtDtGyEtBtBtDtGzztDyD0AtG0Fzy0D0AtDyE0Bzzzyzz0F0F2Q&cr=332724201&ir=", "hxxp://start.iminent.com/?appId=A3A965F2-BD47-4FD5-96DB-75472DCD7CDC"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Translate) - C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2015-03-17]
CHR Extension: (Google Slides) - C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-17]
CHR Extension: (Google Docs) - C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-17]
CHR Extension: (Google Drive) - C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-17]
CHR Extension: (YouTube) - C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-17]
CHR Extension: (Adblock Plus) - C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-03-17]
CHR Extension: (Google Search) - C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-17]
CHR Extension: (Google Sheets) - C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-17]
CHR Extension: (Vince) - C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgpdhkfmndlnlmmhcalabijjpogicdpa [2015-04-17]
CHR Extension: (Google Mail Checker) - C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2015-03-17]
CHR Extension: (Google Wallet) - C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-17]
CHR Extension: (Gmail) - C:\Users\Limcak\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-17]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - No Path Or update_url value
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - No Path Or update_url value
StartMenuInternet: Google Chrome - chrome.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [203264 2009-08-18] (AMD) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-12] (Avast Software s.r.o.)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [107448 2015-04-12] (Avast Software s.r.o.)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
S4 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 11\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [File not signed]
S4 GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [23504 2014-12-25] (Micro-Star Int'l Co., Ltd.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
S4 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2014-04-03] (Intel Corporation)
S4 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-01-17] ()
S4 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-04-03] (Intel Corporation)
S4 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2724128 2015-01-16] (IObit)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-02-24] ()
S4 Realtek87B; C:\Program Files (x86)\Realtek\RTL8187B Wireless LAN Utility\RtlService.exe [40960 2009-12-07] (Realtek) [File not signed]
S4 SpyHunter 4 Service; C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe [770432 2014-01-09] (Enigma Software Group USA, LLC.)
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2365792 2012-09-19] (TuneUp Software)
S4 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [762320 2015-01-17] (Tunngle.net GmbH)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2014-11-16] (VIA Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 WO_LiveService2; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 11\LiveTunerService.exe [223600 2015-01-12] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AcpiCtlDrv; C:\Windows\System32\DRIVERS\AcpiCtlDrv.sys [25880 2012-07-17] (Intel Corporation)
R3 AIDA64Driver; C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\kerneld.x64 [31576 2013-03-26] ()
R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11944 2014-11-16] (Advanced Micro Devices Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-12] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-04-12] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-04-12] (Avast Software s.r.o.)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449896 2015-04-12] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-12] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-12] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-12] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-04-12] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-04-12] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [271200 2015-04-12] ()
S3 atikmdag; C:\Windows\System32\DRIVERS\atikmdag.sys [6037504 2009-08-18] (ATI Technologies Inc.) [File not signed]
R3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [2727936 2011-12-20] (C-Media Inc)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [489752 2013-08-22] (Intel Corporation)
S3 EsgScanner; C:\Windows\SysWOW64\DRIVERS\EsgScanner.sys [19984 2012-06-22] ()
S4 IObitUnlocker; C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlocker.sys [36944 2014-03-04] (IObit)
R2 LiveTuner2PM; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 11\LiveTuner64.sys [14320 2014-03-20] ()
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [44928 2012-10-11] (ManyCam LLC)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-04-30] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S4 RTL8187B; C:\Windows\System32\DRIVERS\RTL8187B.sys [446976 2009-12-15] (Realtek Semiconductor Corporation )
R3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [9101016 2014-11-16] (Realtek Semiconductor Corp.)
R3 SaiK0CD5; C:\Windows\System32\DRIVERS\SaiK0CD5.sys [180584 2012-09-20] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-04-30] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52640 2013-04-30] (Saitek)
R3 SaiU0CD5; C:\Windows\System32\DRIVERS\SaiU0CD5.sys [47208 2012-09-20] (Saitek)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2015-03-18] (Duplex Secure Ltd.)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-09-19] (TuneUp Software)
R3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [225792 2014-05-29] (VIA Technologies, Inc.)
R3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [305664 2014-10-31] (VIA Technologies, Inc.)
U3 aw96u3k7; C:\Windows\System32\Drivers\aw96u3k7.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zero size file/folder)
S1 AsIO; SysWow64\drivers\AsIO.sys [X]
S3 cpuz130; \??\C:\Users\Limcak\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]
S3 cpuz137; \??\C:\Users\Limcak\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-30 10:24 - 2015-04-30 10:24 - 00027290 _____ () C:\Users\Limcak\Desktop\FRST.txt
2015-04-30 10:23 - 2015-04-30 10:24 - 00000000 ____D () C:\FRST
2015-04-30 10:22 - 2015-04-30 10:22 - 02101248 _____ (Farbar) C:\Users\Limcak\Desktop\FRST64.exe
2015-04-30 10:20 - 2015-04-30 10:20 - 00112640 _____ (forum.viry.cz) C:\Users\Limcak\Desktop\FRSTLauncher.exe
2015-04-30 10:12 - 2015-04-30 10:12 - 00111523 _____ () C:\Users\Limcak\Downloads\Nepotvrzeno 660277.crdownload
2015-04-30 09:47 - 2015-04-30 09:49 - 00000000 ____D () C:\AdwCleaner
2015-04-30 09:47 - 2015-04-30 09:47 - 02224640 _____ () C:\Users\Limcak\Desktop\adwcleaner_4.202.exe
2015-04-30 08:51 - 2015-04-30 08:51 - 00013362 _____ () C:\Users\Limcak\Downloads\[CzT]CzechCasting_6643_Lada_30_4_2015_CZ_720p_.torrent
2015-04-30 08:46 - 2015-04-30 08:46 - 00000000 ____D () C:\rsit
2015-04-30 08:45 - 2015-04-30 08:45 - 01222144 _____ () C:\Users\Limcak\Desktop\RSITx64.exe
2015-04-29 19:04 - 2015-04-29 19:04 - 00000957 _____ () C:\Users\Limcak\Desktop\Autorun.exe – zástupce.lnk
2015-04-29 14:56 - 2015-04-29 14:56 - 00000000 ____D () C:\Users\Limcak\AppData\Local\Chromium
2015-04-28 14:35 - 2015-04-30 09:50 - 00001680 _____ () C:\Windows\setupact.log
2015-04-28 14:35 - 2015-04-28 14:35 - 00417824 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-28 14:35 - 2015-04-28 14:35 - 00110544 _____ () C:\Users\Limcak\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-28 14:35 - 2015-04-28 14:35 - 00000000 _____ () C:\Windows\setuperr.log
2015-04-28 09:34 - 2015-04-28 14:26 - 00000892 _____ () C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-04-28 09:34 - 2015-04-28 09:34 - 00003890 _____ () C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-04-25 01:06 - 2015-02-17 09:21 - 01212236 _____ (EA Games ) C:\Users\Limcak\Desktop\Launcher.exe
2015-04-17 14:50 - 2015-04-17 14:50 - 00000000 ___HD () C:\_acestream_cache_
2015-04-17 08:49 - 2015-04-29 19:01 - 00000080 _____ () C:\Users\Limcak\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2015-04-17 08:49 - 2015-04-17 08:50 - 00000000 ____D () C:\Program Files\Rockstar Games
2015-04-17 08:49 - 2015-04-17 08:50 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2015-04-16 20:12 - 2015-04-16 20:12 - 00000016 _____ () C:\ProgramData\mntemp
2015-04-15 22:10 - 2015-04-08 21:32 - 00560968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-04-15 22:09 - 2015-04-09 01:58 - 31570064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 30397072 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 25375048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 24053576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 15818528 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 15716232 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 14617288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 14006752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 12852784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 11380728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 10423952 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-04-15 22:09 - 2015-04-09 01:58 - 02896528 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 02573456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 01086424 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 01047368 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 01037640 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 00970568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 00962192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 00927440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 00499344 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 00402576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 00390472 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 00346256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 00175880 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 00154256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 00150648 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-04-15 22:09 - 2015-04-09 01:58 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-04-14 09:53 - 2015-04-09 01:58 - 01895568 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435012.dll
2015-04-14 09:53 - 2015-04-09 01:58 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435012.dll
2015-04-13 10:39 - 2015-04-13 10:39 - 00000000 ____D () C:\Users\Limcak\Documents\Bluetooth
2015-04-12 13:14 - 2015-04-12 13:14 - 00449896 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswNdisFlt.sys
2015-04-12 13:14 - 2015-04-12 13:14 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-04-12 13:14 - 2015-04-12 13:14 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-30 10:20 - 2013-09-15 20:08 - 00000000 ____D () C:\Users\Limcak\AppData\Roaming\uTorrent
2015-04-30 10:12 - 2013-11-08 21:48 - 00000000 ____D () C:\Program Files\trend micro
2015-04-30 09:59 - 2013-09-15 19:41 - 02045055 _____ () C:\Windows\WindowsUpdate.log
2015-04-30 09:55 - 2009-07-14 16:18 - 00673118 _____ () C:\Windows\system32\perfh005.dat
2015-04-30 09:55 - 2009-07-14 16:18 - 00145586 _____ () C:\Windows\system32\perfc005.dat
2015-04-30 09:55 - 2009-07-14 06:13 - 01584554 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-30 09:50 - 2015-03-06 07:48 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-30 09:50 - 2013-09-16 22:05 - 00003234 _____ () C:\Windows\System32\Tasks\AIDA64 AutoStart
2015-04-30 09:50 - 2013-09-15 19:47 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-04-30 09:50 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-30 09:29 - 2013-09-15 21:53 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-30 00:02 - 2014-07-29 19:49 - 00000000 ___RD () C:\Users\Limcak\Desktop\Blbosti
2015-04-29 21:48 - 2014-06-09 18:58 - 00000000 ____D () C:\Users\Limcak\AppData\Roaming\vlc
2015-04-29 19:05 - 2014-11-13 19:38 - 00000000 ____D () C:\Users\Limcak\Documents\Assassin's Creed Unity
2015-04-29 16:10 - 2013-09-15 21:40 - 00000000 ____D () C:\Users\Limcak\AppData\Roaming\Skype
2015-04-29 15:48 - 2013-09-15 19:56 - 00000000 ____D () C:\Program Files (x86)\Google
2015-04-29 13:39 - 2013-09-15 21:40 - 00000000 ____D () C:\ProgramData\Skype
2015-04-29 12:53 - 2009-07-14 05:45 - 00014512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-29 12:53 - 2009-07-14 05:45 - 00014512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-28 15:01 - 2015-01-22 12:42 - 00003834 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1421926924
2015-04-28 14:37 - 2014-07-29 19:47 - 00000000 ___RD () C:\Users\Limcak\Desktop\Programy
2015-04-28 14:29 - 2015-03-27 10:09 - 00000000 ____D () C:\MSI
2015-04-28 14:29 - 2015-02-11 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2015-04-28 14:29 - 2015-02-11 18:17 - 00000000 ____D () C:\Program Files (x86)\MSI
2015-04-28 14:25 - 2013-09-19 19:51 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-28 09:34 - 2014-10-20 08:54 - 00000000 ____D () C:\Users\Limcak\AppData\Local\Adobe
2015-04-28 09:34 - 2013-09-15 21:53 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-28 09:34 - 2013-09-15 21:53 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-28 09:34 - 2013-09-15 21:53 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-27 08:25 - 2015-03-06 07:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-04-27 08:25 - 2015-03-06 07:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-04-24 13:42 - 2015-02-17 09:22 - 00000609 _____ () C:\Users\Limcak\Desktop\Launcher.exe – zástupce.lnk
2015-04-23 15:42 - 2015-03-17 11:09 - 00000000 ____D () C:\Users\Limcak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-04-21 08:16 - 2015-02-02 11:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-17 19:47 - 2014-11-16 12:29 - 00314503 _____ () C:\spyhunter.fix
2015-04-17 08:50 - 2015-02-24 18:51 - 00000000 ____D () C:\Users\Limcak\Documents\Rockstar Games
2015-04-17 08:49 - 2015-02-24 18:48 - 00000000 ____D () C:\Users\Limcak\AppData\Local\Rockstar Games
2015-04-17 06:49 - 2015-02-25 17:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2015-04-17 06:21 - 2013-09-15 19:52 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-15 22:11 - 2014-04-17 21:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-04-15 22:11 - 2013-09-23 19:43 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-04-15 22:11 - 2013-09-15 19:46 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-04-15 22:10 - 2002-01-01 00:04 - 00000000 ____D () C:\Temp
2015-04-15 18:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-04-14 09:37 - 2015-03-06 07:47 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-14 09:37 - 2015-03-06 07:47 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-04-14 09:37 - 2015-03-06 07:47 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-04-13 11:24 - 2013-09-15 19:39 - 00000000 ____D () C:\Users\Limcak
2015-04-13 11:23 - 2014-02-08 11:47 - 00000000 ____D () C:\Users\Limcak\AppData\Local\Mozilla
2015-04-13 11:23 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-04-13 11:23 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-04-13 11:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-13 11:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\security
2015-04-13 11:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-04-12 13:14 - 2014-08-21 18:45 - 00028144 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswKbd.sys
2015-04-12 13:14 - 2014-05-07 20:35 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-04-12 13:14 - 2014-03-19 20:17 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-04-12 13:14 - 2014-03-19 20:17 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-04-12 13:14 - 2014-03-19 20:17 - 00271200 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-04-12 13:14 - 2014-03-19 20:17 - 00136752 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-04-12 13:14 - 2014-03-19 20:17 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-04-12 13:14 - 2014-03-19 20:17 - 00088408 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-04-12 13:14 - 2014-03-19 20:17 - 00065736 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-04-12 13:14 - 2013-09-15 20:18 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-04-09 01:58 - 2015-02-11 16:52 - 12689592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-04-09 01:58 - 2014-04-17 21:03 - 17176128 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-04-09 01:58 - 2014-04-17 21:03 - 03317344 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-04-09 01:58 - 2014-04-17 21:03 - 02935416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-04-09 01:58 - 2013-09-15 19:46 - 00029329 _____ () C:\Windows\system32\nvinfo.pb
2015-04-08 22:30 - 2013-09-23 19:44 - 06841488 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-04-08 22:30 - 2013-09-23 19:44 - 03478344 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-04-08 22:30 - 2013-09-23 19:44 - 02558608 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-04-08 22:30 - 2013-09-23 19:44 - 00936264 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-04-08 22:30 - 2013-09-23 19:44 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-04-08 22:30 - 2013-09-23 19:44 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-04-08 18:52 - 2013-09-23 19:44 - 04336074 _____ () C:\Windows\system32\nvcoproc.bin

==================== Files in the root of some directories =======

2014-09-01 09:18 - 2014-09-01 09:18 - 0002086 _____ () C:\Users\Limcak\AppData\Roaming\SILII
2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\Limcak\AppData\Roaming\UFGHDD
2014-09-30 17:10 - 2014-09-30 17:10 - 0301608 _____ (VuuPC Limited) C:\Users\Limcak\AppData\Local\nsk6B04.tmp
2014-09-30 17:10 - 2014-09-30 17:10 - 0301608 _____ (VuuPC Limited) C:\Users\Limcak\AppData\Local\nsz7CBF.tmp
2014-11-06 18:02 - 2014-12-02 18:25 - 0007601 _____ () C:\Users\Limcak\AppData\Local\Resmon.ResmonCfg
2015-03-18 09:42 - 2015-03-18 09:42 - 0000041 ___SH () C:\ProgramData\.zreglib
2014-11-29 09:49 - 2014-11-29 09:49 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-04-16 20:12 - 2015-04-16 20:12 - 0000016 _____ () C:\ProgramData\mntemp
2014-11-02 19:25 - 2014-11-02 19:25 - 0012587 _____ () C:\ProgramData\mxnhytee.feu

Some content of TEMP:
====================
C:\Users\Limcak\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Limcak\AppData\Local\Temp\Social%20Club%20v1.1.5.8%20Setup.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-04-29 18:56

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (Windows 7 Ultimate) (Fixed) (Total:111.69 GB) (Free:44.06 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive f: (Filmy foto mp3) (Fixed) (Total:589.71 GB) (Free:182.88 GB) NTFS
Drive g: (Game) (Fixed) (Total:244.04 GB) (Free:17.23 GB) NTFS
Drive h: (Stazene) (Fixed) (Total:97.66 GB) (Free:19.47 GB) NTFS
Drive i: (Uloziste 1) (Fixed) (Total:930.66 GB) (Free:433.78 GB) NTFS
Drive k: (Uloziste 2) (Fixed) (Total:932.35 GB) (Free:782.7 GB) NTFS

Available physical RAM: 13318.28 MB
Total physical RAM: 16279.33 MB
Percentage of memory in use: 18%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: BDCBD41B)
Partition 1: (Active) - (Size=930.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=932.3 GB) - (Type=07 NTFS)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 024D0B3F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=244 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=97.7 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=589.7 GB) - (Type=OF Extended)
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 00062DAF)
Partition 1: (Not Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=111.7 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Windows:D2104DF750682104

==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Limcak\Desktop" je 153 MB.

***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync
"C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor
C:\Users\Limcak\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\KiesAirMessage.exe -startup [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage
C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent
"C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe" /silent [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ManyCam
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype
Rezim ECHO je vypnut.

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Limcak^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^superpc_soft_partner.lnk
C:\PROGRA~3\{86894~1\SUPERP~1.EXE /startup [x]

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000

==================== End Of Log ==============================

AUDDITION.TXT

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-04-2015 01
Ran by Limcak at 2015-04-30 10:24:32
Running from C:\Users\Limcak\Desktop
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-3450857935-816758065-830484128-500 - Administrator - Disabled)
Guest (S-1-5-21-3450857935-816758065-830484128-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3450857935-816758065-830484128-1098 - Limited - Enabled)
Limcak (S-1-5-21-3450857935-816758065-830484128-1000 - Administrator - Enabled) => C:\Users\Limcak

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

«The Sims 3 Deluxe Edition» (build 8.1) (HKLM-x32\...\«The Sims 3 Deluxe Edition»_is1) (Version: - R.G. Catalyst)
µTorrent (HKU\S-1-5-21-3450857935-816758065-830484128-1000\...\uTorrent) (Version: 3.4.3.40208 - BitTorrent Inc.)
AC3Filter 2.5b (HKLM-x32\...\AC3Filter_is1) (Version: 2.5b - Alexander Vigovsky)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
AIDA64 Extreme Edition v2.85 (HKLM-x32\...\AIDA64 Extreme Edition_is1) (Version: 2.85 - FinalWire Ltd.)
AIMP3 (HKLM-x32\...\AIMP3) (Version: v3.60.1479, 06.02.2015 - AIMP DevTeam)
Aktualizace NVIDIA 2.4.1.21 (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Alienware TactX Keyboard CI 1.10.102 (HKLM\...\{52895576-CD43-11E1-9E3F-9AF66188709B}) (Version: 1.10.102 - Alienware)
Ashampoo Burning Studio 14 v.14.0.1 (HKLM-x32\...\{91B33C97-7BCF-CDFE-4321-58EBF3E8641C}_is1) (Version: 14.0.1 - Ashampoo GmbH & Co. KG)
Ashampoo WinOptimizer 11 v.11.00.60 (HKLM-x32\...\{4209F371-8D72-8119-66FA-897D2D41E27F}_is1) (Version: 11.00.60 - Ashampoo GmbH & Co. KG)
Asmedia USB Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.23.0 - Asmedia Technology)
ASUS Xonar DG Audio Driver (HKLM\...\C-Media Oxygen HD Audio Driver) (Version: - )
Avast Premier (HKLM-x32\...\Avast) (Version: 10.2.2215 - AVAST Software)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.0.0.0 - Electronic Arts)
Call of Duty(R) - World at War(TM) (HKLM-x32\...\InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}) (Version: 1.1 - Cenega)
Call of Duty(R) - World at War(TM) (x32 Version: 1.0 - Cenega) Hidden
Call of Duty(R) - World at War(TM) 1.1 Patch (x32 Version: - ) Hidden
Call of Duty(R) - World at War(TM) 1.1 Patch (x32 Version: 1.1 - Activision) Hidden
Call of Duty(R) 2 (HKLM-x32\...\InstallShield_{D0A05794-48C2-4424-A15A-9F20FCFDD374}) (Version: 1.00.0000 - Activision)
Call of Duty(R) 2 (x32 Version: 1.00.0000 - Activision) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) (HKLM-x32\...\InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}) (Version: 1.00.0000 - Activision)
Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.00.0000 - Activision) Hidden
Call of Duty: Ghosts Update 3 (HKLM-x32\...\Q2FsbG9mRHV0eUdob3N0cw==_is1) (Version: 1 - )
COD - Advanced Warfare (HKLM-x32\...\COD - Advanced Warfare_is1) (Version: 1.2.0.4107 - Activision)
CoD 2 èeština 1.1 (HKLM-x32\...\CoD 2 èeština_is1) (Version: - #'Pan[S[al!er!)
Command Center (HKLM-x32\...\InstallShield_{AE1E0DFB-A3D9-451C-AA7F-46FD390400D4}) (Version: - )
Command Center (Version: 2.0.7.0 - Alienware Corp.) Hidden
Counter-Strike Global Offensive No-Steam (HKLM-x32\...\Counter-Strike Global Offensive_is1) (Version: 1.34.6.9 - Valve Software)
Day of Defeat (HKLM-x32\...\Steam App 30) (Version: - Valve)
Day of Defeat: Source (HKLM-x32\...\Steam App 300) (Version: - Valve)
eMule (HKLM-x32\...\eMule) (Version: - )
Fraps (HKLM-x32\...\Fraps) (Version: - )
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.2.69.5227 - Gretech Corporation)
Google Chrome (HKU\S-1-5-21-3450857935-816758065-830484128-1000\...\Google Chrome) (Version: 41.0.2272.76 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Health, safety and environment test DVD for operatives (BSL) and specialists 2014 edition (Update 2) (HKLM-x32\...\{E8E1DBC5-3E2B-4278-8056-15284CC5ADCE}_is1) (Version: 4.0 - Imagitech Ltd.)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.1.1000 - Intel Corporation)
Intel(R) Network Connections 19.3.141.0 (HKLM\...\PROSetDX) (Version: 19.3.141.0 - Intel)
Intel(R) Update Manager (HKLM-x32\...\{AD6B46F2-FE21-496F-BE90-BE19AABE353C}) (Version: 2.2.12 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.34 - Intel Corporation)
Intel® Chipset Device Software (x32 Version: 10.0.20 - Intel(R) Corporation) Hidden
IObit Unlocker (HKLM-x32\...\IObit Unlocker_is1) (Version: 1.1 - IObit)
K-Lite Codec Pack 9.3.0 (Basic) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 9.3.0 - )
Left 4 Dead 2 (HKLM-x32\...\{EBE204C8-780A-44C6-82FF-DD3F2572FFF0}_is1) (Version: 2.1.3.6 - Tolyak26)
Malwarebytes Anti-Malware verze 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
ManyCam 3.1.43 (HKLM-x32\...\ManyCam) (Version: 3.1.43 - ManyCam LLC)
Maxthon Cloud Browser (HKLM-x32\...\Maxthon3) (Version: 4.1.2.4000 - Maxthon International Limited)
Medal of Honor Warfighter v1.0.0.3 (HKLM-x32\...\{1040143F-FEFB-4B90-8E51-E47D40E14C4E}_is1) (Version: 1.0.0.3 - EA Games)
Media Plugin (HKLM-x32\...\InstallShield_{9A81C9E3-EE6E-435C-9A9A-3749D02D8C4A}) (Version: 1.0.0.11 - Alienware)
Media Plugin (x32 Version: 1.0.0.11 - Alienware) Hidden
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 37.0.2 (x86 cs) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 cs)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 4.0.0.02 - MSI)
My Program 1.5 (HKLM-x32\...\{25BEE955-F6B2-49FB-BC4E-5A79BCF3CCAA}_is1) (Version: - My Company, Inc.)
MyFreeCodec (HKU\S-1-5-21-3450857935-816758065-830484128-1000\...\MyFreeCodec) (Version: - )
NHL™ 09 (HKLM-x32\...\{827B97A9-B347-4110-9F89-37AF2B758F94}) (Version: 2.0.1.0 - Electronic Arts)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Ovladač 3D Vision 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 349.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 349.95 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Ovládací panel NVIDIA 350.12 (Version: 350.12 - NVIDIA Corporation) Hidden
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.43.321.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7293 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{BE686891-3C56-4714-AFEF-341A7867BA80}) (Version: 1.00.0145 - REALTEK Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.6 - Rockstar Games)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.0.13064_2 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.0.13064_2 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14055.3 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.14055.3 - Samsung Electronics Co., Ltd.) Hidden
Samsung Story Album Viewer (HKLM-x32\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.40.0 - SAMSUNG Electronics Co., Ltd.)
SFK Server Launcher 1.4 (HKLM-x32\...\{A567C8B4-826C-4892-98E3-9577D6D7DDE6}_is1) (Version: 1.4 - [SFK]Domingo)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Skype™ 7.4 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.4.102 - Skype Technologies S.A.)
Smart Technology Programming Software 7.0.27.13 (HKLM\...\{BD90BC1C-115D-47E1-B85C-07AE182C3AB8}) (Version: 7.0.27.13 - Mad Catz)
SSDlife Free (HKLM-x32\...\{A0E7D69C-351B-43C2-80A1-4CA528BA29C0}) (Version: 2.1.29 - BinarySense Inc.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.24951 - TeamViewer)
The Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.0.732.20 - Electronic Arts Inc.)
Total Uninstall 5.2.0 (HKLM-x32\...\Total Uninstall 5 & Power Dream_is1) (Version: - )
TuneUp Utilities 2013 (HKLM-x32\...\TuneUp Utilities 2013) (Version: 13.0.2020.9 - TuneUp Software)
TuneUp Utilities 2013 (x32 Version: 13.0.2020.9 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (en-GB) (x32 Version: 13.0.2020.9 - TuneUp Software) Hidden
Tunngle (HKLM-x32\...\Tunngle_is1) (Version: Tunngle - Tunngle.net GmbH)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
USB Video Device (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10256 - Realtek Semiconductor Corp.)
VIA Platform Device Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Watch_Dogs (HKLM-x32\...\{9L5FE86L-0D8I-4HJ7-HKY5-DRTKE3G6QG2X}_is1) (Version: 1.05.324 - Ubisoft)
Windows 7 Codec Pack 4.0.8 (HKLM-x32\...\Windows 7 - Codec Pack) (Version: 4.0.8 - Windows 7 Codec Pack)
WinRAR 4.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Wolfenstein - The New Order (HKLM-x32\...\Wolfenstein - The New Order_is1) (Version: 1.0.0.1 - Bethesda Softworks)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3450857935-816758065-830484128-1000_Classes\CLSID\{71B1723C-1EC2-4b4d-868E-FA58C7F95CD9}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

==================== Restore Points =========================

28-04-2015 14:30:30 Odinstalováno v Total Uninstall "Command Center"
29-04-2015 13:03:16 Odinstalováno v Total Uninstall "Opera Stable 29.0.1795.47"

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2015-01-20 12:17 - 00450827 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.iobit.com
127.0.0.1 www.asc55.iobit.com
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com

There are 1000 more lines.

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {10F44B05-99A6-4740-BDC2-E184F57DEA0D} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {16CCB081-60A5-4282-A6F6-EA8AF5CF02FE} - System32\Tasks\ASUS\TurboVHelp => C:\Program Files (x86)\ASUS\TurboV EVO\TurboVHELP.exe
Task: {29BAB5D8-A5E3-48DD-83AB-8A64B7117CB2} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_pepper.exe [2015-04-28] (Adobe Systems Incorporated)
Task: {34F4C56A-BDAD-43B0-80B3-5ED8757D4B94} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe [2012-09-19] (TuneUp Software)
Task: {4868E7D2-2FCD-49CF-98E4-B6E1B7B9E1E6} - System32\Tasks\Adobe online aktualizační program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {581E33D2-928E-4EE3-B74F-0DD20B5CC728} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-28] (Adobe Systems Incorporated)
Task: {5BE4BE12-4EB1-43E4-8B51-C73DD6C84A97} - System32\Tasks\avastBCLRestartS-1-5-21-3450857935-816758065-830484128-1000 => Firefox.exe
Task: {5C243F87-FF80-4411-9330-8258A8FFEB28} - System32\Tasks\{877C6AD2-AD49-410A-9FD1-A5FF73885B5F} => pcalua.exe -a C:\Users\Limcak\Downloads\STRIKE5_keyboard_7_0_32_87_x64_Drivers.exe -d C:\Users\Limcak\Downloads
Task: {716B4A02-0FA6-480E-91A9-A80C789BAE92} - System32\Tasks\Maxthon Update => C:\Program Files (x86)\Maxthon\Bin\mxup.exe [2014-12-11] (Maxthon International ltd.)
Task: {8147584C-8D26-46B2-BD53-204890A04FAB} - System32\Tasks\AIDA64 AutoStart => C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\aida64.exe [2013-03-26] (FinalWire Ltd.)
Task: {910FFA01-2C61-4B9F-92BF-9081DB50B31F} - System32\Tasks\Driver Booster SkipUAC (Limcak) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {AC95A88E-DD7C-4772-9122-38237772C7AD} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-01-17] ()
Task: {AF7B1DAC-DA39-4A4C-A324-0C87EFBD5C48} - System32\Tasks\Opera scheduled Autoupdate 1421926924 => C:\Program Files (x86)\Opera\launcher.exe
Task: {BCEBBBD1-8288-4AF4-811A-40691146D0E3} - System32\Tasks\TweakBit\PCSupportBar\Start PCSupportBar оn Limcak logon => C:\Program Files (x86)\TweakBit\PCSupportBar\PCSupportBar.exe
Task: {CBD8238C-BEA8-43E4-9831-537834474DD3} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {F25594B6-82CD-44C1-ACEE-0F78297698D5} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-01-17] ()
Task: {FD26B7EA-B327-485A-A1B3-42D360DD89A4} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-04-12] (Avast Software s.r.o.)
Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) ==============

2013-09-16 19:40 - 2015-04-08 22:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2010-01-30 03:40 - 2010-01-30 03:40 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2013-10-15 14:04 - 2015-02-24 14:48 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-04-12 13:14 - 2015-04-12 13:14 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-12 13:14 - 2015-04-12 13:14 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-04-30 08:49 - 2015-04-30 08:49 - 02926592 _____ () C:\Program Files\AVAST Software\Avast\defs\15043000\algo.dll
2013-11-15 17:13 - 2013-11-15 17:13 - 00031568 _____ () C:\Windows\assembly\GAC_MSIL\Alienlabs.CommandCenter.Tools\1.0.49.0__bebb3c8816410241\Alienlabs.CommandCenter.Tools.dll
2013-11-15 17:13 - 2013-11-15 17:13 - 00073520 _____ () C:\Windows\assembly\GAC_MSIL\AlienLabsTools\1.0.49.0__bebb3c8816410241\AlienLabsTools.dll
2013-11-15 17:13 - 2013-11-15 17:13 - 00024896 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.DeviceDiscovery\1.0.51.0__bebb3c8816410241\AlienFX.DeviceDiscovery.dll
2013-11-15 17:13 - 2013-11-15 17:13 - 00019784 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.Communication.Core\1.0.51.0__bebb3c8816410241\AlienFX.Communication.Core.dll
2013-11-15 17:13 - 2013-11-15 17:13 - 00014144 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.Communication\1.0.51.0__bebb3c8816410241\AlienFX.Communication.dll
2013-11-15 17:13 - 2013-11-15 17:13 - 00024392 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.Communication.XPS\1.0.51.0__bebb3c8816410241\AlienFX.Communication.XPS.dll
2013-11-15 17:13 - 2013-11-15 17:13 - 00027984 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.Communication.PID0x516\1.0.51.0__bebb3c8816410241\AlienFX.Communication.PID0x516.dll
2013-11-15 17:13 - 2013-11-15 17:13 - 00027472 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.Communication.PID0x515\1.0.51.0__bebb3c8816410241\AlienFX.Communication.PID0x515.dll
2013-11-15 17:13 - 2013-11-15 17:13 - 00035664 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.Communication.PID0x512\1.0.51.0__bebb3c8816410241\AlienFX.Communication.PID0x512.dll
2013-11-15 17:13 - 2013-11-15 17:13 - 00036688 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.Communication.PID0x511\1.0.51.0__bebb3c8816410241\AlienFX.Communication.PID0x511.dll
2015-04-14 09:50 - 2015-03-28 04:45 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-03-19 17:25 - 2015-03-19 17:25 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2010-01-30 03:41 - 2010-01-30 03:41 - 04254560 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2013-02-12 09:31 - 2013-02-12 09:31 - 01241088 _____ () C:\Program Files (x86)\ManyCam\Bin\opencv_imgproc220.dll
2013-02-12 09:31 - 2013-02-12 09:31 - 02010624 _____ () C:\Program Files (x86)\ManyCam\Bin\opencv_core220.dll
2015-03-17 11:09 - 2015-02-28 02:56 - 01174856 _____ () C:\Users\Limcak\AppData\Local\Google\Chrome\Application\41.0.2272.76\libglesv2.dll
2015-03-17 11:09 - 2015-02-28 02:56 - 00080200 _____ () C:\Users\Limcak\AppData\Local\Google\Chrome\Application\41.0.2272.76\libegl.dll
2015-03-17 11:09 - 2015-02-28 02:56 - 09279304 _____ () C:\Users\Limcak\AppData\Local\Google\Chrome\Application\41.0.2272.76\pdf.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Windows:D2104DF750682104

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

There are 11403 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3450857935-816758065-830484128-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Limcak\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.254

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: AMD External Events Utility => 2
MSCONFIG\Services: GlobalUpdater => 2
MSCONFIG\Services: grrHgoFbvY => 2
MSCONFIG\Services: MBAMScheduler => 2
MSCONFIG\Services: MBAMService => 2
MSCONFIG\Services: Realtek87B => 2
MSCONFIG\Services: SProtection => 2
MSCONFIG\Services: SpyHunter 4 Service => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\startupfolder: C:^Users^Limcak^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^superpc_soft_partner.lnk => C:\Windows\pss\superpc_soft_partner.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: GrooveMonitor =>
MSCONFIG\startupreg: KiesAirMessage => C:\Users\Limcak\AppData\Roaming\Samsung\Kies\UpdateTemp\Sub\KiesAirMessage.exe -startup
MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: ManyCam => "C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe" /silent
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [{56D522A4-FC03-4F89-87AC-20803B75193A}] => (Allow) C:\Users\Limcak\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{A46741EE-936A-41C1-9463-73440C67AFF0}] => (Allow) C:\Users\Limcak\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{BA0BBCCB-E318-4078-B5C8-B7112F315C2D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{CE3EF601-92C8-4777-ADFC-5227EBB7B811}] => (Allow) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
FirewallRules: [{ED48393E-1F62-4490-9011-DFA883C60B74}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{A1A71735-7226-404D-8111-CB2B72A05E0E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{7C631FAC-B824-4A2E-975C-CC4A9787D6B8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{0B2FBC88-084F-458B-B4CF-69331846001B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{7517CAD8-6A28-4FC3-A171-3F829606B06C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{97B786C7-0897-4D99-81DD-0D63F6EA57AF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{A4A83684-54EB-476F-A341-252EDEA385E6}G:\hry\call of duty black ops2\call of duty black ops 2\sp.exe] => (Block) G:\hry\call of duty black ops2\call of duty black ops 2\sp.exe
FirewallRules: [UDP Query User{CF214311-5F1C-431A-B1A3-C005F7458A6B}G:\hry\call of duty black ops2\call of duty black ops 2\sp.exe] => (Block) G:\hry\call of duty black ops2\call of duty black ops 2\sp.exe
FirewallRules: [{91285493-8945-4BF3-9399-7549765B3FBA}] => (Allow) G:\Hry\call of duty world at war\CoDWaW.exe
FirewallRules: [{CA208533-1CC9-4D45-9F0F-E481A2CE1DE1}] => (Allow) G:\Hry\call of duty world at war\CoDWaW.exe
FirewallRules: [{1443F523-B7FA-468B-93B6-49E4701BE1D7}] => (Allow) G:\Hry\call of duty world at war\CoDWaWmp.exe
FirewallRules: [{7D97006B-015F-408C-833D-37972FCEF1A5}] => (Allow) G:\Hry\call of duty world at war\CoDWaWmp.exe
FirewallRules: [TCP Query User{D07A4303-E5CB-4711-A849-262FD7D3980F}G:\hry\call of duty black ops1\blackops.exe] => (Block) G:\hry\call of duty black ops1\blackops.exe
FirewallRules: [UDP Query User{1C480C1A-FA70-40A1-AEF4-90A327DB71B2}G:\hry\call of duty black ops1\blackops.exe] => (Block) G:\hry\call of duty black ops1\blackops.exe
FirewallRules: [{041108EE-9C9F-438C-8AF0-33C3D69E3AE2}] => (Allow) G:\Hry\call of duty 4\iw3mp.exe
FirewallRules: [{84F88FE6-21C4-4ECD-9731-E83B9D45CEFC}] => (Allow) G:\Hry\call of duty 4\iw3mp.exe
FirewallRules: [TCP Query User{B97201D9-665D-4976-9184-0D8D6FDF50B8}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe
FirewallRules: [UDP Query User{EB4DE667-C9B7-41BA-9D7D-339A408CBA75}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe
FirewallRules: [{1F9DE28E-D401-4784-AF35-29043610214D}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe
FirewallRules: [{7DA9ABD9-79A3-4692-BA26-149C1D209921}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
FirewallRules: [{9A2FDB74-E5CC-4228-AB02-069A81716788}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe
FirewallRules: [{410A7CB3-5CA7-4544-BDA2-661B63F66468}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
FirewallRules: [TCP Query User{BB10AB74-6268-4794-A4FD-9A7D9EF43ECF}G:\hry\steam\steamapps\common\day of defeat source\hl2.exe] => (Allow) G:\hry\steam\steamapps\common\day of defeat source\hl2.exe
FirewallRules: [UDP Query User{6CA1620E-6CDE-48DD-AA17-1A0FFF611B41}G:\hry\steam\steamapps\common\day of defeat source\hl2.exe] => (Allow) G:\hry\steam\steamapps\common\day of defeat source\hl2.exe
FirewallRules: [TCP Query User{B9E2CAB7-1A87-42CD-A414-87F14630E18B}G:\hry\steam\steamapps\common\half-life\hl.exe] => (Allow) G:\hry\steam\steamapps\common\half-life\hl.exe
FirewallRules: [UDP Query User{2A144C5B-EC75-4660-BC83-92C6855252E3}G:\hry\steam\steamapps\common\half-life\hl.exe] => (Allow) G:\hry\steam\steamapps\common\half-life\hl.exe
FirewallRules: [{4BAB9784-2086-493D-BD0C-CC527F284194}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{D1AEC763-2E61-46B3-BC8A-3490052EB48E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{CF07BB12-062E-4656-9D47-98585AF0A6AE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{B0918066-28A6-42B8-A4F8-AA744916CF15}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{DC929F9F-8E32-472A-AF4A-ED2A9E196D54}] => (Allow) G:\Hry\Battlefield 4\Battlefield 4\bf4_x86.exe
FirewallRules: [{3EF50FF1-F5AC-48D6-8189-F9B1C73F3CAB}] => (Allow) G:\Hry\Battlefield 4\Battlefield 4\bf4_x86.exe
FirewallRules: [{32460B20-BC3C-4F3F-869E-23E082522458}] => (Allow) G:\Hry\Battlefield 4\Battlefield 4\bf4.exe
FirewallRules: [{238C1266-ECAB-4936-BB81-F07DCBD0B625}] => (Allow) G:\Hry\Battlefield 4\Battlefield 4\bf4.exe
FirewallRules: [{36317870-6B87-41BB-9C91-E080A030DCF4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{93FB6571-358C-4D6D-9DD3-7FEA1653822A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{3494BD22-26F3-4FA4-9FEE-9117807D3615}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{9566C8FC-1E24-48B2-9EFA-CF93C7E92CFF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{311F8735-40D0-4888-933D-E92CA265B118}] => (Allow) LPort=8743
FirewallRules: [{E3EC00FE-1AAD-418D-A735-07E88D21CD9B}] => (Allow) LPort=8643
FirewallRules: [{426BC073-7F58-471C-AEA5-16F2B05A10FE}] => (Allow) LPort=7676
FirewallRules: [{0F969177-4C98-4323-9D2E-6890712749F5}] => (Allow) LPort=7679
FirewallRules: [{91433420-28E4-4F3F-B606-2C4387C74AEB}] => (Allow) LPort=24234
FirewallRules: [{384B54CA-4A43-4E52-ACEB-4915AEEC51E9}] => (Allow) LPort=7900
FirewallRules: [{4FB2B788-FC2B-4045-94C6-B3D6E69C7152}] => (Allow) LPort=1900
FirewallRules: [{0130700B-C8CE-4280-A8BE-34E5C0530460}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{1CF0D014-928D-411C-BE58-D9A695DA0FF8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4BD2CF30-C82B-494A-A2EF-B7CF8F7E2C41}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{C0E3042E-52D2-4EE9-8E62-6AD3B9D48793}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{BC95843F-8CAB-4D2F-BB39-64526303E60E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{1FE3F6D4-B2BA-4B71-B1B8-49C458E74C5A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{C2315BC7-B816-41AC-B1B6-0F974F4C0DC8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{9AAC1E74-C2A6-4B2F-8656-8F75161339E6}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{BB1209F0-7521-4A3E-8132-48BBA549C279}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{F822DEB6-45B0-4181-BD74-BC996474DC86}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{4D7054FB-1B23-4FED-BF51-F4989AF9B954}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{B83DA2DB-7C85-4DD2-B824-2ECBEB64D7BD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{019C2658-6D4A-40D6-A9E3-400388A5E7DC}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{A7BA6B05-994E-4FC8-883A-B3158B5D247E}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{6AA08F8C-EA03-4411-9A1F-283EF398DDD9}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{C8EE7C8C-90B2-433B-9288-8371D2ED0BEA}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{F7DDD6F1-9A84-429A-96E1-827C4656EE0D}] => (Allow) C:\Program Files\Microsoft Office\Office14\GROOVE.EXE
FirewallRules: [{9367113F-4C60-4420-80B8-93BEE3C61000}] => (Allow) C:\Program Files\Microsoft Office\Office14\GROOVE.EXE
FirewallRules: [{BA44D1FA-45C4-452E-8BF2-2C2F09A68FC8}] => (Allow) C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE
FirewallRules: [{5262A774-8026-4B2B-A714-69045A0D7FF9}] => (Allow) C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE
FirewallRules: [{4B0E81AC-8FDF-470D-A8DA-FE3C94485D46}] => (Allow) C:\Program Files\Microsoft Office\Office14\outlook.exe
FirewallRules: [{7E35272B-B4B7-4C13-8CF7-F454EF8BAF95}] => (Allow) C:\Users\Limcak\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{84196119-4BF1-4BEB-9864-BBD320280E42}] => (Allow) C:\Users\Limcak\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{811B1BC7-320F-4EB2-A675-72723DBD3AC9}C:\program files (x86)\maxthon\bin\maxthon.exe] => (Allow) C:\program files (x86)\maxthon\bin\maxthon.exe
FirewallRules: [UDP Query User{D315E9CD-67F9-4C2C-9799-DDFA3233919F}C:\program files (x86)\maxthon\bin\maxthon.exe] => (Allow) C:\program files (x86)\maxthon\bin\maxthon.exe
FirewallRules: [{6815D611-472B-4339-A41D-1C580C19F89F}] => (Allow) C:\Program Files (x86)\Realtek\RTL8187B Wireless LAN Utility\RtWLan.exe
FirewallRules: [{3BE6153F-B140-4FF5-BCF0-C7E53FAB4EBC}] => (Allow) C:\Program Files (x86)\Realtek\RTL8187B Wireless LAN Utility\RtWLan.exe
FirewallRules: [{D2E1CFE3-9707-4BD5-8033-E952FC9A976F}] => (Allow) LPort=1542
FirewallRules: [{F1070B2D-53AD-494A-80E7-FA0AE6D28C6B}] => (Allow) LPort=1542
FirewallRules: [{2B4CD6FE-44E1-4EF5-A4DF-2F8E3A166236}] => (Allow) LPort=53
FirewallRules: [TCP Query User{756D8E8E-9EC2-48C0-90CA-E3A0890DB218}G:\hry\call of duty black ops2\call of duty black ops 2\sp.exe] => (Block) G:\hry\call of duty black ops2\call of duty black ops 2\sp.exe
FirewallRules: [UDP Query User{6ABFF827-B246-4606-8570-56E1F2DB99B4}G:\hry\call of duty black ops2\call of duty black ops 2\sp.exe] => (Block) G:\hry\call of duty black ops2\call of duty black ops 2\sp.exe
FirewallRules: [TCP Query User{D119A24D-F050-46C0-B3B7-06779237785D}G:\hry\steam\steamapps\common\half-life\hl.exe] => (Allow) G:\hry\steam\steamapps\common\half-life\hl.exe
FirewallRules: [UDP Query User{A534BA9D-713E-4CB7-A99A-5BFCDA964B32}G:\hry\steam\steamapps\common\half-life\hl.exe] => (Allow) G:\hry\steam\steamapps\common\half-life\hl.exe
FirewallRules: [{FF34CED3-AC07-4308-A6B4-27F04E4872FA}] => (Allow) G:\Hry\Steam\SteamApps\common\Day of Defeat Source\hl2.exe
FirewallRules: [{C880DB13-D281-4129-B6C1-4AE83DF05462}] => (Allow) G:\Hry\Steam\SteamApps\common\Day of Defeat Source\hl2.exe
FirewallRules: [TCP Query User{D9DB6C55-6505-4623-B990-97DA4E224DD3}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe
FirewallRules: [UDP Query User{0C604105-CEF4-4D10-ADAE-C58469AF3125}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe
FirewallRules: [TCP Query User{96CDFED7-23F8-4FA8-AB3C-2762255A642D}G:\hry\wolfn\wolfenstein - the new order\wolfneworder_x64.exe] => (Block) G:\hry\wolfn\wolfenstein - the new order\wolfneworder_x64.exe
FirewallRules: [UDP Query User{E961AFC1-06BF-4333-8892-4D7318DAAC69}G:\hry\wolfn\wolfenstein - the new order\wolfneworder_x64.exe] => (Block) G:\hry\wolfn\wolfenstein - the new order\wolfneworder_x64.exe
FirewallRules: [TCP Query User{E9C47C44-C56F-4A20-8F00-55830CF9D807}C:\program files\windows sidebar\sidebar.exe] => (Allow) C:\program files\windows sidebar\sidebar.exe
FirewallRules: [UDP Query User{BD94D630-7779-41FC-B6A0-43B2193AC5A9}C:\program files\windows sidebar\sidebar.exe] => (Allow) C:\program files\windows sidebar\sidebar.exe
FirewallRules: [TCP Query User{5CB346D6-365A-4C97-8585-022730483EC5}G:\hry\battlefield 4\battlefield 4\bf4.exe] => (Block) G:\hry\battlefield 4\battlefield 4\bf4.exe
FirewallRules: [UDP Query User{A3C5045A-A6C9-4996-AE88-FD5FDD1EB30F}G:\hry\battlefield 4\battlefield 4\bf4.exe] => (Block) G:\hry\battlefield 4\battlefield 4\bf4.exe
FirewallRules: [{3B7F4F75-2BD8-47EE-BFFB-78B774526F2A}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{94356844-E9E3-4689-8280-55A351CD0300}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{AF59DF8F-22CF-4C68-BED7-B323F1E186A7}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{D874F6AF-9C81-4C75-8155-BDF123D131A1}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{6E544C32-395C-4D57-8701-B17770F53684}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{96160EC8-8738-40B8-8628-F85F94B1C1A3}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{C7D1C0FF-DB61-4CF3-912A-12051C16D196}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{C7EB3CEE-DC1D-4163-B341-512F29BA0526}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{88EF7148-D5A5-4CD7-8238-CFD16CBE92DC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E9640557-1D22-400C-ABCB-34253323E183}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{60AD07CC-01B8-406C-A981-D9D8A12EF46C}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{EB49FF06-B723-4258-8FE2-C47832F66B3C}] => (Allow) I:\hry\sims 4\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{6B9A8FB4-ADDB-488F-B78F-96EB3F16BE4F}] => (Allow) I:\hry\sims 4\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{B0723857-A81F-4012-8461-99899B56EEAC}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{1D15DC77-F80A-4712-B159-87BAE10893FC}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{4F110BB8-0378-4CBE-8A58-2A566353F14B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C2A36FFD-6A7A-427B-B340-F6C1EFF5A615}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{3003895D-F3FE-444F-B995-1DB4B88244DE}] => (Allow) C:\Users\Limcak\AppData\Local\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{4CBEB82A-A2E5-4EEE-9A31-C4F685703242}I:\hry\gta 5\gta5.exe] => (Block) I:\hry\gta 5\gta5.exe
FirewallRules: [UDP Query User{06AFE207-28EA-4F67-88FD-FC45CA52BF16}I:\hry\gta 5\gta5.exe] => (Block) I:\hry\gta 5\gta5.exe
FirewallRules: [TCP Query User{1BF9144E-7A7C-4451-B932-335881E98F36}I:\hry\counter 3\counter-strike global offensive\csgo.exe] => (Allow) I:\hry\counter 3\counter-strike global offensive\csgo.exe
FirewallRules: [UDP Query User{90AF2AEE-85BB-42C7-B830-F781511D5379}I:\hry\counter 3\counter-strike global offensive\csgo.exe] => (Allow) I:\hry\counter 3\counter-strike global offensive\csgo.exe
FirewallRules: [TCP Query User{0C461474-A81B-42A5-B215-1ADDF489B55B}I:\hry\left 4\left 4 dead 2\left4dead2.exe] => (Allow) I:\hry\left 4\left 4 dead 2\left4dead2.exe
FirewallRules: [UDP Query User{B89CD4EF-84F3-4DA5-B9C4-6A8847548FB0}I:\hry\left 4\left 4 dead 2\left4dead2.exe] => (Allow) I:\hry\left 4\left 4 dead 2\left4dead2.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (04/29/2015 00:43:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: GTA5.exe, verze: 1.0.323.1, časové razítko: 0x5527f187
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x000000027fb2272e
ID chybujícího procesu: 0x411c
Čas spuštění chybující aplikace: 0xGTA5.exe0
Cesta k chybující aplikaci: GTA5.exe1
Cesta k chybujícímu modulu: GTA5.exe2
ID zprávy: GTA5.exe3

Error: (04/29/2015 00:12:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: GTA5.exe, verze: 1.0.323.1, časové razítko: 0x5527f187
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x000000027fb0272e
ID chybujícího procesu: 0x49a4
Čas spuštění chybující aplikace: 0xGTA5.exe0
Cesta k chybující aplikaci: GTA5.exe1
Cesta k chybujícímu modulu: GTA5.exe2
ID zprávy: GTA5.exe3

Error: (04/28/2015 02:41:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program opera.exe verze 29.0.1795.47 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 11a8

Čas spuštění: 01d081b8fbab15ad

Čas ukončení: 2

Cesta k aplikaci: C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe

ID hlášení: 4044b55d-edac-11e4-816d-d8cb8a18a608

Error: (04/28/2015 02:39:44 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program opera.exe verze 29.0.1795.47 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 1408

Čas spuštění: 01d081b8bc4eacac

Čas ukončení: 2

Cesta k aplikaci: C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe

ID hlášení: 0682dbed-edac-11e4-816d-d8cb8a18a608

Error: (04/28/2015 02:28:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: CommandCenter.exe, verze: 1.0.0.92, časové razítko: 0x54f7eea9
Název chybujícího modulu: KERNELBASE.dll, verze: 6.1.7601.18409, časové razítko: 0x53159a86
Kód výjimky: 0xe0434352
Posun chyby: 0x0000c42d
ID chybujícího procesu: 0x494
Čas spuštění chybující aplikace: 0xCommandCenter.exe0
Cesta k chybující aplikaci: CommandCenter.exe1
Cesta k chybujícímu modulu: CommandCenter.exe2
ID zprávy: CommandCenter.exe3

Error: (04/28/2015 02:28:07 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: CommandCenter.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.Reflection.TargetInvocationException
Zásobník:
na System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)
na System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)
na System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)
na System.Windows.Application.LoadBamlStreamWithSyncInfo(System.IO.Stream, System.Windows.Markup.ParserContext)
na System.Windows.Application.LoadComponent(System.Uri, Boolean)
na System.Windows.Application.DoStartup()
na System.Windows.Application.<.ctor>b__1(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.DispatcherOperation.InvokeImpl()
na System.Windows.Threading.DispatcherOperation.InvokeInSecurityContext(System.Object)
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
na System.Windows.Threading.DispatcherOperation.Invoke()
na System.Windows.Threading.Dispatcher.ProcessQueue()
na System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
na System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
na System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame)
na System.Windows.Threading.Dispatcher.Run()
na System.Windows.Application.RunDispatcher(System.Object)
na System.Windows.Application.RunInternal(System.Windows.Window)
na System.Windows.Application.Run(System.Windows.Window)
na CommandCenter.App.Main()

Error: (04/28/2015 02:26:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: CommandCenter.exe, verze: 1.0.0.92, časové razítko: 0x54f7eea9
Název chybujícího modulu: KERNELBASE.dll, verze: 6.1.7601.18409, časové razítko: 0x53159a86
Kód výjimky: 0xe0434352
Posun chyby: 0x0000c42d
ID chybujícího procesu: 0x1b68
Čas spuštění chybující aplikace: 0xCommandCenter.exe0
Cesta k chybující aplikaci: CommandCenter.exe1
Cesta k chybujícímu modulu: CommandCenter.exe2
ID zprávy: CommandCenter.exe3

Error: (04/28/2015 02:26:55 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: CommandCenter.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.Reflection.TargetInvocationException
Zásobník:
na System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)
na System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)
na System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)
na System.Windows.Application.LoadBamlStreamWithSyncInfo(System.IO.Stream, System.Windows.Markup.ParserContext)
na System.Windows.Application.LoadComponent(System.Uri, Boolean)
na System.Windows.Application.DoStartup()
na System.Windows.Application.<.ctor>b__1(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.DispatcherOperation.InvokeImpl()
na System.Windows.Threading.DispatcherOperation.InvokeInSecurityContext(System.Object)
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
na System.Windows.Threading.DispatcherOperation.Invoke()
na System.Windows.Threading.Dispatcher.ProcessQueue()
na System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
na System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
na System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame)
na System.Windows.Threading.Dispatcher.Run()
na System.Windows.Application.RunDispatcher(System.Object)
na System.Windows.Application.RunInternal(System.Windows.Window)
na System.Windows.Application.Run(System.Windows.Window)
na CommandCenter.App.Main()

Error: (04/28/2015 02:22:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: CommandCenter.exe, verze: 1.0.0.92, časové razítko: 0x54f7eea9
Název chybujícího modulu: KERNELBASE.dll, verze: 6.1.7601.18409, časové razítko: 0x53159a86
Kód výjimky: 0xe0434352
Posun chyby: 0x0000c42d
ID chybujícího procesu: 0x34e4
Čas spuštění chybující aplikace: 0xCommandCenter.exe0
Cesta k chybující aplikaci: CommandCenter.exe1
Cesta k chybujícímu modulu: CommandCenter.exe2
ID zprávy: CommandCenter.exe3

Error: (04/28/2015 02:22:47 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: CommandCenter.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.Reflection.TargetInvocationException
Zásobník:
na System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)
na System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)
na System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)
na System.Windows.Application.LoadBamlStreamWithSyncInfo(System.IO.Stream, System.Windows.Markup.ParserContext)
na System.Windows.Application.LoadComponent(System.Uri, Boolean)
na System.Windows.Application.DoStartup()
na System.Windows.Application.<.ctor>b__1(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.DispatcherOperation.InvokeImpl()
na System.Windows.Threading.DispatcherOperation.InvokeInSecurityContext(System.Object)
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
na System.Windows.Threading.DispatcherOperation.Invoke()
na System.Windows.Threading.Dispatcher.ProcessQueue()
na System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
na System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
na System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame)
na System.Windows.Threading.Dispatcher.Run()
na System.Windows.Application.RunDispatcher(System.Object)
na System.Windows.Application.RunInternal(System.Windows.Window)
na System.Windows.Application.Run(System.Windows.Window)
na CommandCenter.App.Main()

System errors:
=============
Error: (04/30/2015 09:50:08 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
AsIO

Error: (04/30/2015 09:49:14 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Windows Media Player Network Sharing byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (04/30/2015 09:49:14 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba VIA Karaoke digital mixer Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (04/30/2015 09:49:14 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba TuneUp Utilities Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (04/30/2015 09:49:14 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba StarWind AE Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (04/30/2015 09:49:14 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba PnkBstrA byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (04/30/2015 09:49:14 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba NVIDIA Streamer Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (04/30/2015 09:49:14 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba NVIDIA Network Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (04/30/2015 09:49:14 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba MBAMService byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (04/30/2015 09:49:14 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba MBAMScheduler byla neočekávaně ukončena. Tento stav nastal již 1krát.

Microsoft Office Sessions:
=========================
Error: (04/29/2015 00:43:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: GTA5.exe1.0.323.15527f187unknown0.0.0.000000000c0000005000000027fb2272e411c01d0826d5d4be0a6I:\hry\gta 5\GTA5.exeunknowne40d0828-ee64-11e4-93e0-d8cb8a18a608

Error: (04/29/2015 00:12:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: GTA5.exe1.0.323.15527f187unknown0.0.0.000000000c0000005000000027fb0272e49a401d0826316dcb35dI:\hry\gta 5\GTA5.exeunknown93a2a090-ee60-11e4-93e0-d8cb8a18a608

Error: (04/28/2015 02:41:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: opera.exe29.0.1795.4711a801d081b8fbab15ad2C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe4044b55d-edac-11e4-816d-d8cb8a18a608

Error: (04/28/2015 02:39:44 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: opera.exe29.0.1795.47140801d081b8bc4eacac2C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe0682dbed-edac-11e4-816d-d8cb8a18a608

Error: (04/28/2015 02:28:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: CommandCenter.exe1.0.0.9254f7eea9KERNELBASE.dll6.1.7601.1840953159a86e04343520000c42d49401d081b728f55919C:\Program Files (x86)\MSI\Command Center\CommandCenter.exeC:\Windows\syswow64\KERNELBASE.dll677488f7-edaa-11e4-8726-d8cb8a18a608

Error: (04/28/2015 02:28:07 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: CommandCenter.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.Reflection.TargetInvocationException
Zásobník:
na System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)
na System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)
na System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)
na System.Windows.Application.LoadBamlStreamWithSyncInfo(System.IO.Stream, System.Windows.Markup.ParserContext)
na System.Windows.Application.LoadComponent(System.Uri, Boolean)
na System.Windows.Application.DoStartup()
na System.Windows.Application.<.ctor>b__1(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.DispatcherOperation.InvokeImpl()
na System.Windows.Threading.DispatcherOperation.InvokeInSecurityContext(System.Object)
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
na System.Windows.Threading.DispatcherOperation.Invoke()
na System.Windows.Threading.Dispatcher.ProcessQueue()
na System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
na System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
na System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame)
na System.Windows.Threading.Dispatcher.Run()
na System.Windows.Application.RunDispatcher(System.Object)
na System.Windows.Application.RunInternal(System.Windows.Window)
na System.Windows.Application.Run(System.Windows.Window)
na CommandCenter.App.Main()

Error: (04/28/2015 02:26:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: CommandCenter.exe1.0.0.9254f7eea9KERNELBASE.dll6.1.7601.1840953159a86e04343520000c42d1b6801d081b6fdd9dda3C:\Program Files (x86)\MSI\Command Center\CommandCenter.exeC:\Windows\syswow64\KERNELBASE.dll3d7e57ed-edaa-11e4-8726-d8cb8a18a608

Error: (04/28/2015 02:26:55 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: CommandCenter.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.Reflection.TargetInvocationException
Zásobník:
na System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)
na System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)
na System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)
na System.Windows.Application.LoadBamlStreamWithSyncInfo(System.IO.Stream, System.Windows.Markup.ParserContext)
na System.Windows.Application.LoadComponent(System.Uri, Boolean)
na System.Windows.Application.DoStartup()
na System.Windows.Application.<.ctor>b__1(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.DispatcherOperation.InvokeImpl()
na System.Windows.Threading.DispatcherOperation.InvokeInSecurityContext(System.Object)
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
na System.Windows.Threading.DispatcherOperation.Invoke()
na System.Windows.Threading.Dispatcher.ProcessQueue()
na System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
na System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
na System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame)
na System.Windows.Threading.Dispatcher.Run()
na System.Windows.Application.RunDispatcher(System.Object)
na System.Windows.Application.RunInternal(System.Windows.Window)
na System.Windows.Application.Run(System.Windows.Window)
na CommandCenter.App.Main()

Error: (04/28/2015 02:22:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: CommandCenter.exe1.0.0.9254f7eea9KERNELBASE.dll6.1.7601.1840953159a86e04343520000c42d34e401d081b66a44435dC:\Program Files (x86)\MSI\Command Center\CommandCenter.exeC:\Windows\syswow64\KERNELBASE.dllaa35cd57-eda9-11e4-9149-d8cb8a18a608

Error: (04/28/2015 02:22:47 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: CommandCenter.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.Reflection.TargetInvocationException
Zásobník:
na System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)
na System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)
na System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)
na System.Windows.Application.LoadBamlStreamWithSyncInfo(System.IO.Stream, System.Windows.Markup.ParserContext)
na System.Windows.Application.LoadComponent(System.Uri, Boolean)
na System.Windows.Application.DoStartup()
na System.Windows.Application.<.ctor>b__1(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.DispatcherOperation.InvokeImpl()
na System.Windows.Threading.DispatcherOperation.InvokeInSecurityContext(System.Object)
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
na System.Windows.Threading.DispatcherOperation.Invoke()
na System.Windows.Threading.Dispatcher.ProcessQueue()
na System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
na System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
na System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame)
na System.Windows.Threading.Dispatcher.Run()
na System.Windows.Application.RunDispatcher(System.Object)
na System.Windows.Application.RunInternal(System.Windows.Window)
na System.Windows.Application.Run(System.Windows.Window)
na CommandCenter.App.Main()

CodeIntegrity Errors:
===================================
Date: 2015-03-06 11:16:29.039
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume8\Windows\System32\drivers\ViaHub3.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-03-06 11:16:28.995
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume8\Windows\System32\drivers\ViaHub3.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-03-06 11:08:58.015
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume8\Windows\System32\drivers\ViaHub3.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-03-06 11:08:57.971
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume8\Windows\System32\drivers\ViaHub3.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-03-06 11:07:19.133
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume8\Windows\System32\drivers\ViaHub3.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-03-06 11:07:19.102
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume8\Windows\System32\drivers\ViaHub3.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-03-16 18:25:14.598
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-03-16 18:25:14.597
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-03-16 18:25:14.596
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-03-16 18:25:14.593
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-5820K CPU @ 3.30GHz
Percentage of memory in use: 18%
Total physical RAM: 16279.33 MB
Available physical RAM: 13318.28 MB
Total Pagefile: 32556.85 MB
Available Pagefile: 29353.89 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Windows 7 Ultimate) (Fixed) (Total:111.69 GB) (Free:44.06 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive f: (Filmy foto mp3) (Fixed) (Total:589.71 GB) (Free:182.88 GB) NTFS
Drive g: (Game) (Fixed) (Total:244.04 GB) (Free:17.23 GB) NTFS
Drive h: (Stazene) (Fixed) (Total:97.66 GB) (Free:19.47 GB) NTFS
Drive i: (Uloziste 1) (Fixed) (Total:930.66 GB) (Free:433.78 GB) NTFS
Drive k: (Uloziste 2) (Fixed) (Total:932.35 GB) (Free:782.7 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: BDCBD41B)
Partition 1: (Active) - (Size=930.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=932.3 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 024D0B3F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=244 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=97.7 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=589.7 GB) - (Type=OF Extended)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 00062DAF)
Partition 1: (Not Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=111.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Kdyz vidim TuneUp Utilities 2013 a Ashampoo WinOptimizer, vstavaji mi vlasy hruzou... Mejte jejich opravy plne pod kontrolou (v nejlepsim pripade je odinstalujte).

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu bude na plose ulozen fixlog, jehoz obsah mi vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKU\S-1-5-21-3450857935-816758065-830484128-1000\...\MountPoints2: {8273ef40-77a2-11e4-b2e2-806e6f6e6963} - D:\setup.exe
HKU\S-1-5-21-3450857935-816758065-830484128-1000\...\MountPoints2: {a88b3e18-59d4-11e4-9ee2-14dae903247a} - P:\LaunchU3.exe -a
HKU\S-1-5-21-3450857935-816758065-830484128-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION 
HKU\S-1-5-18\...\Policies\system: [DisableLockWorkstation] 0
AppInit_DLLs: (x86)\GS => (x86)\GS File Not Found
IFEO\AcroRd32.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\ccleaner64.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\earegister.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\excel.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\groove.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\infopath.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\install.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\iobitunlocker.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\iumsvc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\misc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\msaccess.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\msigamingapp.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\msoxmled.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\mspub.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\mstore.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\nhl2009.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\ois.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\onenote.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\outlook.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\sgamingapp.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\skype.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\teamviewer.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\tunngle.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\unins000.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\winword.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\wo11.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
BootExecute: autocheck autochk * sh4native Sh4Removal
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-3450857935-816758065-830484128-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-3450857935-816758065-830484128-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3450857935-816758065-830484128-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

FF SelectedSearchEngine: ICQ Search
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF SearchPlugin: C:\Users\Limcak\AppData\Roaming\Mozilla\Firefox\Profiles\o040zwg2.default\searchplugins\icqplugin.gif [2015-03-12]
FF SearchPlugin: C:\Users\Limcak\AppData\Roaming\Mozilla\Firefox\Profiles\o040zwg2.default\searchplugins\icqplugin.src [2015-03-12]

CHR StartupUrls: Default -> "hxxp://www.google.co.uk/", "hxxp://taplika.com/?f=7&a=tpl_tuto14_15_08&cd=2XzuyEtN2Y1L1Qzu0Dzz0C0Bzz0AtCzz0AyCtDzz0EyDyB0AtN0D0Tzu0StCtCyEtAtN1L2XzutAtFyBtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StC0AtCyDtDyCyDtDtGtBzzyCyDtG0DyCtDyCtGtCtCtD0EtGtCyE0ByDyCzztD0EyDtAyDyD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0ByCtBtBzztBzzzztGyC0ByCtDtGyEtBtBtDtGzztDyD0AtG0Fzy0D0AtDyE0Bzzzyzz0F0F2Q&cr=332724201&ir=", "hxxp://start.iminent.com/?appId=A3A965F2-BD47-4FD5-96DB-75472DCD7CDC"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - No Path Or update_url value
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - No Path Or update_url value

S4 SpyHunter 4 Service; C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe [770432 2014-01-09] (Enigma Software Group USA, LLC.)
C:\Program Files (x86)\Enigma Software Group
S1 AsIO; SysWow64\drivers\AsIO.sys [X]
S3 cpuz130; \??\C:\Users\Limcak\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]
S3 cpuz137; \??\C:\Users\Limcak\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

2015-04-30 10:20 - 2015-04-30 10:20 - 00112640 _____ (forum.viry.cz) C:\Users\Limcak\Desktop\FRSTLauncher.exe
2015-04-30 10:12 - 2015-04-30 10:12 - 00111523 _____ () C:\Users\Limcak\Downloads\Nepotvrzeno 660277.crdownload
2015-04-30 09:47 - 2015-04-30 09:49 - 00000000 ____D () C:\AdwCleaner
2015-04-30 09:47 - 2015-04-30 09:47 - 02224640 _____ () C:\Users\Limcak\Desktop\adwcleaner_4.202.exe
2015-04-30 08:46 - 2015-04-30 08:46 - 00000000 ____D () C:\rsit
2015-04-30 08:45 - 2015-04-30 08:45 - 01222144 _____ () C:\Users\Limcak\Desktop\RSITx64.exe
2015-04-30 10:12 - 2013-11-08 21:48 - 00000000 ____D () C:\Program Files\trend micro
2015-04-17 19:47 - 2014-11-16 12:29 - 00314503 _____ () C:\spyhunter.fix
2014-11-29 09:49 - 2014-11-29 09:49 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-04-16 20:12 - 2015-04-16 20:12 - 0000016 _____ () C:\ProgramData\mntemp
2014-11-02 19:25 - 2014-11-02 19:25 - 0012587 _____ () C:\ProgramData\mxnhytee.feu
2014-09-30 17:10 - 2014-09-30 17:10 - 0301608 _____ (VuuPC Limited) C:\Users\Limcak\AppData\Local\nsk6B04.tmp
2014-09-30 17:10 - 2014-09-30 17:10 - 0301608 _____ (VuuPC Limited) C:\Users\Limcak\AppData\Local\nsz7CBF.tmp

DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Limcak^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^superpc_soft_partner.lnk

Task: {34F4C56A-BDAD-43B0-80B3-5ED8757D4B94} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe [2012-09-19] (TuneUp Software)
Task: {5C243F87-FF80-4411-9330-8258A8FFEB28} - System32\Tasks\{877C6AD2-AD49-410A-9FD1-A5FF73885B5F} => pcalua.exe -a C:\Users\Limcak\Downloads\STRIKE5_keyboard_7_0_32_87_x64_Drivers.exe -d C:\Users\Limcak\Downloads
Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_pepper.exe
AlternateDataStreams: C:\Windows:D2104DF750682104

DisableService: SpyHunter 4 Service
DisableService: grrHgoFbvY

Folder: C:\Users\Limcak\AppData\Roaming\SILII
Folder: C:\Users\Limcak\AppData\Roaming\UFGHDD
EmptyTemp:
End

Hotovo

jak to vypada? je tam jeste neco? Jste super moc Vam dekuji!!!!!!!

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-04-2015 01
Ran by Limcak at 2015-04-30 11:03:50 Run:1
Running from C:\Users\Limcak\Desktop
Loaded Profiles: Limcak (Available profiles: Limcak)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKU\S-1-5-21-3450857935-816758065-830484128-1000\...\MountPoints2: {8273ef40-77a2-11e4-b2e2-806e6f6e6963} - D:\setup.exe
HKU\S-1-5-21-3450857935-816758065-830484128-1000\...\MountPoints2: {a88b3e18-59d4-11e4-9ee2-14dae903247a} - P:\LaunchU3.exe -a
HKU\S-1-5-21-3450857935-816758065-830484128-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-18\...\Policies\system: [DisableLockWorkstation] 0
AppInit_DLLs: (x86)\GS => (x86)\GS File Not Found
IFEO\AcroRd32.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\ccleaner64.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\earegister.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\excel.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\groove.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\infopath.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\install.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\iobitunlocker.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\iumsvc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\misc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\msaccess.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\msigamingapp.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\msoxmled.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\mspub.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\mstore.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\nhl2009.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\ois.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\onenote.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\outlook.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\sgamingapp.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\skype.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\teamviewer.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\tunngle.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\unins000.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\winword.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\wo11.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
BootExecute: autocheck autochk * sh4native Sh4Removal
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-3450857935-816758065-830484128-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3450857935-816758065-830484128-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKU\S-1-5-21-3450857935-816758065-830484128-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

FF SelectedSearchEngine: ICQ Search
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF SearchPlugin: C:\Users\Limcak\AppData\Roaming\Mozilla\Firefox\Profiles\o040zwg2.default\searchplugins\icqplugin.gif [2015-03-12]
FF SearchPlugin: C:\Users\Limcak\AppData\Roaming\Mozilla\Firefox\Profiles\o040zwg2.default\searchplugins\icqplugin.src [2015-03-12]

CHR StartupUrls: Default -> "hxxp://www.google.co.uk/", "hxxp://taplika.com/?f=7&a=tpl_tuto14_15_08&cd=2XzuyEtN2Y1L1Qzu0Dzz0C0Bzz0AtCzz0AyCtDzz0EyDyB0AtN0D0Tzu0StCtCyEtAtN1L2XzutAtFyBtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StC0AtCyDtDyCyDtDtGtBzzyCyDtG0DyCtDyCtGtCtCtD0EtGtCyE0ByDyCzztD0EyDtAyDyD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0ByCtBtBzztBzzzztGyC0ByCtDtGyEtBtBtDtGzztDyD0AtG0Fzy0D0AtDyE0Bzzzyzz0F0F2Q&cr=332724201&ir=", "hxxp://start.iminent.com/?appId=A3A965F2-BD47-4FD5-96DB-75472DCD7CDC"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - No Path Or update_url value
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - No Path Or update_url value

S4 SpyHunter 4 Service; C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe [770432 2014-01-09] (Enigma Software Group USA, LLC.)
C:\Program Files (x86)\Enigma Software Group
S1 AsIO; SysWow64\drivers\AsIO.sys [X]
S3 cpuz130; \??\C:\Users\Limcak\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]
S3 cpuz137; \??\C:\Users\Limcak\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

2015-04-30 10:20 - 2015-04-30 10:20 - 00112640 _____ (forum.viry.cz) C:\Users\Limcak\Desktop\FRSTLauncher.exe
2015-04-30 10:12 - 2015-04-30 10:12 - 00111523 _____ () C:\Users\Limcak\Downloads\Nepotvrzeno 660277.crdownload
2015-04-30 09:47 - 2015-04-30 09:49 - 00000000 ____D () C:\AdwCleaner
2015-04-30 09:47 - 2015-04-30 09:47 - 02224640 _____ () C:\Users\Limcak\Desktop\adwcleaner_4.202.exe
2015-04-30 08:46 - 2015-04-30 08:46 - 00000000 ____D () C:\rsit
2015-04-30 08:45 - 2015-04-30 08:45 - 01222144 _____ () C:\Users\Limcak\Desktop\RSITx64.exe
2015-04-30 10:12 - 2013-11-08 21:48 - 00000000 ____D () C:\Program Files\trend micro
2015-04-17 19:47 - 2014-11-16 12:29 - 00314503 _____ () C:\spyhunter.fix
2014-11-29 09:49 - 2014-11-29 09:49 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-04-16 20:12 - 2015-04-16 20:12 - 0000016 _____ () C:\ProgramData\mntemp
2014-11-02 19:25 - 2014-11-02 19:25 - 0012587 _____ () C:\ProgramData\mxnhytee.feu
2014-09-30 17:10 - 2014-09-30 17:10 - 0301608 _____ (VuuPC Limited) C:\Users\Limcak\AppData\Local\nsk6B04.tmp
2014-09-30 17:10 - 2014-09-30 17:10 - 0301608 _____ (VuuPC Limited) C:\Users\Limcak\AppData\Local\nsz7CBF.tmp

DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Limcak^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^superpc_soft_partner.lnk

Task: {34F4C56A-BDAD-43B0-80B3-5ED8757D4B94} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe [2012-09-19] (TuneUp Software)
Task: {5C243F87-FF80-4411-9330-8258A8FFEB28} - System32\Tasks\{877C6AD2-AD49-410A-9FD1-A5FF73885B5F} => pcalua.exe -a C:\Users\Limcak\Downloads\STRIKE5_keyboard_7_0_32_87_x64_Drivers.exe -d C:\Users\Limcak\Downloads
Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_pepper.exe
AlternateDataStreams: C:\Windows:D2104DF750682104

DisableService: SpyHunter 4 Service
DisableService: grrHgoFbvY

Folder: C:\Users\Limcak\AppData\Roaming\SILII
Folder: C:\Users\Limcak\AppData\Roaming\UFGHDD
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\NvBackend => value deleted successfully.
"HKU\S-1-5-21-3450857935-816758065-830484128-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8273ef40-77a2-11e4-b2e2-806e6f6e6963}" => Key deleted successfully.
HKCR\CLSID\{8273ef40-77a2-11e4-b2e2-806e6f6e6963} => Key not found.
"HKU\S-1-5-21-3450857935-816758065-830484128-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a88b3e18-59d4-11e4-9ee2-14dae903247a}" => Key deleted successfully.
HKCR\CLSID\{a88b3e18-59d4-11e4-9ee2-14dae903247a} => Key not found.
HKU\S-1-5-21-3450857935-816758065-830484128-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => value deleted successfully.
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Policies\system\\DisableLockWorkstation => value deleted successfully.
"(x86)\GS" => Value Data not found.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\AcroRd32.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\ccleaner64.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\earegister.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\excel.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\groove.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\infopath.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\install.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\iobitunlocker.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\iumsvc.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\misc.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\msaccess.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\msigamingapp.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\msoxmled.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\mspub.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\mstore.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\nhl2009.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\ois.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\onenote.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\outlook.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\powerpnt.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\sgamingapp.exe" => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\skype.exe => Key not found.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\teamviewer.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\tunngle.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\unins000.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\winword.exe" => Key deleted successfully.
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\wo11.exe" => Key deleted successfully.
HKLM\System\CurrentControlSet\Control\Session Manager\\BootExecute => Value was restored successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
"HKU\S-1-5-21-3450857935-816758065-830484128-1000\SOFTWARE\Policies\Google" => Key deleted successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKU\S-1-5-21-3450857935-816758065-830484128-1000\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKU\S-1-5-21-3450857935-816758065-830484128-1000\Software\Microsoft\Internet Explorer\Main\\Search Bar => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
Firefox SelectedSearchEngine deleted successfully.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
C:\Users\Limcak\AppData\Roaming\Mozilla\Firefox\Profiles\o040zwg2.default\searchplugins\icqplugin.gif => Moved successfully.
C:\Users\Limcak\AppData\Roaming\Mozilla\Firefox\Profiles\o040zwg2.default\searchplugins\icqplugin.src => Moved successfully.
Chrome StartupUrls deleted successfully.
Chrome DefaultSuggestURL deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck" => Key deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki" => Key deleted successfully.
SpyHunter 4 Service => Service deleted successfully.
C:\Program Files (x86)\Enigma Software Group => Moved successfully.
AsIO => Service deleted successfully.
cpuz130 => Service deleted successfully.
cpuz137 => Service deleted successfully.
MSICDSetup => Service deleted successfully.
NTIOLib_1_0_C => Service deleted successfully.
Synth3dVsc => Service deleted successfully.
tsusbhub => Service deleted successfully.
VBoxNetFlt => Service deleted successfully.
VGPU => Service deleted successfully.
C:\Users\Limcak\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\Limcak\Downloads\Nepotvrzeno 660277.crdownload => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Limcak\Desktop\adwcleaner_4.202.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Users\Limcak\Desktop\RSITx64.exe => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\spyhunter.fix => Moved successfully.
C:\ProgramData\DP45977C.lfl => Moved successfully.
C:\ProgramData\mntemp => Moved successfully.
C:\ProgramData\mxnhytee.feu => Moved successfully.
C:\Users\Limcak\AppData\Local\nsk6B04.tmp => Moved successfully.
C:\Users\Limcak\AppData\Local\nsz7CBF.tmp => Moved successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM => Key Deleted successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync => Key Deleted successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite => Key Deleted successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor => Key Deleted successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Limcak^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^superpc_soft_partner.lnk => Key Deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{34F4C56A-BDAD-43B0-80B3-5ED8757D4B94}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F4C56A-BDAD-43B0-80B3-5ED8757D4B94}" => Key deleted successfully.
C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TuneUpUtilities_Task_BkGndMaintenance2013" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5C243F87-FF80-4411-9330-8258A8FFEB28}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5C243F87-FF80-4411-9330-8258A8FFEB28}" => Key deleted successfully.
C:\Windows\System32\Tasks\{877C6AD2-AD49-410A-9FD1-A5FF73885B5F} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{877C6AD2-AD49-410A-9FD1-A5FF73885B5F}" => Key deleted successfully.
C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => Moved successfully.
C:\Windows => ":D2104DF750682104" ADS removed successfully.
SpyHunter 4 Service service key not found.
grrHgoFbvY service key not found.

========================= Folder: C:\Users\Limcak\AppData\Roaming\SILII ========================

The path is not a directory.

========================= Folder: C:\Users\Limcak\AppData\Roaming\UFGHDD ========================

The path is not a directory.
EmptyTemp: => Removed 1.1 GB temporary data.

The system needed a reboot.

==== End of Fixlog 11:04:09 ====

Jak se chova PC?

Vytvorte jeste jeden fixlist.txt, znovu spustte FRST a kliknete na Fix. Obsah fixlogu opet vlozte.

Kód: Vybrat vše

Start
File: C:\Users\Limcak\AppData\Roaming\SILII
File: C:\Users\Limcak\AppData\Roaming\UFGHDD
End

pc se chova v pohode ale to i pred tim. jen google chrome byl linej

ted je mnohem sviznejsi a otvira strany mnohem rychleji!!!! je to poznat!!!!!! jen posledni dota- nemuzu aktualizovat chrome uz asi pul roku a nevim co s tim

ale pokud to nevadi tak to preziju.
pokud je vse ok tak moc moc dekuji za vas cas a ochotu

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-04-2015 01
Ran by Limcak at 2015-04-30 11:19:32 Run:3
Running from C:\Users\Limcak\Desktop
Loaded Profiles: Limcak (Available profiles: Limcak)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
File: C:\Users\Limcak\AppData\Roaming\SILII
File: C:\Users\Limcak\AppData\Roaming\UFGHDD
End
*****************

========================= File: C:\Users\Limcak\AppData\Roaming\SILII ========================

MD5: A851DC6302D6DCA9EFCC4C38A7942163
Creation and modification date: 2014-09-01 09:18 - 2014-09-01 09:18
Size: 0002086
Attributes: ----A
Company Name:
Internal Name:
Original Name:
Product Name:
Description:
File Version:
Product Version:
Copyright:

====== End Of File: ======

========================= File: C:\Users\Limcak\AppData\Roaming\UFGHDD ========================

MD5: 2AC2F800B480349D2357E6A9AC72766B
Creation and modification date: 2014-09-01 09:18 - 2014-09-01 09:18
Size: 0001248
Attributes: ----A
Company Name:
Internal Name:
Original Name:
Product Name:
Description:
File Version:
Product Version:
Copyright:

====== End Of File: ======

==== End of Fixlog 11:19:32 ====

Oba zkoumane soubory

C:\Users\Limcak\AppData\Roaming\SILII
C:\Users\Limcak\AppData\Roaming\UFGHDD

jsou trojske kone, takze je smazte.

Problem s aktualizacemi chromu by mohlo vyresit jeho preinstalovani - zazalohujte zalozky a hesla napr. pomoci http://www.stahuj.centrum.cz/internet_a ... me-backup/ , odinstalujte jej vcetne profilu a pak nanovo nainstalujte.

Takze jeste uklidime.

Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
Oznacte jen moznost "Remove disinfection tools"
kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

Diky moc ty dva soubory jsem nasel a smazal.
Chrome slape jak hodinky a je to sakra rozdil

moc diky a preji hezky den

Nemate zac, rad jsem pomohl

Mejte se krasne a treba zase nekdy

VIRY.CZ

Prosim o kontrolu. Pomalej google chrome.

Prosim o kontrolu. Pomalej google chrome.

Re: Prosim o kontrolu. Pomalej google chrome.

Re: Prosim o kontrolu. Pomalej google chrome.

Re: Prosim o kontrolu. Pomalej google chrome.

Re: Prosim o kontrolu. Pomalej google chrome.

Re: Prosim o kontrolu. Pomalej google chrome.

Re: Prosim o kontrolu. Pomalej google chrome.

Re: Prosim o kontrolu. Pomalej google chrome.

Re: Prosim o kontrolu. Pomalej google chrome.

Re: Prosim o kontrolu. Pomalej google chrome.

Re: Prosim o kontrolu. Pomalej google chrome.

Re: Prosim o kontrolu. Pomalej google chrome.

Re: Prosim o kontrolu. Pomalej google chrome.