VIRY.CZ

Dobrý den,
kolegyně si při hledání nějakých obrázků pro děti nainstalovala na NTB nějaký add-ware, zahlédl jsem ve správci úloh jakýsi cpuminer, a možná i něco horšího, šlo by to prosím zkontrolovat?
Zde log z RSIT:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Ludek at 2015-07-01 10:30:14
Microsoft Windows 8.1
System drive C: has 818 GB (87%) free of 943 GB
Total RAM: 6043 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:30:15, on 1. 7. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Internet Speed Checker\500f21e6-fb65-45f7-97d9-05928bd260a8-10.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Ludek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Ludek\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - Global Startup: ISCTSystray.lnk = C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office10\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dell Data Vault (DellDataVault) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DellDataVault.exe
O23 - Service: Dell Data Vault Wizard (DellDataVaultWiz) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
O23 - Service: Dell Digital Delivery Service (DellDigitalDelivery) - Dell Products, LP. - c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Wireless Bluetooth(R) 4.0 Radio Management - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
O23 - Service: Intel(R) Smart Connect Technology Agent (ISCTAgent) - Unknown owner - c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - CyberLink - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: StartMenu8 Service (StartMenuService) - IObit - C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: Dell SupportAssist Agent (SupportAssistAgent) - Dell Inc. - C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 11812 bytes

======Listing Processes======





wininit.exe


C:\Windows\system32\lsass.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Windows\system32\nvvsvc.exe"
"dwm.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\igfxCUIService.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SENDINPUT
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\WLANExt.exe 155275885536
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
dashost.exe {1aaa6b3d-caa3-4cae-8d2623d4d38f0d09}
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"c:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe"
"c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
taskhostex.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
taskeng.exe {FF0954ED-E6F6-496F-A3A2-C474053CE177}
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files (x86)\Internet Speed Checker\500f21e6-fb65-45f7-97d9-05928bd260a8-10.exe" /rawdata=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
"C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe"
"C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe"
/QuitInfo:0000000000000794;000000000000070C;
/loadhooks /Parent:0000000000000e5c
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe"
"C:\Program Files (x86)\IObit\Start Menu 8\InstallServices64.exe" /HotCorners
"C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe"
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
igfxEM.exe
igfxHK.exe
igfxTray.exe
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX5
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /IM
"C:\Program Files\Dell\QuickSet\quickset.exe"
"C:\Windows\System32\rundll32.exe" "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
"C:\Program Files\Dell\DellDataVault\DellDataVault.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" a3bbf18a-cbe9-4428-8669-29f1f60bcf82 1
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe 0x4
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files\Dell\SupportAssist\uaclauncher.exe" -silentenumeration -st SystemToolsDailyTest --ignoresecondarysplash --runsilently
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2180.0.1070620265\887986524" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,21,44 --gpu-vendor-id=0x8086 --gpu-device-id=0x0a16 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.14.4170 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="AffiliationBasedMatching/Enabled/*AutofillEnabled/Default/BackgroundRendererProcesses/AllowBelowNormalFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Stable_HQPDemotion_HUPDecay_Control_V2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_53/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_01/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/WebRTC-UDPSocketNonBlockingIO/Default/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=2180 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --channel="2180.2.649007727\217653779" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*AffiliationBasedMatching/Enabled/*AutofillEnabled/Default/*BackgroundRendererProcesses/AllowBelowNormalFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*IconNTP/Default/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Stable_HQPDemotion_HUPDecay_Control_V2/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoId/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group3/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_53/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_02/*UMA-Uniformity-Trial-5-Percent/group_01/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultEnabled/*VoiceTrigger/Install/*WebRTC-IPv6Default/Enabled/WebRTC-UDPSocketNonBlockingIO/Default/*Win32kLockdown/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=2180 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --channel="2180.6.671968425\684942699" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="2180.7.1953294773\1723537034" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702

"C:\Windows\system32\taskmgr.exe" /4

C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Ludek\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\500f21e6-fb65-45f7-97d9-05928bd260a8-10_user.job - C:\Program Files (x86)\Internet Speed Checker\500f21e6-fb65-45f7-97d9-05928bd260a8-10.exe /rawdata=X2lzIT00v0o7VdamTU9sdNs71vqGoaBjK9+HLkTO9rISzT5KXFh6GY1/6qFADMRINtiSw25nNG/njdf0XMCdY+UNCuu7g32LlRTOlK5WzVcJjZZ41lB6fuS8X2oRSXU5pLWUmHki/1BOOSRtuMsUQAiOsydgBSQZXsUEcUhZXRAgB1TFYZccPwNAPGG8splFL4b8CTlsdbq+InaHnO5Sz/H0g3T6L2HXl1VXpBv2FZSoETr+mXRM/izXoSTEKQRlaV7vm1+Z3/P4jhX+rvFqM4k2U/8WqrB6kwqLrj3NsVeh5q955hhOU61lGa5JO9GyYyZA0AsInztrOwSmaAR9TIj0tJN8Nm1uE/wXgTl51FLCv0PtiFPtltkuseh+vmfsH+55e07u8eGqLLKMZtL7aVTgH4eb2PA4kkOXUMEu8/FmBrJqlYtnCzxbpl5cPtCLgNdNDJZd5wWSKDQTIFLtKlpmGYIRfELQbXREr3YYwJeB9gPRhvFLBwBOeXla8LF1kkC7yqjpVo6taSFdBH8CQ1wDwXZE2etlamrilwpvvxE8MHTDsrq7wyYp8W2b8UjNGnupW4+YuEK6YZ9FRXYH1doWVEdGBj1pkPxjGXn1M5wr9BazApun+nT1iKR5VU84/2VimbNS0kZ1u9dr1XeXsGn0oG3+0qBbPlYZv03/4TNMZ2cjmRsau5ki92sPyF1ujrZj0praqkQG6SEua3lyHGjCSQ9P1ixPej0pF1TWn3OyTbrG9gw6EMcTVImbA+g8r3y8+ImpEingg4oMSyHwasV3utbVZsJyFngyqhHTieBT2xQVsso2zaoO8J4cqp+ZAKnol7K6Evg6hnQp6lSVWw==
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-210948584-2097966066-3895709302-1002Core.job - C:\Users\Ludek\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-210948584-2097966066-3895709302-1002UA.job - C:\Users\Ludek\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /c
C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-22 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-22 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-12-07 7506136]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-11-13 1368792]
"RtHDVBg_PushButton"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-11-13 1368792]
"QuickSet"=c:\Program Files\Dell\QuickSet\QuickSet.exe [2013-08-23 3760456]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-30 36352]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2015-03-19 393480]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-06-03 1571696]
"BTMTrayAgent"=C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [2013-05-21 7830328]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-06-03 2754704]
"gpuminer"=C:\Users\Ludek\AppData\Roaming\cpuminer\sgminer\sgminer.cmd [2015-05-02 96]
"cpuminer"=C:\Windows\system32\cpuminer-gw64.exe [2015-06-16 1413400]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"=C:\Users\Ludek\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-10-31 138096]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-01-23 31087200]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-04-30 334896]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-06-24 5515496]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
ISCTSystray.lnk - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
Microsoft Office.lnk - C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-07-01 10:22:12 ----D---- C:\Program Files\trend micro
2015-07-01 10:22:11 ----D---- C:\rsit
2015-06-24 14:14:14 ----HDC---- C:\ProgramData\{8AF32939-989B-460A-8726-CA2C776032A1}
2015-06-24 11:48:08 ----A---- C:\Windows\system32\WiFiDisplay.dll
2015-06-24 11:48:08 ----A---- C:\Windows\system32\shell32.dll
2015-06-24 11:48:06 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-06-24 11:48:05 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2015-06-24 11:48:05 ----A---- C:\Windows\system32\ExplorerFrame.dll
2015-06-24 11:47:57 ----A---- C:\Windows\SYSWOW64\GeofenceMonitorService.dll
2015-06-24 11:47:57 ----A---- C:\Windows\system32\profsvc.dll
2015-06-24 11:47:57 ----A---- C:\Windows\system32\GeofenceMonitorService.dll
2015-06-24 11:47:57 ----A---- C:\Windows\system32\drivers\bthport.sys
2015-06-24 11:47:56 ----A---- C:\Windows\SYSWOW64\WSShared.dll
2015-06-24 11:47:56 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-06-24 11:47:56 ----A---- C:\Windows\system32\WSShared.dll
2015-06-24 11:47:56 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-06-24 11:47:55 ----A---- C:\Windows\system32\drivers\usb8023.sys
2015-06-24 11:47:43 ----A---- C:\Windows\system32\sppsvc.exe
2015-06-24 11:47:42 ----A---- C:\Windows\system32\sppwinob.dll
2015-06-24 11:47:42 ----A---- C:\Windows\system32\sppobjs.dll
2015-06-24 11:47:00 ----A---- C:\Windows\system32\fhcpl.dll
2015-06-24 11:46:59 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-06-24 11:46:53 ----A---- C:\Windows\system32\msftedit.dll
2015-06-24 11:46:52 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2015-06-24 11:46:33 ----A---- C:\Windows\system32\apphelp.dll
2015-06-24 11:46:20 ----A---- C:\Windows\SYSWOW64\Windows.Data.Pdf.dll
2015-06-24 11:46:20 ----A---- C:\Windows\system32\Windows.Data.Pdf.dll
2015-06-24 11:46:20 ----A---- C:\Windows\system32\SystemEventsBrokerServer.dll
2015-06-24 11:40:04 ----D---- C:\Users\Ludek\AppData\Roaming\AVAST Software
2015-06-24 11:38:51 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2015-06-24 11:38:51 ----A---- C:\Windows\system32\drivers\aswStm.sys
2015-06-24 11:38:51 ----A---- C:\Windows\system32\drivers\aswsp.sys
2015-06-24 11:38:51 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2015-06-24 11:38:51 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2015-06-24 11:38:51 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2015-06-24 11:38:51 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2015-06-24 11:38:51 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2015-06-24 11:38:50 ----A---- C:\Windows\system32\aswBoot.exe
2015-06-24 11:38:44 ----A---- C:\Windows\avastSS.scr
2015-06-24 11:34:09 ----D---- C:\Program Files\AVAST Software
2015-06-24 11:32:41 ----D---- C:\ProgramData\AVAST Software
2015-06-24 11:21:15 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-06-24 11:21:12 ----D---- C:\Windows\SYSWOW64\NV
2015-06-24 11:21:12 ----D---- C:\Windows\system32\NV
2015-06-24 11:17:59 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2015-06-24 11:17:59 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2015-06-24 11:17:59 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2015-06-24 11:17:59 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2015-06-24 11:17:59 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2015-06-24 11:17:59 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2015-06-24 11:17:59 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2015-06-24 11:17:59 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2015-06-24 11:17:59 ----A---- C:\Windows\system32\nvwgf2umx.dll
2015-06-24 11:17:59 ----A---- C:\Windows\system32\nvopencl.dll
2015-06-24 11:17:59 ----A---- C:\Windows\system32\nvoglv64.dll
2015-06-24 11:17:59 ----A---- C:\Windows\system32\nvoglshim64.dll
2015-06-24 11:17:59 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2015-06-24 11:17:59 ----A---- C:\Windows\system32\NvIFR64.dll
2015-06-24 11:17:59 ----A---- C:\Windows\system32\NvFBC64.dll
2015-06-24 11:17:59 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2015-06-24 11:17:59 ----A---- C:\Windows\system32\nvdispgenco6435330.dll
2015-06-24 11:17:59 ----A---- C:\Windows\system32\nvdispco6435330.dll
2015-06-24 11:17:59 ----A---- C:\Windows\system32\nvd3dumx.dll
2015-06-24 11:17:59 ----A---- C:\Windows\system32\nvcuvid.dll
2015-06-24 11:17:59 ----A---- C:\Windows\system32\nvcuda.dll
2015-06-24 11:17:59 ----A---- C:\Windows\system32\drivers\nvpciflt.sys
2015-06-24 11:17:59 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2015-06-24 11:17:58 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2015-06-24 11:17:58 ----A---- C:\Windows\system32\nvcompiler.dll
2015-06-24 10:53:21 ----D---- C:\Program Files (x86)\c46ff653-186f-448d-849e-e74998788fd1
2015-06-24 10:53:11 ----D---- C:\Program Files (x86)\Internet Speed Checker
2015-06-22 16:56:00 ----D---- C:\Program Files (x86)\Seznam.cz
2015-06-22 16:55:11 ----D---- C:\Users\Ludek\AppData\Roaming\Seznam.cz
2015-06-22 16:54:39 ----D---- C:\Users\Ludek\AppData\Roaming\cpuminer
2015-06-22 16:53:49 ----D---- C:\Program Files (x86)\globalUpdate
2015-06-22 16:52:40 ----D---- C:\ProgramData\PC-Doctor for Windows
2015-06-22 16:52:34 ----D---- C:\Program Files\Dell Support Center
2015-06-22 16:44:52 ----D---- C:\ProgramData\{74b3eeb2-acf0-a82f-74b3-3eeb2acfbaca}
2015-06-16 23:39:02 ----A---- C:\Windows\system32\cpuminer-gw64.exe
2015-06-11 12:57:33 ----D---- C:\Program Files\CCleaner
2015-06-11 12:46:59 ----D---- C:\Users\Ludek\AppData\Roaming\LibreOffice
2015-06-11 12:40:03 ----D---- C:\Program Files (x86)\LibreOffice 4
2015-06-11 12:01:04 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2015-06-11 12:01:03 ----A---- C:\Windows\system32\nvdispgenco6435306.dll
2015-06-11 12:01:02 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2015-06-11 12:01:02 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2015-06-11 12:01:02 ----A---- C:\Windows\system32\nvdispco6435306.dll
2015-06-11 11:51:42 ----D---- C:\ProgramData\boost_interprocess
2015-06-11 11:51:40 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2015-06-11 11:51:40 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2015-06-11 11:38:06 ----D---- C:\Program Files\Common Files\Intel
2015-06-11 11:38:04 ----D---- C:\Program Files (x86)\Cisco
2015-06-11 10:38:46 ----A---- C:\Windows\system32\generaltel.dll
2015-06-11 10:38:46 ----A---- C:\Windows\system32\appraiser.dll
2015-06-11 10:38:46 ----A---- C:\Windows\system32\aepic.dll
2015-06-11 10:38:46 ----A---- C:\Windows\system32\aeinv.dll
2015-06-11 10:38:45 ----A---- C:\Windows\system32\invagent.dll
2015-06-11 10:38:45 ----A---- C:\Windows\system32\devinv.dll
2015-06-11 10:38:45 ----A---- C:\Windows\system32\aepdu.dll
2015-06-11 10:38:45 ----A---- C:\Windows\system32\acmigration.dll
2015-06-11 10:38:41 ----A---- C:\Windows\system32\wuaueng.dll
2015-06-11 10:38:41 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-06-11 10:38:40 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-06-11 10:38:40 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-06-11 10:38:40 ----A---- C:\Windows\system32\wuwebv.dll
2015-06-11 10:38:40 ----A---- C:\Windows\system32\wudriver.dll
2015-06-11 10:38:40 ----A---- C:\Windows\system32\wucltux.dll
2015-06-11 10:38:40 ----A---- C:\Windows\system32\wuauclt.exe
2015-06-11 10:38:40 ----A---- C:\Windows\system32\wuapi.dll
2015-06-11 10:38:39 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-06-11 10:38:39 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2015-06-11 10:38:39 ----A---- C:\Windows\system32\wups.dll
2015-06-11 10:38:39 ----A---- C:\Windows\system32\wuapp.exe
2015-06-11 10:38:38 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-06-11 10:38:37 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-06-11 10:38:30 ----A---- C:\Windows\system32\UtcResources.dll
2015-06-11 10:38:30 ----A---- C:\Windows\system32\diagtrack.dll
2015-06-09 20:29:30 ----A---- C:\Windows\system32\win32k.sys
2015-06-09 20:19:50 ----A---- C:\Windows\system32\mshtml.dll
2015-06-09 20:19:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-06-09 20:19:47 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-06-09 20:19:47 ----A---- C:\Windows\system32\wininet.dll
2015-06-09 20:19:47 ----A---- C:\Windows\system32\jscript9.dll
2015-06-09 20:19:46 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-06-09 20:19:46 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-06-09 20:19:46 ----A---- C:\Windows\system32\iertutil.dll
2015-06-09 20:19:46 ----A---- C:\Windows\system32\ieframe.dll
2015-06-09 20:19:45 ----A---- C:\Windows\system32\urlmon.dll
2015-06-09 20:19:42 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-06-09 20:19:40 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-06-09 20:19:40 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-06-09 20:19:39 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-06-09 20:19:39 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-06-09 20:19:39 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-06-09 20:19:39 ----A---- C:\Windows\system32\vbscript.dll
2015-06-09 20:19:39 ----A---- C:\Windows\system32\msfeeds.dll
2015-06-09 20:19:39 ----A---- C:\Windows\system32\actxprxy.dll
2015-06-09 20:19:38 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-06-09 20:19:38 ----A---- C:\Windows\system32\jscript9diag.dll
2015-06-09 20:19:38 ----A---- C:\Windows\system32\jscript.dll
2015-06-09 20:19:38 ----A---- C:\Windows\system32\ieapfltr.dll
2015-06-09 20:19:37 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-06-09 20:19:37 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-06-09 20:19:37 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2015-06-09 20:19:37 ----A---- C:\Windows\system32\webcheck.dll
2015-06-09 20:19:37 ----A---- C:\Windows\system32\dxtrans.dll
2015-06-09 20:19:36 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-06-09 20:19:36 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2015-06-09 20:19:36 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2015-06-09 20:19:36 ----A---- C:\Windows\system32\mshtmled.dll
2015-06-09 20:19:36 ----A---- C:\Windows\system32\inetcomm.dll
2015-06-09 20:19:36 ----A---- C:\Windows\system32\ieui.dll
2015-06-09 20:19:36 ----A---- C:\Windows\system32\iepeers.dll
2015-06-09 20:19:36 ----A---- C:\Windows\system32\iedkcs32.dll
2015-06-09 20:11:46 ----A---- C:\Windows\system32\comctl32.dll
2015-06-09 20:11:45 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2015-06-09 15:51:54 ----D---- C:\Program Files (x86)\MSECache

======List of files/folders modified in the last 1 month======

2015-07-01 10:26:51 ----D---- C:\Windows\Microsoft.NET
2015-07-01 10:22:19 ----D---- C:\Windows\Prefetch
2015-07-01 10:22:12 ----RD---- C:\Program Files
2015-07-01 10:02:00 ----D---- C:\Windows\system32\sru
2015-07-01 09:56:46 ----D---- C:\Windows\system32\config
2015-07-01 09:56:11 ----D---- C:\Windows\Temp
2015-07-01 09:43:38 ----D---- C:\Users\Ludek\AppData\Roaming\Skype
2015-06-30 12:02:21 ----RD---- C:\Windows\System32
2015-06-30 12:02:21 ----D---- C:\Windows\Inf
2015-06-30 12:02:21 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-06-30 12:00:23 ----D---- C:\Windows\system32\drivers
2015-06-30 11:55:16 ----D---- C:\ProgramData\NVIDIA
2015-06-29 21:58:13 ----D---- C:\Windows\CbsTemp
2015-06-29 21:52:00 ----D---- C:\Windows\Tasks
2015-06-29 21:52:00 ----D---- C:\Windows\system32\Tasks
2015-06-28 11:12:26 ----D---- C:\Windows\system32\NDF
2015-06-27 10:58:47 ----D---- C:\Windows\system32\catroot2
2015-06-27 10:52:39 ----D---- C:\Windows\system32\DriverStore
2015-06-27 10:50:21 ----D---- C:\Windows\rescache
2015-06-27 10:47:18 ----SHD---- C:\System Volume Information
2015-06-24 14:14:24 ----SHD---- C:\Windows\Installer
2015-06-24 14:14:14 ----D---- C:\ProgramData
2015-06-24 14:07:28 ----D---- C:\ProgramData\SupportAssistAgent
2015-06-24 11:54:30 ----D---- C:\Windows\WinSxS
2015-06-24 11:53:22 ----D---- C:\Windows
2015-06-24 11:51:30 ----RD---- C:\Windows\ToastData
2015-06-24 11:51:30 ----D---- C:\Windows\WinStore
2015-06-24 11:51:30 ----D---- C:\Windows\SysWOW64
2015-06-24 11:51:30 ----D---- C:\Windows\apppatch
2015-06-24 11:48:32 ----D---- C:\Windows\SYSWOW64\migration
2015-06-24 11:48:32 ----D---- C:\Windows\system32\migration
2015-06-24 11:44:19 ----D---- C:\Windows\SoftwareDistribution
2015-06-24 11:27:12 ----D---- C:\Windows\debug
2015-06-24 11:25:51 ----D---- C:\Temp
2015-06-24 11:21:39 ----D---- C:\ProgramData\NVIDIA Corporation
2015-06-24 10:54:13 ----RD---- C:\Program Files (x86)
2015-06-22 16:51:29 ----D---- C:\ProgramData\PCDr
2015-06-17 11:10:27 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2015-06-17 11:10:27 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2015-06-17 11:10:27 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2015-06-17 11:10:27 ----A---- C:\Windows\system32\nvumdshimx.dll
2015-06-17 11:10:27 ----A---- C:\Windows\system32\nvinitx.dll
2015-06-17 11:10:27 ----A---- C:\Windows\system32\nvapi64.dll
2015-06-17 08:48:17 ----A---- C:\Windows\system32\nvvsvc.exe
2015-06-17 08:48:16 ----A---- C:\Windows\system32\nvsvcr.dll
2015-06-17 08:48:16 ----A---- C:\Windows\system32\nvshext.dll
2015-06-17 08:48:16 ----A---- C:\Windows\system32\nvmctray.dll
2015-06-17 08:48:16 ----A---- C:\Windows\system32\nv3dappshextr.dll
2015-06-17 08:48:16 ----A---- C:\Windows\system32\nv3dappshext.dll
2015-06-17 08:48:15 ----A---- C:\Windows\system32\nvsvc64.dll
2015-06-17 08:48:15 ----A---- C:\Windows\system32\nvcpl.dll
2015-06-12 19:59:29 ----D---- C:\Windows\tracing
2015-06-11 12:58:31 ----D---- C:\Windows\Panther
2015-06-11 12:58:30 ----D---- C:\Windows\Minidump
2015-06-11 12:58:30 ----D---- C:\Windows\Logs
2015-06-11 12:42:03 ----RSD---- C:\Windows\assembly
2015-06-11 12:41:01 ----RSD---- C:\Windows\Fonts
2015-06-11 12:04:09 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-06-11 12:02:21 ----D---- C:\Program Files\NVIDIA Corporation
2015-06-11 11:42:32 ----D---- C:\Intel
2015-06-11 11:42:20 ----A---- C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-06-11 11:41:03 ----D---- C:\Windows\system32\catroot
2015-06-11 11:38:52 ----D---- C:\ProgramData\Package Cache
2015-06-11 11:38:46 ----D---- C:\ProgramData\Intel
2015-06-11 11:38:06 ----D---- C:\Program Files\Common Files
2015-06-11 11:38:04 ----D---- C:\Program Files (x86)\Intel
2015-06-11 11:37:08 ----D---- C:\Program Files\Intel
2015-06-11 10:46:05 ----SD---- C:\Windows\system32\CompatTel
2015-06-11 10:46:05 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-06-11 10:46:05 ----D---- C:\Windows\system32\cs-CZ
2015-06-11 10:46:05 ----D---- C:\Windows\system32\appraiser
2015-06-11 10:46:05 ----D---- C:\Program Files\Internet Explorer
2015-06-11 10:46:05 ----D---- C:\Program Files (x86)\Internet Explorer
2015-06-11 10:46:04 ----D---- C:\Windows\PolicyDefinitions
2015-06-11 10:44:19 ----D---- C:\Windows\system32\MRT
2015-06-11 10:40:56 ----A---- C:\Windows\system32\MRT.exe
2015-06-09 15:52:21 ----D---- C:\Program Files (x86)\Microsoft Office
2015-06-03 23:04:55 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2015-06-03 23:04:55 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2015-06-03 23:04:45 ----A---- C:\Windows\system32\nvspcap64.dll
2015-06-03 23:04:45 ----A---- C:\Windows\system32\nvspbridge64.dll
2015-06-03 18:18:09 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-06-24 65736]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-06-24 272248]
R0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2013-08-29 644968]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2015-06-17 31376]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-06-24 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-06-24 1047320]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-06-30 442264]
R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2013-03-05 91712]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-06-24 29168]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-06-24 89944]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-06-24 137288]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\Windows\System32\drivers\BthEnum.sys [2014-10-29 53248]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2014-05-23 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Zařízení Bluetooth (síť PAN); C:\Windows\System32\drivers\bthpan.sys [2014-07-24 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2014-10-29 81920]
R3 btmaux;@oem191.inf,%BTMAUX.ServiceDesc%;Intel Bluetooth Auxiliary Service; C:\Windows\system32\DRIVERS\btmaux.sys [2013-04-23 132920]
R3 btmhsf;btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [2013-08-19 1386296]
R3 DDDriver;DDDriver; C:\Windows\system32\drivers\DDDriver64Dcsa.sys [2015-02-26 23760]
R3 DellProf;DellProf; C:\Windows\system32\drivers\DellProf.sys [2015-05-22 24240]
R3 DellRbtn;@oem57.inf,%DellRbtn%;Airplane Mode Switch; C:\Windows\System32\drivers\DellRbtn.sys [2013-01-25 10752]
R3 ibtusb;@oem192.inf,%ibtusb.SVCDESC_IBT%;Aplikace Intel(R) Wireless Bluetooth(R) 4.0 a vysokorychlostní (HS) adaptér; C:\Windows\system32\DRIVERS\ibtusb.sys [2013-09-10 118216]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2015-03-19 4888368]
R3 ikbevent;Intel Upper keyboard Class Filter Driver; C:\Windows\system32\DRIVERS\ikbevent.sys [2013-08-08 21408]
R3 imsevent;Intel Upper Mouse Class Filter Driver; C:\Windows\system32\DRIVERS\imsevent.sys [2013-08-08 21920]
R3 INETMON;INETMON; \??\C:\Windows\System32\Drivers\INETMON.sys [2013-08-07 29088]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-12-11 3771352]
R3 ISCT;@oem1.inf,%ISCT.DeviceDesc%;Intel(R) Smart Connect Technology Device Driver; C:\Windows\System32\drivers\ISCTD64.sys [2013-08-08 46568]
R3 iwdbus;@oem119.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2015-03-04 30512]
R3 MEIx64;@oem195.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\TeeDriverx64.sys [2013-12-19 99288]
R3 NETwNb64;@oem139.inf,%NIC_Service_DispName_WINB_64%;Ovladač adaptéru Intel(R) Wireless pro systém Windows 8.1 64 Bit; C:\Windows\system32\DRIVERS\NETwbw02.sys [2015-03-09 3494680]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2015-06-17 11011216]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-06-03 19600]
R3 nvvad_WaveExtensible;@oem148.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-05-19 46768]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2015-01-30 167424]
R3 RTL8168;@oem56.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2013-07-27 827096]
R3 RTSPER;@oem182.inf,%Rts5227PER%;Realtek PCIE Card Reader - PER; C:\Windows\system32\DRIVERS\RtsPer.sys [2013-10-19 444632]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2013-09-05 34544]
R3 SynTP;@oem184.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2013-09-05 531184]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2014-06-21 212736]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2015-05-11 1201664]
S3 intaud_WaveExtensible;@oem116.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2015-03-04 42288]
S3 IntcDAud;@oem185.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2013-11-13 449496]
S3 PCDSRVC{3B54B31B-D06B6431-06020200}_0;PCDSRVC{3B54B31B-D06B6431-06020200}_0 - PCDR Kernel Mode Service Helper Driver; \??\c:\program files\dell\supportassist\pcdsrvc_x64.pkms [2015-05-20 25584]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\Windows\System32\drivers\usbscan.sys [2014-10-29 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-05-08 65432]
R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-06-24 343336]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2013-06-25 1132920]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2013-07-04 1157496]
R2 DellDataVault;Dell Data Vault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2015-05-22 2573520]
R2 DellDataVaultWiz;Dell Data Vault Wizard; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [2015-05-22 201936]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2014-10-29 38792]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2014-11-19 638368]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-06-03 1152656]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-30 15720]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2015-03-19 345864]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-05-11 733696]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2013-09-04 131544]
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management;Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [2013-09-11 157128]
R2 ISCTAgent;Intel(R) Smart Connect Technology Agent; c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [2013-10-03 198120]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-09-04 169432]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-09-04 390616]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-06-03 1893008]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-06-03 23007376]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-06-17 937616]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2014-11-19 157088]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2013-07-30 253776]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2013-12-07 289496]
R2 StartMenuService;StartMenu8 Service; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [2014-06-06 72992]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-06-17 410768]
R2 SupportAssistAgent;Dell SupportAssist Agent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [2015-06-11 20648]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-23 43696]
S2 DellDigitalDelivery;Dell Digital Delivery Service; c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe [2014-01-13 198664]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-06-24 68608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-04 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-01-02 315488]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2015-03-19 280840]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-06-24 68608]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-04 116648]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-05-11 822232]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2014-11-19 268192]

-----------------EOF-----------------

Krasny den Vam preju


Odinstalujte Seznam Software.

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

• ukoncete vsechny programy
• kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
• kliknete na Scan, pote na Cleaning
• po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

Programy od Seznamu jsem ve správci programů bohužel nenašel. Log z AdAware zde:

# AdwCleaner v4.207 - Log vytvořen 01/07/2015 v 11:58:51
# Aktualizováno 21/06/2015 by Xplode
# Databáze : 2015-06-29.1 [Server]
# Operační system : Windows 8.1 (x64)
# Uživatelské jméno : Ludek - PC-SMESNY
# Spuštěno z : C:\Users\Ludek\Desktop\adwcleaner_4.207.exe
# Nastavení : Čištění

***** [ Služby ] *****

[#] Služba Smazáno : globalUpdate
[#] Služba Smazáno : globalUpdatem

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\Program Files (x86)\globalUpdate
Složka Smazáno : C:\Program Files (x86)\Internet Speed Checker
Složka Smazáno : C:\Users\Ludek\AppData\Local\globalUpdate
Složka Smazáno : C:\Users\Ludek\AppData\Roaming\cpuminer
Soubor Smazáno : C:\Windows\System32\cpuminer-conf.json
Soubor Smazáno : C:\Windows\System32\cpuminer-gw64.exe
Soubor Smazáno : C:\Users\Ludek\AppData\Roaming\GDIPFONTCACHEV1.DAT

***** [ Naplánované úlohy ] *****

Úloha Smazáno : globalUpdateUpdateTaskMachineCore
Úloha Smazáno : globalUpdateUpdateTaskMachineUA
Úloha Smazáno : amiupdaterExd
Úloha Smazáno : amiupdaterExi
Úloha Smazáno : 500f21e6-fb65-45f7-97d9-05928bd260a8-10_user

***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKCU\Software\Google\Chrome\Extensions\bmkckgpgekmanipelfidlhmkfcjicion
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Klíč Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Klíč Smazáno : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Klíč Smazáno : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\globalupdate.exe
Klíč Smazáno : HKLM\SOFTWARE\21fa2716-efb3-438e-ac39-406d8fea736e
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Klíč Smazáno : HKCU\Software\GlobalUpdate
Klíč Smazáno : HKCU\Software\InstalledBrowserExtensions
Klíč Smazáno : HKCU\Software\Internet Speed Checker
Klíč Smazáno : HKCU\Software\Crossbrowse
Klíč Smazáno : HKCU\Software\YorkNewCin
Klíč Smazáno : HKCU\Software\HighDefAction
Klíč Smazáno : HKCU\Software\ArenaHD
Klíč Smazáno : HKCU\Software\Internet Speed Checker-nv
Klíč Smazáno : HKCU\Software\Internet Speed Checker-nv-ie
Klíč Smazáno : HKCU\Software\AppDataLow\Software\Crossrider
Klíč Smazáno : HKLM\SOFTWARE\GlobalUpdate
Klíč Smazáno : HKLM\SOFTWARE\InstalledBrowserExtensions
Klíč Smazáno : HKLM\SOFTWARE\Internet Speed Checker
Klíč Smazáno : HKLM\SOFTWARE\YorkNewCin
Klíč Smazáno : HKLM\SOFTWARE\HighDefAction
Klíč Smazáno : HKLM\SOFTWARE\ArenaHD
Klíč Smazáno : HKLM\SOFTWARE\Internet Speed Checker-nv
Klíč Smazáno : HKLM\SOFTWARE\Internet Speed Checker-nv-ie
Klíč Smazáno : HKU\.DEFAULT\Software\Internet Speed Checker-nv
Klíč Smazáno : HKU\.DEFAULT\Software\Internet Speed Checker-nv-ie
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Speed Checker
Klíč Smazáno : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Klíč Smazáno : [x64] HKLM\SOFTWARE\YorkNewCin
Klíč Smazáno : [x64] HKLM\SOFTWARE\HighDefAction
Klíč Smazáno : [x64] HKLM\SOFTWARE\ArenaHD
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\cpuminer
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\globalupdate.exe

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17840


-\\ Google Chrome v43.0.2357.130


*************************

AdwCleaner[R0].txt - [8797 bytů] - [01/07/2015 11:54:14]
AdwCleaner[S0].txt - [7658 bytů] - [01/07/2015 11:58:51]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7716 bytů] ##########

Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

FRST hlásí, že není umístěn na Ploše, i když tam umístěn je. Myslím, že problém by mohl být v tom, že již dříve byl účet přejmenován, dříve se jmenoval Ludek, a teď je to Eva. Cesta k FRST je C:\Users\Ludek\Desktop, ale uživatel je Eva. Při přejmenování účtu Windows nepřejmenovává složku, pokud vím.

Pravdepodobne se jedna o chybu FRSTLauncheru. Spustte tedy jen samotny FRST.exe/FRST64.exe

Ha, nakonec to s FRST byla moje chyba, já jsem dal na plochu omylem jenom launcher, a ne samotné FRST, to mi uniklo. Zde tedy oba logy z FRST:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-06-2015 01
Ran by Ludek (administrator) on PC-SMESNY on 01-07-2015 13:05:12
Running from C:\Users\Ludek\Desktop
Loaded Profiles: Ludek (Available Profiles: Ludek)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe
(Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\InstallServices64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(forum.viry.cz) C:\Users\Ludek\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7506136 2013-12-07] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1368792 2013-11-13] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_PushButton] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1368792 2013-11-13] (Realtek Semiconductor)
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [3760456 2013-08-23] (Dell Inc.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-30] (Intel Corporation)
HKLM\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe [393480 2015-03-19] ()
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-03] (NVIDIA Corporation)
HKLM\...\Run: [gpuminer] => C:\Users\Ludek\AppData\Roaming\cpuminer\sgminer\sgminer.cmd
HKLM\...\Run: [cpuminer] => C:\Windows\system32\cpuminer-gw64.exe
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-06-24] (Avast Software s.r.o.)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-210948584-2097966066-3895709302-1002\...\Run: [Facebook Update] => C:\Users\Ludek\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-10-31] (Facebook Inc.)
HKU\S-1-5-21-210948584-2097966066-3895709302-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31087200 2015-01-23] (Skype Technologies S.A.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [176904 2015-06-17] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [155280 2015-06-17] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ISCTSystray.lnk [2014-05-23]
ShortcutTarget: ISCTSystray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2014-09-04]
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-06-24] (Avast Software s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-210948584-2097966066-3895709302-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKU\S-1-5-21-210948584-2097966066-3895709302-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-210948584-2097966066-3895709302-1002 -> {1D1FC5D8-10D2-4AB1-8A9D-7BD8C4035C26} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_16194
SearchScopes: HKU\S-1-5-21-210948584-2097966066-3895709302-1002 -> {63F1A3CF-E228-45E8-BED8-A9443FCB9EC0} URL = http://www.bing.com/search?FORM=UP97DF& ... -SearchBox
SearchScopes: HKU\S-1-5-21-210948584-2097966066-3895709302-1002 -> {9B720FF8-9E92-4356-965F-2DDB13D02B67} URL = http://search.seznam.cz/?q={searchTerms ... arch_16194
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-22] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-22] (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{523B1E49-B063-44FA-BC62-16C576DAD3B9}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{72A48408-73B2-4FB5-B6BD-5F4DE533121B}: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-04] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-04] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-22] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-06-17] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-06-17] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-210948584-2097966066-3895709302-1002: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Ludek\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)

Chrome:
=======
CHR Profile: C:\Users\Ludek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Ludek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-22]
CHR Extension: (Google Docs) - C:\Users\Ludek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-04]
CHR Extension: (Google Drive) - C:\Users\Ludek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-04]
CHR Extension: (YouTube) - C:\Users\Ludek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-04]
CHR Extension: (Google Search) - C:\Users\Ludek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-04]
CHR Extension: (Google Sheets) - C:\Users\Ludek\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-22]
CHR Extension: (Google Wallet) - C:\Users\Ludek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-04]
CHR Extension: (oglhhmnmdocfhmhlekfdecokagmbchnf) - C:\Users\Ludek\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglhhmnmdocfhmhlekfdecokagmbchnf [2015-06-29]
CHR Extension: (Gmail) - C:\Users\Ludek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-04]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-06-24] (Avast Software s.r.o.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2573520 2015-05-22] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201936 2015-05-22] (Dell Inc.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-06-03] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-30] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [345864 2015-03-19] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-04] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-11] (Intel Corporation)
R2 ISCTAgent; c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-10-03] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2014-11-19] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-06-03] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23007376 2015-06-03] (NVIDIA Corporation)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2013-07-30] (CyberLink)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [289496 2013-12-07] (Realtek Semiconductor)
R2 StartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [72992 2014-06-06] (IObit)
R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [20648 2015-06-11] (Dell Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3820960 2014-11-19] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-06-24] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-06-24] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-06-24] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-06-24] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-06-24] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-30] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-06-24] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-06-24] ()
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-05-23] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1386296 2013-08-19] (Motorola Solutions, Inc.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
R3 DDDriver; C:\Windows\system32\drivers\DDDriver64Dcsa.sys [23760 2015-02-26] (Dell Computer Corporation)
R3 DellProf; C:\Windows\system32\drivers\DellProf.sys [24240 2015-05-22] (Dell Computer Corporation)
R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2013-01-25] (OSR Open Systems Resources, Inc.)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [118216 2013-09-10] (Intel Corporation)
R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21408 2013-08-08] ()
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21920 2013-08-08] ()
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [29088 2013-08-07] ()
R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-08-08] ()
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverx64.sys [99288 2013-12-19] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3494680 2015-03-09] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-06-03] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [46768 2015-05-19] (NVIDIA Corporation)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [444632 2013-10-19] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-09-05] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 PCDSRVC{3B54B31B-D06B6431-06020200}_0; \??\c:\program files\dell\supportassist\pcdsrvc_x64.pkms [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-01 13:05 - 2015-07-01 13:05 - 00020374 _____ C:\Users\Ludek\Desktop\FRST.txt
2015-07-01 13:04 - 2015-07-01 13:05 - 00000000 ____D C:\FRST
2015-07-01 13:02 - 2015-07-01 13:03 - 02112512 _____ (Farbar) C:\Users\Ludek\Desktop\FRST64.exe
2015-07-01 12:50 - 2015-07-01 12:50 - 00112640 _____ (forum.viry.cz) C:\Users\Ludek\Desktop\FRSTLauncher.exe
2015-07-01 11:54 - 2015-07-01 11:58 - 00000000 ____D C:\AdwCleaner
2015-07-01 11:52 - 2015-07-01 11:52 - 02244096 _____ C:\Users\Ludek\Desktop\adwcleaner_4.207.exe
2015-07-01 10:22 - 2015-07-01 10:30 - 00000000 ____D C:\Program Files\trend micro
2015-07-01 10:22 - 2015-07-01 10:22 - 00000000 ____D C:\rsit
2015-07-01 10:21 - 2015-07-01 10:21 - 01222144 _____ C:\Users\Ludek\Downloads\RSITx64.exe
2015-07-01 10:21 - 2015-07-01 10:21 - 01222144 _____ C:\Users\Ludek\Desktop\RSITx64.exe
2015-06-24 14:14 - 2015-06-24 14:14 - 00000000 __HDC C:\ProgramData\{8AF32939-989B-460A-8726-CA2C776032A1}
2015-06-24 11:53 - 2015-07-01 12:03 - 00006086 _____ C:\Windows\setupact.log
2015-06-24 11:53 - 2015-06-24 11:53 - 00000000 _____ C:\Windows\setuperr.log
2015-06-24 11:52 - 2015-06-24 11:52 - 00000856 _____ C:\Windows\PFRO.log
2015-06-24 11:48 - 2015-05-07 19:50 - 22292672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-06-24 11:48 - 2015-05-07 19:00 - 03109376 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-06-24 11:48 - 2015-05-07 18:53 - 19734960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-06-24 11:48 - 2015-05-07 18:12 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2015-06-24 11:48 - 2015-04-30 01:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2015-06-24 11:47 - 2015-05-11 20:17 - 01201664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2015-06-24 11:47 - 2015-05-11 18:34 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2015-06-24 11:47 - 2015-05-07 17:21 - 00522240 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2015-06-24 11:47 - 2015-05-07 17:05 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2015-06-24 11:47 - 2015-05-03 17:09 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-06-24 11:47 - 2015-05-03 16:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-06-24 11:47 - 2015-05-03 16:55 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2015-06-24 11:47 - 2015-05-03 16:49 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2015-06-24 11:47 - 2015-05-03 02:39 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-06-24 11:47 - 2015-05-01 03:13 - 06521800 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2015-06-24 11:47 - 2015-05-01 03:13 - 01488000 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2015-06-24 11:47 - 2015-05-01 03:13 - 00261376 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2015-06-24 11:47 - 2015-04-28 15:13 - 00513480 _____ C:\Windows\SysWOW64\locale.nls
2015-06-24 11:47 - 2015-04-28 15:13 - 00513480 _____ C:\Windows\system32\locale.nls
2015-06-24 11:47 - 2015-04-25 04:25 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2015-06-24 11:46 - 2015-05-12 15:19 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2015-06-24 11:46 - 2015-05-12 02:24 - 00536920 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-06-24 11:46 - 2015-05-07 18:47 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-06-24 11:46 - 2015-05-03 17:07 - 07784448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2015-06-24 11:46 - 2015-05-03 16:57 - 05264384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2015-06-24 11:46 - 2015-05-02 01:33 - 00410739 _____ C:\Windows\system32\ApnDatabase.xml
2015-06-24 11:46 - 2015-04-23 17:47 - 03084288 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2015-06-24 11:46 - 2015-04-23 17:16 - 02471424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2015-06-24 11:44 - 2015-07-01 12:43 - 00556320 _____ C:\Windows\WindowsUpdate.log
2015-06-24 11:40 - 2015-06-24 11:40 - 00000000 ____D C:\Users\Ludek\AppData\Roaming\AVAST Software
2015-06-24 11:39 - 2015-06-24 11:39 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-06-24 11:39 - 2015-06-24 11:39 - 00001940 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-06-24 11:39 - 2015-06-24 11:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-06-24 11:38 - 2015-06-30 12:00 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswsp.sys
2015-06-24 11:38 - 2015-06-24 11:38 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-06-24 11:38 - 2015-06-24 11:38 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-06-24 11:38 - 2015-06-24 11:38 - 00272248 _____ C:\Windows\system32\Drivers\aswVmm.sys
2015-06-24 11:38 - 2015-06-24 11:38 - 00137288 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-06-24 11:38 - 2015-06-24 11:38 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-06-24 11:38 - 2015-06-24 11:38 - 00089944 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-06-24 11:38 - 2015-06-24 11:38 - 00065736 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2015-06-24 11:38 - 2015-06-24 11:38 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-06-24 11:38 - 2015-06-24 11:38 - 00029168 _____ C:\Windows\system32\Drivers\aswHwid.sys
2015-06-24 11:34 - 2015-06-24 11:34 - 00000000 ____D C:\Program Files\AVAST Software
2015-06-24 11:32 - 2015-06-24 11:32 - 00000000 ____D C:\ProgramData\AVAST Software
2015-06-24 11:21 - 2015-06-24 11:21 - 00002151 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2015-06-24 11:21 - 2015-06-24 11:21 - 00000000 ____D C:\Windows\SysWOW64\NV
2015-06-24 11:21 - 2015-06-24 11:21 - 00000000 ____D C:\Windows\system32\NV
2015-06-24 11:21 - 2015-06-17 08:03 - 00571024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-06-24 11:17 - 2015-06-17 11:10 - 42729104 _____ C:\Windows\system32\nvcompiler.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 30481552 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 22947144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 17724600 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 16145200 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 15866992 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 15224784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 14497520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 11831856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 11011216 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-06-24 11:17 - 2015-06-17 11:10 - 02932368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 02599752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 01898128 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435330.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 01557832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435330.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 01060168 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 01050768 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 00982672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 00975176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 00503408 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 00408392 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 00407296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 00364176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-06-24 11:17 - 2015-06-17 11:10 - 00031376 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2015-06-24 10:53 - 2015-06-24 10:53 - 00000000 ____D C:\Program Files (x86)\c46ff653-186f-448d-849e-e74998788fd1
2015-06-24 10:44 - 2015-06-24 10:44 - 00001136 _____ C:\Users\Ludek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-06-24 10:40 - 2015-06-24 10:40 - 00000686 _____ C:\Users\Ludek\Downloads\Setup .website
2015-06-24 10:40 - 2015-06-24 10:40 - 00000686 _____ C:\Users\Ludek\Downloads\Setup (1).website
2015-06-24 10:34 - 2015-06-24 10:34 - 00651776 _____ C:\Users\Ludek\Downloads\MicrosoftFixit50228.msi
2015-06-22 21:37 - 2015-06-22 21:37 - 00000000 _____ C:\Users\Ludek\AppData\Local\{C017796B-169C-47B6-9773-62DFF43BDA87}
2015-06-22 18:55 - 2015-06-22 18:55 - 00425984 _____ C:\Users\Ludek\Downloads\Volba_tematu__vyzkumne_otazky__osnova_01.ppt
2015-06-22 17:03 - 2015-06-22 17:42 - 07445504 _____ C:\Users\Ludek\Documents\naroz Ka.ppt
2015-06-22 16:56 - 2015-06-24 11:05 - 00000000 ____D C:\Program Files (x86)\Seznam.cz
2015-06-22 16:55 - 2015-06-24 11:05 - 00000000 ____D C:\Users\Ludek\AppData\Roaming\Seznam.cz
2015-06-22 16:53 - 2015-06-30 11:55 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-06-22 16:52 - 2015-06-22 16:52 - 00004030 _____ C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2015-06-22 16:52 - 2015-06-22 16:52 - 00003484 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask
2015-06-22 16:52 - 2015-06-22 16:52 - 00003220 _____ C:\Windows\System32\Tasks\SystemToolsDailyTest
2015-06-22 16:52 - 2015-06-22 16:52 - 00000000 ____D C:\ProgramData\PC-Doctor for Windows
2015-06-22 16:52 - 2015-06-22 16:52 - 00000000 ____D C:\Program Files\Dell Support Center
2015-06-22 16:44 - 2015-06-25 22:44 - 00000000 ____D C:\ProgramData\{74b3eeb2-acf0-a82f-74b3-3eeb2acfbaca}
2015-06-22 16:43 - 2015-06-22 16:44 - 00607760 _____ () C:\Users\Ludek\Documents\Pozvanka Na Oslavu Narozenin V Downloader__3687_i1540948893_il104365.exe
2015-06-11 12:57 - 2015-06-11 12:57 - 00002792 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-06-11 12:57 - 2015-06-11 12:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-06-11 12:57 - 2015-06-11 12:57 - 00000000 ____D C:\Program Files\CCleaner
2015-06-11 12:56 - 2015-06-11 12:56 - 06549184 _____ (Piriform Ltd) C:\Users\Ludek\Downloads\ccsetup506.exe
2015-06-11 12:46 - 2015-06-11 12:46 - 00000000 ____D C:\Users\Ludek\AppData\Roaming\LibreOffice
2015-06-11 12:41 - 2015-06-11 12:41 - 00001484 _____ C:\Users\Public\Desktop\LibreOffice 4.4.lnk
2015-06-11 12:41 - 2015-06-11 12:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.4
2015-06-11 12:40 - 2015-06-11 12:41 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4
2015-06-11 12:01 - 2015-06-17 11:10 - 37748880 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-06-11 12:01 - 2015-06-17 11:10 - 13263056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-06-11 12:01 - 2015-06-17 11:10 - 02997544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-06-11 12:01 - 2015-05-28 09:04 - 01898312 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435306.dll
2015-06-11 12:01 - 2015-05-28 09:04 - 01557832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435306.dll
2015-06-11 11:51 - 2015-06-24 11:18 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-06-11 11:51 - 2015-05-19 05:29 - 00046768 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-06-11 11:51 - 2015-05-19 05:14 - 00057520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-06-11 11:38 - 2015-06-11 11:38 - 00000000 ____D C:\Program Files\Common Files\Intel
2015-06-11 11:38 - 2015-06-11 11:38 - 00000000 ____D C:\Program Files (x86)\Cisco
2015-06-11 11:23 - 2015-06-11 11:23 - 00000000 ____D C:\Users\Ludek\AppData\Local\GWX
2015-06-11 10:38 - 2015-05-25 15:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-11 10:38 - 2015-05-25 15:07 - 01430528 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-11 10:38 - 2015-05-22 15:08 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-11 10:38 - 2015-05-21 15:08 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-11 10:38 - 2015-05-21 15:08 - 01020928 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-11 10:38 - 2015-05-21 15:08 - 00756736 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-11 10:38 - 2015-05-21 15:08 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-11 10:38 - 2015-05-21 15:08 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-11 10:38 - 2015-05-21 15:08 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-11 10:38 - 2015-05-16 00:01 - 00133288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-06-11 10:38 - 2015-05-15 23:05 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-06-11 10:38 - 2015-05-15 22:47 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-06-11 10:38 - 2015-05-15 22:23 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-06-11 10:38 - 2015-05-15 21:42 - 03682304 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-06-11 10:38 - 2015-05-15 21:32 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-06-11 10:38 - 2015-05-15 21:31 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-06-11 10:38 - 2015-05-15 21:28 - 02223104 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-06-11 10:38 - 2015-05-15 21:28 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-06-11 10:38 - 2015-05-15 21:28 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-06-11 10:38 - 2015-05-15 21:27 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-06-11 10:38 - 2015-05-15 21:21 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-06-11 10:38 - 2015-05-15 21:21 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-06-11 10:38 - 2015-05-15 21:19 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-06-11 10:38 - 2015-05-15 21:19 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-06-11 10:38 - 2015-04-17 00:07 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-09 20:47 - 2015-06-09 20:50 - 11734176 _____ C:\Users\Ludek\Downloads\Univerzita Palackého Olomouc - praxe, prezentace.pptx
2015-06-09 20:29 - 2015-05-21 18:47 - 04177920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-09 20:19 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-09 20:19 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-09 20:19 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-09 20:19 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-09 20:19 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-09 20:19 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-09 20:19 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-09 20:19 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-09 20:19 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-09 20:19 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-09 20:19 - 2015-05-23 04:47 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-06-09 20:19 - 2015-05-23 04:43 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-06-09 20:19 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-09 20:19 - 2015-05-23 04:38 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-09 20:19 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-09 20:19 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-09 20:19 - 2015-05-23 04:28 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-06-09 20:19 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-09 20:19 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-09 20:19 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-09 20:19 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-09 20:19 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-09 20:19 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-09 20:19 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-09 20:19 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-09 20:19 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-09 20:19 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-09 20:19 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-09 20:19 - 2015-05-22 20:23 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-06-09 20:19 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-09 20:19 - 2015-05-22 20:15 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-06-09 20:19 - 2015-05-22 20:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-06-09 20:19 - 2015-05-22 20:08 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-09 20:19 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-09 20:19 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-09 20:19 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-09 20:19 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-09 20:19 - 2015-05-22 19:49 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-06-09 20:19 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-09 20:19 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-09 20:11 - 2015-04-25 04:34 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-09 20:11 - 2015-04-25 04:33 - 00549888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-09 15:58 - 2015-06-09 15:59 - 06836224 _____ C:\Users\Ludek\Downloads\LibreOffice_4.4.3_Win_x86_helppack_cs.msi
2015-06-09 15:57 - 2015-06-09 16:41 - 224387072 _____ C:\Users\Ludek\Downloads\LibreOffice_4.4.3_Win_x86.msi
2015-06-09 15:51 - 2015-06-09 15:51 - 00000000 ____D C:\Program Files (x86)\MSECache
2015-06-09 15:49 - 2015-06-09 15:51 - 39042128 _____ (Microsoft Corporation) C:\Users\Ludek\Downloads\FileFormatConverters.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-01 13:05 - 2014-10-31 23:00 - 00000948 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-210948584-2097966066-3895709302-1002UA.job
2015-07-01 13:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-07-01 12:59 - 2014-09-04 01:38 - 00000980 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-01 12:02 - 2014-05-23 03:23 - 00000000 ____D C:\ProgramData\NVIDIA
2015-07-01 12:02 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-01 09:43 - 2015-01-23 22:25 - 00000000 ____D C:\Users\Ludek\AppData\Roaming\Skype
2015-06-30 12:02 - 2014-05-23 03:03 - 01749406 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-30 12:02 - 2013-08-23 00:08 - 00740962 _____ C:\Windows\system32\perfh005.dat
2015-06-30 12:02 - 2013-08-23 00:08 - 00152146 _____ C:\Windows\system32\perfc005.dat
2015-06-29 22:11 - 2014-09-03 07:40 - 00000000 ____D C:\Users\Ludek
2015-06-29 22:09 - 2014-09-17 14:45 - 00000072 _____ C:\Users\Public\LMDebug.log
2015-06-29 22:05 - 2014-10-31 23:00 - 00000926 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-210948584-2097966066-3895709302-1002Core.job
2015-06-29 21:58 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2015-06-28 11:12 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
2015-06-28 11:11 - 2014-09-05 09:24 - 00000000 ____D C:\Users\Ludek\AppData\Local\CrashDumps
2015-06-27 10:50 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2015-06-27 09:37 - 2014-09-03 07:46 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-210948584-2097966066-3895709302-1002
2015-06-24 14:13 - 2015-04-11 11:47 - 00003816 _____ C:\Windows\System32\Tasks\Dell SupportAssistAgent AutoUpdate
2015-06-24 14:07 - 2015-04-11 11:47 - 00000000 ____D C:\ProgramData\SupportAssistAgent
2015-06-24 11:51 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData
2015-06-24 11:51 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore
2015-06-24 11:25 - 2014-09-05 09:24 - 00000000 ____D C:\Temp
2015-06-24 11:21 - 2014-05-23 03:22 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-06-23 10:02 - 2015-03-23 20:10 - 00002205 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-06-22 21:45 - 2014-09-19 10:21 - 00000000 ____D C:\Users\Ludek\Documents\KVV-Eva
2015-06-22 21:35 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-06-22 20:17 - 2014-11-24 20:37 - 00000000 ____D C:\Users\Ludek\Documents\matematika
2015-06-22 16:52 - 2014-05-23 03:33 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2015-06-22 16:51 - 2014-05-23 03:33 - 00000000 ____D C:\ProgramData\PCDr
2015-06-22 06:30 - 2015-01-10 15:49 - 00000000 ____D C:\Users\Ludek\Documents\PSYCHOLOGIE-AMBULANCE
2015-06-17 11:10 - 2014-05-23 03:21 - 12855416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-06-17 11:10 - 2014-05-23 03:21 - 03395648 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-06-17 11:10 - 2014-05-23 03:21 - 01099992 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-06-17 11:10 - 2014-05-23 03:21 - 00938752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-06-17 11:10 - 2014-05-23 03:21 - 00176904 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-06-17 11:10 - 2014-05-23 03:21 - 00155280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-06-17 11:10 - 2014-05-23 03:21 - 00030966 _____ C:\Windows\system32\nvinfo.pb
2015-06-17 08:48 - 2014-05-23 03:22 - 06873232 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-06-17 08:48 - 2014-05-23 03:22 - 03492168 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-06-17 08:48 - 2014-05-23 03:22 - 02558792 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-06-17 08:48 - 2014-05-23 03:22 - 01059472 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2015-06-17 08:48 - 2014-05-23 03:22 - 00937616 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-06-17 08:48 - 2014-05-23 03:22 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-06-17 08:48 - 2014-05-23 03:22 - 00074896 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2015-06-17 08:48 - 2014-05-23 03:22 - 00062792 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-06-13 21:27 - 2014-10-12 20:32 - 00000000 ____D C:\Users\Ludek\Documents\Luděk
2015-06-12 19:59 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\tracing
2015-06-11 21:47 - 2015-05-22 18:53 - 00000000 __SHD C:\Users\Ludek\AppData\Local\EmieBrowserModeList
2015-06-11 21:47 - 2014-09-03 07:44 - 00000000 __SHD C:\Users\Ludek\AppData\Local\EmieUserList
2015-06-11 21:47 - 2014-09-03 07:44 - 00000000 __SHD C:\Users\Ludek\AppData\Local\EmieSiteList
2015-06-11 15:53 - 2013-08-22 16:44 - 00429608 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-11 12:58 - 2015-05-23 13:37 - 00000000 ____D C:\Windows\Minidump
2015-06-11 12:58 - 2014-05-23 12:20 - 00000000 ____D C:\Windows\Panther
2015-06-11 12:04 - 2014-05-23 03:22 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-06-11 12:02 - 2014-05-23 03:21 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-06-11 11:42 - 2014-09-05 09:33 - 00000401 _____ C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-06-11 11:42 - 2014-05-23 03:18 - 00000000 ____D C:\Intel
2015-06-11 11:38 - 2014-05-23 03:24 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-11 11:38 - 2014-05-23 03:19 - 00000000 ____D C:\ProgramData\Intel
2015-06-11 11:38 - 2014-05-23 03:18 - 00000000 ____D C:\Program Files (x86)\Intel
2015-06-11 11:37 - 2014-05-23 03:18 - 00000000 ____D C:\Program Files\Intel
2015-06-11 10:46 - 2015-05-22 13:09 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-11 10:46 - 2015-05-22 11:25 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-11 10:46 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-11 10:44 - 2014-09-03 08:40 - 00000000 ____D C:\Windows\system32\MRT
2015-06-11 10:40 - 2014-09-03 08:40 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-09 15:52 - 2014-05-23 03:35 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-06-03 23:04 - 2014-09-04 08:48 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-06-03 23:04 - 2014-09-04 08:48 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-06-03 23:04 - 2014-05-23 03:24 - 01571696 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-06-03 23:04 - 2014-05-23 03:24 - 01320304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-06-03 18:18 - 2013-08-22 17:38 - 00792568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-03 18:18 - 2013-08-22 17:38 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-02 16:11 - 2014-05-23 03:22 - 04421614 _____ C:\Windows\system32\nvcoproc.bin

==================== Files in the root of some directories =======

2015-06-22 21:37 - 2015-06-22 21:37 - 0000000 _____ () C:\Users\Ludek\AppData\Local\{C017796B-169C-47B6-9773-62DFF43BDA87}
2014-05-23 02:51 - 2014-05-23 02:51 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-05-23 03:33 - 2014-05-23 03:33 - 0000121 _____ () C:\ProgramData\{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}.log
2014-05-23 03:28 - 2014-05-23 03:30 - 0000106 _____ () C:\ProgramData\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}.log
2014-05-23 03:30 - 2014-05-23 03:31 - 0000111 _____ () C:\ProgramData\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}.log
2014-05-23 03:31 - 2014-05-23 03:32 - 0000108 _____ () C:\ProgramData\{B46BEA36-0B71-4A4E-AE41-87241643FA0A}.log
2014-05-23 03:28 - 2014-05-23 03:28 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

Some files in TEMP:
====================
C:\Users\Ludek\AppData\Local\Temp\3034.exe
C:\Users\Ludek\AppData\Local\Temp\bedfbcfhca.exe
C:\Users\Ludek\AppData\Local\Temp\mytmpinstaller.exe
C:\Users\Ludek\AppData\Local\Temp\nvStInst.exe
C:\Users\Ludek\AppData\Local\Temp\Quarantine.exe
C:\Users\Ludek\AppData\Local\Temp\sqlite3.dll
C:\Users\Ludek\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-22 22:05




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (OS) (Fixed) (Total:921.35 GB) (Free:798.79 GB) NTFS
Drive d: (<THE_SMURFS>) (CDROM) (Total:7.93 GB) (Free:0 GB) UDF

Available physical RAM: 4130.71 MB
Total physical RAM: 6042.57 MB
Percentage of memory in use: 31%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 931.5 GB) (Disk ID: 6F6884A2)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-210948584-2097966066-3895709302-1002Core.job => C:\Users\Ludek\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-210948584-2097966066-3895709302-1002UA.job => C:\Users\Ludek\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Users\Ludek\Documents\Pozvanka Na Oslavu Narozenin V Downloader__3687_i1540948893_il104365.exe:typelib

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Ludek\Desktop" je 5 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

-------------------------------------------------------------------------------------------------------------------------------------------

Additional scan result of Farbar Recovery Scan Tool (x64) Version:28-06-2015 01
Ran by Ludek at 2015-07-01 13:05:58
Running from C:\Users\Ludek\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-210948584-2097966066-3895709302-500 - Administrator - Disabled)
Guest (S-1-5-21-210948584-2097966066-3895709302-501 - Limited - Disabled)
Ludek (S-1-5-21-210948584-2097966066-3895709302-1002 - Administrator - Enabled) => C:\Users\Ludek

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Reader XI (11.0.08) - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Aktualizace NVIDIA 2.4.5.44 (Version: 2.4.5.44 - NVIDIA Corporation) Hidden
Aplikace Intel® PROSet/Wireless (HKLM-x32\...\{313c06de-4aa7-4a1f-930a-f10f80380426}) (Version: 17.14.0 - Intel Corporation)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.06 - Piriform)
CyberLink Media Suite Essentials (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell Data Vault (Version: 4.3.4.0 - Dell Inc.) Hidden
Dell Digital Delivery (HKLM-x32\...\{03A9F528-A754-460F-B2C1-AC125A147114}) (Version: 2.8.5000.0 - Dell Products, LP)
Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.1.6664.10 - Dell)
Dell SupportAssistAgent (HKLM-x32\...\{287348C8-8B47-4C36-AF28-441A3B7D8722}) (Version: 1.1.0.47 - Dell)
Dell Touchpad (HKLM\...\SynTPDeinstKey) (Version: 17.0.13.0 - Synaptics Incorporated)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{0EC7F9CC-4741-45AE-9F55-6E9343F726F5}) (Version: 1.1.0.36960 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4170 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1337.1) (HKLM\...\{302600C1-6BDF-4FD1-1307-148929CC1385}) (Version: 3.1.1307.0362 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.2.1000 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{2411C265-0D94-41AF-B74A-ABDA8221B137}) (Version: 4.2.41.2549 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: - )
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
LibreOffice 4.4.3.2 (HKLM-x32\...\{A651A592-2F6C-4D66-AEA8-9BFE4B61BCB3}) (Version: 4.4.3.2 - The Document Foundation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office XP Professional s aplikací FrontPage (HKLM-x32\...\{90280405-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
NVIDIA GeForce Experience 2.4.5.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.44 - NVIDIA Corporation)
NVIDIA Ovladač 3D Vision 353.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.30 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 353.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.30 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Ovládací panel NVIDIA 353.30 (Version: 353.30 - NVIDIA Corporation) Hidden
Potplayer-64 Bits (HKLM\...\PotPlayer64) (Version: - Daum Communications Corp.)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.1.15 - Dell Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7111 - Realtek Semiconductor Corp.)
Sada Compatibility Pack pro systém Office 2007 (HKLM-x32\...\{90120000-0020-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Samsung Universal Print Driver 2 (HKLM-x32\...\Samsung Universal Print Driver 2) (Version: 2.50.02.00 - Samsung Electronics Co., Ltd.)
SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.5.44 - NVIDIA Corporation) Hidden
Skype™ 7.1 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.)
Start Menu 8 (HKLM-x32\...\IObit_StartMenu8_is1) (Version: 1.5.0.0 - IObit)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-210948584-2097966066-3895709302-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points =========================

11-06-2015 12:39:22 Installed LibreOffice 4.4.3.2
18-06-2015 19:21:07 Naplánovaný kontrolní bod
24-06-2015 11:33:53 avast! antivirus system restore point

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {053FC2D1-CC5A-473B-BA10-CDC602C18AFA} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-03-05] (CyberLink)
Task: {0CAEBF65-97AA-44F5-A112-602864FBD19D} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2013-03-22] (CyberLink Corp.)
Task: {148D3375-33A2-4335-9874-89B75F6AF5EE} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-24] (Avast Software s.r.o.)
Task: {23533E8F-332A-4D11-9D93-60F94DB00979} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-210948584-2097966066-3895709302-1002Core => C:\Users\Ludek\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-10-31] (Facebook Inc.)
Task: {29D541E5-E45A-4E62-B42E-F1A20B29787C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-04] (Google Inc.)
Task: {3E865C26-BB10-464C-A48C-EDC8604531F3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-04] (Google Inc.)
Task: {588CD409-4DFD-4C62-A853-E4E4BE704D64} - System32\Tasks\StartMenuAutoupdate => C:\Program Files (x86)\IObit\Start Menu 8\AutoUpdate.exe [2015-01-20] (IObit)
Task: {5A190C94-2B10-4CA6-BE18-C2BA5DF174D8} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\Dell\SupportAssist\uaclauncher.exe [2015-05-25] (PC-Doctor, Inc.)
Task: {5C4D615E-D3E3-422C-B8A4-4A4D594452AA} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-09-05] (Synaptics Incorporated)
Task: {668ED0BD-5F03-42A7-A099-831C4D410A68} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {79B50D1B-5072-4909-B3BA-4FE7E3FDCC03} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-05-08] (Piriform Ltd)
Task: {877A1C93-B559-473C-80F3-90947AD18C3D} - System32\Tasks\{CBB5DC11-505D-4834-8E18-FFE9F65E4704} => Iexplore.exe http://www.skype.com/go/downloading?sou ... stError=-3
Task: {BCBD5FE1-DA90-4E6D-BBAC-4C841D19A9BD} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => c:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation)
Task: {CD6CE02F-F1BD-48E6-A8B1-B1BC43BB74D2} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => c:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation)
Task: {CF977220-6AC3-4AEA-BFF0-1307A18D93FE} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-210948584-2097966066-3895709302-1002UA => C:\Users\Ludek\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-10-31] (Facebook Inc.)
Task: {E1F1A1C6-1AD5-404A-8FC1-E56169D2E2E1} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Dell\SupportAssist\sessionchecker.exe [2015-05-25] (PC-Doctor, Inc.)
Task: {EECA3BED-F995-4376-843E-91AC5DB58ABD} - System32\Tasks\{19218B18-CC94-459E-9F6B-8E9CD6E25171} => Iexplore.exe http://ui.skype.com/ui/0/7.0.60.102/cs/ ... e=tsPlugin
Task: {F1AED2C0-10B0-4A18-AEC3-B8A3E5419920} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe [2015-06-11] (Dell Inc.)
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-210948584-2097966066-3895709302-1002Core.job => C:\Users\Ludek\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-210948584-2097966066-3895709302-1002UA.job => C:\Users\Ludek\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2014-05-23 03:21 - 2015-06-17 11:10 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2014-05-23 03:22 - 2015-06-17 08:48 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-09-17 14:38 - 2011-04-11 07:26 - 00034304 _____ () C:\Windows\System32\spe__l.dll
2013-10-03 18:30 - 2013-10-03 18:30 - 00198120 _____ () c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2013-10-03 18:30 - 2013-10-03 18:30 - 00054760 _____ () c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2013-10-03 18:30 - 2013-10-03 18:30 - 00034792 _____ () c:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll
2014-05-23 12:23 - 2015-03-19 21:02 - 00393480 _____ () C:\Windows\system32\igfxTray.exe
2015-06-24 11:38 - 2015-06-24 11:38 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-06-24 11:38 - 2015-06-24 11:38 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-07-01 10:24 - 2015-07-01 10:24 - 02952704 _____ () C:\Program Files\AVAST Software\Avast\defs\15070100\algo.dll
2014-09-04 09:51 - 2014-06-06 13:07 - 00348960 _____ () C:\Program Files (x86)\IObit\Start Menu 8\madExcept_.bpl
2014-09-04 09:51 - 2014-06-06 13:07 - 00183584 _____ () C:\Program Files (x86)\IObit\Start Menu 8\madBasic_.bpl
2014-09-04 09:51 - 2014-06-06 13:07 - 00050976 _____ () C:\Program Files (x86)\IObit\Start Menu 8\madDisAsm_.bpl
2014-05-23 03:18 - 2013-09-04 02:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-09-04 09:51 - 2014-06-06 13:08 - 00041248 _____ () C:\Program Files (x86)\IObit\Start Menu 8\winkey.dll
2015-06-11 11:52 - 2015-06-03 23:06 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2014-05-23 03:21 - 2015-06-17 11:10 - 00012104 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2015-06-24 11:38 - 2015-06-24 11:38 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-05-23 03:29 - 2013-03-05 05:40 - 00626240 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2013-03-05 11:41 - 2013-03-05 11:41 - 00015424 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Ludek\Documents\Pozvanka Na Oslavu Narozenin V Downloader__3687_i1540948893_il104365.exe:typelib

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-210948584-2097966066-3895709302-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Ludek\Pictures\fotky\FOTKY RODINA\2014 červenec\IMG_0014.JPG
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{651EFD87-B05E-4B3D-91FA-415146F1B828}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{708A6C81-A46F-4E53-9AF7-E23F535D47F5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{22F297CE-2962-4368-AD24-06BD3A89C83B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{6B816A65-E2D0-4B5E-B533-B6AA4BA47B7B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E07D4206-1461-4843-A227-42DFBD8295C9}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE
FirewallRules: [{3DFE1BEB-34A4-4864-92A7-20E031447F48}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD Cinema\PowerDVDCinema12.exe
FirewallRules: [{6277A845-DD32-44D8-9C18-55E5EC69DEAB}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{7C574549-8603-4A66-A466-CB26673AE304}] => (Allow) LPort=2869
FirewallRules: [{375AB8E7-F010-47AC-BB47-A5ABA05C3973}] => (Allow) LPort=1900
FirewallRules: [{063B16AC-049D-46D5-A008-0C5C46857F36}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{006D4AB8-1D52-4CB0-8A9E-5C018CD8603A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [Daum PotPlayer(PotPlayerMini64.exe)] => (Allow) C:\Program Files\DAUM\PotPlayer\PotPlayerMini64.exe
FirewallRules: [{9FF86BFE-5787-4FB4-8933-08FF50A87C60}] => (Allow) C:\Program Files\DAUM\PotPlayer\PotPlayerMini64.exe
FirewallRules: [{B499171F-13F4-4699-B028-E39B96318478}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Print Driver 2\PrinterSelector\SUPDApp.exe
FirewallRules: [{CBD6A2DF-FC04-473F-8E86-E8873F64B1BD}] => (Allow) C:\Users\Ludek\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
FirewallRules: [TCP Query User{66EE864B-A6EB-42D1-87B0-8F02E25B4EF1}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{16EAE812-E4EB-4ACA-B6EF-1CE7772E0CC4}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{FFE61352-91BA-4FBE-B6A2-4F1F68D404D0}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{D1736BC3-DA40-488E-B4B8-D0A36B1E20A0}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{698EC285-2982-4A10-BF06-BD10C364A72B}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{2534C621-00B0-4A92-8544-A8F459AB129D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/01/2015 11:59:14 AM) (Source: ISCTAgent) (EventID: 1000) (User: )
Description: ISCT - netDetect::AOACWLANProset::LocateAdapters Net Detect: Net Detect Supported Error Getting Adapter List Error=0x80040302\n

Error: (07/01/2015 11:59:14 AM) (Source: ISCTAgent) (EventID: 1000) (User: )
Description: ISCT - netDetect::AOACWLANProset::LocateAdapters Net Detect: Net Detect Supported Error Getting Adapter List Error=0x80040302\n

Error: (06/30/2015 02:18:40 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Generování kontextu aktivace pro file1 se nezdařilo. Chyba v souboru manifestu nebo zásady file2 na řádku file3.
Hodnota atributu name v prvku file je neplatná.

Error: (06/30/2015 01:41:37 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Generování kontextu aktivace pro file1 se nezdařilo. Chyba v souboru manifestu nebo zásady file2 na řádku file3.
Hodnota atributu name v prvku file je neplatná.

Error: (06/28/2015 11:12:25 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: rundll32.exe_winethc.dll, verze: 6.3.9600.17415, časové razítko: 0x54504eb8
Název chybujícího modulu: USER32.dll, verze: 6.3.9600.17736, časové razítko: 0x550f4336
Kód výjimky: 0xc0000142
Posun chyby: 0x00000000000ec180
ID chybujícího procesu: 0x1c10
Čas spuštění chybující aplikace: 0xrundll32.exe_winethc.dll0
Cesta k chybující aplikaci: rundll32.exe_winethc.dll1
Cesta k chybujícímu modulu: rundll32.exe_winethc.dll2
ID zprávy: rundll32.exe_winethc.dll3
Úplný název chybujícího balíčku: rundll32.exe_winethc.dll4
ID aplikace související s chybujícím balíčkem: rundll32.exe_winethc.dll5

Error: (06/28/2015 11:11:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: rundll32.exe_winethc.dll, verze: 6.3.9600.17415, časové razítko: 0x54504eb8
Název chybujícího modulu: USER32.dll, verze: 6.3.9600.17736, časové razítko: 0x550f4336
Kód výjimky: 0xc0000142
Posun chyby: 0x00000000000ec180
ID chybujícího procesu: 0x1c38
Čas spuštění chybující aplikace: 0xrundll32.exe_winethc.dll0
Cesta k chybující aplikaci: rundll32.exe_winethc.dll1
Cesta k chybujícímu modulu: rundll32.exe_winethc.dll2
ID zprávy: rundll32.exe_winethc.dll3
Úplný název chybujícího balíčku: rundll32.exe_winethc.dll4
ID aplikace související s chybujícím balíčkem: rundll32.exe_winethc.dll5

Error: (06/28/2015 11:11:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: rundll32.exe_winethc.dll, verze: 6.3.9600.17415, časové razítko: 0x54504eb8
Název chybujícího modulu: USER32.dll, verze: 6.3.9600.17736, časové razítko: 0x550f4336
Kód výjimky: 0xc0000142
Posun chyby: 0x00000000000ec180
ID chybujícího procesu: 0x15ac
Čas spuštění chybující aplikace: 0xrundll32.exe_winethc.dll0
Cesta k chybující aplikaci: rundll32.exe_winethc.dll1
Cesta k chybujícímu modulu: rundll32.exe_winethc.dll2
ID zprávy: rundll32.exe_winethc.dll3
Úplný název chybujícího balíčku: rundll32.exe_winethc.dll4
ID aplikace související s chybujícím balíčkem: rundll32.exe_winethc.dll5

Error: (06/27/2015 08:55:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: rundll32.exe_winethc.dll, verze: 6.3.9600.17415, časové razítko: 0x54504eb8
Název chybujícího modulu: USER32.dll, verze: 6.3.9600.17736, časové razítko: 0x550f4336
Kód výjimky: 0xc0000142
Posun chyby: 0x00000000000ec180
ID chybujícího procesu: 0x1980
Čas spuštění chybující aplikace: 0xrundll32.exe_winethc.dll0
Cesta k chybující aplikaci: rundll32.exe_winethc.dll1
Cesta k chybujícímu modulu: rundll32.exe_winethc.dll2
ID zprávy: rundll32.exe_winethc.dll3
Úplný název chybujícího balíčku: rundll32.exe_winethc.dll4
ID aplikace související s chybujícím balíčkem: rundll32.exe_winethc.dll5

Error: (06/27/2015 08:55:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: rundll32.exe_winethc.dll, verze: 6.3.9600.17415, časové razítko: 0x54504eb8
Název chybujícího modulu: USER32.dll, verze: 6.3.9600.17736, časové razítko: 0x550f4336
Kód výjimky: 0xc0000142
Posun chyby: 0x00000000000ec180
ID chybujícího procesu: 0xa24
Čas spuštění chybující aplikace: 0xrundll32.exe_winethc.dll0
Cesta k chybující aplikaci: rundll32.exe_winethc.dll1
Cesta k chybujícímu modulu: rundll32.exe_winethc.dll2
ID zprávy: rundll32.exe_winethc.dll3
Úplný název chybujícího balíčku: rundll32.exe_winethc.dll4
ID aplikace související s chybujícím balíčkem: rundll32.exe_winethc.dll5

Error: (06/27/2015 08:54:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: rundll32.exe_winethc.dll, verze: 6.3.9600.17415, časové razítko: 0x54504eb8
Název chybujícího modulu: USER32.dll, verze: 6.3.9600.17736, časové razítko: 0x550f4336
Kód výjimky: 0xc0000142
Posun chyby: 0x00000000000ec180
ID chybujícího procesu: 0xab8
Čas spuštění chybující aplikace: 0xrundll32.exe_winethc.dll0
Cesta k chybující aplikaci: rundll32.exe_winethc.dll1
Cesta k chybujícímu modulu: rundll32.exe_winethc.dll2
ID zprávy: rundll32.exe_winethc.dll3
Úplný název chybujícího balíčku: rundll32.exe_winethc.dll4
ID aplikace související s chybujícím balíčkem: rundll32.exe_winethc.dll5


System errors:
=============
Error: (07/01/2015 00:01:53 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.

Cesta k modulu: C:\Windows\System32\IWMSSvc.dll

Error: (07/01/2015 00:01:53 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.

Cesta k modulu: C:\Windows\System32\IWMSSvc.dll

Error: (07/01/2015 00:01:52 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.

Cesta k modulu: C:\Windows\System32\IWMSSvc.dll

Error: (07/01/2015 11:59:28 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Správce služeb se pokusil o opravnou akci (Restartovat službu) po nečekaném ukončení služby Windows Search, ale tato akce selhala kvůli následující chybě:
%%1056

Error: (07/01/2015 11:58:58 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 2 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (07/01/2015 11:58:56 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba zařazování tisku byla nečekaně ukončena. Stalo se to 2 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.

Error: (07/01/2015 11:58:56 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Windows Presentation Foundation Font Cache 3.0.0.0 byla neočekávaně ukončena. Tento stav nastal již 2krát.

Error: (07/01/2015 11:58:56 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Intel(R) Capability Licensing Service Interface byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (07/01/2015 11:58:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba NVIDIA Streamer Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (07/01/2015 11:58:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Dell Data Vault byla neočekávaně ukončena. Tento stav nastal již 1krát.


Microsoft Office:
=========================
Error: (07/01/2015 11:59:14 AM) (Source: ISCTAgent) (EventID: 1000) (User: )
Description: ISCT - netDetect::AOACWLANProset::LocateAdapters Net Detect: Net Detect Supported Error Getting Adapter List Error=0x80040302\n

Error: (07/01/2015 11:59:14 AM) (Source: ISCTAgent) (EventID: 1000) (User: )
Description: ISCT - netDetect::AOACWLANProset::LocateAdapters Net Detect: Net Detect Supported Error Getting Adapter List Error=0x80040302\n

Error: (06/30/2015 02:18:40 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: filenamec:\program files (x86)\irfanview\Plugins\Riot.dllc:\program files (x86)\irfanview\Plugins\Riot.dll8

Error: (06/30/2015 01:41:37 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: filenamec:\program files (x86)\irfanview\Plugins\Riot.dllc:\program files (x86)\irfanview\Plugins\Riot.dll8

Error: (06/28/2015 11:12:25 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: rundll32.exe_winethc.dll6.3.9600.1741554504eb8USER32.dll6.3.9600.17736550f4336c000014200000000000ec1801c1001d0b1828c5f7a09C:\Windows\System32\rundll32.exeUSER32.dllca0f5ce5-1d75-11e5-82fc-8086f2657510

Error: (06/28/2015 11:11:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: rundll32.exe_winethc.dll6.3.9600.1741554504eb8USER32.dll6.3.9600.17736550f4336c000014200000000000ec1801c3801d0b1827c631583C:\Windows\System32\rundll32.exeUSER32.dllba13280f-1d75-11e5-82fc-8086f2657510

Error: (06/28/2015 11:11:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: rundll32.exe_winethc.dll6.3.9600.1741554504eb8USER32.dll6.3.9600.17736550f4336c000014200000000000ec18015ac01d0b1826b050d01C:\Windows\System32\rundll32.exeUSER32.dlla8b51471-1d75-11e5-82fc-8086f2657510

Error: (06/27/2015 08:55:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: rundll32.exe_winethc.dll6.3.9600.1741554504eb8USER32.dll6.3.9600.17736550f4336c000014200000000000ec180198001d0b10adc7f2858C:\Windows\System32\rundll32.exeUSER32.dll1a2f7238-1cfe-11e5-82fc-8086f2657510

Error: (06/27/2015 08:55:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: rundll32.exe_winethc.dll6.3.9600.1741554504eb8USER32.dll6.3.9600.17736550f4336c000014200000000000ec180a2401d0b10acb74ce1dC:\Windows\System32\rundll32.exeUSER32.dll092560d1-1cfe-11e5-82fc-8086f2657510

Error: (06/27/2015 08:54:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: rundll32.exe_winethc.dll6.3.9600.1741554504eb8USER32.dll6.3.9600.17736550f4336c000014200000000000ec180ab801d0b10ab7e925b9C:\Windows\System32\rundll32.exeUSER32.dllf5992cf9-1cfd-11e5-82fc-8086f2657510


CodeIntegrity Errors:
===================================
Date: 2014-12-26 22:41:09.746
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-26 22:41:09.699
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-26 22:41:09.621
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-26 22:41:09.558
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-26 22:41:09.496
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-26 22:41:09.449
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-26 22:41:09.371
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-26 22:41:09.293
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-26 22:41:09.230
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-12-26 22:41:09.183
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Percentage of memory in use: 31%
Total physical RAM: 6042.57 MB
Available physical RAM: 4130.71 MB
Total Pagefile: 7002.57 MB
Available Pagefile: 4541.33 MB
Total Virtual: 131072 MB
Available Virtual: 131071.8 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:921.35 GB) (Free:798.79 GB) NTFS
Drive d: (<THE_SMURFS>) (CDROM) (Total:7.93 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 6F6884A2)

Partition: GPT Partition Type.

==================== End of log ============================

Zde fixlog:

Fix result of Farbar Recovery Scan Tool (x64) Version:28-06-2015 01
Ran by Ludek at 2015-07-01 14:39:38 Run:1
Running from C:\Users\Ludek\Desktop
Loaded Profiles: Ludek (Available Profiles: Ludek)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
Folder: C:\ProgramData\{8AF32939-989B-460A-8726-CA2C776032A1}
Folder: C:\ProgramData\{74b3eeb2-acf0-a82f-74b3-3eeb2acfbaca}
File: C:\Users\Ludek\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglhhmnmdocfhmhlekfdecokagmbchnf

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-03] (NVIDIA Corporation)
HKLM\...\Run: [gpuminer] => C:\Users\Ludek\AppData\Roaming\cpuminer\sgminer\sgminer.cmd
C:\Users\Ludek\AppData\Roaming\cpuminer
HKLM\...\Run: [cpuminer] => C:\Windows\system32\cpuminer-gw64.exe
C:\Windows\system32\cpuminer-gw64.exe
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKU\S-1-5-21-210948584-2097966066-3895709302-1002\...\Run: [Facebook Update] => C:\Users\Ludek\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-10-31] (Facebook Inc.)

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

CHR Extension: (oglhhmnmdocfhmhlekfdecokagmbchnf) - C:\Users\Ludek\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglhhmnmdocfhmhlekfdecokagmbchnf [2015-06-29]
2015-07-01 12:50 - 2015-07-01 12:50 - 00112640 _____ (forum.viry.cz) C:\Users\Ludek\Desktop\FRSTLauncher.exe
2015-07-01 11:54 - 2015-07-01 11:58 - 00000000 ____D C:\AdwCleaner
2015-07-01 11:52 - 2015-07-01 11:52 - 02244096 _____ C:\Users\Ludek\Desktop\adwcleaner_4.207.exe
2015-07-01 10:22 - 2015-07-01 10:30 - 00000000 ____D C:\Program Files\trend micro
2015-07-01 10:22 - 2015-07-01 10:22 - 00000000 ____D C:\rsit
2015-07-01 10:21 - 2015-07-01 10:21 - 01222144 _____ C:\Users\Ludek\Downloads\RSITx64.exe
2015-07-01 10:21 - 2015-07-01 10:21 - 01222144 _____ C:\Users\Ludek\Desktop\RSITx64.exe
2015-06-22 16:56 - 2015-06-24 11:05 - 00000000 ____D C:\Program Files (x86)\Seznam.cz
2015-06-22 16:55 - 2015-06-24 11:05 - 00000000 ____D C:\Users\Ludek\AppData\Roaming\Seznam.cz
2014-05-23 02:51 - 2014-05-23 02:51 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-210948584-2097966066-3895709302-1002Core.job => C:\Users\Ludek\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-210948584-2097966066-3895709302-1002UA.job => C:\Users\Ludek\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
EmptyTemp:
End
*****************

Processes closed successfully.

========================= Folder: C:\ProgramData\{8AF32939-989B-460A-8726-CA2C776032A1} ========================

2015-06-24 14:14 - 2015-06-24 14:14 - 0000273 ____C () C:\ProgramData\{8AF32939-989B-460A-8726-CA2C776032A1}\DDV.dat
2015-06-24 14:14 - 2015-05-22 18:45 - 3884225 ____C (Dell Inc. ) C:\ProgramData\{8AF32939-989B-460A-8726-CA2C776032A1}\DDV.exe
2015-06-24 14:14 - 2015-06-24 14:14 - 0000000 ____C () C:\ProgramData\{8AF32939-989B-460A-8726-CA2C776032A1}\DDV.lnk
2015-06-24 14:14 - 2015-05-22 18:45 - 0315392 ____C () C:\ProgramData\{8AF32939-989B-460A-8726-CA2C776032A1}\DDV.msi
2015-06-24 14:14 - 2015-06-24 14:14 - 0006057 ____C () C:\ProgramData\{8AF32939-989B-460A-8726-CA2C776032A1}\DDV.par
2015-06-24 14:14 - 2015-05-22 18:45 - 3731442 ____C () C:\ProgramData\{8AF32939-989B-460A-8726-CA2C776032A1}\DDV.res
2015-06-24 14:14 - 2015-06-24 14:14 - 0000097 ____C () C:\ProgramData\{8AF32939-989B-460A-8726-CA2C776032A1}\instance.dat
2015-06-24 14:14 - 2015-05-22 18:45 - 0583630 ____C () C:\ProgramData\{8AF32939-989B-460A-8726-CA2C776032A1}\mia.lib

====== End of Folder: ======


========================= Folder: C:\ProgramData\{74b3eeb2-acf0-a82f-74b3-3eeb2acfbaca} ========================

2015-06-22 22:44 - 2015-06-22 22:44 - 0000000 _____ () C:\ProgramData\{74b3eeb2-acf0-a82f-74b3-3eeb2acfbaca}\2878b2cc5e72aa8a
2015-06-22 16:44 - 2015-06-22 16:44 - 0002418 _____ () C:\ProgramData\{74b3eeb2-acf0-a82f-74b3-3eeb2acfbaca}\download.dat
2015-06-22 22:44 - 2015-06-22 22:44 - 0000000 _____ () C:\ProgramData\{74b3eeb2-acf0-a82f-74b3-3eeb2acfbaca}\e585149979a64d5e

====== End of Folder: ======


========================= File: C:\Users\Ludek\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglhhmnmdocfhmhlekfdecokagmbchnf ========================

MD5:
Creation and modification date: 2015-06-29 21:51 - 2015-06-29 21:51
Size: 0000000
Attributes: ----D
Company Name:
Internal Name:
Original Name:
Product Name:
Description:
File Version:
Product Version:
Copyright$creamod:

====== End of File: ======

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\NvBackend => value removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\gpuminer => value removed successfully
"C:\Users\Ludek\AppData\Roaming\cpuminer" => File/Folder not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\cpuminer => value removed successfully
"C:\Windows\system32\cpuminer-gw64.exe" => File/Folder not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKU\S-1-5-21-210948584-2097966066-3895709302-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Facebook Update => value removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
C:\Users\Ludek\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglhhmnmdocfhmhlekfdecokagmbchnf => moved successfully.
"C:\Users\Ludek\Desktop\FRSTLauncher.exe" => File/Folder not found.
C:\AdwCleaner => moved successfully.
C:\Users\Ludek\Desktop\adwcleaner_4.207.exe => moved successfully.
C:\Program Files\trend micro => moved successfully.
C:\rsit => moved successfully.
C:\Users\Ludek\Downloads\RSITx64.exe => moved successfully.
C:\Users\Ludek\Desktop\RSITx64.exe => moved successfully.
C:\Program Files (x86)\Seznam.cz => moved successfully.
C:\Users\Ludek\AppData\Roaming\Seznam.cz => moved successfully.
C:\ProgramData\DP45977C.lfl => moved successfully.
C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-210948584-2097966066-3895709302-1002Core.job => moved successfully.
C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-210948584-2097966066-3895709302-1002UA.job => moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully.
EmptyTemp: => 847.4 MB temporary data Removed.


The system needed a reboot..

==== End of Fixlog 14:39:50 ====

Vyborne, jak se pocitac chova ted? Stale neco vyskakuje ci pozorujete jine problemy?

Vypadá to, že se to usadilo, žádné podezřelé aktivity nyní neregistruji.

Takze jeste uklidime.

• Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
• Oznacte jen moznost "Remove disinfection tools"
• kliknete na Run

Pocitac jeste sledujte. Pokud nejsou dotazy ci jine problemy, bude to ode mne vse.

Provedeno, děkuji za pomoc, počítač je budoucí paní doktorky co pracuje s malými dětmi a ještě studuje a tady má studijní materiály a tak. Stahovala pro ty děti něco motivačního, jakési obrázky, a při tom asi klikla na instalaci nějakého šmejda. Tak vám děkuje, že zase může v klidu pracovat, a že už si dá příště pozor.

Tak pani/slecnu doktorku pozdravujte a at je na deti hodna

Nemate zac, rad jsem pomohl


Mejte se krasne a treba zase nekdy