VIRY.CZ

dobry den,prosim o kontrolu logu.pomaly internet a vyskakujici reklamy na google chrome.


Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:06-08-2015
Ran by Petra (administrator) on PETRA-VOSA (07-08-2015 12:39:05)
Running from C:\Users\Petra\Downloads
Loaded Profiles: Petra (Available Profiles: Petra & Tonik)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Lenovo) C:\Program Files\ThinkPad\Utilities\PWMDBSVC.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Lenovo Group Limited) C:\Program Files\ThinkPad\Utilities\SCHTASK.EXE
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Dropbox, Inc.) C:\Users\Petra\AppData\Local\Dropbox\Update\DropboxUpdate.exe
(Nico Mak Computing) C:\Program Files\WinZip\FAH\FAHWindow32.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe
(Dropbox, Inc.) C:\Users\Petra\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\System Update\SUService.exe
(Lenovo Group Limited) C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\CompatTel\wicainventory.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [LenovoFSC] => C:\Program Files\Lenovo\FanSpeedControl\LenovoFSC.exe [49152 2009-06-26] (Lenovo (Shenzhen) Electronic Co., Ltd.)
HKLM\...\Run: [PWMTRV] => rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWMTR32V.DLL,PwrMgrBkGndMonitor
HKLM\...\Run: [PWRAGD] => C:\Program Files\ThinkPad\Utilities\DPMHost.EXE [72256 2009-08-13] ()
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2015-04-10] (Oracle Corporation)
HKU\S-1-5-21-3808252141-163001717-3248989872-1000\...\Run: [Dropbox Update] => C:\Users\Petra\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-16] (Dropbox, Inc.)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-07-27] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FAH.lnk [2015-07-08]
ShortcutTarget: FAH.lnk -> C:\Program Files\WinZip\FAH\FAHConsole.exe (Nico Mak Computing)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Preloader.lnk [2015-07-08]
ShortcutTarget: WinZip Preloader.lnk -> C:\Program Files\WinZip\WzPreloader.exe (WinZip Computing, S.L.)
Startup: C:\Users\Petra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-04-25]
ShortcutTarget: Dropbox.lnk -> C:\Users\Petra\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-04-25] (Avast Software s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3808252141-163001717-3248989872-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
SearchScopes: HKU\S-1-5-21-3808252141-163001717-3248989872-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3808252141-163001717-3248989872-1000 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-07-08] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-04] (Avast Software s.r.o.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-07-08] (Oracle Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{CE794C2E-3740-491B-B746-D4E9ABDCDF09}: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Petra\AppData\Roaming\Mozilla\Firefox\Profiles\3fikt9mx.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] ()
FF Plugin: @alawar.com/npapi -> C:\Windows\npapi.dll [2014-01-29] (Alawar)
FF Plugin: @java.com/DTPlugin,version=10.80.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-07-08] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.80.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-07-08] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin: @nullsoft.com/winampDetector;version=1 -> C:\Program Files\Winamp Detect\npwachk.dll [2013-07-24] (Nullsoft, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3808252141-163001717-3248989872-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Petra\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-08-08] (Unity Technologies ApS)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-04]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [not found]
FF ExtraCheck: C:\Program Files\mozilla firefox\browser\defaults\preferences\my-prefs.js [2015-04-06] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\my.cfg [2015-04-06] <==== ATTENTION

Chrome:
=======
CHR Profile: C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-05]
CHR Extension: (Google Docs) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-04]
CHR Extension: (Google Drive) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-05]
CHR Extension: (YouTube) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-05]
CHR Extension: (Google Search) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-05]
CHR Extension: (Avast SafePrice) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-04-10]
CHR Extension: (Google Sheets) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-05]
CHR Extension: (Avast Online Security) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-05]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-05]
CHR Extension: (Gmail) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-05]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-04-04]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-04]
CHR HKLM\...\Chrome\Extension: [mibfbmhijjgpkmobcfdlelpccpeafoom] - <no Path\update_url>

Opera:
=======
OPR Extension: (Game BOX) - C:\Users\Petra\AppData\Roaming\Opera Software\Opera Stable\Extensions\mibfbmhijjgpkmobcfdlelpccpeafoom [2015-04-25]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-25] (Avast Software s.r.o.)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [107448 2015-04-25] (Avast Software s.r.o.)
S3 Roxio UPnP Renderer 10; C:\Program Files\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-04] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-04] (Sonic Solutions)
S2 RoxLiveShare10; C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe [309744 2009-08-04] (Sonic Solutions)
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
R2 SUService; c:\Program Files\Lenovo\System Update\SUService.exe [15872 2009-09-04] (Lenovo Group Limited) [File not signed]
R2 ThinkVantage Registry Monitor Service; C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe [1019904 2009-08-28] (Lenovo Group Limited) [File not signed]
S3 TVT Backup Service; C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe [1474560 2009-09-04] (Lenovo Group Limited) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
U4 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-04-25] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [26096 2015-04-25] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [74976 2015-04-25] (Avast Software s.r.o.)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [271248 2015-04-25] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-04-25] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-04-25] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787760 2015-04-25] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [428120 2015-06-26] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [106912 2015-04-25] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209048 2015-04-25] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2013-10-06] (Disc Soft Ltd)
S3 k750bus; C:\Windows\System32\DRIVERS\k750bus.sys [55216 2005-02-11] (MCCI)
R3 SuperIO; C:\Windows\System32\DRIVERS\spio.sys [11720 2009-06-06] ()
U4 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-07 12:39 - 2015-08-07 12:39 - 00017584 _____ C:\Users\Petra\Downloads\FRST.txt
2015-08-07 12:38 - 2015-08-07 12:38 - 40943744 _____ C:\Users\Petra\Downloads\Firefox Setup 39.0.exe
2015-08-07 12:38 - 2015-08-07 12:38 - 00000000 ____D C:\Users\Petra\Downloads\FRST-OlderVersion
2015-08-03 10:39 - 2015-08-03 10:39 - 00000000 ____D C:\Users\Petra\AppData\Local\Virtual Cooking
2015-08-02 21:43 - 2015-08-05 20:09 - 00000000 ____D C:\Users\Petra\Desktop\Nová složka (4)
2015-07-30 22:06 - 2015-07-30 22:45 - 701231872 _____ C:\Users\Petra\Downloads\Kingsajz-1988--CZ-[HD-480x360-XVID].avi
2015-07-30 13:49 - 2015-07-30 13:49 - 00000000 ____D C:\Users\Petra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-07-28 12:11 - 2015-07-25 19:51 - 00015808 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-28 12:11 - 2015-07-25 19:47 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-28 12:11 - 2015-07-25 19:47 - 00587264 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-28 12:11 - 2015-07-25 19:46 - 00924160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-28 12:11 - 2015-07-25 19:46 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-28 12:11 - 2015-07-25 19:46 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-28 12:11 - 2015-07-25 19:46 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-28 12:11 - 2015-07-25 19:40 - 00932864 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-25 21:53 - 2015-07-25 22:32 - 709388928 _____ C:\Users\Petra\Downloads\Mrnouskove-Udoli-ztracenych-mravencu.csfd-79-animovany..bitvy-mezi-mravenci-a-hlavne-beruska-kterou-si-musi-oblibit-kazdy..avi
2015-07-25 20:41 - 2015-07-25 21:24 - 782604288 _____ C:\Users\Petra\Downloads\Jedna-ruka-netleská-(2003).avi
2015-07-24 18:07 - 2015-07-24 18:08 - 00443304 _____ C:\Users\Petra\Downloads\GeewaTheBigSecretofaSmallTownCs.exe
2015-07-21 15:35 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-21 15:35 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-21 15:35 - 2015-07-15 04:55 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-21 15:35 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-21 15:35 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-17 17:46 - 2015-07-17 17:47 - 06994375 _____ C:\Users\Petra\Downloads\Crazy Painting.wmv
2015-07-15 18:56 - 2015-07-09 19:43 - 02943488 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-15 18:56 - 2015-07-09 19:43 - 02057216 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-15 18:56 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-15 18:56 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-15 18:56 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-15 18:56 - 2015-07-09 19:43 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-15 18:56 - 2015-07-09 19:43 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-15 18:56 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-15 18:56 - 2015-07-09 19:42 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-15 18:56 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-15 18:56 - 2015-07-09 19:42 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-15 18:56 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 18:56 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 18:56 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 18:56 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 18:56 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 18:56 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 18:56 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 18:56 - 2015-07-01 22:46 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 18:56 - 2015-07-01 22:46 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 18:56 - 2015-07-01 22:30 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 18:56 - 2015-07-01 22:30 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 18:56 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 18:56 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 18:56 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 18:56 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 18:56 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 18:56 - 2015-07-01 22:30 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 18:56 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 18:56 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 18:56 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 18:56 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 18:56 - 2015-07-01 22:30 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 18:56 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 18:56 - 2015-07-01 22:29 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 18:56 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 18:56 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 18:56 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 18:56 - 2015-07-01 21:18 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 18:56 - 2015-07-01 21:18 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 18:56 - 2015-07-01 21:18 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 18:56 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 18:56 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 18:56 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 18:56 - 2015-06-25 10:46 - 02383872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 18:56 - 2015-06-19 20:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 18:56 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 18:56 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 18:56 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 18:56 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 18:56 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 18:56 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 18:56 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 18:56 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 18:56 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 18:56 - 2015-06-19 20:13 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 18:56 - 2015-06-19 20:06 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 18:56 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 18:56 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 18:56 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 18:56 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 18:56 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 18:56 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 18:56 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 18:56 - 2015-06-19 19:40 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 18:56 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 18:56 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 18:56 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 18:56 - 2015-06-17 19:39 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 18:56 - 2015-06-15 23:47 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 18:56 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 18:56 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 18:56 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 18:56 - 2015-06-15 23:43 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 18:56 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 18:56 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 18:56 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 18:56 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-15 18:56 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-15 18:56 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-15 18:56 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-10 15:47 - 2015-07-28 12:48 - 00000000 ___HD C:\$Windows.~BT
2015-07-08 21:45 - 2015-07-08 21:45 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-07-08 21:45 - 2015-07-08 21:45 - 00176040 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-07-08 21:45 - 2015-07-08 21:45 - 00176040 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-07-08 21:45 - 2015-07-08 21:45 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-07-08 21:45 - 2015-07-08 21:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-07-08 21:45 - 2015-07-08 21:45 - 00000000 ____D C:\Program Files\Java
2015-07-08 21:45 - 2015-07-08 21:45 - 00000000 ____D C:\Program Files\Common Files\Java
2015-07-08 21:44 - 2015-07-08 21:44 - 00001035 _____ C:\Users\Public\Desktop\VLC media player.lnk
2015-07-08 21:43 - 2015-07-08 22:52 - 00000000 ____D C:\Users\Petra\Documents\Add-in Express
2015-07-08 21:43 - 2015-07-08 21:43 - 00002294 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2015-07-08 21:43 - 2015-07-08 21:43 - 00002288 _____ C:\Users\Public\Desktop\WinZip.lnk
2015-07-08 21:43 - 2015-07-08 21:43 - 00000000 ____D C:\Users\Petra\AppData\Local\WinZip
2015-07-08 21:43 - 2015-07-08 21:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2015-07-08 21:43 - 2015-07-08 21:43 - 00000000 ____D C:\Program Files\WinZip

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-07 12:39 - 2015-04-05 13:28 - 00000000 ____D C:\FRST
2015-08-07 12:38 - 2015-04-05 13:27 - 01673728 _____ (Farbar) C:\Users\Petra\Downloads\FRST.exe
2015-08-07 12:35 - 2013-06-22 07:57 - 01853593 _____ C:\Windows\WindowsUpdate.log
2015-08-07 12:31 - 2015-02-17 21:50 - 00000000 ___RD C:\Users\Petra\Dropbox
2015-08-07 12:31 - 2015-02-17 21:48 - 00000000 ____D C:\Users\Petra\AppData\Roaming\Dropbox
2015-08-07 12:30 - 2015-05-16 14:28 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-07 12:29 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-07 12:29 - 2009-07-14 06:39 - 00136475 _____ C:\Windows\setupact.log
2015-08-06 16:20 - 2009-07-14 06:34 - 00021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-06 16:20 - 2009-07-14 06:34 - 00021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-06 16:11 - 2015-04-14 22:24 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-05 23:26 - 2015-06-16 13:15 - 00000918 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3808252141-163001717-3248989872-1000UA.job
2015-08-05 23:26 - 2015-05-16 14:28 - 00000940 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-05 23:26 - 2013-07-26 10:16 - 00000000 ____D C:\Users\Petra\AppData\Roaming\Skype
2015-08-05 20:40 - 2013-07-26 10:16 - 00000000 ____D C:\ProgramData\Skype
2015-08-05 20:36 - 2013-06-22 08:11 - 00388794 _____ C:\Windows\PFRO.log
2015-08-05 20:19 - 2015-06-27 21:39 - 00000000 ____D C:\Program Files\Alawar.cs
2015-08-05 20:08 - 2015-02-28 21:35 - 00000000 ____D C:\Program Files\Hry.cz
2015-08-05 20:08 - 2013-07-26 16:31 - 00000000 ____D C:\Users\Petra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hry.cz
2015-08-05 19:58 - 2014-05-18 18:31 - 00000000 ____D C:\Users\Petra\AppData\Local\CrashDumps
2015-08-03 19:51 - 2015-06-16 13:15 - 00000866 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3808252141-163001717-3248989872-1000Core.job
2015-08-03 10:37 - 2015-04-04 21:53 - 00000000 ____D C:\Users\Petra\AppData\Local\Google
2015-08-02 22:26 - 2009-07-21 07:30 - 01583226 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-02 21:45 - 2014-10-25 21:39 - 00000000 ___RD C:\Users\Petra\Desktop\Muzika
2015-07-28 22:06 - 2014-05-07 16:18 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-28 12:57 - 2009-07-21 08:20 - 00000000 ____D C:\Windows\Panther
2015-07-25 13:06 - 2015-04-04 15:34 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-24 18:10 - 2015-04-06 18:17 - 00000000 ____D C:\ProgramData\AlawarWrapper
2015-07-22 10:30 - 2009-07-14 06:33 - 00452272 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-16 17:20 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2015-07-16 16:26 - 2014-12-12 20:19 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-15 23:02 - 2014-01-05 03:01 - 00000000 ____D C:\Windows\system32\MRT
2015-07-15 22:52 - 2014-07-27 21:13 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-15 19:11 - 2013-07-26 09:48 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-07-15 19:11 - 2013-07-26 09:48 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-07-14 19:46 - 2013-07-26 09:49 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-07-08 21:44 - 2013-08-01 13:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-07-08 21:43 - 2013-07-27 18:25 - 00000000 ____D C:\ProgramData\WinZip

==================== Files in the root of some directories =======

2014-03-08 18:29 - 2014-03-08 19:29 - 0649350 _____ () C:\Users\Petra\AppData\Roaming\log.sflog
2014-07-21 22:37 - 2014-07-21 22:37 - 0000017 _____ () C:\Users\Petra\AppData\Local\resmon.resmoncfg

Some files in TEMP:
====================
C:\Users\Petra\AppData\Local\Temp\16865.exe
C:\Users\Petra\AppData\Local\Temp\17414.exe
C:\Users\Petra\AppData\Local\Temp\19795.exe
C:\Users\Petra\AppData\Local\Temp\22603.exe
C:\Users\Petra\AppData\Local\Temp\27494.exe
C:\Users\Petra\AppData\Local\Temp\27555.exe
C:\Users\Petra\AppData\Local\Temp\8918.exe
C:\Users\Petra\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplr43dc.dll
C:\Users\Petra\AppData\Local\Temp\gamebox.exe
C:\Users\Petra\AppData\Local\Temp\GeewaAbyssTheWraithsofEdenCollectorsEditionCs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaGardensInc3ABridalPursuitCollectorsEditionCs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaHerooftheKingdom2Cs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaIslaDoradaEpisode1TheSandsofEphranisCs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaMythsOfOrionLightfromtheNorthDeluxeEditionCs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaRedemptionCemeteryGraveTestimonyCollectorsEditionCs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaRunawayExpressMysteryCs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaRunefallCs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaTheBigSecretofaSmallTownCs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaTheMusketeersVictoriasQuestCs_0.exe
C:\Users\Petra\AppData\Local\Temp\RescueTeam4_24436.exe
C:\Users\Petra\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Tonik\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-08-02 12:47

==================== End of log ============================

Zdravim

Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.

# AdwCleaner v4.208 - Log vytvořen 08/08/2015 v 12:00:29
# Aktualizováno 09/07/2015 by Xplode
# Databáze : 2015-08-01.1 [Server]
# Operační system : Windows 7 Professional Service Pack 1 (x86)
# Uživatelské jméno : Petra - PETRA-VOSA
# Spuštěno z : C:\Users\Petra\Desktop\adwcleaner_4.208.exe
# Nastavení : Čištění

***** [ Služby ] *****


***** [ Soubory / Složky ] *****

Složka Smazáno : C:\Program Files\trivia games
Složka Smazáno : C:\Users\Petra\AppData\Local\Amigo
Složka Smazáno : C:\Users\Petra\AppData\Roaming\Opera Software\Opera Stable\Extensions\mibfbmhijjgpkmobcfdlelpccpeafoom
Soubor Smazáno : C:\Program Files\Mozilla Firefox\my.cfg
Soubor Smazáno : C:\Program Files\Mozilla Firefox\browser\defaults\preferences\my-prefs.js

***** [ Naplánované úlohy ] *****

Úloha Smazáno : trivia_games_updating_service

***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\mibfbmhijjgpkmobcfdlelpccpeafoom
Klíč Smazáno : HKLM\SOFTWARE\GlobalUpdate
Klíč Smazáno : HKLM\SOFTWARE\Avg Secure Update

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17909


-\\ Mozilla Firefox v


-\\ Google Chrome v44.0.2403.130


-\\ Opera v0.0.0.0

[C:\Users\Petra\AppData\Roaming\Opera Software\Opera Stable\Preferences] - Smazáno [Extension] : mibfbmhijjgpkmobcfdlelpccpeafoom

*************************

AdwCleaner[R2].txt - [1554 bytů] - [08/08/2015 11:57:13]
AdwCleaner[R3].txt - [1612 bytů] - [08/08/2015 11:58:50]
AdwCleaner[S2].txt - [1527 bytů] - [08/08/2015 12:00:29]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1585 bytů] ##########

Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=144868 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 8.8.2015
Čas skenování: 14:40
Protokol: malware.txt
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.08.08.01
Databáze rootkitů: v2015.08.06.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: Petra

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 535623
Uplynulý čas: 1 hod, 36 min, 2 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 20
PUP.Optional.PCSpeedUp.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PCSUUCDRV, , [5b06ff073a51b18541f803a2e61e26da],
PUP.Optional.InternetSpeedChecker, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\Internet Speed Checker, , [9ac77f87d5b649edf15f75ca34cfbd43],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [451c7195f992b284aaa8176f52b23cc4],
PUP.Optional.InternetSpeedChecker, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\APPDATALOW\SOFTWARE\Internet Speed Checker, , [b8a9ed197b10de58f15f0b3415ee956b],
PUP.Optional.GlobalUpdate.C, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY, , [66fb3acca8e36dc9080828f436cdc13f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{16DC0513-445E-44DC-A7D2-9CE3C6E38BE9}, , [7fe244c2206ba591f440b1f019eb42be],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1ECE6296-FD30-43CE-89E8-4647B31EC948}, , [6cf59571fd8ec27446ef5849f410ff01],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{300117DC-742B-4A4C-9287-C9478DDDEFEC}, , [f071d234c8c3c76f7bba10910301aa56],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{879E98D6-14B0-4803-BD16-D1DDE3E23261}, , [2c3544c23c4f96a0c372564b3bc97a86],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A7770E74-BE05-4C6B-B759-4B8C3AA3CA8F}, , [4918679fdab1330356dfadf49f65c937],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AEDF8B0F-A56A-4156-BB4D-EEF2B5C3627A}, , [a9b8e026375404320d27fda4719335cb],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B4F807C4-1B08-40C0-8F66-8685BEBE9487}, , [293842c4cdbee650959fa0012ed6ba46],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BFD00978-F198-46F9-A125-15BC473EA7E6}, , [b9a817ef494283b38ca85b460400c838],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C8209FF1-6E65-4216-BAE8-D693F7961A72}, , [96cb3bcb99f23ff72114a100f70d21df],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D5300643-9159-4D88-B4D2-C5608D613C4D}, , [a4bd56b05a31fe38bf76693842c244bc],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D635958E-79E0-41B9-AC4A-B997E68FB346}, , [81e08e782c5fd75f8ca9fea3838136ca],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DF37A902-E21A-4734-B7BA-6211F688A39F}, , [eb7614f25437f24484b0079ac143f10f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EEFEA156-93CF-4F98-8DA9-DF6D622580C9}, , [cd94f70f6e1dda5c7eb6c4dd53b140c0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F08E1F72-4AE2-4937-93BB-498AEC38B458}, , [baa7808624671323c470a7fadc28fb05],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FD59628A-3367-475C-A3CE-1AF034585356}, , [0d547096dab196a0ea4adac7fd0729d7],

Hodnoty registru: 16
PUP.Optional.GlobalUpdate.C, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY|source, Firefox, , [66fb3acca8e36dc9080828f436cdc13f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{16DC0513-445E-44DC-A7D2-9CE3C6E38BE9}|AppName, 4f8c834f-f93a-4268-9d18-de542b2e3f5d-2.exe-buttonutil.exe, , [7fe244c2206ba591f440b1f019eb42be]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1ECE6296-FD30-43CE-89E8-4647B31EC948}|AppName, 4f8c834f-f93a-4268-9d18-de542b2e3f5d-2.exe-codedownloader.exe, , [6cf59571fd8ec27446ef5849f410ff01]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{300117DC-742B-4A4C-9287-C9478DDDEFEC}|AppName, 4f8c834f-f93a-4268-9d18-de542b2e3f5d-2.exe-codedownloader.exe, , [f071d234c8c3c76f7bba10910301aa56]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{879E98D6-14B0-4803-BD16-D1DDE3E23261}|AppName, 4f8c834f-f93a-4268-9d18-de542b2e3f5d-2.exe-codedownloader.exe, , [2c3544c23c4f96a0c372564b3bc97a86]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A7770E74-BE05-4C6B-B759-4B8C3AA3CA8F}|AppName, 4f8c834f-f93a-4268-9d18-de542b2e3f5d-2.exe-codedownloader.exe, , [4918679fdab1330356dfadf49f65c937]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AEDF8B0F-A56A-4156-BB4D-EEF2B5C3627A}|AppName, 4f8c834f-f93a-4268-9d18-de542b2e3f5d-2.exe-buttonutil.exe, , [a9b8e026375404320d27fda4719335cb]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B4F807C4-1B08-40C0-8F66-8685BEBE9487}|AppName, 4f8c834f-f93a-4268-9d18-de542b2e3f5d-2.exe-buttonutil.exe, , [293842c4cdbee650959fa0012ed6ba46]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BFD00978-F198-46F9-A125-15BC473EA7E6}|AppName, 4f8c834f-f93a-4268-9d18-de542b2e3f5d-2.exe-buttonutil.exe, , [b9a817ef494283b38ca85b460400c838]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C8209FF1-6E65-4216-BAE8-D693F7961A72}|AppName, 4f8c834f-f93a-4268-9d18-de542b2e3f5d-2.exe-codedownloader.exe, , [96cb3bcb99f23ff72114a100f70d21df]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D5300643-9159-4D88-B4D2-C5608D613C4D}|AppName, 4f8c834f-f93a-4268-9d18-de542b2e3f5d-2.exe-codedownloader.exe, , [a4bd56b05a31fe38bf76693842c244bc]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D635958E-79E0-41B9-AC4A-B997E68FB346}|AppName, 4f8c834f-f93a-4268-9d18-de542b2e3f5d-2.exe-codedownloader.exe, , [81e08e782c5fd75f8ca9fea3838136ca]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DF37A902-E21A-4734-B7BA-6211F688A39F}|AppName, 4f8c834f-f93a-4268-9d18-de542b2e3f5d-2.exe-buttonutil.exe, , [eb7614f25437f24484b0079ac143f10f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EEFEA156-93CF-4F98-8DA9-DF6D622580C9}|AppName, 4f8c834f-f93a-4268-9d18-de542b2e3f5d-2.exe-buttonutil.exe, , [cd94f70f6e1dda5c7eb6c4dd53b140c0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F08E1F72-4AE2-4937-93BB-498AEC38B458}|AppName, 4f8c834f-f93a-4268-9d18-de542b2e3f5d-2.exe-buttonutil.exe, , [baa7808624671323c470a7fadc28fb05]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3808252141-163001717-3248989872-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FD59628A-3367-475C-A3CE-1AF034585356}|AppName, 4f8c834f-f93a-4268-9d18-de542b2e3f5d-2.exe-buttonutil.exe, , [0d547096dab196a0ea4adac7fd0729d7]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 5
Trojan.Agent.BCM, C:\Windows\inf\mncewegf, , [67fa27df6e1de056c35a964cfb07a65a],
Trojan.Agent.BCM, C:\Windows\inf\mncewegf\bitstreams, , [67fa27df6e1de056c35a964cfb07a65a],
PUP.Optional.CrossAd.Gen, C:\Users\Petra\AppData\Local\Virtual Cooking\Component, , [154c12f4b6d5a096d00b681f9e6705fb],
PUP.Optional.CrossAd.Gen, C:\Users\Petra\AppData\Local\Virtual Cooking, , [154c12f4b6d5a096d00b681f9e6705fb],
PUP.Optional.CrossAd.Gen, C:\Users\Petra\AppData\Local\Virtual Cooking\Bin, , [154c12f4b6d5a096d00b681f9e6705fb],

Soubory: 21
PUP.Optional.CrossRider, C:\AdwCleaner\Quarantine\C\Program Files\trivia games\trivia_games_updating_service.exe.vir, , [eb7653b3cebdd75f81574841a25fdc24],
Trojan.Agent.BCM, C:\Windows\inf\mncewegf\diablo130302.cl, , [67fa27df6e1de056c35a964cfb07a65a],
Trojan.Agent.BCM, C:\Windows\inf\mncewegf\diakgcn121016.cl, , [67fa27df6e1de056c35a964cfb07a65a],
Trojan.Agent.BCM, C:\Windows\inf\mncewegf\libcurl-4.dll, , [67fa27df6e1de056c35a964cfb07a65a],
Trojan.Agent.BCM, C:\Windows\inf\mncewegf\libeay32.dll, , [67fa27df6e1de056c35a964cfb07a65a],
Trojan.Agent.BCM, C:\Windows\inf\mncewegf\libidn-11.dll, , [67fa27df6e1de056c35a964cfb07a65a],
Trojan.Agent.BCM, C:\Windows\inf\mncewegf\librtmp.dll, , [67fa27df6e1de056c35a964cfb07a65a],
Trojan.Agent.BCM, C:\Windows\inf\mncewegf\libssh2.dll, , [67fa27df6e1de056c35a964cfb07a65a],
Trojan.Agent.BCM, C:\Windows\inf\mncewegf\phatk121016.cl, , [67fa27df6e1de056c35a964cfb07a65a],
Trojan.Agent.BCM, C:\Windows\inf\mncewegf\poclbm130302.cl, , [67fa27df6e1de056c35a964cfb07a65a],
Trojan.Agent.BCM, C:\Windows\inf\mncewegf\scrypt130511.cl, , [67fa27df6e1de056c35a964cfb07a65a],
Trojan.Agent.BCM, C:\Windows\inf\mncewegf\ssleay32.dll, , [67fa27df6e1de056c35a964cfb07a65a],
Trojan.Agent.BCM, C:\Windows\inf\mncewegf\zlib1.dll, , [67fa27df6e1de056c35a964cfb07a65a],
Trojan.Agent.BCM, C:\Windows\inf\mncewegf\bitstreams\fpgaminer_top_fixed7_197MHz.ncd, , [67fa27df6e1de056c35a964cfb07a65a],
PUP.Optional.CrossAd.Gen, C:\Users\Petra\AppData\Local\Virtual Cooking\Component\config.json, , [154c12f4b6d5a096d00b681f9e6705fb],
PUP.Optional.CrossAd.Gen, C:\Users\Petra\AppData\Local\Virtual Cooking\Component\hello.js, , [154c12f4b6d5a096d00b681f9e6705fb],
PUP.Optional.CrossAd.Gen, C:\Users\Petra\AppData\Local\Virtual Cooking\Component\manifest.json, , [154c12f4b6d5a096d00b681f9e6705fb],
PUP.Optional.CrossAd.Gen, C:\Users\Petra\AppData\Local\Virtual Cooking\Component\scriptTagContext.js, , [154c12f4b6d5a096d00b681f9e6705fb],
PUP.Optional.CrossAd.Gen, C:\Users\Petra\AppData\Local\Virtual Cooking\Component\tmp_bg.js, , [154c12f4b6d5a096d00b681f9e6705fb],
PUP.Optional.CrossAd.Gen, C:\Users\Petra\AppData\Local\Virtual Cooking\Component\uconfig.json, , [154c12f4b6d5a096d00b681f9e6705fb],
PUP.Optional.CrossAd.Gen, C:\Users\Petra\AppData\Local\Virtual Cooking\Bin\qxy.dll, , [154c12f4b6d5a096d00b681f9e6705fb],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Vsechny nalezy nechte odstranit. Po odstraneni a restartu pc test zopakujte, at vime, jestli se to nevraci. Napiste vysledek testu a podle nej zvolim dalsi postup.

zdravim,tak reklamy z google chrome zmizely a net je taky rychlejsi.dekuji za pomoc.

Takze uz nebudem docistovat?

muzeme docistovat,asi to bude i lepsi.

No a ten novy sken s MBAM byl tedy bez nalezu?


Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=30&t=130787

a k tomu

Dejte logy podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100 - vypnete na chvili antivir, je mozne, ze to bude blokovat jako skodnou, ale pouzivame to porad, jedna se o falesny poplach

Logfile of random's system information tool 1.10 (written by random/random)
Run by Petra at 2015-08-15 13:48:39
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 245 GB (53%) free of 465 GB
Total RAM: 1917 MB (32% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:48:47, on 15.8.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17937)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ThinkPad\Utilities\SCHTASK.EXE
C:\Program Files\WinZip\WzPreloader.exe
C:\Program Files\WinZip\FAH\FAHWindow32.exe
C:\Users\Petra\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\GWX\GWX.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Petra\Downloads\RSIT.exe
C:\Program Files\trend micro\Petra.exe
C:\Windows\system32\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [LenovoFSC] C:\Program Files\Lenovo\FanSpeedControl\LenovoFSC.exe
O4 - HKLM\..\Run: [PWMTRV] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWMTR32V.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [PWRAGD] C:\PROGRA~1\ThinkPad\UTILIT~1\DPMHost.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\Petra\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Startup: Dropbox.lnk = Petra\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: FAH.lnk = C:\Program Files\WinZip\FAH\FAHConsole.exe
O4 - Global Startup: WinZip Preloader.lnk = C:\Program Files\WinZip\WzPreloader.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Avast Firewall (avast! Firewall) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Power Manager DBC Service - Lenovo - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: Roxio UPnP Renderer 10 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe
O23 - Service: Roxio Upnp Server 10 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 10\RoxioUpnpService10.exe
O23 - Service: LiveShare P2P Server 10 (RoxLiveShare10) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: Roxio Hard Drive Watcher 10 (RoxWatch10) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files\Sony\Sony PC Companion\PCCService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: System Update (SUService) - Lenovo Group Limited - c:\Program Files\Lenovo\System Update\SUService.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
O23 - Service: TVT Backup Service - Lenovo Group Limited - C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe

--
End of file - 8071 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-3808252141-163001717-3248989872-1000Core.job - C:\Users\Petra\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-3808252141-163001717-3248989872-1000UA.job - C:\Users\Petra\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2015-07-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-04 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-07-08 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-08-02 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-08-02 174104]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-08-02 151064]
"LenovoFSC"=C:\Program Files\Lenovo\FanSpeedControl\LenovoFSC.exe [2009-06-26 49152]
"PWMTRV"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWMTR32V.DLL,PwrMgrBkGndMonitor []
"PWRAGD"=C:\PROGRA~1\ThinkPad\UTILIT~1\DPMHost.exe [2009-08-13 72256]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-11 5515496]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-04-10 271744]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Dropbox Update"=C:\Users\Petra\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16 134512]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FAH.lnk - C:\Program Files\WinZip\FAH\FAHConsole.exe
WinZip Preloader.lnk - C:\Program Files\WinZip\WzPreloader.exe

C:\Users\Petra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Petra\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-07-28 216576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-08-15 13:48:39 ----D---- C:\rsit
2015-08-12 14:33:41 ----A---- C:\Windows\system32\basesrv.dll
2015-08-11 23:09:49 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-11 22:46:43 ----A---- C:\Windows\system32\invagent.dll
2015-08-11 22:46:43 ----A---- C:\Windows\system32\generaltel.dll
2015-08-11 22:46:43 ----A---- C:\Windows\system32\devinv.dll
2015-08-11 22:46:43 ----A---- C:\Windows\system32\appraiser.dll
2015-08-11 22:46:43 ----A---- C:\Windows\system32\aeinv.dll
2015-08-11 22:46:43 ----A---- C:\Windows\system32\acmigration.dll
2015-08-11 22:46:40 ----A---- C:\Windows\system32\CompatTelRunner.exe
2015-08-11 22:46:40 ----A---- C:\Windows\system32\aepdu.dll
2015-08-11 22:46:38 ----A---- C:\Windows\system32\mstscax.dll
2015-08-11 22:46:37 ----A---- C:\Windows\system32\tsgqec.dll
2015-08-11 22:46:37 ----A---- C:\Windows\system32\aaclient.dll
2015-08-11 22:46:24 ----A---- C:\Windows\system32\wuwebv.dll
2015-08-11 22:46:24 ----A---- C:\Windows\system32\wups2.dll
2015-08-11 22:46:24 ----A---- C:\Windows\system32\wups.dll
2015-08-11 22:46:24 ----A---- C:\Windows\system32\wudriver.dll
2015-08-11 22:46:24 ----A---- C:\Windows\system32\wucltux.dll
2015-08-11 22:46:24 ----A---- C:\Windows\system32\wuaueng.dll
2015-08-11 22:46:24 ----A---- C:\Windows\system32\wuauclt.exe
2015-08-11 22:46:24 ----A---- C:\Windows\system32\wuapp.exe
2015-08-11 22:46:24 ----A---- C:\Windows\system32\wuapi.dll
2015-08-11 22:46:24 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-08-11 22:46:24 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-08-11 22:46:13 ----A---- C:\Windows\system32\WebClnt.dll
2015-08-11 22:46:13 ----A---- C:\Windows\system32\davclnt.dll
2015-08-11 22:46:12 ----A---- C:\Windows\system32\notepad.exe
2015-08-11 22:46:12 ----A---- C:\Windows\notepad.exe
2015-08-11 22:46:00 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-08-11 22:45:59 ----A---- C:\Windows\system32\ntkrnlpa.exe
2015-08-11 22:45:59 ----A---- C:\Windows\system32\ntdll.dll
2015-08-11 22:45:58 ----A---- C:\Windows\system32\sysmain.dll
2015-08-11 22:45:58 ----A---- C:\Windows\system32\srcore.dll
2015-08-11 22:45:58 ----A---- C:\Windows\system32\rstrui.exe
2015-08-11 22:45:58 ----A---- C:\Windows\system32\rpcrt4.dll
2015-08-11 22:45:58 ----A---- C:\Windows\system32\msv1_0.dll
2015-08-11 22:45:58 ----A---- C:\Windows\system32\lsasrv.dll
2015-08-11 22:45:58 ----A---- C:\Windows\system32\kerberos.dll
2015-08-11 22:45:58 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-08-11 22:45:58 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-08-11 22:45:58 ----A---- C:\Windows\system32\csrsrv.dll
2015-08-11 22:45:57 ----A---- C:\Windows\system32\wdigest.dll
2015-08-11 22:45:57 ----A---- C:\Windows\system32\TSpkg.dll
2015-08-11 22:45:57 ----A---- C:\Windows\system32\sspisrv.dll
2015-08-11 22:45:57 ----A---- C:\Windows\system32\sspicli.dll
2015-08-11 22:45:57 ----A---- C:\Windows\system32\srclient.dll
2015-08-11 22:45:57 ----A---- C:\Windows\system32\smss.exe
2015-08-11 22:45:57 ----A---- C:\Windows\system32\schannel.dll
2015-08-11 22:45:57 ----A---- C:\Windows\system32\secur32.dll
2015-08-11 22:45:57 ----A---- C:\Windows\system32\ncrypt.dll
2015-08-11 22:45:57 ----A---- C:\Windows\system32\msmmsp.dll
2015-08-11 22:45:57 ----A---- C:\Windows\system32\msaudite.dll
2015-08-11 22:45:57 ----A---- C:\Windows\system32\lsass.exe
2015-08-11 22:45:57 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-08-11 22:45:57 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-08-11 22:45:57 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-08-11 22:45:57 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-08-11 22:45:57 ----A---- C:\Windows\system32\cryptbase.dll
2015-08-11 22:45:57 ----A---- C:\Windows\system32\credssp.dll
2015-08-11 22:45:57 ----A---- C:\Windows\system32\auditpol.exe
2015-08-11 22:45:57 ----A---- C:\Windows\system32\apisetschema.dll
2015-08-11 22:45:57 ----A---- C:\Windows\system32\adtschema.dll
2015-08-11 22:45:56 ----A---- C:\Windows\system32\msobjs.dll
2015-08-11 22:45:33 ----A---- C:\Windows\system32\FntCache.dll
2015-08-11 22:45:33 ----A---- C:\Windows\system32\DWrite.dll
2015-08-11 22:45:33 ----A---- C:\Windows\system32\atmfd.dll
2015-08-11 22:45:32 ----A---- C:\Windows\system32\win32k.sys
2015-08-11 22:45:32 ----A---- C:\Windows\system32\lpk.dll
2015-08-11 22:45:32 ----A---- C:\Windows\system32\fontsub.dll
2015-08-11 22:45:32 ----A---- C:\Windows\system32\dciman32.dll
2015-08-11 22:45:32 ----A---- C:\Windows\system32\d3d10warp.dll
2015-08-11 22:45:32 ----A---- C:\Windows\system32\atmlib.dll
2015-08-11 22:45:29 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-11 22:45:29 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-08-11 22:45:29 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-08-11 22:45:28 ----A---- C:\Windows\system32\urlmon.dll
2015-08-11 22:45:28 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-11 22:45:28 ----A---- C:\Windows\system32\iernonce.dll
2015-08-11 22:45:28 ----A---- C:\Windows\system32\iedkcs32.dll
2015-08-11 22:45:28 ----A---- C:\Windows\system32\ie4uinit.exe
2015-08-11 22:45:27 ----A---- C:\Windows\system32\vbscript.dll
2015-08-11 22:45:27 ----A---- C:\Windows\system32\msfeeds.dll
2015-08-11 22:45:27 ----A---- C:\Windows\system32\jsproxy.dll
2015-08-11 22:45:27 ----A---- C:\Windows\system32\jscript9diag.dll
2015-08-11 22:45:27 ----A---- C:\Windows\system32\ieUnatt.exe
2015-08-11 22:45:27 ----A---- C:\Windows\system32\ieapfltr.dll
2015-08-11 22:45:27 ----A---- C:\Windows\system32\dxtmsft.dll
2015-08-11 22:45:26 ----A---- C:\Windows\system32\msrating.dll
2015-08-11 22:45:26 ----A---- C:\Windows\system32\iesetup.dll
2015-08-11 22:45:25 ----A---- C:\Windows\system32\wininet.dll
2015-08-11 22:45:25 ----A---- C:\Windows\system32\jscript.dll
2015-08-11 22:45:25 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-08-11 22:45:24 ----A---- C:\Windows\system32\ieui.dll
2015-08-11 22:45:24 ----A---- C:\Windows\system32\dxtrans.dll
2015-08-11 22:45:23 ----A---- C:\Windows\system32\ieframe.dll
2015-08-11 22:45:22 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-08-11 22:45:22 ----A---- C:\Windows\system32\mshtmled.dll
2015-08-11 22:45:21 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-08-11 22:45:21 ----A---- C:\Windows\system32\jscript9.dll
2015-08-11 22:45:20 ----A---- C:\Windows\system32\mshtml.dll
2015-08-11 22:45:19 ----A---- C:\Windows\system32\iertutil.dll
2015-08-11 22:45:15 ----A---- C:\Windows\system32\shell32.dll
2015-08-11 22:45:13 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-11 22:44:13 ----A---- C:\Windows\system32\msxml6.dll
2015-08-11 22:44:13 ----A---- C:\Windows\system32\msxml3.dll
2015-08-11 22:44:12 ----A---- C:\Windows\system32\msxml6r.dll
2015-08-11 22:44:12 ----A---- C:\Windows\system32\msxml3r.dll
2015-08-08 14:24:29 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2015-08-08 14:24:29 ----A---- C:\Windows\system32\drivers\mwac.sys
2015-08-08 14:24:29 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2015-08-08 14:24:29 ----A---- C:\Windows\system32\drivers\mbam.sys
2015-08-08 11:57:08 ----D---- C:\AdwCleaner

======List of files/folders modified in the last 1 month======

2015-08-15 13:48:48 ----D---- C:\Windows\Prefetch
2015-08-15 13:48:42 ----D---- C:\Program Files\trend micro
2015-08-15 13:48:41 ----D---- C:\Windows\Temp
2015-08-15 13:12:49 ----D---- C:\Users\Petra\AppData\Roaming\Dropbox
2015-08-15 13:07:02 ----D---- C:\Windows\system32\config
2015-08-13 12:44:47 ----D---- C:\Windows\winsxs
2015-08-13 12:42:59 ----D---- C:\Windows\System32
2015-08-12 22:54:24 ----SHD---- C:\System Volume Information
2015-08-12 15:42:33 ----D---- C:\Windows\rescache
2015-08-12 14:00:33 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2015-08-12 12:16:32 ----D---- C:\Windows\Microsoft.NET
2015-08-12 12:15:51 ----RSD---- C:\Windows\assembly
2015-08-12 11:49:29 ----SD---- C:\Windows\system32\CompatTel
2015-08-12 11:49:27 ----D---- C:\Windows\system32\cs-CZ
2015-08-12 11:49:27 ----D---- C:\Windows\system32\appraiser
2015-08-12 11:49:27 ----D---- C:\Windows\AppPatch
2015-08-12 11:49:26 ----D---- C:\Windows
2015-08-12 11:49:24 ----D---- C:\Windows\system32\drivers\cs-CZ
2015-08-12 11:49:24 ----D---- C:\Windows\system32\drivers
2015-08-12 11:49:23 ----D---- C:\Windows\system32\en-US
2015-08-12 11:49:20 ----D---- C:\Program Files\Internet Explorer
2015-08-11 23:26:57 ----SHD---- C:\Windows\Installer
2015-08-11 23:26:50 ----D---- C:\ProgramData\Microsoft Help
2015-08-11 23:25:41 ----D---- C:\Program Files\Microsoft Silverlight
2015-08-11 23:22:38 ----D---- C:\Windows\system32\MRT
2015-08-11 23:13:11 ----A---- C:\Windows\system32\MRT.exe
2015-08-11 22:42:13 ----D---- C:\Windows\system32\catroot2
2015-08-08 20:56:11 ----D---- C:\Windows\Offline Web Pages
2015-08-08 20:54:51 ----D---- C:\Windows\inf
2015-08-08 14:24:29 ----RD---- C:\Program Files
2015-08-08 12:00:30 ----D---- C:\Windows\system32\Tasks
2015-08-08 12:00:30 ----D---- C:\Program Files\Mozilla Firefox
2015-08-07 12:39:47 ----D---- C:\FRST
2015-08-05 23:26:06 ----D---- C:\Users\Petra\AppData\Roaming\Skype
2015-08-05 20:40:15 ----D---- C:\ProgramData\Skype
2015-08-05 20:19:39 ----D---- C:\Program Files\Alawar.cs
2015-08-05 20:08:48 ----D---- C:\Program Files\Hry.cz
2015-08-03 10:39:21 ----D---- C:\Program Files\Common Files
2015-08-02 22:26:15 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-07-28 12:57:59 ----D---- C:\Windows\Panther
2015-07-28 12:48:59 ----HD---- C:\$Windows.~BT
2015-07-28 12:45:09 ----SHD---- C:\Boot
2015-07-28 12:10:49 ----D---- C:\Windows\Logs
2015-07-28 12:03:29 ----D---- C:\Windows\SoftwareDistribution
2015-07-25 13:06:12 ----SD---- C:\Windows\system32\GWX
2015-07-24 18:10:46 ----D---- C:\ProgramData\AlawarWrapper
2015-07-20 19:16:45 ----SD---- C:\Users\Petra\AppData\Roaming\Microsoft
2015-07-16 16:35:15 ----D---- C:\Windows\Tasks
2015-07-16 16:26:10 ----D---- C:\Windows\system32\wbem
2015-07-16 16:26:08 ----D---- C:\Windows\PolicyDefinitions

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2015-04-25 271248]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-04-25 49904]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-04-25 209048]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2011-03-04 45648]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2015-04-25 26096]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-04-25 81728]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-04-25 787760]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-06-26 428120]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-10-06 243128]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-04-25 24144]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-04-25 74976]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-04-25 106912]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-07-28 5924864]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-08-05 2745760]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-06-18 23256]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\Windows\system32\DRIVERS\psadd.sys [2013-06-22 33088]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-14 139776]
R3 SuperIO;Lenovo ASD HWM Driver; C:\Windows\system32\DRIVERS\spio.sys [2009-06-06 11720]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2013-09-16 12400]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2013-09-16 25200]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\Windows\system32\DRIVERS\k750bus.sys [2005-02-11 55216]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-06-18 51928]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 84992]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-14 207360]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-14 980992]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-14 661504]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 30720]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\drivers\WinUsb.sys [2010-11-20 35968]
S4 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-04-25 343336]
R2 avast! Firewall;Avast Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2015-04-25 107448]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Power Manager DBC Service;Power Manager DBC Service; C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE [2009-08-13 72256]
R2 SUService;System Update; c:\Program Files\Lenovo\System Update\SUService.exe [2009-09-04 15872]
R2 TeamViewer9;TeamViewer 9; C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe [2014-02-17 4915040]
R2 ThinkVantage Registry Monitor Service;ThinkVantage Registry Monitor Service; C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe [2009-08-28 1019904]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-04-04 116648]
S2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2015-06-18 1133880]
S2 Roxio Upnp Server 10;Roxio Upnp Server 10; C:\Program Files\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-08-04 362992]
S2 RoxLiveShare10;LiveShare P2P Server 10; C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe [2009-08-04 309744]
S2 RoxWatch10;Roxio Hard Drive Watcher 10; C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe [2009-08-04 166384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2015-06-25 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12 269000]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-04-04 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-07-16 102912]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10; C:\Program Files\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-08-04 313840]
S3 RoxMediaDB10;RoxMediaDB10; C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-08-04 1124848]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2009-04-30 74392]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 TVT Backup Service;TVT Backup Service; C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe [2009-09-04 1474560]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-06-30 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe []
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:14-08-2015 01
Ran by Petra (administrator) on PETRA-VOSA (15-08-2015 14:03:14)
Running from C:\Users\Petra\Downloads
Loaded Profiles: Petra (Available Profiles: Petra & Tonik)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Lenovo) C:\Program Files\ThinkPad\Utilities\PWMDBSVC.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\System Update\SUService.exe
(Lenovo Group Limited) C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Lenovo Group Limited) C:\Program Files\ThinkPad\Utilities\SCHTASK.EXE
(WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe
(Nico Mak Computing) C:\Program Files\WinZip\FAH\FAHWindow32.exe
(Dropbox, Inc.) C:\Users\Petra\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Petra\Downloads\FRST (1).exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [LenovoFSC] => C:\Program Files\Lenovo\FanSpeedControl\LenovoFSC.exe [49152 2009-06-26] (Lenovo (Shenzhen) Electronic Co., Ltd.)
HKLM\...\Run: [PWMTRV] => rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWMTR32V.DLL,PwrMgrBkGndMonitor
HKLM\...\Run: [PWRAGD] => C:\Program Files\ThinkPad\Utilities\DPMHost.EXE [72256 2009-08-13] ()
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2015-04-10] (Oracle Corporation)
HKU\S-1-5-21-3808252141-163001717-3248989872-1000\...\Run: [Dropbox Update] => C:\Users\Petra\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-16] (Dropbox, Inc.)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-07-27] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FAH.lnk [2015-07-08]
ShortcutTarget: FAH.lnk -> C:\Program Files\WinZip\FAH\FAHConsole.exe (Nico Mak Computing)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Preloader.lnk [2015-07-08]
ShortcutTarget: WinZip Preloader.lnk -> C:\Program Files\WinZip\WzPreloader.exe (WinZip Computing, S.L.)
Startup: C:\Users\Petra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-04-25]
ShortcutTarget: Dropbox.lnk -> C:\Users\Petra\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-04-25] (Avast Software s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3808252141-163001717-3248989872-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3808252141-163001717-3248989872-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3808252141-163001717-3248989872-1000 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-07-08] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-04] (Avast Software s.r.o.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-07-08] (Oracle Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{CE794C2E-3740-491B-B746-D4E9ABDCDF09}: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Petra\AppData\Roaming\Mozilla\Firefox\Profiles\3fikt9mx.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-12] ()
FF Plugin: @alawar.com/npapi -> C:\Windows\npapi.dll [2014-01-29] (Alawar)
FF Plugin: @java.com/DTPlugin,version=10.80.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-07-08] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.80.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-07-08] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @nullsoft.com/winampDetector;version=1 -> C:\Program Files\Winamp Detect\npwachk.dll [2013-07-24] (Nullsoft, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3808252141-163001717-3248989872-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Petra\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-08-08] (Unity Technologies ApS)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-04]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [not found]

Chrome:
=======
CHR Profile: C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-05]
CHR Extension: (Google Docs) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-04]
CHR Extension: (Google Drive) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-05]
CHR Extension: (YouTube) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-05]
CHR Extension: (Google Search) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-05]
CHR Extension: (Avast SafePrice) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-04-10]
CHR Extension: (Google Sheets) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-05]
CHR Extension: (Avast Online Security) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-05]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-05]
CHR Extension: (Gmail) - C:\Users\Petra\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-05]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-04-04]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-04]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-25] (Avast Software s.r.o.)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [107448 2015-04-25] (Avast Software s.r.o.)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 Roxio UPnP Renderer 10; C:\Program Files\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-04] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-04] (Sonic Solutions)
S2 RoxLiveShare10; C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe [309744 2009-08-04] (Sonic Solutions)
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
R2 SUService; c:\Program Files\Lenovo\System Update\SUService.exe [15872 2009-09-04] (Lenovo Group Limited) [File not signed]
R2 ThinkVantage Registry Monitor Service; C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe [1019904 2009-08-28] (Lenovo Group Limited) [File not signed]
S3 TVT Backup Service; C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe [1474560 2009-09-04] (Lenovo Group Limited) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
U4 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-04-25] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [26096 2015-04-25] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [74976 2015-04-25] (Avast Software s.r.o.)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [271248 2015-04-25] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-04-25] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-04-25] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787760 2015-04-25] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [428120 2015-06-26] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [106912 2015-04-25] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209048 2015-04-25] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2013-10-06] (Disc Soft Ltd)
S3 k750bus; C:\Windows\System32\DRIVERS\k750bus.sys [55216 2005-02-11] (MCCI)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-06-18] (Malwarebytes Corporation)
R3 SuperIO; C:\Windows\System32\DRIVERS\spio.sys [11720 2009-06-06] ()
U4 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-15 14:02 - 2015-08-15 14:02 - 00112640 _____ (forum.viry.cz) C:\Users\Petra\Downloads\Nepotvrzeno 397385.crdownload
2015-08-15 14:01 - 2015-08-15 14:01 - 01678336 _____ (Farbar) C:\Users\Petra\Downloads\FRST (1).exe
2015-08-15 13:48 - 2015-08-15 13:48 - 01107968 _____ C:\Users\Petra\Downloads\RSIT.exe
2015-08-15 13:48 - 2015-08-15 13:48 - 00000000 ____D C:\rsit
2015-08-15 13:47 - 2015-08-15 13:47 - 01222144 _____ C:\Users\Petra\Downloads\RSITx64.exe
2015-08-12 14:33 - 2015-07-15 04:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-08-11 23:09 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-11 22:46 - 2015-07-28 22:04 - 00015808 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-08-11 22:46 - 2015-07-28 22:00 - 00952832 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-08-11 22:46 - 2015-07-28 22:00 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-08-11 22:46 - 2015-07-28 22:00 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-08-11 22:46 - 2015-07-28 22:00 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-08-11 22:46 - 2015-07-28 22:00 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-08-11 22:46 - 2015-07-28 22:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-08-11 22:46 - 2015-07-28 21:54 - 00934400 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-08-11 22:46 - 2015-07-20 19:56 - 02943488 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-11 22:46 - 2015-07-20 19:56 - 02061312 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-11 22:46 - 2015-07-20 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-11 22:46 - 2015-07-20 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-11 22:46 - 2015-07-20 19:56 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-11 22:46 - 2015-07-20 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-11 22:46 - 2015-07-20 19:56 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-11 22:46 - 2015-07-20 19:56 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-11 22:46 - 2015-07-20 19:56 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-11 22:46 - 2015-07-20 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-11 22:46 - 2015-07-20 19:56 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-11 22:46 - 2015-07-15 19:59 - 03934656 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-11 22:46 - 2015-07-10 19:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-11 22:46 - 2015-07-10 19:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-08-11 22:46 - 2015-07-10 19:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2015-08-11 22:46 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-11 22:46 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-11 22:46 - 2015-07-01 22:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-11 22:46 - 2015-07-01 22:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-11 22:45 - 2015-07-30 19:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-08-11 22:45 - 2015-07-30 19:57 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-11 22:45 - 2015-07-30 19:57 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-11 22:45 - 2015-07-30 19:57 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-08-11 22:45 - 2015-07-30 19:57 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-11 22:45 - 2015-07-30 19:57 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-08-11 22:45 - 2015-07-30 19:57 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-08-11 22:45 - 2015-07-30 18:52 - 02384384 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-11 22:45 - 2015-07-30 18:49 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-11 22:45 - 2015-07-21 02:12 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-08-11 22:45 - 2015-07-16 22:20 - 19870208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-11 22:45 - 2015-07-16 22:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-08-11 22:45 - 2015-07-16 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-08-11 22:45 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-11 22:45 - 2015-07-16 21:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-08-11 22:45 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-11 22:45 - 2015-07-16 21:50 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-08-11 22:45 - 2015-07-16 21:49 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-08-11 22:45 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-11 22:45 - 2015-07-16 21:43 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-08-11 22:45 - 2015-07-16 21:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-08-11 22:45 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-11 22:45 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-11 22:45 - 2015-07-16 21:39 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-08-11 22:45 - 2015-07-16 21:39 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-08-11 22:45 - 2015-07-16 21:38 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-08-11 22:45 - 2015-07-16 21:32 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-11 22:45 - 2015-07-16 21:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-08-11 22:45 - 2015-07-16 21:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-11 22:45 - 2015-07-16 21:20 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-08-11 22:45 - 2015-07-16 21:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-08-11 22:45 - 2015-07-16 21:17 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-08-11 22:45 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-11 22:45 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-11 22:45 - 2015-07-16 21:06 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-11 22:45 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-11 22:45 - 2015-07-16 21:06 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-08-11 22:45 - 2015-07-16 21:05 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-08-11 22:45 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-11 22:45 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-11 22:45 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-11 22:45 - 2015-07-15 19:59 - 03989952 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-08-11 22:45 - 2015-07-15 19:59 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-08-11 22:45 - 2015-07-15 19:59 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-11 22:45 - 2015-07-15 19:59 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-08-11 22:45 - 2015-07-15 19:56 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-11 22:45 - 2015-07-15 19:55 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-11 22:45 - 2015-07-15 19:55 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-11 22:45 - 2015-07-15 19:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-08-11 22:45 - 2015-07-15 19:55 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-08-11 22:45 - 2015-07-15 19:55 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-08-11 22:45 - 2015-07-15 19:55 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-08-11 22:45 - 2015-07-15 19:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-11 22:45 - 2015-07-15 19:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-08-11 22:45 - 2015-07-15 19:55 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-08-11 22:45 - 2015-07-15 19:54 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-08-11 22:45 - 2015-07-15 19:54 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-08-11 22:45 - 2015-07-15 19:54 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-08-11 22:45 - 2015-07-15 19:54 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-11 22:45 - 2015-07-15 19:54 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-08-11 22:45 - 2015-07-15 19:54 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-08-11 22:45 - 2015-07-15 19:54 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-11 22:45 - 2015-07-15 19:54 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-11 22:45 - 2015-07-15 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-08-11 22:45 - 2015-07-15 19:54 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-08-11 22:45 - 2015-07-15 19:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-08-11 22:45 - 2015-07-15 19:54 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-08-11 22:45 - 2015-07-15 19:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-08-11 22:45 - 2015-07-15 19:49 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-08-11 22:45 - 2015-07-15 19:48 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-08-11 22:45 - 2015-07-15 19:44 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-08-11 22:45 - 2015-07-15 19:44 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-11 22:45 - 2015-07-15 18:36 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-08-11 22:45 - 2015-07-15 18:36 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-08-11 22:45 - 2015-07-15 18:36 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-08-11 22:45 - 2015-07-10 19:34 - 12875776 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-08-11 22:45 - 2015-05-09 20:09 - 00715200 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-11 22:44 - 2015-07-15 04:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-08-11 22:44 - 2015-07-15 04:55 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-08-11 22:44 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-08-11 22:44 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-08-11 17:07 - 2015-08-11 17:07 - 00000000 ____D C:\Users\Petra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-08-08 16:18 - 2015-08-08 16:18 - 00012472 _____ C:\Users\Petra\Desktop\malware.txt
2015-08-08 14:24 - 2015-08-08 14:24 - 00001071 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-08-08 14:24 - 2015-08-08 14:24 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2015-08-08 14:24 - 2015-06-18 08:41 - 00094936 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-08 14:24 - 2015-06-18 08:41 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-08 14:24 - 2015-06-18 08:41 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-08 14:23 - 2015-08-08 14:22 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Petra\Desktop\mbam-setup-2.1.8.1057.exe
2015-08-08 14:22 - 2015-08-08 14:22 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Petra\Downloads\mbam-setup-2.1.8.1057.exe
2015-08-08 11:57 - 2015-08-08 12:00 - 00000000 ____D C:\AdwCleaner
2015-08-08 11:56 - 2015-08-08 11:56 - 02248704 _____ C:\Users\Petra\Downloads\adwcleaner_4.208.exe
2015-08-08 11:56 - 2015-08-08 11:56 - 02248704 _____ C:\Users\Petra\Desktop\adwcleaner_4.208.exe
2015-08-07 21:40 - 2015-08-07 21:40 - 00000994 _____ C:\Users\Petra\Desktop\CCleaner.lnk
2015-08-07 12:46 - 2015-08-07 12:46 - 00001404 _____ C:\Users\Petra\Desktop\Internet Explorer.lnk
2015-08-07 12:39 - 2015-08-15 14:03 - 00017413 _____ C:\Users\Petra\Downloads\FRST.txt
2015-08-07 12:38 - 2015-08-07 12:38 - 40943744 _____ C:\Users\Petra\Downloads\Firefox Setup 39.0.exe
2015-08-07 12:38 - 2015-08-07 12:38 - 00000000 ____D C:\Users\Petra\Downloads\FRST-OlderVersion
2015-08-02 21:43 - 2015-08-05 20:09 - 00000000 ____D C:\Users\Petra\Desktop\Nová složka (4)
2015-07-30 22:06 - 2015-07-30 22:45 - 701231872 _____ C:\Users\Petra\Downloads\Kingsajz-1988--CZ-[HD-480x360-XVID].avi
2015-07-25 21:53 - 2015-07-25 22:32 - 709388928 _____ C:\Users\Petra\Downloads\Mrnouskove-Udoli-ztracenych-mravencu.csfd-79-animovany..bitvy-mezi-mravenci-a-hlavne-beruska-kterou-si-musi-oblibit-kazdy..avi
2015-07-25 20:41 - 2015-07-25 21:24 - 782604288 _____ C:\Users\Petra\Downloads\Jedna-ruka-netleská-(2003).avi
2015-07-24 18:07 - 2015-07-24 18:08 - 00443304 _____ C:\Users\Petra\Downloads\GeewaTheBigSecretofaSmallTownCs.exe
2015-07-17 17:46 - 2015-07-17 17:47 - 06994375 _____ C:\Users\Petra\Downloads\Crazy Painting.wmv

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-15 14:03 - 2015-04-05 13:28 - 00000000 ____D C:\FRST
2015-08-15 13:48 - 2014-03-30 19:02 - 00000000 ____D C:\Program Files\trend micro
2015-08-15 13:41 - 2015-06-16 13:15 - 00000918 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3808252141-163001717-3248989872-1000UA.job
2015-08-15 13:40 - 2015-05-16 14:28 - 00000940 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-15 13:25 - 2013-06-22 07:57 - 01940867 _____ C:\Windows\WindowsUpdate.log
2015-08-15 13:17 - 2009-07-14 06:34 - 00021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-15 13:17 - 2009-07-14 06:34 - 00021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-15 13:12 - 2015-05-16 14:28 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-15 13:12 - 2015-02-17 21:50 - 00000000 ___RD C:\Users\Petra\Dropbox
2015-08-15 13:12 - 2015-02-17 21:48 - 00000000 ____D C:\Users\Petra\AppData\Roaming\Dropbox
2015-08-15 13:11 - 2015-04-14 22:24 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-15 13:11 - 2013-10-06 22:07 - 00000000 ____D C:\Users\Tonik\AppData\Roaming\uTorrent
2015-08-15 13:06 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-15 13:06 - 2009-07-14 06:39 - 00137091 _____ C:\Windows\setupact.log
2015-08-14 18:41 - 2015-06-16 13:15 - 00000866 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3808252141-163001717-3248989872-1000Core.job
2015-08-12 15:42 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2015-08-12 14:00 - 2013-07-26 09:48 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-08-12 14:00 - 2013-07-26 09:48 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-08-12 12:16 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2015-08-12 11:51 - 2009-07-14 06:33 - 00452272 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-12 11:49 - 2014-12-12 20:19 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-12 11:49 - 2014-05-07 16:18 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-11 23:26 - 2014-08-24 14:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-11 23:26 - 2014-07-27 21:13 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-08-11 23:25 - 2014-08-24 14:44 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-08-11 23:22 - 2014-01-05 03:01 - 00000000 ____D C:\Windows\system32\MRT
2015-08-11 23:13 - 2014-01-05 03:01 - 129304528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-09 11:03 - 2013-06-22 08:11 - 00395664 _____ C:\Windows\PFRO.log
2015-08-08 21:10 - 2014-04-01 12:31 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-08 20:56 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\Offline Web Pages
2015-08-08 12:00 - 2015-04-06 16:57 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-08-07 12:38 - 2015-04-05 13:27 - 01673728 _____ (Farbar) C:\Users\Petra\Downloads\FRST.exe
2015-08-05 23:26 - 2013-07-26 10:16 - 00000000 ____D C:\Users\Petra\AppData\Roaming\Skype
2015-08-05 20:40 - 2013-07-26 10:16 - 00000000 ____D C:\ProgramData\Skype
2015-08-05 20:19 - 2015-06-27 21:39 - 00000000 ____D C:\Program Files\Alawar.cs
2015-08-05 20:08 - 2015-02-28 21:35 - 00000000 ____D C:\Program Files\Hry.cz
2015-08-05 20:08 - 2013-07-26 16:31 - 00000000 ____D C:\Users\Petra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hry.cz
2015-08-05 19:58 - 2014-05-18 18:31 - 00000000 ____D C:\Users\Petra\AppData\Local\CrashDumps
2015-08-03 10:37 - 2015-04-04 21:53 - 00000000 ____D C:\Users\Petra\AppData\Local\Google
2015-08-02 22:26 - 2009-07-21 07:30 - 01583226 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-02 21:45 - 2014-10-25 21:39 - 00000000 ___RD C:\Users\Petra\Desktop\Muzika
2015-07-28 12:57 - 2009-07-21 08:20 - 00000000 ____D C:\Windows\Panther
2015-07-28 12:48 - 2015-07-10 15:47 - 00000000 ___HD C:\$Windows.~BT
2015-07-25 13:06 - 2015-04-04 15:34 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-24 18:10 - 2015-04-06 18:17 - 00000000 ____D C:\ProgramData\AlawarWrapper

==================== Files in the root of some directories =======

2014-03-08 18:29 - 2014-03-08 19:29 - 0649350 _____ () C:\Users\Petra\AppData\Roaming\log.sflog
2014-07-21 22:37 - 2014-07-21 22:37 - 0000017 _____ () C:\Users\Petra\AppData\Local\resmon.resmoncfg

Some files in TEMP:
====================
C:\Users\Petra\AppData\Local\Temp\16865.exe
C:\Users\Petra\AppData\Local\Temp\17414.exe
C:\Users\Petra\AppData\Local\Temp\19795.exe
C:\Users\Petra\AppData\Local\Temp\22603.exe
C:\Users\Petra\AppData\Local\Temp\27494.exe
C:\Users\Petra\AppData\Local\Temp\27555.exe
C:\Users\Petra\AppData\Local\Temp\8918.exe
C:\Users\Petra\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpv15c6k.dll
C:\Users\Petra\AppData\Local\Temp\gamebox.exe
C:\Users\Petra\AppData\Local\Temp\GeewaAbyssTheWraithsofEdenCollectorsEditionCs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaGardensInc3ABridalPursuitCollectorsEditionCs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaHerooftheKingdom2Cs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaIslaDoradaEpisode1TheSandsofEphranisCs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaMythsOfOrionLightfromtheNorthDeluxeEditionCs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaRedemptionCemeteryGraveTestimonyCollectorsEditionCs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaRunawayExpressMysteryCs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaRunefallCs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaTheBigSecretofaSmallTownCs_0.exe
C:\Users\Petra\AppData\Local\Temp\GeewaTheMusketeersVictoriasQuestCs_0.exe
C:\Users\Petra\AppData\Local\Temp\Quarantine.exe
C:\Users\Petra\AppData\Local\Temp\RescueTeam4_24436.exe
C:\Users\Petra\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Petra\AppData\Local\Temp\sqlite3.dll
C:\Users\Tonik\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-08-12 15:35

==================== End of log ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015
Ran by Petra at 2015-04-05 13:30:26
Running from C:\Users\Petra\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-3808252141-163001717-3248989872-1000\...\uTorrent) (Version: 3.4.2.39789 - BitTorrent Inc.)
12 úkolů pro Herkula III: Dívčí síla (HKU\S-1-5-21-3808252141-163001717-3248989872-1000\...\12 úkolů pro Herkula III: Dívčí síla) (Version: 1.0.0.0 - Alawar Entertainment Inc.)
7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )
Adobe Flash Player 10 ActiveX (HKLM\...\{B7B3E9B3-FB14-4927-894B-E9124509AF5A}) (Version: 10.0.32.18 - Adobe Systems, Inc.)
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Czech (HKLM\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Asistent pro přihlášení ke službě Windows Live (HKLM\...\{BD86C297-41C7-4DB5-82C4-98DE3399A2EF}) (Version: 5.000.818.6 - Microsoft Corporation)
Avast Premier (HKLM\...\Avast) (Version: 10.2.2215 - AVAST Software)
Big Fish: Game Manager (HKLM\...\BFGC) (Version: 3.3.0.2 - )
Bing Bar (HKLM\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.02 - Piriform)
Cognition - Episode 4 version 1 (HKLM\...\{DD904F45-C570-4EB9-B13A-A8533FCDCCD0}_is1) (Version: 1 - Phoenix Online Studios LLC)
Create Recovery Media (HKLM\...\{50DC5136-21E8-48BC-97E5-1AD055F6B0B6}) (Version: 1.20.0.00 - Lenovo Group Limited)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.47.1.0335 - Disc Soft Ltd)
Defraggler (HKLM\...\Defraggler) (Version: 2.17 - Piriform)
DirectX 9 Runtime (Version: 1.00.0000 - Sonic Solutions) Hidden
Dropbox (HKU\S-1-5-21-3808252141-163001717-3248989872-1000\...\Dropbox) (Version: 3.2.9 - Dropbox, Inc.)
FanSpeedControl (HKLM\...\InstallShield_{0EEE1342-643E-44CB-97D0-2591FFDE0126}) (Version: 1.00.00.12 - Lenovo)
FanSpeedControl (Version: 1.00.00.12 - Lenovo) Hidden
Free Samples Vol. 1 by Dj Luczan version for Windows (HKLM\...\{15A66C44-85AD-B397-6D69-EF735B639A9B}_is1) (Version: for Windows - )
Google Chrome (HKLM\...\Google Chrome) (Version: 41.0.2272.118 - Google Inc.)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden
Choice Guard (Version: 1.2.87.0 - Microsoft Corporation) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - Intel Corporation)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.510 - Oracle)
Lenovo ThinkVantage Toolbox (HKLM\...\PC-Doctor for Windows) (Version: 6.0.5387.14 - PC-Doctor, Inc.)
Lenovo Welcome (HKLM\...\Lenovo Welcome_is1) (Version: 2.0.019.0 - Lenovo)
Message Center Plus (HKLM\...\{FD331A3B-F7A5-4C31-B8D4-DF413C85AF7A}) (Version: 2.0.0012.00 - Lenovo Group Limited)
Microsoft .NET Framework 4.5.1 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Minecraft 1.3.2 version for Windows (HKLM\...\{EBB82E53-4566-3A42-90E9- A3515FF2CB4}_is1) (Version: for Windows - )
Mozilla Firefox 37.0 (x86 cs) (HKLM\...\Mozilla Firefox 37.0 (x86 cs)) (Version: 37.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mýty Orionu: Spása ze severu (HKU\S-1-5-21-3808252141-163001717-3248989872-1000\...\Mýty Orionu: Spása ze severu) (Version: 1.0.0.0 - Alawar Entertainment Inc.)
Nástroj pro odesílání služby Windows Live (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Need for Speed™ Carbon (HKLM\...\{259C0ABB-A3B2-4D70-008F-BF7EE491B70B}) (Version: - )
Northern Tale (HKLM\...\Northern Tale1.0) (Version: 1.0 - Foxy Games)
Norton Internet Security (Version: 16.7.0.30 - Symantec Corporation) Hidden
NVIDIA PhysX (HKLM\...\{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}) (Version: 9.12.0613 - NVIDIA Corporation)
Origin (HKLM\...\Origin) (Version: 9.3.7.2735 - Electronic Arts, Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5911 - Realtek Semiconductor Corp.)
Rescue and Recovery (HKLM\...\{B383F243-0ABC-4E56-AA30-923B8D85076E}) (Version: 4.30.0025.00 - Lenovo Group Limited)
Rescue Team 4 (HKLM\...\Rescue Team 41.1) (Version: 1.1 - Foxy Games)
Roxio Creator Small Business Edition (HKLM\...\{537BF16E-7412-448C-95D8-846E85A1D817}) (Version: 10.3 - Roxio)
Royal Envoy 3 - Campaign for the Crown CE (HKLM\...\Royal Envoy 3 - Campaign for the Crown CEFinal) (Version: Final - AllSmartGames)
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Sonic CinePlayer Decoder Pack (Version: 4.3.0 - Sonic Solutions) Hidden
Sonic Icons for Lenovo (HKLM\...\{B334D9AE-1393-423E-97C0-3BDC3360E692}) (Version: 2.0.0 - Lenovo)
Sony Ericsson Update Engine (HKLM\...\Update Engine) (Version: 2.13.10.201308300830 - Sony Ericsson Communications AB)
Sony PC Companion 2.10.197 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.197 - Sony)
System Update (HKLM\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 4.00.0007 - Lenovo)
TeamViewer 9 (HKLM\...\TeamViewer 9) (Version: 9.0.26297 - TeamViewer)
ThinkVantage Power Manager (HKLM\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 1.01.0064 - Lenovo Group Limited)
Unity Web Player (HKU\S-1-5-21-3808252141-163001717-3248989872-1000\...\UnityWebPlayer) (Version: 4.5.3f3 - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player 2.0.8 (HKLM\...\VLC media player) (Version: 2.0.8 - VideoLAN)
Weather Lord 3 - In Pursuit of the Shaman (HKLM\...\Weather Lord 3 - In Pursuit of the ShamanFinal) (Version: Final - Game-Owl.com)
Web of Deceit - Black Widow Collector's Edition (HKLM\...\Web of Deceit - Black Widow Collector's EditionFinal) (Version: Final - AllSmartGames)
Winamp (HKLM\...\Winamp) (Version: 5.65 - Nullsoft, Inc)
Winamp Detector Plug-in (HKU\S-1-5-21-3808252141-163001717-3248989872-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Driver Package - Intel Corporation (igfx) Display (07/28/2009 8.15.10.1855) (HKLM\...\F72C19F49669B7F5F229BB51895CB31FB56993F7) (Version: 07/28/2009 8.15.10.1855 - Intel Corporation)
Windows Driver Package - Realtek Semiconductor Corp. HD Audio Driver (08/05/2009 6.0.1.5911) (HKLM\...\3D521A9B0C0925C77D4D5276998FFF6DF66CBA2F) (Version: 08/05/2009 6.0.1.5911 - Realtek Semiconductor Corp.)
Windows Driver Package - Realtek Semiconductor Corp. HD Audio Driver (08/05/2009 6.0.1.5911) (HKLM\...\EDB0CD5E842AE668D9A01C6275DA2CD736D3DD06) (Version: 08/05/2009 6.0.1.5911 - Realtek Semiconductor Corp.)
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8050.1202 - Microsoft Corporation)
WinZip 18.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240E2}) (Version: 18.5.11111 - WinZip Computing, S.L. )
Zoner Photo Studio 8 (HKLM\...\Zoner Photo Studio 8_is1) (Version: - ZONER software)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3808252141-163001717-3248989872-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Petra\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3808252141-163001717-3248989872-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Petra\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-3808252141-163001717-3248989872-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3808252141-163001717-3248989872-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3808252141-163001717-3248989872-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3808252141-163001717-3248989872-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3808252141-163001717-3248989872-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3808252141-163001717-3248989872-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3808252141-163001717-3248989872-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3808252141-163001717-3248989872-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3808252141-163001717-3248989872-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Petra\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)

==================== Restore Points =========================

14-03-2015 14:09:31 Windows Update
18-03-2015 18:30:53 Windows Update
22-03-2015 00:03:16 Windows Update
25-03-2015 00:42:58 Windows Update
29-03-2015 15:52:08 Windows Update
02-04-2015 16:16:19 Windows Update
04-04-2015 15:34:21 Windows Update
04-04-2015 21:55:36 avast! antivirus system restore point
04-04-2015 21:58:44 Instalace balíčku ovladače zařízení: Avast Síťová služba
05-04-2015 12:00:47 zoek.exe restore point

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {09CAEB3E-0414-445A-B9E0-EE9C1F4A1910} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-04-04] (Google Inc.)
Task: {381FDA3E-A996-4D32-8606-C934A74C57AB} - System32\Tasks\TVT\LaunchRnR => %RR%\rrcmd.exe
Task: {42193FDC-9949-4D57-B0AA-293C9206FA9C} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {4340A820-A3FE-4323-A442-9F80EF4A81F6} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {4AA130A9-972C-4785-86D9-4E58B7DDEBBE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-04-04] (Google Inc.)
Task: {5103063B-063D-4FCD-8919-909C91A3A509} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {5FF1E052-AAEC-4C6D-A855-5095C932C278} - System32\Tasks\TVT\ChangePWD => %RR%\rrcmd.exe
Task: {7FDE6AA3-E00E-4817-8CBF-5D2E079C2E46} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-04-04] (Avast Software s.r.o.)
Task: {84833638-E80C-40FD-A409-2A9254A3E90D} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\pcdr5cuiw32.exe [2009-08-26] (PC-Doctor, Inc.)
Task: {97C5FB94-B584-4769-81D3-FB2072435AD4} - System32\Tasks\{1D344E48-3F83-48AC-BB74-F2E66D9FE303} => pcalua.exe -a "C:\Program Files\Alawarhry.cz\Mystery Trackers - Silent Hollow\Uninstall.exe" -d "C:\Program Files\Alawarhry.cz\Mystery Trackers - Silent Hollow"
Task: {A1944727-EFD4-49A8-A3CC-D31EBD47FAF4} - System32\Tasks\{C79EDC4F-1B79-45DF-8FF8-EFC0D6F23BC6} => pcalua.exe -a C:\Users\Petra\Downloads\Amaranthine-Voyage-The-Tree-of-Life-Collector_'s-Edition.exe -d C:\Users\Petra\Downloads
Task: {A73BE824-DA54-42F5-873A-EB0C169DA369} - System32\Tasks\TVT\UpdateRnR => %TVTCOMMON%\Scheduler\tvtsetsched.exe
Task: {C89E39B7-2E55-40CA-A953-A1FD8CF78715} - System32\Tasks\trivia_games_updating_service => C:\Program Files\trivia games\trivia_games_updating_service.exe [2015-04-02] ()
Task: {CB94499D-C39C-4950-84C6-5EFECC792C5C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04] (Adobe Systems Incorporated)
Task: {CE39C608-9491-4177-BEFF-BF6F9E2A038D} - System32\Tasks\{DCEC0F67-540A-4877-9A41-4D33A5C4DC40} => pcalua.exe -a C:\Users\Petra\Downloads\Botanica-2---Earthbound-Collector's-Edition.exe -d C:\Users\Petra\Downloads
Task: {D1759FDD-B30B-4A5B-AFF5-FCF38C092114} - System32\Tasks\realtekHDAudio => c:\program files\realtek\audio\hda\rthdvcpl.exe [2009-08-05] (Realtek Semiconductor)
Task: {DBB77CCF-BECF-4BB2-A066-3B940F352324} - System32\Tasks\PMTask => C:\Program Files\ThinkPad\Utilities\PWMIDTSV.EXE [2009-08-13] (Lenovo Group Limited)
Task: {DE61901C-574D-4D74-9ED6-FCB1E6C2A953} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {E87E36BB-FE3B-4F63-B954-4004947F330D} - System32\Tasks\{0676D658-BEFB-471A-A70C-B4CAF0DE0A02} => Firefox.exe http://ui.skype.com/ui/0/6.16.0.105/cs/ ... e=tsPlugin
Task: {F2529144-D69B-4D95-8882-B33F4B62583A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\trivia_games_notification_service.job => C:\Program Files\trivia games\trivia_games_notification_service.exeč/url='http:/cdn.selectbestopt.com/notf_sys/index.html' /crregname='trivia games' /appid='73143' /srcid='2913' /bic='65e4bc8765036e81c8f271d18d15acca' /verifier='27e3ed5f2ded0596d7e1164d6764ea8d' /installerversion='1.50.3.10' /statsdomain='http:/stats.buildomserv.com/data.gif?' /errorsdomain='http:/stats.buildomserv.com/data.gif?' /monetizationdomain='http:/logs.buildomserv.com/monetization.gif
Task: C:\Windows\Tasks\trivia_games_updating_service.job => C:\Program Files\trivia games\trivia_games_updating_service.exe­ /campid=2913 /verid=1 /url=http:/cdn.buildomserv.com/txt/@CAMPID@/@VER@/file.txt /appid=73143 /taskname=trivia_games_updating_service /funurl=http:/stats.buildomserv.com

==================== Loaded Modules (whitelisted) ==============

2015-04-04 21:57 - 2015-04-04 21:57 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-04 21:57 - 2015-04-04 21:57 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-04-05 10:40 - 2015-04-05 10:40 - 02923520 _____ () C:\Program Files\AVAST Software\Avast\defs\15040500\algo.dll
2012-11-09 11:18 - 2012-11-09 11:18 - 00024064 ____N () C:\Windows\System32\xrxs1l3.dll
2013-06-22 07:54 - 2009-08-11 19:00 - 00028672 ____N () C:\Program Files\ThinkPad\Utilities\US\PWMRT32V.DLL
2009-05-28 07:09 - 2009-05-28 07:09 - 00049976 ____N () C:\Program Files\Lenovo\Message Center Plus\MCPLaunch.exe
2015-04-04 21:57 - 2015-04-04 21:57 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-03-05 00:08 - 2015-03-05 00:08 - 00750080 _____ () C:\Users\Petra\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2015-04-05 12:47 - 2015-04-05 12:47 - 00043008 _____ () c:\users\petra\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgucqds.dll
2015-03-05 00:08 - 2015-03-05 00:08 - 00047616 _____ () C:\Users\Petra\AppData\Roaming\Dropbox\bin\libEGL.dll
2015-03-05 00:08 - 2015-03-05 00:08 - 00865280 _____ () C:\Users\Petra\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2015-03-05 00:07 - 2015-03-05 00:07 - 00200704 _____ () C:\Users\Petra\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2015-02-04 23:11 - 2015-02-04 23:11 - 16852144 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:00D99749
AlternateDataStreams: C:\ProgramData\TEMP:02DD996C
AlternateDataStreams: C:\ProgramData\TEMP:04D30F4C
AlternateDataStreams: C:\ProgramData\TEMP:09629F6E
AlternateDataStreams: C:\ProgramData\TEMP:0AF6266B
AlternateDataStreams: C:\ProgramData\TEMP:0CEE6109
AlternateDataStreams: C:\ProgramData\TEMP:0EBD727C
AlternateDataStreams: C:\ProgramData\TEMP:0ED45B2E
AlternateDataStreams: C:\ProgramData\TEMP:0F64164E
AlternateDataStreams: C:\ProgramData\TEMP:103E96B0
AlternateDataStreams: C:\ProgramData\TEMP:115EA582
AlternateDataStreams: C:\ProgramData\TEMP:11EF326F
AlternateDataStreams: C:\ProgramData\TEMP:16777CF9
AlternateDataStreams: C:\ProgramData\TEMP:195E8317
AlternateDataStreams: C:\ProgramData\TEMP:197E3428
AlternateDataStreams: C:\ProgramData\TEMP:2339C9FD
AlternateDataStreams: C:\ProgramData\TEMP:25249477
AlternateDataStreams: C:\ProgramData\TEMP:268A5068
AlternateDataStreams: C:\ProgramData\TEMP:2B5C4773
AlternateDataStreams: C:\ProgramData\TEMP:2CA4B471
AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F
AlternateDataStreams: C:\ProgramData\TEMP:2F717FB3
AlternateDataStreams: C:\ProgramData\TEMP:311A2F6A
AlternateDataStreams: C:\ProgramData\TEMP:32AE8659
AlternateDataStreams: C:\ProgramData\TEMP:3393A1CA
AlternateDataStreams: C:\ProgramData\TEMP:35501BA4
AlternateDataStreams: C:\ProgramData\TEMP:35E8E596
AlternateDataStreams: C:\ProgramData\TEMP:366B74CA
AlternateDataStreams: C:\ProgramData\TEMP:3AC9F212
AlternateDataStreams: C:\ProgramData\TEMP:3C0F646D
AlternateDataStreams: C:\ProgramData\TEMP:3D3F1635
AlternateDataStreams: C:\ProgramData\TEMP:3D507E52
AlternateDataStreams: C:\ProgramData\TEMP:415E77AB
AlternateDataStreams: C:\ProgramData\TEMP:447856CD
AlternateDataStreams: C:\ProgramData\TEMP:45A64DE6
AlternateDataStreams: C:\ProgramData\TEMP:489EA5E5
AlternateDataStreams: C:\ProgramData\TEMP:491270B8
AlternateDataStreams: C:\ProgramData\TEMP:4A03F06E
AlternateDataStreams: C:\ProgramData\TEMP:4B6A9FDA
AlternateDataStreams: C:\ProgramData\TEMP:4C3504B5
AlternateDataStreams: C:\ProgramData\TEMP:4C3B92C7
AlternateDataStreams: C:\ProgramData\TEMP:4EE323A4
AlternateDataStreams: C:\ProgramData\TEMP:506698B2
AlternateDataStreams: C:\ProgramData\TEMP:5C28E25F
AlternateDataStreams: C:\ProgramData\TEMP:5CBA5665
AlternateDataStreams: C:\ProgramData\TEMP:5E209A50
AlternateDataStreams: C:\ProgramData\TEMP:5E481579
AlternateDataStreams: C:\ProgramData\TEMP:605645B0
AlternateDataStreams: C:\ProgramData\TEMP:60E755E6
AlternateDataStreams: C:\ProgramData\TEMP:611EAF9F
AlternateDataStreams: C:\ProgramData\TEMP:639F0420
AlternateDataStreams: C:\ProgramData\TEMP:641A21EA
AlternateDataStreams: C:\ProgramData\TEMP:6C74C778
AlternateDataStreams: C:\ProgramData\TEMP:6E39144C
AlternateDataStreams: C:\ProgramData\TEMP:6F3BEBA5
AlternateDataStreams: C:\ProgramData\TEMP:71612023
AlternateDataStreams: C:\ProgramData\TEMP:737160C1
AlternateDataStreams: C:\ProgramData\TEMP:7687A3E3
AlternateDataStreams: C:\ProgramData\TEMP:7B2BB690
AlternateDataStreams: C:\ProgramData\TEMP:7B9BB187
AlternateDataStreams: C:\ProgramData\TEMP:7BB584AA
AlternateDataStreams: C:\ProgramData\TEMP:7E47A57F
AlternateDataStreams: C:\ProgramData\TEMP:82D85D00
AlternateDataStreams: C:\ProgramData\TEMP:860356DC
AlternateDataStreams: C:\ProgramData\TEMP:89C22C79
AlternateDataStreams: C:\ProgramData\TEMP:8A573D22
AlternateDataStreams: C:\ProgramData\TEMP:8C84E358
AlternateDataStreams: C:\ProgramData\TEMP:92D35C13
AlternateDataStreams: C:\ProgramData\TEMP:934CA750
AlternateDataStreams: C:\ProgramData\TEMP:95D421DF
AlternateDataStreams: C:\ProgramData\TEMP:9CD7CD43
AlternateDataStreams: C:\ProgramData\TEMP:9E5EA7A3
AlternateDataStreams: C:\ProgramData\TEMP:A0921B2C
AlternateDataStreams: C:\ProgramData\TEMP:A6A65B80
AlternateDataStreams: C:\ProgramData\TEMP:A6E01F67
AlternateDataStreams: C:\ProgramData\TEMP:A81A3C86
AlternateDataStreams: C:\ProgramData\TEMP:A8BF0AE2
AlternateDataStreams: C:\ProgramData\TEMP:AC4119D5
AlternateDataStreams: C:\ProgramData\TEMP:B059B88E
AlternateDataStreams: C:\ProgramData\TEMP:B9C6EB6C
AlternateDataStreams: C:\ProgramData\TEMP:BB0F4AA4
AlternateDataStreams: C:\ProgramData\TEMP:BC8E9899
AlternateDataStreams: C:\ProgramData\TEMP:BCF55336
AlternateDataStreams: C:\ProgramData\TEMP:BD414E4B
AlternateDataStreams: C:\ProgramData\TEMP:BE40C8A2
AlternateDataStreams: C:\ProgramData\TEMP:BFED0CBB
AlternateDataStreams: C:\ProgramData\TEMP:C36F1B98
AlternateDataStreams: C:\ProgramData\TEMP:CB08ED9D
AlternateDataStreams: C:\ProgramData\TEMP:CE707633
AlternateDataStreams: C:\ProgramData\TEMP:D5D75FF0
AlternateDataStreams: C:\ProgramData\TEMP:DA55B48C
AlternateDataStreams: C:\ProgramData\TEMP:DE0BD04E
AlternateDataStreams: C:\ProgramData\TEMP:DF7A2D3E
AlternateDataStreams: C:\ProgramData\TEMP:E0CAA39F
AlternateDataStreams: C:\ProgramData\TEMP:E21987F7
AlternateDataStreams: C:\ProgramData\TEMP:E4BC4A41
AlternateDataStreams: C:\ProgramData\TEMP:ED4272E5
AlternateDataStreams: C:\ProgramData\TEMP:EF123AF6
AlternateDataStreams: C:\ProgramData\TEMP:F123F8B9
AlternateDataStreams: C:\ProgramData\TEMP:F92E1E4B
AlternateDataStreams: C:\ProgramData\TEMP:FA7523FF
AlternateDataStreams: C:\ProgramData\TEMP:FE1028DD
AlternateDataStreams: C:\ProgramData\TEMP:FF9EC6D2
AlternateDataStreams: C:\Users\Petra\Downloads\re__fwd__oznameni_o_zadani_domaci_platby.eml:OECustomProperty

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3808252141-163001717-3248989872-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Petra\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrator (S-1-5-21-3808252141-163001717-3248989872-500 - Administrator - Disabled)
Guest (S-1-5-21-3808252141-163001717-3248989872-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3808252141-163001717-3248989872-1002 - Limited - Enabled)
Petra (S-1-5-21-3808252141-163001717-3248989872-1000 - Administrator - Enabled) => C:\Users\Petra
Tonik (S-1-5-21-3808252141-163001717-3248989872-1003 - Limited - Enabled) => C:\Users\Tonik

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Adaptér tunelového režimu Microsoft Teredo
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/05/2015 00:02:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: plugin-container.exe, verze: 37.0.0.5563, časové razítko: 0x5514e0c0
Název chybujícího modulu: mozalloc.dll, verze: 37.0.0.5563, časové razítko: 0x5514d213
Kód výjimky: 0x80000003
Posun chyby: 0x00001aa1
ID chybujícího procesu: 0x900
Čas spuštění chybující aplikace: 0xplugin-container.exe0
Cesta k chybující aplikaci: plugin-container.exe1
Cesta k chybujícímu modulu: plugin-container.exe2
ID zprávy: plugin-container.exe3

Error: (04/05/2015 10:59:12 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program RSIT.exe verze 0.0.0.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: f40

Čas spuštění: 01d06f7e3fefd7ae

Čas ukončení: 10

Cesta k aplikaci: C:\Users\Petra\Downloads\RSIT.exe

ID hlášení:

Error: (04/04/2015 10:02:36 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.


Details:
AddWin32ServiceFiles: Unable to back up image of service Update HypeNet since QueryServiceConfig API failed

System Error:
Systém nemůže nalézt uvedený soubor.
.

Error: (04/04/2015 10:02:08 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.


Details:
AddWin32ServiceFiles: Unable to back up image of service Update HypeNet since QueryServiceConfig API failed

System Error:
Systém nemůže nalézt uvedený soubor.
.

Error: (04/04/2015 09:58:50 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.


Details:
AddWin32ServiceFiles: Unable to back up image of service Update HypeNet since QueryServiceConfig API failed

System Error:
Systém nemůže nalézt uvedený soubor.
.

Error: (04/04/2015 09:55:44 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.


Details:
AddWin32ServiceFiles: Unable to back up image of service Update HypeNet since QueryServiceConfig API failed

System Error:
Systém nemůže nalézt uvedený soubor.
.

Error: (04/04/2015 09:55:32 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Chyba služby Stínová kopie svazků: Při dotazu na rozhraní IVssWriterCallback došlo k neočekávané chybě. hr = 0x80070005, Přístup byl odepřen.
.
To je často způsobeno nesprávným nastavením zabezpečení v modulu pro zápis nebo žadateli.


Operace:
Shromažďování dat modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {e8132975-6f93-4464-a53e-1050253ae220}
Název modulu pro zápis: System Writer
ID instance modulu pro zápis: {c1b53957-9277-4daf-b322-d149d2f09b4e}

Error: (04/01/2015 08:04:00 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program ZPS8.EXE verze 8.0.1.1 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 13f0

Čas spuštění: 01d06ca60462f015

Čas ukončení: 9

Cesta k aplikaci: C:\Program Files\Zoner\Photo Studio 8\Program\ZPS8.EXE

ID hlášení: 69e1b301-d899-11e4-8f5c-4487fcde5973

Error: (04/01/2015 05:54:46 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1 se nezdařilo.
Závislé sestavení Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (04/01/2015 05:53:10 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 se nezdařilo.
Závislé sestavení Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.


System errors:
=============
Error: (04/05/2015 00:46:08 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: Při pokusu o načtení souboru místních hostitelů došlo k chybě.

Error: (04/05/2015 00:38:56 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (04/05/2015 00:38:56 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (04/05/2015 00:38:55 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (04/05/2015 00:38:55 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (04/05/2015 00:38:54 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (04/05/2015 11:47:49 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Správce služeb se pokusil o opravnou akci (Restartovat službu) po nečekaném ukončení služby Windows Search, ale tato akce selhala kvůli následující chybě:
%%1056

Error: (04/05/2015 11:47:19 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 2 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (04/05/2015 11:47:02 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba ThinkVantage Registry Monitor Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (04/05/2015 11:47:02 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba System Update byla neočekávaně ukončena. Tento stav nastal již 1krát.


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Processor: Pentium(R) Dual-Core CPU E5500 @ 2.80GHz
Percentage of memory in use: 61%
Total physical RAM: 1917.24 MB
Available physical RAM: 742.25 MB
Total Pagefile: 3834.48 MB
Available Pagefile: 2207.14 MB
Total Virtual: 2047.88 MB
Available Virtual: 1899.75 MB

==================== Drives ================================

Drive c: (Windows7_OS) (Fixed) (Total:454.33 GB) (Free:345.45 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (Nové) (CDROM) (Total:0.05 GB) (Free:0 GB) CDFS
Drive q: (Lenovo_Recovery) (Fixed) (Total:10.25 GB) (Free:5.8 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: D0802942)
Partition 1: (Active) - (Size=1.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=454.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=10.3 GB) - (Type=07 NTFS)

==================== End Of Log ============================

To sice moc podle navodu nebylo, no ale aspon tak.


Napiste mi velikost adresare plochy (C:\Users\Petra\Plocha)


Odinstalujte Microsoft Security Essentials.



Presunte FRST primo na plochu, jinak to nebude fungovat.
Otevrete si poznamkovy blok a zkopirujte do nej tento skript Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev fixlist a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte FRST jako spravce, kliknete na napis Fix a program vykona prikazy.
Po restartu pc by se mel objevit novy log - s nazvem fixlog, ten mi sem zase zkopirujte.

zdravim,velikost slozky plocha je 5.54 gb.

Fix result of Farbar Recovery Scan Tool (x86) Version:16-08-2015
Ran by Petra (2015-08-16 19:12:21) Run:2
Running from C:\Users\Petra\Desktop
Loaded Profiles: Petra (Available Profiles: Petra & Tonik)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2015-04-10] (Oracle Corporation)
HKU\S-1-5-21-3808252141-163001717-3248989872-1000\...\Run: [Dropbox Update] => C:\Users\Petra\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-16] (Dropbox, Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\trivia_games_notification_service.job => C:\Program Files\trivia games\trivia_games_notification_service.exeč/url='http:/cdn.selectbestopt.com/notf_sys/index.html' /crregname='trivia games' /appid='73143' /srcid='2913' /bic='65e4bc8765036e81c8f271d18d15acca' /verifier='27e3ed5f2ded0596d7e1164d6764ea8d' /installerversion='1.50.3.10' /statsdomain='http:/stats.buildomserv.com/data.gif?' /errorsdomain='http:/stats.buildomserv.com/data.gif?' /monetizationdomain='http:/logs.buildomserv.com/monetization.gif
Task: C:\Windows\Tasks\trivia_games_updating_service.job => C:\Program Files\trivia games\trivia_games_updating_service.exe­ /campid=2913 /verid=1 /url=http:/cdn.buildomserv.com/txt/@CAMPID@/@VER@/file.txt /appid=73143 /taskname=trivia_games_updating_service /funurl=http:/stats.buildomserv.com

AlternateDataStreams: C:\ProgramData\TEMP:00D99749
AlternateDataStreams: C:\ProgramData\TEMP:02DD996C
AlternateDataStreams: C:\ProgramData\TEMP:04D30F4C
AlternateDataStreams: C:\ProgramData\TEMP:09629F6E
AlternateDataStreams: C:\ProgramData\TEMP:0AF6266B
AlternateDataStreams: C:\ProgramData\TEMP:0CEE6109
AlternateDataStreams: C:\ProgramData\TEMP:0EBD727C
AlternateDataStreams: C:\ProgramData\TEMP:0ED45B2E
AlternateDataStreams: C:\ProgramData\TEMP:0F64164E
AlternateDataStreams: C:\ProgramData\TEMP:103E96B0
AlternateDataStreams: C:\ProgramData\TEMP:115EA582
AlternateDataStreams: C:\ProgramData\TEMP:11EF326F
AlternateDataStreams: C:\ProgramData\TEMP:16777CF9
AlternateDataStreams: C:\ProgramData\TEMP:195E8317
AlternateDataStreams: C:\ProgramData\TEMP:197E3428
AlternateDataStreams: C:\ProgramData\TEMP:2339C9FD
AlternateDataStreams: C:\ProgramData\TEMP:25249477
AlternateDataStreams: C:\ProgramData\TEMP:268A5068
AlternateDataStreams: C:\ProgramData\TEMP:2B5C4773
AlternateDataStreams: C:\ProgramData\TEMP:2CA4B471
AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F
AlternateDataStreams: C:\ProgramData\TEMP:2F717FB3
AlternateDataStreams: C:\ProgramData\TEMP:311A2F6A
AlternateDataStreams: C:\ProgramData\TEMP:32AE8659
AlternateDataStreams: C:\ProgramData\TEMP:3393A1CA
AlternateDataStreams: C:\ProgramData\TEMP:35501BA4
AlternateDataStreams: C:\ProgramData\TEMP:35E8E596
AlternateDataStreams: C:\ProgramData\TEMP:366B74CA
AlternateDataStreams: C:\ProgramData\TEMP:3AC9F212
AlternateDataStreams: C:\ProgramData\TEMP:3C0F646D
AlternateDataStreams: C:\ProgramData\TEMP:3D3F1635
AlternateDataStreams: C:\ProgramData\TEMP:3D507E52
AlternateDataStreams: C:\ProgramData\TEMP:415E77AB
AlternateDataStreams: C:\ProgramData\TEMP:447856CD
AlternateDataStreams: C:\ProgramData\TEMP:45A64DE6
AlternateDataStreams: C:\ProgramData\TEMP:489EA5E5
AlternateDataStreams: C:\ProgramData\TEMP:491270B8
AlternateDataStreams: C:\ProgramData\TEMP:4A03F06E
AlternateDataStreams: C:\ProgramData\TEMP:4B6A9FDA
AlternateDataStreams: C:\ProgramData\TEMP:4C3504B5
AlternateDataStreams: C:\ProgramData\TEMP:4C3B92C7
AlternateDataStreams: C:\ProgramData\TEMP:4EE323A4
AlternateDataStreams: C:\ProgramData\TEMP:506698B2
AlternateDataStreams: C:\ProgramData\TEMP:5C28E25F
AlternateDataStreams: C:\ProgramData\TEMP:5CBA5665
AlternateDataStreams: C:\ProgramData\TEMP:5E209A50
AlternateDataStreams: C:\ProgramData\TEMP:5E481579
AlternateDataStreams: C:\ProgramData\TEMP:605645B0
AlternateDataStreams: C:\ProgramData\TEMP:60E755E6
AlternateDataStreams: C:\ProgramData\TEMP:611EAF9F
AlternateDataStreams: C:\ProgramData\TEMP:639F0420
AlternateDataStreams: C:\ProgramData\TEMP:641A21EA
AlternateDataStreams: C:\ProgramData\TEMP:6C74C778
AlternateDataStreams: C:\ProgramData\TEMP:6E39144C
AlternateDataStreams: C:\ProgramData\TEMP:6F3BEBA5
AlternateDataStreams: C:\ProgramData\TEMP:71612023
AlternateDataStreams: C:\ProgramData\TEMP:737160C1
AlternateDataStreams: C:\ProgramData\TEMP:7687A3E3
AlternateDataStreams: C:\ProgramData\TEMP:7B2BB690
AlternateDataStreams: C:\ProgramData\TEMP:7B9BB187
AlternateDataStreams: C:\ProgramData\TEMP:7BB584AA
AlternateDataStreams: C:\ProgramData\TEMP:7E47A57F
AlternateDataStreams: C:\ProgramData\TEMP:82D85D00
AlternateDataStreams: C:\ProgramData\TEMP:860356DC
AlternateDataStreams: C:\ProgramData\TEMP:89C22C79
AlternateDataStreams: C:\ProgramData\TEMP:8A573D22
AlternateDataStreams: C:\ProgramData\TEMP:8C84E358
AlternateDataStreams: C:\ProgramData\TEMP:92D35C13
AlternateDataStreams: C:\ProgramData\TEMP:934CA750
AlternateDataStreams: C:\ProgramData\TEMP:95D421DF
AlternateDataStreams: C:\ProgramData\TEMP:9CD7CD43
AlternateDataStreams: C:\ProgramData\TEMP:9E5EA7A3
AlternateDataStreams: C:\ProgramData\TEMP:A0921B2C
AlternateDataStreams: C:\ProgramData\TEMP:A6A65B80
AlternateDataStreams: C:\ProgramData\TEMP:A6E01F67
AlternateDataStreams: C:\ProgramData\TEMP:A81A3C86
AlternateDataStreams: C:\ProgramData\TEMP:A8BF0AE2
AlternateDataStreams: C:\ProgramData\TEMP:AC4119D5
AlternateDataStreams: C:\ProgramData\TEMP:B059B88E
AlternateDataStreams: C:\ProgramData\TEMP:B9C6EB6C
AlternateDataStreams: C:\ProgramData\TEMP:BB0F4AA4
AlternateDataStreams: C:\ProgramData\TEMP:BC8E9899
AlternateDataStreams: C:\ProgramData\TEMP:BCF55336
AlternateDataStreams: C:\ProgramData\TEMP:BD414E4B
AlternateDataStreams: C:\ProgramData\TEMP:BE40C8A2
AlternateDataStreams: C:\ProgramData\TEMP:BFED0CBB
AlternateDataStreams: C:\ProgramData\TEMP:C36F1B98
AlternateDataStreams: C:\ProgramData\TEMP:CB08ED9D
AlternateDataStreams: C:\ProgramData\TEMP:CE707633
AlternateDataStreams: C:\ProgramData\TEMP:D5D75FF0
AlternateDataStreams: C:\ProgramData\TEMP:DA55B48C
AlternateDataStreams: C:\ProgramData\TEMP:DE0BD04E
AlternateDataStreams: C:\ProgramData\TEMP:DF7A2D3E
AlternateDataStreams: C:\ProgramData\TEMP:E0CAA39F
AlternateDataStreams: C:\ProgramData\TEMP:E21987F7
AlternateDataStreams: C:\ProgramData\TEMP:E4BC4A41
AlternateDataStreams: C:\ProgramData\TEMP:ED4272E5
AlternateDataStreams: C:\ProgramData\TEMP:EF123AF6
AlternateDataStreams: C:\ProgramData\TEMP:F123F8B9
AlternateDataStreams: C:\ProgramData\TEMP:F92E1E4B
AlternateDataStreams: C:\ProgramData\TEMP:FA7523FF
AlternateDataStreams: C:\ProgramData\TEMP:FE1028DD
AlternateDataStreams: C:\ProgramData\TEMP:FF9EC6D2
AlternateDataStreams: C:\Users\Petra\Downloads\re__fwd__oznameni_o_zadani_domaci_platby.eml:OECustomProperty

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-04-04 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2015-06-25 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12 269000]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-04-04 116648]

C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-3808252141-163001717-3248989872-1000Core.job
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-3808252141-163001717-3248989872-1000UA.job
C:\Users\Petra\AppData\Local\Temp\16865.exe
C:\Users\Petra\AppData\Local\Temp\17414.exe
C:\Users\Petra\AppData\Local\Temp\19795.exe
C:\Users\Petra\AppData\Local\Temp\22603.exe
C:\Users\Petra\AppData\Local\Temp\27494.exe
C:\Users\Petra\AppData\Local\Temp\27555.exe
C:\Users\Petra\AppData\Local\Temp\8918.exe

Hosts:
EmptyTemp:
Reboot:
End

*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => value removed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully.
HKU\S-1-5-21-3808252141-163001717-3248989872-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Dropbox Update => value removed successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully.
C:\Windows\Tasks\trivia_games_notification_service.job not found.
C:\Windows\Tasks\trivia_games_updating_service.job not found.
"C:\ProgramData\TEMP" => ":00D99749" ADS not found.
"C:\ProgramData\TEMP" => ":02DD996C" ADS not found.
"C:\ProgramData\TEMP" => ":04D30F4C" ADS not found.
"C:\ProgramData\TEMP" => ":09629F6E" ADS not found.
"C:\ProgramData\TEMP" => ":0AF6266B" ADS not found.
"C:\ProgramData\TEMP" => ":0CEE6109" ADS not found.
"C:\ProgramData\TEMP" => ":0EBD727C" ADS not found.
"C:\ProgramData\TEMP" => ":0ED45B2E" ADS not found.
"C:\ProgramData\TEMP" => ":0F64164E" ADS not found.
"C:\ProgramData\TEMP" => ":103E96B0" ADS not found.
"C:\ProgramData\TEMP" => ":115EA582" ADS not found.
"C:\ProgramData\TEMP" => ":11EF326F" ADS not found.
"C:\ProgramData\TEMP" => ":16777CF9" ADS not found.
"C:\ProgramData\TEMP" => ":195E8317" ADS not found.
"C:\ProgramData\TEMP" => ":197E3428" ADS not found.
"C:\ProgramData\TEMP" => ":2339C9FD" ADS not found.
"C:\ProgramData\TEMP" => ":25249477" ADS not found.
"C:\ProgramData\TEMP" => ":268A5068" ADS not found.
"C:\ProgramData\TEMP" => ":2B5C4773" ADS not found.
"C:\ProgramData\TEMP" => ":2CA4B471" ADS not found.
C:\ProgramData\TEMP => ":2CB9631F" ADS removed successfully..
"C:\ProgramData\TEMP" => ":2F717FB3" ADS not found.
"C:\ProgramData\TEMP" => ":311A2F6A" ADS not found.
"C:\ProgramData\TEMP" => ":32AE8659" ADS not found.
"C:\ProgramData\TEMP" => ":3393A1CA" ADS not found.
"C:\ProgramData\TEMP" => ":35501BA4" ADS not found.
"C:\ProgramData\TEMP" => ":35E8E596" ADS not found.
"C:\ProgramData\TEMP" => ":366B74CA" ADS not found.
"C:\ProgramData\TEMP" => ":3AC9F212" ADS not found.
"C:\ProgramData\TEMP" => ":3C0F646D" ADS not found.
"C:\ProgramData\TEMP" => ":3D3F1635" ADS not found.
"C:\ProgramData\TEMP" => ":3D507E52" ADS not found.
"C:\ProgramData\TEMP" => ":415E77AB" ADS not found.
"C:\ProgramData\TEMP" => ":447856CD" ADS not found.
"C:\ProgramData\TEMP" => ":45A64DE6" ADS not found.
"C:\ProgramData\TEMP" => ":489EA5E5" ADS not found.
"C:\ProgramData\TEMP" => ":491270B8" ADS not found.
"C:\ProgramData\TEMP" => ":4A03F06E" ADS not found.
"C:\ProgramData\TEMP" => ":4B6A9FDA" ADS not found.
"C:\ProgramData\TEMP" => ":4C3504B5" ADS not found.
"C:\ProgramData\TEMP" => ":4C3B92C7" ADS not found.
"C:\ProgramData\TEMP" => ":4EE323A4" ADS not found.
"C:\ProgramData\TEMP" => ":506698B2" ADS not found.
"C:\ProgramData\TEMP" => ":5C28E25F" ADS not found.
"C:\ProgramData\TEMP" => ":5CBA5665" ADS not found.
"C:\ProgramData\TEMP" => ":5E209A50" ADS not found.
"C:\ProgramData\TEMP" => ":5E481579" ADS not found.
"C:\ProgramData\TEMP" => ":605645B0" ADS not found.
"C:\ProgramData\TEMP" => ":60E755E6" ADS not found.
"C:\ProgramData\TEMP" => ":611EAF9F" ADS not found.
"C:\ProgramData\TEMP" => ":639F0420" ADS not found.
"C:\ProgramData\TEMP" => ":641A21EA" ADS not found.
"C:\ProgramData\TEMP" => ":6C74C778" ADS not found.
"C:\ProgramData\TEMP" => ":6E39144C" ADS not found.
"C:\ProgramData\TEMP" => ":6F3BEBA5" ADS not found.
"C:\ProgramData\TEMP" => ":71612023" ADS not found.
"C:\ProgramData\TEMP" => ":737160C1" ADS not found.
"C:\ProgramData\TEMP" => ":7687A3E3" ADS not found.
"C:\ProgramData\TEMP" => ":7B2BB690" ADS not found.
"C:\ProgramData\TEMP" => ":7B9BB187" ADS not found.
"C:\ProgramData\TEMP" => ":7BB584AA" ADS not found.
"C:\ProgramData\TEMP" => ":7E47A57F" ADS not found.
"C:\ProgramData\TEMP" => ":82D85D00" ADS not found.
"C:\ProgramData\TEMP" => ":860356DC" ADS not found.
"C:\ProgramData\TEMP" => ":89C22C79" ADS not found.
"C:\ProgramData\TEMP" => ":8A573D22" ADS not found.
"C:\ProgramData\TEMP" => ":8C84E358" ADS not found.
"C:\ProgramData\TEMP" => ":92D35C13" ADS not found.
"C:\ProgramData\TEMP" => ":934CA750" ADS not found.
"C:\ProgramData\TEMP" => ":95D421DF" ADS not found.
"C:\ProgramData\TEMP" => ":9CD7CD43" ADS not found.
"C:\ProgramData\TEMP" => ":9E5EA7A3" ADS not found.
"C:\ProgramData\TEMP" => ":A0921B2C" ADS not found.
"C:\ProgramData\TEMP" => ":A6A65B80" ADS not found.
"C:\ProgramData\TEMP" => ":A6E01F67" ADS not found.
"C:\ProgramData\TEMP" => ":A81A3C86" ADS not found.
"C:\ProgramData\TEMP" => ":A8BF0AE2" ADS not found.
"C:\ProgramData\TEMP" => ":AC4119D5" ADS not found.
"C:\ProgramData\TEMP" => ":B059B88E" ADS not found.
"C:\ProgramData\TEMP" => ":B9C6EB6C" ADS not found.
"C:\ProgramData\TEMP" => ":BB0F4AA4" ADS not found.
"C:\ProgramData\TEMP" => ":BC8E9899" ADS not found.
"C:\ProgramData\TEMP" => ":BCF55336" ADS not found.
"C:\ProgramData\TEMP" => ":BD414E4B" ADS not found.
"C:\ProgramData\TEMP" => ":BE40C8A2" ADS not found.
"C:\ProgramData\TEMP" => ":BFED0CBB" ADS not found.
"C:\ProgramData\TEMP" => ":C36F1B98" ADS not found.
"C:\ProgramData\TEMP" => ":CB08ED9D" ADS not found.
"C:\ProgramData\TEMP" => ":CE707633" ADS not found.
"C:\ProgramData\TEMP" => ":D5D75FF0" ADS not found.
"C:\ProgramData\TEMP" => ":DA55B48C" ADS not found.
"C:\ProgramData\TEMP" => ":DE0BD04E" ADS not found.
"C:\ProgramData\TEMP" => ":DF7A2D3E" ADS not found.
"C:\ProgramData\TEMP" => ":E0CAA39F" ADS not found.
"C:\ProgramData\TEMP" => ":E21987F7" ADS not found.
"C:\ProgramData\TEMP" => ":E4BC4A41" ADS not found.
"C:\ProgramData\TEMP" => ":ED4272E5" ADS not found.
"C:\ProgramData\TEMP" => ":EF123AF6" ADS not found.
"C:\ProgramData\TEMP" => ":F123F8B9" ADS not found.
"C:\ProgramData\TEMP" => ":F92E1E4B" ADS not found.
"C:\ProgramData\TEMP" => ":FA7523FF" ADS not found.
"C:\ProgramData\TEMP" => ":FE1028DD" ADS not found.
"C:\ProgramData\TEMP" => ":FF9EC6D2" ADS not found.
"C:\Users\Petra\Downloads\re__fwd__oznameni_o_zadani_domaci_platby.eml" => ":OECustomProperty" ADS not found.
AdobeARMservice => service removed successfully.
gupdate => service removed successfully.
SkypeUpdate => service removed successfully.
AdobeFlashPlayerUpdateSvc => service removed successfully.
gupdatem => service removed successfully.
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-3808252141-163001717-3248989872-1000Core.job => moved successfully.
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-3808252141-163001717-3248989872-1000UA.job => moved successfully.
C:\Users\Petra\AppData\Local\Temp\16865.exe => moved successfully.
C:\Users\Petra\AppData\Local\Temp\17414.exe => moved successfully.
C:\Users\Petra\AppData\Local\Temp\19795.exe => moved successfully.
C:\Users\Petra\AppData\Local\Temp\22603.exe => moved successfully.
C:\Users\Petra\AppData\Local\Temp\27494.exe => moved successfully.
C:\Users\Petra\AppData\Local\Temp\27555.exe => moved successfully.
C:\Users\Petra\AppData\Local\Temp\8918.exe => moved successfully.
C:\Windows\System32\Drivers\etc\hosts => moved successfully.
Hosts restored successfully.
EmptyTemp: => 5 GB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 19:15:17 ====