VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

nejde spustit word

https://forum.viry.cz:443/viewtopic.php?t=148188

Stránka 1 z 1

nejde spustit word

Napsal: 04 bře 2016 09:16
od Timur
Zdravim, mam problem so spustenim ms word, vyskakuje upozornenie "pri odosielani prikazu do programu sa vyskytli problemy" excel ide v poriadku
Prikladam log, za kontrolu vopred dakujem :)

Logfile of random's system information tool 1.10 (written by random/random)
Run by Danuška at 2016-03-04 09:06:30
Microsoft Windows 8.1
System drive C: has 356 GB (78%) free of 457 GB
Total RAM: 3911 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:08:19, on 4.3.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.18123)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
C:\Program Files\trend micro\Danuška.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE"
O4 - Global Startup: Image Transfer Utility.lnk = C:\Program Files (x86)\Canon\ImageTransferUtility\ImageTransferUtility.exe
O4 - Global Startup: ImageBrowser EX Agent.lnk = C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Unknown owner - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (file missing)
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Rapid Start Technology Service (irstrtsv) - Intel Corporation - C:\Windows\SysWOW64\irstrtsv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Dritek RF Button Command Service (RfButtonDriverService) - Dritek System INC. - C:\Windows\RfBtnSvc64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: AVG PC TuneUp Service (TuneUp.UtilitiesSvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8123 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\igfxCUIService.exe
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
dashost.exe {9505f2d9-1bfb-4443-bbb461799a8397e4}
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe" /TUStart /pid:2224
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
taskhostex.exe
C:\WINDOWS\Explorer.EXE
igfxEM.exe
igfxHK.exe
igfxTray.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\WINDOWS\system32\GWX\GWX.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe"
"C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe" "C:\Program Files (x86)\Opera\launcher.exe"
"C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe" --type=gpu-process --channel="4224.0.1429083881\2081780686" --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,30,58 --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.4276 --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=sk --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4224.2.1321176511\1237392605" /prefetch:673131151
"C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=sk --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4224.3.872044385\203644819" /prefetch:673131151
"C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=sk --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4224.4.638672078\1879335338" /prefetch:673131151
"C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=sk --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4224.5.14232739\710999597" /prefetch:673131151
"C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
"C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe" --type=renderer --alt-high-dpi-setting=96 --system-dpi-setting=96 --disable-direct-npapi-requests --disable-win32k-renderer-lockdown --lang=sk --disable-client-side-phishing-detection --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="4224.8.449568821\898395973" /prefetch:673131151
"C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe" --type=plugin --plugin-path="C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll" --disable-direct-npapi-requests --lang=sk --channel="4224.9.1802580477\45949768" --with-feature:installer-experiment-test=off --with-feature:installer-ui-stats=on --with-feature:installer-hide-from-program-and-features=off --with-feature:installer-pref-default-overrides-support=off /prefetch:-390060480
"C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe" "C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" /o /eo /l /b /id 4556
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" /o /eo /l /b /id 4556
"C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" --channel=4580.0.172255447 --type=renderer /o /eo /l /b /id 4556

"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 580 584 592 65536 588
"C:\Users\Danuška\Desktop\RSITx64.exe"
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player PPAPI Notifier.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_306_pepper.exe -check pepperplugin
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001Core.job - C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001UA.job - C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Uninstaller_SkipUac_Danuška.job - C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe /UninstallExplorer

=========Mozilla firefox=========

ProfilePath - C:\Users\Danuška\AppData\Roaming\Mozilla\Firefox\Profiles\x42dwjp2.default

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.267 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@garmin.com/GpsControl]
"Description"=Garmin GPS Control for Firefox
"Path"=C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.267 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@garmin.com/GpsControl]
"Description"=Garmin GPS Control for Firefox
"Path"=C:\Program Files\Garmin GPS Plugin\npGarmin.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-02-08 901600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12 2134656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-02-08 678656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12 1725056]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [2015-07-12 563416]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-02-16 7139768]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2015-08-27 395168]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13 1085656]
"AvgUi"=C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [2016-02-18 179624]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Image Transfer Utility.lnk - C:\Program Files (x86)\Canon\ImageTransferUtility\ImageTransferUtility.exe
ImageBrowser EX Agent.lnk - C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\acpanel_win.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\devicefastlaneui.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\epowerbutton.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\epowerui.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\excel.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FIRSTRUN.EXE]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\groove.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\infopath.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\launcher.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msaccess.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msoxmled.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mspub.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mstore.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\offdiag.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ois.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\onenote.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\outlook.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\powerpnt.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\skype.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\usecuappui.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winword.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zps.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-03-04 09:06:31 ----D---- C:\Program Files\trend micro
2016-03-04 09:06:30 ----D---- C:\rsit
2016-03-04 07:47:57 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-03-04 07:47:55 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-03-04 07:47:55 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-03-04 07:47:55 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-03-04 07:47:54 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-03-04 07:47:53 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-03-04 07:47:52 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-03-04 07:47:52 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-03-04 07:45:43 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2016-03-04 07:42:49 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-03-04 07:42:45 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-03-04 07:42:42 ----A---- C:\WINDOWS\system32\wininet.dll
2016-03-04 07:42:41 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-03-04 07:42:38 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2016-03-04 07:42:38 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2016-03-04 07:42:38 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2016-03-04 07:42:38 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2016-03-04 07:42:38 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2016-03-04 07:42:38 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2016-03-04 07:42:38 ----A---- C:\WINDOWS\system32\webcheck.dll
2016-03-04 07:42:38 ----A---- C:\WINDOWS\system32\vbscript.dll
2016-03-04 07:42:38 ----A---- C:\WINDOWS\system32\mshtmled.dll
2016-03-04 07:42:38 ----A---- C:\WINDOWS\system32\msfeeds.dll
2016-03-04 07:42:38 ----A---- C:\WINDOWS\system32\jscript.dll
2016-03-04 07:42:38 ----A---- C:\WINDOWS\system32\inetcomm.dll
2016-03-04 07:42:38 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2016-03-04 07:42:38 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2016-03-04 07:42:38 ----A---- C:\WINDOWS\system32\hlink.dll
2016-03-04 07:42:38 ----A---- C:\WINDOWS\system32\actxprxy.dll
2016-03-04 07:42:37 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2016-03-04 07:42:37 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2016-03-04 07:42:37 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2016-03-04 07:42:30 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2016-03-04 07:42:30 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2016-03-04 07:42:30 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2016-03-04 07:42:30 ----A---- C:\WINDOWS\system32\schannel.dll
2016-03-04 07:42:30 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2016-03-04 07:42:30 ----A---- C:\WINDOWS\system32\ncrypt.dll
2016-03-04 07:42:30 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2016-03-04 07:42:29 ----A---- C:\WINDOWS\SYSWOW64\ncrypt.dll
2016-03-04 07:41:35 ----A---- C:\WINDOWS\system32\invagent.dll
2016-03-04 07:41:35 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-03-04 07:41:35 ----A---- C:\WINDOWS\system32\devinv.dll
2016-03-04 07:41:35 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2016-03-04 07:41:35 ----A---- C:\WINDOWS\system32\appraiser.dll
2016-03-04 07:41:35 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-03-04 07:41:35 ----A---- C:\WINDOWS\system32\acmigration.dll
2016-03-04 07:41:34 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2016-03-04 07:41:34 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2adec.dll
2016-03-04 07:41:34 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2016-03-04 07:41:34 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2016-03-04 07:41:34 ----A---- C:\WINDOWS\system32\msmpeg2adec.dll
2016-03-04 07:41:34 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2016-03-04 07:41:34 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-03-04 07:41:33 ----A---- C:\WINDOWS\SYSWOW64\WMADMOD.DLL
2016-03-04 07:41:33 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2016-03-04 07:41:33 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-03-04 07:41:33 ----A---- C:\WINDOWS\system32\WMVENCOD.DLL
2016-03-04 07:41:33 ----A---- C:\WINDOWS\system32\WMADMOD.DLL
2016-03-04 07:41:33 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2016-03-04 07:41:33 ----A---- C:\WINDOWS\system32\evr.dll
2016-03-04 07:41:32 ----A---- C:\WINDOWS\SYSWOW64\WMVSDECD.DLL
2016-03-04 07:41:32 ----A---- C:\WINDOWS\SYSWOW64\WMVENCOD.DLL
2016-03-04 07:41:32 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOD.DLL
2016-03-04 07:41:32 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll
2016-03-04 07:41:32 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-03-04 07:41:32 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2016-03-04 07:41:32 ----A---- C:\WINDOWS\system32\WMVSDECD.DLL
2016-03-04 07:41:32 ----A---- C:\WINDOWS\system32\WMSPDMOD.DLL
2016-03-04 07:41:32 ----A---- C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-03-04 07:41:32 ----A---- C:\WINDOWS\system32\quartz.dll
2016-03-04 07:41:32 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-03-04 07:41:31 ----A---- C:\WINDOWS\SYSWOW64\WMVXENCD.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\SYSWOW64\WMVSENCD.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOE.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\SYSWOW64\WMADMOE.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\SYSWOW64\VIDRESZR.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\SYSWOW64\RESAMPLEDMO.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2016-03-04 07:41:31 ----A---- C:\WINDOWS\SYSWOW64\MPG4DECD.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\SYSWOW64\MP4SDECD.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\SYSWOW64\MP43DECD.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\SYSWOW64\MP3DMOD.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\SYSWOW64\MFWMAAEC.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\SYSWOW64\mfvdsp.dll
2016-03-04 07:41:31 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2016-03-04 07:41:31 ----A---- C:\WINDOWS\SYSWOW64\devenum.dll
2016-03-04 07:41:31 ----A---- C:\WINDOWS\SYSWOW64\COLORCNV.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\WMVXENCD.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\WMVSENCD.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\WMSPDMOE.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\WMADMOE.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\VIDRESZR.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\SysFxUI.dll
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\RESAMPLEDMO.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\qdvd.dll
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\MPG4DECD.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\MP4SDECD.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\MP43DECD.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\MP3DMOD.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\MFWMAAEC.DLL
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\mfvdsp.dll
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\mfps.dll
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\devenum.dll
2016-03-04 07:41:31 ----A---- C:\WINDOWS\system32\COLORCNV.DLL
2016-03-04 07:41:30 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-03-04 07:41:30 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2016-03-04 07:41:30 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2016-03-04 07:41:30 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-03-04 07:41:30 ----A---- C:\WINDOWS\system32\lsasrv.dll
2016-03-04 07:41:30 ----A---- C:\WINDOWS\system32\kerberos.dll
2016-03-04 07:41:30 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2016-03-04 07:41:30 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-03-04 07:41:30 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2016-03-04 07:41:30 ----A---- C:\WINDOWS\system32\certcli.dll
2016-03-04 07:41:26 ----A---- C:\WINDOWS\system32\shell32.dll
2016-03-04 07:41:25 ----A---- C:\WINDOWS\system32\twinui.dll
2016-03-04 07:41:23 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-03-04 07:41:20 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-03-04 07:41:19 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2016-03-04 07:41:19 ----A---- C:\WINDOWS\system32\authui.dll
2016-03-04 07:41:08 ----A---- C:\WINDOWS\system32\win32k.sys
2016-03-04 07:38:22 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-04 07:38:22 ----A---- C:\WINDOWS\system32\glcndFilter.dll
2016-03-04 07:38:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-03-04 07:38:21 ----A---- C:\WINDOWS\SYSWOW64\glcndFilter.dll
2016-03-04 07:37:52 ----A---- C:\WINDOWS\SYSWOW64\mtxoci.dll
2016-03-04 07:37:52 ----A---- C:\WINDOWS\SYSWOW64\msorcl32.dll
2016-03-04 07:37:52 ----A---- C:\WINDOWS\SYSWOW64\EncDec.dll
2016-03-04 07:37:52 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2016-03-04 07:37:52 ----A---- C:\WINDOWS\SYSWOW64\cfgbkend.dll
2016-03-04 07:37:52 ----A---- C:\WINDOWS\system32\mtxoci.dll
2016-03-04 07:37:52 ----A---- C:\WINDOWS\system32\EncDec.dll
2016-03-04 07:37:52 ----A---- C:\WINDOWS\system32\CPFilters.dll
2016-03-04 07:37:52 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2016-03-04 07:37:21 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2016-03-04 07:37:21 ----A---- C:\WINDOWS\system32\gdi32.dll
2016-03-04 07:36:08 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-03-04 07:36:07 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2016-03-04 07:36:07 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2016-03-04 07:36:07 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-03-04 07:36:07 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-03-04 07:36:07 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2016-03-04 07:36:07 ----A---- C:\WINDOWS\system32\WinTypes.dll
2016-03-04 07:36:07 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-03-04 07:36:07 ----A---- C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-03-04 07:36:07 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-03-04 07:36:07 ----A---- C:\WINDOWS\system32\combase.dll
2016-03-04 07:35:43 ----A---- C:\WINDOWS\system32\aepic.dll
2016-03-04 07:35:40 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2016-03-04 07:35:40 ----A---- C:\WINDOWS\system32\qedit.dll
2016-03-04 07:34:50 ----A---- C:\WINDOWS\SYSWOW64\WinSync.dll
2016-03-04 07:34:50 ----A---- C:\WINDOWS\system32\WinSync.dll
2016-03-04 07:34:50 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2016-03-04 07:34:26 ----A---- C:\WINDOWS\system32\rdpudd.dll
2016-03-04 07:34:26 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2016-03-04 07:33:49 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2016-03-04 07:33:49 ----A---- C:\WINDOWS\system32\advapi32.dll
2016-02-25 05:35:48 ----A---- C:\WINDOWS\SYSWOW64\authuitu.dll
2016-02-25 05:35:48 ----A---- C:\WINDOWS\system32\authuitu.dll
2016-02-25 05:35:47 ----A---- C:\WINDOWS\SYSWOW64\uxtuneup.dll
2016-02-25 05:35:47 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2016-02-23 19:51:20 ----A---- C:\WINDOWS\system32\drivers\aswsp.sys
2016-02-22 16:37:48 ----A---- C:\WINDOWS\system32\TURegOpt.exe
2016-02-16 19:24:24 ----HD---- C:\ProgramData\CanonBJ
2016-02-16 19:24:06 ----A---- C:\WINDOWS\system32\CNMLM8F.DLL
2016-02-10 22:00:52 ----A---- C:\WINDOWS\system32\drivers\aswvmm.sys
2016-02-09 16:30:43 ----D---- C:\WINDOWS\Minidump
2016-02-09 16:30:38 ----ASH---- C:\pagefile.sys
2016-02-08 17:39:20 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2016-02-08 17:39:20 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2016-02-08 17:39:20 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2016-02-08 17:39:20 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2016-02-08 17:39:20 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2016-02-08 17:39:20 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2016-02-08 17:38:48 ----A---- C:\WINDOWS\system32\aswBoot.exe
2016-02-08 17:38:35 ----A---- C:\WINDOWS\avastSS.scr

======List of files/folders modified in the last 1 month======

2016-03-04 09:06:31 ----RD---- C:\Program Files
2016-03-04 09:00:00 ----D---- C:\WINDOWS\system32\sru
2016-03-04 08:58:28 ----SHD---- C:\WINDOWS\Installer
2016-03-04 08:58:28 ----D---- C:\WINDOWS\Temp
2016-03-04 08:58:27 ----D---- C:\ProgramData\Microsoft Help
2016-03-04 08:58:17 ----D---- C:\WINDOWS\Prefetch
2016-03-04 08:41:00 ----SD---- C:\Users\Danuška\AppData\Roaming\Microsoft
2016-03-04 08:28:36 ----RD---- C:\WINDOWS\System32
2016-03-04 08:28:36 ----D---- C:\WINDOWS\Inf
2016-03-04 08:28:36 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-04 08:24:34 ----D---- C:\WINDOWS\system32\config
2016-03-04 08:24:32 ----D---- C:\WINDOWS\Microsoft.NET
2016-03-04 08:24:31 ----D---- C:\WINDOWS\WinSxS
2016-03-04 08:16:47 ----SD---- C:\WINDOWS\system32\CompatTel
2016-03-04 08:16:47 ----D---- C:\WINDOWS\SysWOW64
2016-03-04 08:16:47 ----D---- C:\WINDOWS\system32\appraiser
2016-03-04 08:16:47 ----D---- C:\WINDOWS\apppatch
2016-03-04 08:16:46 ----RD---- C:\WINDOWS\ToastData
2016-03-04 08:16:46 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2016-03-04 08:16:46 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-03-04 08:16:46 ----D---- C:\WINDOWS\system32\sk-SK
2016-03-04 08:16:46 ----D---- C:\WINDOWS\system32\en-US
2016-03-04 08:16:46 ----D---- C:\WINDOWS\system32\drivers
2016-03-04 08:16:46 ----D---- C:\Program Files\Windows Journal
2016-03-04 08:16:45 ----D---- C:\WINDOWS\system32\wbem
2016-03-04 08:16:45 ----D---- C:\Program Files\Internet Explorer
2016-03-04 08:16:45 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-04 08:16:42 ----D---- C:\WINDOWS\system32\DriverStore
2016-03-04 08:13:32 ----D---- C:\WINDOWS\CbsTemp
2016-03-04 08:02:04 ----D---- C:\Program Files (x86)\Microsoft Office
2016-03-04 08:00:53 ----D---- C:\Program Files (x86)\Common Files
2016-03-04 07:52:51 ----D---- C:\WINDOWS\system32\MRT
2016-03-04 07:52:49 ----A---- C:\WINDOWS\system32\MRT.exe
2016-03-04 07:46:05 ----A---- C:\WINDOWS\win.ini
2016-03-04 07:44:56 ----SD---- C:\WINDOWS\SYSWOW64\GWX
2016-03-04 07:44:56 ----SD---- C:\WINDOWS\system32\GWX
2016-03-04 07:44:33 ----SHD---- C:\System Volume Information
2016-03-04 07:40:26 ----D---- C:\WINDOWS\system32\catroot2
2016-03-04 07:32:03 ----D---- C:\Windows
2016-03-04 07:24:07 ----D---- C:\AdwCleaner
2016-03-04 06:50:43 ----RSD---- C:\WINDOWS\assembly
2016-03-03 16:38:47 ----D---- C:\Program Files (x86)\Opera
2016-03-03 16:38:45 ----D---- C:\WINDOWS\system32\Tasks
2016-03-01 17:54:45 ----HD---- C:\ProgramData
2016-02-28 13:35:04 ----D---- C:\Users\Danuška\AppData\Roaming\uTorrent
2016-02-25 05:35:52 ----D---- C:\Users\Danuška\AppData\Roaming\AVG
2016-02-22 17:12:54 ----RD---- C:\Program Files (x86)
2016-02-22 16:36:49 ----D---- C:\ProgramData\AVG
2016-02-22 16:36:48 ----D---- C:\Program Files (x86)\AVG
2016-02-19 21:45:39 ----D---- C:\Users\Danuška\AppData\Roaming\vlc
2016-02-16 19:25:32 ----D---- C:\WINDOWS\system32\FxsTmp
2016-02-14 14:15:34 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-14 10:45:54 ----D---- C:\KMPlayer
2016-02-14 07:57:41 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-02-14 06:37:39 ----D---- C:\WINDOWS\Tasks
2016-02-11 20:21:51 ----D---- C:\Users\Danuška\AppData\Roaming\YoWindow
2016-02-11 05:48:49 ----HD---- C:\Program Files\WindowsApps
2016-02-11 05:48:49 ----D---- C:\WINDOWS\AppReadiness
2016-02-07 15:26:15 ----D---- C:\ProgramData\Canon_Inc_IC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2016-02-08 74544]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2016-02-10 287016]
R0 excsd;ExpressCache Storage Filter Driver; C:\WINDOWS\system32\DRIVERS\excsd.sys [2013-01-08 112552]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-07-09 645952]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2016-02-08 103064]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-02-08 1065720]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-02-23 463744]
R1 excfs;ExpressCache File System Filter Driver; C:\WINDOWS\system32\DRIVERS\excfs.sys [2013-01-08 26024]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [2014-12-25 26528]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2016-02-08 37656]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2016-02-08 107792]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2016-02-08 165344]
R3 athr;@oem32.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athwbx.sys [2015-01-08 3881472]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2015-01-08 597192]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2015-01-25 53248]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-09-24 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2015-07-10 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2015-01-25 81920]
R3 ETD;@oem6.inf,%PS2.DeviceDesc%;ELAN PS/2 Port Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2013-03-05 356752]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2015-08-27 3797424]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-01-29 3311944]
R3 IntcDAud;@oem78.inf,%IntcDAud.SvcDesc%;Intel(R) Zvuk pre obrazovky; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-08-21 463112]
R3 irstrtdv;@oem7.inf,%Irstrt.DispName%;Intel(R) Rapid Start Technology Driver; C:\WINDOWS\System32\drivers\irstrtdv.sys [2012-07-20 43800]
R3 iwdbus;@oem26.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-07-20 38976]
R3 MEIx64;@oem28.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2014-12-25 118272]
R3 Ps2Kb2Hid;@oem5.inf,%Ps2Kb2Hid.SVCDESC%;PS/2 Keyboard to HID Driver; C:\WINDOWS\System32\drivers\aPs2Kb2Hid.sys [2013-10-17 26736]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-01-30 167424]
R3 RSUSBVSTOR;@oem34.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUVStor.sys [2015-01-08 332504]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [2016-02-15 32304]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2015-01-25 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S0 BTHidEnum;@oem40.inf,%BusEnum.SvcDesc%;Bluetooth HID Enumerator; C:\WINDOWS\System32\Drivers\vbtenum.sys []
S0 BTHidMgr;@oem39.inf,%SvcDesc%;Bluetooth HID Manager Service; C:\WINDOWS\System32\Drivers\BTHidMgr.sys []
S1 aswNdisFlt;Avast! Firewall Driver; C:\WINDOWS\system32\DRIVERS\aswNdisFlt.sys [2014-02-21 440672]
S2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys []
S3 BlueletAudio;@oem35.inf,%BLUELETAUDIO.SvcDesc%;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys []
S3 BlueletSCOAudio;@oem36.inf,%BLUELETAUDIO.SvcDesc%;Bluetooth SCO Audio Service; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys []
S3 BT;@oem37.inf,%bt.Service.DispName%;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys []
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\Drivers\BTHport.sys [2015-05-11 1201664]
S3 dg_ssudbus;@oem54.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 dot4;@oem22.inf,%Dot4_Name%;MS IEEE-1284.4 Driver; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2012-10-19 151968]
S3 Dot4Print;@oem23.inf,%Dot4Print_Name%;Print Class Driver for IEEE-1284.4; C:\WINDOWS\System32\drivers\Dot4Prt.sys [2012-10-19 27040]
S3 dot4usb;@oem22.inf,%DOT4USB_NAME%;Dot4USB Filter; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [2012-10-19 49056]
S3 intaud_WaveExtensible;@oem25.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2015-07-20 50240]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2015-01-25 11776]
S3 ssudmdm;@oem55.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2014-09-24 121088]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;USB Scanner Driver; C:\WINDOWS\System32\drivers\usbscan.sys [2015-01-25 44544]
S3 VComm;@oem42.inf,%VComm.SVCDESC%;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys []
S3 VcommMgr;@oem41.inf,%SvcDesc%;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-13 82128]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-02-08 237096]
R2 avgsvc;AVG Service; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [2016-02-18 1045928]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-01-25 38792]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2015-08-27 330136]
R2 TuneUp.UtilitiesSvc;AVG PC TuneUp Service; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2016-02-15 4364200]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\WINDOWS\System32\svchost.exe [2015-01-25 38792]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
R3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-02-19 113704]
S3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe []
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-01-25 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2015-08-27 291744]
S3 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
S3 irstrtsv;Intel(R) Rapid Start Technology Service; C:\Windows\SysWOW64\irstrtsv.exe [2012-07-19 193576]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 RfButtonDriverService;Dritek RF Button Command Service; C:\Windows\RfBtnSvc64.exe [2013-10-17 96880]
S4 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-10-12 1433216]
S4 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-10-12 1773696]
S4 CCDMonitorService;CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2013-02-27 2615368]
S4 DeviceFastLaneService;Device Fast-lane Service; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [2013-05-01 470056]
S4 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2013-01-16 350984]
S4 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2013-03-15 662088]
S4 ExpressCache;ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [2013-01-08 107944]
S4 FFSOpzSvc;Sleep memory optimizer; C:\Program Files\Acer\Acer Instant Service\Sleep Memory Optimizer\FFSService.exe [2012-03-12 161384]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-08 144200]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-08 144200]
S4 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
S4 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
S4 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-02-14 146888]
S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-06-03 327296]
S4 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
S4 USecuAppSvc;Acer Theft Shield Service; C:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe [2012-11-12 345744]

-----------------EOF-----------------

Re: nejde spustit word

Napsal: 04 bře 2016 11:33
od altrok
Krasny den Vam preju :bye:


:arrow: Kouknete do slozky C:\Users\Danuška\AppData\Local\CrashDumps a pokud v ni budou dumpy o padu wordu (budou se jmenovat winword.exe.xxxx.dmp), nekolik poslednich prosim zabalte do raru/zipu a uploadnete napr. na leteckaposta.cz - do pristi odpovedi vlozte link (odkaz) na stazeni archivu.


:arrow: Odinstalujte
:arrow: V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).


:arrow: Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )
  • ukoncete vsechny programy
  • kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
  • kliknete na Scan, pote na Cleaning
  • po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner[Cx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

Re: nejde spustit word

Napsal: 04 bře 2016 12:41
od Timur
v zlozke C:\Users\Danuška\AppData\Local\CrashDumps sa nenachádzajú žiadne dumpy o pade wordu
skype odinstalovane

log:
# AdwCleaner v5.023 - Logfile created 03/12/2015 at 21:33:27
# Updated 30/11/2015 by Xplode
# Database : 2015-12-03.1 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Danuška - DANKA
# Running from : C:\Users\Danuška\Desktop\adwcleaner_5.023.exe
# Option : Scan
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ DLL ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com

***** [ Web browsers ] *****

[C:\Users\Danuška\AppData\Roaming\Mozilla\Firefox\Profiles\x42dwjp2.default\prefs.js] [Preference] Found : user_pref("network.hxxp.request.max-start-delay", 0);

########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [803 bytes] ##########
# AdwCleaner v5.037 - Logfile created 04/03/2016 at 12:42:48
# Updated 28/02/2016 by Xplode
# Database : 2016-03-02.1 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Danuška - DANKA
# Running from : C:\Users\Danuška\Desktop\adwcleaner_5.037.exe
# Option : Scan
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ DLL ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [1933 bytes] - [22/02/2016 18:06:42]
C:\AdwCleaner\AdwCleaner[C2].txt - [1710 bytes] - [04/03/2016 07:24:07]
C:\AdwCleaner\AdwCleaner[C3].txt - [1155 bytes] - [10/10/2015 04:38:46]
C:\AdwCleaner\AdwCleaner[C4].txt - [985 bytes] - [03/12/2015 21:36:12]
C:\AdwCleaner\AdwCleaner[C5].txt - [736 bytes] - [20/12/2015 07:43:28]
C:\AdwCleaner\AdwCleaner[R0].txt - [14381 bytes] - [01/08/2015 18:08:53]
C:\AdwCleaner\AdwCleaner[R1].txt - [977 bytes] - [02/08/2015 08:33:46]
C:\AdwCleaner\AdwCleaner[S0].txt - [13190 bytes] - [01/08/2015 18:09:44]
C:\AdwCleaner\AdwCleaner[S1].txt - [2783 bytes] - [02/08/2015 08:34:17]
C:\AdwCleaner\AdwCleaner[S2].txt - [1549 bytes] - [04/03/2016 07:22:08]
C:\AdwCleaner\AdwCleaner[S3].txt - [2660 bytes] - [10/10/2015 04:35:58]
C:\AdwCleaner\AdwCleaner[S4].txt - [2280 bytes] - [03/12/2015 21:33:27]
C:\AdwCleaner\AdwCleaner[S5].txt - [644 bytes] - [20/12/2015 07:41:16]

########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [2425 bytes] ##########

Re: nejde spustit word

Napsal: 04 bře 2016 12:42
od altrok
:arrow: Dejte logy FRST.txt a Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101
Pozn. pri druhem a dalsim spusteni FRST je pro vytvoreni logu Addition.txt nutne tuto volbu explicitne zatrhnout pred zacatkem skenu.

Re: nejde spustit word

Napsal: 04 bře 2016 12:56
od Timur
FRST log:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:02-03-2016
Ran by Danuška (administrator) on DANKA (04-03-2016 12:53:31)
Running from C:\Users\Danuška\Desktop
Loaded Profiles: Danuška (Available Profiles: Danuška & Guest)
Platform: Windows 8.1 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe
(Opera Software) C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe
(Opera Software) C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\35.0.2066.92\opera.exe
(forum.viry.cz) C:\Users\Danuška\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139768 2016-02-16] (AVAST Software)
HKLM-x32\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-13] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [179624 2016-02-18] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [563416 2015-07-12] (ZONER software)
HKU\S-1-5-21-3670456473-3412912233-516016340-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Bubbles.scr [788480 2015-01-25] (Microsoft Corporation)
IFEO\acpanel_win.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\devicefastlaneui.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\epowerbutton.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\epowerui.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\excel.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\FIRSTRUN.EXE: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\groove.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\infopath.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\launcher.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msaccess.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msoxmled.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\mspub.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\mstore.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\offdiag.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\ois.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\onenote.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\outlook.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\skype.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\usecuappui.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\winword.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\zps.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-02-08] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Image Transfer Utility.lnk [2016-01-18]
ShortcutTarget: Image Transfer Utility.lnk -> C:\Program Files (x86)\Canon\ImageTransferUtility\ImageTransferUtility.exe (CANON INC.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ImageBrowser EX Agent.lnk [2016-01-18]
ShortcutTarget: ImageBrowser EX Agent.lnk -> C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 88.212.8.8 88.212.8.88
Tcpip\..\Interfaces\{C9868DCD-087E-41F5-86BE-22CA40150ACE}: [DhcpNameServer] 192.168.1.1 88.212.8.8 88.212.8.88

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3670456473-3412912233-516016340-1001 -> {4F250161-D7B2-461D-9474-C8D3CC814F09} URL =
SearchScopes: HKU\S-1-5-21-3670456473-3412912233-516016340-1001 -> {A82F7413-729F-45C3-9986-E3F2BD5F3090} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=11443
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-02-08] (AVAST Software)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-02-08] (AVAST Software)

FireFox:
========
FF ProfilePath: C:\Users\Danuška\AppData\Roaming\Mozilla\Firefox\Profiles\x42dwjp2.default
FF NewTab:
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2016-01-09] ()
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (GARMIN Corp.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2016-01-09] ()
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-12-17] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3670456473-3412912233-516016340-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Danuška\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [No File]
FF Plugin HKU\S-1-5-21-3670456473-3412912233-516016340-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\Danuška\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2014-10-29] (Google)
FF Plugin HKU\S-1-5-21-3670456473-3412912233-516016340-1001: @talk.google.com/O1DPlugin -> C:\Users\Danuška\AppData\Roaming\Mozilla\plugins\npo1d.dll [2014-10-29] (Google)
FF Plugin HKU\S-1-5-21-3670456473-3412912233-516016340-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Danuška\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-14] (Google Inc.)
FF Plugin HKU\S-1-5-21-3670456473-3412912233-516016340-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Danuška\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-14] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Danuška\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2014-10-29] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Danuška\AppData\Roaming\mozilla\plugins\npo1d.dll [2014-10-29] (Google)
FF Extension: Nepi Jano! - C:\Users\Danuška\AppData\Roaming\Mozilla\Firefox\Profiles\x42dwjp2.default\Extensions\@nepi-jano.xpi [2016-03-03]
FF Extension: HTML5 Video Everywhere! - C:\Users\Danuška\AppData\Roaming\Mozilla\Firefox\Profiles\x42dwjp2.default\Extensions\html5-video-everywhere@lejenome.me.xpi [2016-01-09]
FF Extension: YouTube™ Flash® Player - C:\Users\Danuška\AppData\Roaming\Mozilla\Firefox\Profiles\x42dwjp2.default\Extensions\jid1-HAV2inXAnQPIeA@jetpack.xpi [2016-01-09]
FF Extension: Adblock Plus - C:\Users\Danuška\AppData\Roaming\Mozilla\Firefox\Profiles\x42dwjp2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-02-24]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-02-09]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-02-09]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-02-08]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]

Opera:
=======
OPR StartupUrls: "hxxp://www.google.sk/"
OPR Extension: (Adblock Plus) - C:\Users\Danuška\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2016-02-05]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-02-08] (AVAST Software)
S2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [113704 2014-02-19] (AVAST Software)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1045928 2016-02-18] (AVG Technologies CZ, s.r.o.)
S4 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-27] (Acer Incorporated)
S4 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [470056 2013-05-01] (Acer Incorporated)
S4 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)
S4 ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [107944 2013-01-08] (Condusiv Technologies)
S4 FFSOpzSvc; C:\Program Files\Acer\Acer Instant Service\Sleep Memory Optimizer\FFSService.exe [161384 2012-03-12] (Acer Incorporated)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-08-27] (Intel Corporation)
S3 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [193576 2012-07-19] (Intel Corporation)
S4 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S3 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [96880 2013-10-17] (Dritek System INC.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [4364200 2016-02-15] (AVG Technologies CZ, s.r.o.)
S4 USecuAppSvc; C:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe [345744 2012-11-12] (Acer Incorporated)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [48552 2016-02-15] (AVG Technologies CZ, s.r.o.)
R2 UxTuneUp; C:\WINDOWS\SysWOW64\uxtuneup.dll [42408 2016-02-15] (AVG Technologies CZ, s.r.o.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S3 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-02-08] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-02-08] (AVAST Software)
S1 aswNdisFlt; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [440672 2014-02-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-02-08] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-02-08] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1065720 2016-02-08] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-02-23] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-02-08] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-02-10] (AVAST Software)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3881472 2015-01-08] (Qualcomm Atheros Communications, Inc.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [26024 2013-01-08] (Condusiv Technologies)
R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [112552 2013-01-08] (Condusiv Technologies)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [26528 2014-12-25] (REALiX(tm))
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [118272 2014-12-25] (Intel Corporation)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-10-17] (Dritek System Inc.)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2016-02-15] (AVG Netherlands B.V.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 BlueletAudio; \SystemRoot\system32\DRIVERS\blueletaudio.sys [X]
S3 BlueletSCOAudio; \SystemRoot\system32\DRIVERS\BlueletSCOAudio.sys [X]
S3 BT; \SystemRoot\system32\DRIVERS\btnetdrv.sys [X]
S0 BTHidEnum; System32\Drivers\vbtenum.sys [X]
S0 BTHidMgr; System32\Drivers\BTHidMgr.sys [X]
S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
S3 VComm; \SystemRoot\system32\DRIVERS\VComm.sys [X]
S3 VcommMgr; \SystemRoot\System32\Drivers\VcommMgr.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-04 12:53 - 2016-03-04 12:54 - 00019463 _____ C:\Users\Danuška\Desktop\FRST.txt
2016-03-04 12:52 - 2016-03-04 12:53 - 00000000 ____D C:\FRST
2016-03-04 12:51 - 2016-03-04 12:51 - 00112640 _____ (forum.viry.cz) C:\Users\Danuška\Desktop\FRSTLauncher.exe
2016-03-04 12:49 - 2016-03-04 12:49 - 02371584 _____ (Farbar) C:\Users\Danuška\Desktop\FRST64.exe
2016-03-04 11:21 - 2016-03-04 11:22 - 09378207 _____ C:\Users\Danuška\Desktop\Naucime-se-fotografovat.pdf
2016-03-04 09:21 - 2016-03-04 09:21 - 00388608 _____ (Trend Micro Inc.) C:\Users\Danuška\Desktop\HijackThis.exe
2016-03-04 09:06 - 2016-03-04 09:08 - 00000000 ____D C:\rsit
2016-03-04 09:06 - 2016-03-04 09:08 - 00000000 ____D C:\Program Files\trend micro
2016-03-04 09:06 - 2016-03-04 09:06 - 01222144 _____ C:\Users\Danuška\Desktop\RSITx64.exe
2016-03-04 07:47 - 2016-02-06 11:48 - 25839104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-03-04 07:47 - 2016-02-06 11:24 - 02887680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-03-04 07:47 - 2016-02-06 11:01 - 20366848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-03-04 07:47 - 2016-02-06 10:43 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-03-04 07:47 - 2016-02-06 10:32 - 14458368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-03-04 07:47 - 2016-02-06 10:16 - 12857856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-03-04 07:47 - 2016-02-06 10:09 - 01547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-03-04 07:47 - 2016-02-06 09:54 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-03-04 07:45 - 2016-02-02 03:37 - 00828920 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-03-04 07:45 - 2016-02-02 03:37 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-04 07:42 - 2016-01-22 07:40 - 00571904 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-03-04 07:42 - 2016-01-22 07:29 - 06052352 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-03-04 07:42 - 2016-01-22 07:28 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-03-04 07:42 - 2016-01-22 07:27 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-03-04 07:42 - 2016-01-22 07:02 - 00496640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-03-04 07:42 - 2016-01-22 06:55 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-03-04 07:42 - 2016-01-22 06:52 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2016-03-04 07:42 - 2016-01-22 06:51 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-03-04 07:42 - 2016-01-22 06:50 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2016-03-04 07:42 - 2016-01-22 06:48 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-03-04 07:42 - 2016-01-22 06:48 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-03-04 07:42 - 2016-01-22 06:47 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-03-04 07:42 - 2016-01-22 06:46 - 02123264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-03-04 07:42 - 2016-01-22 06:35 - 04611072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-03-04 07:42 - 2016-01-22 06:31 - 02597376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-03-04 07:42 - 2016-01-22 06:31 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-03-04 07:42 - 2016-01-22 06:28 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-03-04 07:42 - 2016-01-22 06:27 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2016-03-04 07:42 - 2016-01-22 06:25 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-03-04 07:42 - 2016-01-22 06:25 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-03-04 07:42 - 2016-01-22 06:24 - 02050560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-03-04 07:42 - 2016-01-22 06:08 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-03-04 07:42 - 2016-01-22 06:07 - 02120704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-03-04 07:42 - 2016-01-22 06:02 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-03-04 07:42 - 2015-12-11 04:18 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2016-03-04 07:42 - 2015-12-03 20:42 - 00397224 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2016-03-04 07:42 - 2015-12-03 20:42 - 00137968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncrypt.dll
2016-03-04 07:42 - 2015-12-03 20:42 - 00106960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2016-03-04 07:42 - 2015-12-03 19:52 - 00340872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2016-03-04 07:42 - 2015-12-03 19:52 - 00120376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncrypt.dll
2016-03-04 07:42 - 2015-12-03 19:52 - 00091416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2016-03-04 07:42 - 2015-12-03 18:07 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-03-04 07:42 - 2015-12-03 17:45 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-03-04 07:41 - 2016-01-22 09:01 - 22365992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-03-04 07:41 - 2016-01-22 08:11 - 19794896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-03-04 07:41 - 2016-01-22 06:25 - 14467072 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-03-04 07:41 - 2016-01-22 06:14 - 12879360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-03-04 07:41 - 2016-01-22 06:07 - 02778624 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-03-04 07:41 - 2016-01-22 05:58 - 02464256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-03-04 07:41 - 2016-01-15 02:42 - 00033472 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-03-04 07:41 - 2016-01-14 21:44 - 01362944 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-03-04 07:41 - 2016-01-14 21:44 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-03-04 07:41 - 2016-01-14 21:44 - 00696320 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-03-04 07:41 - 2016-01-14 21:44 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-03-04 07:41 - 2016-01-14 21:44 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-03-04 07:41 - 2016-01-14 21:44 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-03-04 07:41 - 2016-01-10 20:37 - 00442720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-03-04 07:41 - 2016-01-10 19:39 - 00332640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-03-04 07:41 - 2016-01-10 19:15 - 00401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-03-04 07:41 - 2016-01-10 19:15 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2016-03-04 07:41 - 2016-01-10 18:43 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2016-03-04 07:41 - 2016-01-10 18:09 - 01442304 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-03-04 07:41 - 2016-01-10 18:09 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2016-03-04 07:41 - 2016-01-10 18:02 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-03-04 07:41 - 2016-01-10 17:56 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2016-03-04 07:41 - 2016-01-10 17:43 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-03-04 07:41 - 2016-01-07 19:34 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-03-04 07:41 - 2015-12-05 06:58 - 02745184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 02528784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 02450240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVENCOD.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 02447136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVENCOD.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 02334104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 02324744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 01877504 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 01798480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 01484888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 01288128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 01210200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 01150232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOE.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 01115640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 01037680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00914672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOE.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00850680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 00735496 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 00700360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 00629600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDECD.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00584656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 00557856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSDECD.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00498472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 00492736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSDECD.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00463776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP4SDECD.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00399776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 00299080 _____ (Microsoft Corporation) C:\WINDOWS\system32\VIDRESZR.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00275312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MPG4DECD.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00274280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP43DECD.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00250520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPG4DECD.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00248432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP43DECD.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00246856 _____ (Microsoft Corporation) C:\WINDOWS\system32\RESAMPLEDMO.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00244296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 00229272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00203016 _____ (Microsoft Corporation) C:\WINDOWS\system32\COLORCNV.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00184912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COLORCNV.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00183856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VIDRESZR.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00116720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00110544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 00099136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2016-03-04 07:41 - 2015-12-05 06:58 - 00090904 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 00090392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfvdsp.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 00081032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2016-03-04 07:41 - 2015-12-05 06:58 - 00076936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfvdsp.dll
2016-03-04 07:41 - 2015-12-03 19:07 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2016-03-04 07:41 - 2015-12-03 19:07 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2016-03-04 07:41 - 2015-12-03 19:05 - 00644608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVXENCD.DLL
2016-03-04 07:41 - 2015-12-03 19:02 - 01664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2016-03-04 07:41 - 2015-12-03 19:00 - 00451072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSENCD.DLL
2016-03-04 07:41 - 2015-12-03 18:58 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysFxUI.dll
2016-03-04 07:41 - 2015-12-03 18:36 - 01697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-03-04 07:41 - 2015-12-03 18:30 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFWMAAEC.DLL
2016-03-04 07:41 - 2015-12-03 18:28 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-03-04 07:41 - 2015-12-03 18:28 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2016-03-04 07:41 - 2015-12-03 18:27 - 00736256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVXENCD.DLL
2016-03-04 07:41 - 2015-12-03 18:24 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2016-03-04 07:41 - 2015-12-03 18:23 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSENCD.DLL
2016-03-04 07:41 - 2015-12-03 18:06 - 01501184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2016-03-04 07:41 - 2015-12-03 18:01 - 00743936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFWMAAEC.DLL
2016-03-04 07:41 - 2015-12-03 17:40 - 01010688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2016-03-04 07:41 - 2015-12-03 17:29 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2016-03-04 07:38 - 2015-12-29 16:45 - 07783936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-04 07:38 - 2015-12-29 16:45 - 07075328 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2016-03-04 07:38 - 2015-12-29 16:43 - 05267968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll
2016-03-04 07:38 - 2015-12-29 16:42 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-03-04 07:37 - 2016-01-10 18:50 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2016-03-04 07:37 - 2016-01-10 18:31 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
2016-03-04 07:37 - 2016-01-10 18:16 - 00898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2016-03-04 07:37 - 2016-01-10 18:14 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll
2016-03-04 07:37 - 2016-01-10 18:12 - 00532480 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll
2016-03-04 07:37 - 2016-01-10 17:58 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-03-04 07:37 - 2016-01-10 17:51 - 00702976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2016-03-04 07:37 - 2016-01-10 17:49 - 00443392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EncDec.dll
2016-03-04 07:37 - 2016-01-10 17:40 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2016-03-04 07:37 - 2015-12-07 11:56 - 01380600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-03-04 07:37 - 2015-12-04 16:00 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-03-04 07:36 - 2016-01-19 20:14 - 07453024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-03-04 07:36 - 2016-01-19 20:13 - 02175008 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-03-04 07:36 - 2016-01-19 20:13 - 01063464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-03-04 07:36 - 2016-01-19 20:12 - 01737088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-03-04 07:36 - 2016-01-19 20:12 - 01133744 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-03-04 07:36 - 2016-01-19 19:23 - 01564496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-03-04 07:36 - 2016-01-19 19:23 - 01501496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-03-04 07:36 - 2016-01-19 19:23 - 00548024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-03-04 07:36 - 2016-01-19 19:15 - 00246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-03-04 07:36 - 2016-01-19 18:30 - 00862720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-03-04 07:36 - 2016-01-19 17:37 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2016-03-04 07:35 - 2015-12-11 01:13 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-03-04 07:35 - 2015-12-02 16:04 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-03-04 07:35 - 2015-12-02 16:01 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2016-03-04 07:34 - 2016-01-06 19:25 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-03-04 07:34 - 2015-12-28 22:42 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSync.dll
2016-03-04 07:34 - 2015-12-28 21:31 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSync.dll
2016-03-04 07:34 - 2015-12-17 19:29 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-03-04 07:34 - 2015-12-17 17:17 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2016-03-04 07:33 - 2015-12-08 20:08 - 00685432 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2016-03-04 07:33 - 2015-12-08 20:07 - 00507176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2016-03-04 07:21 - 2016-03-04 07:21 - 01518592 _____ C:\Users\Danuška\Desktop\adwcleaner_5.037.exe
2016-03-03 21:06 - 2016-03-03 21:06 - 00000000 _____ C:\Users\Danuška\Desktop\Nový textový dokument.txt
2016-03-03 17:07 - 2016-03-03 17:07 - 00010843 _____ C:\Users\Danuška\Desktop\nepi-jano_0.10.0.xpi
2016-03-03 16:51 - 2016-03-03 19:28 - 00000000 ____D C:\Users\Danuška\Desktop\sken Bezpečnosť detského oblečenia
2016-03-03 16:38 - 2016-03-03 16:38 - 00003852 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1393007821
2016-03-03 16:38 - 2016-03-03 16:38 - 00001067 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-02-29 19:19 - 2016-02-29 19:20 - 00121824 _____ C:\Users\Danuška\Desktop\mobil_vajceaLC.pdf
2016-02-28 19:10 - 2016-02-28 19:10 - 01923072 _____ C:\Users\Danuška\Desktop\Maminka vždycky ��íkávala.pps
2016-02-26 07:28 - 2016-02-26 07:28 - 02268079 _____ C:\Users\Danuška\Desktop\KE_ZPP_map.pdf
2016-02-26 06:36 - 2016-02-26 07:20 - 1200333397 ____R C:\Users\Danuška\Downloads\Connasse.Princesse.Des.Coeurs.2015.DVDRip.x264-RiSiNG.mkv
2016-02-26 06:35 - 2016-02-26 06:35 - 00012074 _____ C:\Users\Danuška\Desktop\[SkT]Parizska_blbka_-_Connasse,_Princesse_des_coeurs_(2015)(CZ)_=_CSFD_63%.torrent
2016-02-26 05:22 - 2016-02-26 07:22 - 00000000 ____D C:\Users\Danuška\Downloads\Battle.for.Sevastopol.2015.HDRip.XviD.AC3-EVO
2016-02-26 05:17 - 2016-02-26 05:17 - 00017195 _____ C:\Users\Danuška\Desktop\[SkT]Bitva_za_Sevastopol_-_&#1041;&#1080;&#1090;&#1074;&#1072;_&#1079;&#1072;_&#1057;&#1077;&#1074;&#1072;&#1089;&#1090;&#1086;&#1087;&#1086;&#1083;&#1100;_(2015)[WebRip].torrent
2016-02-25 17:48 - 2016-02-25 17:48 - 00191133 _____ C:\Users\Danuška\Desktop\000001123483_Potvrdenie o úhrade diaľničnej známky,_201602251748.pdf
2016-02-25 05:35 - 2016-02-25 05:35 - 00000000 ____D C:\Users\Default\AppData\Roaming\AVG
2016-02-25 05:35 - 2016-02-25 05:35 - 00000000 ____D C:\Users\Default User\AppData\Roaming\AVG
2016-02-25 05:35 - 2016-02-15 10:30 - 00048552 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\uxtuneup.dll
2016-02-25 05:35 - 2016-02-15 10:30 - 00042408 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\SysWOW64\uxtuneup.dll
2016-02-25 05:35 - 2016-02-15 10:30 - 00037288 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\authuitu.dll
2016-02-25 05:35 - 2016-02-15 10:30 - 00032680 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\SysWOW64\authuitu.dll
2016-02-25 05:34 - 2016-02-25 05:34 - 00000000 ____D C:\Users\Default\AppData\Local\AVG
2016-02-25 05:34 - 2016-02-25 05:34 - 00000000 ____D C:\Users\Default User\AppData\Local\AVG
2016-02-23 19:51 - 2016-02-23 19:51 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2016-02-23 17:44 - 2016-02-23 17:44 - 00014208 _____ C:\Users\Danuška\Desktop\[SkT]Backtrack_(2015)[WebRip]_=_CSFD_52%.torrent
2016-02-23 17:43 - 2016-02-23 17:43 - 00013802 _____ C:\Users\Danuška\Desktop\[SkT]Nemilosrdni_-_Antigang_(2015)(CZ)_=_CSFD_61%.torrent
2016-02-23 05:51 - 2016-02-23 05:51 - 00002760 _____ C:\WINDOWS\System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance
2016-02-22 17:13 - 2016-02-22 17:13 - 00001401 _____ C:\Users\Danuška\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneClickStarter.lnk
2016-02-22 16:46 - 2016-03-04 11:22 - 00003694 _____ C:\WINDOWS\System32\Tasks\Adobe Reader and Acrobat Manager
2016-02-22 16:37 - 2016-02-25 05:35 - 00002222 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk
2016-02-22 16:37 - 2016-02-25 05:35 - 00002210 _____ C:\Users\Public\Desktop\AVG PC TuneUp.lnk
2016-02-22 16:37 - 2016-02-15 10:36 - 00045992 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\TURegOpt.exe
2016-02-22 16:35 - 2016-02-22 16:37 - 00000000 ____D C:\Users\Danuška\AppData\Local\AvgSetupLog
2016-02-22 16:06 - 2016-02-28 13:04 - 00000000 ____D C:\Users\Danuška\AppData\LocalLow\uTorrent
2016-02-21 22:09 - 2016-02-21 22:09 - 00186063 _____ C:\Users\Danuška\Desktop\14-z102.pdf
2016-02-21 22:03 - 2016-02-21 22:03 - 00132535 _____ C:\Users\Danuška\Desktop\15-z391.pdf
2016-02-20 14:23 - 2016-02-20 14:23 - 01162179 _____ C:\Users\Danuška\Desktop\Program-Ano-NO.pdf
2016-02-20 06:33 - 2016-02-20 06:33 - 00192022 _____ C:\Users\Danuška\Desktop\okolo_simonky.gpx
2016-02-17 06:41 - 2016-02-17 06:41 - 00980828 _____ C:\Users\Danuška\Desktop\ziadost-o-elektronicke-oznamovanie-zasielok.pdf
2016-02-17 05:42 - 2012-12-09 14:30 - 01055101 _____ C:\Users\Danuška\Desktop\LECENI_Megre-Vladimir_CS_Zvonici_cedry_Ruska-dil1-ANASTASIA.pdf
2016-02-17 05:40 - 2016-02-17 05:42 - 23204234 _____ C:\Users\Danuška\Downloads\Vladimir-Megre-Zvonici-Cedry-Ruska-CS-10-knih-PDF.zip
2016-02-17 05:37 - 2016-02-17 05:38 - 02724828 _____ C:\Users\Danuška\Downloads\Vladimir-Megre---Zvonici-cedry-Ruska-1-10-EPUB.zip
2016-02-16 19:24 - 2016-02-16 19:24 - 00000000 ___HD C:\ProgramData\CanonBJ
2016-02-16 19:24 - 2013-07-08 07:32 - 00270848 _____ (CANON INC.) C:\WINDOWS\system32\CNMLM8F.DLL
2016-02-13 20:28 - 2016-02-13 20:28 - 00015231 _____ C:\Users\Danuška\Downloads\[SkT]Zprava_o_Europe_-_Europa_Report_(2013)(CZ)_=_CSFD_69%.torrent
2016-02-13 18:01 - 2016-02-13 18:01 - 00015418 _____ C:\Users\Danuška\Downloads\[SkT]Husi_kuze_-_Goosebumps_(2015)(CZ)_=_CSFD_60%.torrent
2016-02-11 20:19 - 2016-02-11 20:20 - 15852432 _____ C:\Users\Danuška\Downloads\yosetup (2).exe
2016-02-11 16:50 - 2016-02-11 16:51 - 00034253 _____ C:\Users\Danuška\Downloads\[SkT]Most_spionu_-_Bridge_of_Spies_(2015)[720p]_=_CSFD_81%.torrent
2016-02-10 22:00 - 2016-02-10 22:00 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys
2016-02-09 16:30 - 2016-02-20 07:33 - 00000000 ____D C:\WINDOWS\Minidump
2016-02-08 19:37 - 2016-02-08 19:57 - 355036578 _____ C:\Users\Danuška\Downloads\Vladimir-Megre-Anastasia-AUDIO-MP3-CZ-kniha-08b-OBRADY-LASKY.zip
2016-02-08 18:26 - 2016-02-08 18:26 - 00562996 _____ C:\Users\Danuška\Downloads\IMG_0001 (1).pdf
2016-02-08 17:48 - 2016-02-08 18:12 - 410553608 _____ C:\Users\Danuška\Downloads\Vladimir-Megre-Anastasia-AUDIO-MP3-CZ-kniha-07-ENERGIE-ZIVOTA.zip
2016-02-08 17:39 - 2016-02-24 17:51 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2016-02-08 17:39 - 2016-02-08 17:38 - 01065720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2016-02-08 17:39 - 2016-02-08 17:38 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2016-02-08 17:39 - 2016-02-08 17:38 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2016-02-08 17:39 - 2016-02-08 17:38 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2016-02-08 17:39 - 2016-02-08 17:38 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-02-08 17:39 - 2016-02-08 17:38 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-02-08 17:38 - 2016-02-08 17:38 - 00398152 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-02-08 17:38 - 2016-02-08 17:38 - 00052184 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-02-08 17:25 - 2016-02-08 17:46 - 374048873 _____ C:\Users\Danuška\Downloads\Vladimir-Megre-Anastasia-AUDIO-MP3-CZ-kniha-08a-NOVA-CIVILIZACE.zip
2016-02-08 14:17 - 2016-02-08 15:42 - 1527736808 _____ C:\Users\Danuška\Downloads\Šestý-smysl---po-stopách-léčitelů,2.-série-kompletní.rar
2016-02-07 19:26 - 2016-02-07 19:26 - 01070075 _____ C:\Users\Danuška\Desktop\Juli.rar
2016-02-07 08:46 - 2016-02-15 16:57 - 00000000 ____D C:\Users\Danuška\Downloads\Video Fireplace - Christmas Classics by the Fire (Big Papi) DVD-ISO Classic Xmas Songs

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-04 12:47 - 2015-01-19 14:38 - 00003966 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{C0EC10A9-F0E8-4D5B-89BA-AD9DE8F06D0D}
2016-03-04 12:10 - 2014-12-24 21:02 - 00000000 ____D C:\Users\Danuška\AppData\Local\Deployment
2016-03-04 12:09 - 2014-12-07 12:57 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-03-04 12:07 - 2014-12-22 22:19 - 00000000 ____D C:\Users\Danuška
2016-03-04 11:22 - 2016-01-16 17:02 - 00003886 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-03-04 11:20 - 2014-12-03 19:21 - 00000000 ____D C:\Users\Danuška\Documents\StrongDC++
2016-03-04 10:44 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2016-03-04 09:21 - 2013-12-23 16:20 - 00000000 ____D C:\Users\Danuška\AppData\Local\VirtualStore
2016-03-04 08:28 - 2014-09-24 06:35 - 00863592 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-04 08:28 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf
2016-03-04 08:24 - 2014-12-22 22:45 - 00000000 __SHD C:\Users\Danuška\IntelGraphicsProfiles
2016-03-04 08:23 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-03-04 08:23 - 2013-08-22 15:44 - 00482256 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-04 08:16 - 2014-12-24 22:23 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-03-04 08:16 - 2014-09-24 09:20 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2016-03-04 08:16 - 2014-09-24 06:13 - 00000000 ____D C:\Program Files\Windows Journal
2016-03-04 08:16 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2016-03-04 08:14 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-04 08:02 - 2013-10-18 00:06 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-03-04 07:57 - 2014-01-06 17:22 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-03-04 07:52 - 2014-01-06 17:22 - 146614896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-03-04 07:46 - 2012-07-26 06:26 - 00000278 _____ C:\WINDOWS\win.ini
2016-03-04 07:44 - 2015-03-28 23:35 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2016-03-04 07:44 - 2015-03-28 23:35 - 00000000 ___SD C:\WINDOWS\system32\GWX
2016-03-04 07:40 - 2013-12-23 17:52 - 00000000 ____D C:\Users\Danuška\AppData\Local\CrashDumps
2016-03-04 07:24 - 2015-08-01 18:07 - 00000000 ____D C:\AdwCleaner
2016-03-04 06:43 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-03-04 06:29 - 2015-12-30 18:51 - 00000000 ____D C:\Users\Danuška\Documents\recepty
2016-03-03 20:09 - 2014-01-03 20:54 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3670456473-3412912233-516016340-1001
2016-03-03 16:38 - 2014-02-21 19:37 - 00000000 ____D C:\Program Files (x86)\Opera
2016-03-02 21:27 - 2014-01-20 21:36 - 00773632 ___SH C:\Users\Danuška\Desktop\Thumbs.db
2016-02-28 13:35 - 2014-07-05 05:18 - 00000000 ____D C:\Users\Danuška\AppData\Roaming\uTorrent
2016-02-27 23:37 - 2013-12-23 20:09 - 00000000 ____D C:\Users\Danuška\AppData\Local\Microsoft Help
2016-02-27 07:10 - 2015-12-31 17:52 - 00000892 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-02-26 05:18 - 2015-10-30 21:02 - 00000000 ____D C:\Users\Danuška\Downloads\Knock Knock (2015)
2016-02-25 05:35 - 2015-08-12 10:36 - 00000000 ____D C:\Users\Danuška\AppData\Roaming\AVG
2016-02-22 21:50 - 2015-03-10 11:33 - 00000000 ____D C:\Users\Danuška\Desktop\SOI
2016-02-22 16:37 - 2015-08-12 10:36 - 00000000 ____D C:\Users\Danuška\AppData\Local\Avg
2016-02-22 16:36 - 2015-08-12 10:36 - 00000000 ____D C:\Program Files (x86)\AVG
2016-02-22 16:36 - 2015-08-12 10:35 - 00000000 ____D C:\ProgramData\AVG
2016-02-22 16:07 - 2014-05-15 18:31 - 00002828 _____ C:\Users\Danuška\AppData\Local\config.dat
2016-02-19 21:45 - 2013-12-23 20:40 - 00000000 ____D C:\Users\Danuška\AppData\Roaming\vlc
2016-02-16 19:25 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2016-02-14 14:15 - 2014-11-23 11:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-14 10:45 - 2014-10-11 15:42 - 00000000 ____D C:\KMPlayer
2016-02-14 07:57 - 2013-12-24 12:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-02-14 06:37 - 2015-12-31 17:52 - 00003854 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-02-13 12:12 - 2016-01-06 13:55 - 00000000 ____D C:\Users\Danuška\Desktop\objednávky
2016-02-11 20:21 - 2014-02-22 11:24 - 00000000 ____D C:\Users\Danuška\AppData\Roaming\YoWindow
2016-02-11 05:48 - 2013-08-22 16:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-02-11 05:48 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-02-07 15:26 - 2016-01-18 18:03 - 00000000 ____D C:\ProgramData\Canon_Inc_IC

==================== Files in the root of some directories =======

2014-05-15 18:31 - 2016-02-22 16:07 - 0002828 _____ () C:\Users\Danuška\AppData\Local\config.dat
2013-10-17 23:53 - 2013-10-17 23:53 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_306_pepper.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001Core.job => C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001UA.job => C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Danuška.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Internet Security (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Danu�ka\Desktop" je 2057 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Re: nejde spustit word

Napsal: 04 bře 2016 12:57
od Timur
Addition log:

Additional scan result of Farbar Recovery Scan Tool (x64) Version:02-03-2016
Ran by Danuška (2016-03-04 12:54:55)
Running from C:\Users\Danuška\Desktop
Windows 8.1 (X64) (2014-12-22 21:44:27)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3670456473-3412912233-516016340-500 - Administrator - Disabled)
Danuška (S-1-5-21-3670456473-3412912233-516016340-1001 - Administrator - Enabled) => C:\Users\Danuška
Guest (S-1-5-21-3670456473-3412912233-516016340-501 - Limited - Disabled) => C:\Users\Guest
HomeGroupUser$ (S-1-5-21-3670456473-3412912233-516016340-1005 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Internet Security (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\uTorrent) (Version: 3.4.5.41712 - BitTorrent Inc.)
Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3013 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Acer Incorporated)
Acer Theft Shield (HKLM\...\{8ADB0CD2-4E5A-452F-BB3B-3A2984CAC749}) (Version: 1.01.3006 - Acer Incorporated)
AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.2008 - Acer Incorporated)
AcerCloud Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.02.2022 - Acer Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated)
Adobe Flash Player 20 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.14) - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AB0000000001}) (Version: 11.0.14 - Adobe Systems Incorporated)
Aktualizácia Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-041B-0000-0000000FF1CE}_ENTERPRISE_{9A8C39B0-D27F-4F81-BE74-2FECF164707E}) (Version: - Microsoft)
Aktualizácia Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-041B-0000-0000000FF1CE}_ENTERPRISE_{CE23B3DC-18CC-46FC-A309-81D6670F8D3D}) (Version: - Microsoft)
Aktualizácia Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-041B-0000-0000000FF1CE}_ENTERPRISE_{D6DBF512-87C0-4F6A-8FB9-AC3A389D9DE5}) (Version: - Microsoft)
AntikVirtualSTB 10.1.7 (HKLM-x32\...\{14CCAED2-5140-44F3-991D-DA9AC7C9A3AB}_is1) (Version: - Antik)
Autodesk MapGuide(R) Viewer ActiveX Control Release 6.5 (HKLM-x32\...\{E031338C-839D-4EDD-9537-99B653C39D81}) (Version: 6.5.5.24 - Autodesk, Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2253 - AVAST Software)
AVG PC TuneUp (HKLM-x32\...\AVG PC TuneUp) (Version: 16.22.1.58906 - AVG Technologies)
AVG PC TuneUp (x32 Version: 16.22.3 - AVG Technologies) Hidden
Canon Utilities CameraWindow DC 8 (HKLM-x32\...\CameraWindowDC) (Version: 8.10.6.29 - Canon Inc.)
Canon Utilities Digital Photo Professional (HKLM-x32\...\Digital Photo Professional) (Version: 3.14.30.0 - Canon Inc.)
Canon Utilities Digital Photo Professional 4 (HKLM-x32\...\Digital Photo Professional 4 (x64)) (Version: 4.3.31.0 - Canon Inc.)
Canon Utilities Image Transfer Utility (HKLM-x32\...\ImageTransferUtility Parent) (Version: 1.2.3.10 - Canon Inc.)
Canon Utilities ImageBrowser EX (HKLM-x32\...\ImageBrowser EX) (Version: 1.5.2.8 - Canon Inc.)
Canon Utilities Map Utility (HKLM-x32\...\Map Utility Parent) (Version: 1.7.0.2 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.2012 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.2016 - Acer Incorporated)
clear.fi SDK - Video 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden
clear.fi SDK- Movie 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)
ETDWare PS/2-X64 11.6.20.203_WHQL (HKLM\...\Elantech) (Version: 11.6.20.203 - ELAN Microelectronic Corp.)
ExpressCache (HKLM\...\{C123584F-9C84-45E8-AE5F-522328BB79A0}) (Version: 1.0.100.0 - Condusiv Technologies)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FMW 1 (Version: 1.62.2 - AVG Technologies) Hidden
Garmin Communicator Plugin (HKLM-x32\...\{71DBFBF2-F7EB-4268-8485-9471D83C4E66}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)
Garmin Communicator Plugin x64 (HKLM\...\{70A381F1-C161-4D61-A20C-BE12FC6777DF}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Talk Plugin (HKLM-x32\...\{0C5C1177-94C5-3EFB-A8BE-3F6AF1AF887F}) (Version: 5.38.6.0 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3006 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Rapid Start Technology (HKLM-x32\...\3D073343-CEEB-4ce7-85AC-A69A7631B5D6) (Version: 2.1.0.1002 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 3.9.1.136 - PandoraTV)
Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.12 - Acer Inc.)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3010 - Acer Incorporated)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 44.0.2 (x86 sk) (HKLM-x32\...\Mozilla Firefox 44.0.2 (x86 sk)) (Version: 44.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 44.0.2.5884 - Mozilla)
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2008 - Acer)
Office Addin 2003 (HKLM-x32\...\{1FCC073B-CC01-4443-AD20-E559F66E6E83}) (Version: 2.02.2008 - Acer)
Opera Stable 35.0.2066.92 (HKLM-x32\...\Opera 35.0.2066.92) (Version: 35.0.2066.92 - Opera Software)
PIXELA AAC LC CODEC (HKLM-x32\...\PIXELA AAC LC CODEC) (Version: 1.1.0.1 - Canon Inc.)
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.39 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6833 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)
Sleep Memory Optimizer (HKLM\...\{BF63C2C3-9A5B-4366-AA5F-015292B919F0}) (Version: 1.01.3000 - Acer Incorporated)
Smart Timer (HKLM-x32\...\{89DB52FC-EA72-468F-A0C7-150AF8B7AB74}) (Version: 1.00.3007 - Acer Incorporated)
SpaceMonger 2.1.1 (HKLM-x32\...\SpaceMonger) (Version: 2.1.1 - Sixty-Five)
Spotify (HKLM-x32\...\Spotify) (Version: 0.8.4.99.ga249b5f1 - Spotify AB)
StrongDC++ 2.41 (HKLM-x32\...\StrongDC++) (Version: 2.41 - Big Muscle)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VPlayer 0.6e CZ (HKLM-x32\...\{DA8D1BC9-DB57-40D0-98C6-EE128788A1A0}_is1) (Version: 0.6e3 - Adrian Schlama, Andre Bullock, GuGo Films)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Driver Package - Google, Inc. AndroidUsbDeviceClass (08/27/2012 7.0.0000.00001) (HKLM\...\6803A5C44482B015766CD85EAE73F57DAB0CD2D1) (Version: 08/27/2012 7.0.0000.00001 - Google, Inc.)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DF}) (Version: 18.0.10661 - WinZip Computing, S.L. )
Zoner Photo Studio 17 (HKLM\...\ZonerPhotoStudio17_EN_is1) (Version: 17.0.1.12 - ZONER software)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3670456473-3412912233-516016340-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-3670456473-3412912233-516016340-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Danuška\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3670456473-3412912233-516016340-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Danuška\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {152E2550-0D08-4108-8216-4A389578118F} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-02-17] (AVAST Software)
Task: {3139FE25-7850-466E-B9C8-24B64993568F} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {43881331-26DC-4EB7-BF5B-62DF52506368} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {447DB4DA-1751-4A02-B9A8-A0A8BF9AD88D} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-02-08] (AVAST Software)
Task: {71CC09F7-F15F-4B3E-80CC-FB9BEEA9D467} - System32\Tasks\Driver Booster SkipUAC (Danuška) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {74E79D05-6862-4BB4-9EA3-52B715683B21} - System32\Tasks\Theft Shield\AcerTheftShieldTask => C:\Program Files\Acer\Acer Theft Shield\USecuAppLauncher.exe [2012-11-12] (Acer Incorporated)
Task: {76797B29-3FAA-47D2-8FD8-9DD84423B4FF} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_306_pepper.exe [2016-02-14] (Adobe Systems Incorporated)
Task: {8296770A-05BB-4E43-9DD7-0B9E53153C92} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-08] (Google Inc.)
Task: {9016C02E-A768-47A5-A1B2-BC28A8EB9BD7} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-03-04] (Microsoft Corporation)
Task: {AB2D6721-0577-40D2-9D34-F3821063638C} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe [2016-02-15] (AVG Technologies CZ, s.r.o.)
Task: {B223CC9E-968D-437A-86C6-F8121F5A2406} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated)
Task: {BA17B42A-618A-448C-BED4-1BC84CC43900} - System32\Tasks\Dolby Selector => C:\Dolby PCEE4\pcee4.exe [2012-09-01] (Dolby Laboratories Inc.)
Task: {BD2B76BD-B138-45EE-8750-8B638DF63093} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {C8C563B1-3D60-43BA-8535-F0181EFC0A0B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-08] (Google Inc.)
Task: {CAA4B5C0-81BE-4203-BB96-5CA20E005AC4} - System32\Tasks\Google Updater and Installer => C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe [2013-12-24] (Google Inc.)
Task: {D4AF7BBF-1A5C-47D9-9287-A81EB266EC0C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001UA => C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe [2013-12-24] (Google Inc.)
Task: {D7532BFA-0B05-403A-99FD-2E9D524980E8} - System32\Tasks\Uninstaller_SkipUac_Danuška => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {ED7C2207-A39E-4277-AF91-8E6E50CA1F45} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-03-13] ()
Task: {F4F98F6B-93BF-4166-AB02-D85BB12EAF96} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001Core => C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe [2013-12-24] (Google Inc.)
Task: {FECC9B7F-6F62-4423-8B93-469A94213FD3} - System32\Tasks\Opera scheduled Autoupdate 1393007821 => C:\Program Files (x86)\Opera\launcher.exe [2016-03-01] (Opera Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_306_pepper.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001Core.job => C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001UA.job => C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Danuška.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

Re: nejde spustit word

Napsal: 04 bře 2016 13:01
od altrok
:arrow: Vytvorte prosim novy log Addition.txt, ale jen za pouziti FRST64.exe (bez FRSTLauncheru). Pred zacatkem skenovani zkontrolujte zatrzitko u Addition.txt. Vygeneruji se oba logy, ale bude mi stacit, kdyz vlozite pouze Addition.txt.

Re: nejde spustit word

Napsal: 04 bře 2016 13:07
od Timur
nový addition log:
Additional scan result of Farbar Recovery Scan Tool (x64) Version:02-03-2016
Ran by Danuška (2016-03-04 13:04:06)
Running from C:\Users\Danuška\Desktop
Windows 8.1 (X64) (2014-12-22 21:44:27)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3670456473-3412912233-516016340-500 - Administrator - Disabled)
Danuška (S-1-5-21-3670456473-3412912233-516016340-1001 - Administrator - Enabled) => C:\Users\Danuška
Guest (S-1-5-21-3670456473-3412912233-516016340-501 - Limited - Disabled) => C:\Users\Guest
HomeGroupUser$ (S-1-5-21-3670456473-3412912233-516016340-1005 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Internet Security (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\uTorrent) (Version: 3.4.5.41712 - BitTorrent Inc.)
Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3013 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Acer Incorporated)
Acer Theft Shield (HKLM\...\{8ADB0CD2-4E5A-452F-BB3B-3A2984CAC749}) (Version: 1.01.3006 - Acer Incorporated)
AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.2008 - Acer Incorporated)
AcerCloud Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.02.2022 - Acer Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated)
Adobe Flash Player 20 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.14) - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AB0000000001}) (Version: 11.0.14 - Adobe Systems Incorporated)
Aktualizácia Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-041B-0000-0000000FF1CE}_ENTERPRISE_{9A8C39B0-D27F-4F81-BE74-2FECF164707E}) (Version: - Microsoft)
Aktualizácia Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-041B-0000-0000000FF1CE}_ENTERPRISE_{CE23B3DC-18CC-46FC-A309-81D6670F8D3D}) (Version: - Microsoft)
Aktualizácia Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-041B-0000-0000000FF1CE}_ENTERPRISE_{D6DBF512-87C0-4F6A-8FB9-AC3A389D9DE5}) (Version: - Microsoft)
AntikVirtualSTB 10.1.7 (HKLM-x32\...\{14CCAED2-5140-44F3-991D-DA9AC7C9A3AB}_is1) (Version: - Antik)
Autodesk MapGuide(R) Viewer ActiveX Control Release 6.5 (HKLM-x32\...\{E031338C-839D-4EDD-9537-99B653C39D81}) (Version: 6.5.5.24 - Autodesk, Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2253 - AVAST Software)
AVG PC TuneUp (HKLM-x32\...\AVG PC TuneUp) (Version: 16.22.1.58906 - AVG Technologies)
AVG PC TuneUp (x32 Version: 16.22.3 - AVG Technologies) Hidden
Canon Utilities CameraWindow DC 8 (HKLM-x32\...\CameraWindowDC) (Version: 8.10.6.29 - Canon Inc.)
Canon Utilities Digital Photo Professional (HKLM-x32\...\Digital Photo Professional) (Version: 3.14.30.0 - Canon Inc.)
Canon Utilities Digital Photo Professional 4 (HKLM-x32\...\Digital Photo Professional 4 (x64)) (Version: 4.3.31.0 - Canon Inc.)
Canon Utilities Image Transfer Utility (HKLM-x32\...\ImageTransferUtility Parent) (Version: 1.2.3.10 - Canon Inc.)
Canon Utilities ImageBrowser EX (HKLM-x32\...\ImageBrowser EX) (Version: 1.5.2.8 - Canon Inc.)
Canon Utilities Map Utility (HKLM-x32\...\Map Utility Parent) (Version: 1.7.0.2 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.2012 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.2016 - Acer Incorporated)
clear.fi SDK - Video 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden
clear.fi SDK- Movie 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)
ETDWare PS/2-X64 11.6.20.203_WHQL (HKLM\...\Elantech) (Version: 11.6.20.203 - ELAN Microelectronic Corp.)
ExpressCache (HKLM\...\{C123584F-9C84-45E8-AE5F-522328BB79A0}) (Version: 1.0.100.0 - Condusiv Technologies)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FMW 1 (Version: 1.62.2 - AVG Technologies) Hidden
Garmin Communicator Plugin (HKLM-x32\...\{71DBFBF2-F7EB-4268-8485-9471D83C4E66}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)
Garmin Communicator Plugin x64 (HKLM\...\{70A381F1-C161-4D61-A20C-BE12FC6777DF}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Talk Plugin (HKLM-x32\...\{0C5C1177-94C5-3EFB-A8BE-3F6AF1AF887F}) (Version: 5.38.6.0 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3006 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Rapid Start Technology (HKLM-x32\...\3D073343-CEEB-4ce7-85AC-A69A7631B5D6) (Version: 2.1.0.1002 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 3.9.1.136 - PandoraTV)
Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.12 - Acer Inc.)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3010 - Acer Incorporated)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 44.0.2 (x86 sk) (HKLM-x32\...\Mozilla Firefox 44.0.2 (x86 sk)) (Version: 44.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 44.0.2.5884 - Mozilla)
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2008 - Acer)
Office Addin 2003 (HKLM-x32\...\{1FCC073B-CC01-4443-AD20-E559F66E6E83}) (Version: 2.02.2008 - Acer)
Opera Stable 35.0.2066.92 (HKLM-x32\...\Opera 35.0.2066.92) (Version: 35.0.2066.92 - Opera Software)
PIXELA AAC LC CODEC (HKLM-x32\...\PIXELA AAC LC CODEC) (Version: 1.1.0.1 - Canon Inc.)
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.39 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6833 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)
Sleep Memory Optimizer (HKLM\...\{BF63C2C3-9A5B-4366-AA5F-015292B919F0}) (Version: 1.01.3000 - Acer Incorporated)
Smart Timer (HKLM-x32\...\{89DB52FC-EA72-468F-A0C7-150AF8B7AB74}) (Version: 1.00.3007 - Acer Incorporated)
SpaceMonger 2.1.1 (HKLM-x32\...\SpaceMonger) (Version: 2.1.1 - Sixty-Five)
Spotify (HKLM-x32\...\Spotify) (Version: 0.8.4.99.ga249b5f1 - Spotify AB)
StrongDC++ 2.41 (HKLM-x32\...\StrongDC++) (Version: 2.41 - Big Muscle)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VPlayer 0.6e CZ (HKLM-x32\...\{DA8D1BC9-DB57-40D0-98C6-EE128788A1A0}_is1) (Version: 0.6e3 - Adrian Schlama, Andre Bullock, GuGo Films)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Driver Package - Google, Inc. AndroidUsbDeviceClass (08/27/2012 7.0.0000.00001) (HKLM\...\6803A5C44482B015766CD85EAE73F57DAB0CD2D1) (Version: 08/27/2012 7.0.0000.00001 - Google, Inc.)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DF}) (Version: 18.0.10661 - WinZip Computing, S.L. )
Zoner Photo Studio 17 (HKLM\...\ZonerPhotoStudio17_EN_is1) (Version: 17.0.1.12 - ZONER software)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3670456473-3412912233-516016340-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-3670456473-3412912233-516016340-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Danuška\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3670456473-3412912233-516016340-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Danuška\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {152E2550-0D08-4108-8216-4A389578118F} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-02-17] (AVAST Software)
Task: {3139FE25-7850-466E-B9C8-24B64993568F} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {43881331-26DC-4EB7-BF5B-62DF52506368} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {447DB4DA-1751-4A02-B9A8-A0A8BF9AD88D} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-02-08] (AVAST Software)
Task: {71CC09F7-F15F-4B3E-80CC-FB9BEEA9D467} - System32\Tasks\Driver Booster SkipUAC (Danuška) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {74E79D05-6862-4BB4-9EA3-52B715683B21} - System32\Tasks\Theft Shield\AcerTheftShieldTask => C:\Program Files\Acer\Acer Theft Shield\USecuAppLauncher.exe [2012-11-12] (Acer Incorporated)
Task: {76797B29-3FAA-47D2-8FD8-9DD84423B4FF} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_306_pepper.exe [2016-02-14] (Adobe Systems Incorporated)
Task: {8296770A-05BB-4E43-9DD7-0B9E53153C92} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-08] (Google Inc.)
Task: {9016C02E-A768-47A5-A1B2-BC28A8EB9BD7} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-03-04] (Microsoft Corporation)
Task: {AB2D6721-0577-40D2-9D34-F3821063638C} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe [2016-02-15] (AVG Technologies CZ, s.r.o.)
Task: {B223CC9E-968D-437A-86C6-F8121F5A2406} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated)
Task: {BA17B42A-618A-448C-BED4-1BC84CC43900} - System32\Tasks\Dolby Selector => C:\Dolby PCEE4\pcee4.exe [2012-09-01] (Dolby Laboratories Inc.)
Task: {BD2B76BD-B138-45EE-8750-8B638DF63093} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {C8C563B1-3D60-43BA-8535-F0181EFC0A0B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-08] (Google Inc.)
Task: {CAA4B5C0-81BE-4203-BB96-5CA20E005AC4} - System32\Tasks\Google Updater and Installer => C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe [2013-12-24] (Google Inc.)
Task: {D4AF7BBF-1A5C-47D9-9287-A81EB266EC0C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001UA => C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe [2013-12-24] (Google Inc.)
Task: {D7532BFA-0B05-403A-99FD-2E9D524980E8} - System32\Tasks\Uninstaller_SkipUac_Danuška => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {ED7C2207-A39E-4277-AF91-8E6E50CA1F45} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-03-13] ()
Task: {F4F98F6B-93BF-4166-AB02-D85BB12EAF96} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001Core => C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe [2013-12-24] (Google Inc.)
Task: {FECC9B7F-6F62-4423-8B93-469A94213FD3} - System32\Tasks\Opera scheduled Autoupdate 1393007821 => C:\Program Files (x86)\Opera\launcher.exe [2016-03-01] (Opera Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_306_pepper.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001Core.job => C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001UA.job => C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Danuška.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2014-02-23 22:20 - 2013-04-01 18:21 - 00178688 _____ () C:\WINDOWS\System32\HP1005LM.DLL
2015-07-20 16:59 - 2013-04-01 18:21 - 00065024 _____ () C:\WINDOWS\system32\spool\PRTPROCS\x64\HP1005PP.dll
2013-10-18 00:14 - 2013-02-21 06:58 - 00111176 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext_x64.dll
2016-02-08 17:38 - 2016-02-08 17:38 - 00113496 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2016-02-08 17:38 - 2016-02-08 17:38 - 00133768 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-03-04 06:20 - 2016-03-04 06:20 - 02838016 _____ () C:\Program Files\AVAST Software\Avast\defs\16030301\algo.dll
2016-02-08 17:38 - 2016-02-08 17:38 - 00480760 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-03-04 12:24 - 2016-03-04 12:24 - 02838016 _____ () C:\Program Files\AVAST Software\Avast\defs\16030400\algo.dll
2015-12-05 16:12 - 2015-12-05 16:12 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-03-03 16:38 - 2016-03-03 16:38 - 62332456 _____ () C:\Program Files (x86)\Opera\35.0.2066.92\opera.dll
2016-03-03 16:38 - 2016-03-03 16:38 - 02074664 _____ () C:\Program Files (x86)\Opera\35.0.2066.92\libglesv2.dll
2016-03-03 16:38 - 2016-03-03 16:38 - 00081960 _____ () C:\Program Files (x86)\Opera\35.0.2066.92\libegl.dll
2012-09-23 20:43 - 2012-09-23 20:43 - 00313992 _____ () C:\Program Files (x86)\Adobe\Reader 11.0\Reader\sqlite.dll
2014-12-03 07:31 - 2014-12-03 07:31 - 14588632 _____ () C:\Program Files (x86)\Adobe\Reader 11.0\Reader\NPSWF32.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

There are 7866 more sites.

IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\1-se.com -> 1-se.com

There are 11404 more sites.


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2015-04-09 14:35 - 00450771 ____R C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
127.0.0.1 www.123moviedownload.com

There are 15463 more lines.


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3670456473-3412912233-516016340-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Danuška\AppData\Roaming\Microsoft\Windows Photo Viewer\Tapeta programu Windows Photo Viewer.jpg
DNS Servers: 192.168.1.1 - 88.212.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\StartupFolder: => "Image Transfer Utility.lnk"
HKLM\...\StartupApproved\StartupFolder: => "ImageBrowser EX Agent.lnk"
HKLM\...\StartupApproved\Run32: => "GrooveMonitor"
HKLM\...\StartupApproved\Run32: => "LManager"
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKLM\...\StartupApproved\Run32: => "IgfxTray"
HKLM\...\StartupApproved\Run32: => "IObit Malware Fighter"
HKLM\...\StartupApproved\Run32: => "SDTray"
HKLM\...\StartupApproved\Run32: => "Spotify Web Helper"
HKLM\...\StartupApproved\Run32: => "AvgUi"
HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\StartupApproved\StartupFolder: => "yowindow.lnk"
HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\StartupApproved\StartupFolder: => "Froggy.lnk"
HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\StartupApproved\Run: => "Facebook Update"
HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\StartupApproved\Run: => "Google Update"
HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\StartupApproved\Run: => "Advanced SystemCare 8"
HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\StartupApproved\Run: => "Zoner Photo Studio Autoupdate"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [UDP Query User{5496C414-D6BB-4412-84C3-B20C9A2CFA9C}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{2DB30CFC-6BFF-40EC-90E0-96753B5BF27C}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{269E2C29-7595-4E4B-8EB5-3BCE90E17770}] => (Allow) C:\Users\Danuška\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{989426C2-A5E8-4E0A-85AA-447A5AEE9112}] => (Allow) C:\Users\Danuška\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [UDP Query User{B997B713-80D6-48B9-A9AF-F386E38C16BB}C:\users\danuška\appdata\local\antikvirtualstb\antikvirtualstb.exe] => (Allow) C:\users\danuška\appdata\local\antikvirtualstb\antikvirtualstb.exe
FirewallRules: [TCP Query User{4C29BF56-528B-45D6-907E-03FA62B3CD44}C:\users\danuška\appdata\local\antikvirtualstb\antikvirtualstb.exe] => (Allow) C:\users\danuška\appdata\local\antikvirtualstb\antikvirtualstb.exe
FirewallRules: [{80762FA4-6ACB-40BD-BEBD-E83595E5FFD3}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\virtualdrive.exe
FirewallRules: [{4A16752D-6364-40F1-BD6A-1EB16B33303F}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\virtualdrive.exe
FirewallRules: [{91E9D0B9-8DA9-41AF-8201-E8D571B6A9E4}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\Sdd.exe
FirewallRules: [{A861F5F7-A4EB-441F-8F2C-C3B56626C5A7}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\Sdd.exe
FirewallRules: [{F9B0A7EA-6DDB-423D-B25D-19F548716A93}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\ccd.exe
FirewallRules: [{A60EDE6C-90A6-435D-8C74-8D9D2A11EE1D}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\ccd.exe
FirewallRules: [{4D35E85F-1DAD-4C1A-9122-12AD5E020F8F}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe
FirewallRules: [{B70EC792-D4BF-406B-94BC-CA7BFE7DA0ED}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe
FirewallRules: [{F5741CE7-E269-41A5-832E-F0AC10BD6C77}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe
FirewallRules: [{7C5C7B14-DCD5-4A00-90BB-15A1FBD486AD}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe
FirewallRules: [{FD0EE294-18A8-441F-A470-3998B9C2E03C}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK21\Video\VideoPlayer.exe
FirewallRules: [{FFFC8028-F335-4F90-B8A1-39999EC41A58}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe
FirewallRules: [{6AD34461-0E8D-464A-853B-6597BE10DC4D}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe
FirewallRules: [{ACC38829-C778-4C4B-AAA0-EAB87098BAF4}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe
FirewallRules: [{047CE6E2-C16D-4D8B-B1C7-02A2240EC41E}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe
FirewallRules: [{F88660B3-7FA5-40CE-9741-B6F80DE4EEBF}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
FirewallRules: [{1047C12F-3B36-47EE-A61A-176AAC71075E}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
FirewallRules: [{F93865B9-097B-46EF-91ED-687F24199164}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe
FirewallRules: [{60A91E28-86FF-410F-A0E4-51D279850EB4}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe
FirewallRules: [{FE30E957-8AF0-4A69-B4FA-DC57FE7A6437}] => (Allow) C:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe
FirewallRules: [{066F8E90-203A-4EC5-ACC4-79A20B55473F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E96EAA28-7A1E-4133-97D5-52EE337F89C4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{FFC06BF4-1F3D-4D9A-8037-D8E4F99D5998}] => (Allow) C:\Program Files\Zoner\Photo Studio 17\Program32\MediaServer.exe
FirewallRules: [{AFEE38BE-24E8-4286-BA1E-D505666EF0AC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C0905494-C856-4136-9C44-09BDAF03DDEC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{3B7C3B55-3AF1-4AD9-8AFC-1CEA1EF653C8}C:\program files (x86)\strongdc++\strongdc.exe] => (Allow) C:\program files (x86)\strongdc++\strongdc.exe
FirewallRules: [UDP Query User{7DE202DF-20CE-43C4-A889-BA1AD0E14BB3}C:\program files (x86)\strongdc++\strongdc.exe] => (Allow) C:\program files (x86)\strongdc++\strongdc.exe

==================== Restore Points =========================

14-02-2016 19:05:17 Scheduled Checkpoint
22-02-2016 18:03:23 Scheduled Checkpoint
29-02-2016 18:24:50 Scheduled Checkpoint
04-03-2016 07:43:59 Windows Update

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/04/2016 08:28:36 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (03/04/2016 08:28:36 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (03/04/2016 07:40:15 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: GWXUX.exe, verzia: 6.3.9600.18064, časová značka: 0x56042d8f
Názov chybujúceho modulu: ntdll.dll, verzia: 6.3.9600.18146, časová značka: 0x5650b9bb
Kód výnimky: 0xc0000005
Odstup chyby: 0x000000000003dcfe
Identifikácia chybujúceho procesu: 0x10a0
Čas spustenia chybujúcej aplikácie: 0xGWXUX.exe0
Cesta chybujúcej aplikácie: GWXUX.exe1
Cesta chybujúceho modulu: GWXUX.exe2
Identifikácia hlásenia: GWXUX.exe3
Celé meno chybujúceho balíka: GWXUX.exe4
Identifikácia chybujúcej aplikácie vzhľadom na balík: GWXUX.exe5

Error: (03/04/2016 06:24:13 AM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT AUTHORITY)
Description: There was an error with the Windows Location Provider database

Error: (02/28/2016 09:11:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (02/28/2016 09:11:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (02/26/2016 09:34:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: opera.exe, verzia: 35.0.2066.82, časová značka: 0x56c7c5db
Názov chybujúceho modulu: ntdll.dll, verzia: 6.3.9600.18146, časová značka: 0x5650afd4
Kód výnimky: 0xc0000018
Odstup chyby: 0x0009d572
Identifikácia chybujúceho procesu: 0xc48
Čas spustenia chybujúcej aplikácie: 0xopera.exe0
Cesta chybujúcej aplikácie: opera.exe1
Cesta chybujúceho modulu: opera.exe2
Identifikácia hlásenia: opera.exe3
Celé meno chybujúceho balíka: opera.exe4
Identifikácia chybujúcej aplikácie vzhľadom na balík: opera.exe5

Error: (02/25/2016 06:31:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: opera.exe, verzia: 35.0.2066.68, časová značka: 0x56be8a55
Názov chybujúceho modulu: ntdll.dll, verzia: 6.3.9600.18146, časová značka: 0x5650afd4
Kód výnimky: 0xc0000018
Odstup chyby: 0x0009d572
Identifikácia chybujúceho procesu: 0x6dc
Čas spustenia chybujúcej aplikácie: 0xopera.exe0
Cesta chybujúcej aplikácie: opera.exe1
Cesta chybujúceho modulu: opera.exe2
Identifikácia hlásenia: opera.exe3
Celé meno chybujúceho balíka: opera.exe4
Identifikácia chybujúcej aplikácie vzhľadom na balík: opera.exe5

Error: (02/25/2016 06:06:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: GWXUX.exe, verzia: 6.3.9600.18064, časová značka: 0x56042d8f
Názov chybujúceho modulu: ntdll.dll, verzia: 6.3.9600.18146, časová značka: 0x5650b9bb
Kód výnimky: 0xc0000005
Odstup chyby: 0x000000000003dcfe
Identifikácia chybujúceho procesu: 0x100c
Čas spustenia chybujúcej aplikácie: 0xGWXUX.exe0
Cesta chybujúcej aplikácie: GWXUX.exe1
Cesta chybujúceho modulu: GWXUX.exe2
Identifikácia hlásenia: GWXUX.exe3
Celé meno chybujúceho balíka: GWXUX.exe4
Identifikácia chybujúcej aplikácie vzhľadom na balík: GWXUX.exe5

Error: (02/24/2016 05:57:11 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.


System errors:
=============
Error: (03/04/2016 09:33:26 AM) (Source: DCOM) (EventID: 10010) (User: Danka)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (03/04/2016 09:33:07 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: NT AUTHORITY)
Description: 0x8000002a42\SystemRoot\System32\Config\RegBack\SYSTEM

Error: (03/04/2016 08:26:07 AM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (03/04/2016 08:26:06 AM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (03/04/2016 08:24:29 AM) (Source: Microsoft-Windows-Eventlog) (EventID: 30) (User: NT AUTHORITY)
Description: The event logging service encountered an error (5) while enabling publisher {0BF2FB94-7B60-4B4D-9766-E82F658DF540} to channel Microsoft-Windows-Kernel-ShimEngine/Operational. This does not affect channel operation, but does affect the ability of the publisher to raise events to the channel. One common reason for this error is that the Provider is using ETW Provider Security and has not granted enable permissions to the Event Log service identity.

Error: (03/04/2016 08:24:23 AM) (Source: Microsoft-Windows-Eventlog) (EventID: 30) (User: NT AUTHORITY)
Description: The event logging service encountered an error (5) while enabling publisher {0BF2FB94-7B60-4B4D-9766-E82F658DF540} to channel Microsoft-Windows-Kernel-ShimEngine/Operational. This does not affect channel operation, but does affect the ability of the publisher to raise events to the channel. One common reason for this error is that the Provider is using ETW Provider Security and has not granted enable permissions to the Event Log service identity.

Error: (03/04/2016 08:24:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby VBoxAsw Support Driver zlyhalo kvôli nasledujúcej chybe:
%%3

Error: (03/04/2016 08:23:46 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby avast! Firewall zlyhalo kvôli nasledujúcej chybe:
%%1053

Error: (03/04/2016 08:23:46 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Počas čakania na pripojenie služby avast! Firewall bol dosiahnutý časový limit (30000 ms).

Error: (03/04/2016 07:29:51 AM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422


CodeIntegrity:
===================================
Date: 2015-03-24 19:37:10.877
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3-3217U CPU @ 1.80GHz
Percentage of memory in use: 51%
Total physical RAM: 3911.27 MB
Available physical RAM: 1908.3 MB
Total Virtual: 7879.27 MB
Available Virtual: 5377.32 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:446.41 GB) (Free:347.41 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 2EE56888)

Partition: GPT.

========================================================
Disk: 1 (Size: 22.4 GB) (Disk ID: 5BB5FA99)

Partition: GPT.

==================== End of Addition.txt ============================

Re: nejde spustit word

Napsal: 04 bře 2016 13:14
od altrok
:arrow: Po restartu dejte vedet, jak se MS Word chova.


:arrow: Velikost plochy by nemela presahovat 200 MB. Zpomaluje se pak start i samotny chod celeho PC. Doporucuji hlavne velke soubory a slozky premistit napr. do Dokumentu a na plochu umistit pouze zastupce.


  • Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
  • ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
  • znovu spustte FRST a kliknete na Fix
  • po restartu bude na plose ulozen fixlog, jehoz obsah vlozte do pristi odpovedi

    Kód: Vybrat vše

    Start
CreateRestorePoint:
CloseProcesses:
File: C:\users\danuška\appdata\local\antikvirtualstb\antikvirtualstb.exe
Folder: C:\Users\Danuška\AppData\Local\CrashDumps
HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [563416 2015-07-12] (ZONER software)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
IFEO\acpanel_win.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\devicefastlaneui.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\epowerbutton.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\epowerui.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\excel.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\FIRSTRUN.EXE: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\groove.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\infopath.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\launcher.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msaccess.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msoxmled.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\mspub.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\mstore.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\offdiag.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\ois.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\onenote.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\outlook.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\skype.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\usecuappui.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\winword.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\zps.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3670456473-3412912233-516016340-1001 -> {4F250161-D7B2-461D-9474-C8D3CC814F09} URL = 
FF Plugin HKU\S-1-5-21-3670456473-3412912233-516016340-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Danuška\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [No File]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]
S3 BlueletAudio; \SystemRoot\system32\DRIVERS\blueletaudio.sys [X]
S3 BlueletSCOAudio; \SystemRoot\system32\DRIVERS\BlueletSCOAudio.sys [X]
S3 BT; \SystemRoot\system32\DRIVERS\btnetdrv.sys [X]
S0 BTHidEnum; System32\Drivers\vbtenum.sys [X]
S0 BTHidMgr; System32\Drivers\BTHidMgr.sys [X]
S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
S3 VComm; \SystemRoot\system32\DRIVERS\VComm.sys [X]
S3 VcommMgr; \SystemRoot\System32\Drivers\VcommMgr.sys [X]
2016-03-04 09:21 - 2016-03-04 09:21 - 00388608 _____ (Trend Micro Inc.) C:\Users\Danuška\Desktop\HijackThis.exe
2016-03-04 09:06 - 2016-03-04 09:08 - 00000000 ____D C:\rsit
2016-03-04 09:06 - 2016-03-04 09:08 - 00000000 ____D C:\Program Files\trend micro
2016-03-04 09:06 - 2016-03-04 09:06 - 01222144 _____ C:\Users\Danuška\Desktop\RSITx64.exe
2016-03-04 07:21 - 2016-03-04 07:21 - 01518592 _____ C:\Users\Danuška\Desktop\adwcleaner_5.037.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001Core.job => C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001UA.job => C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Danuška.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
EmptyTemp:
End

Re: nejde spustit word

Napsal: 04 bře 2016 13:39
od Timur
ms word sa uz tvari normalne :happy:
fixlog:

Fix result of Farbar Recovery Scan Tool (x64) Version:02-03-2016
Ran by Danuška (2016-03-04 13:28:57) Run:1
Running from C:\Users\Danuška\Desktop
Loaded Profiles: Danuška (Available Profiles: Danuška & Guest)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
File: C:\users\danuška\appdata\local\antikvirtualstb\antikvirtualstb.exe
Folder: C:\Users\Danuška\AppData\Local\CrashDumps
HKU\S-1-5-21-3670456473-3412912233-516016340-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [563416 2015-07-12] (ZONER software)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
IFEO\acpanel_win.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\devicefastlaneui.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\epowerbutton.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\epowerui.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\excel.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\FIRSTRUN.EXE: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\groove.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\infopath.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\launcher.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msaccess.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msoxmled.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\mspub.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\mstore.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\offdiag.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\ois.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\onenote.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\outlook.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\skype.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\usecuappui.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\winword.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\zps.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3670456473-3412912233-516016340-1001 -> {4F250161-D7B2-461D-9474-C8D3CC814F09} URL =
FF Plugin HKU\S-1-5-21-3670456473-3412912233-516016340-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Danuška\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [No File]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]
S3 BlueletAudio; \SystemRoot\system32\DRIVERS\blueletaudio.sys [X]
S3 BlueletSCOAudio; \SystemRoot\system32\DRIVERS\BlueletSCOAudio.sys [X]
S3 BT; \SystemRoot\system32\DRIVERS\btnetdrv.sys [X]
S0 BTHidEnum; System32\Drivers\vbtenum.sys [X]
S0 BTHidMgr; System32\Drivers\BTHidMgr.sys [X]
S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
S3 VComm; \SystemRoot\system32\DRIVERS\VComm.sys [X]
S3 VcommMgr; \SystemRoot\System32\Drivers\VcommMgr.sys [X]
2016-03-04 09:21 - 2016-03-04 09:21 - 00388608 _____ (Trend Micro Inc.) C:\Users\Danuška\Desktop\HijackThis.exe
2016-03-04 09:06 - 2016-03-04 09:08 - 00000000 ____D C:\rsit
2016-03-04 09:06 - 2016-03-04 09:08 - 00000000 ____D C:\Program Files\trend micro
2016-03-04 09:06 - 2016-03-04 09:06 - 01222144 _____ C:\Users\Danuška\Desktop\RSITx64.exe
2016-03-04 07:21 - 2016-03-04 07:21 - 01518592 _____ C:\Users\Danuška\Desktop\adwcleaner_5.037.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001Core.job => C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001UA.job => C:\Users\Danuška\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Danuška.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
EmptyTemp:
End
*****************

Restore point was successfully created.
Processes closed successfully.

========================= File: C:\users\danuška\appdata\local\antikvirtualstb\antikvirtualstb.exe ========================

File not signed
MD5: BFE5DCEC7E639B3297CB70D4F4B213F6
Creation and modification date: 2014-05-15 18:31 - 2010-07-07 09:32
Size: 1236480
Attributes: ----A
Company Name:
Internal Name: AntikVirtualSTB.exe
Original Name: AntikVirtualSTB.exe
Product: AntikVirtualSTB
Description: AntikVirtualSTB
File Version: 1.0.0.0
Product Version: 1.0.0.0
Copyright: Copyright © 2009

====== End of File: ======


========================= Folder: C:\Users\Danuška\AppData\Local\CrashDumps ========================

2016-02-25 06:06 - 2016-02-25 06:06 - 1254605 _____ () C:\Users\Danuška\AppData\Local\CrashDumps\GWXUX.exe.4108.dmp
2016-03-04 07:40 - 2016-03-04 07:40 - 1253373 _____ () C:\Users\Danuška\AppData\Local\CrashDumps\GWXUX.exe.4256.dmp
2016-02-13 20:33 - 2016-02-13 20:34 - 1247937 _____ () C:\Users\Danuška\AppData\Local\CrashDumps\GWXUX.exe.5908.dmp
2016-02-14 10:45 - 2016-02-14 10:45 - 9409341 _____ () C:\Users\Danuška\AppData\Local\CrashDumps\KMPlayer.exe.4492.dmp
2016-02-25 06:31 - 2016-02-25 06:31 - 0062714 _____ () C:\Users\Danuška\AppData\Local\CrashDumps\opera.exe.1756.dmp
2016-02-26 21:34 - 2016-02-26 21:34 - 0061778 _____ () C:\Users\Danuška\AppData\Local\CrashDumps\opera.exe.3144.dmp
2016-02-17 18:00 - 2016-02-17 18:00 - 0062338 _____ () C:\Users\Danuška\AppData\Local\CrashDumps\opera.exe.4064.dmp
2016-02-18 20:59 - 2016-02-18 20:59 - 0062126 _____ () C:\Users\Danuška\AppData\Local\CrashDumps\opera.exe.584.dmp
2016-02-15 14:42 - 2016-02-15 14:42 - 13501853 _____ () C:\Users\Danuška\AppData\Local\CrashDumps\vlc.exe.1016.dmp
2016-02-14 10:44 - 2016-02-14 10:44 - 13399239 _____ () C:\Users\Danuška\AppData\Local\CrashDumps\vlc.exe.2644.dmp

====== End of Folder: ======

HKU\S-1-5-21-3670456473-3412912233-516016340-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Autoupdate => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => value removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\acpanel_win.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\devicefastlaneui.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\epowerbutton.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\epowerui.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\excel.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\FIRSTRUN.EXE" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\groove.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\infopath.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\launcher.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\msaccess.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\msoxmled.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\mspub.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\mstore.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\offdiag.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\ois.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\onenote.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\outlook.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\powerpnt.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\skype.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\usecuappui.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\volaro" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\vonteera" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\winword.exe" => key removed successfully
"HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\zps.exe" => key removed successfully
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKU\S-1-5-21-3670456473-3412912233-516016340-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{4F250161-D7B2-461D-9474-C8D3CC814F09}" => key removed successfully
HKCR\CLSID\{4F250161-D7B2-461D-9474-C8D3CC814F09} => key not found.
"HKU\S-1-5-21-3670456473-3412912233-516016340-1001\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin" => key removed successfully
C:\Users\Danuška\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll => not found.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl" => key removed successfully
C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx => moved successfully
BlueletAudio => service removed successfully
BlueletSCOAudio => service removed successfully
BT => service removed successfully
BTHidEnum => service removed successfully
BTHidMgr => service removed successfully
VBoxAswDrv => service could not remove
VComm => service removed successfully
VcommMgr => service removed successfully
"C:\Users\Danuška\Desktop\HijackThis.exe" => not found.
C:\rsit => moved successfully
C:\Program Files\trend micro => moved successfully
C:\Users\Danuška\Desktop\RSITx64.exe => moved successfully
C:\Users\Danuška\Desktop\adwcleaner_5.037.exe => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001Core.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3670456473-3412912233-516016340-1001UA.job => moved successfully
C:\WINDOWS\Tasks\Uninstaller_SkipUac_Danuška.job => moved successfully
EmptyTemp: => 553 MB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 13:30:47 ====

Re: nejde spustit word

Napsal: 04 bře 2016 13:45
od altrok
Dost mozna se Wordu nelibil ten slavny zlepsovak...

Kód: Vybrat vše

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winword.exe]
"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
Takze jeste uklidime.
A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

Re: nejde spustit word

Napsal: 04 bře 2016 13:50
od Timur
vsetko upratané

bolo by lepšie dat preč avg tuneup?

Re: nejde spustit word

Napsal: 04 bře 2016 14:02
od altrok
Ja se mezi jeho priznivce neradim, ale je na kazdem, co si do PC instaluje. Mozna dokaze byt prospesny, ale je dobre, kdyz clovek ma alespon trochu povedomi o tom, co vsechno mu to v PC udela... nejhorsi jsou jednotlacitkove optimizery s napisy typu zrychlete si 50x vas pocitac jedinym kliknutim...

Je to na zvazeni kazdeho :)

Re: nejde spustit word

Napsal: 04 bře 2016 14:16
od Timur
Ďakujem za Váš čas :thumbsup:

Re: nejde spustit word

Napsal: 04 bře 2016 14:18
od altrok
Nemate zac, rad jsem pomohl :worship:


Mejte se krasne a treba zase nekdy :bye:
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz