Dobrý večer,
Prosím o kontrolu.
Předem Děkuji.
# AdwCleaner v5.037 - Logfile created 05/03/2016 at 21:34:45
# Updated 28/02/2016 by Xplode
# Database : 2016-03-02.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x86)
# Username : Monika - MONIKA-PC
# Running from : C:\Users\Monika\Desktop\adwcleaner_5.037.exe
# Option : Scan
# Support : http://toolslib.net/forum
***** [ Services ] *****
Service Found : ggbugreport
Service Found : Winsere
***** [ Folders ] *****
Folder Found : C:\Program Files\SearchesToYesbnd
Folder Found : C:\Program Files\Winsere
Folder Found : C:\Program Files\WinTaske
Folder Found : C:\Users\Monika\AppData\Local\slimware utilities inc
Folder Found : C:\Windows\system32\Tasks\WinTaske
***** [ Files ] *****
***** [ DLL ] *****
***** [ Shortcuts ] *****
***** [ Scheduled tasks ] *****
Task Found : WinTaske
***** [ Registry ] *****
Key Found : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{76C45B18-A29E-43EA-AAF8-AF55C2E1AE17}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{7CD74AFF-3433-4E34-92E2-D98DFDB30754}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{96EF404C-24C7-43D0-9096-4CCC8BB7CCAC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{97720195-206A-42AE-8E65-260B9BA5589F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{986F7A5A-9676-47E1-8642-F41F8C3FCF82}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B18788A4-92BD-440E-A4D1-380C36531119}
Key Found : HKCU\Software\SlimWare Utilities Inc
Key Found : HKLM\SOFTWARE\SLIMWARE UTILITIES, INC.
Key Found : HKLM\SOFTWARE\SlimWare Utilities Inc
Key Found : HKLM\SOFTWARE\yessearchesSoftware
***** [ Web browsers ] *****
*************************
C:\AdwCleaner\AdwCleaner[S1].txt - [1711 bytes] - [05/03/2016 21:34:45]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1784 bytes] ##########
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prevence
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Prevence
Krasny den Vam preju 
Pozorujete na PC nejake konkretni problemy, ci jde pouze o preventivku?
AdwCleaner detekuje slimware utilities inc, ktery jste si do PC mohl nainstalovat nevedomky s Javou (viz stejne casy vytvoreni slozek)
V logu o 1800 radkach mi neco mohlo uniknout (nebo v logu ani neni), takze Vas poprosim o sken z MBAMU - nainstalujte MBAM a udelejte vlastni sken vsech disku - http://forum.viry.cz/viewtopic.php?f=29&t=144868 (pro zobrazeni obrazku je nutne pouzit jiny prohlizec nez Mozilla Firefox - na odstraneni problemu se pracuje)
Pozorujete na PC nejake konkretni problemy, ci jde pouze o preventivku? AdwCleaner detekuje slimware utilities inc, ktery jste si do PC mohl nainstalovat nevedomky s Javou (viz stejne casy vytvoreni slozek) pokud o zadnem produktu od slimware utilities inc nevite, doporucuji jej AdwCleanerem smazat.2016-03-03 22:41:21 ----D---- C:\Program Files\Common Files\Java
2016-03-03 22:41:01 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2016-03-03 22:40:28 ----D---- C:\ProgramData\SlimWare Utilities, Inc
2016-03-03 22:40:28 ----D---- C:\Program Files\Java
V logu o 1800 radkach mi neco mohlo uniknout (nebo v logu ani neni), takze Vas poprosim o sken z MBAMU - nainstalujte MBAM a udelejte vlastni sken vsech disku - http://forum.viry.cz/viewtopic.php?f=29&t=144868 (pro zobrazeni obrazku je nutne pouzit jiny prohlizec nez Mozilla Firefox - na odstraneni problemu se pracuje)
- Upozorneni: tento sken zabere od 30 minut po nekolik hodin
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Re: Prevence
Přeinstaloval jsem win, používal jsem slimdrivers k hledání jednoho ovladače ale před skenem AdwCleaner byl odinstalován ccleanerem. Je to z preventivních důvodů kvůli disku D ten zustal tak jak byl.
Provedené akce: jen kontrola mbam
Malwarebytes Anti-Malware
www.malwarebytes.org
Datum skenování: 7.3.2016
Čas skenování: 17:07
Protokol: Malware log.txt
Správce: Ano
Verze: 2.2.0.1024
Databáze malwaru: v2016.03.07.05
Databáze rootkitů: v2016.02.27.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto
OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: Monika
Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 461639
Uplynulý čas: 1 hod, 35 min, 31 sek
Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto
Procesy: 0
(Nenalezeny žádné škodlivé položky)
Moduly: 0
(Nenalezeny žádné škodlivé položky)
Klíče registru: 2
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, , [03ee830185142412be2aaa638b78768a],
PUP.Optional.YesSearches, HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, , [ca273c48e7b22c0a80243343a064e51b],
Hodnoty registru: 8
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, http://www.yessearches.com/?ts=AHEpBn0o ... =ffsengext, , [03ee830185142412be2aaa638b78768a]
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, http://www.yessearches.com/?ts=AHEpBn0o ... =ffsengext, , [866b285c3f5aa4921ccc36d725dee818]
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, http://www.yessearches.com/chrome.php?u ... =ffsengext, , [06eb97ed8514a3937276c24b0ff4e31d]
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, http://www.yessearches.com/chrome.php?u ... toolbar&q=, , [727f394b0d8c77bf13d59e6f996a768a]
PUP.Optional.YesSearches, HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, http://www.yessearches.com/?ts=AHEpBn0o ... =ffsengext, , [ca273c48e7b22c0a80243343a064e51b]
PUP.Optional.YesSearches, HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, http://www.yessearches.com/?ts=AHEpBn0o ... =ffsengext, , [c22fbaca623736002e7686f0ee1642be]
PUP.Optional.YesSearches, HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, http://www.yessearches.com/chrome.php?u ... =ffsengext, , [767bd2b20c8d6cca3a6a6a0c0400d12f]
PUP.Optional.YesSearches, HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, http://www.yessearches.com/chrome.php?u ... toolbar&q=, , [866b41435e3b1e18bfe50175887c7c84]
Data registru: 0
(Nenalezeny žádné škodlivé položky)
Složky: 0
(Nenalezeny žádné škodlivé položky)
Soubory: 5
PUP.Optional.YesSearches, C:\AdwCleaner\Quarantine\C\Program Files\SearchesToYesbnd\bugreport.exe.vir, , [866b424240596ec84780fe04877be41c],
PUP.Optional.YesSearches, C:\AdwCleaner\Quarantine\C\Program Files\Winsere\Winsere\Winsere.exe.vir, , [13deafd5a9f073c3968217dae81952ae],
PUP.Optional.YesSearches, C:\AdwCleaner\Quarantine\C\Program Files\WinTaske\WinTaske\WinTaske.exe.vir, , [f100baca7128eb4baa6ec62b34cd26da],
PUP.Optional.AdOffer, C:\Users\Monika\AppData\Local\Temp\bitool.dll, , [34bd0282247551e55c66f35f08fa6c94],
PUP.Optional.Somoto, C:\Users\Monika\AppData\Local\Temp\nskFD46.tmp, , [5e93c9bbbedbdd5995aebb379f627b85],
Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)
(end)
Provedené akce: jen kontrola mbam
Malwarebytes Anti-Malware
www.malwarebytes.org
Datum skenování: 7.3.2016
Čas skenování: 17:07
Protokol: Malware log.txt
Správce: Ano
Verze: 2.2.0.1024
Databáze malwaru: v2016.03.07.05
Databáze rootkitů: v2016.02.27.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto
OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: Monika
Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 461639
Uplynulý čas: 1 hod, 35 min, 31 sek
Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto
Procesy: 0
(Nenalezeny žádné škodlivé položky)
Moduly: 0
(Nenalezeny žádné škodlivé položky)
Klíče registru: 2
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, , [03ee830185142412be2aaa638b78768a],
PUP.Optional.YesSearches, HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, , [ca273c48e7b22c0a80243343a064e51b],
Hodnoty registru: 8
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, http://www.yessearches.com/?ts=AHEpBn0o ... =ffsengext, , [03ee830185142412be2aaa638b78768a]
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, http://www.yessearches.com/?ts=AHEpBn0o ... =ffsengext, , [866b285c3f5aa4921ccc36d725dee818]
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, http://www.yessearches.com/chrome.php?u ... =ffsengext, , [06eb97ed8514a3937276c24b0ff4e31d]
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, http://www.yessearches.com/chrome.php?u ... toolbar&q=, , [727f394b0d8c77bf13d59e6f996a768a]
PUP.Optional.YesSearches, HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, http://www.yessearches.com/?ts=AHEpBn0o ... =ffsengext, , [ca273c48e7b22c0a80243343a064e51b]
PUP.Optional.YesSearches, HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, http://www.yessearches.com/?ts=AHEpBn0o ... =ffsengext, , [c22fbaca623736002e7686f0ee1642be]
PUP.Optional.YesSearches, HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, http://www.yessearches.com/chrome.php?u ... =ffsengext, , [767bd2b20c8d6cca3a6a6a0c0400d12f]
PUP.Optional.YesSearches, HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, http://www.yessearches.com/chrome.php?u ... toolbar&q=, , [866b41435e3b1e18bfe50175887c7c84]
Data registru: 0
(Nenalezeny žádné škodlivé položky)
Složky: 0
(Nenalezeny žádné škodlivé položky)
Soubory: 5
PUP.Optional.YesSearches, C:\AdwCleaner\Quarantine\C\Program Files\SearchesToYesbnd\bugreport.exe.vir, , [866b424240596ec84780fe04877be41c],
PUP.Optional.YesSearches, C:\AdwCleaner\Quarantine\C\Program Files\Winsere\Winsere\Winsere.exe.vir, , [13deafd5a9f073c3968217dae81952ae],
PUP.Optional.YesSearches, C:\AdwCleaner\Quarantine\C\Program Files\WinTaske\WinTaske\WinTaske.exe.vir, , [f100baca7128eb4baa6ec62b34cd26da],
PUP.Optional.AdOffer, C:\Users\Monika\AppData\Local\Temp\bitool.dll, , [34bd0282247551e55c66f35f08fa6c94],
PUP.Optional.Somoto, C:\Users\Monika\AppData\Local\Temp\nskFD46.tmp, , [5e93c9bbbedbdd5995aebb379f627b85],
Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)
(end)
Re: Prevence
Pokud jste MBAM jeste neukoncil, vsechny nalezy smazte/presunte do karanteny. Dejte logy FRST.txt a Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101Pozn. pri druhem a dalsim spusteni FRST je pro vytvoreni logu Addition.txt nutne tuto volbu explicitne zatrhnout pred zacatkem skenu.
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Re: Prevence
Poprosim jeste o obsah logu Addition.txtPokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Re: Prevence
Additional scan result of Farbar Recovery Scan Tool (x86) Version:05-03-2016 01
Ran by Monika (2016-03-07 20:00:16)
Running from C:\Users\Monika\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) (2016-03-02 22:47:17)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2394200607-1540755856-2256836862-500 - Administrator - Disabled)
Guest (S-1-5-21-2394200607-1540755856-2256836862-501 - Limited - Disabled)
Monika (S-1-5-21-2394200607-1540755856-2256836862-1000 - Administrator - Enabled) => C:\Users\Monika
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (Version: - Microsoft) Hidden
Adobe Acrobat Reader DC - Czech (HKLM\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 15.010.20059 - Adobe Systems Incorporated)
Adobe Flash Player 20 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Aktualizace NVIDIA 17.12.8 (Version: 17.12.8 - NVIDIA Corporation) Hidden
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Atheros Driver Installation Program (HKLM\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.0 - Atheros)
Avast Free Antivirus (HKLM\...\Avast) (Version: 11.1.2253 - AVAST Software)
AVerMedia TV Tuner Card 1.0.0.4 (HKLM\...\AVerMedia TV Tuner Card) (Version: 1.0.0.4 - AVerMedia TECHNOLOGIES, Inc.)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.350.6 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.15 - Piriform)
Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.3.0.0152 - Disc Soft Ltd)
Defraggler (HKLM\...\Defraggler) (Version: 2.20 - Piriform)
DVD Menu Pack for HP MediaSmart Video (HKLM\...\InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}) (Version: 4.1.4121 - Hewlett-Packard)
DVD Menu Pack for HP MediaSmart Video (Version: 4.1.4121 - Hewlett-Packard) Hidden
ENE CIR Receiver Driver (HKLM\...\284D9B4A58796481EC5A61D01DCC5E654761629C) (Version: 2.7.4.0 - ENE)
ESU for Microsoft Windows 7 (HKLM\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Google Chrome (HKLM\...\Google Chrome) (Version: 49.0.2623.75 - Google Inc.)
Google Update Helper (Version: 1.3.29.5 - Google Inc.) Hidden
HP 3D DriveGuard (HKLM\...\{33DBA3CA-4E9D-4087-9911-359E45263D92}) (Version: 4.0.3.1 - Hewlett-Packard)
HP Integrated Module with Bluetooth wireless technology (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.500 - Broadcom Corporation)
HP MediaSmart DVD (HKLM\...\InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}) (Version: 3.0.3309 - Hewlett-Packard)
HP MediaSmart Live TV (HKLM\...\InstallShield_{67626E09-5366-4480-8F1E-93FADF50CA15}) (Version: 3.1 - CyberLink Corp.)
HP MediaSmart Video (HKLM\...\InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}) (Version: 4.1.4322 - Hewlett-Packard)
HP MediaSmart Webcam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3123 - Hewlett-Packard)
HP Quick Launch Buttons (HKLM\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.50.3.1 - Hewlett-Packard)
HP Support Assistant (HKLM\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.1.40.3 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM\...\{579A990C-3855-4838-AF23-354CE2264BC0}) (Version: 12.0.30.473 - HP)
HP Wireless Assistant (HKLM\...\{1061DF04-CF33-40B0-8360-D07C9BBEB122}) (Version: 3.50.10.1 - Hewlett-Packard)
IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6466.0 - IDT)
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.7.0.1013 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation)
Java 8 Update 73 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)
JMicron 1394 Filter Driver (HKLM\...\{13C96625-28E4-4c58-ADE0-CDAFC64752EB}) (Version: 1.00.25.03 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.72.4 - JMicron Technology Corp.)
Malwarebytes Anti-Malware verze 2.2.0.1024 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4.6.1 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 341.92 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.92 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
Ovládací panel NVIDIA 341.92 (Version: 341.92 - NVIDIA Corporation) Hidden
QLBCASL (Version: 6.40.17.2 - Hewlett-Packard) Hidden
Realtek Ethernet Controller Driver For Windows Vista and Later (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0011 - Realtek)
Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30104 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden
Skype™ 7.3 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
SP45629 - Intel Chipset Installation Utility (HKLM\...\{7AB416C2-4AEC-4967-A873-E2A3B404E6EC}) (Version: 1.0.0 - Hewlett-Packard International Pte. Ltd.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Validity Sensors DDK (HKLM\...\{62A20ECA-920E-4052-BF77-88C78DD20FAA}) (Version: 3.1.366 - Validity Sensors, Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.2 - VideoLAN)
Windows Driver Package - Broadcom Bluetooth (06/15/2009 6.2.0.9000) (HKLM\...\B7541EC5F72AA713F557569278EB6273725F5607) (Version: 06/15/2009 6.2.0.9000 - Broadcom)
Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (HKLM\...\A6A8668C0A13640CA28FE2A7D9654BE4AE478B13) (Version: 07/30/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
WinRAR 5.31 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {02499E0B-32F6-4956-A6FB-8389CD723306} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-03-03] (AVAST Software)
Task: {0D31BC6B-91D9-4C63-A535-7F5D3477EE4F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {127E0C92-8D08-454E-8E20-8BAAB9A05BD7} - System32\Tasks\HPCeeScheduleForMonika => C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
Task: {35A0D36E-D761-4CAF-B314-F4C18B007A1B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-03-03] (Google Inc.)
Task: {4502C3FE-A825-4D56-8DF8-D9B05D1FC783} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-01-20] (Hewlett-Packard)
Task: {4F16B190-BE2E-4600-9B7F-A378C8C4F37F} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-03-05] (AVAST Software)
Task: {50F88828-FBB5-4CDD-9590-11C267E612E0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [2015-09-28] (Hewlett-Packard Company)
Task: {53778D16-825C-4AC6-9DCB-A40B17F7B170} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-02-18] (Hewlett-Packard)
Task: {6690D58A-6DFE-4EDE-BA4F-6394BFCE833E} - System32\Tasks\{4FD43F37-8806-4510-A515-444145BDEC9F} => pcalua.exe -a C:\Users\Monika\Downloads\sp46507.exe -d C:\Users\Monika\Downloads
Task: {77F63AE2-4C27-4B09-8C39-E9375439DF05} - System32\Tasks\CapSvcInst => C:\Program Files\Hewlett-Packard\Media\Live TV\Kernel\TV\CapSvcInst.exe [2010-06-03] (CL)
Task: {7AD3DDE9-857C-498F-BFC6-5986047B1E52} - System32\Tasks\DVDAgent => c:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe [2009-09-09] (CyberLink Corp.)
Task: {873E141B-6D61-4907-A7AC-D38F55AD7B22} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [2015-09-28] (Hewlett-Packard Company)
Task: {90C37FE4-F675-4A47-ADF5-D169432A8BDC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-02-17] (Hewlett-Packard)
Task: {A2305E89-F9CC-4A8B-8035-98B8500B5608} - System32\Tasks\CapUninst => C:\Program Files\Hewlett-Packard\Media\Live TV\Kernel\TV\CapUninst.exe [2010-06-03] (CL)
Task: {A850DE98-FB0C-4009-9FEE-F72B02D3E7AE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-03-03] (Google Inc.)
Task: {B7B7CC0E-3805-4B34-9BDF-D46B62CBA1F1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-03] (Adobe Systems Incorporated)
Task: {C9C60EFE-1E64-46A7-9754-77C69D53EF0A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-02-12] (Piriform Ltd)
Task: {CBF09E4D-A225-460C-9AB9-2C6515AE0601} - System32\Tasks\MirageAgent => C:\Program Files\Hewlett-Packard\Media\Webcam\YCMMirage.exe [2010-07-14] (CyberLink)
Task: {CD0C06FD-D463-4601-A9EF-7558B1B87F11} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-02-17] (Hewlett-Packard)
Task: {D536D120-1DBC-410C-8C2F-DEDA7D64D9AD} - System32\Tasks\TVAgent => C:\Program Files\Hewlett-Packard\Media\Live TV\TVAgent.exe [2010-06-03] (CyberLink Corp.)
Task: {D6F5251B-FCA8-4573-A874-F59FC715C2B3} - System32\Tasks\CapSchedInst => C:\Program Files\Hewlett-Packard\Media\Live TV\Kernel\TV\CapSchedInst.exe [2010-06-03] (CL)
Task: {F5AEB5DC-4C3B-47C5-A3D8-8979B1C6EED8} - System32\Tasks\{2D3861D4-5208-4444-8454-ADF0B4FF5E01} => pcalua.exe -a "C:\Users\Monika\Desktop\Motorola SoftStylus - SP46759.exe" -d C:\Users\Monika\Desktop
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForMonika.job => C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2016-03-03 09:41 - 2015-10-13 17:47 - 00113840 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2016-03-03 22:36 - 2016-03-03 22:36 - 00113496 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2016-03-03 22:36 - 2016-03-03 22:36 - 00133768 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-03-07 16:50 - 2016-03-07 16:50 - 02838016 _____ () C:\Program Files\AVAST Software\Avast\defs\16030700\algo.dll
2016-03-03 22:36 - 2016-03-03 22:36 - 00480760 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-03-05 17:25 - 2016-03-05 17:25 - 00016384 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\d3f954fd5b56488cf850ad0b97bbee61\PSIClient.ni.dll
2016-03-03 22:36 - 2016-03-03 22:36 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2009-07-01 15:44 - 2009-07-01 15:44 - 00632888 _____ () C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe
2016-03-03 00:15 - 2016-03-02 05:47 - 01675928 _____ () C:\Program Files\Google\Chrome\Application\49.0.2623.75\libglesv2.dll
2016-03-03 00:15 - 2016-03-02 05:47 - 00086168 _____ () C:\Program Files\Google\Chrome\Application\49.0.2623.75\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\Windows\pss\Bluetooth.lnk.CommonStartup
MSCONFIG\startupreg: DAEMON Tools Lite Automount => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: WirelessAssistant => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{E5BDC564-E36A-40B3-BA0F-5DC6CC4BAAE9}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{1AEFBDE4-6C87-4CB8-8951-EBDA36EFC927}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{1CE15464-57AD-4763-99E0-0E9B6B2A0882}] => (Allow) C:\Program Files\Hewlett-Packard\MediaSmart\Video\HPMediaSmartVideo.exe
FirewallRules: [{BAEAC79F-57FA-4FFF-BE83-893E95C64336}] => (Allow) c:\Program Files\Hewlett-Packard\Media\DVD\HPDVDSmart.exe
FirewallRules: [{12EF7729-A90B-4599-BEAC-CACF8D9A16D9}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{3B321DFA-B349-49A1-9479-7BE7461427D3}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{04D407EC-C7BD-4737-986B-4E7C534D9499}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{E8D22F69-5DF8-4C4E-990C-D51AD3AD69D2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{7377102C-C142-48EE-84DC-183182A96C96}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{750E2FE2-C97E-4A7E-B8B8-04686F305180}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{D93D0C2A-FB8E-4F91-9096-6F4FEE5C6DE8}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
==================== Restore Points =========================
06-03-2016 06:27:51 Naplánovaný kontrolní bod
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (03/07/2016 07:51:48 PM) (Source: MsiInstaller) (EventID: 11706) (User: Monika-PC)
Description: Product: HP Support Assistant -- Error 1706.No valid source could be found for product HP Support Assistant. The Windows Installer cannot continue.
Error: (03/06/2016 06:27:52 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parametr není správný.
.
Error: (03/06/2016 06:27:51 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parametr není správný.
.
Error: (03/05/2016 10:31:21 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]
Error: (03/05/2016 10:31:21 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]
Error: (03/05/2016 10:31:21 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]
Error: (03/05/2016 09:31:03 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parametr není správný.
.
Error: (03/05/2016 09:31:03 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parametr není správný.
.
Error: (03/05/2016 05:19:38 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parametr není správný.
.
Error: (03/05/2016 05:19:38 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parametr není správný.
.
System errors:
=============
Error: (03/06/2016 05:21:44 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Stínové kopie svazku C: byly přerušeny, protože z důvodu limitu stanoveného uživatelem se nepodařilo zvětšit úložiště stínové kopie.
Error: (03/05/2016 09:36:20 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Windows Media Player Network Sharing neuspěla při spuštění v důsledku následující chyby:
%%1069
Error: (03/05/2016 09:36:20 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Služba WMPNetworkSvc se nemohla přihlásit jako NT AUTHORITY\NetworkService s aktuálně konfigurovaným heslem z důvodu následující chyby:
%%50
Chcete-li zajistit správnou konfiguraci služby, použijte modul snap-in Služby konzoly Microsoft Management Console (MMC).
Error: (03/05/2016 09:36:19 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Správce služeb se pokusil o opravnou akci (Restartovat službu) po nečekaném ukončení služby Windows Search, ale tato akce selhala kvůli následující chybě:
%%1056
Error: (03/05/2016 09:36:17 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.
Cesta k modulu: C:\Windows\System32\bcmihvsrv.dll
Error: (03/05/2016 09:36:17 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.
Cesta k modulu: C:\Windows\System32\bcmihvsrv.dll
Error: (03/05/2016 09:36:14 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.
Cesta k modulu: C:\Windows\System32\bcmihvsrv.dll
Error: (03/05/2016 09:35:50 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Instalační služba systému Windows byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.
Error: (03/05/2016 09:35:50 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Com4QLBEx byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (03/05/2016 09:35:50 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Úložná technologie Intel® Rapid byla neočekávaně ukončena. Tento stav nastal již 1krát.
Ran by Monika (2016-03-07 20:00:16)
Running from C:\Users\Monika\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) (2016-03-02 22:47:17)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2394200607-1540755856-2256836862-500 - Administrator - Disabled)
Guest (S-1-5-21-2394200607-1540755856-2256836862-501 - Limited - Disabled)
Monika (S-1-5-21-2394200607-1540755856-2256836862-1000 - Administrator - Enabled) => C:\Users\Monika
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (Version: - Microsoft) Hidden
Adobe Acrobat Reader DC - Czech (HKLM\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 15.010.20059 - Adobe Systems Incorporated)
Adobe Flash Player 20 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Aktualizace NVIDIA 17.12.8 (Version: 17.12.8 - NVIDIA Corporation) Hidden
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Atheros Driver Installation Program (HKLM\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.0 - Atheros)
Avast Free Antivirus (HKLM\...\Avast) (Version: 11.1.2253 - AVAST Software)
AVerMedia TV Tuner Card 1.0.0.4 (HKLM\...\AVerMedia TV Tuner Card) (Version: 1.0.0.4 - AVerMedia TECHNOLOGIES, Inc.)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.350.6 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.15 - Piriform)
Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.3.0.0152 - Disc Soft Ltd)
Defraggler (HKLM\...\Defraggler) (Version: 2.20 - Piriform)
DVD Menu Pack for HP MediaSmart Video (HKLM\...\InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}) (Version: 4.1.4121 - Hewlett-Packard)
DVD Menu Pack for HP MediaSmart Video (Version: 4.1.4121 - Hewlett-Packard) Hidden
ENE CIR Receiver Driver (HKLM\...\284D9B4A58796481EC5A61D01DCC5E654761629C) (Version: 2.7.4.0 - ENE)
ESU for Microsoft Windows 7 (HKLM\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Google Chrome (HKLM\...\Google Chrome) (Version: 49.0.2623.75 - Google Inc.)
Google Update Helper (Version: 1.3.29.5 - Google Inc.) Hidden
HP 3D DriveGuard (HKLM\...\{33DBA3CA-4E9D-4087-9911-359E45263D92}) (Version: 4.0.3.1 - Hewlett-Packard)
HP Integrated Module with Bluetooth wireless technology (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.500 - Broadcom Corporation)
HP MediaSmart DVD (HKLM\...\InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}) (Version: 3.0.3309 - Hewlett-Packard)
HP MediaSmart Live TV (HKLM\...\InstallShield_{67626E09-5366-4480-8F1E-93FADF50CA15}) (Version: 3.1 - CyberLink Corp.)
HP MediaSmart Video (HKLM\...\InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}) (Version: 4.1.4322 - Hewlett-Packard)
HP MediaSmart Webcam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3123 - Hewlett-Packard)
HP Quick Launch Buttons (HKLM\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.50.3.1 - Hewlett-Packard)
HP Support Assistant (HKLM\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.1.40.3 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM\...\{579A990C-3855-4838-AF23-354CE2264BC0}) (Version: 12.0.30.473 - HP)
HP Wireless Assistant (HKLM\...\{1061DF04-CF33-40B0-8360-D07C9BBEB122}) (Version: 3.50.10.1 - Hewlett-Packard)
IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6466.0 - IDT)
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.7.0.1013 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation)
Java 8 Update 73 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)
JMicron 1394 Filter Driver (HKLM\...\{13C96625-28E4-4c58-ADE0-CDAFC64752EB}) (Version: 1.00.25.03 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.72.4 - JMicron Technology Corp.)
Malwarebytes Anti-Malware verze 2.2.0.1024 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4.6.1 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 341.92 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.92 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
Ovládací panel NVIDIA 341.92 (Version: 341.92 - NVIDIA Corporation) Hidden
QLBCASL (Version: 6.40.17.2 - Hewlett-Packard) Hidden
Realtek Ethernet Controller Driver For Windows Vista and Later (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0011 - Realtek)
Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30104 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden
Skype™ 7.3 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
SP45629 - Intel Chipset Installation Utility (HKLM\...\{7AB416C2-4AEC-4967-A873-E2A3B404E6EC}) (Version: 1.0.0 - Hewlett-Packard International Pte. Ltd.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Validity Sensors DDK (HKLM\...\{62A20ECA-920E-4052-BF77-88C78DD20FAA}) (Version: 3.1.366 - Validity Sensors, Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.2 - VideoLAN)
Windows Driver Package - Broadcom Bluetooth (06/15/2009 6.2.0.9000) (HKLM\...\B7541EC5F72AA713F557569278EB6273725F5607) (Version: 06/15/2009 6.2.0.9000 - Broadcom)
Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (HKLM\...\A6A8668C0A13640CA28FE2A7D9654BE4AE478B13) (Version: 07/30/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
WinRAR 5.31 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {02499E0B-32F6-4956-A6FB-8389CD723306} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-03-03] (AVAST Software)
Task: {0D31BC6B-91D9-4C63-A535-7F5D3477EE4F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {127E0C92-8D08-454E-8E20-8BAAB9A05BD7} - System32\Tasks\HPCeeScheduleForMonika => C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
Task: {35A0D36E-D761-4CAF-B314-F4C18B007A1B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-03-03] (Google Inc.)
Task: {4502C3FE-A825-4D56-8DF8-D9B05D1FC783} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-01-20] (Hewlett-Packard)
Task: {4F16B190-BE2E-4600-9B7F-A378C8C4F37F} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-03-05] (AVAST Software)
Task: {50F88828-FBB5-4CDD-9590-11C267E612E0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [2015-09-28] (Hewlett-Packard Company)
Task: {53778D16-825C-4AC6-9DCB-A40B17F7B170} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-02-18] (Hewlett-Packard)
Task: {6690D58A-6DFE-4EDE-BA4F-6394BFCE833E} - System32\Tasks\{4FD43F37-8806-4510-A515-444145BDEC9F} => pcalua.exe -a C:\Users\Monika\Downloads\sp46507.exe -d C:\Users\Monika\Downloads
Task: {77F63AE2-4C27-4B09-8C39-E9375439DF05} - System32\Tasks\CapSvcInst => C:\Program Files\Hewlett-Packard\Media\Live TV\Kernel\TV\CapSvcInst.exe [2010-06-03] (CL)
Task: {7AD3DDE9-857C-498F-BFC6-5986047B1E52} - System32\Tasks\DVDAgent => c:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe [2009-09-09] (CyberLink Corp.)
Task: {873E141B-6D61-4907-A7AC-D38F55AD7B22} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [2015-09-28] (Hewlett-Packard Company)
Task: {90C37FE4-F675-4A47-ADF5-D169432A8BDC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-02-17] (Hewlett-Packard)
Task: {A2305E89-F9CC-4A8B-8035-98B8500B5608} - System32\Tasks\CapUninst => C:\Program Files\Hewlett-Packard\Media\Live TV\Kernel\TV\CapUninst.exe [2010-06-03] (CL)
Task: {A850DE98-FB0C-4009-9FEE-F72B02D3E7AE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-03-03] (Google Inc.)
Task: {B7B7CC0E-3805-4B34-9BDF-D46B62CBA1F1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-03] (Adobe Systems Incorporated)
Task: {C9C60EFE-1E64-46A7-9754-77C69D53EF0A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-02-12] (Piriform Ltd)
Task: {CBF09E4D-A225-460C-9AB9-2C6515AE0601} - System32\Tasks\MirageAgent => C:\Program Files\Hewlett-Packard\Media\Webcam\YCMMirage.exe [2010-07-14] (CyberLink)
Task: {CD0C06FD-D463-4601-A9EF-7558B1B87F11} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-02-17] (Hewlett-Packard)
Task: {D536D120-1DBC-410C-8C2F-DEDA7D64D9AD} - System32\Tasks\TVAgent => C:\Program Files\Hewlett-Packard\Media\Live TV\TVAgent.exe [2010-06-03] (CyberLink Corp.)
Task: {D6F5251B-FCA8-4573-A874-F59FC715C2B3} - System32\Tasks\CapSchedInst => C:\Program Files\Hewlett-Packard\Media\Live TV\Kernel\TV\CapSchedInst.exe [2010-06-03] (CL)
Task: {F5AEB5DC-4C3B-47C5-A3D8-8979B1C6EED8} - System32\Tasks\{2D3861D4-5208-4444-8454-ADF0B4FF5E01} => pcalua.exe -a "C:\Users\Monika\Desktop\Motorola SoftStylus - SP46759.exe" -d C:\Users\Monika\Desktop
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForMonika.job => C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2016-03-03 09:41 - 2015-10-13 17:47 - 00113840 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2016-03-03 22:36 - 2016-03-03 22:36 - 00113496 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2016-03-03 22:36 - 2016-03-03 22:36 - 00133768 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-03-07 16:50 - 2016-03-07 16:50 - 02838016 _____ () C:\Program Files\AVAST Software\Avast\defs\16030700\algo.dll
2016-03-03 22:36 - 2016-03-03 22:36 - 00480760 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-03-05 17:25 - 2016-03-05 17:25 - 00016384 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\d3f954fd5b56488cf850ad0b97bbee61\PSIClient.ni.dll
2016-03-03 22:36 - 2016-03-03 22:36 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2009-07-01 15:44 - 2009-07-01 15:44 - 00632888 _____ () C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe
2016-03-03 00:15 - 2016-03-02 05:47 - 01675928 _____ () C:\Program Files\Google\Chrome\Application\49.0.2623.75\libglesv2.dll
2016-03-03 00:15 - 2016-03-02 05:47 - 00086168 _____ () C:\Program Files\Google\Chrome\Application\49.0.2623.75\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\Windows\pss\Bluetooth.lnk.CommonStartup
MSCONFIG\startupreg: DAEMON Tools Lite Automount => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: WirelessAssistant => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{E5BDC564-E36A-40B3-BA0F-5DC6CC4BAAE9}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{1AEFBDE4-6C87-4CB8-8951-EBDA36EFC927}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{1CE15464-57AD-4763-99E0-0E9B6B2A0882}] => (Allow) C:\Program Files\Hewlett-Packard\MediaSmart\Video\HPMediaSmartVideo.exe
FirewallRules: [{BAEAC79F-57FA-4FFF-BE83-893E95C64336}] => (Allow) c:\Program Files\Hewlett-Packard\Media\DVD\HPDVDSmart.exe
FirewallRules: [{12EF7729-A90B-4599-BEAC-CACF8D9A16D9}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{3B321DFA-B349-49A1-9479-7BE7461427D3}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{04D407EC-C7BD-4737-986B-4E7C534D9499}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{E8D22F69-5DF8-4C4E-990C-D51AD3AD69D2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{7377102C-C142-48EE-84DC-183182A96C96}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{750E2FE2-C97E-4A7E-B8B8-04686F305180}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{D93D0C2A-FB8E-4F91-9096-6F4FEE5C6DE8}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
==================== Restore Points =========================
06-03-2016 06:27:51 Naplánovaný kontrolní bod
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (03/07/2016 07:51:48 PM) (Source: MsiInstaller) (EventID: 11706) (User: Monika-PC)
Description: Product: HP Support Assistant -- Error 1706.No valid source could be found for product HP Support Assistant. The Windows Installer cannot continue.
Error: (03/06/2016 06:27:52 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parametr není správný.
.
Error: (03/06/2016 06:27:51 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parametr není správný.
.
Error: (03/05/2016 10:31:21 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]
Error: (03/05/2016 10:31:21 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]
Error: (03/05/2016 10:31:21 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]
Error: (03/05/2016 09:31:03 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parametr není správný.
.
Error: (03/05/2016 09:31:03 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parametr není správný.
.
Error: (03/05/2016 05:19:38 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parametr není správný.
.
Error: (03/05/2016 05:19:38 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parametr není správný.
.
System errors:
=============
Error: (03/06/2016 05:21:44 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Stínové kopie svazku C: byly přerušeny, protože z důvodu limitu stanoveného uživatelem se nepodařilo zvětšit úložiště stínové kopie.
Error: (03/05/2016 09:36:20 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Windows Media Player Network Sharing neuspěla při spuštění v důsledku následující chyby:
%%1069
Error: (03/05/2016 09:36:20 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Služba WMPNetworkSvc se nemohla přihlásit jako NT AUTHORITY\NetworkService s aktuálně konfigurovaným heslem z důvodu následující chyby:
%%50
Chcete-li zajistit správnou konfiguraci služby, použijte modul snap-in Služby konzoly Microsoft Management Console (MMC).
Error: (03/05/2016 09:36:19 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Správce služeb se pokusil o opravnou akci (Restartovat službu) po nečekaném ukončení služby Windows Search, ale tato akce selhala kvůli následující chybě:
%%1056
Error: (03/05/2016 09:36:17 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.
Cesta k modulu: C:\Windows\System32\bcmihvsrv.dll
Error: (03/05/2016 09:36:17 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.
Cesta k modulu: C:\Windows\System32\bcmihvsrv.dll
Error: (03/05/2016 09:36:14 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.
Cesta k modulu: C:\Windows\System32\bcmihvsrv.dll
Error: (03/05/2016 09:35:50 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Instalační služba systému Windows byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.
Error: (03/05/2016 09:35:50 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Com4QLBEx byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (03/05/2016 09:35:50 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Úložná technologie Intel® Rapid byla neočekávaně ukončena. Tento stav nastal již 1krát.
Re: Prevence
- Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
- ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
- znovu spustte FRST a kliknete na Fix
- po restartu bude na plose ulozen fixlog, jehoz obsah vlozte do pristi odpovedi
Kód: Vybrat vše
Start CreateRestorePoint: CloseProcesses: HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\...\Run: [HPAdvisorDock] => [X] 2016-03-05 21:41 - 2016-03-05 21:48 - 00000000 ____D C:\rsit 2016-03-05 21:41 - 2016-03-05 21:41 - 00000000 ____D C:\Program Files\trend micro 2016-03-05 21:40 - 2016-03-05 21:40 - 01107968 _____ C:\RSIT.exe 2016-03-05 21:34 - 2016-03-05 21:35 - 00000000 ____D C:\AdwCleaner Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: {6690D58A-6DFE-4EDE-BA4F-6394BFCE833E} - System32\Tasks\{4FD43F37-8806-4510-A515-444145BDEC9F} => pcalua.exe -a C:\Users\Monika\Downloads\sp46507.exe -d C:\Users\Monika\Downloads Task: {F5AEB5DC-4C3B-47C5-A3D8-8979B1C6EED8} - System32\Tasks\{2D3861D4-5208-4444-8454-ADF0B4FF5E01} => pcalua.exe -a "C:\Users\Monika\Desktop\Motorola SoftStylus - SP46759.exe" -d C:\Users\Monika\Desktop End
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Re: Prevence
Fix result of Farbar Recovery Scan Tool (x86) Version:05-03-2016 01
Ran by Monika (2016-03-08 05:31:09) Run:1
Running from C:\Users\Monika\Desktop
Loaded Profiles: Monika (Available Profiles: Monika)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\...\Run: [HPAdvisorDock] => [X]
2016-03-05 21:41 - 2016-03-05 21:48 - 00000000 ____D C:\rsit
2016-03-05 21:41 - 2016-03-05 21:41 - 00000000 ____D C:\Program Files\trend micro
2016-03-05 21:40 - 2016-03-05 21:40 - 01107968 _____ C:\RSIT.exe
2016-03-05 21:34 - 2016-03-05 21:35 - 00000000 ____D C:\AdwCleaner
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: {6690D58A-6DFE-4EDE-BA4F-6394BFCE833E} - System32\Tasks\{4FD43F37-8806-4510-A515-444145BDEC9F} => pcalua.exe -a C:\Users\Monika\Downloads\sp46507.exe -d C:\Users\Monika\Downloads
Task: {F5AEB5DC-4C3B-47C5-A3D8-8979B1C6EED8} - System32\Tasks\{2D3861D4-5208-4444-8454-ADF0B4FF5E01} => pcalua.exe -a "C:\Users\Monika\Desktop\Motorola SoftStylus - SP46759.exe" -d C:\Users\Monika\Desktop
End
*****************
Restore point was successfully created.
Processes closed successfully.
HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\Software\Microsoft\Windows\CurrentVersion\Run\\HPAdvisorDock => value removed successfully.
C:\rsit => moved successfully
C:\Program Files\trend micro => moved successfully
C:\RSIT.exe => moved successfully
C:\AdwCleaner => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6690D58A-6DFE-4EDE-BA4F-6394BFCE833E}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6690D58A-6DFE-4EDE-BA4F-6394BFCE833E}" => key removed successfully.
C:\Windows\System32\Tasks\{4FD43F37-8806-4510-A515-444145BDEC9F} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4FD43F37-8806-4510-A515-444145BDEC9F}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F5AEB5DC-4C3B-47C5-A3D8-8979B1C6EED8}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F5AEB5DC-4C3B-47C5-A3D8-8979B1C6EED8}" => key removed successfully.
C:\Windows\System32\Tasks\{2D3861D4-5208-4444-8454-ADF0B4FF5E01} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2D3861D4-5208-4444-8454-ADF0B4FF5E01}" => key removed successfully.
The system needed a reboot.
==== End of Fixlog 05:31:19 ====
Ran by Monika (2016-03-08 05:31:09) Run:1
Running from C:\Users\Monika\Desktop
Loaded Profiles: Monika (Available Profiles: Monika)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\...\Run: [HPAdvisorDock] => [X]
2016-03-05 21:41 - 2016-03-05 21:48 - 00000000 ____D C:\rsit
2016-03-05 21:41 - 2016-03-05 21:41 - 00000000 ____D C:\Program Files\trend micro
2016-03-05 21:40 - 2016-03-05 21:40 - 01107968 _____ C:\RSIT.exe
2016-03-05 21:34 - 2016-03-05 21:35 - 00000000 ____D C:\AdwCleaner
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: {6690D58A-6DFE-4EDE-BA4F-6394BFCE833E} - System32\Tasks\{4FD43F37-8806-4510-A515-444145BDEC9F} => pcalua.exe -a C:\Users\Monika\Downloads\sp46507.exe -d C:\Users\Monika\Downloads
Task: {F5AEB5DC-4C3B-47C5-A3D8-8979B1C6EED8} - System32\Tasks\{2D3861D4-5208-4444-8454-ADF0B4FF5E01} => pcalua.exe -a "C:\Users\Monika\Desktop\Motorola SoftStylus - SP46759.exe" -d C:\Users\Monika\Desktop
End
*****************
Restore point was successfully created.
Processes closed successfully.
HKU\S-1-5-21-2394200607-1540755856-2256836862-1000\Software\Microsoft\Windows\CurrentVersion\Run\\HPAdvisorDock => value removed successfully.
C:\rsit => moved successfully
C:\Program Files\trend micro => moved successfully
C:\RSIT.exe => moved successfully
C:\AdwCleaner => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6690D58A-6DFE-4EDE-BA4F-6394BFCE833E}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6690D58A-6DFE-4EDE-BA4F-6394BFCE833E}" => key removed successfully.
C:\Windows\System32\Tasks\{4FD43F37-8806-4510-A515-444145BDEC9F} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4FD43F37-8806-4510-A515-444145BDEC9F}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F5AEB5DC-4C3B-47C5-A3D8-8979B1C6EED8}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F5AEB5DC-4C3B-47C5-A3D8-8979B1C6EED8}" => key removed successfully.
C:\Windows\System32\Tasks\{2D3861D4-5208-4444-8454-ADF0B4FF5E01} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2D3861D4-5208-4444-8454-ADF0B4FF5E01}" => key removed successfully.
The system needed a reboot.
==== End of Fixlog 05:31:19 ====
Re: Prevence
Takze jeste uklidime.
- Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
- Oznacte jen moznost "Remove disinfection tools"
- kliknete na Run
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Re: Prevence
Moc děkuji za pomoc.
Re: Prevence
Nemate zac, rad jsem pomohl
Mejte se krasne a treba zase nekdy
Mejte se krasne a treba zase nekdy
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Přispějete na provoz fóra?