Prosím o preventivku

[matikolus]

Prosím o preventivku. Ntb je pomalejší než normálně a dnes mi bylo poslední kapkou to, že spadla mozilla a objevila se mi hláška, že aplikace Microsoft Windows neodpovídá, jestli ji chci ukončit... (nebo tak nějak) a byl potřeba tvrdej reset.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Matik at 2017-03-20 21:57:08
Microsoft Windows 10 Home
System drive C: has 860 GB (95%) free of 905 GB
Total RAM: 3960 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:57:09, on 20. 3. 2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe
C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
C:\Program Files\trend micro\Matik.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkI ... id=UE13DHP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKLM\..\Run: [331BigDog] "C:\Program Files (x86)\USB Camera\VM331STI.EXE"
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
O4 - HKLM\..\Run: [Smart Update] C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe -s
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKCU\..\Run: [Advanced SystemCare 10] "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe" /Auto
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Matik\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-285217817-3415256103-1001495881-1001\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-285217817-3415256103-1001495881-1001\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\DriverStore\FileRepository\nvltwu.inf_amd64_0221ce4ec0827f74\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 10 (AdvancedSystemCareService10) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: @oem16.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @C:\WINDOWS\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\WINDOWS\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: SluĹľba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: SluĹľba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: IObit Uninstaller Service (IObitUnSvr) - IObit - C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Lenovo Smart Update Service - Lenovo - C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: NitroPDFDriverCreatorReadSpool2 (NitroDriverReadSpool2) - Nitro PDF Software - C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\windows\SysWOW64\NLSSRV32.EXE
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Intel Security PEF Service (PEFService) - Intel Security, Inc. - C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Conexant SmartAudio service (SAService) - Conexant Systems, Inc. - C:\WINDOWS\system32\SAsrv.exe
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10413 bytes

======Listing Processes======








C:\WINDOWS\system32\lsass.exe
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-756eb333-a662-4dc5-a261-1f87f6f0a980 -SystemEventPortName:HostProcess-99188004-4a56-4a15-a3e9-2dcd37bad6d5 -IoCancelEventPortName:HostProcess-9551b95f-b232-4eaa-8f17-86f2f1ac7664 -NonStateChangingEventPortName:HostProcess-4d9a3d73-698b-48e3-989e-15f8d75382ca -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:23432a19-ce71-4c86-9961-319fae58e164 -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\System32\spoolsv.exe
"C:\WINDOWS\system32\CxAudMsg64.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
C:\WINDOWS\system32\BtwRSupportService.exe
"C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
C:\windows\SysWOW64\NLSSRV32.EXE
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel

C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe"
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe -first
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
"C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe"
"C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
dashost.exe {ab8f9095-e78b-4a8a-a66f3f5ad100e23c}
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
sihost.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe" /Task
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\Explorer.EXE
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"

"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe" /Auto
"C:\Program Files\CCleaner\CCleaner64.exe" /monitor
"C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe" -s
"C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe"
"C:\Program Files\Windows Defender\\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 7A94167C-E8BE-F7D8-A4F4-5B4F3C2B35EF -Reinvoke
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"

"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\WINDOWS\servicing\TrustedInstaller.exe
C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.1051_none_7f2bf7ea21d201b2\TiWorker.exe -Embedding
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\system32\AUDIODG.EXE 0x39c
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\splwow64.exe 12288
"C:\Users\Matik\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe

[Rudy]

Zdravím!
1. doporučuji odinstalovat AdvancedSystemCare. Tento optimizer vidí problémy i tam, kde nejsou a laik si jím může poškodit systém.

2. Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

[matikolus]

# AdwCleaner v6.044 - Log vytvořen 23/03/2017 v 14:54:28
# Aktualizováno dne 28/02/2017 z Malwarebytes
# Databáze : 2017-03-23.1 [Server]
# Operační systém : Windows 10 Home (X64)
# Uživatelské jméno : Matik - MATICI
# Spuštěno z : C:\Users\Matik\Desktop\adwcleaner_6.044.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****



***** [ Složky ] *****

[-] Složka smazána: C:\Users\Matik\AppData\LocalLow\IObit\Advanced SystemCare
[-] Složka smazána: C:\Users\Matik\AppData\Roaming\IObit\Advanced SystemCare
[-] Složka smazána: C:\ProgramData\IObit\ASCDownloader
[-] Složka smazána: C:\ProgramData\IObit\Advanced SystemCare
[-] Složka smazána: C:\Program Files (x86)\Amazon\ABB
[-] Složka smazána: C:\Program Files (x86)\IObit\Advanced SystemCare
[-] Složka smazána: C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare
[-] Složka smazána: C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare


***** [ Soubory ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupci ] *****



***** [ Naplánované úlohy ] *****



***** [ Registry ] *****

[-] Klíč smazán: HKLM\SOFTWARE\Classes\ASCExtMenu.CExtMenu
[-] Klíč smazán: HKLM\SOFTWARE\Classes\ASCExtMenu.CExtMenu.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\ASCExtMenu.CExtMenu
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\ASCExtMenu.CExtMenu.1
[-] Klíč smazán: HKLM\SOFTWARE\IOBIT\ASC
[-] Klíč smazán: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\slunecnice.cz
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\slunecnice.cz
[-] Klíč smazán: HKLM\SOFTWARE\CLASSES\DIRECTORY\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
[-] Klíč smazán: HKLM\SOFTWARE\CLASSES\DRIVE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
[-] Klíč smazán: HKLM\SOFTWARE\CLASSES\LNKFILE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare


***** [ Prohlížeče ] *****



*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [2233 Bajty] - [23/03/2017 14:54:28]
C:\AdwCleaner\AdwCleaner[S0].txt - [2606 Bajty] - [23/03/2017 14:53:55]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [2379 Bajty] ##########

[Rudy]

Teď dejte log FRST: http://forum.viry.cz/viewtopic.php?f=30&t=133101 .

[matikolus]

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-03-2017
Ran by Matik (23-03-2017 21:08:42)
Running from C:\Users\Matik\Desktop
Windows 10 Home Version 1607 (X64) (2017-01-23 13:31:44)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-285217817-3415256103-1001495881-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-285217817-3415256103-1001495881-503 - Limited - Disabled)
Guest (S-1-5-21-285217817-3415256103-1001495881-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-285217817-3415256103-1001495881-1006 - Limited - Enabled)
Matik (S-1-5-21-285217817-3415256103-1001495881-1002 - Administrator - Enabled) => C:\Users\Matik
UpdatusUser (S-1-5-21-285217817-3415256103-1001495881-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Absolute Reminder (HKLM-x32\...\{40F4FF7A-B214-4453-B973-080B09CED019}) (Version: 2.1.0.9 - Absolute Software)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 15.023.20070 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 18.0.0.144 - Adobe Systems Incorporated)
Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.127 - Adobe Systems Incorporated)
Aktualizace NVIDIA 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.16.50 - Conexant)
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.16 - Dolby Laboratories Inc)
Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.6.5.1 - Dolby Laboratories Inc)
Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.4 - Lenovo)
Energy Management (x32 Version: 8.0.2.4 - Lenovo) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.21.169 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 3.6.1.33057.10 - Intel)
Intel Security True Key (HKLM\...\TrueKey) (Version: 4.12.108.1 - Intel Security)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intelligent Touchpad (HKLM-x32\...\{DD7D6D84-93AB-48CA-A759-94324E341CBA}) (Version: 2.00.0012.0723 - Lenovo)
Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.1901 - Broadcom Corporation)
Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 3.15.0414.1 - Vimicro)
Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0333}) (Version: 1.12.824.1 - Vimicro)
Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.0710 - CyberLink Corp.)
Lenovo OneKey Recovery (Version: 8.0.0.0710 - CyberLink Corp.) Hidden
Lenovo Photos (HKLM-x32\...\Lenovo Photos) (Version: - CEWE COLOR AG u Co. OHG)
Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4310.52 - CyberLink Corp.)
Lenovo PowerDVD10 (x32 Version: 10.0.4310.52 - CyberLink Corp.) Hidden
Lenovo Smart Update (HKLM-x32\...\{29B7C0EB-A1E6-4BC3-8344-70EDE4F189F1}) (Version: 1.6.77 - Lenovo Corporation)
Lenovo Solution Center (HKLM\...\{1E939186-B443-4262-A278-3C82949EA7AC}) (Version: 1.1.009.00 - Lenovo Group Limited)
Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3127 - CyberLink Corp.)
Lenovo YouCam (x32 Version: 4.1.3127 - CyberLink Corp.) Hidden
Lenovo_Wireless_Driver (HKLM-x32\...\{5D642A72-8194-4A22-80DA-11FE610CCA8E}) (Version: 6.30.5926 - Lenovo)
LenovoDrv_x64 (HKLM\...\{83E68458-AF28-4CA4-8AFC-595A10307290}) (Version: 1.0.00 - Lenovo)
LibreOffice 5.1.6.2 (HKLM\...\{549C3097-A17C-4163-9B03-D52865B2BBEE}) (Version: 5.1.6.2 - The Document Foundation)
Microsoft OneDrive (HKU\S-1-5-21-285217817-3415256103-1001495881-1002\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 52.0.1 (x86 cs) (HKLM-x32\...\Mozilla Firefox 52.0.1 (x86 cs)) (Version: 52.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.1.6284 - Mozilla)
Nitro Pro 7 (HKLM\...\{72D264E5-0C44-42DF-820B-621303E5C183}) (Version: 7.4.1.21 - Nitro PDF Software)
NVIDIA GeForce Experience 1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.5 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.54 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0604 - NVIDIA Corporation)
OpenOffice 4.1.3 (HKLM-x32\...\{7308600A-5231-459C-A3E2-A637F842CACA}) (Version: 4.13.9783 - Apache Software Foundation)
Ovládací panel NVIDIA 376.54 (Version: 376.54 - NVIDIA Corporation) Hidden
Pomocník při upgradu na Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17364 - Microsoft Corporation)
Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.9109 - CyberLink Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.61.90905 - SugarSync, Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.5 - Synaptics Incorporated)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.75813 - TeamViewer)
UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.9 - Lenovo)
UserGuide (x32 Version: 1.0.0.9 - Lenovo) Hidden
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Windows Driver Package - Lenovo (ACPIVPC) System (06/15/2012 8.1.0.1) (HKLM\...\71BC3FD63F450BA0A957AAECBDB4A000C4F2BE42) (Version: 06/15/2012 8.1.0.1 - Lenovo)
Windows Driver Package - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo)
Windows Driver Package - Lenovo Corporation (LAD) System (06/08/2012 1.0.0.3) (HKLM\...\C48768A2A32F4649238F7DCF737A260911895FDE) (Version: 06/08/2012 1.0.0.3 - Lenovo Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {10613B5D-EFDE-400D-B392-A4DE43DF12E1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-08] (Google Inc.)
Task: {109C92AB-DF77-4998-B6C3-147AC05FC6CC} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\lsc.exe [2012-08-09] ()
Task: {16575E3F-C2BC-4939-B233-378199E6C1D0} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent
Task: {4EB48621-18B6-4721-ABEF-C96812B47245} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-03-21] (Adobe Systems Incorporated)
Task: {511BD4B3-A95D-445C-B691-24B0445CB8C1} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2012-08-09] (Lenovo)
Task: {6F42F824-6404-4090-8071-3B47616DAF35} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {754B14F1-76E0-41D6-937A-83C7630A716B} - System32\Tasks\DivXUpdate => C:\Program Files (x86)\Common Files\DivX Shared\DivX Update\DivXUpdate.exe [2016-12-15] (DivX, LLC)
Task: {79840140-56C7-452D-88C8-C80E3EC732EF} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee Anti-Virus And Anti-Spyware\upgrade.exe [2016-10-11] (McAfee, Inc.)
Task: {9313543A-5704-47A8-8F45-AB3DF6C82B26} - System32\Tasks\StartMenu8_Start => C:\Program Files (x86)\IObit\Classic Start\Start_Active.exe [2016-11-15] ()
Task: {93CE6B2A-E225-42D7-8EB8-BDC15F57A218} - \McAfee\McAfee Idle Detection Task -> No File <==== ATTENTION
Task: {9F9C0F03-6057-44A7-BAD3-96C2C475AB3C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-08] (Google Inc.)
Task: {A0AAD405-CA5F-4269-BA3A-966642D4B385} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2012-08-09] ()
Task: {AADE08B3-AE25-4802-B13B-AB45027B4B17} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27] (CyberLink)
Task: {C8DEBDDC-A13D-4EAA-993A-3D07D98E7639} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe
Task: {D93D58FC-0456-43ED-8135-4D1C4F4AB9DB} - System32\Tasks\Lenovo\LSC\Time72Task => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2012-08-09] ()
Task: {DDAD9BB5-BBC9-4E16-A9FB-DC7B4A3297AE} - \Microsoft\Windows\Setup\EOSNotify -> No File <==== ATTENTION
Task: {E627699B-0665-4BBC-8745-6DB250CD9BAD} - System32\Tasks\Driver Booster SkipUAC (Matik) => C:\Program Files (x86)\IObit\Driver Booster\4.1.0\DriverBooster.exe
Task: {EEECA33C-0BD7-43A9-B1D2-235403CBB54A} - System32\Tasks\Lenovo\LSC\RebootCountTask => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2012-08-09] ()

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\StartMenu8_Start.job => C:\Program Files (x86)\IObit\Classic Start\Start_Active.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Matik\Desktop\Online File Converter.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to 3G2.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-3G2
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to 3GP.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-3GP
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to 7z.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-7Z
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to AAC.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-AAC
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to AC3.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-AC3
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to AIFF.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-AIFF
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to AVI.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-AVI
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to AZW3.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-AZW3
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to BMP.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-BMP
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to EPS.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-EPS
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to EPUB.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-ePub
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to Excel.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-Xls
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to FB2.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-FB2
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to FLAC.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-FLAC
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to Flash.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-Flash
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to FLV.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-FLV
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to GIF.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-GIF
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to Html.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-HTML
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to iPhone.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-iPhone
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to JPG.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-JPG
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to LRF.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-LRF
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to M4A.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-M4A
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to MKV.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-MKV
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to MOBI.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-MOBI
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to Mov.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-MOV
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to MP2.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-MP2
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to MP3.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-MP3
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to MP4.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-MP4
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to ODF.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-ODF
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to OGG.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-OGG
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to OpenOffice.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-ODT
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to PDB.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-PDB
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to PDF.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-PDF
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to PhotoShop.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-PSD
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to PNG.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-PNG
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to PowerPoint.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-PPT
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to RM.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-RM
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to Rtf.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-ODF
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to Tar.bz2.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-Tar-bz2
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to Tar.gz.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-Tar-gz
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to Tar.z.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-Tar-z
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to TCR.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-TCR
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to TIFF.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-TIFF
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to Txt.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-TXT
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to W1V.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-M1V
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to W2V.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-M2V
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to WAV.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-WAV
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to WebM.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-WebM
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to WMA.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-WMA
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to WMV.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-WMV
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to Word.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-Doc
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to Xbox 360.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-Xbox360
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to Xml.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-XML
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to YouTube.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-YouTube
ShortcutWithArgument: C:\Users\Matik\Desktop\Free Online File Converter\Convert to ZIP.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo?Key=Convert-to-ZIP
ShortcutWithArgument: C:\Users\Matik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online File Converter.lnk -> C:\Program Files (x86)\Word Converter\OfficeLinks.exe () -> hxxp://www.cloud-converter.com/GoTo

==================== Loaded Modules (Whitelisted) ==============

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-03-19 21:53 - 2017-03-04 08:19 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-23 14:03 - 2016-12-29 14:16 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-03-19 21:53 - 2017-03-04 08:19 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2012-07-16 08:49 - 2012-07-16 08:49 - 00108040 _____ () C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NPShellExtension64.dll
2017-01-23 13:45 - 2017-01-23 13:45 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-19 21:54 - 2017-03-04 07:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-13 08:16 - 2017-03-13 08:17 - 00077312 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-03-13 08:16 - 2017-03-13 08:17 - 00182784 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-03-13 08:16 - 2017-03-13 08:17 - 41048064 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-03-13 08:16 - 2017-03-13 08:17 - 02236896 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\roottools.dll
2017-03-09 01:16 - 2017-03-09 01:16 - 00112264 _____ () C:\Windows\System32\IccLibDll_x64.dll
2017-03-19 21:53 - 2017-03-04 07:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-19 21:53 - 2017-03-04 07:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-19 21:53 - 2017-03-04 07:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-03-19 21:53 - 2017-03-04 07:05 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-03-19 21:53 - 2017-03-04 07:08 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2013-10-18 14:52 - 2012-07-18 22:27 - 00021072 _____ () C:\Program Files (x86)\Lenovo\Lenovo Smart Update\HookDll.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Windows:nlsPreferences [0]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-07-26 06:26 - 2017-02-08 18:00 - 00000828 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-285217817-3415256103-1001495881-1001\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-285217817-3415256103-1001495881-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Matik\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img13.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\Run32: => "331BigDog"
HKLM\...\StartupApproved\Run32: => "YouCam Tray"
HKLM\...\StartupApproved\Run32: => "YouCam Mirage"
HKLM\...\StartupApproved\Run32: => "RemoteControl10"
HKU\S-1-5-21-285217817-3415256103-1001495881-1002\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-285217817-3415256103-1001495881-1002\...\StartupApproved\Run: => "CCleaner Monitoring"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{57DD6436-E701-40FA-A4B4-48AB0BAD2E2B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{CA4A7B6C-C6C8-480A-9F3C-4988A4DB938E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{D1C72356-BBB4-4ADF-9BDC-E4FF9A33AD00}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{88FFE7AD-147A-4C37-ADB1-001F043AAE55}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{B295B8C0-EB31-4FA6-BD5F-19B34AEB757A}] => (Allow) C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\FFNativeMessage.exe
FirewallRules: [{8434A7F7-9D04-4ECE-965D-D543987F36C2}] => (Allow) C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\FFNativeMessage.exe
FirewallRules: [{28417084-418D-45A5-8597-0E2D6C00342B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{FAF379A3-8DED-4927-8FB5-3DEAD817E8EB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{61E85D16-60D3-43B5-B106-83F7F6222F72}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{F806D94E-5150-4963-BF7A-2191D66E9C6B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{29F1F52C-BC0A-4D9A-82D9-B9454C036E17}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{F25E84C4-C9CB-4143-AE42-C2A4C3B36B29}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{E377A15F-7456-48F9-A5EC-A9DA9CF87CED}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

==================== Restore Points =========================

09-03-2017 09:42:18 Windows Update
16-03-2017 09:14:19 Windows Update
16-03-2017 09:15:09 Windows Update
20-03-2017 21:59:07 Windows Update

==================== Faulty Device Manager Devices =============

Name: Intel(R) Management Engine Interface
Description: Intel(R) Management Engine Interface
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel
Service: MEIx64
Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39)
Resolution: Reasons for this error include a driver that is not present; a binary file that is corrupt; a file I/O problem, or a driver that references an entry point in another binary file that could not be loaded.
Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/23/2017 05:26:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MATICI)
Description: Aplikaci Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (03/23/2017 05:25:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: SearchUI.exe, verze: 10.0.14393.953, časové razítko: 0x58ba5a2f
Název chybujícího modulu: CSGSuggestLib.dll, verze: 0.0.0.0, časové razítko: 0x58ba593a
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000000177f9
ID chybujícího procesu: 0x10c0
Čas spuštění chybující aplikace: 0x01d2a3eb06e77cb7
Cesta k chybující aplikaci: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
Cesta k chybujícímu modulu: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
ID zprávy: de2c7289-257d-47d6-b4ff-13a7bba311b3
Úplný název chybujícího balíčku: Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy
ID aplikace související s chybujícím balíčkem: CortanaUI

Error: (03/23/2017 02:24:39 PM) (Source: InstallerService) (EventID: 0) (User: )
Description: Zastavení služby se nezdařilo. System.NullReferenceException: Odkaz na objekt není nastaven na instanci objektu.
v Mcafee.TrueKey.InstallerService.InstallerSvc.OnStop()
v System.ServiceProcess.ServiceBase.DeferredStop()

Error: (03/22/2017 08:52:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: microsoftedgecp.exe, verze: 11.0.14393.953, časové razítko: 0x58ba5911
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000604
Posun chyby: 0x0000000000000000
ID chybujícího procesu: 0x1710
Čas spuštění chybující aplikace: 0x01d2a345c31583bb
Cesta k chybující aplikaci: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: ea6a9075-58a8-4f46-baf9-5e08abc13864
Úplný název chybujícího balíčku: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
ID aplikace související s chybujícím balíčkem: MicrosoftEdge

Error: (03/22/2017 08:51:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: microsoftedgecp.exe, verze: 11.0.14393.953, časové razítko: 0x58ba5911
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000604
Posun chyby: 0x0000000000000000
ID chybujícího procesu: 0x1710
Čas spuštění chybující aplikace: 0x01d2a345c31583bb
Cesta k chybující aplikaci: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: 5fffd472-7db5-47fe-891b-8ec003659bea
Úplný název chybujícího balíčku: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
ID aplikace související s chybujícím balíčkem: MicrosoftEdge

Error: (03/22/2017 08:51:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: SearchUI.exe, verze: 10.0.14393.953, časové razítko: 0x58ba5a2f
Název chybujícího modulu: Windows.UI.Xaml.dll, verze: 10.0.14393.953, časové razítko: 0x58ba5c3d
Kód výjimky: 0xc000027b
Posun chyby: 0x0000000000562d7b
ID chybujícího procesu: 0x18d8
Čas spuštění chybující aplikace: 0x01d2a2dccdc597d6
Cesta k chybující aplikaci: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
Cesta k chybujícímu modulu: C:\Windows\System32\Windows.UI.Xaml.dll
ID zprávy: 29335930-b86b-4967-a287-dcaa732011f8
Úplný název chybujícího balíčku: Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy
ID aplikace související s chybujícím balíčkem: CortanaUI

Error: (03/22/2017 08:51:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: ShellExperienceHost.exe, verze: 10.0.14393.447, časové razítko: 0x5819bf85
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xe0464645
Posun chyby: 0x0000000000000000
ID chybujícího procesu: 0x3b0
Čas spuštění chybující aplikace: 0x01d2a2dcccd246d4
Cesta k chybující aplikaci: C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: 8a575abb-bfc8-47af-a4a4-11c0042d9deb
Úplný název chybujícího balíčku: Microsoft.Windows.ShellExperienceHost_10.0.14393.953_neutral_neutral_cw5n1h2txyewy
ID aplikace související s chybujícím balíčkem: App

Error: (03/21/2017 09:26:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: microsoftedgecp.exe, verze: 11.0.14393.953, časové razítko: 0x58ba5911
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000604
Posun chyby: 0x0000000000000000
ID chybujícího procesu: 0xaac
Čas spuštění chybující aplikace: 0x01d2a2815e87d951
Cesta k chybující aplikaci: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: 568118ee-535e-4f1c-b59b-d4371901d17e
Úplný název chybujícího balíčku: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
ID aplikace související s chybujícím balíčkem: MicrosoftEdge

Error: (03/21/2017 09:26:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: microsoftedgecp.exe, verze: 11.0.14393.953, časové razítko: 0x58ba5911
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000604
Posun chyby: 0x0000000000000000
ID chybujícího procesu: 0xaac
Čas spuštění chybující aplikace: 0x01d2a2815e87d951
Cesta k chybující aplikaci: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: e18facf9-3249-4329-9be7-2135ca1994e8
Úplný název chybujícího balíčku: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
ID aplikace související s chybujícím balíčkem: MicrosoftEdge

Error: (03/21/2017 09:26:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: microsoftedgecp.exe, verze: 11.0.14393.953, časové razítko: 0x58ba5911
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000604
Posun chyby: 0x0000000000000000
ID chybujícího procesu: 0xaac
Čas spuštění chybující aplikace: 0x01d2a2815e87d951
Cesta k chybující aplikaci: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: 088db9f0-6689-45cc-9b3c-25c5c76db04c
Úplný název chybujícího balíčku: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
ID aplikace související s chybujícím balíčkem: MicrosoftEdge


System errors:
=============
Error: (03/23/2017 08:46:11 PM) (Source: cdrom) (EventID: 7) (User: )
Description: Zařízení \Device\CdRom0 má chybný blok.

Error: (03/23/2017 08:46:03 PM) (Source: cdrom) (EventID: 7) (User: )
Description: Zařízení \Device\CdRom0 má chybný blok.

Error: (03/23/2017 08:45:55 PM) (Source: cdrom) (EventID: 7) (User: )
Description: Zařízení \Device\CdRom0 má chybný blok.

Error: (03/23/2017 08:45:48 PM) (Source: cdrom) (EventID: 7) (User: )
Description: Zařízení \Device\CdRom0 má chybný blok.

Error: (03/23/2017 08:45:40 PM) (Source: cdrom) (EventID: 7) (User: )
Description: Zařízení \Device\CdRom0 má chybný blok.

Error: (03/23/2017 08:45:33 PM) (Source: cdrom) (EventID: 7) (User: )
Description: Zařízení \Device\CdRom0 má chybný blok.

Error: (03/23/2017 08:45:25 PM) (Source: cdrom) (EventID: 7) (User: )
Description: Zařízení \Device\CdRom0 má chybný blok.

Error: (03/23/2017 08:45:17 PM) (Source: cdrom) (EventID: 7) (User: )
Description: Zařízení \Device\CdRom0 má chybný blok.

Error: (03/23/2017 08:45:10 PM) (Source: cdrom) (EventID: 7) (User: )
Description: Zařízení \Device\CdRom0 má chybný blok.

Error: (03/23/2017 08:45:02 PM) (Source: cdrom) (EventID: 7) (User: )
Description: Zařízení \Device\CdRom0 má chybný blok.


==================== Memory info ===========================

Processor: Intel(R) Pentium(R) CPU B980 @ 2.40GHz
Percentage of memory in use: 37%
Total physical RAM: 3959.77 MB
Available physical RAM: 2481.31 MB
Total Virtual: 7927.77 MB
Available Virtual: 6382.54 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:883.34 GB) (Free:840.98 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.31 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 97444774)

Partition: GPT.

==================== End of Addition.txt ============================

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Start
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-285217817-3415256103-1001495881-1002 -> DefaultScope {6C8315E0-83E5-4C6C-AC66-DD96AA57A4A0} URL =
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [No File]
C:\WINDOWS\system32\ApnDatabase.xml
C:\ProgramData\DP45977C.lfl
Task: {93CE6B2A-E225-42D7-8EB8-BDC15F57A218} - \McAfee\McAfee Idle Detection Task -> No File <==== ATTENTION
Task: {DDAD9BB5-BBC9-4E16-A9FB-DC7B4A3297AE} - \Microsoft\Windows\Setup\EOSNotify -> No File <==== ATTENTION
AlternateDataStreams: C:\Windows:nlsPreferences [0]

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[matikolus]

Fix result of Farbar Recovery Scan Tool (x64) Version: 15-03-2017
Ran by Matik (24-03-2017 04:51:52) Run:1
Running from C:\Users\Matik\Desktop
Loaded Profiles: UpdatusUser & Matik (Available Profiles: UpdatusUser & Matik)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-285217817-3415256103-1001495881-1002 -> DefaultScope {6C8315E0-83E5-4C6C-AC66-DD96AA57A4A0} URL =
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [No File]
C:\WINDOWS\system32\ApnDatabase.xml
C:\ProgramData\DP45977C.lfl
Task: {93CE6B2A-E225-42D7-8EB8-BDC15F57A218} - \McAfee\McAfee Idle Detection Task -> No File <==== ATTENTION
Task: {DDAD9BB5-BBC9-4E16-A9FB-DC7B4A3297AE} - \Microsoft\Windows\Setup\EOSNotify -> No File <==== ATTENTION
AlternateDataStreams: C:\Windows:nlsPreferences [0]

EmptyTemp:
End
*****************

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully
HKU\S-1-5-21-285217817-3415256103-1001495881-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKLM\Software\Wow6432Node\Mozilla\Thunderbird\Extensions\\msktbird@mcafee.com => value removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@mcafee.com/MSC,version=10 => key removed successfully
C:\WINDOWS\system32\ApnDatabase.xml => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{93CE6B2A-E225-42D7-8EB8-BDC15F57A218} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{93CE6B2A-E225-42D7-8EB8-BDC15F57A218} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\McAfee\McAfee Idle Detection Task => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DDAD9BB5-BBC9-4E16-A9FB-DC7B4A3297AE} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DDAD9BB5-BBC9-4E16-A9FB-DC7B4A3297AE} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\EOSNotify => key removed successfully
C:\Windows => ":nlsPreferences" ADS removed successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 298361 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 74544612 B
Java, Flash, Steam htmlcache => 2617 B
Windows/system/drivers => 1160424 B
Edge => 9424078 B
Chrome => 107249 B
Firefox => 383170672 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 128 B
LocalService => 0 B
NetworkService => 0 B
UpdatusUser => 0 B
Matik => 110856640 B

RecycleBin => 1235666 B
EmptyTemp: => 553.9 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 04:52:12 ====

[Rudy]

Smazáno. Nastala nějaká změna?

[matikolus]

Není to ideální, ale je to mnohem lepší.

[Rudy]

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

[matikolus]

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 25.03.17
Čas skenování: 21:54
Logovací soubor:
Správce: Ano

-Informace o softwaru-
Verze: 3.0.6.1469
Verze komponentů: 1.0.75
Aktualizovat verzi balíku komponent: 1.0.1595
Licence: Zkušební

-Systémová informace-
OS: Windows 10
CPU: x64
Systém souborů: NTFS
Uživatel: MATICI\Matik

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Výsledek: Dokončeno
Skenované objekty: 433273
Uplynulý čas: 6 min, 35 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Povoleno
Potenciálně nežádoucí modifikace: Povoleno

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 7
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{BA935377-E17C-4475-B1BF-DE3110613A99}, Žádná uživatelská akce, [1857], [380348],1.0.1595
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{BA935377-E17C-4475-B1BF-DE3110613A99}, Žádná uživatelská akce, [1857], [380348],1.0.1595
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BA935377-E17C-4475-B1BF-DE3110613A99}, Žádná uživatelská akce, [1857], [380348],1.0.1595
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\TYPELIB\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}, Žádná uživatelská akce, [1857], [380348],1.0.1595
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}, Žádná uživatelská akce, [1857], [380348],1.0.1595
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}, Žádná uživatelská akce, [1857], [380348],1.0.1595
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\IOBIT\Advanced SystemCare, Žádná uživatelská akce, [1857], [380349],1.0.1595

Hodnota v registru: 3
PUP.Optional.AdvancedSystemCare, HKU\S-1-5-21-285217817-3415256103-1001495881-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UFH\SHC|4, Žádná uživatelská akce, [1857], [380354],1.0.1595
PUP.Optional.AdvancedSystemCare, HKU\S-1-5-21-285217817-3415256103-1001495881-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UFH\SHC|5, Žádná uživatelská akce, [1857], [380354],1.0.1595
PUP.Optional.AdvancedSystemCare, HKU\S-1-5-21-285217817-3415256103-1001495881-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UFH\SHC|6, Žádná uživatelská akce, [1857], [380354],1.0.1595

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 0
(Nebyly zjištěny žádné škodlivé položky)

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

[Rudy]

Všechny nálezy MBAM smažte.

[matikolus]

Mám možnost je dát jen do krantény.

[Rudy]

Jj., dejte, to je prakticky stejné. Karanténu pak můžete smazat.