Prosím o kontrolu, prodloužil se start, nelze spustit obnovu Vyřešeno

[jaro3]

Zkusil bych tohle:
http://support2.microsoft.com/fixit/

http://windows.microsoft.com/en-us/wind ... =windows-7

Prosím stáhni příslušnou verzi programu pro Tvůj systém 32-bit/64-bit FarbarRecovery Scan Tool (FrSt)
32bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/81/
64bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/82/
a ulož jej na plochu. ,pak spusť FrSt.
Potvrď způsob užití.
Neměň žádné z výchozích nastavení a klikni na položku „Scan“ („Skenovat“) .Když je skenování dokončeno, ukážou se dva logy = FRST.txt a Addition.txt a uloží se na ploše.Prosím zkopíruj sem celý jejich obsah.

[Reklama]

[gajo64]

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-02-2015
Ran by PEPA (administrator) on PEPA3 on 10-02-2015 10:50:55
Running from C:\Users\PEPA\Desktop
Loaded Profiles: PEPA (Available profiles: PEPA & Alexandra)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\System32\snmptrap.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(KMP Media co.,Ltd) C:\Program Files (x86)\The KMPlayer\KMPlayer.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Adobe\Adobe Photoshop CS3\Photoshop.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-27] (AVAST Software)
HKLM-x32\...\Run: [ATICustomerCare] => C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe [311296 2010-05-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-02-17] (InstallShield Software Corporation)
HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\...\Run: [ISUSPM Startup] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-17] (InstallShield Software Corporation)
HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x99000000
HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\...\Policies\Explorer: [NoResolveSearch] 1
Startup: C:\Users\Alexandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3752027927-3630821355-4230685425-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll (pdfforge GmbH)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll File Not found ()
Tcpip\Parameters: [DhcpNameServer] 93.153.117.33 93.153.117.1 8.8.8.8
Tcpip\..\Interfaces\{70ECFAA1-2CC5-4AD7-B4FD-F7F85AA49E16}: [NameServer] 8.8.8.8,8.8.4.4

FireFox:
========
FF ProfilePath: C:\Users\PEPA\AppData\Roaming\Mozilla\Firefox\Profiles\kiafm9yz.default-1385755089184
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q=
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.7.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll No File
FF Plugin HKU\S-1-5-21-3752027927-3630821355-4230685425-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-02-28]
FF Extension: No Name - C:\Users\PEPA\AppData\Roaming\Mozilla\Firefox\Profiles\kiafm9yz.default-1385755089184\extensions\ascsurfingprotection@iobit.com [Not Found]
FF Extension: No Name - C:\Program Files (x86)\IObit Apps Toolbar\FF [Not Found]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.cz/
CHR StartupUrls: Default -> "https://www.seznam.cz/", "https://www.google.cz/#q=google"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-09]
CHR Extension: (Disk Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-10]
CHR Extension: (YouTube) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-09]
CHR Extension: (Vyhledávání Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-09]
CHR Extension: (500px) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Default\Extensions\egpociadnldbkfkjpmjoaibnbcoeplja [2014-04-13]
CHR Extension: (Universe) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlkepiaokmmeefmfichjiennfpdclcee [2014-02-10]
CHR Extension: (Gmail) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-09]
CHR Profile: C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Prezentace Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-09]
CHR Extension: (Dokumenty Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-09]
CHR Extension: (Disk Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-09]
CHR Extension: (YouTube) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-09]
CHR Extension: (Vyhledávání Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-09]
CHR Extension: (Tabulky Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-09]
CHR Extension: (Avast Online Security) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-02-09]
CHR Extension: (Peněženka Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-09]
CHR Extension: (Gmail) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-09]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-27]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 Asset Management Daemon; C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\AM\dtsslsrv.exe [118784 2009-03-20] () [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-27] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-27] (Avast Software)
S4 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe [69632 2009-03-20] () [File not signed]
S4 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2011-09-18] (Macrovision Europe Ltd.) [File not signed]
S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-09-08] ()
S4 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
S4 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S4 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AQFileRestore; C:\Windows\System32\DRIVERS\AQFileRestore.sys [21040 2012-01-12] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-27] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-27] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-27] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-27] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-27] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-27] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-27] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-27] ()
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20160 2015-01-20] (Glarysoft Ltd)
R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20520 2009-03-20] (Portrait Displays, Inc.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-27] (Avast Software)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-10 10:50 - 2015-02-10 10:51 - 00016305 _____ () C:\Users\PEPA\Desktop\FRST.txt
2015-02-10 10:50 - 2015-02-10 10:50 - 00000000 ____D () C:\FRST
2015-02-10 10:50 - 2015-02-10 10:48 - 02132992 _____ (Farbar) C:\Users\PEPA\Desktop\FRST64.exe
2015-02-10 10:48 - 2015-02-10 10:48 - 02132992 _____ (Farbar) C:\Users\PEPA\Downloads\FRST64.exe
2015-02-10 10:47 - 2015-02-10 10:47 - 00985600 _____ () C:\Users\PEPA\Downloads\MicrosoftFixit50123.msi
2015-02-10 10:41 - 2015-02-10 10:41 - 00302011 _____ () C:\Users\PEPA\Downloads\WindowsUpdateDiagnostic.diagcab
2015-02-10 10:40 - 2015-02-10 10:40 - 00347816 _____ (Microsoft Corporation) C:\Users\PEPA\Downloads\MicrosoftFixit.wu.LB.23734698804794924.8.1.Run.exe
2015-02-10 10:35 - 2015-02-10 10:35 - 00347816 _____ (Microsoft Corporation) C:\Users\PEPA\Downloads\MicrosoftFixit.wu.FISC.23734698804794924.1.1.Run.exe
2015-02-09 23:24 - 2015-02-10 09:33 - 00000000 ____D () C:\Windows\erdnt
2015-02-09 23:07 - 2015-02-10 08:16 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\Uniblue
2015-02-09 23:07 - 2015-02-09 23:07 - 00001196 _____ () C:\Users\PEPA\Desktop\CrystalDiskInfo.lnk
2015-02-09 23:07 - 2015-02-09 23:07 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\OpenCandy
2015-02-09 23:07 - 2015-02-09 23:07 - 00000000 ____D () C:\Program Files (x86)\CrystalDiskInfo
2015-02-09 17:41 - 2015-02-09 17:45 - 00000000 ____D () C:\Users\Alexandra\Desktop\fotky z Karlovic
2015-02-09 17:05 - 2015-02-09 17:41 - 00000000 ____D () C:\Users\Alexandra\Desktop\Velké Karlovice 2015
2015-02-09 11:08 - 2015-02-09 11:08 - 02997112 _____ (Crystal Dew World ) C:\Users\PEPA\Desktop\CrystalDiskInfo6_2_2-en.exe
2015-02-09 00:21 - 2015-02-08 23:54 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-02-08 23:57 - 2015-02-05 20:22 - 00002377 _____ () C:\zoek-results2015-02-05-192221.log
2015-02-06 04:32 - 2015-02-10 09:37 - 00001456 _____ () C:\Windows\setupact.log
2015-02-06 04:32 - 2015-02-10 08:56 - 00009376 _____ () C:\Windows\PFRO.log
2015-02-06 04:32 - 2015-02-06 04:32 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-05 19:45 - 2015-02-04 22:36 - 00035645 _____ () C:\zoek-results2015-02-04-213630.log
2015-02-04 22:28 - 2015-02-03 18:20 - 00006004 _____ () C:\zoek-results2015-02-03-172021.log
2015-02-03 17:53 - 2015-02-09 07:05 - 00011979 _____ () C:\zoek-results.log
2015-02-03 17:49 - 2015-02-08 23:40 - 00019926 _____ () C:\Users\PEPA\Desktop\Rady.odt
2015-02-03 17:49 - 2015-02-05 20:22 - 00000000 ____D () C:\zoek_backup
2015-02-03 17:47 - 2015-02-03 17:48 - 01295360 _____ () C:\Users\PEPA\Desktop\zoek.exe
2015-02-03 05:48 - 2015-02-09 22:57 - 00037624 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2015-02-03 05:48 - 2015-02-03 05:48 - 18570328 _____ () C:\Users\PEPA\Desktop\RogueKillerX64.exe
2015-02-03 05:48 - 2015-02-03 05:48 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-02-02 21:03 - 2015-02-02 21:04 - 01388274 _____ (Thisisu) C:\Users\PEPA\Desktop\JRT.exe
2015-02-01 13:17 - 2015-02-02 20:55 - 00000000 ____D () C:\AdwCleaner
2015-02-01 13:15 - 2015-02-01 13:15 - 02194432 _____ () C:\Users\PEPA\Downloads\adwcleaner_4.109.exe
2015-02-01 13:04 - 2015-02-01 13:04 - 00448512 _____ (OldTimer Tools) C:\Users\PEPA\Downloads\TFC.exe
2015-02-01 12:26 - 2015-02-01 12:26 - 05325208 _____ (Piriform Ltd) C:\Users\PEPA\Downloads\ccsetup502.exe
2015-01-28 21:57 - 2015-01-28 21:57 - 00003006 _____ () C:\Windows\System32\Tasks\{196A2E13-4290-438C-9686-A766E91EF9EB}
2015-01-28 21:55 - 2015-01-28 21:55 - 00002978 _____ () C:\Windows\System32\Tasks\{36AA9F29-E33A-49F2-967A-C779EB429DCC}
2015-01-28 21:55 - 2015-01-28 21:55 - 00000000 ____D () C:\Users\PEPA\AppData\Local\Tracker Software
2015-01-28 21:52 - 2015-01-28 21:52 - 00003006 _____ () C:\Windows\System32\Tasks\{E45B8A58-569D-4984-853B-3C1E384A59DB}
2015-01-28 21:32 - 2015-02-01 14:23 - 00000000 ____D () C:\Users\PEPA\Desktop\Nový problém s PC
2015-01-28 20:29 - 2015-01-28 20:29 - 00211863 _____ () C:\Users\PEPA\AppData\Local\census.cache
2015-01-28 20:29 - 2015-01-28 20:29 - 00170880 _____ () C:\Users\PEPA\AppData\Local\ars.cache
2015-01-28 20:23 - 2013-09-28 03:56 - 00285208 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmcomm.sys
2015-01-28 20:22 - 2015-01-28 20:22 - 00000036 _____ () C:\Users\PEPA\AppData\Local\housecall.guid.cache
2015-01-28 20:21 - 2015-01-28 20:21 - 02494560 _____ (Trend Micro Inc.) C:\Users\PEPA\Downloads\HousecallLauncher64.exe
2015-01-28 20:15 - 2015-01-28 20:15 - 00388608 _____ (Trend Micro Inc.) C:\Users\PEPA\Desktop\HijackThis.exe
2015-01-28 19:21 - 2015-01-28 19:21 - 00000000 ____D () C:\Users\PEPA\AppData\Local\Microsoft Corporation
2015-01-28 19:20 - 2015-01-28 19:20 - 00002165 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Poradce pro upgrade na systém Windows 7.lnk
2015-01-28 19:20 - 2015-01-28 19:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Windows 7 Upgrade Advisor
2015-01-28 19:16 - 2014-12-31 13:15 - 110348472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MRT.exe
2015-01-27 18:55 - 2015-01-27 18:55 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\ProductData
2015-01-27 18:55 - 2015-01-27 18:55 - 00000000 ____D () C:\ProgramData\IObit
2015-01-27 18:55 - 2015-01-27 18:55 - 00000000 ____D () C:\Program Files (x86)\IObit
2015-01-25 15:24 - 2015-01-25 20:02 - 00003136 _____ () C:\Windows\System32\Tasks\{098E90FD-0D71-4F71-9A0A-F30DF4EFFE3D}
2015-01-25 15:17 - 2015-01-25 20:03 - 00003136 _____ () C:\Windows\System32\Tasks\{CE2C425D-E7A0-4825-AEF0-02DCCC9A0944}
2015-01-25 14:42 - 2015-01-25 14:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2015-01-25 14:42 - 2009-05-01 00:00 - 00128392 _____ (Seiko Epson Corporation) C:\Windows\system32\esdevapp.exe
2015-01-25 14:42 - 2009-05-01 00:00 - 00017408 _____ (SEIKO EPSON CORP.) C:\Windows\system32\esxcdev.dll
2015-01-25 14:42 - 2008-11-17 00:00 - 00459776 _____ (Seiko Epson Corporation) C:\Windows\system32\esxwiaud.dll
2015-01-25 14:34 - 2015-01-25 20:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2015-01-25 14:05 - 2015-01-25 20:03 - 00003124 _____ () C:\Windows\System32\Tasks\{815E2FE5-1C5A-4C6B-845A-3E42F65EBA89}
2015-01-25 13:49 - 2015-01-25 20:03 - 00003124 _____ () C:\Windows\System32\Tasks\{4428619B-D877-4ECE-9663-012F947663D1}
2015-01-25 13:41 - 2015-01-25 13:41 - 05641056 _____ (Canneverbe Limited ) C:\Users\PEPA\Downloads\CDBurnerXP_v4.5.4.5306.exe
2015-01-24 10:28 - 2015-01-24 10:28 - 00008655 _____ () C:\Users\Alexandra\Desktop\Gran Canaria.odt
2015-01-21 09:31 - 2015-01-21 09:32 - 00000000 _____ () C:\Users\PEPA\vssadmin
2015-01-21 08:31 - 2015-01-21 08:31 - 04877488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-01-21 00:38 - 2001-07-16 21:33 - 00421888 _____ () C:\Users\PEPA\Downloads\DeadPixelTest.exe
2015-01-20 23:43 - 2015-02-06 04:32 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-01-20 23:43 - 2015-01-20 23:43 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2015-01-20 23:15 - 2015-02-10 08:17 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 5
2015-01-20 23:15 - 2015-01-26 16:34 - 00000326 _____ () C:\Windows\Tasks\GlaryInitialize 5.job
2015-01-20 23:15 - 2015-01-25 20:02 - 00002966 _____ () C:\Windows\System32\Tasks\GU5SkipUAC
2015-01-20 23:15 - 2015-01-25 20:02 - 00002616 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5
2015-01-20 23:15 - 2015-01-20 23:15 - 00020160 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUBootStartup.sys
2015-01-20 23:15 - 2015-01-20 23:15 - 00001106 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2015-01-20 23:15 - 2015-01-20 23:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2015-01-20 23:09 - 2015-01-25 20:02 - 00003224 _____ () C:\Windows\System32\Tasks\{1CB3FE36-A7A4-4485-B00F-57C3CF32021D}
2015-01-20 10:20 - 2015-01-25 20:03 - 00003260 _____ () C:\Windows\System32\Tasks\{89CF83F6-85B1-4125-AB38-277A763DD6EF}
2015-01-15 21:58 - 2015-01-15 22:11 - 00000000 ____D () C:\Users\PEPA\AppData\Local\Microsoft Games
2015-01-15 19:56 - 2015-01-20 01:16 - 00000000 ____D () C:\Users\PEPA\AppData\Local\PDFCreator
2015-01-15 18:30 - 2015-01-15 18:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer
2015-01-15 18:30 - 2015-01-15 18:30 - 00000000 ____D () C:\Program Files\Tracker Software
2015-01-15 06:42 - 2015-01-15 06:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2015-01-15 06:38 - 2015-01-15 06:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-15 06:38 - 2015-01-15 06:38 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-14 06:17 - 2015-01-14 06:17 - 00000730 _____ () C:\Users\Alexandra\Desktop\02 - SAŠENKA dokumenty – zástupce.lnk
2015-01-13 22:09 - 2015-01-14 06:22 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\PDF Architect 2
2015-01-13 21:57 - 2015-01-13 21:57 - 00000000 ____D () C:\Users\PEPA\Documents\PDF Architect 2
2015-01-13 21:57 - 2015-01-13 21:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2015-01-13 21:57 - 2015-01-13 21:57 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2015-01-13 21:55 - 2015-01-15 19:29 - 00000000 ____D () C:\Program Files\PDFCreator
2015-01-13 21:55 - 2015-01-13 21:55 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2015-01-13 21:55 - 2014-12-16 20:01 - 00114872 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2015-01-13 21:29 - 2015-01-13 21:29 - 00000000 ____D () C:\Users\PEPA\Documents\My eBooks
2015-01-13 21:16 - 2015-01-13 21:18 - 00000000 ____D () C:\Bitová kopie
2015-01-13 20:34 - 2015-01-13 20:34 - 00032256 _____ () C:\Users\PEPA\Desktop\Ascii.xls
2015-01-13 10:29 - 2015-01-13 10:44 - 00010330 _____ () C:\Users\Alexandra\Desktop\WELNESS únor 2015.odt
2015-01-12 14:29 - 2015-01-13 11:14 - 00008862 _____ () C:\Users\Alexandra\Desktop\kempy v PROVENCI.odt
2015-01-11 22:46 - 2015-01-15 06:38 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-11 15:33 - 2015-01-11 15:33 - 00000000 ____D () C:\Users\PEPA\Documents\1-SAMSUNG sIII mini

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-10 10:43 - 2014-01-15 08:11 - 01616858 _____ () C:\Windows\WindowsUpdate.log
2015-02-10 09:45 - 2009-07-14 05:45 - 00015184 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-10 09:45 - 2009-07-14 05:45 - 00015184 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-10 09:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-10 09:39 - 2014-03-18 20:16 - 05171240 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-10 09:37 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-10 08:57 - 2011-01-27 19:10 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-10 08:57 - 2009-07-14 03:34 - 00000215 ____N () C:\Windows\system.ini
2015-02-10 08:52 - 2012-11-23 16:50 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-02-10 08:29 - 2014-12-16 16:09 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-10 08:19 - 2014-09-20 23:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
2015-02-10 07:50 - 2011-01-27 10:30 - 00000000 ____D () C:\Recovery
2015-02-10 07:08 - 2011-09-27 19:06 - 00000000 ____D () C:\Program Files (x86)\The KMPlayer
2015-02-09 23:53 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2015-02-09 17:08 - 2009-07-14 16:18 - 00677722 _____ () C:\Windows\system32\perfh005.dat
2015-02-09 17:08 - 2009-07-14 16:18 - 00146640 _____ () C:\Windows\system32\perfc005.dat
2015-02-09 17:08 - 2009-07-14 06:13 - 01612504 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-09 17:03 - 2014-02-28 20:36 - 00004184 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-02-09 17:01 - 2011-09-19 07:58 - 00240082 _____ () C:\Windows\SysWOW64\DTSSL.log
2015-02-08 23:53 - 2013-09-27 18:11 - 00233984 ___SH () C:\Users\Alexandra\Thumbs.db
2015-02-05 19:33 - 2014-03-28 10:29 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-02-04 22:19 - 2011-01-27 16:38 - 00000000 ____D () C:\Users\PEPA\Desktop\Zástupci
2015-02-04 13:36 - 2013-06-05 00:19 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-04 13:36 - 2013-06-05 00:19 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-03 18:20 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-02-02 06:50 - 2014-06-16 05:50 - 00000000 ____D () C:\Users\PEPA\Desktop\Photoextarct
2015-02-01 12:26 - 2013-09-10 22:56 - 00000000 ____D () C:\Program Files\CCleaner
2015-01-28 20:49 - 2012-07-15 16:12 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-01-27 21:36 - 2012-04-28 21:04 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\uTorrent
2015-01-27 18:55 - 2011-09-15 19:46 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\IObit
2015-01-27 18:43 - 2011-12-26 12:42 - 00003150 _____ () C:\Windows\System32\Tasks\SidebarExecute
2015-01-27 18:42 - 2011-01-27 16:33 - 00003530 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask
2015-01-27 18:07 - 2012-08-01 21:51 - 00007611 _____ () C:\Users\PEPA\AppData\Local\resmon.resmoncfg
2015-01-26 16:40 - 2015-01-04 09:48 - 00000000 ____D () C:\Windows\pss
2015-01-26 16:34 - 2012-04-03 14:31 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-25 20:03 - 2011-12-07 09:56 - 00003264 _____ () C:\Windows\System32\Tasks\{901739CC-1603-4D6E-8193-D0EA4AFFAB5F}
2015-01-25 20:03 - 2011-10-25 18:09 - 00003324 _____ () C:\Windows\System32\Tasks\{6C003E3B-AD14-42D4-9FC4-09467E7AA6D5}
2015-01-25 20:03 - 2011-10-25 17:59 - 00003328 _____ () C:\Windows\System32\Tasks\{B9C92C0B-0475-4DC4-800E-81408EE4499D}
2015-01-25 20:03 - 2011-10-25 17:50 - 00003328 _____ () C:\Windows\System32\Tasks\{2DAC306C-62B6-4C69-AA8E-83187FE612E4}
2015-01-25 20:03 - 2011-10-24 18:30 - 00003228 _____ () C:\Windows\System32\Tasks\{95676CF7-69D4-450F-AC2C-2D9C44479B9A}
2015-01-25 20:03 - 2011-09-16 18:13 - 00003170 _____ () C:\Windows\System32\Tasks\{4574AE22-32B5-4EE4-84EB-6412FBF0B3F1}
2015-01-25 20:02 - 2014-03-28 10:51 - 00002856 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (PEPA)
2015-01-25 20:02 - 2012-04-03 14:31 - 00003854 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-01-25 20:02 - 2011-12-07 09:45 - 00003256 _____ () C:\Windows\System32\Tasks\{0558E906-A9EC-4003-A3A1-02A2D4172A2C}
2015-01-25 15:18 - 2011-08-19 06:22 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2015-01-25 14:53 - 2011-08-19 06:54 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\Epson
2015-01-25 14:42 - 2011-08-19 06:19 - 00000000 ____D () C:\Program Files (x86)\epson
2015-01-25 13:28 - 2011-01-27 10:30 - 00000000 ____D () C:\Users\PEPA
2015-01-25 12:46 - 2011-03-27 10:35 - 00000000 ____D () C:\Users\PEPA\Desktop\kontakty
2015-01-23 12:56 - 2011-01-28 17:14 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2015-01-23 11:57 - 2009-07-14 06:08 - 00032622 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-01-21 08:31 - 2012-04-03 14:31 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-21 08:31 - 2011-08-22 09:21 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-20 23:46 - 2011-07-02 19:28 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\GlarySoft
2015-01-20 23:40 - 2011-09-28 09:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exact Audio Copy
2015-01-20 23:37 - 2013-08-16 08:01 - 00000000 ____D () C:\ProgramData\GlarySoft
2015-01-20 23:17 - 2011-07-23 18:34 - 00002990 _____ () C:\Windows\System32\Tasks\{A6DDF1B3-5FA2-4804-AEBA-5CAA39D27286}
2015-01-20 22:45 - 2012-11-07 10:22 - 00000000 ____D () C:\Users\PEPA\Documents\XY
2015-01-17 13:05 - 2012-05-07 19:45 - 00000000 ____D () C:\Users\Alexandra\AppData\Roaming\Skype
2015-01-15 22:07 - 2012-05-07 20:25 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\Skype
2015-01-15 19:25 - 2014-10-02 17:59 - 00000000 ____D () C:\Users\PEPA\Desktop\PC
2015-01-15 18:25 - 2011-01-27 17:06 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-15 06:38 - 2014-01-19 10:13 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-13 21:36 - 2011-08-30 18:10 - 00000000 ____D () C:\Users\PEPA\AppData\Local\Adobe
2015-01-12 11:20 - 2014-11-01 13:13 - 00000000 ____D () C:\Users\Alexandra\Desktop\FOTKY DO OBÝVÁKU
2015-01-11 13:01 - 2012-03-01 09:44 - 00001910 _____ () C:\Users\PEPA\Desktop\Nový textový dokument.txt

==================== Files in the root of some directories =======

2013-10-06 08:21 - 2013-10-06 08:21 - 0000055 _____ () C:\Users\PEPA\AppData\Roaming\pcouffin.log
2015-01-28 20:29 - 2015-01-28 20:29 - 0170880 _____ () C:\Users\PEPA\AppData\Local\ars.cache
2015-01-28 20:29 - 2015-01-28 20:29 - 0211863 _____ () C:\Users\PEPA\AppData\Local\census.cache
2012-04-07 11:48 - 2012-04-07 11:48 - 0000092 _____ () C:\Users\PEPA\AppData\Local\fusioncache.dat
2015-01-28 20:22 - 2015-01-28 20:22 - 0000036 _____ () C:\Users\PEPA\AppData\Local\housecall.guid.cache
2012-08-01 21:51 - 2015-01-27 18:07 - 0007611 _____ () C:\Users\PEPA\AppData\Local\resmon.resmoncfg
2014-04-10 07:46 - 2014-04-10 07:46 - 0000000 _____ () C:\ProgramData\PKP_DLet.DAT
2014-05-03 12:53 - 2014-05-03 12:53 - 0000000 _____ () C:\ProgramData\PKP_DLev.DAT

Some zero byte size files/folders:
==========================
C:\Windows\logo_1.exe
C:\Windows\VDLL.DLL
C:\Windows\SysWOW64\runouce.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-03 00:07

==================== End Of Log ============================

[gajo64]

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-02-2015
Ran by PEPA (administrator) on PEPA3 on 10-02-2015 10:50:55
Running from C:\Users\PEPA\Desktop
Loaded Profiles: PEPA (Available profiles: PEPA & Alexandra)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\System32\snmptrap.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(KMP Media co.,Ltd) C:\Program Files (x86)\The KMPlayer\KMPlayer.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Adobe\Adobe Photoshop CS3\Photoshop.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-27] (AVAST Software)
HKLM-x32\...\Run: [ATICustomerCare] => C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe [311296 2010-05-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-02-17] (InstallShield Software Corporation)
HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\...\Run: [ISUSPM Startup] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-17] (InstallShield Software Corporation)
HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x99000000
HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\...\Policies\Explorer: [NoResolveSearch] 1
Startup: C:\Users\Alexandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3752027927-3630821355-4230685425-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll (pdfforge GmbH)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll File Not found ()
Tcpip\Parameters: [DhcpNameServer] 93.153.117.33 93.153.117.1 8.8.8.8
Tcpip\..\Interfaces\{70ECFAA1-2CC5-4AD7-B4FD-F7F85AA49E16}: [NameServer] 8.8.8.8,8.8.4.4

FireFox:
========
FF ProfilePath: C:\Users\PEPA\AppData\Roaming\Mozilla\Firefox\Profiles\kiafm9yz.default-1385755089184
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q=
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.7.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll No File
FF Plugin HKU\S-1-5-21-3752027927-3630821355-4230685425-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-02-28]
FF Extension: No Name - C:\Users\PEPA\AppData\Roaming\Mozilla\Firefox\Profiles\kiafm9yz.default-1385755089184\extensions\ascsurfingprotection@iobit.com [Not Found]
FF Extension: No Name - C:\Program Files (x86)\IObit Apps Toolbar\FF [Not Found]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.cz/
CHR StartupUrls: Default -> "https://www.seznam.cz/", "https://www.google.cz/#q=google"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-09]
CHR Extension: (Disk Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-10]
CHR Extension: (YouTube) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-09]
CHR Extension: (Vyhledávání Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-09]
CHR Extension: (500px) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Default\Extensions\egpociadnldbkfkjpmjoaibnbcoeplja [2014-04-13]
CHR Extension: (Universe) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlkepiaokmmeefmfichjiennfpdclcee [2014-02-10]
CHR Extension: (Gmail) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-09]
CHR Profile: C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Prezentace Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-09]
CHR Extension: (Dokumenty Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-09]
CHR Extension: (Disk Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-09]
CHR Extension: (YouTube) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-09]
CHR Extension: (Vyhledávání Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-09]
CHR Extension: (Tabulky Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-09]
CHR Extension: (Avast Online Security) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-02-09]
CHR Extension: (Peněženka Google) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-09]
CHR Extension: (Gmail) - C:\Users\PEPA\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-09]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-27]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 Asset Management Daemon; C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\AM\dtsslsrv.exe [118784 2009-03-20] () [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-27] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-27] (Avast Software)
S4 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe [69632 2009-03-20] () [File not signed]
S4 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2011-09-18] (Macrovision Europe Ltd.) [File not signed]
S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-09-08] ()
S4 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
S4 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S4 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AQFileRestore; C:\Windows\System32\DRIVERS\AQFileRestore.sys [21040 2012-01-12] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-27] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-27] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-27] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-27] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-27] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-27] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-27] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-27] ()
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20160 2015-01-20] (Glarysoft Ltd)
R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20520 2009-03-20] (Portrait Displays, Inc.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-27] (Avast Software)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-10 10:50 - 2015-02-10 10:51 - 00016305 _____ () C:\Users\PEPA\Desktop\FRST.txt
2015-02-10 10:50 - 2015-02-10 10:50 - 00000000 ____D () C:\FRST
2015-02-10 10:50 - 2015-02-10 10:48 - 02132992 _____ (Farbar) C:\Users\PEPA\Desktop\FRST64.exe
2015-02-10 10:48 - 2015-02-10 10:48 - 02132992 _____ (Farbar) C:\Users\PEPA\Downloads\FRST64.exe
2015-02-10 10:47 - 2015-02-10 10:47 - 00985600 _____ () C:\Users\PEPA\Downloads\MicrosoftFixit50123.msi
2015-02-10 10:41 - 2015-02-10 10:41 - 00302011 _____ () C:\Users\PEPA\Downloads\WindowsUpdateDiagnostic.diagcab
2015-02-10 10:40 - 2015-02-10 10:40 - 00347816 _____ (Microsoft Corporation) C:\Users\PEPA\Downloads\MicrosoftFixit.wu.LB.23734698804794924.8.1.Run.exe
2015-02-10 10:35 - 2015-02-10 10:35 - 00347816 _____ (Microsoft Corporation) C:\Users\PEPA\Downloads\MicrosoftFixit.wu.FISC.23734698804794924.1.1.Run.exe
2015-02-09 23:24 - 2015-02-10 09:33 - 00000000 ____D () C:\Windows\erdnt
2015-02-09 23:07 - 2015-02-10 08:16 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\Uniblue
2015-02-09 23:07 - 2015-02-09 23:07 - 00001196 _____ () C:\Users\PEPA\Desktop\CrystalDiskInfo.lnk
2015-02-09 23:07 - 2015-02-09 23:07 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\OpenCandy
2015-02-09 23:07 - 2015-02-09 23:07 - 00000000 ____D () C:\Program Files (x86)\CrystalDiskInfo
2015-02-09 17:41 - 2015-02-09 17:45 - 00000000 ____D () C:\Users\Alexandra\Desktop\fotky z Karlovic
2015-02-09 17:05 - 2015-02-09 17:41 - 00000000 ____D () C:\Users\Alexandra\Desktop\Velké Karlovice 2015
2015-02-09 11:08 - 2015-02-09 11:08 - 02997112 _____ (Crystal Dew World ) C:\Users\PEPA\Desktop\CrystalDiskInfo6_2_2-en.exe
2015-02-09 00:21 - 2015-02-08 23:54 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-02-08 23:57 - 2015-02-05 20:22 - 00002377 _____ () C:\zoek-results2015-02-05-192221.log
2015-02-06 04:32 - 2015-02-10 09:37 - 00001456 _____ () C:\Windows\setupact.log
2015-02-06 04:32 - 2015-02-10 08:56 - 00009376 _____ () C:\Windows\PFRO.log
2015-02-06 04:32 - 2015-02-06 04:32 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-05 19:45 - 2015-02-04 22:36 - 00035645 _____ () C:\zoek-results2015-02-04-213630.log
2015-02-04 22:28 - 2015-02-03 18:20 - 00006004 _____ () C:\zoek-results2015-02-03-172021.log
2015-02-03 17:53 - 2015-02-09 07:05 - 00011979 _____ () C:\zoek-results.log
2015-02-03 17:49 - 2015-02-08 23:40 - 00019926 _____ () C:\Users\PEPA\Desktop\Rady.odt
2015-02-03 17:49 - 2015-02-05 20:22 - 00000000 ____D () C:\zoek_backup
2015-02-03 17:47 - 2015-02-03 17:48 - 01295360 _____ () C:\Users\PEPA\Desktop\zoek.exe
2015-02-03 05:48 - 2015-02-09 22:57 - 00037624 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2015-02-03 05:48 - 2015-02-03 05:48 - 18570328 _____ () C:\Users\PEPA\Desktop\RogueKillerX64.exe
2015-02-03 05:48 - 2015-02-03 05:48 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-02-02 21:03 - 2015-02-02 21:04 - 01388274 _____ (Thisisu) C:\Users\PEPA\Desktop\JRT.exe
2015-02-01 13:17 - 2015-02-02 20:55 - 00000000 ____D () C:\AdwCleaner
2015-02-01 13:15 - 2015-02-01 13:15 - 02194432 _____ () C:\Users\PEPA\Downloads\adwcleaner_4.109.exe
2015-02-01 13:04 - 2015-02-01 13:04 - 00448512 _____ (OldTimer Tools) C:\Users\PEPA\Downloads\TFC.exe
2015-02-01 12:26 - 2015-02-01 12:26 - 05325208 _____ (Piriform Ltd) C:\Users\PEPA\Downloads\ccsetup502.exe
2015-01-28 21:57 - 2015-01-28 21:57 - 00003006 _____ () C:\Windows\System32\Tasks\{196A2E13-4290-438C-9686-A766E91EF9EB}
2015-01-28 21:55 - 2015-01-28 21:55 - 00002978 _____ () C:\Windows\System32\Tasks\{36AA9F29-E33A-49F2-967A-C779EB429DCC}
2015-01-28 21:55 - 2015-01-28 21:55 - 00000000 ____D () C:\Users\PEPA\AppData\Local\Tracker Software
2015-01-28 21:52 - 2015-01-28 21:52 - 00003006 _____ () C:\Windows\System32\Tasks\{E45B8A58-569D-4984-853B-3C1E384A59DB}
2015-01-28 21:32 - 2015-02-01 14:23 - 00000000 ____D () C:\Users\PEPA\Desktop\Nový problém s PC
2015-01-28 20:29 - 2015-01-28 20:29 - 00211863 _____ () C:\Users\PEPA\AppData\Local\census.cache
2015-01-28 20:29 - 2015-01-28 20:29 - 00170880 _____ () C:\Users\PEPA\AppData\Local\ars.cache
2015-01-28 20:23 - 2013-09-28 03:56 - 00285208 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmcomm.sys
2015-01-28 20:22 - 2015-01-28 20:22 - 00000036 _____ () C:\Users\PEPA\AppData\Local\housecall.guid.cache
2015-01-28 20:21 - 2015-01-28 20:21 - 02494560 _____ (Trend Micro Inc.) C:\Users\PEPA\Downloads\HousecallLauncher64.exe
2015-01-28 20:15 - 2015-01-28 20:15 - 00388608 _____ (Trend Micro Inc.) C:\Users\PEPA\Desktop\HijackThis.exe
2015-01-28 19:21 - 2015-01-28 19:21 - 00000000 ____D () C:\Users\PEPA\AppData\Local\Microsoft Corporation
2015-01-28 19:20 - 2015-01-28 19:20 - 00002165 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Poradce pro upgrade na systém Windows 7.lnk
2015-01-28 19:20 - 2015-01-28 19:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Windows 7 Upgrade Advisor
2015-01-28 19:16 - 2014-12-31 13:15 - 110348472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MRT.exe
2015-01-27 18:55 - 2015-01-27 18:55 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\ProductData
2015-01-27 18:55 - 2015-01-27 18:55 - 00000000 ____D () C:\ProgramData\IObit
2015-01-27 18:55 - 2015-01-27 18:55 - 00000000 ____D () C:\Program Files (x86)\IObit
2015-01-25 15:24 - 2015-01-25 20:02 - 00003136 _____ () C:\Windows\System32\Tasks\{098E90FD-0D71-4F71-9A0A-F30DF4EFFE3D}
2015-01-25 15:17 - 2015-01-25 20:03 - 00003136 _____ () C:\Windows\System32\Tasks\{CE2C425D-E7A0-4825-AEF0-02DCCC9A0944}
2015-01-25 14:42 - 2015-01-25 14:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2015-01-25 14:42 - 2009-05-01 00:00 - 00128392 _____ (Seiko Epson Corporation) C:\Windows\system32\esdevapp.exe
2015-01-25 14:42 - 2009-05-01 00:00 - 00017408 _____ (SEIKO EPSON CORP.) C:\Windows\system32\esxcdev.dll
2015-01-25 14:42 - 2008-11-17 00:00 - 00459776 _____ (Seiko Epson Corporation) C:\Windows\system32\esxwiaud.dll
2015-01-25 14:34 - 2015-01-25 20:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2015-01-25 14:05 - 2015-01-25 20:03 - 00003124 _____ () C:\Windows\System32\Tasks\{815E2FE5-1C5A-4C6B-845A-3E42F65EBA89}
2015-01-25 13:49 - 2015-01-25 20:03 - 00003124 _____ () C:\Windows\System32\Tasks\{4428619B-D877-4ECE-9663-012F947663D1}
2015-01-25 13:41 - 2015-01-25 13:41 - 05641056 _____ (Canneverbe Limited ) C:\Users\PEPA\Downloads\CDBurnerXP_v4.5.4.5306.exe
2015-01-24 10:28 - 2015-01-24 10:28 - 00008655 _____ () C:\Users\Alexandra\Desktop\Gran Canaria.odt
2015-01-21 09:31 - 2015-01-21 09:32 - 00000000 _____ () C:\Users\PEPA\vssadmin
2015-01-21 08:31 - 2015-01-21 08:31 - 04877488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-01-21 00:38 - 2001-07-16 21:33 - 00421888 _____ () C:\Users\PEPA\Downloads\DeadPixelTest.exe
2015-01-20 23:43 - 2015-02-06 04:32 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-01-20 23:43 - 2015-01-20 23:43 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2015-01-20 23:15 - 2015-02-10 08:17 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 5
2015-01-20 23:15 - 2015-01-26 16:34 - 00000326 _____ () C:\Windows\Tasks\GlaryInitialize 5.job
2015-01-20 23:15 - 2015-01-25 20:02 - 00002966 _____ () C:\Windows\System32\Tasks\GU5SkipUAC
2015-01-20 23:15 - 2015-01-25 20:02 - 00002616 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5
2015-01-20 23:15 - 2015-01-20 23:15 - 00020160 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUBootStartup.sys
2015-01-20 23:15 - 2015-01-20 23:15 - 00001106 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2015-01-20 23:15 - 2015-01-20 23:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2015-01-20 23:09 - 2015-01-25 20:02 - 00003224 _____ () C:\Windows\System32\Tasks\{1CB3FE36-A7A4-4485-B00F-57C3CF32021D}
2015-01-20 10:20 - 2015-01-25 20:03 - 00003260 _____ () C:\Windows\System32\Tasks\{89CF83F6-85B1-4125-AB38-277A763DD6EF}
2015-01-15 21:58 - 2015-01-15 22:11 - 00000000 ____D () C:\Users\PEPA\AppData\Local\Microsoft Games
2015-01-15 19:56 - 2015-01-20 01:16 - 00000000 ____D () C:\Users\PEPA\AppData\Local\PDFCreator
2015-01-15 18:30 - 2015-01-15 18:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer
2015-01-15 18:30 - 2015-01-15 18:30 - 00000000 ____D () C:\Program Files\Tracker Software
2015-01-15 06:42 - 2015-01-15 06:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2015-01-15 06:38 - 2015-01-15 06:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-15 06:38 - 2015-01-15 06:38 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-14 06:17 - 2015-01-14 06:17 - 00000730 _____ () C:\Users\Alexandra\Desktop\02 - SAŠENKA dokumenty – zástupce.lnk
2015-01-13 22:09 - 2015-01-14 06:22 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\PDF Architect 2
2015-01-13 21:57 - 2015-01-13 21:57 - 00000000 ____D () C:\Users\PEPA\Documents\PDF Architect 2
2015-01-13 21:57 - 2015-01-13 21:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2015-01-13 21:57 - 2015-01-13 21:57 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2015-01-13 21:55 - 2015-01-15 19:29 - 00000000 ____D () C:\Program Files\PDFCreator
2015-01-13 21:55 - 2015-01-13 21:55 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2015-01-13 21:55 - 2014-12-16 20:01 - 00114872 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2015-01-13 21:29 - 2015-01-13 21:29 - 00000000 ____D () C:\Users\PEPA\Documents\My eBooks
2015-01-13 21:16 - 2015-01-13 21:18 - 00000000 ____D () C:\Bitová kopie
2015-01-13 20:34 - 2015-01-13 20:34 - 00032256 _____ () C:\Users\PEPA\Desktop\Ascii.xls
2015-01-13 10:29 - 2015-01-13 10:44 - 00010330 _____ () C:\Users\Alexandra\Desktop\WELNESS únor 2015.odt
2015-01-12 14:29 - 2015-01-13 11:14 - 00008862 _____ () C:\Users\Alexandra\Desktop\kempy v PROVENCI.odt
2015-01-11 22:46 - 2015-01-15 06:38 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-11 15:33 - 2015-01-11 15:33 - 00000000 ____D () C:\Users\PEPA\Documents\1-SAMSUNG sIII mini

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-10 10:43 - 2014-01-15 08:11 - 01616858 _____ () C:\Windows\WindowsUpdate.log
2015-02-10 09:45 - 2009-07-14 05:45 - 00015184 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-10 09:45 - 2009-07-14 05:45 - 00015184 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-10 09:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-10 09:39 - 2014-03-18 20:16 - 05171240 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-10 09:37 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-10 08:57 - 2011-01-27 19:10 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-10 08:57 - 2009-07-14 03:34 - 00000215 ____N () C:\Windows\system.ini
2015-02-10 08:52 - 2012-11-23 16:50 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-02-10 08:29 - 2014-12-16 16:09 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-10 08:19 - 2014-09-20 23:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
2015-02-10 07:50 - 2011-01-27 10:30 - 00000000 ____D () C:\Recovery
2015-02-10 07:08 - 2011-09-27 19:06 - 00000000 ____D () C:\Program Files (x86)\The KMPlayer
2015-02-09 23:53 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2015-02-09 17:08 - 2009-07-14 16:18 - 00677722 _____ () C:\Windows\system32\perfh005.dat
2015-02-09 17:08 - 2009-07-14 16:18 - 00146640 _____ () C:\Windows\system32\perfc005.dat
2015-02-09 17:08 - 2009-07-14 06:13 - 01612504 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-09 17:03 - 2014-02-28 20:36 - 00004184 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-02-09 17:01 - 2011-09-19 07:58 - 00240082 _____ () C:\Windows\SysWOW64\DTSSL.log
2015-02-08 23:53 - 2013-09-27 18:11 - 00233984 ___SH () C:\Users\Alexandra\Thumbs.db
2015-02-05 19:33 - 2014-03-28 10:29 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-02-04 22:19 - 2011-01-27 16:38 - 00000000 ____D () C:\Users\PEPA\Desktop\Zástupci
2015-02-04 13:36 - 2013-06-05 00:19 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-04 13:36 - 2013-06-05 00:19 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-03 18:20 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-02-02 06:50 - 2014-06-16 05:50 - 00000000 ____D () C:\Users\PEPA\Desktop\Photoextarct
2015-02-01 12:26 - 2013-09-10 22:56 - 00000000 ____D () C:\Program Files\CCleaner
2015-01-28 20:49 - 2012-07-15 16:12 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-01-27 21:36 - 2012-04-28 21:04 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\uTorrent
2015-01-27 18:55 - 2011-09-15 19:46 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\IObit
2015-01-27 18:43 - 2011-12-26 12:42 - 00003150 _____ () C:\Windows\System32\Tasks\SidebarExecute
2015-01-27 18:42 - 2011-01-27 16:33 - 00003530 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask
2015-01-27 18:07 - 2012-08-01 21:51 - 00007611 _____ () C:\Users\PEPA\AppData\Local\resmon.resmoncfg
2015-01-26 16:40 - 2015-01-04 09:48 - 00000000 ____D () C:\Windows\pss
2015-01-26 16:34 - 2012-04-03 14:31 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-25 20:03 - 2011-12-07 09:56 - 00003264 _____ () C:\Windows\System32\Tasks\{901739CC-1603-4D6E-8193-D0EA4AFFAB5F}
2015-01-25 20:03 - 2011-10-25 18:09 - 00003324 _____ () C:\Windows\System32\Tasks\{6C003E3B-AD14-42D4-9FC4-09467E7AA6D5}
2015-01-25 20:03 - 2011-10-25 17:59 - 00003328 _____ () C:\Windows\System32\Tasks\{B9C92C0B-0475-4DC4-800E-81408EE4499D}
2015-01-25 20:03 - 2011-10-25 17:50 - 00003328 _____ () C:\Windows\System32\Tasks\{2DAC306C-62B6-4C69-AA8E-83187FE612E4}
2015-01-25 20:03 - 2011-10-24 18:30 - 00003228 _____ () C:\Windows\System32\Tasks\{95676CF7-69D4-450F-AC2C-2D9C44479B9A}
2015-01-25 20:03 - 2011-09-16 18:13 - 00003170 _____ () C:\Windows\System32\Tasks\{4574AE22-32B5-4EE4-84EB-6412FBF0B3F1}
2015-01-25 20:02 - 2014-03-28 10:51 - 00002856 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (PEPA)
2015-01-25 20:02 - 2012-04-03 14:31 - 00003854 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-01-25 20:02 - 2011-12-07 09:45 - 00003256 _____ () C:\Windows\System32\Tasks\{0558E906-A9EC-4003-A3A1-02A2D4172A2C}
2015-01-25 15:18 - 2011-08-19 06:22 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2015-01-25 14:53 - 2011-08-19 06:54 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\Epson
2015-01-25 14:42 - 2011-08-19 06:19 - 00000000 ____D () C:\Program Files (x86)\epson
2015-01-25 13:28 - 2011-01-27 10:30 - 00000000 ____D () C:\Users\PEPA
2015-01-25 12:46 - 2011-03-27 10:35 - 00000000 ____D () C:\Users\PEPA\Desktop\kontakty
2015-01-23 12:56 - 2011-01-28 17:14 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2015-01-23 11:57 - 2009-07-14 06:08 - 00032622 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-01-21 08:31 - 2012-04-03 14:31 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-21 08:31 - 2011-08-22 09:21 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-20 23:46 - 2011-07-02 19:28 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\GlarySoft
2015-01-20 23:40 - 2011-09-28 09:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exact Audio Copy
2015-01-20 23:37 - 2013-08-16 08:01 - 00000000 ____D () C:\ProgramData\GlarySoft
2015-01-20 23:17 - 2011-07-23 18:34 - 00002990 _____ () C:\Windows\System32\Tasks\{A6DDF1B3-5FA2-4804-AEBA-5CAA39D27286}
2015-01-20 22:45 - 2012-11-07 10:22 - 00000000 ____D () C:\Users\PEPA\Documents\XY
2015-01-17 13:05 - 2012-05-07 19:45 - 00000000 ____D () C:\Users\Alexandra\AppData\Roaming\Skype
2015-01-15 22:07 - 2012-05-07 20:25 - 00000000 ____D () C:\Users\PEPA\AppData\Roaming\Skype
2015-01-15 19:25 - 2014-10-02 17:59 - 00000000 ____D () C:\Users\PEPA\Desktop\PC
2015-01-15 18:25 - 2011-01-27 17:06 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-15 06:38 - 2014-01-19 10:13 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-13 21:36 - 2011-08-30 18:10 - 00000000 ____D () C:\Users\PEPA\AppData\Local\Adobe
2015-01-12 11:20 - 2014-11-01 13:13 - 00000000 ____D () C:\Users\Alexandra\Desktop\FOTKY DO OBÝVÁKU
2015-01-11 13:01 - 2012-03-01 09:44 - 00001910 _____ () C:\Users\PEPA\Desktop\Nový textový dokument.txt

==================== Files in the root of some directories =======

2013-10-06 08:21 - 2013-10-06 08:21 - 0000055 _____ () C:\Users\PEPA\AppData\Roaming\pcouffin.log
2015-01-28 20:29 - 2015-01-28 20:29 - 0170880 _____ () C:\Users\PEPA\AppData\Local\ars.cache
2015-01-28 20:29 - 2015-01-28 20:29 - 0211863 _____ () C:\Users\PEPA\AppData\Local\census.cache
2012-04-07 11:48 - 2012-04-07 11:48 - 0000092 _____ () C:\Users\PEPA\AppData\Local\fusioncache.dat
2015-01-28 20:22 - 2015-01-28 20:22 - 0000036 _____ () C:\Users\PEPA\AppData\Local\housecall.guid.cache
2012-08-01 21:51 - 2015-01-27 18:07 - 0007611 _____ () C:\Users\PEPA\AppData\Local\resmon.resmoncfg
2014-04-10 07:46 - 2014-04-10 07:46 - 0000000 _____ () C:\ProgramData\PKP_DLet.DAT
2014-05-03 12:53 - 2014-05-03 12:53 - 0000000 _____ () C:\ProgramData\PKP_DLev.DAT

Some zero byte size files/folders:
==========================
C:\Windows\logo_1.exe
C:\Windows\VDLL.DLL
C:\Windows\SysWOW64\runouce.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-03 00:07

==================== End Of Log ============================

[gajo64]

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-02-2015
Ran by PEPA at 2015-02-10 10:51:32
Running from C:\Users\PEPA\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKLM-x32\...\uTorrent) (Version: 3.1.3 - )
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.257 - Adobe Systems Incorporated)
Adobe Photoshop CS3 (HKLM-x32\...\Adobe_4977c84bcdc298c444ccfbdcccb660d) (Version: 10.0 - Adobe Systems Incorporated)
ATI AVIVO64 Codecs (Version: 10.9.0.40813 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (HKLM\...\{C5970161-E13E-6661-BBDA-A08268313C83}) (Version: 3.0.808.0 - ATI Technologies, Inc.)
ATI Catalyst Registration (x32 Version: 3.00.0000 - ATI Technologies Inc.) Hidden
ATI Stream SDK v2 Developer (HKLM\...\{22441735-5983-AD2A-5CC5-FA2CCD7EF732}) (Version: 2.3.0.0 - ATI Technologies Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: - )
Canon MP Navigator EX 3.1 (HKLM-x32\...\MP Navigator EX 3.1) (Version: - )
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version: - )
CanoScan 9000F Scanner Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_cnq9602) (Version: - )
ccc-core-static (x32 Version: 2011.0104.2155.39304 - Název společnosti:) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4643 - CDBurnerXP)
CrystalDiskInfo 6.2.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.2.2 - Crystal Dew World)
DMIView B8.0717.01 (HKLM-x32\...\{3EE1008C-11A1-4F4F-8DB7-27573924DE78}) (Version: 1.4 - Gigabyte)
Epson Easy Photo Print 2 (HKLM-x32\...\{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}) (Version: 2.1.0.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{48F22622-1CC2-4A83-9C1E-644DD96F832D}) (Version: 2.30.01 - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - )
Fotoknihy online (HKLM-x32\...\Fotoknihy online_Fotoknihy online) (Version: - )
Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 3.21.2.1 - Futuremark Corporation)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 2.5.0.0 - Genesys Logic)
Glary Utilities 5.17 (HKLM-x32\...\Glary Utilities 5) (Version: 5.17.0.30 - Glarysoft Ltd)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version: - )
HF Designer 4.4 (HKLM-x32\...\HappyFoto-Designer_is1) (Version: - )
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Malwarebytes Anti-Malware verze 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nikon File Uploader 2 (HKLM-x32\...\{D1E7142C-6BC3-49EB-A71A-E5D7ADAC7599}) (Version: 2.0.2 - Nikon)
Odinstalace tiskárny EPSON SX210 Series (HKLM\...\EPSON SX210 Series) (Version: - SEIKO EPSON Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice.org 3.2 (HKLM-x32\...\{5DE71D48-01EB-4BF2-A643-50FE6C9B6AC9}) (Version: 3.2.9483 - OpenOffice.org)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.51.17865 - pdfforge GmbH)
PDF Architect 2 Create Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 Edit Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 View Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.1 - pdfforge)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.214.1 - Tracker Software Products Ltd)
Picture Control Utility (HKLM-x32\...\{87441A59-5E64-4096-A170-14EFE67200C3}) (Version: 1.2.1 - Nikon)
Picture Control Utility x64 (HKLM\...\{11953C65-BB4E-4CA4-B0F0-2600A4B20040}) (Version: 1.5.0 - Nikon)
Pivot Software (x32 Version: 9.03.004 - Portrait Displays, Inc.) Hidden
Poradce pro upgrade na systém Windows 7 (HKLM-x32\...\{C3A13A35-63AC-427a-92E6-960C1D01FABB}) (Version: 2.0.5000.0 - Microsoft Corporation)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0008 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7161 - Realtek Semiconductor Corp.)
SDK (x32 Version: 2.13.079 - Portrait Displays, Inc.) Hidden
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
SmartControl II (HKLM-x32\...\{FDA7A7CB-F1DE-42A9-83A6-27BE6CD6E8F3}) (Version: 1.30.003 - Portrait Displays, Inc.)
Sweet Home 3D version 3.2 (HKLM-x32\...\Sweet Home 3D_is1) (Version: - eTeks)
TreeSize Professional V5.4.4 (HKLM-x32\...\TreeSize Professional_is1) (Version: 5.4.4 - JAM Software)
ViewNX 2 (HKLM\...\{635BE602-BB9C-4C59-8CC5-93F9366E8A21}) (Version: 2.9.0 - Nikon)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows Surface Scanner 2.10 (HKLM-x32\...\Windows Surface Scanner 2.10) (Version: - )
WinRAR (HKLM\...\WinRAR archiver) (Version: - )
WMV9/VC-1 Video Playback (Version: 1.00.0000 - ATI Technologies Inc.) Hidden
Xleaner v4.27.1353 (HKLM-x32\...\{72D84E46-E633-4729-8A77-2347C8CD4096}_is1) (Version: - More Than A Cleaner.de)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points =========================


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2015-02-10 08:57 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {00D0EDCB-111A-4B0A-B2B8-B200840AA94C} - System32\Tasks\{815E2FE5-1C5A-4C6B-845A-3E42F65EBA89} => pcalua.exe -a C:\Users\PEPA\Downloads\epson376663eu.exe -d C:\Users\PEPA\Downloads
Task: {1A4EFA35-1F1D-4715-A14B-51F6E99CB436} - System32\Tasks\{89CF83F6-85B1-4125-AB38-277A763DD6EF} => pcalua.exe -a "C:\Users\PEPA\Desktop\Zástupci\3 - STAHOVÁNÍ\FreeRapid-0.9u4\frd.exe" -d "C:\Users\PEPA\Desktop\Zástupci\3 - STAHOVÁNÍ\FreeRapid-0.9u4"
Task: {22A182E4-37B3-4A80-AC22-E46E01110332} - System32\Tasks\{1CB3FE36-A7A4-4485-B00F-57C3CF32021D} => pcalua.exe -a "D:\1 - POMOCNÉ PROGRAMY\ČIŠTĚNÍ\Glary Utilities\uninstaller.exe" -d "D:\1 - POMOCNÉ PROGRAMY\ČIŠTĚNÍ\Glary Utilities"
Task: {2B16A268-8CC3-4D89-A581-7A73689752FB} - System32\Tasks\{901739CC-1603-4D6E-8193-D0EA4AFFAB5F} => pcalua.exe -a "C:\Users\PEPA\Desktop\Zástupci\3 - STAHOVÁNÍ\FreeRapid-0.86u1\frd.exe" -d "C:\Users\PEPA\Desktop\Zástupci\3 - STAHOVÁNÍ\FreeRapid-0.86u1"
Task: {2C7B4EF4-4AB8-4B49-BC62-F855545E7AF5} - System32\Tasks\Driver Booster SkipUAC (PEPA) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {4735B845-71FB-4B2F-87C6-AF58CE6957AA} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [2015-01-19] (Glarysoft Ltd)
Task: {5923294C-90CB-4E58-95E2-0C7C25324AB0} - System32\Tasks\{90CE2496-1D8F-4C28-A231-8E611447FB89} => C:\Program Files (x86)\PC Fresh\PC Fresh.exe
Task: {5D63EC25-6E34-4788-90D4-38D7B387D4B8} - System32\Tasks\{36AA9F29-E33A-49F2-967A-C779EB429DCC} => C:\Program Files\Tracker Software\Live Update\LiveUpdate.exe [2014-01-08] (Tracker Software Products (Canada) Ltd.)
Task: {717ADD18-9F62-4362-B1A4-29D57DB94482} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [2015-01-19] (Glarysoft Ltd)
Task: {83F54093-A24C-4B63-8D41-371104D532D7} - System32\Tasks\{2DAC306C-62B6-4C69-AA8E-83187FE612E4} => pcalua.exe -a "C:\Users\PEPA\Downloads\2 - Stahování +přehrávače\Free Rapid\FRD_0.85u1-final\frd.exe" -d "C:\Users\PEPA\Downloads\2 - Stahování +přehrávače\Free Rapid\FRD_0.85u1-final"
Task: {88F1FA76-F5F8-4E0B-B2D1-75BEDFC54535} - System32\Tasks\{0558E906-A9EC-4003-A3A1-02A2D4172A2C} => pcalua.exe -a "C:\Users\PEPA\Desktop\Zástupci\3 - STAHOVÁNÍ\FreeRapid-0.86\frd.exe" -d "C:\Users\PEPA\Desktop\Zástupci\3 - STAHOVÁNÍ\FreeRapid-0.86"
Task: {89A5C956-64E6-4730-93FD-2DA767D1065C} - System32\Tasks\{778FFFAA-1DB4-42B6-8910-3E9EFEC1CD97} => pcalua.exe -a "H:\PC INSTALL FILES\setup.exe" -d "H:\PC INSTALL FILES"
Task: {9E5BB473-25F6-442F-BFA6-B943F2E60EA6} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3752027927-3630821355-4230685425-1001
Task: {A233AEEF-AC9C-4C6A-B731-1DB29C098C81} - System32\Tasks\{E45B8A58-569D-4984-853B-3C1E384A59DB} => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\isuspm.exe [2005-02-17] (InstallShield Software Corporation)
Task: {A48F8255-A2DC-4720-8CBA-99FED736053C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {A9904F77-188D-4631-8E36-F627510F9CC1} - System32\Tasks\{196A2E13-4290-438C-9686-A766E91EF9EB} => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\isuspm.exe [2005-02-17] (InstallShield Software Corporation)
Task: {AB838064-8F75-4707-A51D-62CAD76C4D2C} - System32\Tasks\{CE2C425D-E7A0-4825-AEF0-02DCCC9A0944} => pcalua.exe -a "C:\Users\PEPA\Downloads\epson323749eu (1).exe" -d C:\Users\PEPA\Downloads
Task: {AC78BBB3-19D2-49E5-9733-8019E79F7BBB} - System32\Tasks\{A6DDF1B3-5FA2-4804-AEBA-5CAA39D27286} => C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe [2013-10-07] (Google)
Task: {AFC05EF9-311D-4BAF-90A4-56A2B8294712} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {B182A0F6-2878-487A-8A84-54F4D4BCFFFD} - System32\Tasks\{6C003E3B-AD14-42D4-9FC4-09467E7AA6D5} => pcalua.exe -a "C:\Users\PEPA\Downloads\2 - Stahování_přehrávače\Free Rapid\FreeRapid-0.85u1\frd.exe" -d "C:\Users\PEPA\Downloads\2 - Stahování_přehrávače\Free Rapid\FreeRapid-0.85u1"
Task: {B521EEBA-7640-4D14-AE06-AD927071E06C} - System32\Tasks\{4574AE22-32B5-4EE4-84EB-6412FBF0B3F1} => pcalua.exe -a "C:\Program Files (x86)\The KMPlayer\KMPSetup.exe" -d "C:\Program Files (x86)\The KMPlayer"
Task: {B72EE932-DBA1-49F0-B67B-8C158CADAC1C} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-11-27] (AVAST Software)
Task: {BB9EA86E-1213-4AEC-A990-08E2B3764A4E} - System32\Tasks\{4428619B-D877-4ECE-9663-012F947663D1} => pcalua.exe -a C:\Users\PEPA\Downloads\epson323814eu.exe -d C:\Users\PEPA\Downloads
Task: {C4FD8520-A241-436F-8DE9-192132FE83A1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-21] (Adobe Systems Incorporated)
Task: {C8B345CF-FD15-424B-A8F9-ECEFDCBF8F4D} - System32\Tasks\{266E81FD-2B6A-4F0F-9631-E13DABDE2A2E} => pcalua.exe -a C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe -c /M{FAE188FD-A941-49E9-A5E9-F6D88517EC40}
Task: {D3A9442E-60BA-4DF2-9927-7FDBB854FCD3} - System32\Tasks\{8F2C006A-A3DF-40D9-BA8F-1F98BF4D6798} => Firefox.exe http://ui.skype.com/ui/0/5.9.0.115/cs/a ... age=tsMain
Task: {D8C8AE52-5048-425F-B079-8830A020AD48} - System32\Tasks\{C288E3E5-A469-4649-A512-E4F85A349D4E} => pcalua.exe -a "F:\04 - Užitečné\1 - OCHRANA PC\SCANNER MWAV\mwav.exe" -d "F:\04 - Užitečné\1 - OCHRANA PC\SCANNER MWAV"
Task: {D9929003-4797-49C7-BB39-C9E2B80EF5D9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-01-20] (Piriform Ltd)
Task: {E4AED5B0-EEA4-40D9-887D-70CF1886A22D} - System32\Tasks\{098E90FD-0D71-4F71-9A0A-F30DF4EFFE3D} => pcalua.exe -a "C:\Users\PEPA\Downloads\epson376663eu (1).exe" -d C:\Users\PEPA\Downloads
Task: {E5636B01-9EE6-4B76-911D-DA43AF41C6F6} - System32\Tasks\{B9C92C0B-0475-4DC4-800E-81408EE4499D} => pcalua.exe -a "C:\Users\PEPA\Downloads\2 - Stahování +přehrávače\Free Rapid\FreeRapid-0.85u1\frd.exe" -d "C:\Users\PEPA\Downloads\2 - Stahování +přehrávače\Free Rapid\FreeRapid-0.85u1"
Task: {FAE5FB3F-E49A-49D7-A3A6-39D3FF15BF6C} - System32\Tasks\{95676CF7-69D4-450F-AC2C-2D9C44479B9A} => pcalua.exe -a "C:\Users\PEPA\Downloads\Nová složka\FreeRapid-0.85u1\frd.exe" -d "C:\Users\PEPA\Downloads\Nová složka\FreeRapid-0.85u1"
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GlaryInitialize 5.job => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe

==================== Loaded Modules (whitelisted) ==============

2011-01-29 10:19 - 2010-03-15 11:28 - 00166400 _____ () C:\Program Files\WinRAR\rarext.dll
2012-11-16 18:15 - 2009-09-08 22:12 - 00116104 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2014-11-27 04:40 - 2014-11-27 04:40 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2014-11-27 04:40 - 2014-11-27 04:40 - 05851328 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2014-11-27 04:40 - 2014-11-27 04:40 - 04495336 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll
2015-02-10 09:40 - 2015-02-10 09:40 - 02912768 _____ () C:\Program Files\AVAST Software\Avast\defs\15021000\algo.dll
2014-11-27 04:40 - 2014-11-27 04:40 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2006-03-03 20:52 - 2006-03-03 20:52 - 00088576 _____ () C:\Program Files (x86)\The KMPlayer\OptimFROG.dll
2008-02-25 07:03 - 2008-02-25 07:03 - 00311296 _____ () C:\Program Files (x86)\The KMPlayer\audioswitcher.ax
2007-05-03 18:04 - 2007-05-03 18:04 - 02342912 _____ () C:\Program Files (x86)\Adobe\Adobe Photoshop CS3\Photoshop.dll
2007-05-03 18:03 - 2007-05-03 18:03 - 00049152 _____ () C:\Program Files (x86)\Adobe\Adobe Photoshop CS3\QuickTimeGlue.dll
2007-05-03 18:03 - 2007-05-03 18:03 - 00393216 _____ () C:\Program Files (x86)\Adobe\Adobe Photoshop CS3\AdobeXMP.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Registry Areas =====================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\PEPA\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: AeLookupSvc => 3
MSCONFIG\Services: ALG => 3
MSCONFIG\Services: AppIDSvc => 3
MSCONFIG\Services: AppMgmt => 3
MSCONFIG\Services: Asset Management Daemon => 2
MSCONFIG\Services: AudioEndpointBuilder => 2
MSCONFIG\Services: AxInstSV => 3
MSCONFIG\Services: BDESVC => 3
MSCONFIG\Services: BITS => 3
MSCONFIG\Services: Browser => 3
MSCONFIG\Services: bthserv => 3
MSCONFIG\Services: clr_optimization_v4.0.30319_32 => 2
MSCONFIG\Services: clr_optimization_v4.0.30319_64 => 2
MSCONFIG\Services: COMSysApp => 3
MSCONFIG\Services: defragsvc => 2
MSCONFIG\Services: dot3svc => 3
MSCONFIG\Services: DTSRVC => 2
MSCONFIG\Services: EapHost => 3
MSCONFIG\Services: EFS => 3
MSCONFIG\Services: ehRecvr => 3
MSCONFIG\Services: ehSched => 3
MSCONFIG\Services: EventSystem => 2
MSCONFIG\Services: FDResPub => 3
MSCONFIG\Services: FLEXnet Licensing Service => 3
MSCONFIG\Services: FontCache3.0.0.0 => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: IDriverT => 2
MSCONFIG\Services: IEEtwCollectorService => 3
MSCONFIG\Services: msiserver => 3
MSCONFIG\Services: PDF Architect 2 => 3
MSCONFIG\Services: PDF Architect 2 Creator => 3
MSCONFIG\Services: pdfforge CrashHandler => 3
MSCONFIG\Services: PdiService => 2
MSCONFIG\Services: pla => 3
MSCONFIG\Services: PNRPAutoReg => 3
MSCONFIG\Services: QWAVE => 3
MSCONFIG\Services: RasAuto => 3
MSCONFIG\Services: RasMan => 3
MSCONFIG\Services: RpcLocator => 3
MSCONFIG\Services: SCardSvr => 3
MSCONFIG\Services: SCPolicySvc => 3
MSCONFIG\Services: SDScannerService => 3
MSCONFIG\Services: SDUpdateService => 3
MSCONFIG\Services: SDWSCService => 3
MSCONFIG\Services: seclogon => 2
MSCONFIG\Services: SessionEnv => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: TapiSrv => 3
MSCONFIG\Services: TermService => 3
MSCONFIG\Services: UmRdpService => 3
MSCONFIG\Services: WPCSvc => 3
MSCONFIG\startupfolder: C:^Users^PEPA^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^FreeRapid 0.9u4.lnk => C:\Windows\pss\FreeRapid 0.9u4.lnk.Startup
MSCONFIG\startupfolder: C:^Users^PEPA^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Zastavte stopky.txt => C:\Windows\pss\Zastavte stopky.txt.Startup
MSCONFIG\startupreg: CanonSolutionMenu => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe /logon
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: DT PHL => C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe -PHL
MSCONFIG\startupreg: EEventManager => C:\PROGRA~2\EPSONS~1\Event Manager\EEventManager.exe
MSCONFIG\startupreg: EPSON SX210 Series => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE /FU "C:\Windows\TEMP\E_S146A.tmp" /EF "HKCU"
MSCONFIG\startupreg: GoogleChromeAutoLaunch_E7A50078D9C7333C20A7F3E24756BE5A => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: GUDelayStartup => "C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe" -delayrun
MSCONFIG\startupreg: PivotSoftware => "C:\Program Files (x86)\Portrait Displays\Pivot Software\wpctrl.exe"
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Skytel => C:\Program Files\Realtek\Audio\HDA\Skytel.exe

==================== Accounts: =============================

Administrator (S-1-5-21-3752027927-3630821355-4230685425-500 - Administrator - Disabled)
Alexandra (S-1-5-21-3752027927-3630821355-4230685425-1001 - Limited - Enabled) => C:\Users\Alexandra
ASPNET (S-1-5-21-3752027927-3630821355-4230685425-1010 - Limited - Enabled)
Guest (S-1-5-21-3752027927-3630821355-4230685425-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3752027927-3630821355-4230685425-1012 - Limited - Enabled)
PEPA (S-1-5-21-3752027927-3630821355-4230685425-1000 - Administrator - Enabled) => C:\Users\PEPA

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x80070422, Zvolenou službu nelze spustit, protože není povolena nebo s ní není spojeno žádné povolené zařízení.
.


Operace:
Přihlášení odběru modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Název modulu pro zápis: Shadow Copy Optimization Writer
ID instance modulu pro zápis: {88ad9cf6-7dd3-4766-8bec-40d2d1101c95}

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x80070422, Zvolenou službu nelze spustit, protože není povolena nebo s ní není spojeno žádné povolené zařízení.
]


Operace:
Přihlášení odběru modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Název modulu pro zápis: Shadow Copy Optimization Writer
ID instance modulu pro zápis: {88ad9cf6-7dd3-4766-8bec-40d2d1101c95}

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x80070422, Zvolenou službu nelze spustit, protože není povolena nebo s ní není spojeno žádné povolené zařízení.
.


Operace:
Přihlášení odběru modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Název modulu pro zápis: ASR Writer
ID instance modulu pro zápis: {60c8cbcf-c751-44db-8a6e-8bbe7c02e7ac}

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x80070422, Zvolenou službu nelze spustit, protože není povolena nebo s ní není spojeno žádné povolené zařízení.
]


Operace:
Přihlášení odběru modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Název modulu pro zápis: ASR Writer
ID instance modulu pro zápis: {60c8cbcf-c751-44db-8a6e-8bbe7c02e7ac}

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 12346) (User: )
Description: Chyba služby Stínová kopie svazku: Při pokusu o inicializaci nástroje pro zápis do registru došlo k chybě 0x80042302, V součásti Stínová kopie svazku došlo k neočekávané chybě.
Další informace získáte v protokolu událostí aplikace.
. To může způsobit chybu
při vytváření stínových kopií v budoucnu.

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x80070422, Zvolenou službu nelze spustit, protože není povolena nebo s ní není spojeno žádné povolené zařízení.
.


Operace:
Přihlášení odběru modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Název modulu pro zápis: COM+ REGDB Writer
ID instance modulu pro zápis: {ea7799a9-6695-43d4-a3fc-fe682cf3e541}

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x80070422, Zvolenou službu nelze spustit, protože není povolena nebo s ní není spojeno žádné povolené zařízení.
]


Operace:
Přihlášení odběru modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Název modulu pro zápis: COM+ REGDB Writer
ID instance modulu pro zápis: {ea7799a9-6695-43d4-a3fc-fe682cf3e541}

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 12342) (User: )
Description: Chyba služby Stínová kopie svazku: Při pokusu o inicializaci nástroje pro zápis do registru došlo k chybě 0x80042302, V součásti Stínová kopie svazku došlo k neočekávané chybě.
Další informace získáte v protokolu událostí aplikace.
. To může způsobit chybu
při vytváření stínových kopií v budoucnu.

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny Subscribing the Registry server writer failed. hr = 8004230208lx došlo k neočekávané chybě. hr= 0x80042302, V součásti Stínová kopie svazku došlo k neočekávané chybě.
Další informace získáte v protokolu událostí aplikace.
.

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x80070422, Zvolenou službu nelze spustit, protože není povolena nebo s ní není spojeno žádné povolené zařízení.
.


Operace:
Přihlášení odběru modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Název modulu pro zápis: Registry Writer
ID instance modulu pro zápis: {c2e76464-35cd-4770-8f94-dd8bf1e56940}


System errors:
=============
Error: (02/10/2015 10:44:02 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba inteligentního přenosu na pozadí závisí na službě Systém událostí COM+, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (02/10/2015 10:43:57 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba inteligentního přenosu na pozadí závisí na službě Systém událostí COM+, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (02/10/2015 10:42:44 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba inteligentního přenosu na pozadí závisí na službě Systém událostí COM+, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (02/10/2015 10:42:42 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba inteligentního přenosu na pozadí závisí na službě Systém událostí COM+, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (02/10/2015 10:42:36 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba inteligentního přenosu na pozadí závisí na službě Systém událostí COM+, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (02/10/2015 10:36:47 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba inteligentního přenosu na pozadí závisí na službě Systém událostí COM+, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (02/10/2015 10:36:47 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1068BITS{4991D34B-80A1-4291-83B6-3328366B9097}

Error: (02/10/2015 10:36:41 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba inteligentního přenosu na pozadí závisí na službě Systém událostí COM+, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (02/10/2015 10:08:21 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba inteligentního přenosu na pozadí závisí na službě Systém událostí COM+, která neuspěla při spuštění v důsledku následující chyby:
%%1058

Error: (02/10/2015 10:08:21 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba inteligentního přenosu na pozadí závisí na službě Systém událostí COM+, která neuspěla při spuštění v důsledku následující chyby:
%%1058


Microsoft Office Sessions:
=========================
Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 8193) (User: )
Description: CoCreateInstance0x80070422, Zvolenou službu nelze spustit, protože není povolena nebo s ní není spojeno žádné povolené zařízení.


Operace:
Přihlášení odběru modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Název modulu pro zápis: Shadow Copy Optimization Writer
ID instance modulu pro zápis: {88ad9cf6-7dd3-4766-8bec-40d2d1101c95}

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 13) (User: )
Description: {4e14fba2-2e22-11d1-9964-00c04fbbb345}CEventSystem0x80070422, Zvolenou službu nelze spustit, protože není povolena nebo s ní není spojeno žádné povolené zařízení.


Operace:
Přihlášení odběru modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Název modulu pro zápis: Shadow Copy Optimization Writer
ID instance modulu pro zápis: {88ad9cf6-7dd3-4766-8bec-40d2d1101c95}

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 8193) (User: )
Description: CoCreateInstance0x80070422, Zvolenou službu nelze spustit, protože není povolena nebo s ní není spojeno žádné povolené zařízení.


Operace:
Přihlášení odběru modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Název modulu pro zápis: ASR Writer
ID instance modulu pro zápis: {60c8cbcf-c751-44db-8a6e-8bbe7c02e7ac}

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 13) (User: )
Description: {4e14fba2-2e22-11d1-9964-00c04fbbb345}CEventSystem0x80070422, Zvolenou službu nelze spustit, protože není povolena nebo s ní není spojeno žádné povolené zařízení.


Operace:
Přihlášení odběru modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Název modulu pro zápis: ASR Writer
ID instance modulu pro zápis: {60c8cbcf-c751-44db-8a6e-8bbe7c02e7ac}

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 12346) (User: )
Description: 0x80042302, V součásti Stínová kopie svazku došlo k neočekávané chybě.
Další informace získáte v protokolu událostí aplikace.

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 8193) (User: )
Description: CoCreateInstance0x80070422, Zvolenou službu nelze spustit, protože není povolena nebo s ní není spojeno žádné povolené zařízení.


Operace:
Přihlášení odběru modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Název modulu pro zápis: COM+ REGDB Writer
ID instance modulu pro zápis: {ea7799a9-6695-43d4-a3fc-fe682cf3e541}

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 13) (User: )
Description: {4e14fba2-2e22-11d1-9964-00c04fbbb345}CEventSystem0x80070422, Zvolenou službu nelze spustit, protože není povolena nebo s ní není spojeno žádné povolené zařízení.


Operace:
Přihlášení odběru modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Název modulu pro zápis: COM+ REGDB Writer
ID instance modulu pro zápis: {ea7799a9-6695-43d4-a3fc-fe682cf3e541}

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 12342) (User: )
Description: 0x80042302, V součásti Stínová kopie svazku došlo k neočekávané chybě.
Další informace získáte v protokolu událostí aplikace.

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Subscribing the Registry server writer failed. hr = 8004230208lx0x80042302, V součásti Stínová kopie svazku došlo k neočekávané chybě.
Další informace získáte v protokolu událostí aplikace.

Error: (02/10/2015 10:51:32 AM) (Source: VSS) (EventID: 8193) (User: )
Description: CoCreateInstance0x80070422, Zvolenou službu nelze spustit, protože není povolena nebo s ní není spojeno žádné povolené zařízení.


Operace:
Přihlášení odběru modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Název modulu pro zápis: Registry Writer
ID instance modulu pro zápis: {c2e76464-35cd-4770-8f94-dd8bf1e56940}


CodeIntegrity Errors:
===================================
Date: 2015-02-10 08:52:26.423
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-02-10 08:52:26.345
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-02-10 08:52:26.282
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-02-10 08:52:26.204
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-02-10 08:34:58.865
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-02-10 08:34:58.787
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-02-10 08:34:58.725
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-02-10 08:34:58.647
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-02-09 23:42:53.338
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-02-09 23:42:53.260
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU E8400 @ 3.00GHz
Percentage of memory in use: 19%
Total physical RAM: 10238.49 MB
Available physical RAM: 8234.96 MB
Total Pagefile: 10492.67 MB
Available Pagefile: 8280.54 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:87.79 GB) (Free:33.8 GB) NTFS
Drive d: (DATA) (Fixed) (Total:195.31 GB) (Free:67.53 GB) NTFS
Drive e: (ZALOHY) (Fixed) (Total:156.25 GB) (Free:84.78 GB) NTFS
Drive g: (VERBATIM HD) (Fixed) (Total:698.46 GB) (Free:522.98 GB) FAT32
Drive i: (Elements) (Fixed) (Total:465.76 GB) (Free:107.43 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or (Size: 465.8 GB) (Disk ID: CBC34A51)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=87.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=195.3 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=182.6 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows 7 or (Size: 698.6 GB) (Disk ID: 9EDD1770)
Partition 1: (Not Active) - (Size=698.6 GB) - (Type=0C)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: 00029AA0)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End Of Log ============================

[gajo64]

Jinak zatím díky za spolupráci, musím opět do výrobního procesu. Po 22. hoďce zkusím pokračovat...

[jaro3]

Odinstaluj:
Java 7 Update 51


Prosím, postupuj následujícím způsobem:
Otevřít poznámkový blok (Start => Všechny programy => Příslušenství => Poznámkový blok).
Prosím, zkopíruj do něj celý obsah níže.

Kód: Vybrat vše

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3752027927-3630821355-4230685425-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll No File
FF Extension: No Name - C:\Users\PEPA\AppData\Roaming\Mozilla\Firefox\Profiles\kiafm9yz.default-1385755089184\extensions\ascsurfingprotection@iobit.com [Not Found]
FF Extension: No Name - C:\Program Files (x86)\IObit Apps Toolbar\FF [Not Found]
C:\Users\PEPA\AppData\Roaming\OpenCandy
C:\Windows\System32\Tasks\{196A2E13-4290-438C-9686-A766E91EF9EB}
C:\Windows\System32\Tasks\{E45B8A58-569D-4984-853B-3C1E384A59DB}
C:\Windows\System32\Tasks\{098E90FD-0D71-4F71-9A0A-F30DF4EFFE3D}
C:\Windows\System32\Tasks\{CE2C425D-E7A0-4825-AEF0-02DCCC9A0944}
C:\Windows\System32\Tasks\{815E2FE5-1C5A-4C6B-845A-3E42F65EBA89}
C:\Windows\System32\Tasks\{4428619B-D877-4ECE-9663-012F947663D1}
C:\Program Files (x86)\Spybot - Search & Destroy 2
C:\Windows\System32\Tasks\{1CB3FE36-A7A4-4485-B00F-57C3CF32021D}
C:\Windows\System32\Tasks\{89CF83F6-85B1-4125-AB38-277A763DD6EF}
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
C:\ProgramData\Spybot - Search & Destroy
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Windows\System32\Tasks\{901739CC-1603-4D6E-8193-D0EA4AFFAB5F}
C:\Windows\System32\Tasks\{6C003E3B-AD14-42D4-9FC4-09467E7AA6D5}
C:\Windows\System32\Tasks\{B9C92C0B-0475-4DC4-800E-81408EE4499D}
C:\Windows\System32\Tasks\{2DAC306C-62B6-4C69-AA8E-83187FE612E4}
C:\Windows\System32\Tasks\{95676CF7-69D4-450F-AC2C-2D9C44479B9A}
C:\Windows\System32\Tasks\{4574AE22-32B5-4EE4-84EB-6412FBF0B3F1}
C:\Windows\System32\Tasks\{A6DDF1B3-5FA2-4804-AEBA-5CAA39D27286}
C:\Windows\logo_1.exe
C:\Windows\VDLL.DLL
C:\Windows\SysWOW64\runouce.exe
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll File Not found ()

(Můžeš použít funkci „vybrat vše“, klepni pravým tlačítkem myši na levé horní políčko v otevřeném poznámkovém bloku a zvol „ Vložit“).

Ulož jej na na plochu jako fixlist.txt


Spusťt FRST a stiskni tlačítko „Fix“ (Opravit) jen jednou a čekej.
Nástroj vypracuje log na ploše (Fixlog.txt), prosím zkopíruj sem celý jeho obsah.

[gajo64]

OBSAH FRST64:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 08-02-2015
Ran by PEPA at 2015-02-10 23:35:11 Run:1
Running from C:\Users\PEPA\Desktop
Loaded Profiles: PEPA (Available profiles: PEPA & Alexandra)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3752027927-3630821355-4230685425-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll No File
FF Extension: No Name - C:\Users\PEPA\AppData\Roaming\Mozilla\Firefox\Profiles\kiafm9yz.default-1385755089184\extensions\ascsurfingprotection@iobit.com [Not Found]
FF Extension: No Name - C:\Program Files (x86)\IObit Apps Toolbar\FF [Not Found]
C:\Users\PEPA\AppData\Roaming\OpenCandy
C:\Windows\System32\Tasks\{196A2E13-4290-438C-9686-A766E91EF9EB}
C:\Windows\System32\Tasks\{E45B8A58-569D-4984-853B-3C1E384A59DB}
C:\Windows\System32\Tasks\{098E90FD-0D71-4F71-9A0A-F30DF4EFFE3D}
C:\Windows\System32\Tasks\{CE2C425D-E7A0-4825-AEF0-02DCCC9A0944}
C:\Windows\System32\Tasks\{815E2FE5-1C5A-4C6B-845A-3E42F65EBA89}
C:\Windows\System32\Tasks\{4428619B-D877-4ECE-9663-012F947663D1}
C:\Program Files (x86)\Spybot - Search & Destroy 2
C:\Windows\System32\Tasks\{1CB3FE36-A7A4-4485-B00F-57C3CF32021D}
C:\Windows\System32\Tasks\{89CF83F6-85B1-4125-AB38-277A763DD6EF}
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
C:\ProgramData\Spybot - Search & Destroy
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Windows\System32\Tasks\{901739CC-1603-4D6E-8193-D0EA4AFFAB5F}
C:\Windows\System32\Tasks\{6C003E3B-AD14-42D4-9FC4-09467E7AA6D5}
C:\Windows\System32\Tasks\{B9C92C0B-0475-4DC4-800E-81408EE4499D}
C:\Windows\System32\Tasks\{2DAC306C-62B6-4C69-AA8E-83187FE612E4}
C:\Windows\System32\Tasks\{95676CF7-69D4-450F-AC2C-2D9C44479B9A}
C:\Windows\System32\Tasks\{4574AE22-32B5-4EE4-84EB-6412FBF0B3F1}
C:\Windows\System32\Tasks\{A6DDF1B3-5FA2-4804-AEBA-5CAA39D27286}
C:\Windows\logo_1.exe
C:\Windows\VDLL.DLL
C:\Windows\SysWOW64\runouce.exe
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll File Not found ()
*****************

"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-3752027927-3630821355-4230685425-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}" => Key deleted successfully.
HKCR\CLSID\{012E1000-F331-11DB-8314-0800200C9A66} => Key not found.
"HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9" => Key deleted successfully.
C:\Users\PEPA\AppData\Roaming\Mozilla\Firefox\Profiles\kiafm9yz.default-1385755089184\extensions\ascsurfingprotection@iobit.com not found.
C:\Program Files (x86)\IObit Apps Toolbar\FF not found.
C:\Users\PEPA\AppData\Roaming\OpenCandy => Moved successfully.
C:\Windows\System32\Tasks\{196A2E13-4290-438C-9686-A766E91EF9EB} => Moved successfully.
C:\Windows\System32\Tasks\{E45B8A58-569D-4984-853B-3C1E384A59DB} => Moved successfully.
C:\Windows\System32\Tasks\{098E90FD-0D71-4F71-9A0A-F30DF4EFFE3D} => Moved successfully.
C:\Windows\System32\Tasks\{CE2C425D-E7A0-4825-AEF0-02DCCC9A0944} => Moved successfully.
C:\Windows\System32\Tasks\{815E2FE5-1C5A-4C6B-845A-3E42F65EBA89} => Moved successfully.
C:\Windows\System32\Tasks\{4428619B-D877-4ECE-9663-012F947663D1} => Moved successfully.
C:\Program Files (x86)\Spybot - Search & Destroy 2 => Moved successfully.
C:\Windows\System32\Tasks\{1CB3FE36-A7A4-4485-B00F-57C3CF32021D} => Moved successfully.
C:\Windows\System32\Tasks\{89CF83F6-85B1-4125-AB38-277A763DD6EF} => Moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012 => Moved successfully.
C:\ProgramData\Spybot - Search & Destroy => Moved successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => Moved successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => Moved successfully.
C:\Windows\System32\Tasks\{901739CC-1603-4D6E-8193-D0EA4AFFAB5F} => Moved successfully.
C:\Windows\System32\Tasks\{6C003E3B-AD14-42D4-9FC4-09467E7AA6D5} => Moved successfully.
C:\Windows\System32\Tasks\{B9C92C0B-0475-4DC4-800E-81408EE4499D} => Moved successfully.
C:\Windows\System32\Tasks\{2DAC306C-62B6-4C69-AA8E-83187FE612E4} => Moved successfully.
C:\Windows\System32\Tasks\{95676CF7-69D4-450F-AC2C-2D9C44479B9A} => Moved successfully.
C:\Windows\System32\Tasks\{4574AE22-32B5-4EE4-84EB-6412FBF0B3F1} => Moved successfully.
C:\Windows\System32\Tasks\{A6DDF1B3-5FA2-4804-AEBA-5CAA39D27286} => Moved successfully.
C:\Windows\logo_1.exe => Moved successfully.
C:\Windows\VDLL.DLL => Moved successfully.
C:\Windows\SysWOW64\runouce.exe => Moved successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value deleted successfully.
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => Key not found.
Winsock: Catalog entry 000000000007 => Deleted successfully.

==== End of Fixlog 23:35:12 ====

[gajo64]

Zkoušel jsem i Fixit ( a to ne jen dnes...) a tady jsou printscreeny:

... a posléze i "SPUŠTĚNI BITS":

[jaro3]

Stáhni si zde DelFix
https://toolslib.net/downloads/viewdownload/2-delfix/

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem.Jinak je zpráva zde:
v C: \ DelFix.txt

Zkusil bych zadat nové téma v sekci windows , nebo řešit s podporou microsoftu , viry to není.

[gajo64]

No ten mi trošku pročistil plošku :)...
A ohledně nového tématu WINDOWS, měl jsi na mysli téma tady na PCHELPu?
S podporou Windows jsem ještě nezačal aktivně, pouze jsem si pročítal témata, která se mne týkala a zkoušel opravy , které doporučovali podobně "postiženým". Takže asi to zkusím na dvou frontách.
Zatím moc děkuji za vaši snahu a ochotu, kluci!!!
Tady je zatím poslední log z DelFix-u:

# DelFix v10.8 - Logfile created 11/02/2015 at 10:40:17
# Updated 29/07/2014 by Xplode
# Username : PEPA - PEPA3
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)

~ Removing disinfection tools ...

Deleted : C:\FRST
Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\zoek-results.log
Deleted : C:\zoek-results2015-02-03-172021.log
Deleted : C:\zoek-results2015-02-04-213630.log
Deleted : C:\zoek-results2015-02-05-192221.log
Deleted : C:\Users\PEPA\Desktop\Fixlog.txt
Deleted : C:\Users\PEPA\Desktop\FRST64.exe
Deleted : C:\Users\PEPA\Desktop\JRT.exe
Deleted : C:\Users\PEPA\Desktop\HijackThis.exe
Deleted : C:\Users\PEPA\Desktop\RogueKillerX64.exe
Deleted : C:\Users\PEPA\Desktop\zoek.exe
Deleted : C:\Users\PEPA\Downloads\adwcleaner_4.109.exe
Deleted : C:\Users\PEPA\Downloads\FRST64.exe
Deleted : C:\Users\PEPA\Downloads\TFC.exe
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis
Deleted : HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASWMBR

########## - EOF - ##########

[Orcus]

Áno, zde v sekci Windows nebo přímo Microsoft.

Zde můžeš téma označit fajfkou jako vyřešené.