Žádný rozdíl nevidím, pořád mi někdy naskončí (neodpovída) a zamrzává to.
Logz HJT
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:59:50, on 6.6.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal
Running processes:
E:\Games\Steam\Steam.exe
C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai\netsession_win.exe
C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\BlueStacks\HD-Agent.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
E:\Games\Steam\bin\steamwebhelper.exe
C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\Users\Jiří Hlisnikovský\Desktop\HijackThis.exe
C:\PROGRA~2\Raptr\raptr.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [BlueStacks Agent] C:\Program Files (x86)\BlueStacks\HD-Agent.exe
O4 - HKLM\..\Run: [Raptr] "C:\Program Files (x86)\Raptr\raptrstub.exe" --startup
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Steam] "E:\Games\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai\netsession_win.exe"
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
O23 - Service: BlueStacks Updater Service (BstHdUpdaterSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8131 bytes
Prosím o kontrolu logu Vyřešeno
- jerabina
- člen Security týmu
-
Level 6
- Příspěvky: 3647
- Registrován: březen 13
- Bydliště: Litoměřice
- Pohlaví:
- Stav:
Offline
Re: Prosím o kontrolu logu
Prosím stáhni příslušnou verzi programu pro Tvůj systém 32-bit/64-bit Farbar Recovery Scan Tool (FRST)
32bit.:
http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
64bit.:
http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
a ulož jej na plochu. ,pak spusť FRST jako správce
Potvrď způsob užití.
Neměň žádné z výchozích nastavení a klikni na položku „Scan“ („Skenovat“) .Když je skenování dokončeno, ukážou se dva logy = FRST.txt a Addition.txt a uloží se na ploše.Prosím zkopíruj sem celý jejich obsah.
32bit.:
http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
64bit.:
http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
a ulož jej na plochu. ,pak spusť FRST jako správce
Potvrď způsob užití.
Neměň žádné z výchozích nastavení a klikni na položku „Scan“ („Skenovat“) .Když je skenování dokončeno, ukážou se dva logy = FRST.txt a Addition.txt a uloží se na ploše.Prosím zkopíruj sem celý jejich obsah.
Když nevíš jak dál, přichází na řadu prostudovat manuál!
HJT návod
Pokud neodpovídám do vašich témat v sekci HJT když jsem online, tak je to jen proto, že jsem na mobilu kde je studování logů a psaní skriptů nemožné. Neberte to tedy prosím jako ignoraci.
HJT návod
Pokud neodpovídám do vašich témat v sekci HJT když jsem online, tak je to jen proto, že jsem na mobilu kde je studování logů a psaní skriptů nemožné. Neberte to tedy prosím jako ignoraci.
Re: Prosím o kontrolu logu
FRST.txt
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-06-2015
Ran by Jiří Hlisnikovský (administrator) on KYUUBI on 06-06-2015 21:47:56
Running from C:\Users\Jiří Hlisnikovský\Desktop
Loaded Profiles: Jiří Hlisnikovský (Available Profiles: Jiří Hlisnikovský)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Akamai Technologies, Inc.) C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai\netsession_win.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Akamai Technologies, Inc.) C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai\netsession_win.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [839384 2014-09-24] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-05-05] (Raptr, Inc)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Run: [Steam] => E:\Games\Steam\steam.exe [2892992 2015-06-04] (Valve Corporation)
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3674320 2013-01-08] (DT Soft Ltd)
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Policies\Explorer: []
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2014-07-11] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jiří Hlisnikovský\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jiří Hlisnikovský\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jiří Hlisnikovský\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jiří Hlisnikovský\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1876454918-3465153737-193926455-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-07-11] (AVAST Software)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-04-02] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-11] (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-02] (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Jiří Hlisnikovský\AppData\Roaming\Mozilla\Firefox\Profiles\hi58ctdo.default-1418237065687
FF Homepage: hxxp://www.google.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [2014-05-26] (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-04-02] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-02] (Oracle Corporation)
FF Plugin-x32: @t.garena.com/garenatalk -> C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2013-02-16] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1876454918-3465153737-193926455-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Jiří Hlisnikovský\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-06-08] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-1876454918-3465153737-193926455-1001: ubisoft.com/uplaypc -> E:\Games\Uplay\Ubisoft Game Launcher\npuplaypc.dll [2015-04-11] ()
FF Extension: Adblock Plus - C:\Users\Jiří Hlisnikovský\AppData\Roaming\Mozilla\Firefox\Profiles\hi58ctdo.default-1418237065687\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-12-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-01-12]
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Jiří Hlisnikovský\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Jiří Hlisnikovský\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-03]
CHR Extension: (Google Search) - C:\Users\Jiří Hlisnikovský\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-03]
CHR Extension: (Bookmark Manager DEV) - C:\Users\Jiří Hlisnikovský\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-18]
CHR Extension: (Google Wallet) - C:\Users\Jiří Hlisnikovský\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-18]
CHR Extension: (Gmail) - C:\Users\Jiří Hlisnikovský\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-03]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-11] (AVAST Software)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-09-24] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384728 2014-09-24] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [777944 2014-09-24] (BlueStack Systems, Inc.)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-02-02] (Electronic Arts)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [757144 2013-08-16] (Tunngle.net GmbH) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-11] ()
R0 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-03-07] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-11] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-11] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-11] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-11-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-11] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-11] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-11] ()
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-09-24] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-01-22] (DT Soft Ltd)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-06-03] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-06 21:47 - 2015-06-06 21:48 - 00014445 _____ C:\Users\Jiří Hlisnikovský\Desktop\FRST.txt
2015-06-06 21:47 - 2015-06-06 21:48 - 00000000 ____D C:\FRST
2015-06-06 21:46 - 2015-06-06 21:46 - 02108928 _____ (Farbar) C:\Users\Jiří Hlisnikovský\Desktop\FRST64.exe
2015-06-06 20:01 - 2015-06-06 20:01 - 00109224 _____ C:\Users\Jiří Hlisnikovský\AppData\Local\GDIPFONTCACHEV1.DAT
2015-06-06 19:56 - 2015-06-06 21:33 - 00000112 _____ C:\Windows\setupact.log
2015-06-06 19:56 - 2015-06-06 19:57 - 00419928 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-06 19:56 - 2015-06-06 19:56 - 00000274 _____ C:\Windows\PFRO.log
2015-06-06 19:56 - 2015-06-06 19:56 - 00000000 _____ C:\Windows\setuperr.log
2015-06-06 13:00 - 2015-06-06 13:00 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Paddington (2014)
2015-06-06 11:09 - 2015-06-06 13:00 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Saving Mr. Banks (2013)
2015-06-05 11:19 - 2015-06-05 11:19 - 00000512 _____ C:\Users\Jiří Hlisnikovský\Desktop\MBR.dat
2015-06-04 13:26 - 2015-06-04 13:26 - 00000000 ____D C:\Users\Ji°Ý Hlisnikovskř\AppData\Roaming\Macromedia
2015-06-04 13:26 - 2015-06-04 13:26 - 00000000 ____D C:\Users\Ji°Ý Hlisnikovskř
2015-06-04 13:26 - 2015-06-04 13:11 - 00024064 _____ C:\Windows\zoek-delete.exe
2015-06-04 13:14 - 2015-06-04 13:31 - 00010263 _____ C:\zoek-results.log
2015-06-04 13:11 - 2015-06-04 13:24 - 00000000 ____D C:\zoek_backup
2015-06-04 11:17 - 2015-06-04 11:17 - 01308672 _____ C:\Users\Jiří Hlisnikovský\Desktop\zoek.exe
2015-06-03 19:15 - 2015-06-04 12:59 - 00037624 _____ C:\Windows\system32\Drivers\TrueSight.sys
2015-06-03 19:15 - 2015-06-03 19:28 - 00000000 ____D C:\ProgramData\RogueKiller
2015-06-03 16:12 - 2015-06-03 16:12 - 21424888 _____ C:\Users\Jiří Hlisnikovský\Desktop\RogueKillerX64.exe
2015-06-03 16:11 - 2015-06-03 16:11 - 02947766 _____ (Thisisu) C:\Users\Jiří Hlisnikovský\Desktop\JRT.exe
2015-06-03 16:03 - 2015-06-03 16:03 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Local\Adobe
2015-06-03 11:35 - 2015-06-03 17:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-03 11:34 - 2015-06-03 17:15 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-03 11:34 - 2015-06-03 11:34 - 00001102 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-06-03 11:34 - 2015-06-03 11:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-06-03 11:34 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-06-03 11:34 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-06-03 11:33 - 2015-06-03 11:34 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-06-03 11:33 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-06-03 10:54 - 2015-06-03 10:54 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Jiří Hlisnikovský\Desktop\mbam-setup-2.1.6.1022.exe
2015-06-03 10:50 - 2015-06-03 10:50 - 02231296 _____ C:\Users\Jiří Hlisnikovský\Desktop\adwcleaner_4.206.exe
2015-06-03 10:50 - 2015-06-03 10:50 - 00448512 _____ (OldTimer Tools) C:\Users\Jiří Hlisnikovský\Desktop\TFC.exe
2015-06-03 10:44 - 2015-06-03 10:44 - 00050688 _____ (Atribune.org) C:\Users\Jiří Hlisnikovský\Desktop\ATF-Cleaner.exe
2015-06-02 16:14 - 2015-06-03 14:08 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\It.Follows.2014.720p.BluRay.X264-AMIABLE
2015-06-01 15:45 - 2015-06-01 15:47 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Game.of.Thrones.S05E08.HDTV.x264-KILLERS[ettv]
2015-05-31 14:31 - 2015-05-31 14:36 - 418729873 _____ C:\Users\Jiří Hlisnikovský\Desktop\Medal of Honor.7z
2015-05-31 13:32 - 2015-05-31 13:38 - 393435615 _____ C:\Users\Jiří Hlisnikovský\Desktop\Spider-Man.7z
2015-05-31 13:16 - 2015-05-31 13:22 - 403556975 _____ C:\Users\Jiří Hlisnikovský\Desktop\Jackie Chan Stuntmaster.7z
2015-05-29 10:32 - 2015-05-31 13:32 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Desktop\PSX
2015-05-29 09:04 - 2015-05-29 09:04 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Documents\PCSX2
2015-05-29 08:50 - 2015-05-29 09:03 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\TEKKEN.5 - PS2
2015-05-29 00:25 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2015-05-29 00:24 - 2015-06-06 18:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PCSX2
2015-05-29 00:03 - 2015-05-29 00:03 - 00000000 ____D C:\Windows\x360setup64
2015-05-29 00:03 - 2015-05-29 00:03 - 00000000 ____D C:\Windows\x360setup
2015-05-29 00:03 - 2015-05-29 00:03 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories
2015-05-29 00:03 - 2011-12-17 11:04 - 00098304 _____ (Sino Lite Technology Corp.) C:\Windows\cplsvr64.dll
2015-05-29 00:03 - 2011-12-17 11:00 - 00094208 _____ (Sino Lite Technology Corp.) C:\Windows\cplsvr32.dll
2015-05-29 00:03 - 2011-12-17 10:55 - 00068888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2015-05-29 00:03 - 2011-12-17 10:55 - 00055808 _____ (Sino Lite Technology Corp.) C:\Windows\ffdrv64.dll
2015-05-29 00:03 - 2011-12-17 10:55 - 00044544 _____ (Sino Lite Technology Corp.) C:\Windows\ffdrv32.dll
2015-05-29 00:02 - 2015-05-29 00:02 - 00003202 _____ C:\Windows\System32\Tasks\{AE52AC37-B861-4003-87A5-33FB5363FFE7}
2015-05-28 09:50 - 2015-05-28 09:51 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Game.of.Thrones.S05E07.HDTV.x264-ASAP[ettv]
2015-05-27 15:38 - 2015-05-27 15:46 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Ex Machina (2015)
2015-05-24 18:31 - 2015-05-24 18:31 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Desktop\Maturita
2015-05-21 14:08 - 2015-05-21 14:09 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Marco Polo 2014 S01 Complete Season 1 720p WEBRip AAC x264-PSYPHER
2015-05-18 19:23 - 2015-05-18 19:26 - 1929596232 _____ C:\Users\Jiří Hlisnikovský\Downloads\Hra o trůny - S05E06 Unbowed, Unbent, Unbroken.mkv
2015-05-18 17:58 - 2015-05-19 19:15 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Vikings S03 Complete Season 3 720p WEB-DL AAC x264-PSYPHER
2015-05-17 15:02 - 2015-05-17 15:07 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Vikings.S02.Complete.1080p.WEB-DL.DD5.1.H.264-CtrlHD [PublicHD]
2015-05-17 11:58 - 2015-05-17 12:55 - 985896510 _____ C:\Users\Jiří Hlisnikovský\Desktop\FOTKY-EE4.zip
2015-05-17 09:43 - 2015-05-17 09:43 - 00000207 _____ C:\Windows\tweaking.com-regbackup-KYUUBI-Windows-7-Home-Premium-(64-bit).dat
2015-05-17 09:43 - 2015-05-17 09:43 - 00000000 ____D C:\RegBackup
2015-05-17 00:22 - 2015-06-06 21:48 - 01226540 _____ C:\Windows\WindowsUpdate.log
2015-05-16 13:35 - 2015-05-16 13:38 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Vikings.S01.720p.BluRay.x264-CtrlHD
2015-05-14 18:10 - 2015-05-14 18:24 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Local\Ori and the Blind Forest
2015-05-14 17:59 - 2015-05-14 17:59 - 00000713 _____ C:\Users\Jiří Hlisnikovský\Desktop\Ori and the Blind Forest.lnk
2015-05-14 17:59 - 2015-05-14 17:59 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Roaming\Ori and the Blind Forest
2015-05-14 17:59 - 2015-05-14 17:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2015-05-14 17:49 - 2015-05-14 17:53 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\[R.G. Mechanics] Ori and the Blind Forest
2015-05-13 13:26 - 2015-05-13 13:26 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Roaming\Steam
2015-05-13 08:25 - 2015-05-13 08:25 - 00000734 _____ C:\Users\Public\Desktop\Dex.lnk
2015-05-13 08:25 - 2015-05-13 08:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dex
2015-05-12 20:06 - 2015-05-27 15:30 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Black Book [Zwartboek] [2006] BRRip XviD - CODY
2015-05-12 15:06 - 2015-05-13 07:57 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Dex-CODEX
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-06 21:47 - 2014-04-27 21:11 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Local\LogMeIn Hamachi
2015-06-06 21:46 - 2009-07-14 06:45 - 00021392 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-06 21:46 - 2009-07-14 06:45 - 00021392 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-06 21:45 - 2013-01-12 13:36 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-06 21:34 - 2014-08-09 10:17 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Roaming\Raptr
2015-06-06 21:33 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-06 19:59 - 2014-04-12 11:02 - 00008132 _____ C:\Users\Jiří Hlisnikovský\Desktop\hijackthis.log
2015-06-06 18:55 - 2013-01-20 11:07 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Roaming\uTorrent
2015-06-06 18:55 - 2013-01-15 20:05 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Roaming\AIMP3
2015-06-06 18:54 - 2014-11-25 22:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTA San Andreas 1.4
2015-06-06 18:54 - 2013-09-24 21:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
2015-06-06 12:37 - 2014-05-21 18:30 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Local\Apps\2.0
2015-06-06 12:34 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-06-06 12:31 - 2009-07-14 04:34 - 80216064 _____ C:\Windows\system32\config\software.bak
2015-06-06 12:31 - 2009-07-14 04:34 - 28049408 _____ C:\Windows\system32\config\system.bak
2015-06-06 12:31 - 2009-07-14 04:34 - 00524288 _____ C:\Windows\system32\config\default.bak
2015-06-06 12:31 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\security.bak
2015-06-06 12:31 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\sam.bak
2015-06-06 12:30 - 2014-12-01 19:58 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-06-06 12:30 - 2014-04-10 21:26 - 00000000 ____D C:\Windows\erdnt
2015-06-06 10:37 - 2013-01-12 15:51 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-06-05 17:01 - 2013-05-13 19:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-06-03 17:08 - 2013-01-12 13:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-03 17:07 - 2014-04-07 15:26 - 00000000 ____D C:\AdwCleaner
2015-06-03 13:22 - 2013-01-20 19:22 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Documents\My Games
2015-06-03 11:02 - 2015-02-26 18:12 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai
2015-05-29 00:25 - 2013-03-30 15:26 - 00000000 ____D C:\Windows\SysWOW64\directx
2015-05-29 00:03 - 2013-01-12 13:44 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-05-27 18:16 - 2015-04-05 23:48 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Desktop\squat
2015-05-26 09:02 - 2013-03-03 17:36 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-20 14:58 - 2015-04-11 13:00 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Desktop\skics
2015-05-20 14:58 - 2011-04-12 10:34 - 00667422 _____ C:\Windows\system32\perfh005.dat
2015-05-20 14:58 - 2011-04-12 10:34 - 00140600 _____ C:\Windows\system32\perfc005.dat
2015-05-20 14:58 - 2009-07-14 07:13 - 01580114 _____ C:\Windows\system32\PerfStringBackup.INI
2015-05-17 00:20 - 2015-03-03 16:21 - 00000000 ____D C:\Program Files\OBS
2015-05-17 00:20 - 2015-03-03 16:21 - 00000000 ____D C:\Program Files (x86)\OBS
2015-05-17 00:20 - 2014-08-09 10:17 - 00000000 ____D C:\Program Files (x86)\Raptr
2015-05-16 20:48 - 2013-01-22 17:20 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Roaming\DAEMON Tools Lite
2015-05-16 20:48 - 2013-01-12 14:30 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Roaming\TS3Client
2015-05-16 20:47 - 2015-05-03 11:14 - 00000000 ____D C:\Windows\Minidump
2015-05-15 18:53 - 2013-03-03 17:36 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-15 18:53 - 2013-03-03 17:36 - 00003696 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-15 14:41 - 2015-02-07 12:17 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Desktop\Praha
2015-05-14 18:10 - 2013-04-22 19:42 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Local\SKIDROW
2015-05-09 16:18 - 2015-02-26 18:13 - 00000000 ____D C:\ProgramData\Autodesk
2015-05-09 16:11 - 2015-02-26 18:19 - 00000000 ____D C:\Program Files (x86)\Autodesk
2015-05-08 13:41 - 2013-06-08 22:01 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Desktop\MP3s
==================== Files in the root of some directories =======
2014-09-03 17:39 - 2014-09-12 12:41 - 0000133 _____ () C:\Users\Jiří Hlisnikovský\AppData\Roaming\D2Info0
2014-09-03 17:39 - 2014-09-12 14:26 - 0000008 _____ () C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_1
2014-09-03 18:16 - 2014-09-12 14:26 - 0000008 _____ () C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_2
2014-09-11 21:00 - 2014-09-11 22:17 - 0000008 _____ () C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_3
2013-01-18 22:40 - 2014-05-17 21:24 - 0045270 _____ () C:\Users\Jiří Hlisnikovský\AppData\Roaming\room_v3.dat
2015-02-26 18:28 - 2015-02-26 18:28 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-05-24 11:54
==================== End of log ============================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-06-2015
Ran by Jiří Hlisnikovský (administrator) on KYUUBI on 06-06-2015 21:47:56
Running from C:\Users\Jiří Hlisnikovský\Desktop
Loaded Profiles: Jiří Hlisnikovský (Available Profiles: Jiří Hlisnikovský)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Akamai Technologies, Inc.) C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai\netsession_win.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Akamai Technologies, Inc.) C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai\netsession_win.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [839384 2014-09-24] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-05-05] (Raptr, Inc)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Run: [Steam] => E:\Games\Steam\steam.exe [2892992 2015-06-04] (Valve Corporation)
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3674320 2013-01-08] (DT Soft Ltd)
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Policies\Explorer: []
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2014-07-11] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jiří Hlisnikovský\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jiří Hlisnikovský\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jiří Hlisnikovský\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jiří Hlisnikovský\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1876454918-3465153737-193926455-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-07-11] (AVAST Software)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-04-02] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-11] (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-02] (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Jiří Hlisnikovský\AppData\Roaming\Mozilla\Firefox\Profiles\hi58ctdo.default-1418237065687
FF Homepage: hxxp://www.google.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [2014-05-26] (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-04-02] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-02] (Oracle Corporation)
FF Plugin-x32: @t.garena.com/garenatalk -> C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2013-02-16] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1876454918-3465153737-193926455-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Jiří Hlisnikovský\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-06-08] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-1876454918-3465153737-193926455-1001: ubisoft.com/uplaypc -> E:\Games\Uplay\Ubisoft Game Launcher\npuplaypc.dll [2015-04-11] ()
FF Extension: Adblock Plus - C:\Users\Jiří Hlisnikovský\AppData\Roaming\Mozilla\Firefox\Profiles\hi58ctdo.default-1418237065687\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-12-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-01-12]
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Jiří Hlisnikovský\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Jiří Hlisnikovský\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-03]
CHR Extension: (Google Search) - C:\Users\Jiří Hlisnikovský\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-03]
CHR Extension: (Bookmark Manager DEV) - C:\Users\Jiří Hlisnikovský\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-18]
CHR Extension: (Google Wallet) - C:\Users\Jiří Hlisnikovský\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-18]
CHR Extension: (Gmail) - C:\Users\Jiří Hlisnikovský\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-03]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-11] (AVAST Software)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-09-24] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384728 2014-09-24] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [777944 2014-09-24] (BlueStack Systems, Inc.)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-02-02] (Electronic Arts)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [757144 2013-08-16] (Tunngle.net GmbH) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-11] ()
R0 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-03-07] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-11] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-11] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-11] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-11-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-11] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-11] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-11] ()
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-09-24] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-01-22] (DT Soft Ltd)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-06-03] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-06 21:47 - 2015-06-06 21:48 - 00014445 _____ C:\Users\Jiří Hlisnikovský\Desktop\FRST.txt
2015-06-06 21:47 - 2015-06-06 21:48 - 00000000 ____D C:\FRST
2015-06-06 21:46 - 2015-06-06 21:46 - 02108928 _____ (Farbar) C:\Users\Jiří Hlisnikovský\Desktop\FRST64.exe
2015-06-06 20:01 - 2015-06-06 20:01 - 00109224 _____ C:\Users\Jiří Hlisnikovský\AppData\Local\GDIPFONTCACHEV1.DAT
2015-06-06 19:56 - 2015-06-06 21:33 - 00000112 _____ C:\Windows\setupact.log
2015-06-06 19:56 - 2015-06-06 19:57 - 00419928 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-06 19:56 - 2015-06-06 19:56 - 00000274 _____ C:\Windows\PFRO.log
2015-06-06 19:56 - 2015-06-06 19:56 - 00000000 _____ C:\Windows\setuperr.log
2015-06-06 13:00 - 2015-06-06 13:00 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Paddington (2014)
2015-06-06 11:09 - 2015-06-06 13:00 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Saving Mr. Banks (2013)
2015-06-05 11:19 - 2015-06-05 11:19 - 00000512 _____ C:\Users\Jiří Hlisnikovský\Desktop\MBR.dat
2015-06-04 13:26 - 2015-06-04 13:26 - 00000000 ____D C:\Users\Ji°Ý Hlisnikovskř\AppData\Roaming\Macromedia
2015-06-04 13:26 - 2015-06-04 13:26 - 00000000 ____D C:\Users\Ji°Ý Hlisnikovskř
2015-06-04 13:26 - 2015-06-04 13:11 - 00024064 _____ C:\Windows\zoek-delete.exe
2015-06-04 13:14 - 2015-06-04 13:31 - 00010263 _____ C:\zoek-results.log
2015-06-04 13:11 - 2015-06-04 13:24 - 00000000 ____D C:\zoek_backup
2015-06-04 11:17 - 2015-06-04 11:17 - 01308672 _____ C:\Users\Jiří Hlisnikovský\Desktop\zoek.exe
2015-06-03 19:15 - 2015-06-04 12:59 - 00037624 _____ C:\Windows\system32\Drivers\TrueSight.sys
2015-06-03 19:15 - 2015-06-03 19:28 - 00000000 ____D C:\ProgramData\RogueKiller
2015-06-03 16:12 - 2015-06-03 16:12 - 21424888 _____ C:\Users\Jiří Hlisnikovský\Desktop\RogueKillerX64.exe
2015-06-03 16:11 - 2015-06-03 16:11 - 02947766 _____ (Thisisu) C:\Users\Jiří Hlisnikovský\Desktop\JRT.exe
2015-06-03 16:03 - 2015-06-03 16:03 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Local\Adobe
2015-06-03 11:35 - 2015-06-03 17:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-03 11:34 - 2015-06-03 17:15 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-03 11:34 - 2015-06-03 11:34 - 00001102 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-06-03 11:34 - 2015-06-03 11:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-06-03 11:34 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-06-03 11:34 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-06-03 11:33 - 2015-06-03 11:34 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-06-03 11:33 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-06-03 10:54 - 2015-06-03 10:54 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Jiří Hlisnikovský\Desktop\mbam-setup-2.1.6.1022.exe
2015-06-03 10:50 - 2015-06-03 10:50 - 02231296 _____ C:\Users\Jiří Hlisnikovský\Desktop\adwcleaner_4.206.exe
2015-06-03 10:50 - 2015-06-03 10:50 - 00448512 _____ (OldTimer Tools) C:\Users\Jiří Hlisnikovský\Desktop\TFC.exe
2015-06-03 10:44 - 2015-06-03 10:44 - 00050688 _____ (Atribune.org) C:\Users\Jiří Hlisnikovský\Desktop\ATF-Cleaner.exe
2015-06-02 16:14 - 2015-06-03 14:08 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\It.Follows.2014.720p.BluRay.X264-AMIABLE
2015-06-01 15:45 - 2015-06-01 15:47 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Game.of.Thrones.S05E08.HDTV.x264-KILLERS[ettv]
2015-05-31 14:31 - 2015-05-31 14:36 - 418729873 _____ C:\Users\Jiří Hlisnikovský\Desktop\Medal of Honor.7z
2015-05-31 13:32 - 2015-05-31 13:38 - 393435615 _____ C:\Users\Jiří Hlisnikovský\Desktop\Spider-Man.7z
2015-05-31 13:16 - 2015-05-31 13:22 - 403556975 _____ C:\Users\Jiří Hlisnikovský\Desktop\Jackie Chan Stuntmaster.7z
2015-05-29 10:32 - 2015-05-31 13:32 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Desktop\PSX
2015-05-29 09:04 - 2015-05-29 09:04 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Documents\PCSX2
2015-05-29 08:50 - 2015-05-29 09:03 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\TEKKEN.5 - PS2
2015-05-29 00:25 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2015-05-29 00:24 - 2015-06-06 18:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PCSX2
2015-05-29 00:03 - 2015-05-29 00:03 - 00000000 ____D C:\Windows\x360setup64
2015-05-29 00:03 - 2015-05-29 00:03 - 00000000 ____D C:\Windows\x360setup
2015-05-29 00:03 - 2015-05-29 00:03 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories
2015-05-29 00:03 - 2011-12-17 11:04 - 00098304 _____ (Sino Lite Technology Corp.) C:\Windows\cplsvr64.dll
2015-05-29 00:03 - 2011-12-17 11:00 - 00094208 _____ (Sino Lite Technology Corp.) C:\Windows\cplsvr32.dll
2015-05-29 00:03 - 2011-12-17 10:55 - 00068888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2015-05-29 00:03 - 2011-12-17 10:55 - 00055808 _____ (Sino Lite Technology Corp.) C:\Windows\ffdrv64.dll
2015-05-29 00:03 - 2011-12-17 10:55 - 00044544 _____ (Sino Lite Technology Corp.) C:\Windows\ffdrv32.dll
2015-05-29 00:02 - 2015-05-29 00:02 - 00003202 _____ C:\Windows\System32\Tasks\{AE52AC37-B861-4003-87A5-33FB5363FFE7}
2015-05-28 09:50 - 2015-05-28 09:51 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Game.of.Thrones.S05E07.HDTV.x264-ASAP[ettv]
2015-05-27 15:38 - 2015-05-27 15:46 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Ex Machina (2015)
2015-05-24 18:31 - 2015-05-24 18:31 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Desktop\Maturita
2015-05-21 14:08 - 2015-05-21 14:09 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Marco Polo 2014 S01 Complete Season 1 720p WEBRip AAC x264-PSYPHER
2015-05-18 19:23 - 2015-05-18 19:26 - 1929596232 _____ C:\Users\Jiří Hlisnikovský\Downloads\Hra o trůny - S05E06 Unbowed, Unbent, Unbroken.mkv
2015-05-18 17:58 - 2015-05-19 19:15 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Vikings S03 Complete Season 3 720p WEB-DL AAC x264-PSYPHER
2015-05-17 15:02 - 2015-05-17 15:07 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Vikings.S02.Complete.1080p.WEB-DL.DD5.1.H.264-CtrlHD [PublicHD]
2015-05-17 11:58 - 2015-05-17 12:55 - 985896510 _____ C:\Users\Jiří Hlisnikovský\Desktop\FOTKY-EE4.zip
2015-05-17 09:43 - 2015-05-17 09:43 - 00000207 _____ C:\Windows\tweaking.com-regbackup-KYUUBI-Windows-7-Home-Premium-(64-bit).dat
2015-05-17 09:43 - 2015-05-17 09:43 - 00000000 ____D C:\RegBackup
2015-05-17 00:22 - 2015-06-06 21:48 - 01226540 _____ C:\Windows\WindowsUpdate.log
2015-05-16 13:35 - 2015-05-16 13:38 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Vikings.S01.720p.BluRay.x264-CtrlHD
2015-05-14 18:10 - 2015-05-14 18:24 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Local\Ori and the Blind Forest
2015-05-14 17:59 - 2015-05-14 17:59 - 00000713 _____ C:\Users\Jiří Hlisnikovský\Desktop\Ori and the Blind Forest.lnk
2015-05-14 17:59 - 2015-05-14 17:59 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Roaming\Ori and the Blind Forest
2015-05-14 17:59 - 2015-05-14 17:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2015-05-14 17:49 - 2015-05-14 17:53 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\[R.G. Mechanics] Ori and the Blind Forest
2015-05-13 13:26 - 2015-05-13 13:26 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Roaming\Steam
2015-05-13 08:25 - 2015-05-13 08:25 - 00000734 _____ C:\Users\Public\Desktop\Dex.lnk
2015-05-13 08:25 - 2015-05-13 08:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dex
2015-05-12 20:06 - 2015-05-27 15:30 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Black Book [Zwartboek] [2006] BRRip XviD - CODY
2015-05-12 15:06 - 2015-05-13 07:57 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Downloads\Dex-CODEX
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-06 21:47 - 2014-04-27 21:11 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Local\LogMeIn Hamachi
2015-06-06 21:46 - 2009-07-14 06:45 - 00021392 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-06 21:46 - 2009-07-14 06:45 - 00021392 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-06 21:45 - 2013-01-12 13:36 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-06 21:34 - 2014-08-09 10:17 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Roaming\Raptr
2015-06-06 21:33 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-06 19:59 - 2014-04-12 11:02 - 00008132 _____ C:\Users\Jiří Hlisnikovský\Desktop\hijackthis.log
2015-06-06 18:55 - 2013-01-20 11:07 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Roaming\uTorrent
2015-06-06 18:55 - 2013-01-15 20:05 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Roaming\AIMP3
2015-06-06 18:54 - 2014-11-25 22:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTA San Andreas 1.4
2015-06-06 18:54 - 2013-09-24 21:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
2015-06-06 12:37 - 2014-05-21 18:30 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Local\Apps\2.0
2015-06-06 12:34 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-06-06 12:31 - 2009-07-14 04:34 - 80216064 _____ C:\Windows\system32\config\software.bak
2015-06-06 12:31 - 2009-07-14 04:34 - 28049408 _____ C:\Windows\system32\config\system.bak
2015-06-06 12:31 - 2009-07-14 04:34 - 00524288 _____ C:\Windows\system32\config\default.bak
2015-06-06 12:31 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\security.bak
2015-06-06 12:31 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\sam.bak
2015-06-06 12:30 - 2014-12-01 19:58 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-06-06 12:30 - 2014-04-10 21:26 - 00000000 ____D C:\Windows\erdnt
2015-06-06 10:37 - 2013-01-12 15:51 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-06-05 17:01 - 2013-05-13 19:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-06-03 17:08 - 2013-01-12 13:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-03 17:07 - 2014-04-07 15:26 - 00000000 ____D C:\AdwCleaner
2015-06-03 13:22 - 2013-01-20 19:22 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Documents\My Games
2015-06-03 11:02 - 2015-02-26 18:12 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai
2015-05-29 00:25 - 2013-03-30 15:26 - 00000000 ____D C:\Windows\SysWOW64\directx
2015-05-29 00:03 - 2013-01-12 13:44 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-05-27 18:16 - 2015-04-05 23:48 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Desktop\squat
2015-05-26 09:02 - 2013-03-03 17:36 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-20 14:58 - 2015-04-11 13:00 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Desktop\skics
2015-05-20 14:58 - 2011-04-12 10:34 - 00667422 _____ C:\Windows\system32\perfh005.dat
2015-05-20 14:58 - 2011-04-12 10:34 - 00140600 _____ C:\Windows\system32\perfc005.dat
2015-05-20 14:58 - 2009-07-14 07:13 - 01580114 _____ C:\Windows\system32\PerfStringBackup.INI
2015-05-17 00:20 - 2015-03-03 16:21 - 00000000 ____D C:\Program Files\OBS
2015-05-17 00:20 - 2015-03-03 16:21 - 00000000 ____D C:\Program Files (x86)\OBS
2015-05-17 00:20 - 2014-08-09 10:17 - 00000000 ____D C:\Program Files (x86)\Raptr
2015-05-16 20:48 - 2013-01-22 17:20 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Roaming\DAEMON Tools Lite
2015-05-16 20:48 - 2013-01-12 14:30 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Roaming\TS3Client
2015-05-16 20:47 - 2015-05-03 11:14 - 00000000 ____D C:\Windows\Minidump
2015-05-15 18:53 - 2013-03-03 17:36 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-15 18:53 - 2013-03-03 17:36 - 00003696 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-15 14:41 - 2015-02-07 12:17 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Desktop\Praha
2015-05-14 18:10 - 2013-04-22 19:42 - 00000000 ____D C:\Users\Jiří Hlisnikovský\AppData\Local\SKIDROW
2015-05-09 16:18 - 2015-02-26 18:13 - 00000000 ____D C:\ProgramData\Autodesk
2015-05-09 16:11 - 2015-02-26 18:19 - 00000000 ____D C:\Program Files (x86)\Autodesk
2015-05-08 13:41 - 2013-06-08 22:01 - 00000000 ____D C:\Users\Jiří Hlisnikovský\Desktop\MP3s
==================== Files in the root of some directories =======
2014-09-03 17:39 - 2014-09-12 12:41 - 0000133 _____ () C:\Users\Jiří Hlisnikovský\AppData\Roaming\D2Info0
2014-09-03 17:39 - 2014-09-12 14:26 - 0000008 _____ () C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_1
2014-09-03 18:16 - 2014-09-12 14:26 - 0000008 _____ () C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_2
2014-09-11 21:00 - 2014-09-11 22:17 - 0000008 _____ () C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_3
2013-01-18 22:40 - 2014-05-17 21:24 - 0045270 _____ () C:\Users\Jiří Hlisnikovský\AppData\Roaming\room_v3.dat
2015-02-26 18:28 - 2015-02-26 18:28 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-05-24 11:54
==================== End of log ============================
Re: Prosím o kontrolu logu
Addition.txt
Additional scan result of Farbar Recovery Scan Tool (x64) Version:06-06-2015
Ran by Jiří Hlisnikovský at 2015-06-06 21:48:55
Running from C:\Users\Jiří Hlisnikovský\Desktop
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1876454918-3465153737-193926455-500 - Administrator - Disabled)
Guest (S-1-5-21-1876454918-3465153737-193926455-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1876454918-3465153737-193926455-1002 - Limited - Enabled)
Jiří Hlisnikovský (S-1-5-21-1876454918-3465153737-193926455-1001 - Administrator - Enabled) => C:\Users\Jiří Hlisnikovský
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Out of date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Out of date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKLM-x32\...\uTorrent) (Version: 3.2.3.28705 - BitTorrent Inc.)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.02) - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.02 - Adobe Systems Incorporated)
AIMP3 (HKLM-x32\...\AIMP3) (Version: v3.55.1355, 14.07.2014 - AIMP DevTeam)
Akamai NetSession Interface (HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Akamai) (Version: - Akamai Technologies, Inc)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Ashampoo Burning Studio 6 FREE v.6.84 (HKLM-x32\...\{91B33C97-3ED1-03EA-A67B-244AA4D7B559}_is1) (Version: 6.8.4 - Ashampoo GmbH & Co. KG)
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2021 - AVAST Software)
Battlefield 3™ (HKLM-x32\...\{64BFBE7A-886C-4CA2-A9B4-0C2B5A5942BC}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.3.4073 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{D0B14565-60F3-4276-9265-91906896EFD0}) (Version: 0.9.3.4073 - BlueStack Systems, Inc.)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.68.1077 - AB Team, d.o.o.)
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: 1.6 - Activision) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: 1.7 - Activision) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
Citace PRO 2.0.2 (64-bit) (HKLM\...\{240FFC1B-81AD-4418-B4C2-D62240520DE7}) (Version: 2.0.2 - Citace.com)
Counter-Strike 1.6 Non-Steam 1.0 (HKLM-x32\...\Counter-Strike 1.6 Non-Steam 1.0) (Version: - )
CPUID CPU-Z 1.69 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
Curse Client (HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\101a9f93b8f0bb6f) (Version: 5.1.1.792 - Curse)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.46.1.0328 - DT Soft Ltd)
Defender Game Racer X7 gamepad (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Defender Game Racer X7 gamepad)
Defender Game Racer X7 gamepad (HKLM-x32\...\{2A0B2509-8081-486D-AC1D-20ACDCC2307A}) (Version: 09.28.2009 - FFDriver)
Dex (HKLM-x32\...\{F8D177A2-B6D6-4774-A03C-A5E6DA5E346C}_is1) (Version: 2.0.0.0 - Dreadlocks Ltd.)
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)
Dropbox (HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Dropbox) (Version: 2.6.24 - Dropbox, Inc.)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Garry)
Google Drive (HKLM-x32\...\{CBC9F5FD-5CFA-4A33-81CD-369EAB77E3A6}) (Version: 1.22.9403.0223 - Google, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Heroes of Newerth (HKLM-x32\...\hon) (Version: 2.3.0 - S2 Games)
Import souborů SketchUp (HKLM-x32\...\{C403E867-FCF1-432B-BCC1-8FFD40A10A6E}) (Version: 1.2.0 - Autodesk)
Import souborů SketchUp 2016 (HKLM-x32\...\{C769FB7C-1F55-4B31-9A2A-21CEC50F4F92}) (Version: 2.0.0 - Autodesk)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 3.9.1.135 - PandoraTV)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden
Malwarebytes Anti-Malware verze 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50325 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 cs) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 cs)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
neurowise (HKLM\...\neurowise) (Version: 2014.09.19.162528 - neurowise) <==== ATTENTION
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Ori and the Blind Forest (HKLM-x32\...\Ori and the Blind Forest_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter)
Origin (HKLM-x32\...\Origin) (Version: 9.1.15.109 - Electronic Arts, Inc.)
Pandora Service (HKLM-x32\...\4F6D5E84-5826-4394-9F40-3A9A19165651_is1) (Version: - Pandora.TV) <==== ATTENTION
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5875) (Version: - )
PokerStars (HKLM-x32\...\PokerStars) (Version: - PokerStars)
Raptr (HKLM-x32\...\Raptr) (Version: - )
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6650 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.)
Skype™ 6.22 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.107 - Skype Technologies S.A.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.11.1 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.26297 - TeamViewer)
Tunngle beta (HKLM-x32\...\Tunngle beta_is1) (Version: - Tunngle.net GmbH)
TurboCAD Professional 16 (HKLM-x32\...\{912F394B-117F-415C-9C0F-2C2018F85CE6}) (Version: 16.1 - IMSIDesign)
Unity Web Player (HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: - )
Warcraft III: All Products (HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Warcraft III) (Version: - )
WATCH_DOGS (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft)
WinRAR 4.20 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1876454918-3465153737-193926455-1001_Classes\CLSID\{305fdc36-b695-4439-953e-bb1f0880e59a}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1876454918-3465153737-193926455-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jiří Hlisnikovský\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1876454918-3465153737-193926455-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jiří Hlisnikovský\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1876454918-3465153737-193926455-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jiří Hlisnikovský\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1876454918-3465153737-193926455-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jiří Hlisnikovský\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
==================== Restore Points =========================
24-05-2015 12:01:43 Naplánovaný kontrolní bod
29-05-2015 00:03:21 Installed Defender Game Racer X7 gamepad
29-05-2015 00:24:41 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
29-05-2015 00:25:21 Nainstalováno rozhraní DirectX
04-06-2015 13:14:09 zoek.exe restore point
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2015-06-06 12:34 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {25C94A9B-B958-4BF8-A282-D07FB755E257} - System32\Tasks\{AD9778CF-8D82-4085-8D51-C31C3BF45BAC} => pcalua.exe -a "C:\Users\Jiří Hlisnikovský\AppData\Roaming\.minecraft\minecraft launcher\Uninstall.exe"
Task: {275FF5A9-0B40-495A-9501-E11F97E6C836} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03] (Adobe Systems Incorporated)
Task: {4F12DF4C-20AE-4EC7-8583-188A7058BA18} - System32\Tasks\{5C588194-05F4-413A-B3E0-544AC107F240} => pcalua.exe -a "C:\Users\Jiří Hlisnikovský\Desktop\hamachi-lista-centrumcz.exe" -d "C:\Users\Jiří Hlisnikovský\Desktop"
Task: {58594241-5BDC-4133-86AC-8795AF2707DF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {8034D3DF-870D-4B5F-BF0A-3B0CC654243E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: {A94D97EA-8D52-4A7D-8D94-77E5E6408494} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)
Task: {D540CE01-2DE3-4F88-A979-030FE3A26116} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-11] (AVAST Software)
Task: {F802F85C-EAD1-4DA8-8C1E-72408418CE2C} - System32\Tasks\{AE52AC37-B861-4003-87A5-33FB5363FFE7} => pcalua.exe -a "C:\Users\Jiří Hlisnikovský\Desktop\P6_Setup_v2.3.exe" -d "C:\Users\Jiří Hlisnikovský\Desktop"
Task: {FDC09F16-7105-4D24-9474-4E9C84BDCA4A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (Whitelisted) ==============
2014-11-20 21:23 - 2014-11-20 21:23 - 00214528 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2014-02-11 06:08 - 2014-02-11 06:08 - 00817152 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Device.dll
2014-02-11 06:08 - 2014-02-11 06:08 - 03650560 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Platform.dll
2014-11-20 21:23 - 2014-11-20 21:23 - 00102400 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-07-11 08:29 - 2014-07-11 08:29 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
2014-01-07 19:28 - 2014-01-07 12:47 - 02152960 _____ () C:\Program Files\AVAST Software\Avast\defs\14010700\algo.dll
2014-07-11 08:29 - 2014-07-11 08:29 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd
2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll
2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll
2013-11-21 02:05 - 2013-11-21 02:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd
2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll
2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData:NT
AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:NT
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\ProgramData\Application Data:NT
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\Data aplikací:NT
AlternateDataStreams: C:\ProgramData\Data aplikací:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2
AlternateDataStreams: C:\ProgramData\TEMP:56E2E879
AlternateDataStreams: C:\ProgramData\TEMP:99671BE2
AlternateDataStreams: C:\ProgramData\TEMP:FD34FE88
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\Data aplikací:NT
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\Data aplikací:NT2
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\AppData\Roaming:NT2
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jiří Hlisnikovský\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{798B6367-41AD-49F2-ADDF-A5135DF0CFDE}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [{2B435F98-1C38-4CA9-934E-964A45B48BB0}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{75195D4B-5CAD-4099-891C-C4CDDB52D8BE}E:\games\warcraft iii\warcraft iii\war3.exe] => (Allow) E:\games\warcraft iii\warcraft iii\war3.exe
FirewallRules: [UDP Query User{60553022-6E5E-4CFA-BB48-2876F2C4CFAD}E:\games\warcraft iii\warcraft iii\war3.exe] => (Allow) E:\games\warcraft iii\warcraft iii\war3.exe
FirewallRules: [{0FB01B84-CDBE-4B86-8C88-7E338260596B}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{C5B812AD-B2B7-4C03-9CF6-A12EF3570391}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{2C674C5F-F5E0-4766-9C18-D957341CDC73}C:\program files (x86)\origin games\Battlefield Bad Company 2\bfbc2game.exe] => (Allow) C:\program files (x86)\origin games\Battlefield Bad Company 2\bfbc2game.exe
FirewallRules: [UDP Query User{5097F11D-6481-4D80-8F59-6B10F2472270}C:\program files (x86)\origin games\Battlefield Bad Company 2\bfbc2game.exe] => (Allow) C:\program files (x86)\origin games\Battlefield Bad Company 2\bfbc2game.exe
FirewallRules: [TCP Query User{7A588D60-B226-40B6-A4D0-E4776A8223C7}C:\program files (x86)\heroes of newerth\hon.exe] => (Allow) C:\program files (x86)\heroes of newerth\hon.exe
FirewallRules: [UDP Query User{9B4CC318-2247-4AF3-BEEB-5B8FCD3F07BA}C:\program files (x86)\heroes of newerth\hon.exe] => (Allow) C:\program files (x86)\heroes of newerth\hon.exe
FirewallRules: [{DDB77065-64E2-40C6-8418-803A9C502CC2}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [TCP Query User{ABCF942F-F3E1-4DC2-B3CC-87983BA248B2}E:\games\steam\steamapps\common\dota 2 beta\dota.exe] => (Allow) E:\games\steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [UDP Query User{0B4AD8F6-CD6B-4BE0-AECE-720FA64D5611}E:\games\steam\steamapps\common\dota 2 beta\dota.exe] => (Allow) E:\games\steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{AADFC86D-A2C7-4F95-8196-4DCD1052347E}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{5574C0C9-C1F4-439C-95F1-721451C8EAA6}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{7E3E6C95-58AF-4DBA-8020-9D30F42AA69B}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{3123C7B3-BDAF-4C6A-9341-11CDDE9FBD2A}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [TCP Query User{238D5C0E-E894-49AE-9F86-48E0CE20F24E}E:\games\steam\steam.exe] => (Allow) E:\games\steam\steam.exe
FirewallRules: [UDP Query User{2BAFF90F-ECE3-40AB-9147-6982D1BA12D0}E:\games\steam\steam.exe] => (Allow) E:\games\steam\steam.exe
FirewallRules: [TCP Query User{12D5BD13-4E83-4EA5-BCE5-80E4F151091B}C:\users\jiří hlisnikovský\desktop\nová složka (2)\poker3d.exe] => (Allow) C:\users\jiří hlisnikovský\desktop\nová složka (2)\poker3d.exe
FirewallRules: [UDP Query User{10641297-C502-4C62-BADF-7DAC200C5A75}C:\users\jiří hlisnikovský\desktop\nová složka (2)\poker3d.exe] => (Allow) C:\users\jiří hlisnikovský\desktop\nová složka (2)\poker3d.exe
FirewallRules: [{60AC8807-074E-4EEA-B402-F24711ECAA0C}] => (Allow) E:\Games\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{A6C289CF-19CB-478C-8567-B62C2EE6CC77}] => (Allow) E:\Games\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{C6632F4E-D09A-4623-8027-580C298B81BD}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{478455D8-7444-4FCA-A7FF-E6EA17772E01}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{D0D5EC3C-3D50-4094-B775-C903EC683299}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{73DE4B09-E99D-4372-A82B-6060A078DB6F}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{397D1CB1-85BF-430A-ACA1-F73608112633}] => (Allow) E:\Games\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{ECE6ABA5-26E5-4554-A155-C6D1F2B9EA0A}] => (Allow) E:\Games\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{025FA25A-D953-4EBC-9B05-1F903128E65F}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{A6D4C001-1D35-4E25-8E16-94B2C2D800EC}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{AED596D8-4B4B-40B2-A979-CD4981EF412B}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{A053D092-C6B5-47A3-8254-DFA9A5B6C52A}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{59F05A68-E533-4039-A9B3-E4F8C4765F1F}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{98531BE6-FAE3-417C-AE64-B1964CFA40F4}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{DCA44B7E-1898-4407-9C7A-DEDE6951E0BC}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{D71287F1-2194-4857-B989-543CC5B3D49C}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{149216AC-64D9-4B5B-BE2E-BCF1295C9B3B}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{9913978F-8616-4333-A155-05AADC3818B9}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{95E87C19-1352-43DF-9660-38E84C8A4EE9}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{D72E56CB-B57A-4E4B-9FBA-CC261D63B843}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{1840CEB9-03A1-4A95-B6DB-3ABEEDB83AAF}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{E773A1CD-D6DF-4869-82ED-7037D0D5E5D0}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{081A6892-6755-45FF-8532-342B6FC8DB53}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{50603CFA-A544-4ADB-BA6B-D160CE737C3E}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{09F450C9-6F18-4436-92B7-E8139C7059CC}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{5570BC12-0CB1-4A16-B739-6E60B8A40040}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{22263391-ED46-4E52-B53D-005D975800D6}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{76F632BA-B31B-4DBD-B55A-B8D2DB2759A6}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{6B295A4B-32B4-4EDE-A186-100F56E74720}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{F2A44DD2-252F-4C5D-B7BA-0609F1ACDE44}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{1C0B8050-9575-4CBD-9054-286B9CFCDC85}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{61F899C6-D57F-46CB-B354-19257594B232}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{CA4192F5-C399-4231-9718-574580B09411}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{D72CE1DD-714B-4E05-AF0D-256C1850E31D}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{44D5B112-9275-4BE9-8820-368EB1F65138}] => (Allow) E:\Games\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{68EF566B-0A05-48EF-B91A-1077232C5C49}] => (Allow) E:\Games\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{05BDE514-54EC-4274-B9DB-C5476F5ECE48}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{2F4BA035-8DCF-472C-9451-F7CAA0735214}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{8D0216DF-D31B-4073-9FE2-347D44EBBB37}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{F8A196A0-F09A-44AA-BD04-25F3074FB63C}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{8869D32A-66EB-4FD8-B4E2-E03610D7E77C}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{BE69A7A2-EAE6-47F2-86BA-F9174AF1D506}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{3EED696A-846D-4E4A-BC6B-9C041CE19010}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{24CD4A20-572F-4C7F-94C8-E365EB1E64DC}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{76E8AA3B-FE2D-4DB2-96D0-3A3D64118429}] => (Allow) E:\Games\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{58460C19-4CC2-4C96-BB48-27810E8E7A96}] => (Allow) E:\Games\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{6EB32378-0A06-489E-8F05-BC9F60B36F2D}] => (Allow) E:\Games\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{CF05982F-80FF-4B28-985C-2B9A351648CA}] => (Allow) E:\Games\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{DB28ADEB-5C1A-4B6F-B2D8-6E85B958A108}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{B95AAD02-E4E8-4928-9E05-1A20E278F7A0}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{7FF39743-C823-4495-B8B6-8B414016B40B}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{F96CE38A-A48E-4FCF-B693-3E7D9DA44876}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{C5949D76-2531-480B-AB06-25EAA32C1EEA}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{AA45E4C5-8C89-474A-86AC-B33B051D45C2}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{5A5000E2-6B5F-43F4-BF6F-0A4E64BAA08F}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{D6573611-02B5-4441-A4E9-BC06BF5D9769}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{C937858A-2007-4B76-BAD1-A17C3B2A2FA9}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{350C0D8B-F98C-4760-9BA0-3A1D95DD81B0}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [TCP Query User{07F98DA3-5359-43C5-A405-D9BCB584E930}E:\games\counter strike 1.6\counter-strike 1.6 non-steam\hl.exe] => (Allow) E:\games\counter strike 1.6\counter-strike 1.6 non-steam\hl.exe
FirewallRules: [UDP Query User{F0791D09-E50F-4653-9368-E77ABA853F82}E:\games\counter strike 1.6\counter-strike 1.6 non-steam\hl.exe] => (Allow) E:\games\counter strike 1.6\counter-strike 1.6 non-steam\hl.exe
FirewallRules: [{FD709506-DA7E-40BE-93A9-E6BA19B7BA70}] => (Allow) E:\Games\Steam\steamapps\common\Free to Play\FTP.exe
FirewallRules: [{F28A5CC7-C469-4585-B762-8E7D9B202F80}] => (Allow) E:\Games\Steam\steamapps\common\Free to Play\FTP.exe
FirewallRules: [{56195C8E-3A8A-461A-910E-EBE9EA6F02E5}] => (Allow) E:\Games\Steam\Steam.exe
FirewallRules: [{18DB0636-08D6-4217-B977-36F21829770F}] => (Allow) E:\Games\Steam\Steam.exe
FirewallRules: [TCP Query User{556F77B4-B64C-472B-A5F7-61DED4C96017}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [UDP Query User{EA48BF6A-8EF1-4777-8F5D-EB4F2F1C8A6B}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [{9268C4BD-F793-4C05-8D17-C276B71C6ADB}] => (Block) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [{8D3DA954-ED87-4F64-85E3-1F95B65230FC}] => (Block) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [{4EA44DE0-468A-4518-9B43-0AD0E95493F4}] => (Allow) E:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{1E1435A5-D574-444F-A15E-681D47BDADF5}] => (Allow) E:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{82DC9A46-8FC5-4A85-A114-2EF1C409A826}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{943AB411-63A6-40EC-8346-4A9B285B478E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E5696F29-047C-4636-B987-4293DA6AD416}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{BF221AF9-5E7E-4D4A-901F-7A78CC587027}C:\users\jiří hlisnikovský\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\jiří hlisnikovský\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{E23D4C83-D99D-4FF6-93B6-D7458012F7D8}C:\users\jiří hlisnikovský\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\jiří hlisnikovský\appdata\local\akamai\netsession_win.exe
FirewallRules: [{9835F1DE-97B6-41DF-A506-940B5EBA941F}] => (Block) C:\users\jiří hlisnikovský\appdata\local\akamai\netsession_win.exe
FirewallRules: [{9110FE53-BB16-447F-B4AB-1B667E4C50A0}] => (Block) C:\users\jiří hlisnikovský\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{4299FE12-6EF9-4359-979B-1109933E13F9}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{3A28245E-9007-49FB-9E99-26AE5321A87C}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{C83D083E-CDCE-4BAA-83F8-97D80CC01390}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{5FBFA8F0-35C1-4352-A397-B0C70EA8A4D1}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{17F1EF04-D3B2-46A5-8C8B-74CBC9E78DA1}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{B9535F6F-6364-4732-8AD5-2FD4D289894B}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{CBB56DE1-A058-46E6-98E6-6D40F793AC26}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{418A1F3B-D11B-4B2B-8FDB-8A7864AB0B09}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{AA8E3F46-4D49-47F9-A6A2-8C628CA96856}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{2EFCF93B-7D34-4633-83E3-41C008AD03F1}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{CBBF24F7-F124-49E2-BCCD-EA16C3C4B72B}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{E23E4309-06FA-4DC4-8370-F7C2BAFDD3B6}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{CD67BC42-8460-4C6E-86AD-F22E0EC74C88}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{5EC75400-B7BF-4581-B61C-CBAFB9E5EDE8}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{E75D3FED-4B4D-467D-BAB9-52AD14FD70A5}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Faulty Device Manager Devices =============
Name: avast! Firewall NDIS Filter Miniport
Description: avast! Firewall NDIS Filter Miniport
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: ALWIL Software
Service: aswNdis
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.
Name: Řadič USB (Universal Serial Bus)
Description: Řadič USB (Universal Serial Bus)
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/06/2015 09:35:44 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Službu nelze spustit. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
v BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
v System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (06/06/2015 09:35:32 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/06/2015 07:58:51 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Službu nelze spustit. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
v BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
v System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (06/06/2015 07:58:40 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (06/06/2015 09:41:38 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Windows Update přestala během spouštění reagovat.
Error: (06/06/2015 09:38:17 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Microsoft .NET Framework NGEN v4.0.30319_X86 bylo dosaženo časového limitu (30000 ms).
Error: (06/06/2015 09:35:44 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba BlueStacks Android Service byla ukončena s následující chybou:
%%1064
Error: (06/06/2015 08:04:28 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Windows Update byla ukončena s následující chybou:
%%-2147467243
Error: (06/06/2015 08:03:58 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Windows Update přestala během spouštění reagovat.
Error: (06/06/2015 07:58:51 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba BlueStacks Android Service byla ukončena s následující chybou:
%%1064
Microsoft Office:
=========================
CodeIntegrity Errors:
===================================
Date: 2015-06-06 12:30:19.543
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-06 12:30:19.543
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-06 12:30:19.527
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-06 12:30:19.527
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-06 12:24:59.836
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-06 12:24:59.820
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-06 12:24:59.820
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-06 12:24:59.805
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-04 17:09:46.120
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-04 17:09:46.105
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: AMD Phenom(tm) II X4 955 Processor
Percentage of memory in use: 50%
Total physical RAM: 4093.55 MB
Available physical RAM: 2031.2 MB
Total Pagefile: 8185.3 MB
Available Pagefile: 5606.23 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:466.26 GB) (Free:264.98 GB) NTFS
Drive e: (Data, hudba, hry) (Fixed) (Total:465.16 GB) (Free:359.02 GB) NTFS
Drive f: (Dex) (CDROM) (Total:2.73 GB) (Free:0 GB) UDF
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or
(Size: 931.5 GB) (Disk ID: FDE6FDE6)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=465.2 GB) - (Type=07 NTFS)
==================== End of log ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version:06-06-2015
Ran by Jiří Hlisnikovský at 2015-06-06 21:48:55
Running from C:\Users\Jiří Hlisnikovský\Desktop
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1876454918-3465153737-193926455-500 - Administrator - Disabled)
Guest (S-1-5-21-1876454918-3465153737-193926455-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1876454918-3465153737-193926455-1002 - Limited - Enabled)
Jiří Hlisnikovský (S-1-5-21-1876454918-3465153737-193926455-1001 - Administrator - Enabled) => C:\Users\Jiří Hlisnikovský
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Out of date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Out of date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKLM-x32\...\uTorrent) (Version: 3.2.3.28705 - BitTorrent Inc.)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.02) - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.02 - Adobe Systems Incorporated)
AIMP3 (HKLM-x32\...\AIMP3) (Version: v3.55.1355, 14.07.2014 - AIMP DevTeam)
Akamai NetSession Interface (HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Akamai) (Version: - Akamai Technologies, Inc)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Ashampoo Burning Studio 6 FREE v.6.84 (HKLM-x32\...\{91B33C97-3ED1-03EA-A67B-244AA4D7B559}_is1) (Version: 6.8.4 - Ashampoo GmbH & Co. KG)
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2021 - AVAST Software)
Battlefield 3™ (HKLM-x32\...\{64BFBE7A-886C-4CA2-A9B4-0C2B5A5942BC}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.3.4073 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{D0B14565-60F3-4276-9265-91906896EFD0}) (Version: 0.9.3.4073 - BlueStack Systems, Inc.)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.68.1077 - AB Team, d.o.o.)
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: 1.6 - Activision) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: 1.7 - Activision) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
Citace PRO 2.0.2 (64-bit) (HKLM\...\{240FFC1B-81AD-4418-B4C2-D62240520DE7}) (Version: 2.0.2 - Citace.com)
Counter-Strike 1.6 Non-Steam 1.0 (HKLM-x32\...\Counter-Strike 1.6 Non-Steam 1.0) (Version: - )
CPUID CPU-Z 1.69 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
Curse Client (HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\101a9f93b8f0bb6f) (Version: 5.1.1.792 - Curse)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.46.1.0328 - DT Soft Ltd)
Defender Game Racer X7 gamepad (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Defender Game Racer X7 gamepad)
Defender Game Racer X7 gamepad (HKLM-x32\...\{2A0B2509-8081-486D-AC1D-20ACDCC2307A}) (Version: 09.28.2009 - FFDriver)
Dex (HKLM-x32\...\{F8D177A2-B6D6-4774-A03C-A5E6DA5E346C}_is1) (Version: 2.0.0.0 - Dreadlocks Ltd.)
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)
Dropbox (HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Dropbox) (Version: 2.6.24 - Dropbox, Inc.)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Garry)
Google Drive (HKLM-x32\...\{CBC9F5FD-5CFA-4A33-81CD-369EAB77E3A6}) (Version: 1.22.9403.0223 - Google, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Heroes of Newerth (HKLM-x32\...\hon) (Version: 2.3.0 - S2 Games)
Import souborů SketchUp (HKLM-x32\...\{C403E867-FCF1-432B-BCC1-8FFD40A10A6E}) (Version: 1.2.0 - Autodesk)
Import souborů SketchUp 2016 (HKLM-x32\...\{C769FB7C-1F55-4B31-9A2A-21CEC50F4F92}) (Version: 2.0.0 - Autodesk)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 3.9.1.135 - PandoraTV)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden
Malwarebytes Anti-Malware verze 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50325 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 cs) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 cs)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
neurowise (HKLM\...\neurowise) (Version: 2014.09.19.162528 - neurowise) <==== ATTENTION
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Ori and the Blind Forest (HKLM-x32\...\Ori and the Blind Forest_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter)
Origin (HKLM-x32\...\Origin) (Version: 9.1.15.109 - Electronic Arts, Inc.)
Pandora Service (HKLM-x32\...\4F6D5E84-5826-4394-9F40-3A9A19165651_is1) (Version: - Pandora.TV) <==== ATTENTION
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5875) (Version: - )
PokerStars (HKLM-x32\...\PokerStars) (Version: - PokerStars)
Raptr (HKLM-x32\...\Raptr) (Version: - )
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6650 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.)
Skype™ 6.22 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.107 - Skype Technologies S.A.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.11.1 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.26297 - TeamViewer)
Tunngle beta (HKLM-x32\...\Tunngle beta_is1) (Version: - Tunngle.net GmbH)
TurboCAD Professional 16 (HKLM-x32\...\{912F394B-117F-415C-9C0F-2C2018F85CE6}) (Version: 16.1 - IMSIDesign)
Unity Web Player (HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: - )
Warcraft III: All Products (HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Warcraft III) (Version: - )
WATCH_DOGS (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft)
WinRAR 4.20 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1876454918-3465153737-193926455-1001_Classes\CLSID\{305fdc36-b695-4439-953e-bb1f0880e59a}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1876454918-3465153737-193926455-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jiří Hlisnikovský\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1876454918-3465153737-193926455-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jiří Hlisnikovský\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1876454918-3465153737-193926455-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jiří Hlisnikovský\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1876454918-3465153737-193926455-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jiří Hlisnikovský\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
==================== Restore Points =========================
24-05-2015 12:01:43 Naplánovaný kontrolní bod
29-05-2015 00:03:21 Installed Defender Game Racer X7 gamepad
29-05-2015 00:24:41 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
29-05-2015 00:25:21 Nainstalováno rozhraní DirectX
04-06-2015 13:14:09 zoek.exe restore point
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2015-06-06 12:34 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {25C94A9B-B958-4BF8-A282-D07FB755E257} - System32\Tasks\{AD9778CF-8D82-4085-8D51-C31C3BF45BAC} => pcalua.exe -a "C:\Users\Jiří Hlisnikovský\AppData\Roaming\.minecraft\minecraft launcher\Uninstall.exe"
Task: {275FF5A9-0B40-495A-9501-E11F97E6C836} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03] (Adobe Systems Incorporated)
Task: {4F12DF4C-20AE-4EC7-8583-188A7058BA18} - System32\Tasks\{5C588194-05F4-413A-B3E0-544AC107F240} => pcalua.exe -a "C:\Users\Jiří Hlisnikovský\Desktop\hamachi-lista-centrumcz.exe" -d "C:\Users\Jiří Hlisnikovský\Desktop"
Task: {58594241-5BDC-4133-86AC-8795AF2707DF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {8034D3DF-870D-4B5F-BF0A-3B0CC654243E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: {A94D97EA-8D52-4A7D-8D94-77E5E6408494} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)
Task: {D540CE01-2DE3-4F88-A979-030FE3A26116} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-11] (AVAST Software)
Task: {F802F85C-EAD1-4DA8-8C1E-72408418CE2C} - System32\Tasks\{AE52AC37-B861-4003-87A5-33FB5363FFE7} => pcalua.exe -a "C:\Users\Jiří Hlisnikovský\Desktop\P6_Setup_v2.3.exe" -d "C:\Users\Jiří Hlisnikovský\Desktop"
Task: {FDC09F16-7105-4D24-9474-4E9C84BDCA4A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (Whitelisted) ==============
2014-11-20 21:23 - 2014-11-20 21:23 - 00214528 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2014-02-11 06:08 - 2014-02-11 06:08 - 00817152 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Device.dll
2014-02-11 06:08 - 2014-02-11 06:08 - 03650560 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Platform.dll
2014-11-20 21:23 - 2014-11-20 21:23 - 00102400 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-07-11 08:29 - 2014-07-11 08:29 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
2014-01-07 19:28 - 2014-01-07 12:47 - 02152960 _____ () C:\Program Files\AVAST Software\Avast\defs\14010700\algo.dll
2014-07-11 08:29 - 2014-07-11 08:29 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd
2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll
2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll
2013-11-21 02:05 - 2013-11-21 02:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd
2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll
2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData:NT
AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:NT
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\ProgramData\Application Data:NT
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\Data aplikací:NT
AlternateDataStreams: C:\ProgramData\Data aplikací:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2
AlternateDataStreams: C:\ProgramData\TEMP:56E2E879
AlternateDataStreams: C:\ProgramData\TEMP:99671BE2
AlternateDataStreams: C:\ProgramData\TEMP:FD34FE88
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\Data aplikací:NT
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\Data aplikací:NT2
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\AppData\Roaming:NT2
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jiří Hlisnikovský\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{798B6367-41AD-49F2-ADDF-A5135DF0CFDE}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [{2B435F98-1C38-4CA9-934E-964A45B48BB0}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{75195D4B-5CAD-4099-891C-C4CDDB52D8BE}E:\games\warcraft iii\warcraft iii\war3.exe] => (Allow) E:\games\warcraft iii\warcraft iii\war3.exe
FirewallRules: [UDP Query User{60553022-6E5E-4CFA-BB48-2876F2C4CFAD}E:\games\warcraft iii\warcraft iii\war3.exe] => (Allow) E:\games\warcraft iii\warcraft iii\war3.exe
FirewallRules: [{0FB01B84-CDBE-4B86-8C88-7E338260596B}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{C5B812AD-B2B7-4C03-9CF6-A12EF3570391}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{2C674C5F-F5E0-4766-9C18-D957341CDC73}C:\program files (x86)\origin games\Battlefield Bad Company 2\bfbc2game.exe] => (Allow) C:\program files (x86)\origin games\Battlefield Bad Company 2\bfbc2game.exe
FirewallRules: [UDP Query User{5097F11D-6481-4D80-8F59-6B10F2472270}C:\program files (x86)\origin games\Battlefield Bad Company 2\bfbc2game.exe] => (Allow) C:\program files (x86)\origin games\Battlefield Bad Company 2\bfbc2game.exe
FirewallRules: [TCP Query User{7A588D60-B226-40B6-A4D0-E4776A8223C7}C:\program files (x86)\heroes of newerth\hon.exe] => (Allow) C:\program files (x86)\heroes of newerth\hon.exe
FirewallRules: [UDP Query User{9B4CC318-2247-4AF3-BEEB-5B8FCD3F07BA}C:\program files (x86)\heroes of newerth\hon.exe] => (Allow) C:\program files (x86)\heroes of newerth\hon.exe
FirewallRules: [{DDB77065-64E2-40C6-8418-803A9C502CC2}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [TCP Query User{ABCF942F-F3E1-4DC2-B3CC-87983BA248B2}E:\games\steam\steamapps\common\dota 2 beta\dota.exe] => (Allow) E:\games\steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [UDP Query User{0B4AD8F6-CD6B-4BE0-AECE-720FA64D5611}E:\games\steam\steamapps\common\dota 2 beta\dota.exe] => (Allow) E:\games\steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{AADFC86D-A2C7-4F95-8196-4DCD1052347E}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{5574C0C9-C1F4-439C-95F1-721451C8EAA6}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{7E3E6C95-58AF-4DBA-8020-9D30F42AA69B}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{3123C7B3-BDAF-4C6A-9341-11CDDE9FBD2A}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [TCP Query User{238D5C0E-E894-49AE-9F86-48E0CE20F24E}E:\games\steam\steam.exe] => (Allow) E:\games\steam\steam.exe
FirewallRules: [UDP Query User{2BAFF90F-ECE3-40AB-9147-6982D1BA12D0}E:\games\steam\steam.exe] => (Allow) E:\games\steam\steam.exe
FirewallRules: [TCP Query User{12D5BD13-4E83-4EA5-BCE5-80E4F151091B}C:\users\jiří hlisnikovský\desktop\nová složka (2)\poker3d.exe] => (Allow) C:\users\jiří hlisnikovský\desktop\nová složka (2)\poker3d.exe
FirewallRules: [UDP Query User{10641297-C502-4C62-BADF-7DAC200C5A75}C:\users\jiří hlisnikovský\desktop\nová složka (2)\poker3d.exe] => (Allow) C:\users\jiří hlisnikovský\desktop\nová složka (2)\poker3d.exe
FirewallRules: [{60AC8807-074E-4EEA-B402-F24711ECAA0C}] => (Allow) E:\Games\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{A6C289CF-19CB-478C-8567-B62C2EE6CC77}] => (Allow) E:\Games\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{C6632F4E-D09A-4623-8027-580C298B81BD}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{478455D8-7444-4FCA-A7FF-E6EA17772E01}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{D0D5EC3C-3D50-4094-B775-C903EC683299}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{73DE4B09-E99D-4372-A82B-6060A078DB6F}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{397D1CB1-85BF-430A-ACA1-F73608112633}] => (Allow) E:\Games\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{ECE6ABA5-26E5-4554-A155-C6D1F2B9EA0A}] => (Allow) E:\Games\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{025FA25A-D953-4EBC-9B05-1F903128E65F}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{A6D4C001-1D35-4E25-8E16-94B2C2D800EC}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{AED596D8-4B4B-40B2-A979-CD4981EF412B}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{A053D092-C6B5-47A3-8254-DFA9A5B6C52A}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{59F05A68-E533-4039-A9B3-E4F8C4765F1F}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{98531BE6-FAE3-417C-AE64-B1964CFA40F4}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{DCA44B7E-1898-4407-9C7A-DEDE6951E0BC}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{D71287F1-2194-4857-B989-543CC5B3D49C}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{149216AC-64D9-4B5B-BE2E-BCF1295C9B3B}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{9913978F-8616-4333-A155-05AADC3818B9}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{95E87C19-1352-43DF-9660-38E84C8A4EE9}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{D72E56CB-B57A-4E4B-9FBA-CC261D63B843}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{1840CEB9-03A1-4A95-B6DB-3ABEEDB83AAF}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{E773A1CD-D6DF-4869-82ED-7037D0D5E5D0}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{081A6892-6755-45FF-8532-342B6FC8DB53}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{50603CFA-A544-4ADB-BA6B-D160CE737C3E}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{09F450C9-6F18-4436-92B7-E8139C7059CC}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{5570BC12-0CB1-4A16-B739-6E60B8A40040}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{22263391-ED46-4E52-B53D-005D975800D6}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{76F632BA-B31B-4DBD-B55A-B8D2DB2759A6}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{6B295A4B-32B4-4EDE-A186-100F56E74720}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{F2A44DD2-252F-4C5D-B7BA-0609F1ACDE44}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{1C0B8050-9575-4CBD-9054-286B9CFCDC85}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{61F899C6-D57F-46CB-B354-19257594B232}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{CA4192F5-C399-4231-9718-574580B09411}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{D72CE1DD-714B-4E05-AF0D-256C1850E31D}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{44D5B112-9275-4BE9-8820-368EB1F65138}] => (Allow) E:\Games\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{68EF566B-0A05-48EF-B91A-1077232C5C49}] => (Allow) E:\Games\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{05BDE514-54EC-4274-B9DB-C5476F5ECE48}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{2F4BA035-8DCF-472C-9451-F7CAA0735214}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{8D0216DF-D31B-4073-9FE2-347D44EBBB37}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{F8A196A0-F09A-44AA-BD04-25F3074FB63C}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{8869D32A-66EB-4FD8-B4E2-E03610D7E77C}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{BE69A7A2-EAE6-47F2-86BA-F9174AF1D506}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{3EED696A-846D-4E4A-BC6B-9C041CE19010}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{24CD4A20-572F-4C7F-94C8-E365EB1E64DC}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{76E8AA3B-FE2D-4DB2-96D0-3A3D64118429}] => (Allow) E:\Games\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{58460C19-4CC2-4C96-BB48-27810E8E7A96}] => (Allow) E:\Games\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{6EB32378-0A06-489E-8F05-BC9F60B36F2D}] => (Allow) E:\Games\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{CF05982F-80FF-4B28-985C-2B9A351648CA}] => (Allow) E:\Games\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
FirewallRules: [{DB28ADEB-5C1A-4B6F-B2D8-6E85B958A108}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{B95AAD02-E4E8-4928-9E05-1A20E278F7A0}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{7FF39743-C823-4495-B8B6-8B414016B40B}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{F96CE38A-A48E-4FCF-B693-3E7D9DA44876}] => (Allow) E:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{C5949D76-2531-480B-AB06-25EAA32C1EEA}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{AA45E4C5-8C89-474A-86AC-B33B051D45C2}] => (Allow) E:\Games\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{5A5000E2-6B5F-43F4-BF6F-0A4E64BAA08F}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{D6573611-02B5-4441-A4E9-BC06BF5D9769}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{C937858A-2007-4B76-BAD1-A17C3B2A2FA9}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{350C0D8B-F98C-4760-9BA0-3A1D95DD81B0}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [TCP Query User{07F98DA3-5359-43C5-A405-D9BCB584E930}E:\games\counter strike 1.6\counter-strike 1.6 non-steam\hl.exe] => (Allow) E:\games\counter strike 1.6\counter-strike 1.6 non-steam\hl.exe
FirewallRules: [UDP Query User{F0791D09-E50F-4653-9368-E77ABA853F82}E:\games\counter strike 1.6\counter-strike 1.6 non-steam\hl.exe] => (Allow) E:\games\counter strike 1.6\counter-strike 1.6 non-steam\hl.exe
FirewallRules: [{FD709506-DA7E-40BE-93A9-E6BA19B7BA70}] => (Allow) E:\Games\Steam\steamapps\common\Free to Play\FTP.exe
FirewallRules: [{F28A5CC7-C469-4585-B762-8E7D9B202F80}] => (Allow) E:\Games\Steam\steamapps\common\Free to Play\FTP.exe
FirewallRules: [{56195C8E-3A8A-461A-910E-EBE9EA6F02E5}] => (Allow) E:\Games\Steam\Steam.exe
FirewallRules: [{18DB0636-08D6-4217-B977-36F21829770F}] => (Allow) E:\Games\Steam\Steam.exe
FirewallRules: [TCP Query User{556F77B4-B64C-472B-A5F7-61DED4C96017}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [UDP Query User{EA48BF6A-8EF1-4777-8F5D-EB4F2F1C8A6B}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [{9268C4BD-F793-4C05-8D17-C276B71C6ADB}] => (Block) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [{8D3DA954-ED87-4F64-85E3-1F95B65230FC}] => (Block) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [{4EA44DE0-468A-4518-9B43-0AD0E95493F4}] => (Allow) E:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{1E1435A5-D574-444F-A15E-681D47BDADF5}] => (Allow) E:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{82DC9A46-8FC5-4A85-A114-2EF1C409A826}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{943AB411-63A6-40EC-8346-4A9B285B478E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E5696F29-047C-4636-B987-4293DA6AD416}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{BF221AF9-5E7E-4D4A-901F-7A78CC587027}C:\users\jiří hlisnikovský\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\jiří hlisnikovský\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{E23D4C83-D99D-4FF6-93B6-D7458012F7D8}C:\users\jiří hlisnikovský\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\jiří hlisnikovský\appdata\local\akamai\netsession_win.exe
FirewallRules: [{9835F1DE-97B6-41DF-A506-940B5EBA941F}] => (Block) C:\users\jiří hlisnikovský\appdata\local\akamai\netsession_win.exe
FirewallRules: [{9110FE53-BB16-447F-B4AB-1B667E4C50A0}] => (Block) C:\users\jiří hlisnikovský\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{4299FE12-6EF9-4359-979B-1109933E13F9}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{3A28245E-9007-49FB-9E99-26AE5321A87C}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{C83D083E-CDCE-4BAA-83F8-97D80CC01390}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{5FBFA8F0-35C1-4352-A397-B0C70EA8A4D1}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{17F1EF04-D3B2-46A5-8C8B-74CBC9E78DA1}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{B9535F6F-6364-4732-8AD5-2FD4D289894B}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{CBB56DE1-A058-46E6-98E6-6D40F793AC26}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{418A1F3B-D11B-4B2B-8FDB-8A7864AB0B09}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{AA8E3F46-4D49-47F9-A6A2-8C628CA96856}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{2EFCF93B-7D34-4633-83E3-41C008AD03F1}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{CBBF24F7-F124-49E2-BCCD-EA16C3C4B72B}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{E23E4309-06FA-4DC4-8370-F7C2BAFDD3B6}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{CD67BC42-8460-4C6E-86AD-F22E0EC74C88}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{5EC75400-B7BF-4581-B61C-CBAFB9E5EDE8}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{E75D3FED-4B4D-467D-BAB9-52AD14FD70A5}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Faulty Device Manager Devices =============
Name: avast! Firewall NDIS Filter Miniport
Description: avast! Firewall NDIS Filter Miniport
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: ALWIL Software
Service: aswNdis
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.
Name: Řadič USB (Universal Serial Bus)
Description: Řadič USB (Universal Serial Bus)
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/06/2015 09:35:44 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Službu nelze spustit. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
v BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
v System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (06/06/2015 09:35:32 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/06/2015 07:58:51 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Službu nelze spustit. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
v BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
v System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (06/06/2015 07:58:40 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (06/06/2015 09:41:38 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Windows Update přestala během spouštění reagovat.
Error: (06/06/2015 09:38:17 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Microsoft .NET Framework NGEN v4.0.30319_X86 bylo dosaženo časového limitu (30000 ms).
Error: (06/06/2015 09:35:44 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba BlueStacks Android Service byla ukončena s následující chybou:
%%1064
Error: (06/06/2015 08:04:28 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Windows Update byla ukončena s následující chybou:
%%-2147467243
Error: (06/06/2015 08:03:58 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Windows Update přestala během spouštění reagovat.
Error: (06/06/2015 07:58:51 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba BlueStacks Android Service byla ukončena s následující chybou:
%%1064
Microsoft Office:
=========================
CodeIntegrity Errors:
===================================
Date: 2015-06-06 12:30:19.543
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-06 12:30:19.543
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-06 12:30:19.527
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-06 12:30:19.527
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-06 12:24:59.836
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-06 12:24:59.820
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-06 12:24:59.820
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-06 12:24:59.805
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-04 17:09:46.120
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-04 17:09:46.105
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: AMD Phenom(tm) II X4 955 Processor
Percentage of memory in use: 50%
Total physical RAM: 4093.55 MB
Available physical RAM: 2031.2 MB
Total Pagefile: 8185.3 MB
Available Pagefile: 5606.23 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:466.26 GB) (Free:264.98 GB) NTFS
Drive e: (Data, hudba, hry) (Fixed) (Total:465.16 GB) (Free:359.02 GB) NTFS
Drive f: (Dex) (CDROM) (Total:2.73 GB) (Free:0 GB) UDF
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=465.2 GB) - (Type=07 NTFS)
==================== End of log ============================
- jerabina
- člen Security týmu
-
Level 6
- Příspěvky: 3647
- Registrován: březen 13
- Bydliště: Litoměřice
- Pohlaví:
- Stav:
Offline
Re: Prosím o kontrolu logu
Prosím, postupuj následujícím způsobem:
Otevřít poznámkový blok (Start => Všechny programy => Příslušenství => Poznámkový blok).
Prosím, zkopíruj do něj celý obsah níže.
(Můžeš použít funkci „vybrat vše“, klepni pravým tlačítkem myši na levé horní políčko v otevřeném poznámkovém bloku a zvol „ Vložit“).
Ulož jej na na plochu jako fixlist.txt
Spusťt FRST a stiskni tlačítko „Fix“ (Opravit) jen jednou a čekej.
Nástroj vypracuje log na ploše (Fixlog.txt), prosím zkopíruj sem celý jeho obsah.
Otevřít poznámkový blok (Start => Všechny programy => Příslušenství => Poznámkový blok).
Prosím, zkopíruj do něj celý obsah níže.
Kód: Vybrat vše
Start
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Run: [Steam] => E:\Games\Steam\steam.exe [2892992 2015-06-04] (Valve Corporation)
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3674320 2013-01-08] (DT Soft Ltd)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll No File
FF Plugin-x32: @t.garena.com/garenatalk -> C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll No File
CHR dev: Chrome dev build detected! <======= ATTENTION
C:\Users\Jiří Hlisnikovský\AppData\Roaming\D2Info0
C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_1
C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_2
C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_3
C:\Users\Jiří Hlisnikovský\AppData\Roaming\room_v3.dat
C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
Task: {275FF5A9-0B40-495A-9501-E11F97E6C836} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03] (Adobe Systems Incorporated)
Task: {4F12DF4C-20AE-4EC7-8583-188A7058BA18} - System32\Tasks\{5C588194-05F4-413A-B3E0-544AC107F240} => pcalua.exe -a "C:\Users\Jiří Hlisnikovský\Desktop\hamachi-lista-centrumcz.exe" -d "C:\Users\Jiří Hlisnikovský\Desktop"
Task: {58594241-5BDC-4133-86AC-8795AF2707DF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {8034D3DF-870D-4B5F-BF0A-3B0CC654243E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: {F802F85C-EAD1-4DA8-8C1E-72408418CE2C} - System32\Tasks\{AE52AC37-B861-4003-87A5-33FB5363FFE7} => pcalua.exe -a "C:\Users\Jiří Hlisnikovský\Desktop\P6_Setup_v2.3.exe" -d "C:\Users\Jiří Hlisnikovský\Desktop"
Task: {FDC09F16-7105-4D24-9474-4E9C84BDCA4A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
AlternateDataStreams: C:\ProgramData:NT
AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:NT
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\ProgramData\Application Data:NT
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\Data aplikací:NT
AlternateDataStreams: C:\ProgramData\Data aplikací:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2
AlternateDataStreams: C:\ProgramData\TEMP:56E2E879
AlternateDataStreams: C:\ProgramData\TEMP:99671BE2
AlternateDataStreams: C:\ProgramData\TEMP:FD34FE88
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\Data aplikací:NT
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\Data aplikací:NT2
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\AppData\Roaming:NT2
CMD: bitsadmin /reset /allusers
EmptyTemp:
End
(Můžeš použít funkci „vybrat vše“, klepni pravým tlačítkem myši na levé horní políčko v otevřeném poznámkovém bloku a zvol „ Vložit“).
Ulož jej na na plochu jako fixlist.txt
Spusťt FRST a stiskni tlačítko „Fix“ (Opravit) jen jednou a čekej.
Nástroj vypracuje log na ploše (Fixlog.txt), prosím zkopíruj sem celý jeho obsah.
Když nevíš jak dál, přichází na řadu prostudovat manuál!
HJT návod
Pokud neodpovídám do vašich témat v sekci HJT když jsem online, tak je to jen proto, že jsem na mobilu kde je studování logů a psaní skriptů nemožné. Neberte to tedy prosím jako ignoraci.
HJT návod
Pokud neodpovídám do vašich témat v sekci HJT když jsem online, tak je to jen proto, že jsem na mobilu kde je studování logů a psaní skriptů nemožné. Neberte to tedy prosím jako ignoraci.
Re: Prosím o kontrolu logu
fixlog.txt
Fix result of Farbar Recovery Scan Tool (x64) Version:06-06-2015
Ran by Jiří Hlisnikovský at 2015-06-07 20:41:10 Run:1
Running from C:\Users\Jiří Hlisnikovský\Desktop
Loaded Profiles: Jiří Hlisnikovský (Available Profiles: Jiří Hlisnikovský)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Run: [Steam] => E:\Games\Steam\steam.exe [2892992 2015-06-04] (Valve Corporation)
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3674320 2013-01-08] (DT Soft Ltd)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll No File
FF Plugin-x32: @t.garena.com/garenatalk -> C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll No File
CHR dev: Chrome dev build detected! <======= ATTENTION
C:\Users\Jiří Hlisnikovský\AppData\Roaming\D2Info0
C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_1
C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_2
C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_3
C:\Users\Jiří Hlisnikovský\AppData\Roaming\room_v3.dat
C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
Task: {275FF5A9-0B40-495A-9501-E11F97E6C836} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03] (Adobe Systems Incorporated)
Task: {4F12DF4C-20AE-4EC7-8583-188A7058BA18} - System32\Tasks\{5C588194-05F4-413A-B3E0-544AC107F240} => pcalua.exe -a "C:\Users\Jiří Hlisnikovský\Desktop\hamachi-lista-centrumcz.exe" -d "C:\Users\Jiří Hlisnikovský\Desktop"
Task: {58594241-5BDC-4133-86AC-8795AF2707DF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {8034D3DF-870D-4B5F-BF0A-3B0CC654243E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: {F802F85C-EAD1-4DA8-8C1E-72408418CE2C} - System32\Tasks\{AE52AC37-B861-4003-87A5-33FB5363FFE7} => pcalua.exe -a "C:\Users\Jiří Hlisnikovský\Desktop\P6_Setup_v2.3.exe" -d "C:\Users\Jiří Hlisnikovský\Desktop"
Task: {FDC09F16-7105-4D24-9474-4E9C84BDCA4A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
AlternateDataStreams: C:\ProgramData:NT
AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:NT
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\ProgramData\Application Data:NT
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\Data aplikací:NT
AlternateDataStreams: C:\ProgramData\Data aplikací:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2
AlternateDataStreams: C:\ProgramData\TEMP:56E2E879
AlternateDataStreams: C:\ProgramData\TEMP:99671BE2
AlternateDataStreams: C:\ProgramData\TEMP:FD34FE88
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\Data aplikací:NT
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\Data aplikací:NT2
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\AppData\Roaming:NT2
CMD: bitsadmin /reset /allusers
EmptyTemp:
End
*****************
Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui => value removed successfully
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Steam => value removed successfully
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value removed successfully
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKU\S-1-5-21-1876454918-3465153737-193926455-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => value removed successfully
"HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => key removed successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value removed successfully
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => key not found.
"HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.1.7" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@t.garena.com/garenatalk" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9" => key removed successfully
CHR dev: Chrome dev build detected! <======= ATTENTION => Error: No automatic fix found for this entry.
C:\Users\Jiří Hlisnikovský\AppData\Roaming\D2Info0 => moved successfully.
C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_1 => moved successfully.
C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_2 => moved successfully.
C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_3 => moved successfully.
C:\Users\Jiří Hlisnikovský\AppData\Roaming\room_v3.dat => moved successfully.
C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{275FF5A9-0B40-495A-9501-E11F97E6C836}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{275FF5A9-0B40-495A-9501-E11F97E6C836}" => key removed successfully
C:\Windows\System32\Tasks\Adobe online update program => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe online update program" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4F12DF4C-20AE-4EC7-8583-188A7058BA18}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4F12DF4C-20AE-4EC7-8583-188A7058BA18}" => key removed successfully
C:\Windows\System32\Tasks\{5C588194-05F4-413A-B3E0-544AC107F240} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5C588194-05F4-413A-B3E0-544AC107F240}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{58594241-5BDC-4133-86AC-8795AF2707DF}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{58594241-5BDC-4133-86AC-8795AF2707DF}" => key removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8034D3DF-870D-4B5F-BF0A-3B0CC654243E}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8034D3DF-870D-4B5F-BF0A-3B0CC654243E}" => key removed successfully
C:\Windows\System32\Tasks\Adobe Flash Player Updater => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F802F85C-EAD1-4DA8-8C1E-72408418CE2C}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F802F85C-EAD1-4DA8-8C1E-72408418CE2C}" => key removed successfully
C:\Windows\System32\Tasks\{AE52AC37-B861-4003-87A5-33FB5363FFE7} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{AE52AC37-B861-4003-87A5-33FB5363FFE7}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FDC09F16-7105-4D24-9474-4E9C84BDCA4A}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FDC09F16-7105-4D24-9474-4E9C84BDCA4A}" => key removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => key removed successfully
C:\Windows\Tasks\Adobe Flash Player Updater.job => moved successfully.
C:\ProgramData => ":NT" ADS removed successfully.
C:\ProgramData => ":NT2" ADS removed successfully.
"C:\Users\All Users" => ":NT" ADS not found.
"C:\Users\All Users" => ":NT2" ADS not found.
"C:\ProgramData\Application Data" => ":NT" ADS not found.
"C:\ProgramData\Application Data" => ":NT2" ADS not found.
"C:\ProgramData\Data aplikací" => ":NT" ADS not found.
"C:\ProgramData\Data aplikací" => ":NT2" ADS not found.
C:\ProgramData\MTA San Andreas All => ":NT" ADS removed successfully.
C:\ProgramData\MTA San Andreas All => ":NT2" ADS removed successfully.
C:\ProgramData\TEMP => ":56E2E879" ADS removed successfully.
C:\ProgramData\TEMP => ":99671BE2" ADS removed successfully.
C:\ProgramData\TEMP => ":FD34FE88" ADS removed successfully.
"C:\Users\Jiří Hlisnikovský\Data aplikací" => ":NT" ADS not found.
"C:\Users\Jiří Hlisnikovský\Data aplikací" => ":NT2" ADS not found.
C:\Users\Jiří Hlisnikovský\AppData\Roaming => ":NT" ADS removed successfully.
C:\Users\Jiří Hlisnikovský\AppData\Roaming => ":NT2" ADS removed successfully.
========= bitsadmin /reset /allusers =========
BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.
BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.
0 out of 0 jobs canceled.
========= End of CMD: =========
EmptyTemp: => 435.7 MB temporary data Removed.
The system needed a reboot..
==== End of Fixlog 20:41:58 ====
Fix result of Farbar Recovery Scan Tool (x64) Version:06-06-2015
Ran by Jiří Hlisnikovský at 2015-06-07 20:41:10 Run:1
Running from C:\Users\Jiří Hlisnikovský\Desktop
Loaded Profiles: Jiří Hlisnikovský (Available Profiles: Jiří Hlisnikovský)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Run: [Steam] => E:\Games\Steam\steam.exe [2892992 2015-06-04] (Valve Corporation)
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3674320 2013-01-08] (DT Soft Ltd)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll No File
FF Plugin-x32: @t.garena.com/garenatalk -> C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll No File
CHR dev: Chrome dev build detected! <======= ATTENTION
C:\Users\Jiří Hlisnikovský\AppData\Roaming\D2Info0
C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_1
C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_2
C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_3
C:\Users\Jiří Hlisnikovský\AppData\Roaming\room_v3.dat
C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
Task: {275FF5A9-0B40-495A-9501-E11F97E6C836} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03] (Adobe Systems Incorporated)
Task: {4F12DF4C-20AE-4EC7-8583-188A7058BA18} - System32\Tasks\{5C588194-05F4-413A-B3E0-544AC107F240} => pcalua.exe -a "C:\Users\Jiří Hlisnikovský\Desktop\hamachi-lista-centrumcz.exe" -d "C:\Users\Jiří Hlisnikovský\Desktop"
Task: {58594241-5BDC-4133-86AC-8795AF2707DF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {8034D3DF-870D-4B5F-BF0A-3B0CC654243E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: {F802F85C-EAD1-4DA8-8C1E-72408418CE2C} - System32\Tasks\{AE52AC37-B861-4003-87A5-33FB5363FFE7} => pcalua.exe -a "C:\Users\Jiří Hlisnikovský\Desktop\P6_Setup_v2.3.exe" -d "C:\Users\Jiří Hlisnikovský\Desktop"
Task: {FDC09F16-7105-4D24-9474-4E9C84BDCA4A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
AlternateDataStreams: C:\ProgramData:NT
AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:NT
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\ProgramData\Application Data:NT
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\Data aplikací:NT
AlternateDataStreams: C:\ProgramData\Data aplikací:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2
AlternateDataStreams: C:\ProgramData\TEMP:56E2E879
AlternateDataStreams: C:\ProgramData\TEMP:99671BE2
AlternateDataStreams: C:\ProgramData\TEMP:FD34FE88
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\Data aplikací:NT
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\Data aplikací:NT2
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Jiří Hlisnikovský\AppData\Roaming:NT2
CMD: bitsadmin /reset /allusers
EmptyTemp:
End
*****************
Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui => value removed successfully
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Steam => value removed successfully
HKU\S-1-5-21-1876454918-3465153737-193926455-1001\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value removed successfully
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKU\S-1-5-21-1876454918-3465153737-193926455-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => value removed successfully
"HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => key removed successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value removed successfully
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => key not found.
"HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.1.7" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@t.garena.com/garenatalk" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9" => key removed successfully
CHR dev: Chrome dev build detected! <======= ATTENTION => Error: No automatic fix found for this entry.
C:\Users\Jiří Hlisnikovský\AppData\Roaming\D2Info0 => moved successfully.
C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_1 => moved successfully.
C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_2 => moved successfully.
C:\Users\Jiří Hlisnikovský\AppData\Roaming\DofusAppId0_3 => moved successfully.
C:\Users\Jiří Hlisnikovský\AppData\Roaming\room_v3.dat => moved successfully.
C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{275FF5A9-0B40-495A-9501-E11F97E6C836}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{275FF5A9-0B40-495A-9501-E11F97E6C836}" => key removed successfully
C:\Windows\System32\Tasks\Adobe online update program => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe online update program" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4F12DF4C-20AE-4EC7-8583-188A7058BA18}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4F12DF4C-20AE-4EC7-8583-188A7058BA18}" => key removed successfully
C:\Windows\System32\Tasks\{5C588194-05F4-413A-B3E0-544AC107F240} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5C588194-05F4-413A-B3E0-544AC107F240}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{58594241-5BDC-4133-86AC-8795AF2707DF}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{58594241-5BDC-4133-86AC-8795AF2707DF}" => key removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8034D3DF-870D-4B5F-BF0A-3B0CC654243E}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8034D3DF-870D-4B5F-BF0A-3B0CC654243E}" => key removed successfully
C:\Windows\System32\Tasks\Adobe Flash Player Updater => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F802F85C-EAD1-4DA8-8C1E-72408418CE2C}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F802F85C-EAD1-4DA8-8C1E-72408418CE2C}" => key removed successfully
C:\Windows\System32\Tasks\{AE52AC37-B861-4003-87A5-33FB5363FFE7} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{AE52AC37-B861-4003-87A5-33FB5363FFE7}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FDC09F16-7105-4D24-9474-4E9C84BDCA4A}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FDC09F16-7105-4D24-9474-4E9C84BDCA4A}" => key removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => key removed successfully
C:\Windows\Tasks\Adobe Flash Player Updater.job => moved successfully.
C:\ProgramData => ":NT" ADS removed successfully.
C:\ProgramData => ":NT2" ADS removed successfully.
"C:\Users\All Users" => ":NT" ADS not found.
"C:\Users\All Users" => ":NT2" ADS not found.
"C:\ProgramData\Application Data" => ":NT" ADS not found.
"C:\ProgramData\Application Data" => ":NT2" ADS not found.
"C:\ProgramData\Data aplikací" => ":NT" ADS not found.
"C:\ProgramData\Data aplikací" => ":NT2" ADS not found.
C:\ProgramData\MTA San Andreas All => ":NT" ADS removed successfully.
C:\ProgramData\MTA San Andreas All => ":NT2" ADS removed successfully.
C:\ProgramData\TEMP => ":56E2E879" ADS removed successfully.
C:\ProgramData\TEMP => ":99671BE2" ADS removed successfully.
C:\ProgramData\TEMP => ":FD34FE88" ADS removed successfully.
"C:\Users\Jiří Hlisnikovský\Data aplikací" => ":NT" ADS not found.
"C:\Users\Jiří Hlisnikovský\Data aplikací" => ":NT2" ADS not found.
C:\Users\Jiří Hlisnikovský\AppData\Roaming => ":NT" ADS removed successfully.
C:\Users\Jiří Hlisnikovský\AppData\Roaming => ":NT2" ADS removed successfully.
========= bitsadmin /reset /allusers =========
BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.
BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.
0 out of 0 jobs canceled.
========= End of CMD: =========
EmptyTemp: => 435.7 MB temporary data Removed.
The system needed a reboot..
==== End of Fixlog 20:41:58 ====
- jerabina
- člen Security týmu
-
Level 6
- Příspěvky: 3647
- Registrován: březen 13
- Bydliště: Litoměřice
- Pohlaví:
- Stav:
Offline
Re: Prosím o kontrolu logu
Co problémy? + nový log z HJT
Když nevíš jak dál, přichází na řadu prostudovat manuál!
HJT návod
Pokud neodpovídám do vašich témat v sekci HJT když jsem online, tak je to jen proto, že jsem na mobilu kde je studování logů a psaní skriptů nemožné. Neberte to tedy prosím jako ignoraci.
HJT návod
Pokud neodpovídám do vašich témat v sekci HJT když jsem online, tak je to jen proto, že jsem na mobilu kde je studování logů a psaní skriptů nemožné. Neberte to tedy prosím jako ignoraci.
Re: Prosím o kontrolu logu
Už to jede lépe než předtím, akorát jsem měl parkrát neobvyklý fps drop ve hrách, ale nevím zda-li to souvisí s timto problémem.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:13:25, on 7.6.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\BlueStacks\HD-Agent.exe
C:\PROGRA~2\Raptr\raptr.exe
C:\PROGRA~2\Raptr\raptr_im.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
C:\Users\Jiří Hlisnikovský\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [BlueStacks Agent] C:\Program Files (x86)\BlueStacks\HD-Agent.exe
O4 - HKLM\..\Run: [Raptr] "C:\Program Files (x86)\Raptr\raptrstub.exe" --startup
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai\netsession_win.exe"
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
O23 - Service: BlueStacks Updater Service (BstHdUpdaterSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8017 bytes
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:13:25, on 7.6.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\BlueStacks\HD-Agent.exe
C:\PROGRA~2\Raptr\raptr.exe
C:\PROGRA~2\Raptr\raptr_im.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
C:\Users\Jiří Hlisnikovský\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [BlueStacks Agent] C:\Program Files (x86)\BlueStacks\HD-Agent.exe
O4 - HKLM\..\Run: [Raptr] "C:\Program Files (x86)\Raptr\raptrstub.exe" --startup
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Jiří Hlisnikovský\AppData\Local\Akamai\netsession_win.exe"
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
O23 - Service: BlueStacks Updater Service (BstHdUpdaterSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8017 bytes
- jerabina
- člen Security týmu
-
Level 6
- Příspěvky: 3647
- Registrován: březen 13
- Bydliště: Litoměřice
- Pohlaví:
- Stav:
Offline
Re: Prosím o kontrolu logu
Dobře, FPS dropy občas být mohou, to není zas až tak neobvyklé.
Zavři ostatní programy/prohlížeče, odpoj se od internetu a v HJT fixni:
NÁVOD
Stáhni si zde DelFix
https://toolslib.net/downloads/viewdownload/2-delfix/
ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore) .
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci.
Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem. Jinak je zpráva zde:
v C: \ DelFix.txt
Pokud nejsou problémy, je to vše a můžeš dát vyřešeno - zelenou "fajfku"
Zavři ostatní programy/prohlížeče, odpoj se od internetu a v HJT fixni:
NÁVOD
Kód: Vybrat vše
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
Stáhni si zde DelFix
https://toolslib.net/downloads/viewdownload/2-delfix/
ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore) .
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci.
Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem. Jinak je zpráva zde:
v C: \ DelFix.txt
Pokud nejsou problémy, je to vše a můžeš dát vyřešeno - zelenou "fajfku"

Když nevíš jak dál, přichází na řadu prostudovat manuál!
HJT návod
Pokud neodpovídám do vašich témat v sekci HJT když jsem online, tak je to jen proto, že jsem na mobilu kde je studování logů a psaní skriptů nemožné. Neberte to tedy prosím jako ignoraci.
HJT návod
Pokud neodpovídám do vašich témat v sekci HJT když jsem online, tak je to jen proto, že jsem na mobilu kde je studování logů a psaní skriptů nemožné. Neberte to tedy prosím jako ignoraci.
Re: Prosím o kontrolu logu
Tím, že se zatím neprojevují další problémy tak usuzuji, že to je ok už. Děkuji velmi za váš čas a pomoc, hodně jste mi pomohli. Nashledanou
# DelFix v1.010 - Logfile created 08/06/2015 at 10:15:57
# Updated 26/04/2015 by Xplode
# Username : Jiří Hlisnikovský - KYUUBI
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
~ Removing disinfection tools ...
Deleted : C:\FRST
Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\RegBackup
Deleted : C:\Program Files (x86)\Trend Micro\Hijackthis
Deleted : C:\zoek-results.log
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\adwcleaner_4.206.exe
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\FRST64.exe
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\JRT.exe
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\HijackThis.exe
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\hijackthis.log
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\MBR.dat
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\RogueKillerX64.exe
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\TFC.exe
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\zoek.exe
Deleted : HKCU\console_combofixbackup
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe
Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart
Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys
Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart
Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys
Deleted : HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASWMBR
~ Cleaning system restore ...
Deleted : RP #203 [Naplánovaný kontrolní bod | 05/24/2015 10:01:43]
Deleted : RP #204 [Installed Defender Game Racer X7 gamepad | 05/28/2015 22:03:21]
Deleted : RP #205 [Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 | 05/28/2015 22:24:41]
Deleted : RP #206 [Nainstalováno rozhraní DirectX | 05/28/2015 22:25:21]
Deleted : RP #207 [zoek.exe restore point | 06/04/2015 11:14:09]
New restore point created !
########## - EOF - ##########
# DelFix v1.010 - Logfile created 08/06/2015 at 10:15:57
# Updated 26/04/2015 by Xplode
# Username : Jiří Hlisnikovský - KYUUBI
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
~ Removing disinfection tools ...
Deleted : C:\FRST
Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\RegBackup
Deleted : C:\Program Files (x86)\Trend Micro\Hijackthis
Deleted : C:\zoek-results.log
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\adwcleaner_4.206.exe
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\FRST64.exe
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\JRT.exe
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\HijackThis.exe
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\hijackthis.log
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\MBR.dat
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\RogueKillerX64.exe
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\TFC.exe
Deleted : C:\Users\Jiří Hlisnikovský\Desktop\zoek.exe
Deleted : HKCU\console_combofixbackup
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe
Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart
Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys
Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart
Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys
Deleted : HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASWMBR
~ Cleaning system restore ...
Deleted : RP #203 [Naplánovaný kontrolní bod | 05/24/2015 10:01:43]
Deleted : RP #204 [Installed Defender Game Racer X7 gamepad | 05/28/2015 22:03:21]
Deleted : RP #205 [Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 | 05/28/2015 22:24:41]
Deleted : RP #206 [Nainstalováno rozhraní DirectX | 05/28/2015 22:25:21]
Deleted : RP #207 [zoek.exe restore point | 06/04/2015 11:14:09]
New restore point created !
########## - EOF - ##########
Kdo je online
Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 71 hostů