Pomalý pc

SamerLP · Příspěvekod **SamerLP** » 27 dub 2015 20:08

Zdraví, v poslednej dobe som spozoroval pomalosť môjho notebooku a taktiež sa mi aj pomalšie načítavajú videá online a aj v notebooku cez VLC Player keď si pustím video mi seká aj keď mám pustený len Firefox,Skype. Prikladám taktiež log HJT.

HJT:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:08:05, on 27. 4. 2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)

FIREFOX: 37.0.2 (x86 sk)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\Skillbrains\lightshot\5.2.0.17\Lightshot.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files (x86)\Aegisub\aegisub32.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Aegisub\aegisub32.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
C:\Users\Samerko\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [Lightshot] C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [instanteyedropper] "C:\Program Files (x86)\InstantEyedropper\InstantEyedropper.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [puush] C:\Program Files (x86)\puush\puush.exe
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe
O4 - Global Startup: Newgen.lnk = C:\Program Files (x86)\Win8.1 SkinPack\Newgen\Newgen.exe
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{61EDEC6D-2042-4239-8A87-F973F3ABAA32}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS1\Services\Tcpip\..\{61EDEC6D-2042-4239-8A87-F973F3ABAA32}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS2\Services\Tcpip\..\{61EDEC6D-2042-4239-8A87-F973F3ABAA32}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: Evolve Service (EvoSvc) - Echobit LLC - C:\Program Files\Echobit\Evolve\EvoSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - Firebird Project - C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - Firebird Project - C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NitroPDFReaderDriverCreatorReadSpool2 (NitroReaderDriverReadSpool2) - Nitro PDF Software - C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: Tor Win32 Service (tor) - Unknown owner - C:\Program Files (x86)\Tor\tor.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11494 bytes

Reklama

mople71 · Příspěvekod **mople71** » 27 dub 2015 20:12

Ahoj!

Rád Ti pomohu s tvým problémem. Čti prosím mé instrukce pozorně a pokud si něčím nebudeš jist, vždy se raději zeptej.

Je možné, že budeš muset na chvíli vypnout svůj antivirus.
V rámci čištění budou vyprázdněny dočasné adresáře včetně Koše!

Ty Google DNS jsou v pořádku? Osobně preferuji DNSSEC.

Stáhni si AdwCleaner: http://www.bleepingcomputer.com/download/adwcleaner/

Ulož na Plochu, spusť jako správce, klikni na Scan a poté Logfile, vyjede na tebe log, ten sem prosím přilož. AdwCleaner na chvíli zavři.

Po vložení logu sem si znovu otevři AdwCleaner, kde klikni na Scan a poté tentokrát na Clean. Po restartu PC na tebe vyjede další log, ten sem prosím vlož.

---------------------------------------------------------------------------

Stáhni si Zoek: http://download.bleepingcomputer.com/smeenk/zoek.exe

Ulož na Plochu, otevři jako správce, do otevřeného okna vlož tento kód:

Kód: Vybrat vše

autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;

A klikni na Run script, chvíli to potrvá. Po restartu PC prosím přilož jeho log.

SamerLP · Příspěvekod **SamerLP** » 28 dub 2015 09:15

tak čo sa týka Google DNS vysvetlíš mi prosím o čo sa jedná? Lebo osobne neviem o čo sa jedná a keď tak rád by som vedel kde to zmením na DNSSEC.

AdwCleaner pred čistením:

# AdwCleaner v4.202 - Log vytvorený 27/04/2015 at 20:16:53
# Aktualizované 23/04/2015 by Xplode
# Databáza : 2015-04-23.2 [Server]
# Operačný systém : Windows 7 Home Premium Service Pack 1 (x64)
# Uživateľské meno : Samerko - SAMERKO-PC
# Spustené z : C:\Users\Samerko\Desktop\adwcleaner_4.202.exe
# Nastavenia : Skenovať

***** [ Služby ] *****

***** [ Súbory / Priečinky ] *****

Súbor Nájdené : C:\Users\Samerko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Menu.lnk

***** [ Naplánované úlohy ] *****

***** [ Zástupcovia ] *****

***** [ Registre ] *****

Hodnota Nájdené : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [detgdp@gmail.com]
Kľúč registra Nájdené : HKCU\Software\Conduit
Kľúč registra Nájdené : [x64] HKCU\Software\Conduit
Kľúč registra Nájdené : HKLM\SOFTWARE\Classes\Installer\Features\B696D3C37BD0D6C33A65D38BEC459181
Kľúč registra Nájdené : HKLM\SOFTWARE\Classes\Installer\Products\B696D3C37BD0D6C33A65D38BEC459181
Kľúč registra Nájdené : HKLM\SOFTWARE\Conduit
Kľúč registra Nájdené : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B696D3C37BD0D6C33A65D38BEC459181
Kľúč registra Nájdené : HKU\.DEFAULT\Software\AskToolbar
Kľúč registra Nájdené : HKU\.DEFAULT\Software\IBUpdaterService

***** [ Webové prehliadače ] *****

-\\ Internet Explorer v11.0.9600.17496

-\\ Mozilla Firefox v37.0.2 (x86 sk)

-\\ Google Chrome v39.0.2171.99

[C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default\Web data] - Nájdené [Search Provider] : hxxp://search.delta-homes.com/web/?type ... 49W7549&q={searchTerms}

*************************

AdwCleaner[R0].txt - [1720 bajtov] - [27/04/2015 20:16:53]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [1780 bajtov] ##########

AdwCleaner po čistení:

# AdwCleaner v4.202 - Log vytvorený 27/04/2015 at 20:22:13
# Aktualizované 23/04/2015 by Xplode
# Databáza : 2015-04-23.2 [Server]
# Operačný systém : Windows 7 Home Premium Service Pack 1 (x64)
# Uživateľské meno : Samerko - SAMERKO-PC
# Spustené z : C:\Users\Samerko\Desktop\adwcleaner_4.202.exe
# Nastavenia : Čistenie

***** [ Služby ] *****

***** [ Súbory / Priečinky ] *****

Súbor Zmazané : C:\Users\Samerko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Menu.lnk

***** [ Naplánované úlohy ] *****

***** [ Zástupcovia ] *****

***** [ Registre ] *****

Hodnota Zmazané : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [detgdp@gmail.com]
Kľúč registra Zmazané : HKCU\Software\Conduit
Kľúč registra Zmazané : HKLM\SOFTWARE\Conduit
Kľúč registra Zmazané : HKU\.DEFAULT\Software\AskToolbar
Kľúč registra Zmazané : HKU\.DEFAULT\Software\IBUpdaterService
Kľúč registra Zmazané : HKLM\SOFTWARE\Classes\Installer\Features\B696D3C37BD0D6C33A65D38BEC459181
Kľúč registra Zmazané : HKLM\SOFTWARE\Classes\Installer\Products\B696D3C37BD0D6C33A65D38BEC459181
Kľúč registra Zmazané : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B696D3C37BD0D6C33A65D38BEC459181

***** [ Webové prehliadače ] *****

-\\ Internet Explorer v11.0.9600.17496

-\\ Mozilla Firefox v37.0.2 (x86 sk)

-\\ Google Chrome v39.0.2171.99

[C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Zmazané [Search Provider] : hxxp://search.delta-homes.com/web/?type ... 49W7549&q={searchTerms}

*************************

AdwCleaner[R0].txt - [1868 bajtov] - [27/04/2015 20:16:53]
AdwCleaner[R1].txt - [1928 bajtov] - [27/04/2015 20:20:22]
AdwCleaner[S0].txt - [1791 bajtov] - [27/04/2015 20:22:13]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1851 bajtov] ##########

Zoek:

Zoek.exe v5.0.0.0 Updated 23-04-2015
Tool run by Samerko on ut 28. 04. 2015 at 8:04:45,23.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Samerko\Desktop\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2015-04-27-190136.log 1437 bytes

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\Samerko\AppData\Roaming\Mozilla\Firefox\Profiles\a2z6t27b.default-1381600143778\prefs.js:
user_pref("browser.startup.homepage", "https://www.czechia.com/");

Added to C:\Users\Samerko\AppData\Roaming\Mozilla\Firefox\Profiles\a2z6t27b.default-1381600143778\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

Deleted from C:\Users\Samerko\AppData\Roaming\Nvu\Profiles\yurfza4w.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

Added to C:\Users\Samerko\AppData\Roaming\Nvu\Profiles\yurfza4w.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\Users\Samerko\AppData\Roaming\.technic deleted
C:\Users\Samerko\AppData\Roaming\Aegisub deleted
C:\Users\Samerko\AppData\Roaming\MC Titan Technic v2 deleted
C:\Users\Samerko\AppData\Roaming\ProductData deleted
C:\Users\Samerko\AppData\Local\updater.log deleted
C:\Users\Samerko\AppData\Roaming\Mozilla\Firefox\Profiles\a2z6t27b.default-1381600143778\extensions\firefox@mega.co.nz.xpi deleted
"C:\PROGRA~2\Skillbrains\lightshot\5.2.0.17\Lightshot.dll" deleted
"C:\PROGRA~2\Skillbrains\lightshot\5.2.0.17\Lightshot.exe" deleted
"C:\PROGRA~2\Skillbrains\lightshot\5.2.0.17\uploader.dll" deleted
"C:\PROGRA~2\Skillbrains" deleted
"C:\PROGRA~2\Skillbrains\lightshot" deleted
"C:\PROGRA~2\Skillbrains\lightshot\5.2.0.17" deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\Samerko\AppData\Roaming\Mozilla\Firefox\Profiles\a2z6t27b.default-1381600143778
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\Samerko\AppData\Roaming\Nvu\Profiles\yurfza4w.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions ======================

ProfilePath: C:\Users\Samerko\AppData\Roaming\Mozilla\Firefox\Profiles\a2z6t27b.default-1381600143778
- Slovak SK Language Pack - %ProfilePath%\extensions\langpack-sk@firefox.mozilla.org.xpi
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

ProfilePath: C:\Users\Samerko\AppData\Roaming\Nvu\Profiles\yurfza4w.default
- Undetermined - %ProfilePath%\extensions\installed-extensions.txt
- Nvu default - %ProfilePath%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\Samerko\AppData\Roaming\Mozilla\Firefox\Profiles\a2z6t27b.default-1381600143778
F3B0E300AFC94E1A775A2D935A7D384F - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director
9AE02005247DA91AB1743F5208DBEF76 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll - Shockwave Flash
FF0D6F82A0EC13952E83B9439100E45D - C:\Users\Samerko\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin

==== Chromium Look ======================

Google Chrome Version: 39.0.2171.99 (Possible outdated, latest Stable version: 42.0.2311.90) [z-db]

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[14. 07. 2014 19:22]

Skype Click to Call - Samerko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Advanced SystemCare Surfing Protection - Samerko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd
Skype Click to Call - Samerko\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{3D585554-3A2C-4BF8-9587-2D99C7A6EBAD} Google Url="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}"

==== Reset Google Chrome ======================

C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default\Preferences.bad was reset successfully
C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default\Web Data.ReadOnly was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Samerko\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Samerko\AppData\Local\Mozilla\Firefox\Profiles\a2z6t27b.default-1381600143778\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Profile 1\Cache emptied successfully
C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Profile 2\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=15956 folders=2119 3341597703 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Guest\AppData\Local\temp emptied successfully
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Users\Samerko\AppData\Local\Temp will be emptied at reboot
C:\Users\Skuska\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Samerko\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on ut 28. 04. 2015 at 9:08:40,14 ======================

Příspěvekod **jaro3** » 28 dub 2015 10:21

Aktualizuj javu:
[url= http://www.oracle.com/technetwork/java/ ... 33155.html
]Java SE Runtime Environment 8[/url]

Klikni na Accept License Agreement
Vyber si OS (Windows nebo Windows x64, Offline Installation)
jre-8-windows-i586-p.exe nebo
jre-8-windows-x64.exe
Stáhni ( download) a nainstaluj.
Ostatní javy odeber v přidat/odebrat programy.

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

mople71 · Příspěvekod **mople71** » 28 dub 2015 14:05

AdwCleaner již neprováděj, kolegovy canned speeches nejsou upravené na můj postup... :smile:

No máš nastavené Google Public DNS, jenom se ptám jestli o tom víš. Jinak to je v pořádku.

SamerLP · Příspěvekod **SamerLP** » 28 dub 2015 14:41

Tak java naištalovaná.
mople71, spravil som ho ale dobre aj tak by s toho nič nebolo lebo nič nevymazalo.

Junkware Removal Tool by Thisisu :

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.6.6 (04.28.2015:1)
OS: Windows 7 Home Premium x64
Ran by Samerko on ut 28. 04. 2015 at 13:12:15,73
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Tasks

~~~ Registry Values

~~~ Registry Keys

~~~ Files

~~~ Folders

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ut 28. 04. 2015 at 13:20:37,82
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Malwarebytes' Anti-Malware:

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 28. 4. 2015
Čas skenování: 13:27:16
Protokol:
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2015.04.28.02
Databáze rootkitů: v2015.04.21.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Samerko

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 457637
Uplynulý čas: 56 min, 28 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)

(end)

RogueKiller by Adlice Software:

RogueKiller V10.6.1.0 (x64) [Apr 24 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno : Normální režim
Uživatel : Samerko [Práva správce]
Started from : C:\Users\Samerko\Desktop\RogueKillerX64.exe
Mód : Prohledat -- Datum : 04/28/2015 14:37:21

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 1 ¤¤¤
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | Lightshot : C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [x] -> Nalezeno

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 2 ¤¤¤
[C:\Windows\System32\drivers\etc\hosts] 127.0.0.1 localhost
[C:\Windows\System32\drivers\etc\hosts] ::1 localhost

¤¤¤ Antirootkit : 7 (Driver: Nahrán) ¤¤¤
[IRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\atapi.sys - IRP_MJ_CREATE[0] : Unknown @ 0x49862c0
[IRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\atapi.sys - IRP_MJ_CLOSE[2] : Unknown @ 0x49862c0
[IRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\atapi.sys - IRP_MJ_DEVICE_CONTROL[14] : Unknown @ 0x49862c0
[IRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\atapi.sys - IRP_MJ_INTERNAL_DEVICE_CONTROL[15] : Unknown @ 0x49862c0
[IRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\atapi.sys - IRP_MJ_POWER[22] : Unknown @ 0x49862c0
[IRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\atapi.sys - IRP_MJ_SYSTEM_CONTROL[23] : Unknown @ 0x49862c0
[IRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\atapi.sys - IRP_MJ_PNP[27] : Unknown @ 0x49862c0

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: WDC WD6400BPVT-80HXZT3 +++++
--- User ---
[MBR] eff11c629db3241621335bfea4f680bf
[BSP] baa58400c4105655dd5a43eaed9ccc63 : Windows Vista/7/8 MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0x1c) [HIDDEN!] Offset (sectors): 2048 | Size: 25600 MB
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 52430848 | Size: 256054 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 576829440 | Size: 328824 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: WD 7500AAK External USB Device +++++
--- User ---
[MBR] 1de12c608c73d915ba92ee78951c1532
[BSP] 3c9b0b46665f3bb8d236660a7fb5abb4 : Windows XP|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 63 | Size: 715402 MB [Windows XP Bootstrap | Windows XP Bootloader]
User = LL1 ... OK
Error reading LL2 MBR! ([32] Po?iadavka nie je podporovaná. )

============================================
RKreport_SCN_06302014_124755.log - RKreport_SCN_07012014_120443.log - RKreport_DEL_07012014_120814.log - RKreport_SCN_01102015_150321.log
RKreport_SCN_01172015_102248.log - RKreport_DEL_01172015_102428.log

mople71 · Příspěvekod **mople71** » 28 dub 2015 14:48

Tyto soubory prosím otestuj na VirusTotal a dej mi sem odkazy na jejich test (pokud již byl soubor analyzován, klikni na Reanalyse): https://www.virustotal.com/

Kód: Vybrat vše

C:\system32\drivers\atapi.sys

--------------------------------------------------------

Stáhni si MBAR: http://www.bleepingcomputer.com/downloa ... i-rootkit/

Spusť a extrahuj na Plochu, odklikej, klikni na tlačítko Update, poté dej Next.

Zkontroluj zatržítko u všech 3 možností a klikni na Scan, nech pracovat, chvíli potrvá.

Všechny případné nálezy zatrhni, zkontroluj zatržítko u Create Restore Point, poté klikni na Cleanup a nech PC restartovat.

Potom dej log, najdeš ho na Ploše ve složce mbar.

SamerLP · Příspěvekod **SamerLP** » 28 dub 2015 15:56

Tak to prvé nemôžem to nájsť ten súbor lebo v C žiadnu zložku system32 nemám.

MBAR: Nenašlo nič takže sem dávam len log ktorý som našiel v zložke mbar.

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.09.1.1004

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.17501

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED, H:\ DRIVE_FIXED
CPU speed: 1.496000 GHz
Memory total: 4269936640, free: 2311081984

Downloaded database version: v2015.04.28.04
Downloaded database version: v2015.04.21.01
Downloaded database version: v2015.04.22.01
=======================================
Initializing...
------------ Kernel report ------------
04/28/2015 15:14:41
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\System32\Drivers\sptd.sys
\SystemRoot\system32\drivers\ACPI.sys
\SystemRoot\system32\drivers\WMILIB.SYS
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\vdrvroot.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\drivers\compbatt.sys
\SystemRoot\system32\drivers\BATTC.SYS
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\system32\drivers\pciide.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\DRIVERS\iaStor.sys
\SystemRoot\system32\drivers\atapi.sys
\SystemRoot\system32\drivers\ataport.SYS
\SystemRoot\system32\drivers\msahci.sys
\SystemRoot\system32\drivers\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\system32\DRIVERS\MpFilter.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\msrpc.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\drivers\disk.sys
\SystemRoot\system32\drivers\CLASSPNP.SYS
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\system32\DRIVERS\eamonm.sys
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\system32\DRIVERS\ehdrv.sys
C:\Program Files\ESET\ESET NOD32 Antivirus\em006_64.dat
C:\Program Files\ESET\ESET NOD32 Antivirus\em018_64.dat
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\system32\drivers\rdprefmp.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\drivers\ws2ifsl.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\vwififlt.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\DRIVERS\termdd.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\DRIVERS\mssmbios.sys
\??\C:\Windows\system32\drivers\HWiNFO64A.SYS
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\blbdrive.sys
\??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\atikmpag.sys
\SystemRoot\system32\DRIVERS\atikmdag.sys
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\system32\DRIVERS\HDAudBus.sys
\SystemRoot\system32\DRIVERS\HECIx64.sys
\SystemRoot\system32\drivers\usbehci.sys
\SystemRoot\system32\drivers\USBPORT.SYS
\SystemRoot\system32\DRIVERS\athrx.sys
\SystemRoot\system32\DRIVERS\vwifibus.sys
\SystemRoot\system32\DRIVERS\asmtxhci.sys
\SystemRoot\system32\DRIVERS\L1C62x64.sys
\SystemRoot\system32\DRIVERS\i8042prt.sys
\SystemRoot\system32\DRIVERS\SynTP.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\kbfiltr.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\CmBatt.sys
\SystemRoot\system32\DRIVERS\intelppm.sys
\SystemRoot\system32\DRIVERS\wmiacpi.sys
\SystemRoot\system32\DRIVERS\CompositeBus.sys
\SystemRoot\system32\DRIVERS\vrtaucbl.sys
\SystemRoot\system32\DRIVERS\portcls.sys
\SystemRoot\system32\DRIVERS\drmk.sys
\SystemRoot\system32\DRIVERS\ks.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\hamachi.sys
\SystemRoot\system32\DRIVERS\swenum.sys
\SystemRoot\system32\DRIVERS\dtsoftbus01.sys
\SystemRoot\system32\DRIVERS\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\drivers\AtihdW76.sys
\SystemRoot\system32\drivers\RTKVHD64.sys
\SystemRoot\system32\DRIVERS\asmthub3.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\system32\DRIVERS\USBSTOR.SYS
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\system32\drivers\LVUSBS64.sys
\SystemRoot\System32\Drivers\usbvideo.sys
\SystemRoot\system32\DRIVERS\hidusb.sys
\SystemRoot\system32\DRIVERS\HIDCLASS.SYS
\SystemRoot\system32\DRIVERS\HIDPARSE.SYS
\SystemRoot\system32\DRIVERS\kbdhid.sys
\SystemRoot\system32\DRIVERS\mouhid.sys
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_iaStor.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\cdd.dll
\SystemRoot\System32\ATMFD.DLL
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\nwifi.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\system32\DRIVERS\epfwwfpr.sys
\SystemRoot\system32\DRIVERS\NisDrvWFP.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\SystemRoot\System32\Drivers\fastfat.SYS
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
\Windows\System32\autochk.exe
\Windows\System32\normaliz.dll
\Windows\System32\wininet.dll
\Windows\System32\clbcatq.dll
\Windows\System32\ws2_32.dll
\Windows\System32\Wldap32.dll
\Windows\System32\ole32.dll
\Windows\System32\shell32.dll
\Windows\System32\psapi.dll
\Windows\System32\nsi.dll
\Windows\System32\setupapi.dll
\Windows\System32\msvcrt.dll
\Windows\System32\imm32.dll
\Windows\System32\user32.dll
\Windows\System32\gdi32.dll
\Windows\System32\urlmon.dll
\Windows\System32\kernel32.dll
\Windows\System32\usp10.dll
\Windows\System32\shlwapi.dll
\Windows\System32\rpcrt4.dll
\Windows\System32\advapi32.dll
\Windows\System32\difxapi.dll
\Windows\System32\msctf.dll
\Windows\System32\lpk.dll
\Windows\System32\oleaut32.dll
\Windows\System32\imagehlp.dll
\Windows\System32\sechost.dll
\Windows\System32\comdlg32.dll
\Windows\System32\iertutil.dll
\Windows\System32\KernelBase.dll
\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
\Windows\System32\comctl32.dll
\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
\Windows\System32\devobj.dll
\Windows\System32\wintrust.dll
\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
\Windows\System32\crypt32.dll
\Windows\System32\cfgmgr32.dll
\Windows\System32\userenv.dll
\Windows\System32\profapi.dll
\Windows\System32\msasn1.dll
\Windows\SysWOW64\normaliz.dll
----------- End -----------
Done!
IRP handler 0 of \Driver\USBSTOR points to an unknown module
Unhooking enabled.

Scan started
Database versions:
main: v2015.04.28.04
rootkit: v2015.04.21.01

<<<1>>>
Upper Device Name: \Device\Harddisk1\DR1
Upper Device Object: 0xfffffa8007a85790
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\00000082\
Lower Device Object: 0xfffffa8007857b60
Lower Device Driver Name: \Driver\USBSTOR\
Driver name found: USBSTOR
Initialization returned 0x0
Load Function returned 0x0
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa8004cb9790
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IAAStorageDevice-1\
Lower Device Object: 0xfffffa8004a44050
Lower Device Driver Name: \Driver\iaStor\
Driver name found: iaStor
Initialization returned 0x0
Load Function returned 0x0
<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa8004cb9790, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8004cb91e0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8004cb9790, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8004a3f430, DeviceName: Unknown, DriverName: \Driver\ACPI\
DevicePointer: 0xfffffa8004a44050, DeviceName: \Device\Ide\IAAStorageDevice-1\, DriverName: \Driver\iaStor\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
Upper DeviceData: 0xfffff8a00f39dc20, 0xfffffa8004cb9790, 0xfffffa80042cf640
Lower DeviceData: 0xfffff8a01971ca20, 0xfffffa8004a44050, 0xfffffa8004596550
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
Done!
Drive 0
This is a System drive
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 496B9619

Partition information:

Partition 0 type is Other (0x1c)
Partition is NOT ACTIVE.
Partition starts at LBA: 2048 Numsec = 52428800

Partition 1 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 52430848 Numsec = 524398592
Partition file system is NTFS
Partition is bootable

Partition 2 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 576829440 Numsec = 673431552

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 640135028736 bytes
Sector size: 512 bytes

Done!
Physical Sector Size: 512
Drive: 1, DevicePointer: 0xfffffa8007a85790, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8007a852c0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8007a85790, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8007857b60, DeviceName: \Device\00000082\, DriverName: \Driver\USBSTOR\
------------ End ----------
Alternate DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
Upper DeviceData: 0xfffff8a007569d00, 0xfffffa8007a85790, 0xfffffa8006c1b6d0
Lower DeviceData: 0xfffff8a00fd745c0, 0xfffffa8007857b60, 0xfffffa800868cbc0
Drive 1
Scanning MBR on drive 1...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 7242CF91

Partition information:

Partition 0 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 63 Numsec = 1465144002

Partition 1 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 2 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 750156374016 bytes
Sector size: 512 bytes

Done!
Scan finished
=======================================

Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-1-52430848-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-r.mbam...
Removal finished

mople71 · Příspěvekod **mople71** » 28 dub 2015 16:02

Stáhni si prosím FRST: http://www.bleepingcomputer.com/downloa ... ool/dl/82/

Ulož na Plochu, spusť jako Správce, potvrď licenci a klikni na tlačítko Scan. Vše ponech v základním nastavení, nic nezatrhávej.

Po dokončení skenu na tebe vyjedou dva logy, oba sem prosím zkopíruj.

SamerLP · Příspěvekod **SamerLP** » 28 dub 2015 16:08

FRST:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-04-2015 01
Ran by Samerko (administrator) on SAMERKO-PC on 28-04-2015 16:04:28
Running from C:\Users\Samerko\Desktop
Loaded Profiles: Samerko (Available profiles: Samerko & Skuska & Guest)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe
(Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2712360 2011-03-04] (Synaptics Incorporated)
HKLM\...\Run: [SynAsusAcpi] => C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [97064 2011-03-04] (Synaptics Incorporated)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [4090824 2012-11-16] (ESET)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-06-03] (Realtek Semiconductor)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2018032 2011-04-01] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\Run: [instanteyedropper] => C:\Program Files (x86)\InstantEyedropper\InstantEyedropper.exe [352256 2007-10-17] ()
HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [568904 2015-03-30] ()
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk [2013-11-27]
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Newgen.lnk [2015-01-01]
ShortcutTarget: Newgen.lnk -> C:\Program Files (x86)\Win8.1 SkinPack\Newgen\Newgen.exe (NS)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-02-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-02-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-02-11] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-28] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-28] (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{61EDEC6D-2042-4239-8A87-F973F3ABAA32}: [NameServer] 8.8.8.8,8.8.4.4

FireFox:
========
FF ProfilePath: C:\Users\Samerko\AppData\Roaming\Mozilla\Firefox\Profiles\a2z6t27b.default-1381600143778
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-28] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-28] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2014-02-11] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2013-12-05] (Adobe Systems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro PDF\Reader 2\npnitromozilla.dll [2012-09-13] ( )
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-06-01] (Pando Networks)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2014-02-11] (Adobe Systems)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll [2010-01-23] (Zeon Corporation)
FF Plugin HKU\S-1-5-21-1676706566-1539175069-4259669011-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Samerko\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2013-11-06] (Skype Limited)
FF Plugin HKU\S-1-5-21-1676706566-1539175069-4259669011-1000: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-06-01] (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Extension: Slovak (SK) Language Pack - C:\Users\Samerko\AppData\Roaming\Mozilla\Firefox\Profiles\a2z6t27b.default-1381600143778\Extensions\langpack-sk@firefox.mozilla.org.xpi [2014-09-14]
FF Extension: Adblock Plus - C:\Users\Samerko\AppData\Roaming\Mozilla\Firefox\Profiles\a2z6t27b.default-1381600143778\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-17]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-04-24]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2014-01-29]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome:
=======
CHR Profile: C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-16]
CHR Extension: (Google Docs) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-16]
CHR Extension: (Google Drive) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-16]
CHR Extension: (YouTube) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-16]
CHR Extension: (Google Search) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-16]
CHR Extension: (Google Sheets) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-16]
CHR Extension: (Google Wallet) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-01]
CHR Extension: (Gmail) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-16]
CHR Profile: C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Drive) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-12-01]
CHR Extension: (YouTube) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-12-01]
CHR Extension: (Google Search) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-01]
CHR Extension: (Skype Click to Call) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-12-01]
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd [2014-07-01]
CHR Extension: (Gmail) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-01]
CHR Profile: C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Extension: (Google Drive) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-12-01]
CHR Extension: (YouTube) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-12-01]
CHR Extension: (Google Search) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-01]
CHR Extension: (Skype Click to Call) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-12-01]
CHR Extension: (Gmail) - C:\Users\Samerko\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-01]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393080 2012-12-05] (BlueStack Systems, Inc.)
S2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384888 2012-12-05] (BlueStack Systems, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [913184 2012-11-16] (ESET)
S3 EvoSvc; C:\Program Files\Echobit\Evolve\EvoSvc.exe [1580448 2014-12-02] (Echobit LLC)
R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2010-09-17] (Firebird Project) [File not signed]
R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe [3735552 2010-09-17] (Firebird Project) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22072 2012-09-12] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [368896 2012-09-12] (Microsoft Corporation)
R2 NitroReaderDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [229392 2012-09-13] (Nitro PDF Software)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1900400 2014-12-11] (Electronic Arts)
S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-06-04] ()
S2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [189248 2014-06-04] ()
R2 Themes; C:\Windows\system32\themeservice.dll [44544 2015-01-01] (Microsoft Corporation) [File not signed]
S2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-09-07] () [File not signed] <==== ATTENTION
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-12-05] (BlueStack Systems)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-08-04] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [209808 2012-11-16] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [148528 2012-03-14] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [137144 2012-03-14] (ESET)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [31648 2014-01-18] (REALiX(tm))
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2011-10-24] (Huawei Technologies Co., Ltd.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [228768 2012-08-30] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [128456 2012-08-30] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-08-04] (Duplex Secure Ltd.)
S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [57856 2014-09-09] () [File not signed]
S3 VASDeviceDrm; C:\Windows\System32\drivers\vasdDev.sys [1454896 2012-03-19] (ShiningMorning Inc.)
S2 WCMVCAM; C:\Windows\System32\DRIVERS\wcmvcam64.sys [1071032 2012-04-15] (Windows (R) Win 7 DDK provider)
S3 ATP; system32\DRIVERS\cmdatp.sys [X]
S3 cpuz137; \??\C:\Users\Samerko\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-28 16:04 - 2015-04-28 16:05 - 00020283 _____ () C:\Users\Samerko\Desktop\FRST.txt
2015-04-28 16:04 - 2015-04-28 16:04 - 02100736 _____ (Farbar) C:\Users\Samerko\Desktop\FRST64.exe
2015-04-28 15:14 - 2015-04-28 15:55 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-04-28 15:13 - 2015-04-28 15:55 - 00000000 ____D () C:\Users\Samerko\Desktop\mbar
2015-04-28 15:13 - 2015-04-28 15:13 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Samerko\Desktop\mbar-1.09.1.1004.exe
2015-04-28 14:30 - 2015-04-28 14:30 - 20594776 _____ () C:\Users\Samerko\Desktop\RogueKillerX64.exe
2015-04-28 13:26 - 2015-04-28 13:26 - 00001068 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-04-28 13:12 - 2015-04-28 13:12 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-SAMERKO-PC-Windows-7-Home-Premium-(64-bit).dat
2015-04-28 13:12 - 2015-04-28 13:12 - 00000000 ____D () C:\RegBackup
2015-04-28 13:11 - 2015-04-28 13:11 - 02716174 _____ (Thisisu) C:\Users\Samerko\Desktop\JRT.exe
2015-04-28 12:53 - 2015-04-28 12:51 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-04-28 11:36 - 2015-04-28 16:05 - 00000000 ____D () C:\Users\Samerko\AppData\Roaming\Aegisub
2015-04-28 09:18 - 2015-04-28 09:18 - 00790900 _____ () C:\Users\Samerko\Desktop\LH2_25.ass
2015-04-28 09:06 - 2015-04-28 08:04 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-04-28 08:10 - 2015-04-27 21:01 - 00001437 _____ () C:\zoek-results2015-04-27-190136.log
2015-04-28 08:00 - 2015-04-28 09:07 - 00000656 _____ () C:\Windows\PFRO.log
2015-04-27 20:53 - 2015-04-28 09:08 - 00009614 _____ () C:\zoek-results.log
2015-04-27 20:47 - 2015-04-28 09:07 - 00000000 ____D () C:\zoek_backup
2015-04-27 20:27 - 2015-04-27 20:27 - 01305600 _____ () C:\Users\Samerko\Desktop\zoek.exe
2015-04-27 20:16 - 2015-04-28 13:02 - 00000000 ____D () C:\AdwCleaner
2015-04-27 20:16 - 2015-04-27 20:16 - 02224640 _____ () C:\Users\Samerko\Desktop\adwcleaner_4.202.exe
2015-04-27 20:08 - 2015-04-27 20:08 - 00011496 _____ () C:\Users\Samerko\Desktop\hijackthis.log
2015-04-27 20:07 - 2015-04-27 20:07 - 00388608 _____ (Trend Micro Inc.) C:\Users\Samerko\Desktop\HijackThis.exe
2015-04-27 19:48 - 2015-04-27 19:48 - 02003031 _____ () C:\Users\Samerko\Desktop\LH2_24.ass
2015-04-27 19:07 - 2015-04-27 19:07 - 00008059 _____ () C:\Users\Samerko\Desktop\OP Saenai.ass
2015-04-27 18:45 - 2015-04-28 13:05 - 00000504 _____ () C:\Windows\setupact.log
2015-04-27 18:45 - 2015-04-27 18:45 - 00000000 _____ () C:\Windows\setuperr.log
2015-04-27 12:07 - 2015-04-27 12:07 - 00000396 _____ () C:\Users\Samerko\sitemap.xml
2015-04-27 12:07 - 2015-04-27 12:07 - 00000026 _____ () C:\Users\Samerko\robots.txt
2015-04-27 12:07 - 2015-04-27 12:07 - 00000000 ____D () C:\Users\Samerko\img
2015-04-27 12:07 - 2015-04-27 12:07 - 00000000 ____D () C:\Users\Samerko\assets
2015-04-26 19:08 - 2015-04-26 19:08 - 00033057 _____ () C:\Users\Samerko\Desktop\[](Ayu)[Ayu]_Minami-ke_-_02v2_[720p_H264_MP3][D940A2FB].ass
2015-04-26 18:12 - 2015-04-26 18:11 - 00034396 _____ () C:\Users\Samerko\Desktop\[AnimAls] Kimi ni Todoke - 06.ass
2015-04-25 16:27 - 2015-04-27 17:05 - 00000000 ____D () C:\Users\Samerko\Desktop\titulky
2015-04-25 16:26 - 2015-04-25 16:27 - 00078763 _____ () C:\Users\Samerko\Desktop\Saenai 06 (2).ass
2015-04-25 16:20 - 2015-04-25 16:26 - 00037195 _____ () C:\Users\Samerko\Desktop\KIMI7.ass
2015-04-24 19:21 - 2015-04-24 19:48 - 00000000 ____D () C:\Users\Samerko\AppData\Roaming\BSplayer
2015-04-24 19:21 - 2015-04-24 19:21 - 00001094 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player FREE.lnk
2015-04-24 19:21 - 2015-04-24 19:21 - 00000000 ____D () C:\Users\Samerko\AppData\Roaming\BSplayer Pro
2015-04-24 19:21 - 2015-04-24 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BS.Player
2015-04-24 19:21 - 2015-04-24 19:21 - 00000000 ____D () C:\Program Files (x86)\Webteh
2015-04-24 15:26 - 2015-04-24 15:26 - 00023876 _____ () C:\Users\Samerko\Desktop\[Takara] Treasure Island 02 Final version.ass
2015-04-24 15:26 - 2015-04-24 15:26 - 00022478 _____ () C:\Users\Samerko\Desktop\[Takara] Treasure Island 03 Final version.ass
2015-04-24 07:51 - 2015-04-24 07:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-24 07:02 - 2015-04-24 07:02 - 00130761 _____ () C:\Users\Samerko\Desktop\Titulky k anime Minami-ke.zip
2015-04-23 18:52 - 2015-04-23 18:52 - 00024980 _____ () C:\Users\Samerko\Desktop\[Takara] Treasure Island 01 Final version.ass
2015-04-22 20:28 - 2015-04-22 20:29 - 00009483 _____ () C:\Users\Samerko\Desktop\HETALIA6.ass
2015-04-20 20:11 - 2015-04-20 20:11 - 00009338 _____ () C:\Users\Samerko\Desktop\[Takara] Treasure Island Memorial-titulky v1.0.ass
2015-04-20 20:07 - 2015-04-20 20:08 - 00041440 _____ () C:\Users\Samerko\Desktop\SPECIAL_A_02.ass
2015-04-19 21:28 - 2015-04-19 21:28 - 00048044 _____ () C:\Users\Samerko\Desktop\[HorribleSubs] Hello!! Kiniro Mosaic - 02 [720p].ass
2015-04-19 21:26 - 2015-04-19 21:26 - 00028552 _____ () C:\Users\Samerko\Desktop\[KH]_Angelium_01_(h264)_[CE0DFC2F].ass
2015-04-19 18:17 - 2015-04-19 18:18 - 00045425 _____ () C:\Users\Samerko\Desktop\KNB3.ass
2015-04-15 19:55 - 2015-04-15 19:55 - 00061957 _____ () C:\Users\Samerko\Desktop\Kaze_to_Ki_no_Uta_-_Seinaru_ka_na_OVA_[51294344]h(It_Dub).ass
2015-04-14 15:51 - 2015-01-29 21:14 - 00171520 _____ (IgorWare) C:\Users\Samerko\Desktop\fjoiner.exe
2015-04-12 20:39 - 2015-04-12 21:14 - 00000002 _____ () C:\Users\Samerko\.kvirc_force_locale
2015-04-11 20:33 - 2015-04-11 20:33 - 00001845 _____ () C:\Users\Public\Desktop\KVIrc.lnk
2015-04-11 20:33 - 2015-04-11 20:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KVIrc
2015-04-11 20:32 - 2015-04-11 20:33 - 00000000 ____D () C:\Program Files (x86)\KVIrc
2015-04-11 16:34 - 2015-04-11 16:35 - 00000000 ____D () C:\Users\Samerko\AppData\Roaming\mIRC
2015-04-11 13:06 - 2015-04-11 13:06 - 00276392 _____ () C:\Users\Samerko\Desktop\titulka.rar
2015-04-11 13:06 - 2015-04-11 13:06 - 00264960 _____ () C:\Users\Samerko\Desktop\profil.rar
2015-04-10 20:37 - 2015-04-10 20:37 - 00000958 _____ () C:\Users\Samerko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\osu!.lnk
2015-04-10 20:37 - 2015-04-10 20:37 - 00000950 _____ () C:\Users\Samerko\Desktop\osu!.lnk
2015-04-10 20:35 - 2015-04-27 19:31 - 00000000 ____D () C:\Users\Samerko\AppData\Local\osu!
2015-04-10 17:00 - 2015-04-05 18:05 - 00036377 _____ () C:\Users\Samerko\Desktop\Shokugeki no Soma - 01.ass
2015-04-09 21:20 - 2015-04-09 21:20 - 00034325 _____ () C:\Users\Samerko\Desktop\[anon] Nagato Yuki-chan no Shoushitsu - 01 [720p].ass
2015-04-08 17:31 - 2015-04-08 17:17 - 00040306 _____ () C:\Users\Samerko\Desktop\SPECIAL_A_01.ass
2015-04-08 16:46 - 2015-04-08 16:46 - 00005940 _____ () C:\Users\Samerko\Desktop\ED saensai.ass
2015-04-06 18:22 - 2015-04-06 18:23 - 00058108 _____ () C:\Users\Samerko\Desktop\[Victorique][KYSSS]gosick_2_358c2d55.ass
2015-04-06 18:22 - 2015-04-06 18:23 - 00050998 _____ () C:\Users\Samerko\Desktop\[Victorique][KYSSS]gosick_3_f0b2dade(1).ass
2015-04-04 17:38 - 2015-04-04 17:38 - 00045868 _____ () C:\Users\Samerko\Desktop\Saenai Heroine no Sodatekata 01.ass
2015-04-03 17:58 - 2015-03-30 13:04 - 00068175 _____ () C:\Users\Samerko\Desktop\Saenai Heroine no Sodatekata 04.ass
2015-04-01 22:58 - 2015-04-01 22:58 - 02295746 _____ () C:\Users\Samerko\Desktop\[Vivid-Watashi] Aldnoah Zero - 04v2 [5410B2FC].ass
2015-04-01 18:23 - 2015-04-01 18:23 - 00001072 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASSDraw3.lnk
2015-04-01 18:23 - 2015-04-01 18:23 - 00001043 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aegisub.lnk
2015-04-01 17:58 - 2015-04-01 17:58 - 00057124 _____ () C:\Users\Samerko\Desktop\[Victorique][KYSSS]gosick_1_23f5e655(2).ass
2015-04-01 15:07 - 2015-04-01 15:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-04-01 15:07 - 2015-04-01 15:07 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2015-03-31 16:38 - 2015-03-26 21:32 - 00047638 _____ () C:\Users\Samerko\Desktop\Saenai Heroine no Sodatekata 03.ass
2015-03-29 17:19 - 2015-03-29 17:20 - 00054353 _____ () C:\Users\Samerko\Desktop\Saenai Heroine no Sodatekata 02-.ass

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-28 16:04 - 2015-01-19 15:47 - 00000000 ____D () C:\FRST
2015-04-28 15:30 - 2014-02-20 23:30 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-28 15:14 - 2015-01-09 15:21 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-28 15:13 - 2015-01-09 15:21 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-28 14:38 - 2014-06-30 12:39 - 00000000 ____D () C:\ProgramData\RogueKiller
2015-04-28 14:31 - 2015-01-10 15:56 - 00037624 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2015-04-28 14:09 - 2014-11-04 14:52 - 01676875 _____ () C:\Windows\WindowsUpdate.log
2015-04-28 13:26 - 2015-01-09 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-04-28 13:26 - 2015-01-09 15:21 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-04-28 13:20 - 2009-07-14 06:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-28 13:20 - 2009-07-14 06:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-28 13:06 - 2014-09-19 21:03 - 00000000 ____D () C:\Users\Samerko\AppData\Local\LogMeIn Hamachi
2015-04-28 13:06 - 2014-06-08 20:04 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2015-04-28 13:06 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-28 12:57 - 2013-07-27 20:41 - 00000000 ____D () C:\Program Files (x86)\Java
2015-04-28 12:51 - 2013-08-13 18:42 - 00000000 ____D () C:\Program Files\Java
2015-04-28 12:45 - 2012-09-26 18:32 - 00000000 ____D () C:\Users\Samerko\AppData\Roaming\vlc
2015-04-28 09:39 - 2012-04-01 17:37 - 00000000 ____D () C:\Users\Samerko\AppData\Roaming\Skype
2015-04-28 09:24 - 2015-01-10 16:44 - 00000000 ____D () C:\CrashDumpsApp
2015-04-28 09:22 - 2013-08-03 17:16 - 00000000 ____D () C:\Users\Samerko\AppData\Roaming\uTorrent
2015-04-28 09:08 - 2012-03-15 16:09 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2015-04-28 08:11 - 2015-01-09 15:04 - 00000000 ____D () C:\Users\Samerko\AppData\Local\Adobe
2015-04-27 20:25 - 2014-02-08 00:17 - 07490560 ___SH () C:\Users\Samerko\Desktop\Thumbs.db
2015-04-27 20:10 - 2013-06-12 19:32 - 00000000 ____D () C:\Users\Samerko\Desktop\WinRar-Súbory
2015-04-27 18:41 - 2013-12-26 14:21 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-27 18:18 - 2013-07-04 14:12 - 00000000 ____D () C:\Users\Samerko\AppData\Roaming\FileZilla
2015-04-27 12:07 - 2012-04-01 16:56 - 00000000 ____D () C:\Users\Samerko
2015-04-25 13:16 - 2014-09-14 21:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-24 21:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-24 06:48 - 2009-07-14 06:45 - 05824568 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-24 06:47 - 2014-03-24 13:14 - 00203464 _____ () C:\Windows\SysWOW64\GDIPFONTCACHEV1.DAT
2015-04-24 06:46 - 2014-11-04 14:51 - 00203464 _____ () C:\Users\Samerko\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-21 19:40 - 2015-01-10 17:31 - 00006386 _____ () C:\Windows\system32\PerfStringBackup.TMP
2015-04-17 18:51 - 2014-05-31 20:39 - 00003007 _____ () C:\Users\Samerko\Desktop\ftp.txt
2015-04-15 19:26 - 2013-06-01 14:12 - 00000000 ____D () C:\Users\Samerko\AppData\Local\PMB Files
2015-04-15 19:26 - 2013-06-01 14:12 - 00000000 ____D () C:\ProgramData\PMB Files
2015-04-15 18:16 - 2013-10-31 12:13 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-15 18:16 - 2012-04-01 17:43 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-15 18:16 - 2012-04-01 17:43 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-14 09:37 - 2015-01-09 15:21 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-04-14 09:37 - 2015-01-09 15:21 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-04-13 14:04 - 2015-01-16 23:01 - 00000000 ____D () C:\Users\Samerko\AppData\Roaming\VidCoder
2015-04-09 14:17 - 2012-04-01 17:37 - 00000000 ____D () C:\ProgramData\Skype
2015-04-01 19:34 - 2013-09-11 18:44 - 00000132 _____ () C:\Users\Samerko\AppData\Roaming\Adobe Formát PNG CS5 – předvolby
2015-04-01 18:23 - 2015-01-06 16:41 - 00000000 ____D () C:\Program Files (x86)\Aegisub
2015-03-31 15:23 - 2015-01-09 22:10 - 00000870 _____ () C:\Users\Samerko\Desktop\Handbrake.lnk
2015-03-30 15:25 - 2012-11-13 15:29 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys
2015-03-30 06:52 - 2015-03-23 20:57 - 00000000 ____D () C:\Program Files (x86)\puush

==================== Files in the root of some directories =======

2014-07-14 20:43 - 2014-07-14 20:49 - 0000132 _____ () C:\Users\Samerko\AppData\Roaming\Adobe Formát GIF CS5 – předvolby
2013-09-11 18:44 - 2015-04-01 19:34 - 0000132 _____ () C:\Users\Samerko\AppData\Roaming\Adobe Formát PNG CS5 – předvolby
2014-03-12 20:32 - 2014-03-12 20:40 - 0000132 _____ () C:\Users\Samerko\AppData\Roaming\Adobe GIF Format CC Prefs
2014-03-01 20:07 - 2014-05-11 17:39 - 0000132 _____ () C:\Users\Samerko\AppData\Roaming\Adobe PNG Format CC Prefs
2015-01-07 12:54 - 2015-01-07 12:54 - 0002298 _____ () C:\Users\Samerko\AppData\Roaming\ASSDraw3.cfg
2014-11-12 18:04 - 2014-11-12 18:04 - 0000132 _____ () C:\Users\Samerko\AppData\Roaming\Filtr IIIExport Adobe CS5 – předvolby
2014-07-29 20:38 - 2014-07-29 20:38 - 0004608 _____ () C:\Users\Samerko\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-31 15:05 - 2014-08-16 17:06 - 0000600 _____ () C:\Users\Samerko\AppData\Local\PUTTY.RND
2014-11-22 23:39 - 2014-11-22 23:39 - 0001896 _____ () C:\Users\Samerko\AppData\Local\recently-used.xbel
2014-03-07 22:13 - 2014-12-18 18:17 - 0000425 _____ () C:\Users\Samerko\AppData\Local\UserProducts.xml
2012-03-15 14:13 - 2012-03-15 14:14 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2012-03-15 14:13 - 2012-03-15 14:13 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

Some content of TEMP:
====================
C:\Users\Samerko\AppData\Local\Temp\dllnt_dump.dll
C:\Users\Samerko\AppData\Local\Temp\Quarantine.exe
C:\Users\Samerko\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe
[2015-01-01 14:20] - [2011-02-25 08:19] - 2871808 ____A (Microsoft Corporation) 9A7D6A395E5EBA6F4B1C7D91A0B075FA

C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-04-24 20:46

==================== End Of Log ============================

SamerLP · Příspěvekod **SamerLP** » 28 dub 2015 16:09

Addition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-04-2015 01
Ran by Samerko at 2015-04-28 16:06:14
Running from C:\Users\Samerko\Desktop
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-1676706566-1539175069-4259669011-500 - Administrator - Disabled)
Guest (S-1-5-21-1676706566-1539175069-4259669011-501 - Limited - Disabled) => C:\Users\Guest
HomeGroupUser$ (S-1-5-21-1676706566-1539175069-4259669011-1002 - Limited - Enabled)
Samerko (S-1-5-21-1676706566-1539175069-4259669011-1000 - Administrator - Enabled) => C:\Users\Samerko
Skuska (S-1-5-21-1676706566-1539175069-4259669011-1005 - Limited - Enabled) => C:\Users\Skuska

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET NOD32 Antivirus 5.2 (Enabled - Up to date) {77DEAFED-8149-104B-25A1-21771CA47CD1}
AS: ESET NOD32 Antivirus 5.2 (Enabled - Up to date) {CCBF4E09-A773-1FC5-1F11-1A056723366C}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

„Windows Live Essentials“ (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
„Windows Live Mail“ (x32 Version: 15.4.3502.0922 - „Microsoft Corporation“) Hidden
„Windows Live Mesh ActiveX“ nuotolinių ryšių valdiklis (HKLM-x32\...\{9024FE65-46B8-4C8A-9D98-8DCB6BD5F598}) (Version: 15.4.5722.2 - Microsoft Corporation)
„Windows Live Messenger“ (x32 Version: 15.4.3502.0922 - „Microsoft Corporation“) Hidden
„Windows Live“ fotogalerija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
ActiveX контрола на Windows Live Mesh за отдалечени връзки (HKLM-x32\...\{B3BA4D1C-23EF-4859-9C11-1B2CCB7FADBB}) (Version: 15.4.5722.2 - Microsoft Corporation)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.4.0.2710 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.4.1.351 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.3 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Photoshop CC (HKLM-x32\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\{AA3B06B1-E89A-43C6-A26B-7109DB4BEE7B}) (Version: 12.0.7.148 - Adobe Systems, Inc)
Aegisub 3.2.2 (HKLM-x32\...\{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1) (Version: 3.2.2 - Aegisub Team)
Akamai NetSession Interface (HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 1.2.0117.08443 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.2.0117.08443 - Alcor Micro Corp.) Hidden
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.7 - Sereby Corporation)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.12.5.0 - Asmedia Technology)
ASUS AI Recovery (HKLM-x32\...\{38253529-D97D-4901-AE53-5CC9736D3A2E}) (Version: 1.0.13 - ASUS)
ASUS FancyStart (HKLM-x32\...\{2B81872B-A054-48DA-BE3B-FA5C164C303A}) (Version: 1.1.0 - ASUSTeK Computer Inc.)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.21 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.0.6 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.1.44 - ASUS)
ASUS SmartLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0011 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0031 - ASUS)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.21 - asus)
ASUS_Screensaver (HKLM-x32\...\ASUS_Screensaver) (Version: - )
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.4.617 - ASUSTEK)
Atheros Driver Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros)
ATI AVIVO64 Codecs (Version: 11.6.0.10419 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (HKLM\...\{D9D7384A-8014-EE99-279E-E9BA3F6C4836}) (Version: 3.0.825.0 - ATI Technologies, Inc.)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0008 - ASUS)
AviSynth 2.5 (HKLM-x32\...\Avisynth) (Version: - )
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
Bookworm Deluxe (HKLM-x32\...\Bookworm Deluxe) (Version: - Oberon Media Inc.)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.69.1078 - AB Team, d.o.o.)
Bus Driver (HKLM-x32\...\Bus Driver_is1) (Version: - TopWare Poland Sp. z o.o.)
CCleaner (HKLM\...\CCleaner) (Version: 4.04 - Piriform)
Combined Community Codec Pack 2014-07-13 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2014.07.13.0 - CCCP Project)
Control ActiveX Windows Live Mesh pentru conexiuni la distanță (HKLM-x32\...\{260E3D78-94E6-47EC-8E29-46301572BB1E}) (Version: 15.4.5722.2 - Microsoft Corporation)
Cooking Dash (HKLM-x32\...\Cooking Dash) (Version: - Oberon Media Inc.)
Counter-Strike (HKLM-x32\...\Steam App 10) (Version: - Valve)
Counter-Strike: Condition Zero (HKLM-x32\...\Steam App 80) (Version: - Valve)
Counter-Strike: Condition Zero Deleted Scenes (HKLM-x32\...\Steam App 100) (Version: - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
CrystalDiskInfo 6.2.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.2.2 - Crystal Dew World)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1908 - CyberLink Corp.)
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0335 - Disc Soft Ltd)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - )
ESET NOD32 Antivirus (HKLM\...\{76C0D03F-44AB-4D57-A6B9-5E3F6AEFA0FD}) (Version: 5.2.15.1 - ESET, spol s r. o.)
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version: - SCS Software)
Euro Truck Simulator 2 Multiplayer 0.1.2 R2 Alpha (HKLM-x32\...\{A227B892-C548-4490-9C5D-DB341F8194A6}_is1) (Version: 0.1.2 R2 Alpha - ETS2MP Team)
Evolve (HKLM\...\{670B1B49-9FD3-4827-9B41-471EFF580AA8}) (Version: 1.8.9 - Echobit, LLC)
Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)
Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.9 - ASUS)
FileZilla Client 3.7.3 (HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse)
Firebird 2.5.0.26074 (Win32) (HKLM-x32\...\FBDBServer_2_5_is1) (Version: 2.5.0.26074 - Firebird Project)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Freemake Video Converter verzia 4.1.5 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.5 - Ellora Assets Corporation)
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Game Park Console (HKLM-x32\...\{E71E60C1-533E-45A5-8D80-E475E88D2B17}_is1) (Version: 6.2.1.1 - Oberon Media, Inc.)
Goodgame Empire (HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\Pokki_149b46d4a102c0304583931ceaa3f0bf19785ee3) (Version: v1.1.5 - Pokki)
Google Drive (HKLM-x32\...\{240D2B48-E06E-446F-A806-01CF36882EB7}) (Version: 1.19.8268.4572 - Google, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.99 - Spoločnosť Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Governor of Poker (HKLM-x32\...\Governor of Poker) (Version: - Oberon Media Inc.)
HandBrake 0.10.0 (HKLM-x32\...\HandBrake) (Version: 0.10.0 - )
Hotel Dash Suite Success (HKLM-x32\...\Hotel Dash Suite Success) (Version: - Oberon Media Inc.)
HWiNFO64 Version 4.36 (HKLM\...\HWiNFO64_is1) (Version: 4.36 - Martin Malík - REALiX)
IcoFX 2.5 (HKLM-x32\...\IcoFX 2_is1) (Version: - )
Instant Eyedropper 1.75 (HKLM-x32\...\Instant Eyedropper_is1) (Version: - )
InstantOn (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 2.1.0 - ASUS)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Jewel Quest 3 (HKLM-x32\...\Jewel Quest 3) (Version: - Oberon Media Inc.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kontrola Windows Live Mesh ActiveX za daljinske veze (HKLM-x32\...\{19CBDE24-2761-49A5-816B-D2BA65D0CA8D}) (Version: 15.4.5722.2 - Microsoft Corporation)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (HKLM-x32\...\{CA227A9D-09BE-4BFB-9764-48FED2DA5454}) (Version: 15.4.5722.2 - Microsoft Corporation)
KVIrc (HKLM-x32\...\KVIrc) (Version: - Szymon Stefanek and The KVIrc Development Team)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
LibreOffice 4.4.1.2 (HKLM-x32\...\{4A754DA6-6E12-40AF-BAF0-B7D60C6BE005}) (Version: 4.4.1.2 - The Document Foundation)
Lightshot-5.2.0.17 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.2.0.17 - Skillbrains)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden
Luxor 3 (HKLM-x32\...\Luxor 3) (Version: - Oberon Media Inc.)
Mahjongg dimensions (HKLM-x32\...\Mahjongg dimensions) (Version: - Oberon Media Inc.)
Malwarebytes Anti-Malware verze 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Maxthon Cloud Browser (HKLM-x32\...\Maxthon3) (Version: 4.4.3.4000 - Maxthon International Limited)
MediaInfo 0.7.71 (HKLM\...\MediaInfo) (Version: 0.7.71 - MediaArea.net)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Metropolis Hippo Viewer version 0.6.3 (HKLM-x32\...\{0C24676C-7381-4D94-899A-8B2BE8CBFCD4}_is1) (Version: 0.6.3 - Metropolis Metaversum)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM-x32\...\M2833941) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 4.5.1 (HKLM\...\{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60830 (HKLM-x32\...\{c7ed0d4c-89c5-47fc-9e89-1088affe63f3}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60830 (HKLM-x32\...\{9dba0447-b749-41ea-90bc-2aa19a9eb580}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
Minecraft (HKLM-x32\...\{34D9106C-A947-47ED-B4AB-764736350769}) (Version: 1.6.1 - MINECRAFTinstall.net)
MKVToolNix 7.4.0 (64bit) (HKLM-x32\...\MKVToolNix) (Version: 7.4.0 - Moritz Bunkus)
Mozilla Firefox 37.0.2 (x86 sk) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 sk)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0.1 - Mozilla)
MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
My Program version 1.5 (HKLM-x32\...\My Program_is1) (Version: 1.5 - )
Nero 9 Essentials (HKLM-x32\...\{6f61f3cf-95c7-4987-8d3b-ed3eda0847dc}) (Version: - Nero AG)
NexusFont 2.5 (ver 2.5.8.1582) (HKLM-x32\...\{EFEDD205-43FE-4208-B682-0937E803E19E}_is1) (Version: - xiles)
Nitro Reader 2 (HKLM\...\{C30BB9AD-F9E4-4506-B416-57C03702998D}) (Version: 2.5.0.45 - Nitro PDF Software)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.5 - Notepad++ Team)
Notification Center (HKLM-x32\...\{FDAD2767-11CA-4D38-9CC4-48770CE3CC7B}) (Version: 0.7.8.829 - BlueStack Systems, Inc.)
Nuance PDF Reader (HKLM-x32\...\{B480904D-F73F-4673-B034-8A5F492C9184}) (Version: 6.00.0041 - Nuance Communications, Inc.)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
Odinštalovať tlačiareň EPSON SX100 Series (HKLM\...\EPSON SX100 Series) (Version: - SEIKO EPSON Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
osu! (HKLM-x32\...\{8eaf4c0b-aa70-421d-966a-993e015000db}) (Version: latest - ppy Pty Ltd)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM-x32\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (HKLM-x32\...\{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}) (Version: 15.4.5722.2 - Microsoft Corporation)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.9 - Pando Networks Inc.)
PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden
PhotoFiltre 7 (HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\PhotoFiltre 7) (Version: - )
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
PSPad editor (HKLM-x32\...\PSPad editor_is1) (Version: 4.5.7.2450 - Jan Fiala)
puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6392 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 3.1.1 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.1 - VS Revo Group, Ltd.)
RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version: - Punk Software)
Shards of War (HKLM-x32\...\1d128bf6-25c8-4b8a-bfa2-12b013ab230e_is1) (Version: 59459 - Bigpoint GmbH)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Sonic Focus (HKLM-x32\...\{09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F}) (Version: 1.0.0.4 - Synopsys )
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.16.1 - Synaptics Incorporated)
syncables desktop SE (HKLM-x32\...\{341697D8-9923-445E-B42A-529E5A99CB7A}) (Version: 5.5.746.11492 - syncables)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15.1 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.24951 - TeamViewer)
The Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.0.732.20 - Electronic Arts Inc.)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
VidCoder 1.5.31 (x64) (HKLM\...\VidCoder-x64_is1) (Version: 1.5.31 - RandomEngy)
Virtual Audio Cable 4.10 (HKLM\...\Virtual Audio Cable 4.10) (Version: - )
VirtualDJ PRO Full (HKLM-x32\...\{74F28F11-404B-4CEA-92FF-37BF476F239E}) (Version: 7.0.3 - Atomix Productions)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VobSub 2.23 (HKLM-x32\...\VobSub) (Version: 2.23 - Gabest)
Win8.1 SkinPack X64 (HKLM-x32\...\Win8.1 SkinPack) (Version: X64 - SkinPack)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX kontrola za daljinske veze (HKLM-x32\...\{8985AE5E-622A-4980-8BF8-0A1830643220}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX vadīkla attālajiem savienojumiem (HKLM-x32\...\{A3A775C9-5A63-4C55-8FDD-427A5B8F5D2B}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-i juhtelement kaugühendustele (HKLM-x32\...\{216ACEC1-4556-4717-A8DE-3F7F5F9C6F63}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (HKLM-x32\...\{6E29C4F7-C2C2-4B18-A15C-E09B92065F15}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.31.0 - ASUS)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 4.20 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.19 - ASUS)
World of Goo (HKLM-x32\...\World of Goo) (Version: - Oberon Media Inc.)
wxDev-C++ 7.4 (HKLM-x32\...\wxdevcpp) (Version: - )
XMedia Recode version 3.2.0.4 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.2.0.4 - XMedia Recode)
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)
XviD4PSP 5.10.330.0 (HKLM-x32\...\XviD4PSP5_is1) (Version: - Winnydows & fcp team)
Zoner Photo Studio 12 (HKLM-x32\...\ZonerPhotoStudio12_CZ_is1) (Version: 12.0.1.7 - ZONER software)
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000_Classes\CLSID\{BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B}\InprocServer32 -> C:\Program Files (x86)\Zoner\Photo Studio 12\Program\SHELLEXT64.DLL (ZONER software)

==================== Restore Points =========================

09-04-2015 08:03:21 Plánovaný kontrolný bod
17-04-2015 20:11:50 Plánovaný kontrolný bod
24-04-2015 20:54:13 Plánovaný kontrolný bod
27-04-2015 20:53:25 zoek.exe restore point
28-04-2015 12:49:12 Removed Java 7 Update 51 (64-bit)
28-04-2015 12:58:17 Removed Java 7 Update 51 (64-bit)

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2015-04-28 08:11 - 00000841 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {09459878-1FA3-4495-87B6-DDF134186ADB} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2011-03-07] (ASUS)
Task: {0AEA5E84-B991-4CC6-A657-65ACA448F165} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-07-22] (Piriform Ltd)
Task: {1C1DA28E-DB53-4DC6-A5D1-9219E484C352} - System32\Tasks\{9267B099-6ACE-4931-9A39-8A28EA541925} => pcalua.exe -a "C:\Program Files (x86)\Cenega Czech\Mafia\Setup.exe" -d "C:\Program Files (x86)\Cenega Czech\Mafia"
Task: {1D4730AD-45B2-4AE4-A32F-64400E7CC079} - System32\Tasks\{AE3AE53C-074B-4A10-BCFA-B60F541D33DE} => C:\Users\Samerko\Desktop\FindAWF.exe
Task: {2586D28F-25FC-443A-97B7-E55ED694382A} - System32\Tasks\Maxthon Update => C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe [2014-12-10] (Maxthon International ltd.)
Task: {379BDC9B-A06D-4873-91D3-D117BAEC46CC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: {3A4A97CF-FE6D-467E-8537-949FF5EA0344} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {457FBAE4-E059-4B9F-8583-C75504FB0821} - System32\Tasks\AdobeAAMUpdater-1.0-Samerko-PC-Samerko => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-12-10] (Adobe Systems Incorporated)
Task: {5D85B9D1-4388-4E35-A3BC-B5107CA6C14F} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2011-08-31] (ASUSTeK Computer Inc.)
Task: {5E8AF6C6-EB0C-4B96-8A58-B408D3B4592A} - System32\Tasks\{F0145E68-401A-45BE-97FF-2ABFC9536C84} => C:\Users\Samerko\Desktop\FindAWF.exe
Task: {75B171CE-F266-478D-B804-7AF85969A8E7} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {7DC5799A-2733-449B-91FE-7B23464E991C} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2010-11-15] (ASUS)
Task: {82145BA9-7C64-4E11-99E3-0E4D198F14DE} - System32\Tasks\{FB30DE2C-C916-4807-966D-D170DCBF1231} => C:\Users\Samerko\Desktop\FindAWF.exe
Task: {9DBD14B0-2CF2-400B-AF7C-9E563EB071E6} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe
Task: {B8D00ABB-1A3D-4D6F-8163-8D529135A8A5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {EFD742DA-A207-4066-BEAB-90055BC47A22} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {F3D8DE67-D0A9-4C1E-8DC0-0580D7C20738} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-17] (ASUS)
Task: {F8F128D2-4776-4ED4-B845-9CE6F35A8B90} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-02] (ASUS)
Task: {F9D20E85-2E63-4763-9223-54018F5097A9} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2010-12-18] (ASUSTek Computer Inc.)
Task: {FDC866FE-6906-4A18-8026-E9EA9AC7A093} - System32\Tasks\{AD3716FC-2F47-492E-AE7D-3F5432A29AF5} => C:\Users\Samerko\Desktop\FindAWF.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) ==============

2014-02-11 04:21 - 2014-02-11 04:21 - 00644464 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-05-12 11:49 - 2014-05-12 11:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2015-04-15 18:16 - 2015-04-15 18:16 - 16863920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\...\100sexlinks.com -> 100sexlinks.com

There are 4788 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1676706566-1539175069-4259669011-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Samerko\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe
MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: SonicMasterTray => C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: Wireless Console 3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [{4C5C55D3-6471-46B0-8C69-F90DE933EB3F}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{B36B7768-F50C-44E2-99F3-8D7CF8C97D7E}] => (Allow) LPort=2869
FirewallRules: [{8B6F2C2C-8018-43A7-B7AC-26177AFB6846}] => (Allow) LPort=1900
FirewallRules: [{5B3CF587-354A-4C45-9A75-28C42D5E9E63}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{91E76949-866F-4FFA-A05B-B0085FDC8DA9}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{FF0E14E4-C858-4882-BB0F-5B5456352724}] => (Allow) LPort=5353
FirewallRules: [{4664F37F-1F3E-4729-9525-81A1AED2C27C}] => (Allow) LPort=8182
FirewallRules: [{D11867E7-950A-48EA-A30C-CFBD3A33D88A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{C5E17F98-F9B8-4B9F-8F0E-A7AF16A7CA18}C:\users\samerko\downloads\opensim-0.7.4\opensim-0.7.4\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\opensim-0.7.4\opensim-0.7.4\bin\opensim.exe
FirewallRules: [UDP Query User{DFFFA26C-12DE-46CC-BD6F-C8174331FD33}C:\users\samerko\downloads\opensim-0.7.4\opensim-0.7.4\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\opensim-0.7.4\opensim-0.7.4\bin\opensim.exe
FirewallRules: [TCP Query User{CD5E3AED-8B5D-41F1-86DC-DD7C80752DDD}C:\users\samerko\downloads\opensim-0.7.4 (1)\opensim-0.7.4\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\opensim-0.7.4 (1)\opensim-0.7.4\bin\opensim.exe
FirewallRules: [UDP Query User{1590A8E8-0DFD-4563-BEE0-9E69E100A297}C:\users\samerko\downloads\opensim-0.7.4 (1)\opensim-0.7.4\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\opensim-0.7.4 (1)\opensim-0.7.4\bin\opensim.exe
FirewallRules: [TCP Query User{7769CF8D-EB6C-443F-98A8-8C550CB72266}C:\users\samerko\downloads\opensim-0.7.4 (2)\opensim-0.7.4\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\opensim-0.7.4 (2)\opensim-0.7.4\bin\opensim.exe
FirewallRules: [UDP Query User{95FC8CD8-F181-498C-8E43-D4249EC444C8}C:\users\samerko\downloads\opensim-0.7.4 (2)\opensim-0.7.4\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\opensim-0.7.4 (2)\opensim-0.7.4\bin\opensim.exe
FirewallRules: [TCP Query User{AFD0F1F4-E996-4837-95E8-EAED5DE59F58}C:\users\samerko\downloads\osgrid.opensim-08202012.v0.7.4.dd0556a\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\osgrid.opensim-08202012.v0.7.4.dd0556a\bin\opensim.exe
FirewallRules: [UDP Query User{EBC51DF5-0C7E-4594-9134-CE387FA830FF}C:\users\samerko\downloads\osgrid.opensim-08202012.v0.7.4.dd0556a\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\osgrid.opensim-08202012.v0.7.4.dd0556a\bin\opensim.exe
FirewallRules: [TCP Query User{25A13C35-A4D1-4092-9F16-12D4A6BF3D88}C:\users\samerko\downloads\osgrid.opensim-08202012.v0.7.4.dd0556a (1)\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\osgrid.opensim-08202012.v0.7.4.dd0556a (1)\bin\opensim.exe
FirewallRules: [UDP Query User{315A1D1D-01AA-471A-A0CA-11A7AE43D467}C:\users\samerko\downloads\osgrid.opensim-08202012.v0.7.4.dd0556a (1)\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\osgrid.opensim-08202012.v0.7.4.dd0556a (1)\bin\opensim.exe
FirewallRules: [TCP Query User{C7BC56AD-CF9E-4197-9496-F65E4515C2C1}C:\users\samerko\downloads\opensim-0.7.4 (3)\opensim-0.7.4\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\opensim-0.7.4 (3)\opensim-0.7.4\bin\opensim.exe
FirewallRules: [UDP Query User{589FEEA1-BE95-4CEA-A76D-1B5E26E3B2C8}C:\users\samerko\downloads\opensim-0.7.4 (3)\opensim-0.7.4\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\opensim-0.7.4 (3)\opensim-0.7.4\bin\opensim.exe
FirewallRules: [TCP Query User{F382ED13-6BDB-42A5-B328-DE4368DDCAE6}C:\windows\syswow64\javaw.exe] => (Allow) C:\windows\syswow64\javaw.exe
FirewallRules: [UDP Query User{C1164674-A907-48F8-BBD5-DBDD6F64A110}C:\windows\syswow64\javaw.exe] => (Allow) C:\windows\syswow64\javaw.exe
FirewallRules: [TCP Query User{8A3484C8-AABC-4438-8C9F-C95F35296554}C:\users\samerko\downloads\opensim-0.7.4 (5)\opensim-0.7.4\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\opensim-0.7.4 (5)\opensim-0.7.4\bin\opensim.exe
FirewallRules: [UDP Query User{2D9E69E3-643A-49C4-84FA-D671D388FB13}C:\users\samerko\downloads\opensim-0.7.4 (5)\opensim-0.7.4\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\opensim-0.7.4 (5)\opensim-0.7.4\bin\opensim.exe
FirewallRules: [TCP Query User{B56EB22F-7F66-4DA3-B73D-346D976FCAFD}C:\users\samerko\downloads\opensim-0.7.4 (6)\opensim-0.7.4\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\opensim-0.7.4 (6)\opensim-0.7.4\bin\opensim.exe
FirewallRules: [UDP Query User{FF7116E4-0E8D-4D88-819A-2C1FA6CE2CE6}C:\users\samerko\downloads\opensim-0.7.4 (6)\opensim-0.7.4\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\opensim-0.7.4 (6)\opensim-0.7.4\bin\opensim.exe
FirewallRules: [TCP Query User{F679149B-0E8B-4DFC-BB86-CF597791D1A4}C:\users\samerko\downloads\opensim-0.7.4 (7)\opensim-0.7.4\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\opensim-0.7.4 (7)\opensim-0.7.4\bin\opensim.exe
FirewallRules: [UDP Query User{BE0A2754-89BB-43AC-A985-56D94FEEF02E}C:\users\samerko\downloads\opensim-0.7.4 (7)\opensim-0.7.4\bin\opensim.exe] => (Allow) C:\users\samerko\downloads\opensim-0.7.4 (7)\opensim-0.7.4\bin\opensim.exe
FirewallRules: [{1365B8D1-65BB-4061-8F0D-F335F2AA078A}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{D26D6D89-CE14-49CC-8A47-C200B479D706}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [TCP Query User{ED5FEE86-DA52-4DB1-9461-6CCBA5F86D89}C:\windows\syswow64\javaw.exe] => (Allow) C:\windows\syswow64\javaw.exe
FirewallRules: [UDP Query User{1DD8DC9D-3763-4E04-B581-5F6A6C913A51}C:\windows\syswow64\javaw.exe] => (Allow) C:\windows\syswow64\javaw.exe
FirewallRules: [TCP Query User{97743350-5DE7-47B6-8D4A-12254A7650F1}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{981F970C-CA6C-4C5B-9981-370023BCB605}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{C09CCEA9-51B6-4771-864D-D77783C59C3A}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office12\outlook.exe
FirewallRules: [{75E77AE9-C53E-46DC-99B5-8FB4C6EB8203}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office12\GROOVE.EXE
FirewallRules: [{07AC4CF7-A455-4A52-A3CE-65F4901CA3B2}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office12\GROOVE.EXE
FirewallRules: [{6F43C872-0621-4AA0-A025-434EE97AD343}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTE.EXE
FirewallRules: [{CE8460B4-0F34-4D64-879F-0DA5927F65BB}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTE.EXE
FirewallRules: [TCP Query User{98CB3314-26E5-4F18-BB8C-0474CD981216}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{E01D1792-F8A2-4894-9AD8-F67E74E02247}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [TCP Query User{2F0311D0-96F0-4861-8D9F-F44ED54ADB89}C:\program files (x86)\hippo_opensim_viewer\slvoice.exe] => (Allow) C:\program files (x86)\hippo_opensim_viewer\slvoice.exe
FirewallRules: [UDP Query User{39587649-CEA3-42DD-855A-E10A92DF9D25}C:\program files (x86)\hippo_opensim_viewer\slvoice.exe] => (Allow) C:\program files (x86)\hippo_opensim_viewer\slvoice.exe
FirewallRules: [{13336248-5CB0-4090-8DBB-31AA893FDD37}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{B9100D15-DA30-4099-B618-7C7DC425A5AF}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{D5141342-3DA2-4CED-BDC2-83EAE4B8C138}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{11C518CC-5BD3-4254-A2BF-C7ACB262DDFA}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{2CD49745-2144-4F37-8769-B442EDF74416}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [TCP Query User{C43B76D3-E21B-495C-BDEF-4CB590143310}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{165B9D27-F319-47FC-B91F-4399F2535181}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{927FBB49-579C-40EE-89F7-3D2BC3D8FCD5}C:\users\samerko\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\samerko\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{6E77BBF9-5348-4FB2-AE71-80F673412883}C:\users\samerko\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\samerko\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{23C670A4-0BC0-4ECB-B6B4-9AC11DD2BF5B}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{A6EDB140-9516-4F26-BE0D-9F3D55D2A7CC}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{CE7B34D2-1A46-4A74-A88C-88975AF4D230}C:\users\samerko\appdata\roaming\utorrent\updates\3.3.1_30017.exe] => (Allow) C:\users\samerko\appdata\roaming\utorrent\updates\3.3.1_30017.exe
FirewallRules: [UDP Query User{A8F2FBE6-624E-4CCE-BD22-616273F1D47D}C:\users\samerko\appdata\roaming\utorrent\updates\3.3.1_30017.exe] => (Allow) C:\users\samerko\appdata\roaming\utorrent\updates\3.3.1_30017.exe
FirewallRules: [TCP Query User{7E67B57F-8D21-4375-BD40-B96C09E18074}C:\program files (x86)\filezilla ftp client\filezilla.exe] => (Allow) C:\program files (x86)\filezilla ftp client\filezilla.exe
FirewallRules: [UDP Query User{24E0D292-AEC6-4217-A7C5-06F112F4F07C}C:\program files (x86)\filezilla ftp client\filezilla.exe] => (Allow) C:\program files (x86)\filezilla ftp client\filezilla.exe
FirewallRules: [{7BF03AA5-49A6-4981-8516-4DB8A702782A}] => (Block) C:\program files (x86)\filezilla ftp client\filezilla.exe
FirewallRules: [{1D82A666-EC8B-48F0-8D87-2417DBDB4F47}] => (Block) C:\program files (x86)\filezilla ftp client\filezilla.exe
FirewallRules: [{7B959D03-3F96-4B79-803C-B430EBE8E1A9}] => (Allow) C:\Users\Samerko\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{6FD435A7-2C58-4FF9-8F5B-6901680D7561}] => (Allow) C:\Users\Samerko\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{D8B93371-8C9F-40FD-887D-4B9AA18C05F2}C:\program files (x86)\bittorrent sync\btsync.exe] => (Block) C:\program files (x86)\bittorrent sync\btsync.exe
FirewallRules: [UDP Query User{9CEFFA6C-2A92-49C0-AB3F-26143CE46AB8}C:\program files (x86)\bittorrent sync\btsync.exe] => (Block) C:\program files (x86)\bittorrent sync\btsync.exe
FirewallRules: [TCP Query User{029BAD0A-DC19-42CD-B16C-5035F3A09379}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [UDP Query User{8AB2D3D8-EE6B-43FE-82EB-15999AAB6736}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [TCP Query User{EB1EE639-0175-4B52-928A-BB842A895E59}C:\users\samerko\appdata\roaming\.creativeportal\jre\bin\javaw.exe] => (Allow) C:\users\samerko\appdata\roaming\.creativeportal\jre\bin\javaw.exe
FirewallRules: [UDP Query User{FBB1BCF1-46F4-4E4D-B8F2-CFD9CBB6DAEC}C:\users\samerko\appdata\roaming\.creativeportal\jre\bin\javaw.exe] => (Allow) C:\users\samerko\appdata\roaming\.creativeportal\jre\bin\javaw.exe
FirewallRules: [{22ABA3E4-675D-4794-8B30-85DBE70B3BB8}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{BD70E314-59F7-4D7A-9613-BCA2E2EB5DFC}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{36B32EA3-38F3-4F00-B361-98615CD31C72}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{536B22EE-4D39-4B30-AF02-6E9E82EA427D}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{45B1873A-0837-4F1F-B1DF-427352A4B22E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{72F3FAD5-C5C1-4068-9C30-5EA977392C03}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{B91C779C-8529-4BF0-94E7-42EFD9FDE0CE}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{77D0CC8E-165F-4D61-89A1-E3C7842A1218}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe
FirewallRules: [{5E7A0AF2-03AA-4185-B403-F9684CD25406}] => (Allow) C:\Users\Samerko\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
FirewallRules: [{97763B03-0DBC-49DE-B2E3-FA920F84CCF5}] => (Allow) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
FirewallRules: [{812F015B-3D26-42E1-8EDB-138CCA17BEB6}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{3786CB1B-8598-4030-8589-EB682F42C7CB}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{A3FA4F60-E6DB-4F87-998B-C4F6E46CB8D5}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{F7963163-82F0-4FBB-ABBA-BD020E6C03E9}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{600D462E-B251-4363-BF4F-8A556C23EF2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Half-Life\hl.exe
FirewallRules: [{66F321B8-2EB7-45EC-922D-9317F71E1BB9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Half-Life\hl.exe
FirewallRules: [{F7292EFB-DAB5-463B-B103-0BAE0C8CCF91}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{2A453069-1C7F-4E76-B769-5EDBCD9C7E9F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global

SamerLP · Příspěvekod **SamerLP** » 28 dub 2015 16:09

Offensive\csgo.exe
FirewallRules: [TCP Query User{912BCAE3-BD30-4BE5-A275-797C8D4A89AF}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Allow) C:\programdata\electronic arts\need for speed world\data\nfsw.exe
FirewallRules: [UDP Query User{5367704F-7F38-45DB-BF44-CFEF026B44DF}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Allow) C:\programdata\electronic arts\need for speed world\data\nfsw.exe
FirewallRules: [{085BFBD4-C5CC-4CFD-B148-3F40E50132E8}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{E5DB1821-1AAC-4F42-A7A6-5F13094F0ABD}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{6839989C-A319-4D89-82F2-3985F3D386AD}] => (Allow) C:\Program Files\Echobit\Evolve\EvoSvc.exe
FirewallRules: [{D6547ACB-88A9-47E5-A926-92DE2C500154}] => (Allow) C:\Program Files\Echobit\Evolve\EvolveClient.exe
FirewallRules: [TCP Query User{BD658A86-D639-4AE8-AE74-6C79FB866E62}F:\farming simulator\farming-simulator-2015\farming simulator 2015\farmingsimulator2015game.exe] => (Allow) F:\farming simulator\farming-simulator-2015\farming simulator 2015\farmingsimulator2015game.exe
FirewallRules: [UDP Query User{DF3A4AD9-EC63-4105-AD37-FC16A8D78095}F:\farming simulator\farming-simulator-2015\farming simulator 2015\farmingsimulator2015game.exe] => (Allow) F:\farming simulator\farming-simulator-2015\farming simulator 2015\farmingsimulator2015game.exe
FirewallRules: [{C25B5CF4-42E6-4AFD-BDC8-C641EDB19797}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{2AC7E453-861E-4E13-8B0E-F0C46D01E233}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{FE864BE1-5D65-4CEC-BEAB-B6179E8788C9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{5B97328E-846B-4780-8887-13BDB49452AD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{7372639E-CB09-4C81-AA16-748899783940}] => (Allow) C:\Hry\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{EFE6CCE9-D8A0-4E2E-B40D-5A8A12D701DA}] => (Allow) C:\Hry\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{FA5E075A-584C-4442-BD93-CAAAC4161970}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{57C6C64B-ED8F-44E0-82E0-371032A41113}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe
FirewallRules: [{1F890A9A-4D9C-4D56-9A94-C1F46091B432}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
FirewallRules: [{EBDE457B-3DDD-4527-A354-BE074BB07D99}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
FirewallRules: [{9E5DDCA1-1448-4107-8CE7-B15A6C924471}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe
FirewallRules: [{BF30D8D2-2656-4C6F-9A78-897670A31161}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{173AEADC-4540-4F44-9EA2-069D7CBDB42D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{FC8F3FC4-2FCF-4ED6-BB6E-BF8BAD50256E}C:\totalcmd\totalcmd64.exe] => (Allow) C:\totalcmd\totalcmd64.exe
FirewallRules: [UDP Query User{5555B41E-C06C-4BF3-9B90-DB71E8D0C56C}C:\totalcmd\totalcmd64.exe] => (Allow) C:\totalcmd\totalcmd64.exe
FirewallRules: [TCP Query User{1D6D4D0E-D48D-4FE9-B852-18A659B29128}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{39B75C1E-0F4D-4DE9-8811-3FBABD1626C7}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{2B96051C-4CD6-49B3-937C-1AF58C769345}C:\program files (x86)\kvirc\kvirc.exe] => (Allow) C:\program files (x86)\kvirc\kvirc.exe
FirewallRules: [UDP Query User{727E9621-1B70-4E6C-A0F6-4728F3424CA3}C:\program files (x86)\kvirc\kvirc.exe] => (Allow) C:\program files (x86)\kvirc\kvirc.exe

==================== Faulty Device Manager Devices =============

Name: BlueStacks Hypervisor
Description: BlueStacks Hypervisor
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: BstHdDrv
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

==================== Event log errors: =========================

Application errors:
==================
Error: (04/28/2015 01:13:16 PM) (Source: FirebirdGuardianDefaultInstance) (EventID: 281) (User: )
Description: Abnormal Termination: "C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe": terminated abnormally (4294967295)ver.exeEĽż˘q"

Error: (04/28/2015 01:06:21 PM) (Source: BstHdLogRotatorSvc) (EventID: 0) (User: )
Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object.
at BlueStacks.hyperDroid.LogRotatorService.Service.OnStart(String[] args)
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (04/28/2015 10:16:45 AM) (Source: BstHdLogRotatorSvc) (EventID: 0) (User: )
Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object.
at BlueStacks.hyperDroid.LogRotatorService.Service.OnStart(String[] args)
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (04/28/2015 09:23:55 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybovej aplikácie: MeGUI.exe, verzia: 1.0.2507.0, časová značka: 0x53aec650
Názov chybového modulu: ffms2.dll_unloaded, verzia: 0.0.0.0, časová značka: 0x53a44d6b
Kód výnimky: 0xc0000005
Odstup chyby: 0x5c08a01c
Identifikácia chybného procesu: 0x16fc
Čas spustenia chybnej aplikácie: 0xMeGUI.exe0
Cesta chybnej aplikácie: MeGUI.exe1
Cesta chybného modulu: MeGUI.exe2
Identifikácia hlásenia: MeGUI.exe3

Error: (04/28/2015 09:23:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybovej aplikácie: MeGUI.exe, verzia: 1.0.2507.0, časová značka: 0x53aec650
Názov chybového modulu: ffms2.dll_unloaded, verzia: 0.0.0.0, časová značka: 0x53a44d6b
Kód výnimky: 0xc0000005
Odstup chyby: 0x5c56dd50
Identifikácia chybného procesu: 0x16fc
Čas spustenia chybnej aplikácie: 0xMeGUI.exe0
Cesta chybnej aplikácie: MeGUI.exe1
Cesta chybného modulu: MeGUI.exe2
Identifikácia hlásenia: MeGUI.exe3

Error: (04/28/2015 09:07:50 AM) (Source: BstHdLogRotatorSvc) (EventID: 0) (User: )
Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object.
at BlueStacks.hyperDroid.LogRotatorService.Service.OnStart(String[] args)
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (04/28/2015 08:00:36 AM) (Source: BstHdLogRotatorSvc) (EventID: 0) (User: )
Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object.
at BlueStacks.hyperDroid.LogRotatorService.Service.OnStart(String[] args)
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (04/27/2015 08:24:16 PM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhost (1228) WebCacheLocal: Error -1811 occurred while opening logfile C:\Users\Samerko\AppData\Local\Microsoft\Windows\WebCache\V0100150.log.

Error: (04/27/2015 08:24:15 PM) (Source: BstHdLogRotatorSvc) (EventID: 0) (User: )
Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object.
at BlueStacks.hyperDroid.LogRotatorService.Service.OnStart(String[] args)
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (04/27/2015 08:22:11 PM) (Source: FirebirdGuardianDefaultInstance) (EventID: 281) (User: )
Description: Abnormal Termination: "C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe": terminated abnormally (4294967295)

System errors:
=============
Error: (04/28/2015 01:13:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Software Protection sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 120000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (04/28/2015 01:13:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Management and Security Application User Notification Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (04/28/2015 01:13:16 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Presentation Foundation Font Cache 3.0.0.0 sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 0 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (04/28/2015 01:13:16 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Media Player - služba zdieľania v sieti sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 30000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (04/28/2015 01:13:16 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Modules Installer sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 120000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (04/28/2015 01:13:16 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Firebird Server - DefaultInstance sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (04/28/2015 01:13:15 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba LogMeIn Hamachi Tunneling Engine sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (04/28/2015 01:13:15 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Tor Win32 Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (04/28/2015 01:13:15 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba PnkBstrB sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (04/28/2015 01:13:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba PnkBstrA sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Microsoft Office Sessions:
=========================
Error: (11/19/2014 03:31:42 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6600.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 310 seconds with 240 seconds of active time. This session ended with a crash.

CodeIntegrity Errors:
===================================
Date: 2015-01-17 10:56:36.359
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-01-17 10:56:35.517
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-01-17 10:56:34.675
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-01-17 10:56:33.832
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-01-17 10:38:45.160
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-01-17 10:38:44.364
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-01-17 10:38:43.522
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-01-17 10:38:42.633
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-01-16 14:20:35.394
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-01-16 14:20:34.614
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info ===========================

Processor: Intel(R) Celeron(R) CPU B800 @ 1.50GHz
Percentage of memory in use: 47%
Total physical RAM: 4072.13 MB
Available physical RAM: 2136.29 MB
Total Pagefile: 8142.44 MB
Available Pagefile: 6157.69 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:250.05 GB) (Free:64.78 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Data) (Fixed) (Total:321.12 GB) (Free:281.71 GB) NTFS
Drive h: (ExternyHardDisk) (Fixed) (Total:698.64 GB) (Free:297.16 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or

(Size: 596.2 GB) (Disk ID: 496B9619)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=250.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=321.1 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 698.6 GB) (Disk ID: 7242CF91)
Partition 1: (Not Active) - (Size=698.6 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Pomalý pc Vyřešeno

Pomalý pc

Re: Pomalý pc

Re: Pomalý pc

Re: Pomalý pc

Re: Pomalý pc

Re: Pomalý pc

Re: Pomalý pc

Re: Pomalý pc

Re: Pomalý pc

Re: Pomalý pc

Re: Pomalý pc

Re: Pomalý pc

Kdo je online