PC-HELP.CZ

České diskuzní fórum o počítačích
https://pc-help.cnews.cz/

Facebook všem rozesílá VIRY

https://pc-help.cnews.cz/viewtopic.php?f=70&t=156000

Stránka 1 z 1

Facebook všem rozesílá VIRY

Napsal: 09 čer 2015 16:18
od pepanecek5
Čaute,
kámoš byl na facebooku a v chatu klikl na odkaz, který nevypadal nijak podezřele. Žeprý se mu otevřela pornografická stránka a hned se mu to dostalo do pc. A už to skoro všem rozeslalo ten samý odkaz a ještě se to i sdílelo několikrát na jeho zdi. Pokaždé, když zapne facebook všem co jsou online, začne rozesílat ten samý vir. Nevíme si s tím rady a radši od té doby nejde na facebook. Mám i podezření, že by to mohlo být v pc. Příkládám log.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:08-06-2015
Ran by Škráša (administrator) on ŠKRÁŠA-PC on 09-06-2015 16:11:30
Running from C:\Users\Škráša\Downloads
Loaded Profiles: Škráša & (Available Profiles: Škráša)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Analog Devices, Inc.) C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AutoKMS] => C:\Windows\AutoKMS.exe
HKLM\...\Run: [CmPCIaudio] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\CMICNFG3.dll,CMICtrlWnd
HKLM-x32\...\Run: [SoundMAXPnP] => C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [1261568 2007-04-02] (Analog Devices, Inc.)
HKLM-x32\...\Run: [SoundTray] => C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe [49152 2007-04-01] (Sonic Focus, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.)
HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2015-04-13] (Microsoft Corporation)
HKU\S-1-5-21-3766409607-1172890862-2761300191-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-3766409607-1172890862-2761300191-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)
HKU\S-1-5-21-3766409607-1172890862-2761300191-1000\...\MountPoints2: {6c059901-07ab-11e5-a725-001d60b4c50b} - E:\Autorun\autorun.exe
HKU\S-1-5-21-3766409607-1172890862-2761300191-1000\...\MountPoints2: {6c059906-07ab-11e5-a725-001d60b4c50b} - F:\Autorun\autorun.exe
HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)
HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {6c059901-07ab-11e5-a725-001d60b4c50b} - E:\Autorun\autorun.exe
HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {6c059906-07ab-11e5-a725-001d60b4c50b} - F:\Autorun\autorun.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2015-04-13] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ASUS WiFi-AP Solo.lnk [2015-04-11]
ShortcutTarget: ASUS WiFi-AP Solo.lnk -> C:\Program Files (x86)\ASUS WiFi-AP Solo\RtWLan.exe (AzureWave.com)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2002-01-01] (Avast Software s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3766409607-1172890862-2761300191-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=6826
HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=6826
SearchScopes: HKU\S-1-5-21-3766409607-1172890862-2761300191-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.seznam.cz/?sourceid=quicksearch_6826&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3766409607-1172890862-2761300191-1000 -> 4FBF71A2A7C6988E1A5F5BB99C257101 URL = http://www.firmy.cz/phr/{searchTerms}
SearchScopes: HKU\S-1-5-21-3766409607-1172890862-2761300191-1000 -> 7D8E8DBBC357B78613C9855C72D7E76B URL = http://www.zbozi.cz/?sourceid=quicksearch_6826&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3766409607-1172890862-2761300191-1000 -> 85AE29E6CB35D95A764EC849722C8DA8 URL = http://www.mapy.cz/?sourceid=quicksearch_6826&query={searchTerms}
SearchScopes: HKU\S-1-5-21-3766409607-1172890862-2761300191-1000 -> E63858E4281B8FC58EFB8915BE40D5A1 URL = http://videa.seznam.cz/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3766409607-1172890862-2761300191-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.seznam.cz/?sourceid=quicksearch_6826&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.seznam.cz/?sourceid=quicksearch_6826&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> 4FBF71A2A7C6988E1A5F5BB99C257101 URL = http://www.firmy.cz/phr/{searchTerms}
SearchScopes: HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> 7D8E8DBBC357B78613C9855C72D7E76B URL = http://www.zbozi.cz/?sourceid=quicksearch_6826&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> 85AE29E6CB35D95A764EC849722C8DA8 URL = http://www.mapy.cz/?sourceid=quicksearch_6826&query={searchTerms}
SearchScopes: HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> E63858E4281B8FC58EFB8915BE40D5A1 URL = http://videa.seznam.cz/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.seznam.cz/?sourceid=quicksearch_6826&q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-11] (Avast Software s.r.o.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: No Name -> {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} -> No File
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office 14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-11] (Avast Software s.r.o.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: No Name -> {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} -> No File
Toolbar: HKU\S-1-5-21-3766409607-1172890862-2761300191-1000 -> No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} - No File
Toolbar: HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 79.170.251.86 79.170.251.22

FireFox:
========
FF ProfilePath: C:\Users\Škráša\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default
FF DefaultSearchEngine: Seznam
FF SelectedSearchEngine: Seznam
FF Homepage: hxxp://www.seznam.cz/?clid=6826
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-02-04] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-02-04] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin HKU\S-1-5-21-3766409607-1172890862-2761300191-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Škráša\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-03-24] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Škráša\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-03-24] (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Škráša\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\firmy.cz-134807.xml [2015-04-18]
FF SearchPlugin: C:\Users\Škráša\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\mapy.cz-134807.xml [2015-04-18]
FF SearchPlugin: C:\Users\Škráša\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\seznam.cz-134807.xml [2015-04-18]
FF SearchPlugin: C:\Users\Škráša\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\videa.seznam.cz-134807.xml [2015-04-18]
FF SearchPlugin: C:\Users\Škráša\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\zbozi.cz-134807.xml [2015-04-18]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-11]

Chrome:
=======
CHR Profile: C:\Users\Škráša\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Škráša\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-11]
CHR Extension: (Google Docs) - C:\Users\Škráša\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-11]
CHR Extension: (Google Drive) - C:\Users\Škráša\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-11]
CHR Extension: (YouTube) - C:\Users\Škráša\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-11]
CHR Extension: (Google Search) - C:\Users\Škráša\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-11]
CHR Extension: (Google Sheets) - C:\Users\Škráša\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-11]
CHR Extension: (AdBlock) - C:\Users\Škráša\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-11]
CHR Extension: (Bookmark Manager) - C:\Users\Škráša\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-16]
CHR Extension: (Night Time In New York City) - C:\Users\Škráša\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnimonidkipnhnpgkhgliocfnnpgkhek [2015-04-25]
CHR Extension: (PowerPoint Online) - C:\Users\Škráša\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2015-04-25]
CHR Extension: (Google Wallet) - C:\Users\Škráša\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-11]
CHR Extension: (Gmail) - C:\Users\Škráša\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-11]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-04-11]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-11]

Opera:
=======
OPR StartupUrls: "hxxp://www.seznam.cz/?clid=6826"

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AEADIFilters; C:\Windows\system32\AEADISRV.EXE [80384 2007-02-06] (Andrea Electronics Corporation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2002-01-01] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2002-01-01] (Avast Software)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5448464 2015-03-30] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2002-01-01] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2002-01-01] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2002-01-01] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2002-01-01] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2002-01-01] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2002-01-01] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2002-01-01] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2002-01-01] ()
R3 cmuda3; C:\Windows\System32\drivers\cmudax3.sys [1155072 2009-11-02] (C-Media Inc)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30352 2015-06-02] (Disc Soft Ltd)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-06-09] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15680 2006-11-01] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2002-01-01] (Avast Software)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-05 07:28 - 2015-06-09 16:09 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-07-05 07:27 - 2015-07-05 07:27 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Škráša\Downloads\mbam-setup-2.1.6.1022.exe
2015-07-05 07:27 - 2015-07-05 07:27 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-07-05 07:27 - 2015-07-05 07:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-07-05 07:27 - 2015-07-05 07:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-05 07:27 - 2015-07-05 07:27 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-07-05 07:27 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-07-05 07:27 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-07-05 07:27 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-07-05 00:13 - 2015-07-05 00:13 - 00000188 _____ C:\Windows\Cmicnfg3.ini.cfl
2015-07-05 00:13 - 2015-07-05 00:13 - 00000138 _____ C:\Windows\system\Dlap.pfx
2015-07-05 00:13 - 2009-11-02 11:34 - 01144983 _____ C:\Windows\SysWOW64\KB936225x64.msu
2015-07-05 00:13 - 2009-11-02 11:33 - 08151040 _____ (C-Media Corporation) C:\Windows\SysWOW64\CMICNFG3.dll
2015-07-05 00:13 - 2009-11-02 11:33 - 00787456 _____ C:\Windows\system32\Cmeaupci.exe
2015-07-05 00:13 - 2009-11-02 11:33 - 00389120 _____ () C:\Windows\system32\CMICNFG3.cpl
2015-07-05 00:13 - 2009-11-02 11:33 - 00200704 _____ (C-Media) C:\Windows\SysWOW64\CMPaOxy.dll
2015-07-05 00:13 - 2009-11-02 11:33 - 00143360 _____ C:\Windows\SysWOW64\VmixP6.dll
2015-07-05 00:12 - 2015-07-05 00:13 - 00000190 _____ C:\Windows\Cmicnfg3.ini.imi
2015-07-05 00:12 - 2015-07-05 00:12 - 00000129 _____ C:\Windows\system\Cmicnfg3.ini
2015-07-05 00:12 - 2009-11-02 11:34 - 01155072 _____ (C-Media Inc) C:\Windows\system32\Drivers\cmudax3.sys
2015-07-05 00:12 - 2009-11-02 11:34 - 00002678 _____ C:\Windows\cmudax3.ini
2015-07-05 00:12 - 2009-11-02 11:33 - 00524768 _____ (Microsoft Corporation) C:\Windows\difxapi.dll
2015-07-05 00:12 - 2009-11-02 11:33 - 00359424 _____ C:\Windows\system32\CmiInstallResAll64.dll
2015-07-05 00:12 - 2009-11-02 11:33 - 00036864 _____ (C-Media Electronics Ins.) C:\Windows\system32\cmudax3.dll
2015-07-05 00:12 - 2009-11-02 11:33 - 00002123 _____ C:\Windows\Cmicnfg3.ini.cfg
2015-07-05 00:10 - 2015-07-05 00:12 - 06658999 _____ C:\Users\Škráša\Downloads\SM5.1W7.zip
2015-07-05 00:08 - 2015-07-05 00:09 - 23871475 _____ C:\Users\Škráša\Downloads\smv5.1.zip
2015-06-09 16:11 - 2015-06-09 16:12 - 00018384 _____ C:\Users\Škráša\Downloads\FRST.txt
2015-06-09 16:11 - 2015-06-09 16:11 - 00000000 ____D C:\FRST
2015-06-09 16:10 - 2015-06-09 16:11 - 02108928 _____ (Farbar) C:\Users\Škráša\Downloads\FRST64.exe
2015-06-09 15:50 - 2015-06-09 15:50 - 00479904 _____ C:\Windows\Minidump\060915-26785-01.dmp
2015-06-08 16:44 - 2015-06-08 16:45 - 00000000 ____D C:\Users\Škráša\Documents\GTA San Andreas User Files
2015-06-08 16:37 - 2015-06-08 16:37 - 00476432 _____ C:\Windows\Minidump\060815-21871-01.dmp
2015-06-07 23:00 - 2015-06-07 23:00 - 00641024 _____ C:\Windows\Minidump\060715-23571-01.dmp
2015-06-07 22:43 - 2015-06-07 22:43 - 00598672 _____ C:\Windows\Minidump\060715-36753-01.dmp
2015-06-07 22:04 - 2015-06-07 22:05 - 00603592 _____ C:\Windows\Minidump\060715-38813-01.dmp
2015-06-07 19:39 - 2015-06-07 20:26 - 00000000 ____D C:\Users\Škráša\AppData\Roaming\PhotoFiltre 7
2015-06-07 19:39 - 2015-06-07 19:39 - 05239812 _____ C:\Users\Škráša\Downloads\pf7-setup-en-7.2.1.exe
2015-06-07 19:39 - 2015-06-07 19:39 - 00001066 _____ C:\Users\Škráša\Desktop\PhotoFiltre 7.lnk
2015-06-07 19:39 - 2015-06-07 19:39 - 00000000 ____D C:\Users\Škráša\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
2015-06-07 19:39 - 2015-06-07 19:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
2015-06-07 19:39 - 2015-06-07 19:39 - 00000000 ____D C:\Program Files (x86)\PhotoFiltre 7
2015-06-05 18:53 - 2015-06-05 18:53 - 00631832 _____ C:\Windows\Minidump\060515-20545-01.dmp
2015-06-05 16:43 - 2015-06-09 15:50 - 355209890 _____ C:\Windows\MEMORY.DMP
2015-06-05 16:43 - 2015-06-05 16:43 - 00640672 _____ C:\Windows\Minidump\060515-23212-01.dmp
2015-06-05 13:15 - 2015-06-05 13:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3
2015-06-05 13:02 - 2002-01-01 20:29 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-06-02 21:32 - 2015-06-02 21:32 - 00000000 ____D C:\Users\Škráša\AppData\Local\SKIDROW
2015-06-02 21:32 - 2015-06-02 21:32 - 00000000 ____D C:\Users\Škráša\AppData\Local\2K Games
2015-06-02 21:31 - 2015-06-02 21:31 - 00002062 _____ C:\Users\Škráša\Desktop\MAFIA II .lnk
2015-06-02 21:10 - 2015-06-02 21:10 - 00000000 ____D C:\Program Files (x86)\2K Games
2015-06-02 21:07 - 2015-06-02 21:09 - 00000000 ____D C:\Users\Škráša\AppData\Roaming\DAEMON Tools Lite
2015-06-02 21:07 - 2015-06-02 21:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2015-06-02 21:07 - 2015-06-02 21:08 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2015-06-02 21:07 - 2015-06-02 21:07 - 00030352 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2015-06-02 21:07 - 2015-06-02 21:07 - 00001743 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2015-06-02 21:06 - 2015-06-02 21:09 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2015-06-02 21:01 - 2015-06-02 21:02 - 13146016 _____ (Disc Soft Ltd) C:\Users\Škráša\Downloads\DTLite501-0406.exe
2015-06-02 19:21 - 2015-06-02 19:21 - 00000000 ____D C:\Users\Škráša\Downloads\Mafia 2 - Special Extended Edition CZ
2015-06-02 19:20 - 2015-06-02 19:20 - 00038150 _____ C:\Users\Škráša\Downloads\[CzT]Mafia_II_Special_Extended_Edition_CZ_2_DVD_.torrent
2015-06-02 15:02 - 2015-06-02 15:02 - 00000000 ____D C:\Users\Škráša\AppData\Local\GWX
2015-05-31 17:25 - 2015-05-31 17:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2015-05-27 22:00 - 2015-05-27 23:04 - 592477778 ____R C:\Users\Škráša\Downloads\Da Vinciho démoni 02x04 Na konec světa.avi
2015-05-27 22:00 - 2015-05-27 22:00 - 00011802 _____ C:\Users\Škráša\Downloads\[SkT]Da_Vinciho_demoni_-_Da_Vinci's_Demons_S02E04_-_Na_konec_sveta_(CZ)[TvRip]_=_CSFD_76%.torrent
2015-05-25 03:08 - 2015-05-25 03:08 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2015-05-24 21:28 - 2015-05-24 22:44 - 439286400 _____ C:\Users\Škráša\Downloads\HUDBA (1).rar
2015-05-24 21:25 - 2015-05-25 15:19 - 00000000 ____D C:\Users\Škráša\Downloads\Avatar.Extended.Collectors.2009.BRRip.XviD.AC3.CZ-iNKViZiT0R
2015-05-24 21:25 - 2015-05-25 00:49 - 2623012990 ____R C:\Users\Škráša\Desktop\Avatar.Extended.Collectors.2009.BRRip.XviD.AC3.CZ-iNKViZiT0R.avi
2015-05-24 20:44 - 2015-05-24 21:21 - 573871993 _____ C:\Users\Škráša\Downloads\HUDBA.rar
2015-05-24 03:10 - 2015-05-24 03:10 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-05-24 03:10 - 2015-05-24 03:10 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-05-23 12:55 - 2015-05-23 14:37 - 01143564 _____ C:\Users\Škráša\Documents\Orbis pictus jakub škrabal VIII.pptx
2015-05-22 18:39 - 2015-05-22 18:39 - 00000161 _____ C:\Windows\AutoKMS.ini
2015-05-22 18:30 - 2015-05-22 18:30 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-05-22 18:29 - 2015-05-22 18:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-05-22 18:29 - 2015-05-22 18:29 - 00003111 _____ C:\Users\Škráša\Desktop\Microsoft Word 2010.lnk
2015-05-22 18:29 - 2015-05-22 18:29 - 00002935 _____ C:\Users\Škráša\Desktop\Microsoft PowerPoint 2010.lnk
2015-05-22 18:29 - 2015-05-22 18:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2015-05-22 18:28 - 2015-05-22 18:28 - 00000000 ____D C:\Program Files\Microsoft Synchronization Services
2015-05-22 18:27 - 2015-05-22 18:27 - 00000000 ____D C:\Windows\PCHEALTH
2015-05-22 18:27 - 2015-05-22 18:27 - 00000000 ____D C:\Program Files\Microsoft Sync Framework
2015-05-22 18:27 - 2015-05-22 18:27 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2015-05-22 18:25 - 2015-05-22 18:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2015-05-22 18:24 - 2015-05-22 18:24 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2015-05-22 18:24 - 2015-05-22 18:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2015-05-22 18:23 - 2015-05-25 03:11 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-05-22 18:23 - 2015-05-22 18:27 - 00000000 ____D C:\Program Files\Microsoft Office
2015-05-22 18:23 - 2015-05-22 18:23 - 00000000 ____D C:\Users\Škráša\AppData\Local\Microsoft Help
2015-05-22 18:23 - 2015-05-22 18:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-05-22 18:22 - 2015-05-22 18:22 - 00000000 __RHD C:\MSOCache
2015-05-22 17:19 - 2015-05-22 17:20 - 00000000 ____D C:\Users\Škráša\Downloads\Microsoft Office Professional Plus 2010 CZ 32bit, 64bit
2015-05-22 17:19 - 2015-05-22 17:19 - 04630617 ____R C:\Users\Škráša\Downloads\OTK2010_V2_BETA4.1.zip
2015-05-22 17:19 - 2015-05-22 17:19 - 00001959 _____ C:\Users\Škráša\Downloads\[CzT]Microsoft_Office_2010_Activator_x86_x64_.torrent
2015-05-22 17:18 - 2015-05-22 17:18 - 00014993 _____ C:\Users\Škráša\Downloads\[CzT]Microsoft_Office_2013_Professional_Plus_CZ_SK_x86_x64_.torrent
2015-05-22 17:18 - 2015-05-22 17:18 - 00014384 _____ C:\Users\Škráša\Downloads\[CzT]Microsoft_Office_Professional_Plus_2010_x86_x64_CZ_.torrent
2015-05-15 21:38 - 2015-05-15 21:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-05-15 21:37 - 2015-05-15 21:37 - 00000000 ____D C:\Windows\SysWOW64\spool
2015-05-15 21:37 - 2015-05-15 21:37 - 00000000 ____D C:\ProgramData\Sony
2015-05-15 21:37 - 2015-05-15 21:37 - 00000000 ____D C:\Program Files (x86)\Sony
2015-05-15 21:22 - 2015-05-15 21:24 - 00000000 ____D C:\Users\Škráša\Downloads\Sony Vegas Pro 10.0e Build 737 Eng_Rus
2015-05-13 22:14 - 2015-05-01 15:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 22:14 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 15:33 - 2015-04-22 04:28 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-13 15:33 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-05-13 15:33 - 2015-04-21 19:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-13 15:33 - 2015-04-21 19:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-13 15:33 - 2015-04-21 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-13 15:33 - 2015-04-21 18:51 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-13 15:33 - 2015-04-21 18:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-13 15:33 - 2015-04-21 18:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-13 15:33 - 2015-04-21 18:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-13 15:33 - 2015-04-21 18:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-13 15:33 - 2015-04-21 18:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-13 15:33 - 2015-04-21 18:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-13 15:33 - 2015-04-21 18:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-13 15:33 - 2015-04-21 18:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-13 15:33 - 2015-04-21 18:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-13 15:33 - 2015-04-21 18:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-13 15:33 - 2015-04-21 18:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-13 15:33 - 2015-04-21 18:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-13 15:33 - 2015-04-21 18:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-13 15:33 - 2015-04-21 18:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-13 15:33 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-05-13 15:33 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-05-13 15:33 - 2015-04-21 18:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-13 15:33 - 2015-04-21 18:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-13 15:33 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-05-13 15:33 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-05-13 15:33 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-05-13 15:33 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-05-13 15:33 - 2015-04-21 18:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-13 15:33 - 2015-04-21 18:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-13 15:33 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-05-13 15:33 - 2015-04-21 18:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-13 15:33 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-05-13 15:33 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-05-13 15:33 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-05-13 15:33 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-05-13 15:33 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-05-13 15:33 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-05-13 15:33 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-05-13 15:33 - 2015-04-21 17:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-13 15:33 - 2015-04-21 17:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-13 15:33 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-05-13 15:33 - 2015-04-21 17:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-13 15:33 - 2015-04-21 17:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-13 15:33 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-05-13 15:33 - 2015-04-21 17:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-13 15:33 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-05-13 15:33 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-05-13 15:33 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-05-13 15:33 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-05-13 15:33 - 2015-04-21 17:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-13 15:33 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-05-13 15:33 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-05-13 15:33 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-05-13 15:33 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-05-13 15:33 - 2015-04-21 17:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-13 15:33 - 2015-04-21 17:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-13 15:33 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-05-13 15:33 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-05-13 15:33 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-05-13 15:32 - 2015-05-05 03:29 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-13 15:32 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-05-13 15:32 - 2015-04-18 05:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-13 15:32 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-05-13 15:27 - 2015-04-27 21:28 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-13 15:27 - 2015-04-27 21:28 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-13 15:27 - 2015-04-27 21:28 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-13 15:27 - 2015-04-27 21:26 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 01254400 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-05-13 15:27 - 2015-04-27 21:23 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-05-13 15:27 - 2015-04-27 21:22 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-05-13 15:27 - 2015-04-27 21:22 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-05-13 15:27 - 2015-04-27 21:22 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-05-13 15:27 - 2015-04-27 21:22 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-05-13 15:27 - 2015-04-27 21:22 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-05-13 15:27 - 2015-04-27 21:22 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-05-13 15:27 - 2015-04-27 21:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-05-13 15:27 - 2015-04-27 21:22 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-13 15:27 - 2015-04-27 21:22 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-05-13 15:27 - 2015-04-27 21:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-13 15:27 - 2015-04-27 21:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-13 15:27 - 2015-04-27 21:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 21:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

Re: Facebook všem rozesílá VIRY

Napsal: 09 čer 2015 16:22
od Vlastikk
Znám to, ale jak říkám nechodit na takovéto stránky dost mým známým se to stalo a není to zrovna fajn situace :P

Jinak zkusil to projet nějakým antivirákem??

Re: Facebook všem rozesílá VIRY

Napsal: 09 čer 2015 16:24
od pepanecek5
Jojo zkusil, ale nic nenašel. Ještě přiložím zbytek logu, nešel tam dát.

--- Doplnění předchozího příspěvku (09 Čer 2015 16:21) ---

2015-05-13 15:27 - 2015-04-27 21:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-05-13 15:27 - 2015-04-27 21:08 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-05-13 15:27 - 2015-04-27 21:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-05-13 15:27 - 2015-04-27 21:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-05-13 15:27 - 2015-04-27 21:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-05-13 15:27 - 2015-04-27 21:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-05-13 15:27 - 2015-04-27 21:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-05-13 15:27 - 2015-04-27 21:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-05-13 15:27 - 2015-04-27 21:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-05-13 15:27 - 2015-04-27 21:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-05-13 15:27 - 2015-04-27 21:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-05-13 15:27 - 2015-04-27 21:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-05-13 15:27 - 2015-04-27 21:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-05-13 15:27 - 2015-04-27 21:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-05-13 15:27 - 2015-04-27 21:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-05-13 15:27 - 2015-04-27 21:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-05-13 15:27 - 2015-04-27 21:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-05-13 15:27 - 2015-04-27 21:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-05-13 15:27 - 2015-04-27 21:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-05-13 15:27 - 2015-04-27 21:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-05-13 15:27 - 2015-04-27 21:03 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-05-13 15:27 - 2015-04-27 21:03 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-05-13 15:27 - 2015-04-27 21:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-05-13 15:27 - 2015-04-27 21:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-05-13 15:27 - 2015-04-27 21:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-05-13 15:27 - 2015-04-27 21:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-05-13 15:27 - 2015-04-27 21:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 20:06 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-13 15:27 - 2015-04-27 19:57 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-05-13 15:27 - 2015-04-27 19:57 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-05-13 15:27 - 2015-04-27 19:55 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-05-13 15:27 - 2015-04-27 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-05-13 15:27 - 2015-04-13 05:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-13 15:26 - 2015-04-20 05:17 - 01647104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-13 15:26 - 2015-04-20 05:17 - 01179136 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-13 15:26 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-05-13 15:26 - 2015-04-20 04:11 - 03204608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-13 15:26 - 2015-04-08 05:29 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-13 15:26 - 2015-04-08 05:29 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-13 15:26 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-05-13 15:26 - 2015-03-04 06:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-13 15:26 - 2015-03-04 06:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-13 15:26 - 2015-03-04 06:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-13 15:26 - 2015-03-04 06:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-05-13 15:26 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-05-13 15:26 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-05-13 15:26 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-05-13 15:26 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-05-13 15:26 - 2015-02-18 09:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-13 15:26 - 2015-01-29 05:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-13 15:26 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-05-10 11:40 - 2015-05-10 11:40 - 00219516 _____ C:\Users\Škráša\Downloads\Prezentace 1 (1).pptx
2015-05-10 11:39 - 2015-05-10 11:39 - 00219516 _____ C:\Users\Škráša\Downloads\Prezentace 1.pptx

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-05 00:23 - 2009-07-14 17:18 - 01041270 _____ C:\Windows\system32\perfh005.dat
2015-07-05 00:23 - 2009-07-14 17:18 - 00258158 _____ C:\Windows\system32\perfc005.dat
2015-07-05 00:23 - 2009-07-14 07:13 - 00726358 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-05 00:22 - 2015-04-11 16:21 - 00000000 ____D C:\Users\Škráša\AppData\Local\VirtualStore
2015-07-05 00:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system
2015-07-05 00:09 - 2015-04-11 16:45 - 00003978 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{752C8329-875E-425D-B461-96A816ACC902}
2015-06-09 16:12 - 2015-04-11 17:51 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-09 16:11 - 2015-04-11 18:26 - 00000000 ____D C:\Users\Škráša\AppData\Roaming\Skype
2015-06-09 15:59 - 2009-07-14 06:45 - 00014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-09 15:59 - 2009-07-14 06:45 - 00014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-09 15:56 - 2015-04-11 18:20 - 00000000 ____D C:\Users\Škráša\AppData\Roaming\AIMP3
2015-06-09 15:54 - 2015-04-11 16:20 - 01075405 _____ C:\Windows\WindowsUpdate.log
2015-06-09 15:54 - 2009-07-14 06:51 - 00027901 _____ C:\Windows\setupact.log
2015-06-09 15:51 - 2015-04-11 17:51 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-09 15:50 - 2015-04-11 23:26 - 00000000 ____D C:\Windows\Minidump
2015-06-09 15:50 - 2015-04-11 16:37 - 00000000 ____D C:\ProgramData\NVIDIA
2015-06-09 15:50 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-09 15:07 - 2015-04-11 18:26 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-06-07 14:43 - 2015-04-11 20:40 - 00053564 _____ C:\Windows\PFRO.log
2015-06-05 16:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\LiveKernelReports
2015-06-05 13:15 - 2015-04-11 18:20 - 00000909 _____ C:\Users\Public\Desktop\AIMP3.lnk
2015-06-05 13:15 - 2015-04-11 18:19 - 00000000 ____D C:\Program Files (x86)\AIMP3
2015-06-05 13:03 - 2015-04-27 19:14 - 00001922 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-06-03 01:10 - 2015-04-11 18:40 - 00000000 ____D C:\Users\Škráša\AppData\Roaming\BitTorrent
2015-06-02 21:32 - 2015-04-14 18:45 - 00012767 _____ C:\Windows\DirectX.log
2015-06-02 21:32 - 2015-04-11 19:57 - 00000000 ____D C:\Users\Škráša\AppData\Roaming\NVIDIA
2015-06-02 21:10 - 2015-04-11 16:21 - 00000000 ____D C:\Users\Škráša
2015-06-02 19:13 - 2015-04-11 19:55 - 00000000 ____D C:\Counter-Strike 1.6
2015-06-02 18:48 - 2015-04-18 13:45 - 00000000 ____D C:\ProgramData\Norton
2015-05-31 19:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2015-05-26 14:45 - 2015-04-11 17:51 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-25 13:07 - 2015-04-11 16:50 - 00109280 _____ C:\Users\Škráša\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-25 13:03 - 2009-07-14 06:45 - 00409488 _____ C:\Windows\system32\FNTCACHE.DAT
2015-05-25 03:07 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2015-05-24 22:48 - 2015-04-11 19:11 - 00000000 ___RD C:\Users\Škráša\Desktop\Hudba
2015-05-24 20:58 - 2015-04-26 12:43 - 00000000 ____D C:\Users\Škráša\Downloads\3DMGAME-FIFA.15.PC.Ultimate.Team.Edition.with.Up.4.Multi15.Cracked-3DM
2015-05-24 13:57 - 2015-04-11 18:21 - 00000000 ____D C:\Users\Škráša\AppData\Roaming\vlc
2015-05-24 03:12 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2015-05-24 03:02 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-05-22 18:29 - 2009-07-14 17:36 - 00000000 ____D C:\Windows\ShellNew
2015-05-22 18:28 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-05-22 17:01 - 2015-04-11 18:26 - 00000000 ____D C:\ProgramData\Skype
2015-05-21 03:01 - 2015-04-14 06:56 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-05-21 03:01 - 2015-04-14 06:56 - 00000000 ___SD C:\Windows\system32\GWX
2015-05-18 15:07 - 2015-04-11 17:51 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-18 15:07 - 2015-04-11 17:51 - 00003696 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-17 16:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-05-14 03:01 - 2009-07-14 17:37 - 00000000 ____D C:\Program Files\Windows Journal
2015-05-14 03:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-05-13 22:15 - 2015-04-11 20:21 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-13 22:15 - 2015-04-11 20:21 - 00000000 ____D C:\Windows\system32\MRT
2015-05-12 15:22 - 2015-04-11 18:26 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2015-05-12 15:20 - 2015-04-18 13:48 - 00000000 ____D C:\Users\Škráša\AppData\Roaming\Yandex
2015-05-12 15:19 - 2015-04-18 13:48 - 00000000 ____D C:\Users\Škráša\AppData\Local\Yandex
2015-05-12 15:18 - 2015-04-27 19:24 - 00000000 ____D C:\Users\Škráša\AppData\Roaming\Dropbox
2015-05-10 09:49 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD

Some files in TEMP:
====================
C:\Users\Škráša\AppData\Local\Temp\_is3024.exe
C:\Users\Škráša\AppData\Local\Temp\_is5F10.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-07-05 01:10

==================== End of log ============================

--- Doplnění předchozího příspěvku (09 Čer 2015 16:25) ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version:08-06-2015
Ran by Škráša at 2015-06-09 16:12:35
Running from C:\Users\Škráša\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3766409607-1172890862-2761300191-500 - Administrator - Disabled)
Guest (S-1-5-21-3766409607-1172890862-2761300191-501 - Limited - Disabled)
Škráša (S-1-5-21-3766409607-1172890862-2761300191-1000 - Administrator - Enabled) => C:\Users\Škráša

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AIMP3 (HKLM-x32\...\AIMP3) (Version: v3.60.1495, 03.06.2015 - AIMP DevTeam)
ASUS WiFi-AP Solo (HKLM-x32\...\{BE686891-3C56-4714-AFEF-341A7867BA80}) (Version: 1.00.0000 - ASUS)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
BitTorrent (HKU\S-1-5-21-3766409607-1172890862-2761300191-1000\...\BitTorrent) (Version: 7.9.3.40299 - BitTorrent Inc.)
BitTorrent (HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\BitTorrent) (Version: 7.9.3.40299 - BitTorrent Inc.)
C-Media PCI Audio Device (HKLM\...\C-Media PCI Audio Driver) (Version: - )
Counter-Strike 1.6 v42 (HKU\S-1-5-21-3766409607-1172890862-2761300191-1000\...\Counter-Strike 1.6_is1) (Version: - Valve)
Counter-Strike 1.6 v42 (HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Counter-Strike 1.6_is1) (Version: - Valve)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 5.0.1.0406 - Disc Soft Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
GTA San Andreas (HKLM-x32\...\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}) (Version: 1.00.00001 - Rockstar Games)
Host OpenAL (ADI) (HKLM-x32\...\Host OpenAL (ADI)) (Version: - )
Malwarebytes Anti-Malware verze 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile CSY Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile CSY Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
NVIDIA Ovladač 3D Vision 341.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.44 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 341.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.44 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Ovládací panel NVIDIA 341.44 (Version: 341.44 - NVIDIA Corporation) Hidden
PhotoFiltre 7 (HKU\S-1-5-21-3766409607-1172890862-2761300191-1000\...\PhotoFiltre 7) (Version: - )
PhotoFiltre 7 (HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\PhotoFiltre 7) (Version: - )
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden
Skype™ 7.4 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.4.102 - Skype Technologies S.A.)
SoundMAX (HKLM-x32\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 6.10.2.6180 - Analog Devices)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.40798 - TeamViewer)
Unity Web Player (HKU\S-1-5-21-3766409607-1172890862-2761300191-1000\...\UnityWebPlayer) (Version: 4.6.4f1 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\UnityWebPlayer) (Version: 4.6.4f1 - Unity Technologies ApS)
Vegas Pro 10.0 (HKLM-x32\...\{5AC11070-A1CB-11E0-A0DC-0013D3D69929}) (Version: 10.0.737 - Sony)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WinRAR 5.21 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
World of Tanks (HKU\S-1-5-21-3766409607-1172890862-2761300191-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net)
World of Tanks (HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Škráša\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay No File
CustomCLSID: HKU\S-1-5-21-3766409607-1172890862-2761300191-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Škráša\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay No File

==================== Restore Points =========================

03-05-2015 16:03:49 Windows Update
08-05-2015 12:27:30 Windows Update
12-05-2015 15:20:14 Windows Update
13-05-2015 22:13:42 Windows Update
14-05-2015 03:00:43 Windows Update
15-05-2015 21:30:13 Nainstalováno: MSVCRT Redists
15-05-2015 21:31:21 Installed Vegas Pro 10.0
15-05-2015 21:35:40 Nainstalováno: MSVCRT Redists
15-05-2015 21:36:31 Installed Vegas Pro 10.0
19-05-2015 15:12:26 Windows Update
21-05-2015 03:00:26 Windows Update
22-05-2015 18:22:12 Installed Microsoft Office Professional Plus 2010
24-05-2015 03:00:34 Windows Update
25-05-2015 03:00:28 Windows Update
31-05-2015 16:29:22 Windows Update
02-06-2015 21:07:33 Instalace balíčku ovladače zařízení: Disc Soft Ltd Řadiče paměťových zařízení
02-06-2015 21:31:22 Nainstalováno rozhraní DirectX
05-06-2015 08:55:26 Windows Update
05-06-2015 12:59:21 avast! antivirus system restore point
09-06-2015 15:19:28 Windows Update
05-07-2015 00:12:34 Instalace balíčku ovladače zařízení: C-Media Electronics Inc. Řadiče zvuku, videa a her

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {06A78503-CDFF-4A9D-B823-E444FE044B34} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2002-01-01] (Avast Software s.r.o.)
Task: {06B01DD4-9FE5-415C-AE4D-61225415B804} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {2C91EB1F-4DB6-418B-A19E-9B63156D1FF8} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {4C51DA63-91C9-47ED-BDFA-9A6D846B9E01} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-11] (Google Inc.)
Task: {9232DF06-BE00-49F1-8076-F5D4E0FBF093} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-11] (Google Inc.)
Task: {B8C86427-5138-4EA3-B3DE-0479896B4011} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {C663C5AA-51E1-442C-83B5-295628265B90} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {D6F9C2AF-A5F5-44B7-919A-BA661909FC5E} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask => C:\Windows\system32\Wat\WatAdminSvc.exe [2015-04-14] (Microsoft Corporation)
Task: {E9681DBF-36F9-4785-98EB-5E98E9C7A32F} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-04-11 16:37 - 2015-02-04 04:21 - 00115400 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2002-01-01 20:29 - 2002-01-01 20:29 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2002-01-01 20:29 - 2002-01-01 20:29 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-06-09 15:08 - 2015-06-09 15:08 - 02952192 _____ () C:\Program Files\AVAST Software\Avast\defs\15060900\algo.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2015-04-11 18:26 - 2015-04-11 18:26 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-05-26 14:45 - 2015-05-22 22:22 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\libglesv2.dll
2015-05-26 14:45 - 2015-05-22 22:22 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\libegl.dll
2015-05-26 14:45 - 2015-05-22 22:22 - 14982472 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3766409607-1172890862-2761300191-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Škráša\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3766409607-1172890862-2761300191-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Škráša\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1 - 79.170.251.86

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{CBA504F0-4B25-4CB6-9C11-EE4B168EA3AD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A271B8EF-BB81-467C-8E62-8845B680ADFB}] => (Allow) C:\Users\Škráša\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{C3D802C4-6987-4A6F-9D62-BF47F06829C6}] => (Allow) C:\Users\Škráša\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [TCP Query User{0C5C3D0A-5DD2-46AF-ACEC-7B93398CF5BE}C:\counter-strike 1.6\csko.exe] => (Block) C:\counter-strike 1.6\csko.exe
FirewallRules: [UDP Query User{37C7D540-65EF-409B-BA6F-6189214C6459}C:\counter-strike 1.6\csko.exe] => (Block) C:\counter-strike 1.6\csko.exe
FirewallRules: [TCP Query User{8C3E9018-FBCA-4EE7-BF73-DB2F0B8D9147}C:\program files\instinkt\instinct.exe] => (Block) C:\program files\instinkt\instinct.exe
FirewallRules: [UDP Query User{45BF05C4-A502-4BF8-BDEE-100E34B21DBA}C:\program files\instinkt\instinct.exe] => (Block) C:\program files\instinkt\instinct.exe
FirewallRules: [{596C6695-E149-45A4-8775-065900F1CA0D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2E851393-C0B5-443A-BEFD-91384A4F951A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2B3DBEAC-C6D4-4CCA-BB24-8F6C76F4222F}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{ECE14690-E01E-4D82-9618-F7B16B368055}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{666C05B9-B744-41F0-8C25-39A24A4172DB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{C77EE44D-989F-4BC5-926D-8D1C96D8FC8F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{6C477146-E79A-40E2-B764-6AB28ADFD0B7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{82233862-CBBF-45C2-8265-08DF467D1750}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{8EA98269-20D6-4F02-8422-23AF2FDAFCE7}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{24047E6F-739F-43A8-820B-588DC46862DF}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6D21F635-B9F6-4236-AC9A-666CCA0D97C3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{ECB9C485-DDF6-47B8-8EB7-3E5BA4A61627}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [UDP Query User{007A75EA-C17B-4869-8B0F-34FE5E204299}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [{61778459-A03C-49FC-8CA9-1189E1C3A527}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{114FA6C3-12FB-4695-943B-C15FC1CDC79E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{ECF4E9FD-008B-42F7-AFEB-835A21A59A09}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe
FirewallRules: [UDP Query User{50E6BEA2-FC01-4A56-97A7-6D565B89B1AD}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe
FirewallRules: [{A3C6C607-DC5A-4BF2-9F6E-72B62EF4C60B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{A0FCDB5A-1474-4FFD-A4A4-5797CE220806}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{12CF011D-B951-476A-A4D2-6FDA50CB1535}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{77398E0E-B665-4A03-BDD5-91E8EC6D4062}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2936248A-3CF7-471F-8CDD-1DE6E07AD7E9}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F1BD27E9-00B1-4372-A39F-B9BF6C544EEE}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E8BF6730-57D6-497C-A838-23B84D9B4DE8}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E48E35A9-015F-4574-ABB4-D4D57F001CBC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{AA512FC2-4B41-4145-AE5D-C229FC88635D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{FD752E5E-F607-41F0-B2F7-A113E1D942FA}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{B09660EB-BEA2-4BBB-8B91-D9D05D2DB022}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{FFEB7F2D-6035-4991-8F7B-8971F55CA085}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2FE65AAD-8DB4-49B4-B652-483B4B5850B9}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{44A11A9C-E782-43E0-9D16-C73560A8B676}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{52FD0523-FA7E-4126-9CC1-0FF2805E3BCD}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{7B663398-6E56-4D5F-B472-5DC238F789D4}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{B76AF450-9F4C-4DF7-86ED-F2B35B85914C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{EF37E278-9B45-45FB-BB6E-BF18CD63153D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{767AA153-D5D5-403D-9FC7-407A6D4CC471}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4B3E68B5-4A83-4C5E-B6FE-4559F51BD1D3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{28A333BB-5D29-4EB4-99EE-8B49674B25BA}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{41711B4B-03AB-4856-AE13-B3EA55004B74}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9D2FE863-1358-4B0A-9017-7A953B042DDA}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{8FBF840A-8E5E-445A-B7E4-4DAC7E1797F3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C1043703-BDEF-40C2-9891-02BC0CF55EC0}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1918D5AD-ECC0-4702-9166-FDB5A2171F3D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{51ADB19B-C41A-4FD4-8CF1-72845EEAAB2D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{A273AD83-B7BF-455A-AE7A-754F065DAADB}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{3C7AC5F4-12DF-419C-90C2-4E5DA1D597AB}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{ADFB85ED-46C0-45DA-9BF2-35FE65AA942A}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{70C6D2FE-DB5F-4D4B-BE90-A630211EB05D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C700724C-ADC6-456C-9FFC-726B15A47860}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{48601DE1-2C0E-434B-AB4C-4E119066A3B8}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0E90BBB2-BFF2-4A7C-88B5-F4D8077125E5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{FAD7F4E9-DA9B-4F4E-9CD7-55ABC8228C24}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E74115BC-39E2-47D2-81BC-6CA9BBF0E2E1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2980DEB2-5A24-4CE4-8344-10BE650CF907}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{91B382D8-7A3A-4E5E-BBCE-910BD54F757E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{FE4073A1-AE8F-49B5-A997-F64A1093ADDC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0C12BF8E-B6C4-4201-8A65-403BDD487878}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{CB024F66-2F19-4D0E-ADDB-804EFE3D2A15}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{72B07443-1AE2-4EA3-BF1A-E97AF6A9D7A3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1C30B113-465C-433D-B93E-F56E22F96225}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{8B9DC884-D31B-410C-8F70-3FD672788161}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{542415CD-BF84-482F-87BB-A3C187AF49AD}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6E3C5066-E330-4969-9839-C0F17A70DC62}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{CBD294DB-7E53-47D5-B27A-46AEA36865ED}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9E0FF515-3AF0-4634-B843-53FF8DA08A58}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{FCB4DF06-2AC9-4D63-BC19-7B22357C69B2}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E4A2F938-E406-4A31-B8C7-405EB2E616D2}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{B9B41382-A7EE-406C-9C7D-B486429312F2}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{5B961E8D-D971-4F95-A795-2B0934DEF564}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{5E6BED78-BDA2-4435-9567-9B7E529AE999}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{59A2AE12-E1B5-459F-8695-F8B943FF9A98}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{7C536C28-9AB5-4F51-8602-36C1F4239ED6}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{827D2E87-919C-4C55-9CB2-F4B11E4BADFC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{97B60976-A6B9-4B6D-983C-A47517278509}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe
FirewallRules: [UDP Query User{2D883D61-C09B-4F73-9066-28D1E4A2FD84}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe
FirewallRules: [{E5A1984F-6030-4BC2-B816-F936D0B08EAD}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/08/2015 09:29:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: mafia2.exe, verze: 1.0.0.1, časové razítko: 0x4cc182e0
Název chybujícího modulu: mafia2.exe, verze: 1.0.0.1, časové razítko: 0x4cc182e0
Kód výjimky: 0xc0000005
Posun chyby: 0x01097c72
ID chybujícího procesu: 0xed8
Čas spuštění chybující aplikace: 0xmafia2.exe0
Cesta k chybující aplikaci: mafia2.exe1
Cesta k chybujícímu modulu: mafia2.exe2
ID zprávy: mafia2.exe3

Error: (07/05/2015 03:35:24 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1 se nezdařilo.
Závislé sestavení Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (07/05/2015 03:35:17 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1 se nezdařilo.
Závislé sestavení Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (07/05/2015 03:35:08 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1 se nezdařilo.
Závislé sestavení Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (07/05/2015 03:35:04 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1 se nezdařilo.
Závislé sestavení Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (07/05/2015 03:34:55 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1 se nezdařilo.
Závislé sestavení Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (07/05/2015 03:34:22 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1 se nezdařilo.
Závislé sestavení Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (07/05/2015 00:23:43 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: BlackHawk.exe, verze: 1.0.0.10, časové razítko: 0x4611a23d
Název chybujícího modulu: MSVBVM60.DLL, verze: 6.0.98.15, časové razítko: 0x4a5bda6c
Kód výjimky: 0xc0000005
Posun chyby: 0x000b4550
ID chybujícího procesu: 0x874
Čas spuštění chybující aplikace: 0xBlackHawk.exe0
Cesta k chybující aplikaci: BlackHawk.exe1
Cesta k chybujícímu modulu: BlackHawk.exe2
ID zprávy: BlackHawk.exe3

Error: (07/05/2015 00:23:22 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error: (06/05/2015 11:49:44 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.


System errors:
=============
Error: (06/09/2015 03:52:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Windows Search neuspěla při spuštění v důsledku následující chyby:
%%1053

Error: (06/09/2015 03:52:28 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Windows Search bylo dosaženo časového limitu (30000 ms).

Error: (06/09/2015 03:52:28 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1053WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (06/09/2015 03:50:51 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x00000116 (0xfffffa8004578010, 0xfffff8800f9bdb40, 0xffffffffc000000d, 0x0000000000000003)C:\Windows\MEMORY.DMP060915-26785-01

Error: (06/09/2015 03:50:48 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (15:48:34, ‎9.‎6.‎2015) bylo neočekávané.

Error: (06/08/2015 04:37:04 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x00000116 (0xfffffa80045794e0, 0xfffff8800faacb40, 0xffffffffc000000d, 0x0000000000000003)C:\Windows\MEMORY.DMP060815-21871-01

Error: (06/08/2015 04:37:01 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (16:34:39, ‎8.‎6.‎2015) bylo neočekávané.

Error: (06/07/2015 11:07:55 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x00000116 (0xfffffa800488d4e0, 0xfffff8800f9cdb40, 0xffffffffc000000d, 0x0000000000000003)C:\Windows\MEMORY.DMP

Error: (06/07/2015 11:07:55 PM) (Source: BugCheck) (EventID: 1005) (User: )
Description:

Error: (06/07/2015 11:07:55 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (23:05:50, ‎7.‎6.‎2015) bylo neočekávané.


Microsoft Office:
=========================
Error: (06/08/2015 09:29:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mafia2.exe1.0.0.14cc182e0mafia2.exe1.0.0.14cc182e0c000000501097c72ed801d0a213bef6ef14C:\Program Files (x86)\2K Games\Mafia II\pc\mafia2.exeC:\Program Files (x86)\2K Games\Mafia II\pc\mafia2.exea9b558a8-0e14-11e5-95cd-001d60b4c50b

Error: (07/05/2015 03:35:24 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files (x86)\Sony\Vegas Pro 10\vegas100.exe

Error: (07/05/2015 03:35:17 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files (x86)\Sony\Vegas Pro 10\FileIOSurrogate.exe

Error: (07/05/2015 03:35:08 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files (x86)\Sony\Vegas Pro 10\sfvstserver.exe

Error: (07/05/2015 03:35:04 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files (x86)\Sony\Vegas Pro 10\FileIO Plug-Ins\ac3plug\ac3market\ApplicationRegistration.exe

Error: (07/05/2015 03:34:55 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files (x86)\Sony\Vegas Pro 10\ApplicationRegistration.exe

Error: (07/05/2015 03:34:22 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC90.OpenMP,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files (x86)\Sony\Vegas Pro 10\ErrorReportClient.exe

Error: (07/05/2015 00:23:43 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: BlackHawk.exe1.0.0.104611a23dMSVBVM60.DLL6.0.98.154a5bda6cc0000005000b455087401d0b6a8091d1876C:\Program Files (x86)\Analog Devices\SoundMAX\BlackHawk.exeC:\Windows\system32\MSVBVM60.DLL5399ea95-229b-11e5-af04-001d60b4c50b

Error: (07/05/2015 00:23:22 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Performance1637070000000000000000000009030000

Error: (06/05/2015 11:49:44 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Performance1637070000000000000000000009030000


CodeIntegrity Errors:
===================================
Date: 2015-04-11 18:59:36.653
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\KRA~1\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-04-11 18:59:36.643
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\KRA~1\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-04-11 18:59:36.216
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-04-11 18:59:36.208
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
Percentage of memory in use: 56%
Total physical RAM: 4095.12 MB
Available physical RAM: 1774.18 MB
Total Pagefile: 8188.44 MB
Available Pagefile: 5468.11 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.76 GB) (Free:272.58 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 00CFECA7)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End of log ============================

Re: Facebook všem rozesílá VIRY

Napsal: 09 čer 2015 16:27
od Vlastikk
Zkus tento pokus
Je to pro CHROME, pokud máš pokud ne napiš co používáš

- V prohlížeči Google Chrome klikněte na ikonu tří čárek pod sebou, abyste otevřeli menu.
- Vyberte Nástroje -> Správce úloh.
- Ve Správci úloh vidíte veškeré běžící procesy – záložky, rozšíření. Uvidíte tam i rozšíření bez jména, bude uvedeno pouze jako Rozšíření:
- Klikněte na něj a vyberte Ukončit proces.

Odstranění
- Opět klikněte na ikonu tří čárek pod sebou v pravém horním rohu prohlížeče.
- Tentokrát vyberte Nastavení.
- Otevřela se vám karta Nastavení, kde vlevo vyberte Rozšíření.
- Prohlídněte si rozšíření a najděte to, které jste neinstalovali. Pravděpodobně bude mít nějaké zvláštní jméno – třeba jen čísla nebo změť písmen.
- Klikněte u něj na ikonu koše a potvrďte, že ho chcete skutečně odebrat.

Re: Facebook všem rozesílá VIRY

Napsal: 09 čer 2015 16:31
od pepanecek5
Ano cosi tam bylo. Bez obrázku, čínské znaky. Smazáno a žeprý tam bylo to samé jak otevřel tu stránku.

Re: Facebook všem rozesílá VIRY

Napsal: 09 čer 2015 16:39
od Vlastikk
Podle mě to musel udělat vlastní příčinou, protože tyto stránky a spamy s ní musí povolit on tím, že tzv. upgradne Flashe a tím spustí celý proces, pokud toto neudělal tak potom nevím jak se mu to mohlo stát, ale zda se držel návodu a bylo tam to co bylo a furt mu to dělá tak dál už nevím, ale pokusím se něco najít a když tak popřípadě poradit.

--- Doplnění předchozího příspěvku (09 Čer 2015 16:42) ---

http://www.safer-networking.org/en/index.html a Ad-Aware http://www.lavasoft.de zkus toto

Re: Facebook všem rozesílá VIRY  Vyřešeno

Napsal: 09 čer 2015 16:44
od pepanecek5
Tak bylo to nakonec to podivné rozšíření :-D Smazáno a viry se už neposílají. Díky moc za pomoc.
Časové pásmo: UTC+02:00
Stránka 1 z 1
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/