PC-HELP.CZ

Ahoj, prosím o preventivku, PC šlape dobře, akorát hned po startu se mi zdá, že svchost.exe (několik hodin) dlouho zaměstnává CPU až na 30%.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:39:53, on 19.4.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)


Boot mode: Normal

Running processes:
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\system32\taskhostw.exe
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
C:\WINDOWS\system32\ApplicationFrameHost.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
C:\Program Files\Logitech\SetPointP\SetPoint.exe
C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
C:\Program Files\SpeedFan\speedfan.exe
C:\WINDOWS\system32\svchost.exe
C:\Windows\System32\SystemSettingsBroker.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1601.49020.0_x86__8wekyb3d8bbwe\Calculator.exe
C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe
C:\WINDOWS\system32\SettingSyncHost.exe
C:\WINDOWS\System32\Taskmgr.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Users\Ondra\Desktop\Cleaning\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.jw.org/cs
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll
O4 - HKLM\..\Run: [PrnStatusMX] C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
O4 - HKLM\..\Run: [C:\Windows\system32\V0330Ext.ax] C:\Windows\system32\RegSvr32.exe /s C:\Windows\system32\V0330Ext.ax
O4 - HKLM\..\Run: [ShadowPlay] C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
O4 - HKLM\..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Mámemail Pošťák.lnk = C:\Program Files\Mamemail\Mamemail Postak\Postak.exe
O4 - Startup: speedfan.lnk = C:\Program Files\SpeedFan\speedfan.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Sentinel HASP License Manager (hasplms) - SafeNet Inc. - C:\Windows\system32\hasplms.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvvsvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files\Sony\Sony PC Companion\PCCService.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O23 - Service: @oem25.inf,%ViaKaraokeSrv.SvcDesc%;VIA Karaoke digital mixer Service (VIAKaraokeService) - VIA Technologies, Inc. - C:\WINDOWS\system32\viakaraokesrv.exe

--
End of file - 7330 bytes

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

===================================================

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

===================================================

Stáhni AdwCleaner (by Xplode)

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu klikni na tlačítko "Logfile" načež se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

===================================================

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
- Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:

Aktualizace Malwarebytes' Anti-Malware
Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec

- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na Kopírovat do schránky a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

# AdwCleaner v5.112 - Log soubor vytvořen 19/04/2016 o 19:51:10
# Aktualizováno 17/04/2016 by Xplode
# Databáze : 2016-04-19.4 [Server]
# Operační systém : Windows 10 Home (X86)
# Jméno uživatele : Ondra - ONDRA-PC
# Spuštěno z : C:\Users\Ondra\Desktop\Cleaning\adwcleaner_5.112.exe
# Volba : Čištění
# Podpora : http://toolslib.net/forum

***** [ Služby ] *****


***** [ Složky ] *****

[-] Složka smazáno : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil

***** [ Soubory ] *****

[#] Soubor smazáno : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\elicpjhcidhpjomhibiffojpinpmmpil

***** [ DLLs ] *****


***** [ Zástupci ] *****


***** [ Naplánované úkoly ] *****


***** [ Registr ] *****


***** [ Webové prohlížeče ] *****


*************************

:: "Tracing" odstraněných kláves
:: Nastavení Winsock odstraněno

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [3702 bytes] - [18/04/2016 19:54:21]
C:\AdwCleaner\AdwCleaner[C2].txt - [1098 bytes] - [19/04/2016 19:51:10]
C:\AdwCleaner\AdwCleaner[S1].txt - [3589 bytes] - [18/04/2016 19:52:15]
C:\AdwCleaner\AdwCleaner[S2].txt - [1208 bytes] - [19/04/2016 19:49:56]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1317 bytes] ##########

Malwarebytes Anti-Malware
http://www.malwarebytes.org

Datum skenování: 19.4.2016
Čas skenování: 19:57
Protokol:
Správce: Ano

Verze: 2.2.1.1043
Databáze malwaru: v2016.04.19.05
Databáze rootkitů: v2016.04.17.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 10
CPU: x86
Souborový systém: NTFS
Uživatel: Ondra

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 381543
Uplynulý čas: 12 min, 20 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [C?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

# AdwCleaner v5.112 - Log soubor vytvořen 19/04/2016 o 21:56:19
# Aktualizováno 17/04/2016 by Xplode
# Databáze : 2016-04-19.5 [Server]
# Operační systém : Windows 10 Home (X86)
# Jméno uživatele : Ondra - ONDRA-PC
# Spuštěno z : C:\Users\Ondra\Desktop\Cleaning\adwcleaner_5.112.exe
# Volba : Čištění
# Podpora : http://toolslib.net/forum

***** [ Služby ] *****


***** [ Složky ] *****

[-] Složka smazáno : C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil

***** [ Soubory ] *****


***** [ DLLs ] *****


***** [ Zástupci ] *****


***** [ Naplánované úkoly ] *****


***** [ Registr ] *****


***** [ Webové prohlížeče ] *****


*************************

:: "Tracing" odstraněných kláves
:: Nastavení Winsock odstraněno

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [3702 bytes] - [18/04/2016 19:54:21]
C:\AdwCleaner\AdwCleaner[C2].txt - [1396 bytes] - [19/04/2016 19:51:10]
C:\AdwCleaner\AdwCleaner[C3].txt - [1029 bytes] - [19/04/2016 21:56:19]
C:\AdwCleaner\AdwCleaner[S1].txt - [3589 bytes] - [18/04/2016 19:52:15]
C:\AdwCleaner\AdwCleaner[S2].txt - [1208 bytes] - [19/04/2016 19:49:56]
C:\AdwCleaner\AdwCleaner[S3].txt - [1216 bytes] - [19/04/2016 21:54:54]

########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [1321 bytes] ##########

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.4 (03.14.2016)
Operating System: Windows 10 Home x86
Ran by Ondra (Administrator) on Łt 19.04.2016 at 22:03:44,05
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 221

Successfully deleted: C:\Users\Ondra\AppData\Local\{00671CA3-C825-4BF3-AB98-7DE1988F866A} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{010C1C05-065F-421B-8447-7E4FB9A3D590} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{0145B41E-5D60-4FE0-AE7E-8E237ABB6B70} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{0402CBA5-B2A9-4C6C-A4EA-6ACA7F991255} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{0485A420-2B24-4DD8-8985-EA738D7BC72C} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{04CE6349-055C-4621-AA03-06ACC5C8D958} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{05D1E1F7-E96F-4B29-9AF3-A8A48106D208} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{099C6392-51E4-4413-A371-31B4C5A7DBD7} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{0B63C1B8-003A-4F4D-81E5-63CF993F7DC7} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{0D1A22C0-CC30-4C38-A526-82C5B81B0D69} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{0D8A2F1D-F018-4E1C-BC2D-78330C043DAE} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{0F33C234-27AB-437D-B0B7-FEE88C29196A} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{116C8788-3A20-4014-A3DD-22BD4D957470} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{12C7F101-4AAE-4DE6-B3F7-3F97D9E9AF95} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{130A37E2-2501-48CC-B6D3-FDE61B410CEC} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{13BF5588-9837-4F76-868E-56672F272E82} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{150109B2-15FA-4381-97EE-2B2CA601CFDF} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{15CDAAB6-B2A6-4923-BFE1-C76E2810D55A} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{160A62F1-6B8F-4F67-8F0B-30AD5E5A5540} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{169DBDB0-AC21-46A7-9FEE-14AFBA2409A1} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{16FA9CB5-16A3-4557-B9A4-2805C051206F} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{185F3541-0540-4E8B-A9EE-6B3C5EA784A6} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{1AC12528-74E8-4537-B296-DC2D2BA57BF3} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{1CB66E4E-C259-4D87-A0AD-F2351732DC2A} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{1E527D6C-69BC-4981-A8FD-65401D8003CC} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{1EC412A3-6377-4F49-A68D-5C0949DD9F32} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{1FC212BD-8E18-409E-88BB-608572E5ED1E} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{229494C2-F689-45D2-A5BC-5A047AED60F9} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{23735489-8A06-4ED9-AE5B-E36765C01A2A} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{24C9ED2A-B6CD-4278-B7DC-590A09AD52D4} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{27DDEE33-BAC2-4881-95D9-BFA446A50369} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{287EACBD-03D3-4306-AAB9-8098DBD42B83} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{28B69666-D31D-478A-9FBA-AFF632AB946C} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{29537EE2-860F-43D6-8965-B8E8F85649CF} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{2973C317-EC02-4DA8-9DF7-6ED1EFF62EE4} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{2BADFD72-77B1-460F-B51F-799577EBC393} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{2C0108EB-5CA8-45C0-B1BF-DEF1F6176D82} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{2CA89C28-D6F7-43FB-A173-1C03EBC43D33} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{2D5564C5-8745-4D70-AE59-704535FE2E43} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{2FF58464-9C0A-444A-8654-3FF47C2158FA} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{3050C3E4-B156-4B69-AC80-CCA419821BC1} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{30B4FBDD-8032-41BE-BA2A-E2164AF36DD4} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{30ECF7D7-ED0B-43A6-9F9A-48E9A003150F} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{31E83D56-F7AB-4ABB-8300-8863C540A072} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{31FC1A70-2BF3-46F4-90AA-3FCBFC1514C6} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{329FB60E-1432-4ADF-B136-B836A1D97847} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{333FA1D7-4E42-48C4-AB4E-F35D7F13E0EA} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{34ABCA88-5E8E-4D63-AAD4-40780EF7405C} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{36F44FDD-6ABD-4327-8429-A8665D0BD222} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{379DCC50-7773-46AA-8D89-C0211CE08E71} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{37DA2A47-A0BB-470D-9695-8B63B47C5C11} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{386C76B3-4F09-4633-A18D-ACBC5B5EE87E} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{3AE650B1-2642-426C-88FA-CB29B91094C3} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{3B016904-4C96-4DFD-A6EB-7BBA5004BF1B} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{3B32B5D3-FD5D-48B3-BA69-615A578594BD} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{3BC63C98-F1AA-4472-AC26-C64B6B296C2C} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{3D654885-94FC-4F47-8CC4-1A28BE40A743} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{3D86847B-2B8F-475A-9634-B1406AB10E6D} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{3EF61994-7C1C-4677-B9D1-8AB0B1A6FB0F} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{3F412430-1E69-4B25-B580-CF2CA7AAE028} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{3F9DB762-920F-4B86-9F7D-9F0457D49864} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{41680520-F2BC-43F1-A8F2-CEB963C56274} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{426EFB30-C64A-4576-8FED-D3F3F9F3AF9F} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{430AD71B-63EC-41F7-B2C8-CD4DAD4EEB3A} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{4433A0E0-261A-4B37-BCB5-DAEB3B47B1D6} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{44AF173D-9B40-4917-8722-8695FF780900} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{4739C827-01AE-4810-AE48-E84CA1388F85} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{48AC3B6C-6355-455B-B347-005300B5BB56} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{48EFDD06-7DCF-4BA0-B166-69CB62405E7D} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{49D23A5E-9D78-45A2-8798-5655A03AE50A} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{4B39F776-3879-4987-9B48-70EB6CF4A72F} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{4C56235F-8FA4-4DE1-83F2-1623F19DD305} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{50086C49-CD3A-4EAC-9006-141146C8AAF6} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{52AE6BEB-45D2-44D6-816E-62A6A1211035} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{5450F065-6E18-4B76-97E7-91498F813B4B} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{55E738B1-C2F3-46EB-9616-F2441A09DB87} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{575EFF7F-4F79-45E1-A925-FE70276FCB65} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{59784EBC-AD7F-4853-BB8D-2C3963473C40} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{5B4BDD68-A5E6-4166-92DC-FF2EAC46CDF0} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{5D0A7F99-869B-4A76-B883-FB48C4F1762B} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{5D131B4A-D459-4E68-8BF0-CA92CA9FDC74} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{5D68E01A-1E05-4357-89D2-ED0AA4A88F07} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{5DA9150D-B287-43E1-8622-6CF6F9367BBD} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{62EBE339-CC33-4CF7-94F5-F226DD2D9D37} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{62FE8BF7-9966-48FF-8BE0-BD09C168EEBA} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{652C6978-28DB-4AD3-B4CE-8E329BDAC53B} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{65BDB79B-E62C-46B6-B544-CB5F7898F247} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{6792AA53-951E-47F7-BB1D-65C7BF662563} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{67E05160-66EF-461E-BA28-5DE00BCE7FCF} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{6C35FCE7-5575-401A-8225-6E637F1DC864} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{6CA12335-ED48-4B55-9711-1D113BC187D1} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{6CC670D5-0A58-4F8F-9086-F1F774FA4FB7} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{6F5D1BBA-BEA2-45CF-A8C1-77A5C58C6FC6} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{7031FCEB-ED12-469B-97EE-DBF2F09205A6} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{70FD23F8-2077-48E3-8536-0D65590926BA} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{71054A26-65A7-45C7-854F-74EDD942E2DC} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{714F9277-432D-4542-8569-EEEC8D6251C7} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{71BE77CD-FDEC-494B-8F11-D5221AE15031} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{745E17E7-4484-4E20-8432-4E5C1AF1D91F} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{74E35247-F0D3-4C2D-A114-674EE68D8870} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{751AB62D-4A08-4E6C-9CDC-9B91A92DA1D3} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{77E4A6F7-81D6-416F-B55B-26CC7DE4C613} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{786DAF43-CBB9-4DFC-A829-47B244FFB4FC} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{787D7381-E94B-4ECD-8CDE-9D4B1243FF19} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{7A1095CE-3455-4F83-B02E-929A3393F61D} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{7A7698B2-6DBB-4B9C-B746-7CFF8A13A309} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{7FCFF35C-9D5B-4C17-AA99-E8B9C2C9881F} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{806CC490-55A7-48AF-85E4-F525306394E7} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{807C20B3-69A5-40CF-BC82-AE4899CA8058} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{8275E393-B15B-4E94-BF17-E1D38F85C215} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{82BEB57D-E747-4C28-8087-3CD683234504} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{82DD9BD0-1D65-4537-AE20-B9309723E366} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{83653CA2-D4C3-43D8-9E81-7339957577EA} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{8853176F-8B12-4A3F-B346-197B828A76B4} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{88B9334D-B465-4AA5-9127-10623B278628} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{88EB1C69-B154-4405-9E4B-FF24A6770F77} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{8B9A5BB5-056C-4446-B083-01814D8728F6} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{8C4E8962-2BE1-405F-BE73-76C4B8AD28E8} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{8C79AFFB-B030-4B2A-B27E-C66A15FB59A7} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{8DDE4F89-33C3-4317-A841-C0B4EC79886E} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{93B1EACF-5EAC-43F3-8D9F-52233098CAD4} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{946771DD-5C83-403C-B2C2-CEC84469DF30} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{94E7C992-1327-4B2E-8AE8-F3B7F9A1F6DF} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{956FBEA3-9C62-4C58-B3A7-C1BFE34A70FF} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{96B8B4B7-5A67-4E54-BF5C-E2D7E9CB89BF} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{971FB979-A7D6-4D1A-9025-8ED6E93B12ED} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{9A952981-B2F8-4232-9492-D073E4631DF4} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{9B639100-7CB4-437B-83A8-CEFE46B80514} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{9B662D02-22EB-4849-8967-6305545A1E8B} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{9E290342-B276-44CB-8A0F-631E6549A17D} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{9EC7A1D6-9FF4-4CBB-9920-E29ACC3E4CA6} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{9F5796B2-A8A7-4B02-9A23-5C25B900720B} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{A0A01808-E744-4EC4-BB0C-8D06282E80CA} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{A1BFD66B-451B-46CC-9896-96F5F8290981} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{A2CE660B-CC9D-4C76-87E8-7DD7716A6C31} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{A396B0EB-E254-4B39-8C6D-68CDE1526180} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{A4356130-5175-4063-9641-BFD82835A482} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{A502F23E-BDFC-4639-9EED-500BDB1F8D28} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{A639E890-4119-46D7-98A0-224081C25D8C} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{A6CD5462-336F-4AD9-9A28-AD1BFD6077EE} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{A790F86B-E10B-4B13-BBD0-5E8FC0CECC96} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{A8DDEF11-32D7-4518-AF12-7FFE38849102} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{A91FC3A9-31BE-4ADB-AF31-5C6502EDBF5D} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{ACB67AD5-6C13-4698-9F34-9259C58E8A00} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{ADCE7CCD-6CCD-4296-AF67-FFF7FA0344AE} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{AE260092-C997-49D8-8567-69021ED5B4F0} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{AFFA1A00-9246-4C8E-A90A-005732BADF78} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{B2065DD3-2066-444A-955D-E9179F7F0324} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{B4BE016A-E9C6-4FFC-8B4F-3F80AF643538} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{B4FAE31E-0DEC-46AC-8091-5BD7C1983A1D} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{B541FDDD-7221-4E80-A6BF-CAA264415F14} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{B5C6BD42-B6C0-41A2-8952-097E19DDA417} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{B5F16F3A-A851-428F-83DC-B887B832CA56} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{B7DD4491-2B74-4B19-991E-D0A6784FD51C} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{BB914BEB-9EC4-4556-BEBB-6CF563323202} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{BC42232A-2B6F-4351-9C64-8B7C51B14470} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{BF5F6D73-69A4-4E98-AB00-3C01C0F58853} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{BFABA9DB-D79B-412F-8D20-0D7B31C41479} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{C046378D-53A9-4511-B83F-9E8BB3BE9D2B} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{C0622EA8-505D-4F66-A7F2-DAE5B9F62042} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{C078E41B-564C-428F-8631-786A7B1A63B9} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{C4430E06-599B-43C4-9791-92C779DE9CA7} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{C47EBCA9-6B5F-4DF9-B81C-16F6AD26B86F} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{C4CFBD41-64CE-4865-992D-232971BD5F04} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{C625909A-2646-4418-A776-5BB77830F613} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{C6A724BE-4FBF-4080-9ED5-588B1C0AFA55} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{C71FA3FE-A1F3-4CA0-8E49-06E6A11EDBA5} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{C862EBA7-4D9C-496F-938B-7104AE79D2A8} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{C965ECB5-1683-4C2A-B452-49F8F801F46C} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{C9D22FE5-DF5D-4EB3-954F-74DF3D9DA289} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{CBF282EC-1A80-413D-A7B8-46EC3065E78C} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{CC6F7397-F89F-4C87-A658-834FA4BA34E7} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{CC8CCADF-BE5E-4D27-B234-CD39FC54D94B} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{CEB89A53-DE89-4CEB-8A32-79CB06A79E7C} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{CFCFBA94-67D1-4C6F-B2A7-DB5E4FB507F2} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{D1FB3C16-2922-47C1-BFB1-F808B131E679} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{D3884714-46B0-473C-B13A-2370EA52617A} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{D435957A-86E3-402C-B6E9-08F2FABF3939} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{D47B1526-4051-4F14-B6B3-694EFC83654A} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{D4E74ABE-6F9A-4220-9023-8CB5AEA814B0} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{D58FE180-5DE8-428F-B9C1-209C1EA13141} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{D62F529C-D808-4622-B3B0-D123AF1D1EE1} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{D65AF5A8-7852-4B15-B710-F2EEEA1013A4} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{D9E132A7-5752-4CBC-855E-1612C8C53AF5} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{DC3DF2D8-AB04-48F7-85E7-C706C87316A5} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{E054594A-48F4-4738-8EE6-036688061188} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{E0F5160B-9112-4AAA-8D32-1F3F0F7B4235} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{E203FD3D-18AB-4007-8765-C6E7F36DAE78} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{E2657F7C-B9B3-44A9-B70C-6C70E26BF2B2} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{E2B19B54-9F1B-435E-A9B0-4ABDA7652D4E} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{E5E6C9F1-3090-437C-B012-B717D7AEAE09} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{E615C7C2-1549-4F74-B7EE-6457ADE33882} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{E96644EB-6886-47CE-90F2-7EC2CC7A8B49} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{EA71C4AB-B650-4164-9C8B-906B5C7E2410} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{EDE1132A-37B8-4FD4-8A9A-5E4928445175} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{EED63713-5E25-4EBF-9F92-0B6C40B2C352} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{EF4A8B59-CEB6-4BBD-91C3-5B5FF2B32594} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{EF9BEF35-C57E-4D62-ABFF-8B48EF993B39} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{F0C5F0DF-3918-429E-B1E4-DAACF93D4D21} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{F266DE97-8DD3-48A3-B5D4-98B040975CE3} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{F3770CF3-7414-4F28-A17D-0CF3196B100F} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{F3D44E8D-0339-46B3-93B6-05C8B8AB3289} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{F5479EC4-4157-4D56-9642-A32C3F64A5B7} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{F5C09004-C376-4E98-9524-9DCDF5C165BF} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{F8C1B1B5-9B95-4408-802E-2221AB9DECB3} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{F93F92AB-6BF9-4E09-ACDD-65635590593C} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{F9D3854A-CEE6-44C0-AF9F-F1186BFE5917} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{FACAB6C9-5798-4028-BD74-92E29AF45881} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{FBEE7281-34B4-4EB9-B96B-8EE10D6A0ED5} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{FBFB2242-D49A-4511-B359-3E363E60B756} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{FC3DACB8-082C-4F2C-9F9C-1F8D035D6B0F} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{FD725197-6506-4865-881F-BDDBB1A3FE54} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{FDB962B0-4080-4BC7-BDA1-E1DA65882582} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{FF031514-7E12-43CF-B076-F0903EC0E75E} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\{FF7ACF03-764B-4D3B-B2D1-3F77AB9A22D3} (Empty Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil (Folder)
Successfully deleted: C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_lyrics.wikia.com_0.localstorage (File)
Successfully deleted: C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.allthelyrics.com_0.localstorage (File)
Successfully deleted: C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.lyricsfreak.com_0.localstorage (File)
Successfully deleted: C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.lyricsmode.com_0.localstorage (File)
Successfully deleted: C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.metrolyrics.com_0.localstorage (File)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Łt 19.04.2016 at 22:05:04,65
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

RogueKiller V12.1.3.0 [Apr 18 2016] (Free) by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/software/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 10 (10.0.10586) 32 bits version
Spuštěno : Normální režim
Uživatel : Ondra [Práva správce]
Started from : C:\Users\Ondra\Desktop\Cleaning\RogueKiller.exe
Mód : Prohledat -- Datum : 04/19/2016 22:36:13

¤¤¤ Procesy : 1 ¤¤¤
[Proc.RunPE] hasplms.exe(892) -- C:\Windows\System32\hasplms.exe[x] -> Nalezeno

¤¤¤ Registry : 2 ¤¤¤
[PUM.HomePage] HKEY_USERS\S-1-5-21-4232016968-1834718543-1254348729-1000\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.jw.org/cs -> Nalezeno
[PUM.Policies] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Nalezeno

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: ST95005620AS ATA Device +++++
--- User ---
[MBR] eeaaacf3a3e07a2749faeec6b4c7e023
[BSP] 024a524f06442d6c7df59a5164559d9e : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 99449 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 203878400 | Size: 450 MB
3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 204800000 | Size: 376939 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: SAMSUNG HD154UI ATA Device +++++
--- User ---
[MBR] f8805bef418b5c94438de51a281a7de8
[BSP] 71f9abf5e93329d733df6e61d578fc92 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 1000000 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048002048 | Size: 430796 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive2: WD Ext HDD 1021 USB Device +++++
--- User ---
[MBR] 9b475497217b29b04d7d9eb420d7dc26
[BSP] e74f1458e2681fd4c3f53be2eab0f7f7 : Windows XP MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 63 | Size: 1430789 MB [Windows XP Bootstrap | Windows XP Bootloader]
User = LL1 ... OK
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive3: WD Ext HDD 1021 USB Device +++++
--- User ---
[MBR] ec19f8b8ad873608fb3a646237d39f9a
[BSP] bf841d4da5c7382bfeb5380d7311a303 : Windows XP MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 300000 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 614402048 | Size: 500000 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 1638402048 | Size: 1107724 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Pak klikni na "Prohledat " ,po jeho skončení:

- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka)
(musíš dát myší zatržítko do toho čtverečku vlevo od registru ap.)

- Klikni na "Smazat"
- Počkej, dokud Status box nezobrazí " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Vypni antivir i firewall.
Stáhni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:


klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

Vlož nový log z HJT + informuj o problémech

RogueKiller V12.1.3.0 [Apr 18 2016] (Free) by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/software/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 10 (10.0.10586) 32 bits version
Spuštěno : Normální režim
Uživatel : Ondra [Práva správce]
Started from : C:\Users\Ondra\Desktop\Cleaning\RogueKiller.exe
Mód : Smazat -- Datum : 04/20/2016 18:08:43

¤¤¤ Procesy : 1 ¤¤¤
[Proc.RunPE] hasplms.exe(2036) -- C:\Windows\System32\hasplms.exe[7] -> Zastaveno [TermProc]

¤¤¤ Registry : 6 ¤¤¤
[PUM.HomePage] HKEY_USERS\S-1-5-21-4232016968-1834718543-1254348729-1000\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.jw.org/cs -> Nahrazeno (http://go.microsoft.com/fwlink/p/?LinkId=255141)
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 213.46.172.37 213.46.172.36 ([X][X]) -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 213.46.172.37 213.46.172.36 ([X][X]) -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{15c03677-4ee4-4720-8afe-71abf13f8987} | DhcpNameServer : 213.46.172.37 213.46.172.36 ([X][X]) -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{15c03677-4ee4-4720-8afe-71abf13f8987} | DhcpNameServer : 213.46.172.37 213.46.172.36 ([X][X]) -> Nahrazeno ()
[PUM.Policies] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Nahrazeno (2)

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 41 (Driver: Nahrán) ¤¤¤
[SSDT:Inl(Hook.SSDT)] ZwThawTransactions[32] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff88012052 (jmp dword [0x818372b8])
[SSDT:Inl(Hook.SSDT)] ZwSinglePhaseReject[44] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800e6a6 (jmp dword [0x818372f8])
[SSDT:Inl(Hook.SSDT)] ZwSetInformationTransactionManager[73] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff88012d24 (jmp dword [0x818372fc])
[SSDT:Inl(Hook.SSDT)] ZwSetInformationTransaction[74] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff88011d12 (jmp dword [0x818372bc])
[SSDT:Inl(Hook.SSDT)] ZwSetInformationResourceManager[77] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800f0a6 (jmp dword [0x818372c0])
[SSDT:Inl(Hook.SSDT)] ZwSetInformationEnlistment[83] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800dfb8 (jmp dword [0x818372c4])
[SSDT:Inl(Hook.SSDT)] ZwRollforwardTransactionManager[104] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8801269a (jmp dword [0x81837310])
[SSDT:Inl(Hook.SSDT)] ZwRollbackTransaction[105] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff88011ca8 (jmp dword [0x818372c8])
[SSDT:Inl(Hook.SSDT)] ZwRollbackEnlistment[106] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800e3c6 (jmp dword [0x818372cc])
[SSDT:Inl(Hook.SSDT)] ZwRollbackComplete[107] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800e812 (jmp dword [0x818372d0])
[SSDT:Inl(Hook.SSDT)] ZwRenameTransactionManager[122] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff88012532 (jmp dword [0x81837314])
[SSDT:Inl(Hook.SSDT)] ZwRegisterProtocolAddressInformation[132] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff88012e62 (jmp dword [0x81837318])
[SSDT:Inl(Hook.SSDT)] ZwRecoverTransactionManager[133] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff88012752 (jmp dword [0x818372d4])
[SSDT:Inl(Hook.SSDT)] ZwRecoverResourceManager[134] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800ed32 (jmp dword [0x818372d8])
[SSDT:Inl(Hook.SSDT)] ZwRecoverEnlistment[135] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800dcfe (jmp dword [0x818372dc])
[SSDT:Inl(Hook.SSDT)] ZwReadOnlyEnlistment[138] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800e75c (jmp dword [0x81837334])
[SSDT:Inl(Hook.SSDT)] ZwQueryInformationTransactionManager[176] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff880127ae (jmp dword [0x81837338])
[SSDT:Inl(Hook.SSDT)] ZwQueryInformationTransaction[177] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff88011470 (jmp dword [0x8183733c])
[SSDT:Inl(Hook.SSDT)] ZwQueryInformationResourceManager[180] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800ee98 (jmp dword [0x81837340])
[SSDT:Inl(Hook.SSDT)] ZwQueryInformationEnlistment[185] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800dd5a (jmp dword [0x81837344])
[SSDT:Inl(Hook.SSDT)] ZwPropagationFailed[201] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff880130f0 (jmp dword [0x81837348])
[SSDT:Inl(Hook.SSDT)] ZwPropagationComplete[202] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff88013026 (jmp dword [0x8183734c])
[SSDT:Inl(Hook.SSDT)] ZwPrePrepareEnlistment[207] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800e256 (jmp dword [0x81837358])
[SSDT:Inl(Hook.SSDT)] ZwPrePrepareComplete[208] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800e536 (jmp dword [0x8183735c])
[SSDT:Inl(Hook.SSDT)] ZwPrepareEnlistment[209] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800e19e (jmp dword [0x81837350])
[SSDT:Inl(Hook.SSDT)] ZwPrepareComplete[210] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800e47e (jmp dword [0x81837354])
[SSDT:Inl(Hook.SSDT)] ZwOpenTransactionManager[213] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff880122c0 (jmp dword [0x81837360])
[SSDT:Inl(Hook.SSDT)] ZwOpenTransaction[214] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff88011272 (jmp dword [0x81837364])
[SSDT:Inl(Hook.SSDT)] ZwOpenResourceManager[223] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800eb7e (jmp dword [0x81837368])
[SSDT:Inl(Hook.SSDT)] ZwOpenEnlistment[241] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800db5a (jmp dword [0x8183736c])
[SSDT:Inl(Hook.SSDT)] ZwGetNotificationResourceManager[277] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800ed8c (jmp dword [0x81837370])
[SSDT:Inl(Hook.SSDT)] ZwFreezeTransactions[289] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff88011f7a (jmp dword [0x81837374])
[SSDT:Inl(Hook.SSDT)] ZwFlushWriteBuffer[293] : C:\Windows\System32\halmacpi.dll @ 0xffffffff81c1cd46 (call dword [0x81837134])
[SSDT:Inl(Hook.SSDT)] ZwEnumerateTransactionObject[307] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff88011a30 (jmp dword [0x81837330])
[SSDT:Inl(Hook.SSDT)] ZwCreateTransactionManager[338] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff880120a8 (jmp dword [0x8183732c])
[SSDT:Inl(Hook.SSDT)] ZwCreateTransaction[339] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff88010f56 (jmp dword [0x81837328])
[SSDT:Inl(Hook.SSDT)] ZwCreateResourceManager[349] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800e8c8 (jmp dword [0x81837324])
[SSDT:Inl(Hook.SSDT)] ZwCreateEnlistment[371] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800d958 (jmp dword [0x818372f4])
[SSDT:Inl(Hook.SSDT)] ZwCommitTransaction[383] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff88011c3e (jmp dword [0x818372f0])
[SSDT:Inl(Hook.SSDT)] ZwCommitEnlistment[384] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800e30e (jmp dword [0x818372ec])
[SSDT:Inl(Hook.SSDT)] ZwCommitComplete[385] : C:\Windows\System32\drivers\tm.sys @ 0xffffffff8800e5ee (jmp dword [0x818372e8])

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: ST95005620AS ATA Device +++++
--- User ---
[MBR] eeaaacf3a3e07a2749faeec6b4c7e023
[BSP] 024a524f06442d6c7df59a5164559d9e : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 99449 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 203878400 | Size: 450 MB
3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 204800000 | Size: 376939 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: SAMSUNG HD154UI ATA Device +++++
--- User ---
[MBR] f8805bef418b5c94438de51a281a7de8
[BSP] 71f9abf5e93329d733df6e61d578fc92 : Windows Vista/7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 1000000 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048002048 | Size: 430796 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

Zoek.exe v5.0.0.1 Updated 31-December-2015
Tool run by Ondra on st 20.04.2016 at 18:15:47,62.
Microsoft Windows 10 Home 10.0.10586 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Ondra\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

20.4.2016 18:17:24 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\Program Files\AGEIA Technologies deleted successfully
C:\Program Files\GUMF324.tmp deleted successfully
C:\Program Files\hpmonitor deleted successfully
C:\Program Files\PC Connectivity Solution deleted successfully
C:\Program Files\Tswincz deleted successfully
C:\PROGRA~2\Comms deleted successfully
C:\PROGRA~2\HPSSUPPLY deleted successfully
C:\PROGRA~2\SoftwareDistribution deleted successfully
C:\Users\DefaultAppPool\AppData\LocalLow deleted successfully
C:\Users\Ondra\AppData\Local\ActiveSync deleted successfully
C:\Users\Ondra\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\Ondra\AppData\Local\EmieSiteList deleted successfully
C:\Users\Ondra\AppData\Local\EmieUserList deleted successfully
C:\Users\Ondra\AppData\Local\Skype deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\Program Files\AGEIA Technologies not found
C:\Program Files\GUMF324.tmp not found
C:\Program Files\hpmonitor not found
C:\Program Files\PC Connectivity Solution not found
C:\Program Files\Tswincz not found
C:\Users\Ondra\AppData\Local\TB_development_&_investme deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
"C:\Users\Ondra\AppData\Roaming\Temp" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{F003DA68-8256-4b37-A6C4-350FA04494DF}"="C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt" [27.12.2014 15:38]

==== Chromium Look ======================

Send Link - Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\elophlokcoblconmkfdbebbcfjaobcnd
Centrum.cz Email Notifik\u00E1tor - Ondra\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmmnahgmbjnpgdoadbfoficgoamahklm

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02

==== Reset Google Chrome ======================

C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC deleted successfully

==== Empty IE Cache ======================

C:\Users\Ondra\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Ondra\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Ondra\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Ondra\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=2 folders=4 1388 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\Ondra\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on st 20.04.2016 at 18:34:24,46 ======================

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:36:19, on 20.4.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)


Boot mode: Normal

Running processes:
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\system32\taskhostw.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\RuntimeBroker.exe
C:\WINDOWS\system32\backgroundTaskHost.exe
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
C:\WINDOWS\system32\ApplicationFrameHost.exe
C:\WINDOWS\system32\taskhostw.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
C:\Program Files\Logitech\SetPointP\SetPoint.exe
C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
C:\Windows\System32\SystemSettingsBroker.exe
C:\WINDOWS\system32\svchost.exe
C:\Users\Ondra\Desktop\Cleaning\HijackThis.exe
C:\WINDOWS\system32\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll
O4 - HKLM\..\Run: [PrnStatusMX] C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
O4 - HKLM\..\Run: [C:\Windows\system32\V0330Ext.ax] C:\Windows\system32\RegSvr32.exe /s C:\Windows\system32\V0330Ext.ax
O4 - HKLM\..\Run: [ShadowPlay] C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
O4 - HKLM\..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Mámemail Pošťák.lnk = C:\Program Files\Mamemail\Mamemail Postak\Postak.exe
O4 - Startup: speedfan.lnk = C:\Program Files\SpeedFan\speedfan.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Sentinel HASP License Manager (hasplms) - SafeNet Inc. - C:\Windows\system32\hasplms.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvvsvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files\Sony\Sony PC Companion\PCCService.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer\TeamViewer_Service.exe
O23 - Service: @oem25.inf,%ViaKaraokeSrv.SvcDesc%;VIA Karaoke digital mixer Service (VIAKaraokeService) - VIA Technologies, Inc. - C:\WINDOWS\system32\viakaraokesrv.exe

--
End of file - 6696 bytes