Vysoký ping v cs go Vyřešeno

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.


najdi a smaž
c:\windows\KMSEmulator.exe

co problémy?

[Reklama]

[keslíček]

Je to špatné cs go nehratelné pořád cca 200ping. Ted pocituji i sníženou rychlost prohlížeče.Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:24:12, on 27.4.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16447)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\MSI\NetworkGenie\NetworkGenie.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\šalomoun\Downloads\HiJackThis.exe
C:\Windows\system32\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{EE928C34-4B07-41BE-A09A-893F11660DF4}: NameServer = 172.16.0.1
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AODService - Unknown owner - C:\Program Files\AMD\OverDrive\AODAssist.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Avast Firewall (avast! Firewall) - Unknown owner - C:\Program Files\AVAST Software\Avast\afwServ.exe (file missing)
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: BitRaider Mini-Support Service (BRSptSvc) - Unknown owner - C:\ProgramData\BitRaider\BRSptSvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: MSI_LiveUpdate_Service - Micro-Star International - C:\Program Files\MSI\Live Update\MSI_LiveUpdate_Service.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 6638 bytes

[keslíček]

aktuální měření : http://rychlost.cz/vysledek/20151647261-525b/

[mople71]

Hm, tam ta odezva vypadá OK, rychlost nemohu porovnat - nevím, jaká byla předtím...

Když si otevřeš CMD a zadáš:

Kód: Vybrat vše

ping google.com

Odezva je jaká?

[keslíček]

Tohle trápí , poslední dva týdny nepomohla přeinstalace steamu ani samotné hry. Jen tady po nějakém čištění se to drželo na 45 nevím přesně jaké. Ted to zase lítá 100 , 200 , 250 totálně nehratelné

[jaro3]

Stáhni si OTL by OldTimer
na plochu. Ujisti se , že máš zavřena všechna ostatní okna a poklepej na ikonu OTL.Nahoře v okně pod Výstup klikni na minimální výstup.Pod Běžné registry změň na Vše. Zatrhni Kontrola na havěť “LOP“ a Kontrola na havěť “ Purity“ . Klikni na Prohledat. Všechny ostatní nastavení ponech jak jsou. Sken může trvat dlouho, až skončí otevřou se dva logy:
OTL.Txt
Extras.Txt
Jsou uloženy ve stejném místě jako OTL. Oba logy sem prosím zkopíruj.

[keslíček]

OTL logfile created on: 28.4.2015 12:07:16 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\šalomoun\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,25 Gb Total Physical Memory | 2,42 Gb Available Physical Memory | 74,55% Memory free
6,50 Gb Paging File | 5,61 Gb Available in Paging File | 86,28% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 143,14 Gb Total Space | 28,62 Gb Free Space | 20,00% Space Free | Partition Type: NTFS

Computer Name: ŠALOMOUN-PC | User Name: šalomoun | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\šalomoun\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\AVAST Software\Avast\avastui.exe (AVAST Software)
PRC - C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
PRC - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
PRC - C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe (LogMeIn, Inc.)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (Avast Software)
PRC - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\MSI\Live Update\MSI_LiveUpdate_Service.exe (Micro-Star International)
PRC - C:\Program Files\MSI\NetworkGenie\NetworkGenie.exe (Realtek Semiconductor)
PRC - C:\Windows\System32\atieclxx.exe (AMD)
PRC - C:\Windows\System32\atiesrxx.exe (AMD)
PRC - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Advanced Micro Devices, Inc.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)


========== Modules (No Company Name) ==========

MOD - C:\Program Files\AVAST Software\Avast\libcef.dll ()
MOD - C:\Program Files\MSI\NetworkGenie\gep.dll ()
MOD - C:\Program Files\WinRAR\RarExt.dll ()
MOD - C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ()


========== Services (SafeList) ==========

SRV - (BRSptSvc) -- C:\ProgramData\BitRaider\BRSptSvc.exe File not found
SRV - (avast! Firewall) -- C:\Program Files\AVAST Software\Avast\afwServ.exe File not found
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (Steam Client Service) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (Hamachi2Svc) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
SRV - (LMIGuardianSvc) -- C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe (LogMeIn, Inc.)
SRV - (avast! Antivirus) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV - (AvastVBoxSvc) -- C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (Avast Software)
SRV - (AdobeARMservice) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (MSI_LiveUpdate_Service) -- C:\Program Files\MSI\Live Update\MSI_LiveUpdate_Service.exe (Micro-Star International)
SRV - (AMD External Events Utility) -- C:\Windows\System32\atiesrxx.exe (AMD)
SRV - (AMD FUEL Service) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Advanced Micro Devices, Inc.)
SRV - (HiSuiteOuc.exe) -- C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe ()
SRV - (HuaweiHiSuiteService.exe) -- C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe ()
SRV - (AODService) -- C:\Program Files\AMD\OverDrive\AODAssist.exe ()
SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (Microsoft SharePoint Workspace Audit Service) -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE (Microsoft Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV - (nvvad_WaveExtensible) -- system32\drivers\nvvad32v.sys File not found
DRV - (nvlddmkm) -- system32\DRIVERS\nvlddmkm.sys File not found
DRV - (NVHDA) -- system32\drivers\nvhda32v.sys File not found
DRV - (BRDriver) -- C:\ProgramData\BitRaider\BRDriver.sys File not found
DRV - (MBAMSwissArmy) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys (Malwarebytes Corporation)
DRV - (aswSP) -- C:\Windows\System32\drivers\aswSP.sys (Avast Software s.r.o.)
DRV - (aswVmm) -- C:\Windows\System32\drivers\aswVmm.sys ()
DRV - (aswStm) -- C:\Windows\System32\drivers\aswStm.sys (Avast Software s.r.o.)
DRV - (aswRdr) -- C:\Windows\System32\drivers\aswRdr2.sys (Avast Software s.r.o.)
DRV - (aswMonFlt) -- C:\Windows\System32\drivers\aswMonFlt.sys (Avast Software s.r.o.)
DRV - (aswRvrt) -- C:\Windows\System32\drivers\aswRvrt.sys ()
DRV - (aswHwid) -- C:\Windows\System32\drivers\aswHwid.sys ()
DRV - (aswSnx) -- C:\Windows\System32\drivers\aswSnx.sys (Avast Software s.r.o.)
DRV - (aswKbd) -- C:\Windows\System32\drivers\aswKbd.sys (Avast Software s.r.o.)
DRV - (VBoxAswDrv) -- C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys (Avast Software)
DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (Advanced Micro Devices, Inc.)
DRV - (amdkmdag) -- C:\Windows\System32\drivers\atikmdag.sys (Advanced Micro Devices, Inc.)
DRV - (amdkmdap) -- C:\Windows\System32\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV - (sptd) -- C:\Windows\System32\drivers\sptd.sys (Duplex Secure Ltd.)
DRV - (AODDriver4.3) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\aoddriver2.sys (Advanced Micro Devices)
DRV - (AtiHDAudioService) -- C:\Windows\System32\drivers\AtihdW73.sys (Advanced Micro Devices)
DRV - (AODDriver4.2.0) -- C:\Program Files\AMD\OverDrive\i386\AODDriver2.sys (Advanced Micro Devices)
DRV - (MotioninJoyXFilter) -- C:\Windows\System32\drivers\MijXfilt.sys (MotioninJoy)
DRV - (ndisrd) -- C:\Windows\System32\drivers\ndisrd.sys (NT Kernel Resources)
DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation)
DRV - (NisDrv) -- C:\Windows\System32\drivers\NisDrvWFP.sys (Microsoft Corporation)
DRV - (MpNWMon) -- C:\Windows\System32\drivers\MpNWMon.sys (Microsoft Corporation)
DRV - (NTIOLib_1_0_4) -- C:\Program Files\MSI\Live Update\NTIOLib.sys (MSI)
DRV - (Revoflt) -- C:\Windows\System32\drivers\revoflt.sys (VS Revo Group)
DRV - (LGVirHid) -- C:\Windows\System32\drivers\LGVirHid.sys (Logitech Inc.)
DRV - (LGBusEnum) -- C:\Windows\System32\drivers\LGBusEnum.sys (Logitech Inc.)
DRV - (Serial) -- C:\Windows\System32\drivers\serial.sys (Brother Industries Ltd.)
DRV - (netr28u) -- C:\Windows\System32\drivers\netr28u.sys (Ralink Technology Corp.)
DRV - (hamachi) -- C:\Windows\System32\drivers\hamachi.sys (LogMeIn, Inc.)


========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default Download Directory = C:\Users\šalomoun\Desktop
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}: "URL" = http://www.google.com/search?q={searchTerms}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.isUS: false
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:34.0.5
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.10.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.10.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2015.04.08 21:47:46 | 000,000,000 | ---D | M]

[2014.09.11 11:22:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\šalomoun\AppData\Roaming\Mozilla\Extensions
[2015.04.17 22:10:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\šalomoun\AppData\Roaming\Mozilla\Firefox\Profiles\x3p6y870.default\extensions

========== Chrome ==========

CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\šalomoun\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
CHR - Extension: No name found = C:\Users\šalomoun\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\
CHR - Extension: No name found = C:\Users\šalomoun\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl\0.8.2.0_0\
CHR - Extension: No name found = C:\Users\šalomoun\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2015.421.10417_0\
CHR - Extension: No name found = C:\Users\šalomoun\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\

O1 HOSTS File: ([2015.04.24 17:17:02 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKCU..\Run: [Steam] C:\Program Files\Steam\steam.exe (Valve Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Od&eslat do aplikace OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105 File not found
O9 - Extra Button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{24FC7489-FA02-489C-942E-1E04DEACCA6C}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EE928C34-4B07-41BE-A09A-893F11660DF4}: NameServer = 172.16.0.1
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\System32\credssp.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\Windows\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\Windows\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\Windows\System32\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (tspkg) - C:\Windows\System32\tspkg.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2015.04.28 12:05:51 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\šalomoun\Desktop\OTL.exe
[2015.04.26 18:36:49 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2015.04.26 18:36:08 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2015.04.24 17:15:34 | 000,000,000 | ---D | C] -- C:\Users\šalomoun\AppData\Local\temp
[2015.04.24 17:04:09 | 000,000,000 | R--D | C] -- C:\Users\šalomoun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2015.04.24 17:04:09 | 000,000,000 | R--D | C] -- C:\Users\šalomoun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2015.04.24 14:20:51 | 000,000,000 | ---D | C] -- C:\RegBackup
[2015.04.24 14:20:39 | 002,685,461 | ---- | C] (Thisisu) -- C:\Users\šalomoun\Desktop\JRT_NEW.exe
[2015.04.18 16:21:53 | 000,000,000 | ---D | C] -- C:\Users\šalomoun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
[2015.04.17 22:59:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
[2015.04.17 22:15:51 | 000,000,000 | ---D | C] -- C:\zoek_backup
[2015.04.12 20:40:37 | 000,000,000 | ---D | C] -- C:\Users\šalomoun\AppData\Roaming\Wargaming.net
[2015.04.12 17:56:57 | 000,000,000 | ---D | C] -- C:\Users\šalomoun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\World of Tanks
[2015.04.11 21:46:09 | 000,000,000 | ---D | C] -- C:\Users\šalomoun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2015.04.11 17:18:10 | 000,027,192 | ---- | C] (VS Revo Group) -- C:\Windows\System32\drivers\revoflt.sys
[2015.04.11 17:18:10 | 000,000,000 | ---D | C] -- C:\ProgramData\VS Revo Group
[2015.04.11 17:18:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
[2015.04.08 21:47:47 | 000,291,312 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\System32\aswBoot.exe
[2015.04.03 12:58:11 | 000,000,000 | ---D | C] -- C:\ProgramData\RogueKiller
[2015.04.03 12:04:20 | 000,000,000 | ---D | C] -- C:\Users\šalomoun\Desktop\VT maturita 2015 prvni zkouseni
[2015.04.01 19:04:43 | 000,026,096 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\System32\drivers\aswKbd.sys
[2015.04.01 19:04:33 | 000,043,112 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\avastSS.scr
[2015.03.31 16:16:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2015.03.31 16:16:35 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2015.03.29 16:49:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2015.03.29 15:13:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps

========== Files - Modified Within 30 Days ==========

[2015.04.28 12:02:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\šalomoun\Desktop\OTL.exe
[2015.04.28 11:45:25 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015.04.28 11:45:25 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015.04.28 11:38:30 | 000,000,374 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts.ics
[2015.04.28 11:37:21 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015.04.28 11:37:17 | 2616,647,680 | -HS- | M] () -- C:\hiberfil.sys
[2015.04.27 18:24:12 | 000,006,639 | ---- | M] () -- C:\Users\šalomoun\Desktop\gghhh
[2015.04.26 17:53:44 | 000,006,185 | ---- | M] () -- C:\Users\šalomoun\Desktop\g
[2015.04.24 17:17:02 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2015.04.24 14:20:57 | 000,000,207 | ---- | M] () -- C:\Windows\tweaking.com-regbackup-ŠALOMOUN-PC-Windows-7-Ultimate-(32-bit).dat
[2015.04.24 13:12:05 | 000,114,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
[2015.04.24 06:51:22 | 002,685,461 | ---- | M] (Thisisu) -- C:\Users\šalomoun\Desktop\JRT_NEW.exe
[2015.04.23 19:34:29 | 000,024,064 | ---- | M] () -- C:\Windows\zoek-delete.exe
[2015.04.21 18:33:39 | 004,020,125 | ---- | M] () -- C:\Users\šalomoun\Desktop\military-german-battleship-bismarck_237438.jpg
[2015.04.21 14:33:07 | 000,651,870 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2015.04.21 14:33:07 | 000,627,774 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2015.04.21 14:33:07 | 000,129,788 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2015.04.21 14:33:07 | 000,113,410 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2015.04.18 16:21:53 | 000,000,213 | ---- | M] () -- C:\Users\šalomoun\Desktop\Counter-Strike Global Offensive.url
[2015.04.18 11:02:00 | 000,013,525 | ---- | M] () -- C:\Users\šalomoun\Desktop\Bez názvu.png
[2015.04.17 22:59:49 | 000,000,885 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk
[2015.04.17 22:15:05 | 001,305,600 | ---- | M] () -- C:\Users\šalomoun\Desktop\zoek.exe
[2015.04.17 19:35:52 | 000,035,126 | ---- | M] () -- C:\Users\šalomoun\Desktop\ss.png
[2015.04.15 19:43:19 | 000,778,416 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2015.04.15 19:43:19 | 000,142,512 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2015.04.12 17:56:57 | 000,000,769 | ---- | M] () -- C:\Users\šalomoun\Desktop\World of Tanks.lnk
[2015.04.11 21:18:55 | 000,000,476 | ---- | M] () -- C:\Windows\eReg.dat
[2015.04.09 20:55:04 | 000,002,089 | ---- | M] () -- C:\Users\Public\Desktop\ff.lnk
[2015.04.08 21:48:38 | 000,002,023 | ---- | M] () -- C:\Users\Public\Desktop\Avast SafeZone.lnk
[2015.04.08 21:48:38 | 000,001,963 | ---- | M] () -- C:\Users\Public\Desktop\Avast Internet Security.lnk
[2015.04.01 19:04:36 | 000,427,736 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\System32\drivers\aswSP.sys
[2015.04.01 19:04:36 | 000,208,024 | ---- | M] () -- C:\Windows\System32\drivers\aswVmm.sys
[2015.04.01 19:04:36 | 000,106,912 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\System32\drivers\aswStm.sys
[2015.04.01 19:04:36 | 000,081,728 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\System32\drivers\aswRdr2.sys
[2015.04.01 19:04:36 | 000,073,440 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2015.04.01 19:04:36 | 000,049,904 | ---- | M] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2015.04.01 19:04:36 | 000,024,144 | ---- | M] () -- C:\Windows\System32\drivers\aswHwid.sys
[2015.04.01 19:04:33 | 000,291,312 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\System32\aswBoot.exe
[2015.04.01 19:04:33 | 000,043,112 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\avastSS.scr
[2015.04.01 19:04:19 | 000,788,272 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\System32\drivers\aswSnx.sys
[2015.04.01 19:04:18 | 000,026,096 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\System32\drivers\aswKbd.sys
[2015.03.30 15:25:00 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) -- C:\Windows\System32\hamachi.sys

========== Files Created - No Company Name ==========

[2015.04.27 18:24:12 | 000,006,639 | ---- | C] () -- C:\Users\šalomoun\Desktop\gghhh
[2015.04.26 17:53:44 | 000,006,185 | ---- | C] () -- C:\Users\šalomoun\Desktop\g
[2015.04.24 14:20:57 | 000,000,207 | ---- | C] () -- C:\Windows\tweaking.com-regbackup-ŠALOMOUN-PC-Windows-7-Ultimate-(32-bit).dat
[2015.04.23 19:50:15 | 000,024,064 | ---- | C] () -- C:\Windows\zoek-delete.exe
[2015.04.21 18:33:31 | 004,020,125 | ---- | C] () -- C:\Users\šalomoun\Desktop\military-german-battleship-bismarck_237438.jpg
[2015.04.18 16:21:53 | 000,000,213 | ---- | C] () -- C:\Users\šalomoun\Desktop\Counter-Strike Global Offensive.url
[2015.04.18 11:02:00 | 000,013,525 | ---- | C] () -- C:\Users\šalomoun\Desktop\Bez názvu.png
[2015.04.17 22:59:49 | 000,000,885 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk
[2015.04.17 22:15:47 | 001,305,600 | ---- | C] () -- C:\Users\šalomoun\Desktop\zoek.exe
[2015.04.17 19:35:51 | 000,035,126 | ---- | C] () -- C:\Users\šalomoun\Desktop\ss.png
[2015.04.12 17:56:57 | 000,000,769 | ---- | C] () -- C:\Users\šalomoun\Desktop\World of Tanks.lnk
[2015.04.11 21:18:55 | 000,000,476 | ---- | C] () -- C:\Windows\eReg.dat
[2015.04.08 21:48:38 | 000,002,023 | ---- | C] () -- C:\Users\Public\Desktop\Avast SafeZone.lnk
[2015.04.08 21:48:38 | 000,001,963 | ---- | C] () -- C:\Users\Public\Desktop\Avast Internet Security.lnk
[2015.03.29 16:49:26 | 000,002,089 | ---- | C] () -- C:\Users\Public\Desktop\ff.lnk
[2015.01.02 18:47:35 | 000,208,024 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys
[2015.01.02 18:47:34 | 000,049,904 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2015.01.02 18:47:31 | 000,024,144 | ---- | C] () -- C:\Windows\System32\drivers\aswHwid.sys
[2014.10.05 14:11:49 | 000,000,732 | ---- | C] () -- C:\Program Files\visit-www.nosteam.ro.html
[2014.09.01 10:18:44 | 000,002,086 | ---- | C] () -- C:\Users\šalomoun\AppData\Roaming\BNFTDOO
[2014.09.01 10:18:44 | 000,001,248 | ---- | C] () -- C:\Users\šalomoun\AppData\Roaming\YQUCG
[2014.06.19 16:57:28 | 000,138,056 | ---- | C] () -- C:\Users\šalomoun\AppData\Roaming\PnkBstrK.sys
[2014.06.01 12:07:46 | 000,000,193 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2014.05.29 14:48:11 | 000,026,624 | ---- | C] () -- C:\Windows\System32\drivers\TrueSight.sys
[2014.04.30 21:18:50 | 000,234,010 | ---- | C] () -- C:\Windows\System32\poclbm130302GeForce GT 630gv1w256l4.bin
[2014.04.30 21:18:44 | 000,000,000 | ---- | C] () -- C:\Users\šalomoun\regbcm
[2014.04.26 09:52:19 | 000,139,424 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2014.04.26 09:51:49 | 000,282,104 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2014.04.26 09:51:23 | 000,076,888 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2014.04.18 04:23:02 | 000,200,704 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2014.04.17 22:28:30 | 000,038,912 | ---- | C] () -- C:\Windows\System32\kdbsdk32.dll
[2014.04.10 19:58:46 | 000,082,128 | ---- | C] () -- C:\Windows\System32\ativce02.dat
[2014.04.01 00:06:22 | 000,234,804 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik.dat
[2014.04.01 00:04:42 | 000,233,008 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik_nd.dat
[2014.02.06 17:45:58 | 000,134,192 | ---- | C] () -- C:\Windows\System32\ativce03.dat
[2014.01.16 19:00:46 | 000,273,712 | ---- | C] () -- C:\Windows\System32\ativvaxy_vi_nd.dat
[2014.01.16 18:59:20 | 000,275,124 | ---- | C] () -- C:\Windows\System32\ativvaxy_vi.dat
[2014.01.16 10:34:52 | 000,723,841 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2013.12.06 23:38:38 | 000,995,342 | ---- | C] () -- C:\Windows\System32\amdocl_as32.exe
[2013.12.06 23:38:38 | 000,798,734 | ---- | C] () -- C:\Windows\System32\amdocl_ld32.exe
[2013.12.06 22:28:32 | 000,204,952 | ---- | C] () -- C:\Windows\System32\ativvsvl.dat
[2013.12.06 22:28:32 | 000,157,144 | ---- | C] () -- C:\Windows\System32\ativvsva.dat
[2013.06.09 16:21:50 | 000,000,745 | ---- | C] () -- C:\Windows\CoD.INI
[2012.10.21 14:44:02 | 000,000,476 | ---- | C] () -- C:\Users\šalomoun\AppData\Roaming\del.bat
[2012.10.09 15:18:56 | 000,007,602 | ---- | C] () -- C:\Users\šalomoun\AppData\Local\Resmon.ResmonCfg
[2012.06.29 19:25:17 | 000,012,288 | ---- | C] () -- C:\Users\šalomoun\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2015.01.02 18:47:57 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\AVAST Software
[2014.06.09 21:16:12 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\AVG
[2015.04.08 22:04:21 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\Battle.net
[2014.06.09 21:39:31 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\BitTorrent
[2012.12.25 22:15:56 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\DiskAid
[2015.01.02 18:49:00 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\Dropbox
[2014.12.26 00:48:39 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\Gyazo
[2012.12.30 15:07:05 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\iFunbox_UserCache
[2012.07.23 16:23:44 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\Leadertech
[2014.09.14 10:19:12 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\library_dir
[2014.11.22 14:49:54 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\LolClient
[2013.05.18 13:55:16 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\LucasArts
[2014.07.23 11:16:33 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\MotioninJoy
[2013.11.30 19:26:20 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\openvr
[2013.01.06 16:58:46 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\ProtectDISC
[2012.12.02 10:53:32 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\PunkBuster
[2014.09.15 20:11:23 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\Raptr
[2014.11.22 01:04:52 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\Riot Games
[2014.06.01 12:44:59 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\Runscanner.net
[2015.03.12 23:39:23 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\Seznam.cz
[2013.08.11 16:43:26 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\SpinTires
[2013.05.18 18:38:39 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\Sports Interactive
[2014.09.20 17:31:59 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\The Creative Assembly
[2012.12.01 21:47:20 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\Ubisoft
[2015.04.12 20:40:37 | 000,000,000 | ---D | M] -- C:\Users\šalomoun\AppData\Roaming\Wargaming.net

========== Purity Check ==========



< End of report >

[keslíček]

OTL Extras logfile created on: 28.4.2015 12:07:16 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\šalomoun\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,25 Gb Total Physical Memory | 2,42 Gb Available Physical Memory | 74,55% Memory free
6,50 Gb Paging File | 5,61 Gb Available in Paging File | 86,28% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 143,14 Gb Total Space | 28,62 Gb Free Space | 20,00% Space Free | Partition Type: NTFS

Computer Name: ŠALOMOUN-PC | User Name: šalomoun | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\PROGRA~1\MICROS~2\Office14\msohtmed.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DisableUnicastResponsesToMulticastBroadcast" = 0
"DoNotAllowExceptions" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{08F03F22-9697-4BDD-8AB6-B5CD7C0EE7DE}" = rport=2869 | protocol=6 | dir=out | app=system |
"{0A357BED-A011-47BA-AE8F-EF94ACC90F24}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{0EAECD60-5127-411A-BED6-2E5FB2980459}" = lport=24634 | protocol=6 | dir=in | name=bitcomet 24634 tcp |
"{16AA1868-E3D8-4933-AF62-299B824CEB7F}" = lport=7852 | protocol=6 | dir=in | name=war thunder |
"{172100C8-0375-426B-9233-308780480B56}" = lport=12399 | protocol=17 | dir=in | name=bitcomet 12399 udp |
"{1AD632A4-E330-47B1-9854-E6AAA222888C}" = lport=27099 | protocol=17 | dir=in | name=bitcomet 27099 udp |
"{1B1FDC13-0AAE-40D3-8CEB-66981A65EBC4}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{1E1EB8FC-FF26-4F44-ACEA-92ADB9052F3B}" = lport=22156 | protocol=17 | dir=in | name=bitcomet 22156 udp |
"{25C4744A-5C0A-46AF-B18E-49D5703F4999}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{30A5403C-CA95-4F06-A43F-34D2B741A0C6}" = lport=17850 | protocol=6 | dir=in | name=bitcomet 17850 tcp |
"{3391C87D-EA4A-4CFC-B7B3-4D90883C6199}" = lport=443 | protocol=6 | dir=in | name=war thunder |
"{36C3E1B0-CED1-4BAD-A2E0-EFB79EFB7187}" = lport=24634 | protocol=17 | dir=in | name=bitcomet 24634 udp |
"{42C7315A-AF87-431A-8052-685A104A11D8}" = lport=20994 | protocol=6 | dir=in | name=bitcomet 20994 tcp |
"{4BCB884D-B3C5-40BE-B20F-28C194458469}" = lport=20010 | protocol=17 | dir=in | name=war thunder |
"{4C9C3AE2-C49B-4E4E-981F-A43D5DA80EF4}" = lport=26029 | protocol=6 | dir=in | name=bitcomet 26029 tcp |
"{4C9D1DD2-FAC9-4990-B1F9-BEB4BD7C962F}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=%systemroot%\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe |
"{506C8322-8D0E-4C1B-AAED-958607AB6BE1}" = lport=7850 | protocol=6 | dir=in | name=war thunder |
"{537F8E6C-9B65-4A46-A951-4281FE8CCAFE}" = lport=27018 | protocol=6 | dir=in | name=bitcomet 27018 tcp |
"{55D57169-ECE3-4BE3-995C-631A27B173DE}" = lport=18368 | protocol=17 | dir=in | name=bitcomet 18368 udp |
"{56DEC39F-7FC7-4AED-B8C8-84649800F6A9}" = lport=27018 | protocol=17 | dir=in | name=bitcomet 27018 udp |
"{59E042FF-28EC-4E81-A4D9-58CA21B3601F}" = lport=20800 | protocol=17 | dir=in | name=bitcomet 20800 udp |
"{5D6EEFAE-7E9D-4582-A7F4-3BE96DCC61A5}" = lport=20443 | protocol=6 | dir=in | name=war thunder |
"{65553906-E9FE-46C6-A742-1BE52B3284DB}" = lport=17197 | protocol=17 | dir=in | name=bitcomet 17197 udp |
"{667602CF-2858-47EF-A73A-BED7D02141AF}" = lport=17850 | protocol=17 | dir=in | name=bitcomet 17850 udp |
"{684FFD12-B6BC-45E0-A90C-589454C0407D}" = lport=7884 | protocol=17 | dir=in | name=bitcomet 7884 udp |
"{6C4BE822-7C68-42EF-B7AC-FD32E571DDC6}" = lport=8090 | protocol=6 | dir=in | name=war thunder |
"{6F29969B-1AC7-43F0-AB32-3054747E0FF3}" = lport=7853 | protocol=6 | dir=in | name=war thunder |
"{719B1ACE-6BE8-4678-A06C-3FEEFA85CB45}" = lport=18368 | protocol=6 | dir=in | name=bitcomet 18368 tcp |
"{72D0D212-3AA6-4344-8593-896CFAA62942}" = lport=17197 | protocol=6 | dir=in | name=bitcomet 17197 tcp |
"{76B3D70E-9EBC-4F2A-8F31-E34867AB615F}" = lport=27022 | protocol=6 | dir=in | name=war thunder |
"{79AF1507-399D-4A43-A0D7-6B3D297CFBC0}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{7AB0AC9D-70F8-43F3-82DD-0902DCD93D51}" = lport=33333 | protocol=6 | dir=in | name=war thunder |
"{80C1DFE8-CB08-44A4-ADE1-177BCCCC7A86}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{83BC5FD6-8035-41A2-93EF-979B7AB9D284}" = lport=10683 | protocol=6 | dir=in | name=bitcomet 10683 tcp |
"{87F7E68A-F7EB-4FF1-A800-115C327CC65A}" = lport=7884 | protocol=6 | dir=in | name=bitcomet 7884 tcp |
"{96A50034-7135-4AA9-AD42-C0BEC82EEB72}" = lport=25443 | protocol=17 | dir=in | name=bitcomet 25443 udp |
"{9F2E17AA-66FF-482D-B2E1-4AD0407988E7}" = lport=20800 | protocol=6 | dir=in | name=bitcomet 20800 tcp |
"{A1C20467-A869-41E9-86A7-5CBD583F401E}" = lport=10683 | protocol=17 | dir=in | name=bitcomet 10683 udp |
"{A814BDDA-C2A4-4B9E-A671-4EF279BCAB00}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{A84ACBEC-4402-412D-B1B3-2390B43A7CE9}" = lport=25298 | protocol=6 | dir=in | name=bitcomet 25298 tcp |
"{A9F6724A-1FB4-4EAC-955D-D343AD3ACE9E}" = lport=25443 | protocol=6 | dir=in | name=bitcomet 25443 tcp |
"{AC4BB64F-1AC5-4FBF-98EA-F7649D2F84D2}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{AC624DA1-71B0-41C7-B030-B8C5ED25415B}" = lport=2869 | protocol=6 | dir=in | app=system |
"{AD4276F0-54FC-4993-9AFD-C58AC660A70D}" = lport=20994 | protocol=17 | dir=in | name=bitcomet 20994 udp |
"{AE3DEFFA-0E96-47FB-B502-0F62A8AD1303}" = lport=25298 | protocol=17 | dir=in | name=bitcomet 25298 udp |
"{B2645055-FF28-4B92-AC7D-15D992755ECF}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{B3FB4F5B-8512-4EC7-80BF-D4F96D82ACBD}" = lport=12790 | protocol=17 | dir=in | name=bitcomet 12790 udp |
"{BC9A4E59-44E8-4244-8EA7-77AE7056D1C0}" = lport=3724 | protocol=6 | dir=in | name=blizzard downloader: 3724 |
"{C0B9CD7D-9D98-4117-A2BA-258FE9141D69}" = lport=22156 | protocol=6 | dir=in | name=bitcomet 22156 tcp |
"{CBF03D28-BB81-4060-81D4-6A356070480E}" = lport=3478 | protocol=17 | dir=in | name=war thunder |
"{CCFF0D9C-4483-4B16-854F-BB0165011326}" = lport=26029 | protocol=17 | dir=in | name=bitcomet 26029 udp |
"{D2A200C3-0042-41DC-9628-3BB6EA89B377}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{DA1EA3CE-702D-4FBA-BBEC-363908E043E7}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\google\chrome\application\chrome.exe |
"{DA9D4068-05EC-458D-83F5-80824052C34C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{DE7CF3C9-5EA3-4084-BEEC-C17FD1C5629B}" = lport=80 | protocol=6 | dir=in | name=war thunder |
"{E0A7DC06-70FC-4151-BA19-6486EE30B355}" = lport=6881 | protocol=6 | dir=in | name=war thunder |
"{E2D4C5BC-3B74-491E-B4D5-FC8F120C131C}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe |
"{EB5DBDCB-20BF-47F0-9CC8-2744B164EABB}" = lport=27099 | protocol=6 | dir=in | name=bitcomet 27099 tcp |
"{ED64B97A-B022-4078-816D-2D8886F9F7A2}" = lport=12399 | protocol=6 | dir=in | name=bitcomet 12399 tcp |
"{F20E8E2C-6A8F-4881-B451-70D3E415F324}" = lport=12790 | protocol=6 | dir=in | name=bitcomet 12790 tcp |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02A1BE7A-7255-4308-9974-C47228B58A1F}" = protocol=17 | dir=in | app=c:\program files\goforfiles\goforfilesdl.exe |
"{036BCDA6-FC18-4DA2-8F1E-9EBE93A381B6}" = protocol=6 | dir=in | app=c:\program files\expressfiles\expressfiles.exe |
"{04F3CC05-8878-49DC-801F-9C0A830E7F1B}" = protocol=6 | dir=in | app=c:\program files\heroes of the storm\versions\base34190\heroesofthestorm.exe |
"{05AFC380-8F74-4B83-959B-F2B701612435}" = protocol=6 | dir=in | app=c:\program files\expressfiles\expressdl.exe |
"{0672A6FA-99E0-4C96-AF74-327DDCCD4650}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe |
"{070DC354-0572-4584-A026-DBA82E3F0756}" = protocol=6 | dir=in | app=c:\program files\heroes of the storm\versions\base34659\heroesofthestorm.exe |
"{08DA73A5-80D7-4680-BD99-088FCA1CA72B}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{0D3F8A89-2FF2-4B46-A7E2-35219F05569F}" = protocol=17 | dir=in | app=c:\program files\diablo iii\diablo iii.exe |
"{0DAA6FF4-2930-4476-9F00-B2E89F516473}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3634\agent.exe |
"{11343C75-A031-435D-909E-E31FCAB5FDB5}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{12FF4425-D392-4873-B592-F9D20D7CB8A6}" = protocol=17 | dir=in | app=c:\program files\ubisoft\assassin's creed revelations\acrmp.exe |
"{1803A63F-21D0-408C-BD02-644DF9FB574B}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe |
"{1AF4A98F-E096-442C-9632-D13DF9094F57}" = protocol=17 | dir=in | app=c:\program files\konami\pro evolution soccer 2009\pes2009.exe |
"{23DE5D4E-9864-4D69-8EB8-D286D3EDE0F1}" = protocol=17 | dir=in | app=c:\users\šalomoun\downloads\solutoinstaller.exe |
"{278E536B-23BE-4799-8D7C-B1E73B329D2D}" = dir=in | app=c:\program files\protected search\protectedsearch.exe |
"{2F2CE4DF-1DF0-48E4-B032-F5A08571306A}" = protocol=6 | dir=in | app=c:\program files\goforfiles\goforfilesdl.exe |
"{35559375-7A76-42CE-BBE0-26BC6C5C1BDD}" = protocol=6 | dir=in | app=c:\program files\diablo iii\diablo iii.exe |
"{36DF919F-C604-450D-9F43-00435042F37A}" = protocol=6 | dir=in | app=c:\program files\ubisoft\assassin's creed revelations\acrmp.exe |
"{3C4818B7-1814-4FB1-AD74-7C1EC5C6EFCF}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3634\agent.exe |
"{3DF6D9BC-A05D-482B-824A-3C827168ED11}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{4012A84A-C97A-41CD-80D3-DE53FCD8E336}" = protocol=17 | dir=in | app=c:\users\šalomoun\appdata\local\temp\sys.exe |
"{434D1DED-1E8E-49F2-9155-8F3215997778}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3689\agent.exe |
"{4379E4DB-D756-4550-8E91-FE9A63C3FFBC}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3688\agent.exe |
"{45428BBC-9F93-4C1F-A214-67361035029A}" = protocol=17 | dir=in | app=c:\program files\expressfiles\expressfiles.exe |
"{48C4EA80-8348-4011-9150-E8A977B66556}" = protocol=17 | dir=in | app=c:\program files\heroes of the storm\versions\base34190\heroesofthestorm.exe |
"{5BCF48DF-BD25-43E4-8E90-58782A9856B8}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\torchlight ii\torchlight2.exe |
"{65EA9ECD-315A-47F6-847C-CE895904AB10}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3689\agent.exe |
"{69BFA8AF-9AC0-4683-BA0E-435845EF8A2B}" = protocol=17 | dir=in | app=c:\program files\ubisoft\assassin's creed brotherhood\acbmp.exe |
"{6DD44578-8B11-41D1-A397-F4E0B31D4E1E}" = protocol=17 | dir=in | app=c:\program files\rockstar games\rockstar games social club\rgsclauncher.exe |
"{700DB369-33F7-4BD7-A998-558518DEEF56}" = protocol=6 | dir=in | app=c:\program files\avast software\avast\ng\vbox\aswfe.exe |
"{706344F8-6707-406D-957E-4AD73DB3D2E4}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{75B715B2-155B-4305-8D92-6D686A871E2C}" = protocol=6 | dir=in | app=c:\program files\raptr\raptr.exe |
"{776749B3-949C-48A8-B42C-F15CC71FBE5C}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{78F0498B-B2F2-45CB-A4C5-2542B4CC7E2E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3669\agent.exe |
"{79E55151-9810-4F6F-80A9-AF4050FA5A51}" = protocol=6 | dir=in | app=c:\program files\rockstar games\rockstar games social club\rgsclauncher.exe |
"{7B0A1CD4-F725-4D68-B664-EE96077C07C9}" = protocol=17 | dir=in | app=c:\program files\raptr\raptr_im.exe |
"{94CBC23A-E260-4324-8FD6-DAD73CE1230C}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{9B90ABD2-BDE4-4A39-99A8-857E9DE6FCE1}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{9C3981A7-D54F-4CDB-BC31-886671C84922}" = protocol=6 | dir=in | app=c:\program files\konami\pro evolution soccer 2009\pes2009.exe |
"{A31A26E1-E56F-47F9-8032-45B3F327E5EA}" = protocol=6 | dir=in | app=c:\program files\heroes of the storm\versions\base34846\heroesofthestorm.exe |
"{A4E3FF96-5E49-4AC9-8BC0-299CBA5435E7}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{A8531098-B64E-4F69-95D3-922DE889C7E3}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\torchlight ii\torchlight2.exe |
"{ADF2B6C5-E51F-4DC7-9B49-7BEEEA00E461}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3669\agent.exe |
"{B6929502-5276-47AB-A4E9-C8A7115F829E}" = protocol=17 | dir=in | app=c:\program files\heroes of the storm\versions\base34846\heroesofthestorm.exe |
"{BE9BBC03-B137-440B-9746-79581911E5DC}" = protocol=6 | dir=in | app=c:\program files\battle.net\battle.net.exe |
"{BFB15425-094E-4A5B-BA68-5E449250E375}" = protocol=6 | dir=in | app=c:\users\šalomoun\appdata\local\temp\sys.exe |
"{C0582CF8-08FE-4DD6-BD98-56F935ABF1AD}" = dir=in | app=c:\users\šalomoun\appdata\local\torch\plugins\torrent\torchtorrent.exe |
"{C7EFD934-4BA0-4434-A43D-93A636CAF4F8}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{CA0979B1-364E-4D7C-A0A3-2D8744CACB3D}" = protocol=17 | dir=in | app=c:\program files\raptr\raptr.exe |
"{D156E78E-1388-41B9-AAB6-F2F2804ED531}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\counter-strike global offensive\csgo.exe |
"{D73DA24D-EC8B-4030-8F06-9F46B97E842A}" = protocol=6 | dir=in | app=c:\program files\goforfiles\goforfiles.exe |
"{D9EC3FF9-06CD-40F4-8AAA-B091A96AF47C}" = protocol=6 | dir=in | app=c:\program files\raptr\raptr_im.exe |
"{DA212780-E373-4A44-9DEA-863E91FBD106}" = protocol=6 | dir=in | app=c:\program files\steam\bin\steamwebhelper.exe |
"{DF9D488A-4A98-42D3-AF52-A59FC3FF3717}" = protocol=6 | dir=in | app=c:\program files\konami\pro evolution soccer 2013\pes2013.exe |
"{E021EB74-D1ED-4186-BC09-2705B0ECB62A}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-x.x.x.x-4.0.0.12911-eu-downloader.exe |
"{E455899C-E2A7-4A1B-BC85-3C7B181AAE4D}" = protocol=17 | dir=in | app=c:\program files\battle.net\battle.net.exe |
"{E58FC33F-399C-462C-9A1E-A3E14B09A92C}" = protocol=6 | dir=in | app=c:\program files\ubisoft\assassin's creed brotherhood\acbmp.exe |
"{E77757DF-4854-43C2-B6F1-5CEFF2E43841}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 |
"{E93A260F-0B5E-4400-8109-60751C317880}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3688\agent.exe |
"{E9FAEDF1-CB94-4D8F-A813-D1C9C136EE84}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{EA3C76DB-2760-4752-BA51-71699AE11F95}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{EA68E875-8D83-4BC5-857A-1391D1F516B2}" = protocol=17 | dir=in | app=c:\program files\expressfiles\expressdl.exe |
"{EB49289F-758B-45C2-A812-A42304DB6140}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3715\agent.exe |
"{EB5C5733-D8A1-4A63-BFA7-A3827663F43C}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-x.x.x.x-4.0.0.12911-eu-downloader.exe |
"{EC23E240-0228-4307-BDCC-C663DE927DBB}" = protocol=17 | dir=in | app=c:\program files\avast software\avast\ng\vbox\aswfe.exe |
"{EEBED405-2627-4BDF-999B-F8BAF1DCC655}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3715\agent.exe |
"{F144FA6A-8FFC-4590-8B9A-0DF2D6052D80}" = protocol=6 | dir=in | app=c:\users\šalomoun\downloads\solutoinstaller.exe |
"{F1EC9847-1B02-464A-BB39-B7490E363BAB}" = protocol=17 | dir=in | app=c:\program files\heroes of the storm\versions\base34659\heroesofthestorm.exe |
"{F3855063-1DCA-4B27-A48C-AF746778C13A}" = protocol=17 | dir=in | app=c:\program files\steam\bin\steamwebhelper.exe |
"{F8168BC5-211D-4ACD-A616-5E51724B6430}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{F86825AA-0AB7-4B0D-97ED-3791A7BA813D}" = protocol=17 | dir=in | app=c:\program files\konami\pro evolution soccer 2013\pes2013.exe |
"{F86CE05A-3DFE-401D-B3C4-8B8D87DCC54C}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{FEA1B46E-381D-4718-82C7-20B64255E991}" = protocol=17 | dir=in | app=c:\program files\goforfiles\goforfiles.exe |
"TCP Query User{040E0019-98D2-49FC-8B7E-1EAAD2D00FC3}C:\games\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe |
"TCP Query User{0BEA480E-17D8-4268-BCBA-5ED20A207CCB}C:\users\šalomoun\desktop\fifa 2003\fifa2003.exe" = protocol=6 | dir=in | app=c:\users\šalomoun\desktop\fifa 2003\fifa2003.exe |
"TCP Query User{19D9A2EA-7D9E-48C2-BABE-A45A9F6EBBC4}C:\program files\steam\steamapps\madl851\team fortress 2\hl2.exe" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\madl851\team fortress 2\hl2.exe |
"TCP Query User{21E255E3-CF23-46A4-A741-C69684E1152D}C:\program files\fifa 12\game\fifa.exe" = protocol=6 | dir=in | app=c:\program files\fifa 12\game\fifa.exe |
"TCP Query User{3666A441-8A54-405D-9419-E6B99CEF458A}C:\program files\ea sports\fifa 11\game\fifa.exe" = protocol=6 | dir=in | app=c:\program files\ea sports\fifa 11\game\fifa.exe |
"TCP Query User{38375A7B-9404-470C-A040-D6EC4527D31A}C:\program files\ea sports\fifa 11 demo\game\fifa.exe" = protocol=6 | dir=in | app=c:\program files\ea sports\fifa 11 demo\game\fifa.exe |
"TCP Query User{56712018-A277-46C3-BEBA-34C23DB3D7C1}C:\users\šalomoun\downloads\diablo-iii-8370-engb-installer-downloader.exe" = protocol=6 | dir=in | app=c:\users\šalomoun\downloads\diablo-iii-8370-engb-installer-downloader.exe |
"TCP Query User{5C76E690-8B94-4F89-B9D9-DAF6778CE203}C:\games\world_of_tanks\worldoftanks.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\worldoftanks.exe |
"TCP Query User{62E6E408-F855-4A6E-A826-3E1D6B2D2162}C:\program files\orcs must die 2\build\release\orcsmustdie2.exe" = protocol=6 | dir=in | app=c:\program files\orcs must die 2\build\release\orcsmustdie2.exe |
"TCP Query User{69189BDF-3C8E-4662-ACDC-456EED9B4B6E}C:\users\šalomoun\appdata\local\temp\gw2.exe" = protocol=6 | dir=in | app=c:\users\šalomoun\appdata\local\temp\gw2.exe |
"TCP Query User{71D50EFF-C6DC-4613-86BC-E38327254AAD}C:\users\šalomoun\gsplay\csko\hl.exe" = protocol=6 | dir=in | app=c:\users\šalomoun\gsplay\csko\hl.exe |
"TCP Query User{A093F181-4769-439F-9177-2333EFD3B751}C:\program files\call of duty black ops 2\t6sp.exe" = protocol=6 | dir=in | app=c:\program files\call of duty black ops 2\t6sp.exe |
"TCP Query User{A1A5A027-9BA0-4618-A274-4B2B2313BE9A}C:\users\šalomoun\desktop\wow cata\backgrounddownloader.exe" = protocol=6 | dir=in | app=c:\users\šalomoun\desktop\wow cata\backgrounddownloader.exe |
"TCP Query User{A29BA2B2-02B2-4722-9412-8D5FB2937361}C:\program files\ea sports\nhl 09\nhl2009.exe" = protocol=6 | dir=in | app=c:\program files\ea sports\nhl 09\nhl2009.exe |
"TCP Query User{B54F06DC-8DC3-42D1-A838-157C8A8372CA}C:\program files\ea games\battlefield play4free\bfp4f.exe" = protocol=6 | dir=in | app=c:\program files\ea games\battlefield play4free\bfp4f.exe |
"TCP Query User{B6424C69-5F4D-43D1-BCE1-5AF101853901}C:\program files\thq\saints row the third\saintsrowthethird.exe" = protocol=6 | dir=in | app=c:\program files\thq\saints row the third\saintsrowthethird.exe |
"TCP Query User{B8EC4E03-6D86-419F-A3B9-D537146F3B26}C:\program files\activision\call of duty - black ops\blackops.exe" = protocol=6 | dir=in | app=c:\program files\activision\call of duty - black ops\blackops.exe |
"TCP Query User{D3776427-EC36-41ED-8759-7781F038DD0E}C:\program files\guild wars 2\gw2.exe" = protocol=6 | dir=in | app=c:\program files\guild wars 2\gw2.exe |
"TCP Query User{ED62532B-2EDF-4856-994E-CFCD1A7ABFEB}C:\program files\counter-strike 1.6\hl.exe" = protocol=6 | dir=in | app=c:\program files\counter-strike 1.6\hl.exe |
"UDP Query User{069A5A77-18D8-48B1-A975-741BE98BA6E4}C:\program files\call of duty black ops 2\t6sp.exe" = protocol=17 | dir=in | app=c:\program files\call of duty black ops 2\t6sp.exe |
"UDP Query User{08D3C7DA-ED73-4992-92ED-590FA6284C40}C:\program files\thq\saints row the third\saintsrowthethird.exe" = protocol=17 | dir=in | app=c:\program files\thq\saints row the third\saintsrowthethird.exe |
"UDP Query User{101B955E-6C88-487F-8641-C52CA1C6A938}C:\program files\steam\steamapps\madl851\team fortress 2\hl2.exe" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\madl851\team fortress 2\hl2.exe |
"UDP Query User{22FE3DD6-F45E-41F0-A414-BF68F1B1FD57}C:\users\šalomoun\appdata\local\temp\gw2.exe" = protocol=17 | dir=in | app=c:\users\šalomoun\appdata\local\temp\gw2.exe |
"UDP Query User{2CEB1C2E-1796-4158-AE1D-A453097A25AF}C:\program files\ea sports\nhl 09\nhl2009.exe" = protocol=17 | dir=in | app=c:\program files\ea sports\nhl 09\nhl2009.exe |
"UDP Query User{2F5D9079-774F-4777-8915-1B765E5AC8AC}C:\program files\ea sports\fifa 11 demo\game\fifa.exe" = protocol=17 | dir=in | app=c:\program files\ea sports\fifa 11 demo\game\fifa.exe |
"UDP Query User{348125BF-FF57-48C4-928A-8834255E4A8E}C:\program files\counter-strike 1.6\hl.exe" = protocol=17 | dir=in | app=c:\program files\counter-strike 1.6\hl.exe |
"UDP Query User{42E539C2-5F0E-4DE0-8CF3-88521DAF25F0}C:\users\šalomoun\downloads\diablo-iii-8370-engb-installer-downloader.exe" = protocol=17 | dir=in | app=c:\users\šalomoun\downloads\diablo-iii-8370-engb-installer-downloader.exe |
"UDP Query User{53842AD8-1A9A-441F-A6E8-C619B7EDB3DD}C:\users\šalomoun\desktop\wow cata\backgrounddownloader.exe" = protocol=17 | dir=in | app=c:\users\šalomoun\desktop\wow cata\backgrounddownloader.exe |
"UDP Query User{66C410A2-F71B-470F-B2DE-273853C49101}C:\program files\ea sports\fifa 11\game\fifa.exe" = protocol=17 | dir=in | app=c:\program files\ea sports\fifa 11\game\fifa.exe |
"UDP Query User{688B5A01-2881-4388-888E-5D953ADE0906}C:\program files\activision\call of duty - black ops\blackops.exe" = protocol=17 | dir=in | app=c:\program files\activision\call of duty - black ops\blackops.exe |
"UDP Query User{6D21A4EA-8621-4E1D-93E0-B0025A8DB292}C:\games\world_of_tanks\worldoftanks.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\worldoftanks.exe |
"UDP Query User{732CF3A4-8421-471E-9734-974A5D00DEDE}C:\program files\orcs must die 2\build\release\orcsmustdie2.exe" = protocol=17 | dir=in | app=c:\program files\orcs must die 2\build\release\orcsmustdie2.exe |
"UDP Query User{8F888284-B848-432E-A38E-5A09920F478D}C:\users\šalomoun\desktop\fifa 2003\fifa2003.exe" = protocol=17 | dir=in | app=c:\users\šalomoun\desktop\fifa 2003\fifa2003.exe |
"UDP Query User{B6216394-9235-4CC0-AA30-31ACCFA78618}C:\program files\ea games\battlefield play4free\bfp4f.exe" = protocol=17 | dir=in | app=c:\program files\ea games\battlefield play4free\bfp4f.exe |
"UDP Query User{D9585AE5-B5FA-47A3-B945-45F976B94EB7}C:\program files\guild wars 2\gw2.exe" = protocol=17 | dir=in | app=c:\program files\guild wars 2\gw2.exe |
"UDP Query User{E2FFE681-678D-41C3-83C8-6C9E8C3FFCF2}C:\games\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe |
"UDP Query User{F3C6535C-61EC-442C-B6E9-968BF17D248B}C:\program files\fifa 12\game\fifa.exe" = protocol=17 | dir=in | app=c:\program files\fifa 12\game\fifa.exe |
"UDP Query User{F6688D13-1E65-4DCA-8937-897D75740C63}C:\users\šalomoun\gsplay\csko\hl.exe" = protocol=17 | dir=in | app=c:\users\šalomoun\gsplay\csko\hl.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{031F80EB-1FE5-45EF-9DE2-E2F5AF01259F}" = CCC Help Spanish
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B15A8C3-3B8A-F229-A880-82EA62908425}" = CCC Help Dutch
"{10EDA005-3CCE-56EA-B9FE-FCE959672BB5}" = HydraVision
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{1938AE15-F03F-CF9A-825E-BA016936C5F8}" = AMD Media Foundation Decoders
"{1A6752E1-966B-9D1F-F6B7-DDBCA6FC87ED}" = CCC Help Russian
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2058DA53-D5F2-D8D9-7325-39B0E367D1E1}" = CCC Help Swedish
"{2090B6D0-E025-5A67-9838-8F1D5768E643}" = CCC Help Chinese Standard
"{25A3B953-1423-3F15-640E-B620DD0F419A}" = Catalyst Control Center - Branding
"{26A24AE4-039D-4CA4-87B4-2F83217010FF}" = Java 7 Update 10
"{2AD4FF67-43E9-77AD-D90C-584F950E2D12}" = CCC Help French
"{2CC34925-D47D-BD10-AA1E-FAA76F3B5D82}" = AMD Wireless Display v3.0
"{3A577334-7C90-55BC-1878-F5862FA268B2}" = CCC Help Korean
"{3BF289E3-933B-F421-3B59-F6BB0D285B09}" = CCC Help Hungarian
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CB6BA0C-6BC5-E543-221A-AA4DEBB6F4B5}" = CCC Help Polish
"{430E2D32-6EA9-E6E4-80A1-84047694A45B}" = CCC Help Czech
"{459699C3-9430-4381-964B-4248D87B49F9}" = Apple Mobile Device Support
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A6A8D33-09CD-FD44-4BF0-999E8A6E93C8}" = CCC Help Italian
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4F2CE68F-EDBB-4592-BF07-5AC930A51029}" = Nero 7 Ultra Edition
"{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1" = MSI Live Update
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5CF32D71-FF50-B61A-5EA1-70EA6D3A0B21}" = AMD Drag and Drop Transcoding
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 3.0.7
"{69438B37-FC57-40E1-BB40-C4C64AC98305}" = AMD OverDrive Beta
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6EBDE2A2-0CFB-9134-A859-68A0002B3FA6}" = CCC Help Thai
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{769E98DC-2BB0-83A7-51C9-306F30232345}" = Catalyst Control Center Graphics Previews Common
"{77A776C4-D10F-416D-88F0-53F2D9DCD9B3}" = Microsoft Security Client
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7B5AA67E-FEA0-40BB-BAB5-CA56645A589C}" = NVIDIA PhysX
"{80EE9168-BB59-4F87-BF1A-57C137EAF714}" = LogMeIn Hamachi
"{80F52BC0-7AC5-17C3-F34B-8613E213D44D}" = AMD Accelerated Video Transcoding
"{8181B50E-0E33-DE07-AAB2-E71BBBDBF288}" = CCC Help Portuguese
"{83FB054C-7DA5-1C76-BFB2-423426DC35BB}" = AMD Catalyst Control Center
"{859B9BCA-5376-4566-9F88-C6C9DAA7A925}" = Microsoft Security Client CS-CZ Language Pack
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A640069-9784-701E-AC8E-84F62C42D1A3}" = CCC Help English
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2010
"{90140000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2010
"{90140000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2010
"{90140000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2010
"{90140000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2010
"{90140000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2010
"{90140000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2010
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2010
"{90140000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2010
"{90140000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2010
"{90140000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2010
"{90140000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2010
"{90140000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2010
"{91140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{93098E43-2743-1551-447F-2699E9591E9C}" = CCC Help Danish
"{99415B03-525E-3FEA-2A60-359FD6BCD368}" = ccc-utility
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A2DE62D8-EF1B-36CB-B461-B1E221ED8608}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{A3703A3B-FDCF-4349-4B2E-A189A2B90B51}" = CCC Help Chinese Traditional
"{A619A488-A4BA-F2A0-72FA-4C484B93DC0F}" = CCC Help Greek
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-0804-1033-1959-001802114130}" = Adobe Refresh Manager
"{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.10)
"{B0261E53-B6F1-474A-864B-E7C3CBF468E0}" = iTunes
"{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B416A23D-C2BD-4956-8BAE-5C3BAFF1AC1E}" = NetworkGenie
"{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
"{C4799AAA-CE52-D2F1-63C8-E6D5106C78E0}" = CCC Help Norwegian
"{C6182116-5F2D-9949-B42B-06073E86A98A}" = CCC Help German
"{CC6C7F05-AF23-65BD-702D-705EAB723578}" = CCC Help Japanese
"{CCE825DB-347A-4004-A186-5F4A6FDD8547}" = Apple Application Support
"{D5B7F1A3-2CA6-4C5C-EFB6-4AA5772F5310}" = CCC Help Turkish
"{D7EC535B-4E29-A15F-A883-A561F39940E3}" = AMD Wireless Display v3.0
"{D9B5FC5B-815A-4EE9-B7BF-08165F2A6A36}_is1" = BIOS Code Unlocked Technology
"{DBA6B3EF-A8C0-4EB2-9554-3A7879838580}" = Catalyst Control Center Localization All
"{DC7723BE-A2BB-58A0-4820-5630F9B82198}" = AMD Catalyst Install Manager
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F2B5A2A7-2DF9-4361-8BD5-362714528B51}" = NHL® 09
"{F4A6308C-55E6-57DF-95BB-AEEF374B469A}" = CCC Help Finnish
"{F543B0F9-D1F9-25D1-993C-8430BEC9D889}" = Catalyst Control Center InstallProxy
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"{FC41E924-9AF0-8BD3-2DB0-A688628AF474}" = AMD Fuel
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player ActiveX" = Adobe Flash Player 17 ActiveX
"Adobe Flash Player NPAPI" = Adobe Flash Player 17 NPAPI
"Adobe Shockwave Player" = Adobe Shockwave Player
"Afterburner" = MSI Afterburner 3.0.1
"Avast" = Avast Internet Security
"Battle.net" = Battle.net
"C-TECH AKANTHA ULTIMATE GAMING SOFTWAREC-TECH AKANTHA ULTIMATE GAMING SOFTWARE" = C-TECH AKANTHA ULTIMATE GAMING SOFTWARE
"Diablo III" = Diablo III
"Fraps" = Fraps
"GOM Player" = GOM Player
"Google Chrome" = Google Chrome
"Heroes of the Storm" = Heroes of the Storm
"Hi Suite" = HiSuite
"LogMeIn Hamachi" = LogMeIn Hamachi
"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware verze 2.0.4.1028
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010
"Raptr" = Raptr
"Revo Uninstaller" = Revo Uninstaller 1.95
"RTSS" = RivaTuner Statistics Server 6.1.2
"Steam" = Steam
"Steam App 730" = Counter-Strike: Global Offensive
"WinRAR archiver" = WinRAR 4.01 (32-bit)

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1" = World of Tanks

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 24.4.2015 10:58:56 | Computer Name = šalomoun-PC | Source = VSS | ID = 8194
Description =

Error - 26.4.2015 12:28:31 | Computer Name = šalomoun-PC | Source = VSS | ID = 18
Description =

Error - 26.4.2015 12:28:31 | Computer Name = šalomoun-PC | Source = VSS | ID = 8193
Description =

Error - 26.4.2015 12:28:31 | Computer Name = šalomoun-PC | Source = System Restore | ID = 8193
Description =

Error - 27.4.2015 15:31:53 | Computer Name = šalomoun-PC | Source = VSS | ID = 8194
Description =

[ System Events ]
Error - 26.4.2015 12:38:39 | Computer Name = šalomoun-PC | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: cdrom

Error - 27.4.2015 11:02:18 | Computer Name = šalomoun-PC | Source = Service Control Manager | ID = 7000
Description = Služba Avast Firewall neuspěla při spuštění v důsledku následující
chyby: %%2

Error - 27.4.2015 11:02:29 | Computer Name = šalomoun-PC | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: cdrom

Error - 27.4.2015 11:19:27 | Computer Name = šalomoun-PC | Source = Service Control Manager | ID = 7000
Description = Služba Avast Firewall neuspěla při spuštění v důsledku následující
chyby: %%2

Error - 27.4.2015 11:19:41 | Computer Name = šalomoun-PC | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: cdrom

Error - 27.4.2015 13:27:32 | Computer Name = šalomoun-PC | Source = Service Control Manager | ID = 7000
Description = Služba Avast Firewall neuspěla při spuštění v důsledku následující
chyby: %%2

Error - 27.4.2015 13:27:41 | Computer Name = šalomoun-PC | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: cdrom

Error - 28.4.2015 5:37:26 | Computer Name = šalomoun-PC | Source = Service Control Manager | ID = 7000
Description = Služba Avast Firewall neuspěla při spuštění v důsledku následující
chyby: %%2

Error - 28.4.2015 5:38:19 | Computer Name = šalomoun-PC | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: cdrom

Error - 28.4.2015 5:38:30 | Computer Name = šalomoun-PC | Source = ipnathlp | ID = 31004
Description =


< End of report >

[keslíček]

Ted ping ve hre 400 7s lagy

[keslíček]

ve WoT ping max. 52 , takže bude zajimavé kde bude chyba

[Orcus]

OS je legální?

Otestuj na Virustotal tento soubor a dodej odkaz. Pokud by již byl někdy analyzován, dej "Reanalyze".:
C:\Program Files\WinRAR\RarExt.dll

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/opravy do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
SRV - (BRSptSvc) -- C:\ProgramData\BitRaider\BRSptSvc.exe File not found
SRV - (avast! Firewall) -- C:\Program Files\AVAST Software\Avast\afwServ.exe File not found
DRV - (nvvad_WaveExtensible) -- system32\drivers\nvvad32v.sys File not found
DRV - (nvlddmkm) -- system32\DRIVERS\nvlddmkm.sys File not found
DRV - (NVHDA) -- system32\drivers\nvhda32v.sys File not found
DRV - (BRDriver) -- C:\ProgramData\BitRaider\BRDriver.sys File not found
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
E - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}: "URL" = http://www.google.com/search?q={searchTerms}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:34.0.5
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.10.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.10.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2015.04.08 21:47:46 | 000,000,000 | ---D | M]
[2014.09.11 11:22:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\šalomoun\AppData\Roaming\Mozilla\Extensions
[2015.04.17 22:10:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\šalomoun\AppData\Roaming\Mozilla\Firefox\Profiles\x3p6y870.default\extensions
CHR - Extension: No name found = C:\Users\šalomoun\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
CHR - Extension: No name found = C:\Users\šalomoun\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\
CHR - Extension: No name found = C:\Users\šalomoun\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl\0.8.2.0_0\
CHR - Extension: No name found = C:\Users\šalomoun\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2015.421.10417_0\
CHR - Extension: No name found = C:\Users\šalomoun\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105 File not found
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

:Files
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\System32\dllcache\*.tmp
C:\WINDOWS\system32\SET*.tmp
C:\WINDOWS\system32\DUMP*.tmp
c:\windows\Tasks\*.job /s
C:\*.tmp
C:\WINDOWS\System32\drivers\*.tmp
C:\Program Files\*.tmp
C:\Documents and Settings\All Users\Data aplikací\*.tmp

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.

[keslíček]

Předchozí majitel říkal , že systém je legální a samolepka na systémové jednotce je nalepena taky