prosím o kontrolu logu, tečky,čárky nahoře na liště Vyřešeno

[KamilaS]

OTL logfile created on: 29.4.2015 7:36:11 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\PaKSzabovy\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17728)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,24 Gb Total Physical Memory | 1,85 Gb Available Physical Memory | 57,05% Memory free
6,48 Gb Paging File | 4,97 Gb Available in Paging File | 76,61% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 931,41 Gb Total Space | 496,06 Gb Free Space | 53,26% Space Free | Partition Type: NTFS

Computer Name: PAKSZABOVY-PC | User Name: PaKSzabovy | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\PaKSzabovy\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Windows\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Windows\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Windows\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe (Sony)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe ()
PRC - C:\Program Files\Comodo\Dragon\dragon_updater.exe (Comodo Security Solutions, Inc.)
PRC - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation)
PRC - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)


========== Modules (No Company Name) ==========

MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servf73e6522#\11a24c8e5dd833c8de63c6a7ec19ca89\System.ServiceModel.Web.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\f2637acce0919a29bdf53912a359dbf2\System.ServiceModel.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\a596d0525d78281d86abce9c2e6105b5\System.IdentityModel.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web\86dad430179c48c7767b891e31969e4c\System.Web.ni.dll ()
MOD - C:\Program Files\Sony\Sony PC Companion\MExplorer.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\7ab3e68c2e523f60bfc4f222cbd1c1d0\System.Xml.Linq.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\35d3a1b878542de59cb4fc0593992404\System.ServiceModel.Internals.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\f9f13cd8fe1cefaad78579a7c3a41464\System.Runtime.Serialization.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\5e84979fadb7eb63caedea9f4acefcc9\System.Data.Linq.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Compba577418#\cc7bb025e7cca401787cec5893c2cb67\System.ComponentModel.Composition.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\046058f81b039ab6fd839e03e67595f8\SMDiagnostics.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio49d6fefe#\38d6578b4fe29bede85ffff08e3697b6\PresentationFramework-SystemXml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio84a7b877#\4df6733efc348c009a4a6e0adccc42a6\PresentationFramework-SystemData.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio4b37ff64#\9370714a38ae2805434296b26a9f5b14\PresentationFramework-SystemXmlLinq.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\3646375313dd2b8e3afecbf945960336\PresentationFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\006d28e7c86f3e70db90ce06ea2f33fb\PresentationCore.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\8b133e0d94535a7534719f70873ca7fe\System.Xaml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\7147fa233a070283dba824da40089bf1\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio1c9175f8#\7971f3a1c08c4043cf981f457855b4d4\PresentationFramework.Aero.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\94bbd298ec8575f3c6151a59538a109c\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Serv759bfb78#\902843918d037f5f3511d679bf1e2216\System.ServiceProcess.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\5d2c01ae1ca8c40ed74cdfd7b7b7dcb1\System.Data.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\0648dbecb7e3fb9523565107e04a5caf\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\db563d596d76daed04e9b5d25b2f4cb9\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\691c1ad89d16f49d80e84fa06a79089a\System.Core.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\b4c08872c259018b17b2801da33ac80f\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System\17a393b77ae757f0768501fb95ff5af6\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\4c8a153aa66fcd62db6fff269a2ef2b4\System.Numerics.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\ce5f61c5754789df97be8dc991c47d07\mscorlib.ni.dll ()
MOD - C:\Program Files\Sony\Sony PC Companion\PhoneUpdate.dll ()
MOD - C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe ()
MOD - C:\Program Files\Sony\Sony PC Companion\CalEngine.dll ()
MOD - C:\Program Files\Sony\Sony PC Companion\sqlite3.dll ()
MOD - C:\Program Files\Sony\Sony PC Companion\CAgdOutlook.dll ()
MOD - C:\Program Files\Sony\Sony PC Companion\VistaCalendar.dll ()
MOD - C:\Program Files\Sony\Sony PC Companion\TMonitorAPI.dll ()
MOD - C:\Program Files\Sony\Sony PC Companion\CAgdLNotes.dll ()
MOD - C:\Program Files\Sony\Sony PC Companion\Report.dll ()
MOD - C:\Program Files\Sony\Sony PC Companion\VObject.dll ()


========== Services (SafeList) ==========

SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AntiVirSchedulerService) -- C:\Windows\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirWebService) -- C:\Windows\Avira\AntiVir Desktop\avwebg7.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirMailService) -- C:\Windows\Avira\AntiVir Desktop\avmailc7.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Windows\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (Avira.OE.ServiceHost) -- C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe (Avira Operations GmbH & Co. KG)
SRV - (IEEtwCollectorService) -- C:\Windows\System32\IEEtwCollector.exe (Microsoft Corporation)
SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (VsEtwService120) -- C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe (Microsoft Corporation)
SRV - (DragonUpdater) -- C:\Program Files\Comodo\Dragon\dragon_updater.exe (Comodo Security Solutions, Inc.)
SRV - (fussvc) -- C:\Program Files\Windows Kits\8.1\App Certification Kit\fussvc.exe (Microsoft Corporation)
SRV - (Te.Service) -- C:\Program Files\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe (Microsoft Corporation)
SRV - (IAStorDataMgrSvc) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (Sony PC Companion) -- C:\Program Files\Sony\Sony PC Companion\PCCService.exe (Avanquest Software)
SRV - (Stereo Service) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV - (MBAMSwissArmy) -- C:\Windows\system32\drivers\MBAMSwissArmy.sys File not found
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV - (avnetflt) -- C:\Windows\System32\drivers\avnetflt.sys (Avira Operations GmbH & Co. KG)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (avkmgr) -- C:\Windows\System32\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV - (ggsomc) -- C:\Windows\System32\drivers\ggsomc.sys (Sony Mobile Communications)
DRV - (ggflt) -- C:\Windows\System32\drivers\ggflt.sys (Sony Mobile Communications)
DRV - (iaStorF) -- C:\Windows\System32\drivers\iaStorF.sys (Intel Corporation)
DRV - (iaStorA) -- C:\Windows\System32\drivers\iaStorA.sys (Intel Corporation)
DRV - (RTVLANPT) -- C:\Windows\System32\drivers\RtVlan620.sys (Realtek Corporation)
DRV - (RTTEAMPT) -- C:\Windows\System32\drivers\RtTeam620.sys (Realtek Corporation)
DRV - (RtNdPt60) -- C:\Windows\System32\drivers\RtNdPt60.sys (Realtek )
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (NVHDA) -- C:\Windows\System32\drivers\nvhda32v.sys (NVIDIA Corporation)
DRV - (MEI) -- C:\Windows\System32\drivers\HECI.sys (Intel Corporation)
DRV - (Serial) -- C:\Windows\System32\drivers\serial.sys (Brother Industries Ltd.)


========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}: "URL" = http://www.google.com/search?q={searchTerms}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.countryCode: "CZ"
FF - prefs.js..browser.search.isUS: false
FF - prefs.js..browser.search.region: "CZ"
FF - prefs.js..browser.startup.homepage: "http://wol.jw.org/cs/wol/dt/r29/lp-b/2015/4/21"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:37.0.2
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll ()
FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2014.08.12 12:20:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PaKSzabovy\AppData\Roaming\Mozilla\Extensions
[2015.04.17 19:05:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PaKSzabovy\AppData\Roaming\Mozilla\Firefox\Profiles\1slyw161.default\extensions
[2015.04.21 08:46:24 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2015.04.21 08:46:27 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

O1 HOSTS File: ([2015.04.28 12:49:01 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O4 - HKLM..\Run: [avgnt] C:\Windows\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Avira Systray] C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe (Hewlett-Packard)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe (Intel Corporation)
O4 - HKCU..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Sony PC Companion] C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe (Sony)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: disableregistrytools = 0
O9 - Extra Button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{71B436CF-B40A-428C-BB16-A34FFD4216F0}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\System32\credssp.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\Windows\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\Windows\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\Windows\System32\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (tspkg) - C:\Windows\System32\tspkg.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (livessp) - C:\Windows\System32\livessp.dll (Microsoft Corp.)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2015.04.29 07:34:25 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\PaKSzabovy\Desktop\OTL.exe
[2015.04.28 20:02:43 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2015.04.28 17:34:19 | 000,000,000 | ---D | C] -- C:\Users\PaKSzabovy\AppData\Local\CrashDumps
[2015.04.28 12:49:01 | 000,000,000 | ---D | C] -- C:\Users\PaKSzabovy\AppData\Local\temp
[2015.04.28 12:17:45 | 000,077,824 | ---- | C] (Fox Magic Software) -- C:\Windows\System32\fmcodec.DLL
[2015.04.27 08:47:35 | 000,000,000 | ---D | C] -- C:\Users\PaKSzabovy\Desktop\FRST-OlderVersion
[2015.04.23 09:23:00 | 000,000,000 | ---D | C] -- C:\Users\PaKSzabovy\AppData\Local\Apple
[2015.04.21 16:03:04 | 000,000,000 | ---D | C] -- C:\Windows\Temp
[2015.04.21 15:47:45 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\etc
[2015.04.21 09:23:38 | 021,540,440 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\PaKSzabovy\Desktop\mbam-setup-2.1.4.1018.exe
[2015.04.21 09:22:54 | 000,448,512 | ---- | C] (OldTimer Tools) -- C:\Users\PaKSzabovy\Desktop\TFC.exe
[2015.04.21 09:22:34 | 000,050,688 | ---- | C] (Atribune.org) -- C:\Users\PaKSzabovy\Desktop\ATF-Cleaner.exe
[2015.04.21 08:46:24 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2015.04.19 10:04:14 | 000,000,000 | ---D | C] -- C:\Users\PaKSzabovy\Desktop\Co si dopřát k noční svačině, abyste neztloustli - Grafiky - Žena.cz_soubory
[2015.04.15 18:46:27 | 000,685,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2015.04.15 18:46:27 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2015.04.15 18:46:27 | 000,342,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2015.04.15 18:46:27 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollector.exe
[2015.04.15 18:46:27 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\JavaScriptCollectionAgent.dll
[2015.04.15 18:46:27 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwproxystub.dll
[2015.04.15 18:46:27 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2015.04.15 18:46:27 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2015.04.15 18:46:26 | 002,724,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2015.04.15 18:46:26 | 002,052,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2015.04.15 18:46:26 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2015.04.15 18:46:26 | 000,689,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2015.04.15 18:46:26 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9diag.dll
[2015.04.15 18:46:26 | 000,418,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2015.04.15 18:46:26 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2015.04.15 18:46:25 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2015.04.15 18:46:25 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2015.04.15 18:46:25 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollectorres.dll
[2015.04.15 18:46:24 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2015.04.15 18:46:24 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2015.04.15 18:46:23 | 000,340,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2015.04.15 18:46:22 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2015.04.15 18:46:22 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MshtmlDac.dll
[2015.04.15 18:46:20 | 004,305,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2015.04.15 18:46:14 | 000,896,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aeinv.dll
[2015.04.15 18:46:14 | 000,860,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appraiser.dll
[2015.04.15 18:46:14 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\invagent.dll
[2015.04.15 18:46:14 | 000,576,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\generaltel.dll
[2015.04.15 18:46:14 | 000,331,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\devinv.dll
[2015.04.15 18:46:14 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aepdu.dll
[2015.04.15 18:46:14 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aepic.dll
[2015.04.15 18:46:14 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\acmigration.dll
[2015.04.15 18:37:52 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\clfsw32.dll
[2015.04.15 18:37:49 | 003,920,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2015.04.15 18:37:48 | 003,976,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2015.04.15 18:37:48 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adtschema.dll
[2015.04.15 18:37:48 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2015.04.15 18:37:48 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
[2015.04.15 18:37:48 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2015.04.15 18:37:48 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msaudite.dll
[2015.04.15 18:37:48 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msobjs.dll
[2015.04.15 18:37:48 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\auditpol.exe
[2015.04.15 18:37:48 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2015.04.15 18:37:48 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
[2015.04.15 18:37:48 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apisetschema.dll
[2015.04.15 18:32:35 | 003,088,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2015.04.15 18:32:35 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2015.04.15 18:32:35 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2015.04.15 18:32:35 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2015.04.15 18:32:35 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSetupUI.dll
[2015.04.15 18:32:35 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2015.04.15 18:32:35 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2015.04.15 18:32:35 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2015.04.15 18:32:35 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wu.upgrade.ps.dll
[2015.04.15 18:32:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
[2015.04.04 21:30:56 | 000,000,000 | --SD | C] -- C:\Windows\System32\GWX

========== Files - Modified Within 30 Days ==========

[2015.04.29 07:34:36 | 000,669,176 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2015.04.29 07:34:36 | 000,654,564 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2015.04.29 07:34:36 | 000,141,334 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2015.04.29 07:34:36 | 000,121,934 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2015.04.29 07:34:29 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\PaKSzabovy\Desktop\OTL.exe
[2015.04.29 07:29:50 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015.04.29 07:29:41 | 2610,499,584 | -HS- | M] () -- C:\hiberfil.sys
[2015.04.29 07:13:30 | 003,925,845 | ---- | M] () -- C:\Users\PaKSzabovy\Desktop\Lesni_tanecekHAL1.wmv
[2015.04.29 07:06:56 | 004,680,415 | ---- | M] () -- C:\Users\PaKSzabovy\Desktop\pozordrak.mp4
[2015.04.29 06:57:31 | 000,025,872 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015.04.29 06:57:31 | 000,025,872 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015.04.29 06:50:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015.04.28 21:10:53 | 000,066,338 | ---- | M] () -- C:\Users\PaKSzabovy\Desktop\Suits-S03E03(0000221667).srt
[2015.04.28 20:28:45 | 000,069,006 | ---- | M] () -- C:\Users\PaKSzabovy\Desktop\Suits-S03E02(0000221366).srt
[2015.04.28 12:49:01 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2015.04.28 12:17:45 | 000,001,144 | ---- | M] () -- C:\Users\Public\Desktop\aTube Catcher.lnk
[2015.04.27 14:41:49 | 000,778,416 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2015.04.27 14:41:49 | 000,142,512 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2015.04.21 20:19:50 | 000,000,965 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2015.04.21 15:46:47 | 000,024,064 | ---- | M] () -- C:\Windows\zoek-delete.exe
[2015.04.21 15:09:01 | 001,305,600 | ---- | M] () -- C:\Users\PaKSzabovy\Desktop\zoek.exe
[2015.04.21 09:23:43 | 021,540,440 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\PaKSzabovy\Desktop\mbam-setup-2.1.4.1018.exe
[2015.04.21 09:23:32 | 002,217,984 | ---- | M] () -- C:\Users\PaKSzabovy\Desktop\adwcleaner_4.201.exe
[2015.04.21 09:22:57 | 000,448,512 | ---- | M] (OldTimer Tools) -- C:\Users\PaKSzabovy\Desktop\TFC.exe
[2015.04.21 09:22:37 | 000,050,688 | ---- | M] (Atribune.org) -- C:\Users\PaKSzabovy\Desktop\ATF-Cleaner.exe
[2015.04.19 10:04:14 | 000,101,784 | ---- | M] () -- C:\Users\PaKSzabovy\Desktop\Co si dopřát k noční svačině, abyste neztloustli - Grafiky - Žena.cz.htm
[2015.04.10 16:30:43 | 000,045,031 | ---- | M] () -- C:\Users\PaKSzabovy\Desktop\7d1a430ace1fc873fe8db66cf2b738fa.jpg
[2015.04.02 01:49:48 | 000,342,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll

========== Files Created - No Company Name ==========

[2015.04.29 07:13:28 | 003,925,845 | ---- | C] () -- C:\Users\PaKSzabovy\Desktop\Lesni_tanecekHAL1.wmv
[2015.04.29 07:06:50 | 004,680,415 | ---- | C] () -- C:\Users\PaKSzabovy\Desktop\pozordrak.mp4
[2015.04.28 21:10:50 | 000,066,338 | ---- | C] () -- C:\Users\PaKSzabovy\Desktop\Suits-S03E03(0000221667).srt
[2015.04.28 20:28:42 | 000,069,006 | ---- | C] () -- C:\Users\PaKSzabovy\Desktop\Suits-S03E02(0000221366).srt
[2015.04.27 14:41:49 | 000,000,914 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015.04.27 11:00:12 | 000,000,027 | ---- | C] () -- C:\Windows\System32\drivers\etc\hosts
[2015.04.21 16:03:04 | 000,024,064 | ---- | C] () -- C:\Windows\zoek-delete.exe
[2015.04.21 15:08:58 | 001,305,600 | ---- | C] () -- C:\Users\PaKSzabovy\Desktop\zoek.exe
[2015.04.21 09:23:30 | 002,217,984 | ---- | C] () -- C:\Users\PaKSzabovy\Desktop\adwcleaner_4.201.exe
[2015.04.19 10:04:14 | 000,101,784 | ---- | C] () -- C:\Users\PaKSzabovy\Desktop\Co si dopřát k noční svačině, abyste neztloustli - Grafiky - Žena.cz.htm
[2015.04.15 18:46:25 | 000,016,303 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2015.04.10 16:30:43 | 000,045,031 | ---- | C] () -- C:\Users\PaKSzabovy\Desktop\7d1a430ace1fc873fe8db66cf2b738fa.jpg
[2015.02.05 21:01:19 | 000,003,584 | ---- | C] () -- C:\Users\PaKSzabovy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014.11.15 19:48:00 | 000,000,594 | ---- | C] () -- C:\Windows\videotoaudio.ini
[2014.11.15 19:47:12 | 000,000,005 | ---- | C] () -- C:\Windows\System32\SySatm.dat
[2014.11.09 11:11:50 | 000,000,209 | ---- | C] () -- C:\Windows\settings.ini
[2014.09.27 11:06:02 | 000,218,285 | ---- | C] () -- C:\Windows\hpoins30.dat
[2014.09.27 11:06:02 | 000,000,587 | ---- | C] () -- C:\Windows\hpomdl30.dat
[2014.09.01 18:19:06 | 000,645,632 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2014.09.01 18:19:06 | 000,240,640 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2014.08.25 19:20:33 | 000,035,064 | ---- | C] () -- C:\Windows\System32\drivers\TrueSight.sys
[2014.08.12 07:58:27 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll

========== ZeroAccess Check ==========

[2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2015.02.13 07:26:18 | 012,875,264 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 04:19:04 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2015.02.22 19:56:39 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\Audacity
[2015.01.26 12:16:22 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\AVI ReComp
[2014.09.07 18:53:08 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\Boomzap
[2014.10.13 20:54:51 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\FirstColony
[2014.10.10 15:20:03 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\fontconfig
[2014.11.15 22:08:06 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\HdO Adventure
[2014.09.04 16:19:42 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\Islands5
[2014.09.04 16:19:05 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\island_tribe_4_realore_bfg_en
[2014.09.04 16:14:22 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\Ladia Group
[2014.09.27 18:29:37 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\LDW
[2014.08.27 10:02:33 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\LibreOffice
[2014.11.18 14:08:47 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\Maximize Games
[2014.11.20 11:28:13 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\northerntale3_realore_bigfishgames_en
[2014.11.20 09:18:46 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\northerntale4
[2014.08.17 12:15:04 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\Philipp Winterberg
[2014.10.01 10:52:35 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\PoBros
[2014.09.06 10:35:11 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\Sahmon Games
[2014.10.05 17:16:21 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\Sky Bros
[2014.08.14 17:24:34 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\Sony
[2014.08.23 11:38:51 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\URSE Games
[2015.03.19 16:39:18 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\uTorrent
[2014.11.25 08:39:31 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\VendelGAMES
[2014.10.19 13:17:59 | 000,000,000 | ---D | M] -- C:\Users\PaKSzabovy\AppData\Roaming\VisualShape

========== Purity Check ==========



========== Files - Unicode (All) ==========
[2014.08.11 10:02:03 | 000,000,313 | ---- | C] ()(C:\Users\PaKSzabovy\Documents\??????xie.rtf) -- C:\Users\PaKSzabovy\Documents\卡米拉明认答xie.rtf
[2012.09.10 16:37:53 | 000,000,313 | ---- | M] ()(C:\Users\PaKSzabovy\Documents\??????xie.rtf) -- C:\Users\PaKSzabovy\Documents\卡米拉明认答xie.rtf

< End of report >

[Reklama]

[KamilaS]

OTL Extras logfile created on: 29.4.2015 7:36:11 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\PaKSzabovy\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17728)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,24 Gb Total Physical Memory | 1,85 Gb Available Physical Memory | 57,05% Memory free
6,48 Gb Paging File | 4,97 Gb Available in Paging File | 76,61% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 931,41 Gb Total Space | 496,06 Gb Free Space | 53,26% Space Free | Partition Type: NTFS

Computer Name: PAKSZABOVY-PC | User Name: PaKSzabovy | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Browse with FastStone] -- "C:\Program Files\FastStone Image Viewer\FSViewer.exe" "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{05F5009D-A28C-4AD9-B619-4894F59DAE16}" = lport=2869 | protocol=6 | dir=in | app=system |
"{0614BA59-7E9C-440D-ABF8-494317F5FA58}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{08F43BF1-C2BA-4543-838C-C96B394A2F60}" = rport=138 | protocol=17 | dir=out | app=system |
"{195B93B0-5722-4AC1-B57D-EE0034755D73}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{2473B3D5-71ED-4370-8D85-DAD1E40ABDBE}" = lport=138 | protocol=17 | dir=in | app=system |
"{2E79F868-0B97-44CB-9C75-47E8D51D89BD}" = lport=3702 | protocol=17 | dir=in | app=c:\program files\microsoft visual studio 12.0\common7\ide\devenv.exe |
"{334A1545-7463-4EF8-8BAC-45ACF71ADC9F}" = rport=139 | protocol=6 | dir=out | app=system |
"{34F98D9B-8686-4F4B-8D3B-3328156F4278}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{60B13B73-D009-4B0D-8024-713E780FF513}" = lport=139 | protocol=6 | dir=in | app=system |
"{6B66A79F-DDF3-4613-8675-051246485391}" = lport=10243 | protocol=6 | dir=in | app=system |
"{6F926212-7FD7-42AB-B1DB-3BD8408F8217}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{7C36A7EE-16AD-4C63-994B-D313EFCABD31}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{8664BE19-0C65-49B3-987B-56EDED7B680C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{87EB9315-351C-43EB-B03D-2DE429063F9D}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9125BF3A-5FD8-4BF9-96CC-DFE64078DECF}" = rport=445 | protocol=6 | dir=out | app=system |
"{A9B34845-8289-43BF-A791-211A3E109EEB}" = rport=137 | protocol=17 | dir=out | app=system |
"{B78A1542-4A59-4A7E-9959-3A09F6D01556}" = lport=137 | protocol=17 | dir=in | app=system |
"{BDE7FB7C-BEB1-439A-A734-144DB63A343C}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C0B3358A-5A42-4345-BCB8-D75700DEAE0D}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{D08CC849-178B-4C52-A4F4-245C2B6F0602}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{E0572E69-B344-429C-B3D7-EE8F4883CE9B}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{E539A233-641E-4EE3-A64F-5540B4AD85CE}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{F6BAAB01-A071-43BB-BD73-187B842DDED2}" = lport=445 | protocol=6 | dir=in | app=system |
"{FFF64539-6673-4876-895A-B19F20D9B955}" = rport=10243 | protocol=6 | dir=out | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{003C0159-BE22-461A-96C2-983997B1A41C}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{0C677F3C-8664-4C6E-9D3B-1883D4F4C1F8}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{0D1D3835-9B02-49CC-B180-27BA7BCADCEB}" = dir=in | app=c:\program files\hp\digital imaging\smart web printing\smartwebprintexe.exe |
"{0F99B119-6EC9-4A75-9923-5EDE648112E1}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{11AD3DDB-3596-4FAC-A138-FAB239AABFDA}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{174F6C7B-80D0-4896-A5F6-73EBD708CFB8}" = dir=in | app=c:\program files\common files\hp\digital imaging\bin\hpqphotocrm.exe |
"{1DDB49A3-9B6A-415D-9480-795725A46A87}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{306CD41C-E5E9-4825-BABC-29C3F302A001}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{398A715C-11CC-4CBF-8215-970FC7585BE7}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqkygrp.exe |
"{439317F0-DA45-4F9B-B417-ADD1124813A7}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpiscnapp.exe |
"{45D00831-2EAB-46E2-8520-7BB2FFD7BB76}" = protocol=6 | dir=out | app=system |
"{50F7BF18-86DE-4410-AE12-359C87E52A99}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqste08.exe |
"{5169BE05-0217-414E-863D-140F7C5CF271}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{53B784F0-D11C-41AC-A7C2-22AD4D6D2048}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{54F4B947-790D-40A8-BCAE-4D961F3AC9D5}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{56D91A1C-D655-4000-9AC0-6B53F144987C}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{5A374B58-B064-4012-8ABB-048FA45FA486}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqtra08.exe |
"{5BDCB672-2446-4ADB-8E7E-FE5AD49D4248}" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"{600CF8E1-1AF4-42DE-9E38-DE97C4BE2CB8}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpoews01.exe |
"{646E1B15-77C5-454E-BCC4-CCC7D361BB35}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqpse.exe |
"{65FE4232-CE67-44EE-A903-04CFB30AE29B}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqgpc01.exe |
"{7A1FDEA1-4424-43CE-BB65-79C28C1A1DFF}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqcopy2.exe |
"{80EB9953-0F30-45CD-B691-5E92D813649C}" = protocol=6 | dir=in | app=c:\program files\sony mobile\update engine\sony mobile update engine.exe |
"{876879DB-972C-44B7-B1DB-3C9ABF3051E3}" = dir=in | app=c:\program files\hp\hp software update\hpwucli.exe |
"{9D340307-2C10-434F-A8F3-A79FB97106B6}" = dir=in | app=c:\program files\hp\digital imaging\bin\hposid01.exe |
"{A5D1F3FE-65E6-43B9-BE82-660E635B44F3}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqusgh.exe |
"{A812F396-D44F-4009-BA59-96D005899FDA}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AD52EB07-FE75-4D66-BACC-28355AB910F4}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B14E335E-0285-474E-8715-28490EDD7077}" = protocol=17 | dir=in | app=c:\program files\sony mobile\update engine\sony mobile update engine.exe |
"{B7326CF5-C3FF-433A-9389-A9F4D10CFB15}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{BCC4D863-E5B4-4A3A-8E8F-71A6E734A0FD}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpfccopy.exe |
"{BD2680F8-A26D-434A-B5E1-97448898C96A}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqpsapp.exe |
"{C944668D-4536-419D-94D5-C6D41696D4BC}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqusgm.exe |
"{D68E5153-7C28-4B97-9288-0068F0BC9D75}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqsudi.exe |
"{E156712D-01A4-42FC-80AF-9485D8F9541E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{EAABF650-85D8-47E0-84CD-7193270EB31D}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{F61D6041-05C0-4733-A04A-C8DE18781BC9}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{F7BC0714-A122-4B9B-91C7-4755CF851F16}" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"{F9380712-FC3D-411C-9FC5-E0DC0A62EDBD}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{FC2AA52D-E5BA-494A-9322-274BC5BCC05B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{FD444AD5-E2D2-4495-AE95-79BEDB6A22ED}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{FD7B10AE-99DA-4953-A900-E480AF46DED3}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqgplgtupl.exe |
"TCP Query User{49B3A99A-4CB9-4F1B-938C-21957437D9F5}C:\users\pakszabovy\appdata\roaming\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\users\pakszabovy\appdata\roaming\utorrent\utorrent.exe |
"TCP Query User{6D2BE124-214E-4C43-AA8D-58C3BCB1362D}C:\program files\libreoffice 4\program\soffice.bin" = protocol=6 | dir=in | app=c:\program files\libreoffice 4\program\soffice.bin |
"TCP Query User{F5E306D6-DCFA-48BB-8552-E3790DB3773C}C:\users\pakszabovy\appdata\roaming\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\users\pakszabovy\appdata\roaming\utorrent\utorrent.exe |
"UDP Query User{9426AC2D-9757-41BE-A8A7-B37D0E86762D}C:\users\pakszabovy\appdata\roaming\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\users\pakszabovy\appdata\roaming\utorrent\utorrent.exe |
"UDP Query User{AFF4DCD2-87D0-456B-BA6F-EBA73112E1CF}C:\program files\libreoffice 4\program\soffice.bin" = protocol=17 | dir=in | app=c:\program files\libreoffice 4\program\soffice.bin |
"UDP Query User{F6C781ED-E3F9-4DDD-A88A-CBCCDE44406A}C:\users\pakszabovy\appdata\roaming\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\users\pakszabovy\appdata\roaming\utorrent\utorrent.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00F9DB8C-65D7-4D47-AB5F-F698EE38580D}" = Windows Live UX Platform
"{0398BFBC-991B-3275-9463-D2BF91B3C80B}" = Microsoft Help Viewer 2.1
"{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}" = Microsoft SQL Server 2012 T-SQL Language Service
"{05F508E8-2DC6-4B12-B6A9-51000536216A}" = Application Insights Tools for Visual Studio 2013
"{0610DFB0-CCEA-6EC0-E3C3-A0160AD7FD98}" = Windows Runtime Intellisense Content - en-us
"{06EEE072-B561-38E5-85D9-485ABCBE8342}" = Visual F# 3.1 SDK
"{070C38AC-05CE-43DF-9A20-141332F6AB2B}" = Microsoft System CLR Types for SQL Server 2012
"{07AAB66E-4718-422D-9218-4AFB3C922A71}" = Photo Gallery
"{093F1701-E0CB-3506-9366-07B69773A78B}" = Microsoft ASP.NET and Web Tools 2013.4 - Visual Studio 2013
"{0B698858-DAB0-4F9E-A10A-125B274EDA06}" = Microsoft Visual C++ x64 Libraries
"{0C03A66F-1FF0-45F9-8D67-0D806EBFFBA1}" = Blend for Visual Studio SDK for Silverlight 5
"{0E4A9B1A-12D2-4827-BE61-44DBD72797FB}" = TypeScript Tools for Microsoft Visual Studio 2013
"{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{129CE446-6315-3DB0-AEF2-3EE0CA4C31AE}" = Visual Studio 2012 Verification SDK - enu
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{15BFD731-A10E-43E9-9D18-0F682BC0480F}" = Photo Common
"{1690CE56-2231-4E59-9006-A0876D949EA8}" = Tools for .Net 3.5
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{185F9795-9663-4F13-9EF9-307A282ADB5A}" = ph
"{18F675EA-CB03-462D-A04B-3832DBAB5318}" = Microsoft Visual C++ 2012 Compilers - ENU Resources
"{19A5926D-66E1-46FC-854D-163AA10A52D3}" = Microsoft .NET Framework 4.5.1 SDK
"{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}" = Microsoft SQL Server 2012 Data-Tier App Framework
"{1D6432B4-E24D-405E-A4AB-D7E6D088CBC9}" = Windows Live Photo Common
"{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp
"{205A8E25-7ABE-30AB-929E-80A63A7AFBE3}" = Microsoft Portable Library Multi-Targeting Pack
"{21373064-AD95-48DB-A32E-0D9E08EF7355}" = Prerequisites for SSDT
"{235EBB33-3DA1-46DF-AADE-9955123409CB}" = Apple Mobile Device Support
"{2386192E-D6DB-4AD2-9564-65586A0AE53E}" = Dotfuscator and Analytics Community Edition
"{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}" = Skype™ 7.0
"{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1" = Aegisub 3.2.1
"{2774595F-BC2A-4B12-A25B-0C37A37049B0}" = Microsoft SQL Server 2014 Management Objects
"{2881CFB4-71F9-40C7-8228-6395117C0EDA}" = Python Tools Redirection Template
"{28C7344F-E894-4CF5-8D05-EDC7ED71796C}" = Behaviors SDK (Windows) for Visual Studio 2013
"{2A075BB4-E976-4278-BF3F-E5C6945D84C0}" = bl
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2F1FC167-2D88-3E8A-85AE-2D23DA16DFAF}" = Visual Studio 2012 Verification SDK - ita
"{2F7DBBE6-8EBC-495C-9041-46A772F4E311}" = Microsoft SQL Server 2012 Management Objects
"{2F8DE575-AEF9-4E4F-BA30-65B2DFD7A6DA}" = Windows Phone 8.1 Tools for Visual Studio Professionald 2013 - ENU
"{2F8F489A-0476-3129-857B-A553F38B192D}" = Microsoft Visual C++ 2012 Core Libraries
"{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery
"{3169A65F-9DA5-331A-ACCE-D970F9020404}" = Visual Studio 2012 驗證 SDK - cht
"{316EB047-4627-4B63-B0A6-8CD32D07D962}" = Avira
"{31FF5BE9-F816-389E-A95A-7F362878A039}" = Visual Studio 2012 Verification SDK - chs
"{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}" = Prerequisites for SSDT
"{37464E70-B0B9-9DFF-649A-CBE169BAD657}" = Windows Software Development Kit for Windows Store Apps
"{374E7247-AC4C-4728-8F7E-E7C5BCA93908}" = Microsoft Azure Mobile Services SDK
"{37E53780-3944-4A6A-842F-727128E8616E}" = Blend for Visual Studio SDK for .NET 4.5
"{3C92B2E6-380D-4fef-B4DF-4A3B4B669771}" = Copy
"{3D2CF65C-B544-4308-B996-700D3E5F6C4C}" = Movie Maker
"{3DDE0604-4D47-377D-AAA3-9D60F189C985}" = Microsoft Team Foundation Server 2013 Update 4 Object Model (x86)
"{3EEBFDAA-9AF3-4119-B76F-E3CC628F8202}" = Microsoft Azure Shared Components for Visual Studio 2013 - v1.3
"{3FBFCF2C-392A-4632-9442-14C305B44D5E}" = AzureTools.Notifications
"{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}" = Microsoft ASP.NET MVC 4 Runtime
"{409CB30E-E457-4008-9B1A-ED1B9EA21140}" = Intel(R) Rapid Storage Technology
"{41C61308-6CFD-4D54-AB6A-7136ED08A18E}" = Windows Live Communications Platform
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{467BD8D1-2A8D-4366-911A-14146F07A91C}" = Intel(R) Rapid Storage Technology
"{46910786-E4AC-41E4-A4A0-C086EA85242D}" = WCF Data Services 5.6.0 Runtime
"{4781443E-204D-4D98-8899-18A123C13B1E}" = Microsoft C++ REST SDK for Visual Studio 2013
"{47D08E7A-92A1-489B-B0BF-415516497BCE}" = Microsoft SQL Server 2014 T-SQL Language Service
"{4903D172-DCCB-392F-93A3-34CA9D47FE3D}" = Microsoft .NET Framework 4.5.1
"{492498A3-F88C-FE2F-755C-9B1B91724CA5}" = LocalESPC Dev12
"{492FCC0B-45E1-383A-A2CF-9E7F305AC200}" = Microsoft Visual Studio 2013 Team Explorer Language Pack - ENU
"{4A1DEB7A-341B-453E-A3AF-7EA9902F9711}" = Microsoft SQL Server 2014 Express LocalDB
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4AE57014-05C4-4864-A13D-86517A7E1BA4}" = Microsoft .NET Framework 4.5 SDK
"{4AEB505C-95E1-4964-9B64-8D27F3186D30}" = Microsoft System CLR Types for SQL Server 2014
"{4E7BB653-2585-4138-95F3-3455FCA04354}" = Microsoft ASP.NET Web Frameworks and Tools - Visual Studio 2013 - ENU
"{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport
"{5411060C-8F8C-393D-8D3B-26AF2C92FABB}" = Microsoft Visual Studio 2013 Shell (Minimum)
"{544ACD54-9FAA-4A60-A1E7-B2EC3AA75D24}" = Microsoft SQL Server 2012 Native Client
"{5481F163-B9E5-30A8-8441-4DBBB87D6AA2}" = Microsoft Visual C++ 2013 Microsoft Foundation Class Libraries
"{54F76D6C-0EC3-43D9-8BCC-73E31AB0BF06}" = Memory Profiler
"{550760A2-DC4A-CD2B-3C1B-01E0F9F1279E}" = Windows App Certification Kit Native Components
"{5562F05F-908C-4F15-9B3C-98D5FD32DCAB}" = Media Go Network Downloader
"{56AD3004-0B49-967F-F682-B05650B61A78}" = Windows Software Development Kit for Windows Store Apps DirectX x86 Remote
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}" = Microsoft .NET Framework 4.5 Multi-Targeting Pack
"{594DB57D-58D1-4AA3-AE6C-BF99484F52F8}" = Behaviors SDK (Windows Phone) for Visual Studio 2013
"{5C005E2A-AEAE-4DF7-B7CA-1E6DCDD2AEA4}" = LibreOffice 4.3.0.4
"{5D5CFAD6-9F93-8C63-3EB0-B6A0D3D4BD12}" = Windows Software Development Kit
"{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}" = WCF RIA Services V1.0 SP2
"{5EF1EBC5-4A40-4D1C-B02E-0C54BC93FD06}" = Microsoft SQL Server 2012 Command Line Utilities
"{605FFCBB-EC5A-485C-B27E-189F1C8A96E5}" = Microsoft Visual C++ 2012 x86-x64 Compilers
"{6098D454-CB7B-44C2-8615-D869FD9655C7}" = TypeScript Power Tool
"{62910715-63E3-0AB0-0B29-99140DE1C15E}" = LocalESPC
"{6321F2D4-366B-3AE4-877A-8E539EC3331A}" = Visual F# 3.1 VS
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{64297226-2B81-4588-89BD-76440BC0BCFC}" = Microsoft ASP.NET Web Pages 2 - Visual Studio 2013 - ENU
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{659CB81C-B54E-4DF1-B618-F35777393A54}" = Windows Live Installer
"{6621F198-7F26-43F9-81E8-9457797B2CBA}" = Microsoft Azure Mobile Services Tools for Visual Studio - v1.3
"{66FFC445-6EB0-3D02-95D7-925E3050FFB8}" = Microsoft Visual Studio 2013 XAML UI Designer - ENU
"{6781FF9B-E87D-4A03-9373-A55A288B83FA}" = Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1)
"{678800C0-D94E-4513-89CB-478F2B781A0B}" = Microsoft Visual C++ 2013 x86-x64 Compilers
"{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1
"{6A0C6700-EA93-372C-8871-DCCF13D160A4}" = Microsoft .NET Framework 4.5.1 Multi-Targeting Pack
"{6AB13C21-C3EC-46E1-8009-6FD5EBEE515B}" = Microsoft Advertising SDK for Windows 8.1 - ENU
"{6AC81125-8485-463D-9352-3F35A2508C11}" = Microsoft Advertising SDK for Windows Phone 8.1 XAML - ENU
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6B4D9BCF-6CA1-4843-96B5-3421E1E2D6E9}" = Microsoft Visual Studio 2013 Performance Collection Tools - ENU
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6C06FEE9-C64E-453F-B8A5-D9E9B79ED040}" = Microsoft Visual C++ 2013 32bit Compilers - ENU Resources
"{73629F80-9DFE-421A-908B-C71FBD243E5A}" = Microsoft Report Viewer Add-On for Visual Studio 2013
"{75247E38-5C9B-45D6-ADF8-E11CB56B4990}" = Network
"{76FF502F-6811-F75B-2FEB-0B69BB584031}" = Windows App Certification Kit x86
"{773AC1E4-5F27-4DF6-A932-7FDDE35C069D}" = Microsoft SQL Server Compact 4.0 SP1 ENU
"{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
"{77A85707-C1BA-44DA-915D-CE68AE058A78}" = Microsoft Visual Studio 2013 Profiling Tools
"{77E2D875-FD9E-3DEE-9A84-C34FDECB4ECA}" = Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.60610
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7AC97190-67DC-4D68-B743-43F7E1FC393A}" = Windows Phone 8.1 SDK - ARM
"{7AE61976-6FE2-4B65-9E1C-4DE44288772B}" = Visual Studio Extensions for Windows Library for JavaScript
"{8256F87F-8554-4457-8C3D-3F3324697D9F}" = Windows Live ID Sign-in Assistant
"{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}" = Apple Application Support
"{84D88F57-4130-30FE-A0B6-1E04428FE1F6}" = Microsoft Visual C++ 2013 Core Libraries
"{85253F13-EE42-4850-A3A5-79B90E92D7AC}" = Entity Framework 6.1.1 Tools for Visual Studio 2013
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A3862F9-F587-3DFA-AAFC-C1F0E116F05C}" = Kit SDK de vérification de Visual Studio 2012 - fra
"{8BD11F34-C26A-4E92-B2A2-4FFF5FC3FE67}" = Microsoft Visual Studio 2013 Diagnostic Tools - x86
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{8F6DB54B-8CB9-4928-896D-312BFE833131}" = Microsoft Visual Studio 2013 Preparation
"{90EF884E-5253-324C-9C11-63C9DA16BF0C}" = SDK de comprobación de Visual Studio 2012 - esn
"{912D30CF-F39E-4B31-AD9A-123C6B794EE2}" = HP Update
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
"{943F3FB1-3F9C-4FB7-A4E2-6D53617068C3}" = PreEmptive Analytics Visual Studio Components
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95140000-00AF-0405-0000-0000000FF1CE}" = Microsoft PowerPoint Viewer
"{976C3D92-0DEC-37A6-A870-FF4FC18CD029}" = Microsoft .NET Framework 4.5.1 RC Multi-Targeting Pack for Windows Store Apps
"{977CABC5-7B4B-3AE4-8E1B-56C673C1D638}" = Пакет Visual Studio 2012 Verification SDK - rus
"{979C7495-FB42-484E-92EA-7F2A59DD7718}" = Microsoft ASP.NET MVC 4 - Visual Studio 2013 - ENU
"{984022F2-9BCA-A41D-6A38-1AE658F01415}" = Windows Software Development Kit
"{985EF141-95DD-3934-8F23-7C2C4C61E5F7}" = Microsoft Visual Studio 2013 Shell (Minimum) Resources
"{99FCCA2B-F1FD-E66E-E3B9-AA57FBBF2E66}" = Windows Software Development Kit for Windows Store Apps
"{9A470EA9-FF86-4C0E-992C-572BF2B9D6FF}" = Windows Live Essentials
"{9B3A1C97-A361-463E-8817-444F9F88CDFE}" = Microsoft Expression Blend SDK for .NET 4
"{9C593464-7F2F-37B3-89F8-7E894E3B09EA}" = Microsoft Visual Studio Professional 2013
"{9DC11D9A-6DCD-4064-8363-63914A0122AB}" = C4500
"{9ED1634C-4E71-4992-A1BA-7C4BE6EE39E1}" = Blend for Visual Studio 2013 ENU resources
"{9F7DE660-6BFE-3BA2-A93D-4F13BD13E10B}" = VS Update core components
"{9FB31124-1FD5-314B-8B91-E4ECC431E1D7}" = Visual Studio 2012-Verifizierungs-SDK - deu
"{A1CB8286-CFB3-A985-D799-721A0F2A27F3}" = Windows Software Development Kit DirectX x86 Remote
"{A1D06677-1103-32DE-AA74-6EE44DCF7F81}" = Microsoft Visual C++ 2013 Extended Libraries
"{A223B446-EC3D-3031-828D-5188800AB782}" = Microsoft .NET Framework 4.5.1 RC Multi-Targeting Pack for Windows Store Apps (ENU)
"{A35D7103-E0AE-4421-98E9-3F5EEEED3B7D}" = Windows Phone 8.1 Tools for Visual Studio 2013 - ENU
"{A3B8D9FB-CA7D-4487-8CA2-A6A2C8AD1077}" = Microsoft Visual C++ x86 Libraries
"{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}" = Microsoft SQL Server System CLR Types
"{A6030DAD-1600-F767-C8DD-C722ADFE8FBC}" = Windows Software Development Kit DirectX x86 Remote
"{A7E87388-3512-4D9C-9BBA-284C3577CBE9}" = Microsoft Visual C++ 2012 Compilers
"{A80FA752-C491-4ED9-ABF0-4278563160B2}" = 32 Bit HP CIO Components Installer
"{A8229A09-E570-412B-8D18-E78985673E34}" = Microsoft Visual C++ ARM Libraries
"{A88AEB8B-A6C5-41BC-8F71-F704DD1E0D00}" = Memory Profiler
"{AA6F009F-0CCD-4DD6-A462-28419C101D54}" = HP Photosmart C4500 All-In-One Driver Software 13.0 Rel. 4
"{AC8E0CF4-42A1-4151-B684-97CF6FD726CF}" = Microsoft SQL Server Data Tools - enu (12.0.41012.0)
"{AE937DBA-FEFD-3BFE-9860-0591C0F91D61}" = Microsoft Visual Studio 2013 Shell (Minimum) Interop Assemblies
"{AEBB5873-1DF6-4190-98D8-D9FC5144EB3B}" = Windows Phone 8.1 SDK - Desktop
"{AF06B8FA-B916-4001-AE51-6645488DEF09}" = Media Go
"{AF37176A-78CA-545B-34EF-8B6A21514DD1}" = Adobe Help Manager
"{AFF89951-EFF1-3543-92CE-BE535855A3A7}" = Microsoft NuGet - Visual Studio 2013
"{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
"{B1C38F27-D377-8C98-D98D-29B67C0B978D}" = LocalESPCui for en-us Dev12
"{B255880F-8C5E-4FAF-8F9C-7DBA635B2615}" = Build Tools - x86
"{B2611F8A-EFE7-4E88-875D-19F0EFAE87E4}" = Windows Live PIMT Platform
"{B28FF388-32EE-37B0-96CF-56DB0713637E}" = Microsoft Team Foundation Server 2013 Update 4 Object Model Language Pack (x86) - ENU
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Ovladač 3D Vision 266.33
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 266.33
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 266.33
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Systémový software PhysX 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Ovladač HD audia 1.1.13.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B503082D-B4CD-32E5-A97C-AB10D2E9111A}" = Microsoft Portable Library Multi-Targeting Pack Language Pack - enu
"{B536762B-1047-4B51-8ECF-46D5686E5416}" = Microsoft ASP.NET Web Pages 2 Runtime
"{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}" = HPDiagnosticAlert
"{B6A0A174-33E0-3D42-92EA-547D318CB149}" = Microsoft Visual Studio 2013 Devenv
"{B8FFB7D6-6ABD-47C3-8BAD-86FF5D8F3EDC}" = IIS 8.0 Express
"{B90F9678-82C0-32A3-996B-98AA7EA5D8F4}" = Microsoft Visual Studio 2013 XAML UI Designer
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
"{BF3E2194-F89B-44FB-A801-464BF787599F}" = WCF Data Services Tools for Microsoft Visual Studio 2013
"{C26C1495-8EBE-3F71-BDA1-7DE2010840D8}" = Microsoft Visual Studio 2013 Devenv Resources
"{C340BAB2-9A21-41B9-A465-7AC7B1DF773E}" = Microsoft SQL Server 2014 Transact-SQL ScriptDom
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C47A1D4C-13B1-3E81-A367-83FB8F4FBF8E}" = Visual Studio 2012 Verification SDK - jpn
"{C4CAE1DE-77C8-32A7-A347-52DB738F0DE1}" = Visual Studio 2012 Verification SDK
"{C4DD6A7C-DD73-36C4-BBBF-B699644A37B8}" = Microsoft Visual Studio Community 2013
"{C7B84BB5-B871-4020-9C0D-CB08D9B77526}" = Windows Phone 8.1 Tools for Visual Studio Professional 2013
"{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade
"{C9E7751E-88ED-36CF-B610-71A1D262E906}" = Team Explorer for Microsoft Visual Studio 2013
"{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget
"{CDC1AB00-01FF-4FC7-816A-16C67F0923C0}" = Windows Live SOXE
"{CF408B76-8698-4298-B549-5E6A94931B64}" = PS_AIO_04_C4500_Software_Min
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D1893000-EA77-493C-8DDD-E262436E959B}" = Windows Live SOXE Definitions
"{D3517C62-68A5-37CF-92F7-93C029A89681}" = Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU)
"{D35B579C-E1ED-437A-96E2-CD81E3C4ADCD}" = Windows Phone 8.1 Tools for Visual Studio 2013
"{D37FDF2F-8766-4BDF-A0E3-A60BDBB630ED}" = Build Tools Language Resources - x86
"{D3A828A9-FD4A-4463-9CB0-9673C682A0C7}" = Microsoft Visual C++ 2012 32bit Compilers - ENU Resources
"{D42681AA-BC16-3C84-949E-45F05D2AA997}" = Microsoft Visual C++ 2013 Core Libraries
"{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1" = aTube Catcher verze 3.8
"{D58573E7-F82D-41E4-B10B-3041202A51D2}" = Microsoft Web Deploy 3.5
"{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential
"{DADC7AB0-E554-4705-9F6A-83EA82ED708E}" = Realtek Ethernet Diagnostic Utility
"{DB5600F1-DE83-46DE-B162-5FC4400EAF5B}" = Microsoft Visual C++ 2013 Compilers
"{DC635845-46D3-404B-BCB1-FC4A91091AFA}" = SmartWebPrinting
"{DC8FA8B0-9EBA-38F2-934D-001BD21EACB6}" = Windows Phone SDK 8.0 Assemblies
"{DD67BE4B-7E62-4215-AFA3-F123A800A389}" = Movie Maker
"{DEBF18DD-F351-3FC3-9BF4-8B20AC2EF5EF}" = Visual Studio 2012 유효성 검사 SDK - kor
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E100E2B5-F2EF-4955-AB7A-C3F2125A3BCD}" = Windows Live UX Platform Language Pack
"{E1FBB3D4-ADB0-4949-B101-855DA061C735}" = Microsoft Silverlight 5 SDK
"{E5CAE8D2-9F9F-3BEA-AA0F-B5B40611C704}" = Microsoft Visual C++ 2013 x86 Debug Runtime - 12.0.21005
"{E6F3851E-CEEB-4ECB-A6FA-337C8F662E3D}" = Microsoft Visual C++ 2013 Compilers - ENU Resources
"{E7654811-38F9-4225-9688-827FDA716582}" = Microsoft SQL Server 2012 Transact-SQL ScriptDom
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{E9674444-9491-3961-873C-017D8912185E}" = Microsoft Visual Studio Professional 2013 - ENU
"{EBC890A6-DE7C-44B4-AA03-119B6190D3E1}" = Blend for Visual Studio 2013
"{EBD9DB6D-180B-4C59-9622-B75CC4B32C94}" = Microsoft Advertising Service Extension for Visual Studio
"{ED8DFB38-C87B-42B3-A33E-B20DF935C055}" = PowreShellIntegration.Notifications
"{EDB13CB8-993C-4D6F-B2BD-7A5800DF15FC}" = Microsoft Visual Studio 2013 Performance Collection Tools
"{EDB1632D-FE4B-4F5B-A234-91DA81B03C41}" = Windows Phone 8.1 SDK - x86
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.251
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F361FE04-789E-42F3-BBAB-E7B380AA5E06}" = Windows XP Targeting with C++
"{F37D360D-9308-4BB1-8515-DC6B637B9486}" = Fotogalerie
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"{fb94de03-3699-4d9f-96d7-7659bd8a5a07}" = Nero 9 Lite
"{FC091743-5193-2B65-E49E-E03BC9E8B728}" = Media Go Video Playback Engine 2.12.108.06300
"{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb" = IIS Express Application Compatibility Database for x86
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"{FE939060-416C-4ECD-890E-13776E2707C4}" = Microsoft SQL Server 2012 Express LocalDB
"{FFC6E93A-B9AD-3F20-9B06-EE20E24AAEAF}" = Microsoft Visual C++ 2012 Core Libraries
"7-Zip" = 7-Zip 9.20
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player NPAPI" = Adobe Flash Player 17 NPAPI
"aTube Catcher" = aTube Catcher
"AVI ReComp" = AVI ReComp 1.5.6
"Avira Antivirus" = Avira Antivirus
"Avisynth" = AviSynth 2.5
"BFGC" = Big Fish: Game Manager
"BFG-Kingdom Tales" = Kingdom Tales
"BFG-Rescue Team 4" = Rescue Team 4
"CCleaner" = CCleaner
"Comodo Dragon" = Comodo Dragon
"CrystalDiskInfo_is1" = CrystalDiskInfo 6.3.0
"FastStone Image Viewer" = FastStone Image Viewer 5.1
"FormatFactory" = FormatFactory 3.3.5.0
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Photosmart Essential" = HP Photosmart Essential 3.5
"HP Smart Web Printing" = HP Smart Web Printing 4.51
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Help Manager
"Microsoft Help Viewer 2.1" = Microsoft Help Viewer 2.1
"Mozilla Firefox 37.0.2 (x86 cs)" = Mozilla Firefox 37.0.2 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"RarZilla Free Unrar" = RarZilla Free Unrar
"Revo Uninstaller" = Revo Uninstaller 1.95
"Shop for HP Supplies" = Shop for HP Supplies
"SolveigMM AVI Trimmer_is1" = SolveigMM AVI Trimmer version 2.1.1407.1
"SubtitleWorkshop" = Subtitle Workshop 2.51
"The KMPlayer" = KMPlayer (remove only)
"Update Engine" = Sony Mobile Update Engine
"VLC media player" = VLC media player
"VobSub" = VobSub 2.23
"WinLiveSuite" = Windows Live Essentials
"Xvid Video Codec 1.3.2" = Xvid Video Codec

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 28.4.2015 10:33:08 | Computer Name = PaKSzabovy-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files\Microsoft Visual
Studio 12.0\VC\redist\1033\vcredist_arm.exe se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="arm",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 28.4.2015 10:33:30 | Computer Name = PaKSzabovy-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files\Windows Kits\8.0\bin\x64\oleview.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 28.4.2015 10:33:31 | Computer Name = PaKSzabovy-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files\Windows Kits\8.0\bin\x64\filetypeverifier.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 28.4.2015 10:33:35 | Computer Name = PaKSzabovy-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files\Windows Kits\8.1\bin\x64\oleview.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 28.4.2015 10:33:36 | Computer Name = PaKSzabovy-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files\Windows Kits\8.1\bin\x64\filetypeverifier.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 28.4.2015 11:34:18 | Computer Name = PaKSzabovy-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: yct.exe, verze: 3.8.0.8007, časové razítko:
0x54e66344 Název chybujícího modulu: MSVBVM60.DLL, verze: 6.0.98.15, časové razítko:
0x4a5bda6c Kód výjimky: 0xc0000005 Posun chyby: 0x0000968a ID chybujícího procesu:
0x1710 Čas spuštění chybující aplikace: 0x01d081c676998896 Cesta k chybující aplikaci:
C:\Program Files\DsNET Corp\aTube Catcher 2.0\yct.exe Cesta k chybujícímu modulu:
C:\Windows\system32\MSVBVM60.DLL ID zprávy: 08050b07-edbc-11e4-a02d-1c6f65cf5f6b

Error - 29.4.2015 0:49:04 | Computer Name = PaKSzabovy-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files\Nero\Nero 9\Nero
StartSmart\NeroStartSmart.exe.Manifest se nezdařilo. Závislé sestavení Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 29.4.2015 0:49:04 | Computer Name = PaKSzabovy-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files\Nero\Nero 9\Nero
StartSmart\NeroStartSmart.exe.Manifest se nezdařilo. Závislé sestavení Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 29.4.2015 1:30:18 | Computer Name = PaKSzabovy-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files\Nero\Nero 9\Nero
StartSmart\NeroStartSmart.exe.Manifest se nezdařilo. Závislé sestavení Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 29.4.2015 1:30:18 | Computer Name = PaKSzabovy-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Program Files\Nero\Nero 9\Nero
StartSmart\NeroStartSmart.exe.Manifest se nezdařilo. Závislé sestavení Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

[ System Events ]
Error - 27.4.2015 2:47:45 | Computer Name = PaKSzabovy-PC | Source = Service Control Manager | ID = 7031
Description = Služba Avira Service Host byla nečekaně ukončena. Stalo se to 1 krát.
Následující opravná akce bude spuštěna za 10000 milisekund: Restartovat službu.

Error - 27.4.2015 2:49:20 | Computer Name = PaKSzabovy-PC | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Při pokusu o načtení souboru místních hostitelů došlo k chybě.

Error - 27.4.2015 2:49:21 | Computer Name = PaKSzabovy-PC | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Při pokusu o načtení souboru místních hostitelů došlo k chybě.

Error - 27.4.2015 2:49:28 | Computer Name = PaKSzabovy-PC | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Při pokusu o načtení souboru místních hostitelů došlo k chybě.

Error - 27.4.2015 4:53:25 | Computer Name = PaKSzabovy-PC | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 27.4.2015 4:57:31 | Computer Name = PaKSzabovy-PC | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 27.4.2015 5:01:06 | Computer Name = PaKSzabovy-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (11:00:08, ?27.?4.?2015) bylo neočekávané.

Error - 28.4.2015 6:41:25 | Computer Name = PaKSzabovy-PC | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 28.4.2015 6:46:31 | Computer Name = PaKSzabovy-PC | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 28.4.2015 6:49:55 | Computer Name = PaKSzabovy-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (12:48:22, ?28.?4.?2015) bylo neočekávané.


< End of report >

[Orcus]

Trvale deaktivuj Windows Defender, máš tam Aviru, která jeho funkce zastává.

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/opravy do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}: "URL" = http://www.google.com/search?q={searchTerms}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
FF - prefs.js..browser.startup.homepage: "http://wol.jw.org/cs/wol/dt/r29/lp-b/2015/4/21"
FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
[2015.04.17 19:05:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PaKSzabovy\AppData\Roaming\Mozilla\Firefox\Profiles\1slyw161.default\extensions
[2015.04.21 08:46:24 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2015.04.21 08:46:27 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.




:Files
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\System32\dllcache\*.tmp
C:\WINDOWS\system32\SET*.tmp
C:\WINDOWS\system32\DUMP*.tmp
c:\windows\Tasks\*.job /s
C:\*.tmp
C:\WINDOWS\System32\drivers\*.tmp
C:\Program Files\*.tmp
C:\Documents and Settings\All Users\Data aplikací\*.tmp
C:\Users\PaKSzabovy\AppData\Local\temp\*.tmp
C:\Users\PaKSzabovy\Desktop\mbam-setup-2.1.4.1018.exe
C:\Users\PaKSzabovy\Desktop\ATF-Cleaner.exe
C:\Users\PaKSzabovy\Desktop\TFC.exe
C:\Users\PaKSzabovy\Desktop\zoek.exe


:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.

[KamilaS]

All processes killed
========== OTL ==========
No active process named explorer.exe was found!
Service WinDefend stopped successfully!
Service WinDefend deleted successfully!
File move failed. C:\Program Files\Windows Defender\MpSvc.dll scheduled to be moved on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{CFBFAE00-17A6-11D0-99CB-00C04FD64497} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFBFAE00-17A6-11D0-99CB-00C04FD64497}\ not found.
File move failed. C:\Windows\System32\ieframe.dll scheduled to be moved on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{012E1000-F331-11DB-8314-0800200C9A66}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Prefs.js: "http://wol.jw.org/cs/wol/dt/r29/lp-b/2015/4/21" removed from browser.startup.homepage
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Components deleted successfully.
File C:\Program Files\Mozilla Firefox\components not found.
Registry value HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Plugins deleted successfully.
File C:\Program Files\Mozilla Firefox\plugins not found.
Registry value HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Components deleted successfully.
File C:\Program Files\Mozilla Firefox\components not found.
Registry value HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Plugins deleted successfully.
File C:\Program Files\Mozilla Firefox\plugins not found.
C:\Users\PaKSzabovy\AppData\Roaming\Mozilla\Firefox\Profiles\1slyw161.default\extensions folder moved successfully.
C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} folder moved successfully.
C:\Program Files\Mozilla Firefox\browser\extensions folder moved successfully.
Folder C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorAdmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorUser deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\PromptOnSecureDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
File rity] not found.
File ptytemp] not found.
File art explorer] not found.
File boot] not found.

OTL by OldTimer - Version 3.2.69.0 log created on 04292015_111534

Files\Folders moved on Reboot...
File move failed. C:\Program Files\Windows Defender\MpSvc.dll scheduled to be moved on reboot.
File move failed. C:\Windows\System32\ieframe.dll scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

[Orcus]

Jak na tom jsme nyní Kamčo? Vypadá to líp?

[KamilaS]

ne je to pořád stejné : (
ale uhlí je halt uhlí : DDDD

[jaro3]

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/opravy do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

:Files
DRV - (MBAMSwissArmy) -- C:\Windows\system32\drivers\MBAMSwissArmy.sys File not found
FF - prefs.js..browser.search.isUS: false
FF - prefs.js..browser.startup.homepage: "http://wol.jw.org/cs/wol/dt/r29/lp-b/2015/4/21"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:37.0.2
[2014.08.12 12:20:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PaKSzabovy\AppData\Roaming\Mozilla\Extensions
[2015.04.17 19:05:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PaKSzabovy\AppData\Roaming\Mozilla\Firefox\Profiles\1slyw161.default\extensions
[2015.04.21 08:46:24 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

:Reg
:Commands
[resethosts]
[purity]
[emptytemp]
[EMPTYFLASH]
[start explorer]
[Reboot]


Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Toto otestuj na Virustotal
C:\Windows\System32\SySatm.dat

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

Nebo na:
http://www.virscan.org/

C:\Users\PaKSzabovy\Documents\??????xie.rtf) C:\Users\PaKSzabovy\Documents\卡米拉明认答xie.rtf
C:\Users\PaKSzabovy\Documents\??????xie.rtf) -- C:\Users\PaKSzabovy\Documents\卡米拉明认答xie.rtf
tohle znáš? , dej taky na virustotal.

[KamilaS]

All processes killed
========== OTL ==========
No active process named explorer.exe was found!
No active process named firefox.exe was found!
Service MBAMSwissArmy stopped successfully!
Service MBAMSwissArmy deleted successfully!
File C:\Windows\system32\drivers\MBAMSwissArmy.sys File not found not found.
Prefs.js: false removed from browser.search.isUS
Prefs.js: "http://wol.jw.org/cs/wol/dt/r29/lp-b/2015/4/21" removed from browser.startup.homepage
Prefs.js: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:37.0.2 removed from extensions.enabledAddons
C:\Users\PaKSzabovy\AppData\Roaming\Mozilla\Extensions folder moved successfully.
Folder C:\Users\PaKSzabovy\AppData\Roaming\Mozilla\Firefox\Profiles\1slyw161.default\extensions\ not found.
Folder C:\Program Files\Mozilla Firefox\browser\extensions\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
File sethosts] not found.
File rity] not found.
File ptytemp] not found.
File PTYFLASH] not found.
File art explorer] not found.
File boot] not found.

OTL by OldTimer - Version 3.2.69.0 log created on 05042015_120604

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

[KamilaS]

https://www.virustotal.com/cs/file/957b ... 430734305/
tamty soubory s těmi čínskými znaky, vím o co jde : )

[KamilaS]

moc děkuju, dáváš si záležet, "my mu sice nerozumíme, ale my mu věříme" : )))

[jaro3]

Co problémy?

[KamilaS]

pořád jsou, není to tím, že jsem stáhla (z windowsovských striánek) w.visual studio?