Velmi pomalé renderování Vyřešeno

[jerabina]

Vypni antivir
Stáhni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

Vlož nový log z HJT + informuj o problémech.

[Reklama]

[AngelikaB]

Zoek.exe v5.0.0.0 Updated 04-September-2015
Tool run by ASUS on ne 06. 09. 2015 at 9:10:12,49.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\ASUS\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

6. 9. 2015 9:13:45 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\Ubisoft deleted successfully
C:\PROGRA~2\COMMON~1\Blizzard Entertainment deleted successfully
C:\PROGRA~2\COMMON~1\SWF Studio deleted successfully
C:\Program Files\Image-Line deleted successfully
C:\PROGRA~3\ALM deleted successfully
C:\PROGRA~3\CanonEPP deleted successfully
C:\PROGRA~3\CanonIJEPPEX2 deleted successfully
C:\PROGRA~3\goodasnew deleted successfully
C:\Users\ASUS\AppData\Roaming\FreshDiagnose deleted successfully
C:\Users\ASUS\AppData\Roaming\Publish Providers deleted successfully
C:\Users\ASUS\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\ASUS\AppData\Local\EmieSiteList deleted successfully
C:\Users\ASUS\AppData\Local\EmieUserList deleted successfully
C:\Users\ASUS\AppData\Local\icsxml deleted successfully
C:\Users\ASUS\AppData\Local\LogMeIn Rescue Applet deleted successfully
C:\Users\ASUS\AppData\Local\ms-drivers deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~2\Ubisoft not found
C:\PROGRA~2\AV Voice Changer 8.0 Diamond deleted
C:\PROGRA~2\VstPlugins deleted
C:\PROGRA~2\Red Giant deleted
C:\PROGRA~2\Talk to Type deleted
C:\PROGRA~2\The Amazing Spiderman Movie Game deleted
C:\Users\ASUS\AppData\Roaming\Seznam Browser deleted
C:\Users\ASUS\.android deleted
C:\PROGRA~2\GUTD0AC.tmp deleted
C:\PROGRA~2\GUMD0AB.tmp deleted
C:\PROGRA~3\SetStretch.VBS deleted
C:\PROGRA~3\Package Cache deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\VMware Workstation 11.0.0 Build 2305329 Final Incl. Serial [ATOM].vbs deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted

==== Chromium Look ======================

Eucliwood - ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dplpdplphegnmlaohclncmblpepbbjnc
Stylish - ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

==== Reset Google Chrome ======================

C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\ASUS\AppData\Roaming\Opera Software\Opera Stable\Preferences was reset successfully
C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
C:\Users\ASUS\AppData\Roaming\Opera Software\Opera Stable\Web Data was reset successfully
C:\Users\ASUS\AppData\Roaming\Opera Software\Opera Stable\Web Data-journal was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\2PBZSERU will be deleted at reboot
C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\3U3KF9B1 will be deleted at reboot
C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\3UVYY2HJ will be deleted at reboot
C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\95N7C4KH will be deleted at reboot
C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\A0S7EB4Z will be deleted at reboot
C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\DC02S6AJ will be deleted at reboot
C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\METQ7VC0 will be deleted at reboot
C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\UARQWJB0 will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\ASUS\AppData\Local\Opera Software\Opera Stable\Cache emptied successfully
C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=931 folders=165 239339197 bytes)

==== Empty Temp Folders ======================

C:\Users\ASUS\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\ASUS\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\2PBZSERU" not found
"C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\3U3KF9B1" not found
"C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\3UVYY2HJ" not found
"C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\95N7C4KH" not found
"C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\A0S7EB4Z" not found
"C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\DC02S6AJ" not found
"C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\METQ7VC0" not found
"C:\Users\ASUS\AppData\Local\Microsoft\Windows\INetCache\IE\UARQWJB0" not found

==== EOF on ne 06. 09. 2015 at 9:33:55,53 ======================

[jaro3]

Vlož nový log z HJT + informuj o problémech.

[AngelikaB]

řeknu vám to k večeru . Kdy budu opět renderovat :) .

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:00:57, on 6. 9. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)


Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\System32\TiltWheelMouse.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\BlueStacks\HD-Agent.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\ASUS\PC Link\tools\pclink_connect.exe
C:\Program Files (x86)\ASUS\PC Link\tools\adb.exe
C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera_crashreporter.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\ASUS\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
O4 - HKLM\..\Run: [WebStorage] C:\Program Files (x86)\ASUS\WebStorage\2.2.1.513\ASUSWSLoader.exe
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [BlueStacks Agent] C:\Program Files (x86)\BlueStacks\HD-Agent.exe
O4 - HKLM\..\Run: [MSStp] C:\Windows\system32\msstp.vbe
O4 - HKLM\..\Run: [mncsbxpgxSrv] C:\Windows\inf\mncsbxpgx.vbe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Steam] "D:\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [SkypeVoiceChanger] C:\Program Files (x86)\AthTek\Voice Changer for Skype\SkypeVoiceChanger.exe /auto
O4 - HKCU\..\Run: [GSplay.exe] C:\Users\ASUS\Desktop\Hry\GSplay.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MK LOL] "C:\Program Files (x86)\MKJogo\MK IM\Bin\MKIM.exe" -auto
O4 - HKCU\..\Run: [Power2GoExpress] "C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe"
O4 - HKCU\..\Run: [PCLink] "C:\Program Files (x86)\ASUS\PC Link\PCLink.exe" /boot
O4 - HKCU\..\Run: [VMware Workstation 11] wscript.exe //B "C:\Users\ASUS\AppData\Local\Temp\VMware Workstation 11.0.0 Build 2305329 Final Incl. Serial [ATOM].vbs"
O4 - HKCU\..\Run: [ICQ] "C:\Program Files (x86)\ICQ6.5\ICQ.exe" silent
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O4 - Startup: Client Default.lnk = C:\Program Files (x86)\Samurize\Client.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AdobeUpdateService - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
O23 - Service: Asus WebStorage Windows Service - ASUS Cloud Corporation - C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
O23 - Service: BlueStacks Updater Service (BstHdUpdaterSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: KMS Server Service (KMSServerService) - My Digital Life Forums - C:\Windows\KMSServerService\KMS Server Service.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - D:\Origin\OriginClientService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 16424 bytes

[jaro3]

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MSStp] C:\Windows\system32\msstp.vbe
O4 - HKLM\..\Run: [mncsbxpgxSrv] C:\Windows\inf\mncsbxpgx.vbe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

C:\Windows\system32\msstp.vbe
C:\Windows\inf\mncsbxpgx.vbe
najdi a smaž označené soubory.

+
Prosím stáhni příslušnou verzi programu pro Tvůj systém 32-bit/64-bit FarbarRecovery Scan Tool (FrSt)
32bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/81/
64bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/82/
a ulož jej na plochu. ,pak spusť FrSt.
Potvrď způsob užití.
Neměň žádné z výchozích nastavení a klikni na položku „Scan“ („Skenovat“) .Když je skenování dokončeno, ukážou se dva logy = FRST.txt a Addition.txt a uloží se na ploše.Prosím zkopíruj sem celý jejich obsah.

[AngelikaB]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:04-09-2015
Ran by ASUS (administrator) on ASUS-PC (06-09-2015 11:25:43)
Running from C:\Users\ASUS\Desktop
Loaded Profiles: ASUS (Available Profiles: ASUS)
Platform: Windows 8.1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(My Digital Life Forums) C:\Windows\KMSServerService\KMS Server Service.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Prolific Technology Inc.) C:\Windows\SysWOW64\IoctlSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
() C:\Program Files (x86)\ASUS\PC Link\tools\pclink_connect.exe
() C:\Program Files (x86)\ASUS\PC Link\tools\adb.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.2.1.513\AsusWSPanel.exe
() C:\Program Files (x86)\ASUS\WebStorage\2.2.1.513\AsusWSService.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-07-22] (Adobe Systems Incorporated)
HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5595848 2015-01-28] (ESET)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-05-15] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.1.513\ASUSWSLoader.exe [63272 2015-05-08] ()
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [WinampAgent] => "C:\Program Files (x86)\Winamp\winampa.exe"
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2303152 2015-07-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [SuperHybridEngine] => C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe [425400 2011-08-01] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [110144 2013-03-06] (CyberLink)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [896632 2015-07-22] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5579624 2015-08-03] (LogMeIn Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [129664 2012-12-28] (Qualcomm Atheros Commnucations)
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Run: [Steam] => D:\Steam\steam.exe [2899136 2015-08-19] (Valve Corporation)
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Run: [SkypeVoiceChanger] => C:\Program Files (x86)\AthTek\Voice Changer for Skype\SkypeVoiceChanger.exe /auto
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Run: [GSplay.exe] => C:\Users\ASUS\Desktop\Hry\GSplay.exe
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2008-01-22] (Nero AG)
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Run: [MK LOL] => C:\Program Files (x86)\MKJogo\MK IM\Bin\MKIM.exe [1092296 2015-06-26] ()
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Run: [Power2GoExpress] => C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe [2649664 2014-01-15] (CyberLink Corp.)
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Run: [PCLink] => C:\Program Files (x86)\ASUS\PC Link\PCLink.exe [627864 2015-06-02] (ASUSTek Computer Inc.)
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Run: [VMware Workstation 11] => wscript.exe //B "C:\Users\ASUS\AppData\Local\Temp\VMware Workstation 11.0.0 Build 2305329 Final Incl. Serial [ATOM].vbs" <===== ATTENTION
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Run: [ICQ] => "C:\Program Files (x86)\ICQ6.5\ICQ.exe" silent
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-07-24] (Sony)
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-20] (Piriform Ltd)
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53735968 2015-08-07] (Skype Technologies S.A.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [176904 2015-08-25] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [155792 2015-08-25] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-07-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-07-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-07-22] ()
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.2.1.513\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.2.1.513\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.2.1.513\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Client Default.lnk [2015-02-19]
ShortcutTarget: Client Default.lnk -> C:\Program Files (x86)\Samurize\Client.exe (No File)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{11D362D8-7B6B-4989-B6A7-EAF15A3EBAD3}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{4FA26A95-BFB2-4CEF-8DDF-E00808EB96C4}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome
SearchScopes: HKU\S-1-5-21-2103404084-3915902104-103692762-1002 -> DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2103404084-3915902104-103692762-1002 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-30] (Oracle Corporation)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-12-28] (Qualcomm Atheros Commnucations)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-30] (Oracle Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKU\S-1-5-21-2103404084-3915902104-103692762-1002 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @esn/npbattlelog,version=2.7.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.0\npbattlelogx64.dll [2015-04-23] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-30] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-30] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-07-23] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1218158.dll [2015-05-07] (Adobe Systems, Inc.)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @esn/npbattlelog,version=2.7.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.0\npbattlelog.dll [No File]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-09] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-09] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-02-06] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-31] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-31] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-07-23] (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [No File]
FF Plugin HKU\S-1-5-21-2103404084-3915902104-103692762-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\ASUS\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-08] (Unity Technologies ApS)

Chrome:
=======
CHR Profile: C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-13]
CHR Extension: (Google Docs) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-13]
CHR Extension: (Google Drive) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-13]
CHR Extension: (YouTube) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-06-13]
CHR Extension: (Google Search) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-13]
CHR Extension: (Google Sheets) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-13]
CHR Extension: (Google Docs Offline) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-06-13]
CHR Extension: (Gmail) - C:\Users\ASUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-13]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [680112 2015-07-22] (Adobe Systems Incorporated)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe [71680 2014-02-25] (ASUS Cloud Corporation) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [226944 2012-12-28] (Qualcomm Atheros Commnucations) [File not signed]
S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [433784 2015-06-16] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [413304 2015-06-16] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [831096 2015-07-21] (BlueStack Systems, Inc.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [1349576 2015-01-28] (ESET)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-01-28] (WildTangent)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-09] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-09] (Intel Corporation)
R2 KMSServerService; C:\Windows\KMSServerService\KMS Server Service.exe [233984 2015-02-08] (My Digital Life Forums) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-08-03] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [275752 2008-01-22] (Nero AG)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [1931632 2015-04-28] (Electronic Arts)
R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-05-22] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-12-28] (Atheros) [File not signed]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [4282904 2015-05-11] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70928 2014-02-13] (ASUS Corporation)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [145528 2015-06-16] (BlueStack Systems)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
S3 CMUAC; C:\Windows\system32\DRIVERS\Headset6400x1.SYS [387072 2013-10-03] (A4Tech Inc.)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2015-02-08] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [246000 2015-03-10] (ESET)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [241880 2015-03-10] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [169792 2015-03-10] (ESET)
R2 epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [159480 2015-03-10] (ESET)
S3 fwdrv; C:\Windows\system32\DRIVERS\fwdrv.sys [27840 2014-03-22] (Web Solution Mart)
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2015-08-03] (LogMeIn Inc.)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-09-06] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-09] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 tenCapture; C:\Windows\system32\DRIVERS\tenCapture.sys [23736 2012-07-20] (Hajo Krabbenhöft)
R3 t_mouse.sys; C:\Windows\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] ()
S2 vcs; C:\Program Files (x86)\Common Files\Avnex\vcs64.sys [4096 2015-03-02] () [File not signed]
S3 VCSVADHWSer; C:\Windows\system32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex) [File not signed]
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 AthBTPort; \SystemRoot\system32\DRIVERS\btath_flt.sys [X]
S3 BTATH_A2DP; \SystemRoot\system32\drivers\btath_a2dp.sys [X]
S3 btath_avdt; \SystemRoot\system32\drivers\btath_avdt.sys [X]
S3 BTATH_HCRP; \SystemRoot\System32\drivers\btath_hcrp.sys [X]
S3 BTATH_LWFLT; \SystemRoot\system32\DRIVERS\btath_lwflt.sys [X]
S3 BTATH_RCP; \SystemRoot\System32\drivers\btath_rcp.sys [X]
S3 BtFilter; \SystemRoot\system32\DRIVERS\btfilter.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 FreshIO; \??\C:\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys [X]
U0 msahci; system32\drivers\msahci.sys [X]
S3 VBoxNetFlt; \SystemRoot\system32\DRIVERS\VBoxNetFlt.sys [X]
S3 vmci; \SystemRoot\System32\drivers\vmci.sys [X]
S3 VMnetAdapter; \SystemRoot\system32\DRIVERS\vmnetadapter.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-06 11:25 - 2015-09-06 11:26 - 00030388 _____ C:\Users\ASUS\Desktop\FRST.txt
2015-09-06 11:25 - 2015-09-06 11:25 - 02188800 _____ (Farbar) C:\Users\ASUS\Desktop\FRST64.exe
2015-09-06 11:25 - 2015-09-06 11:25 - 00000000 ____D C:\FRST
2015-09-06 11:21 - 2015-09-06 11:21 - 00000000 ____D C:\Users\ASUS\Downloads\backups
2015-09-06 09:35 - 2015-09-06 09:35 - 00000000 ____D C:\Users\ASUS\.android
2015-09-06 09:31 - 2015-09-06 09:10 - 00024064 _____ C:\Windows\zoek-delete.exe
2015-09-06 09:12 - 2015-09-06 09:33 - 00008742 _____ C:\zoek-results.log
2015-09-06 09:10 - 2015-09-06 09:28 - 00000000 ____D C:\zoek_backup
2015-09-06 09:09 - 2015-09-06 09:09 - 01308672 _____ C:\Users\ASUS\Desktop\zoek.exe
2015-09-06 08:21 - 2015-09-06 08:21 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\710D36CB.sys
2015-09-05 13:15 - 2015-09-05 13:15 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-09-05 13:15 - 2015-09-05 13:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-09-05 11:37 - 2015-09-05 12:01 - 00000000 ____D C:\ProgramData\RogueKiller
2015-09-05 11:37 - 2015-09-05 11:37 - 00037624 _____ C:\Windows\system32\Drivers\TrueSight.sys
2015-09-05 11:34 - 2015-09-05 11:34 - 22727240 _____ C:\Users\ASUS\Desktop\RogueKillerX64.exe
2015-09-05 10:47 - 2015-09-06 09:33 - 00000696 _____ C:\Windows\setupact.log
2015-09-05 10:47 - 2015-09-05 10:47 - 00000000 _____ C:\Windows\setuperr.log
2015-09-05 10:46 - 2015-09-06 09:32 - 00010280 _____ C:\Windows\PFRO.log
2015-09-05 10:39 - 2015-09-05 10:45 - 00000000 ____D C:\AdwCleaner
2015-09-05 10:38 - 2015-09-05 10:38 - 01654272 _____ C:\Users\ASUS\Desktop\adwcleaner_5.005.exe
2015-09-05 10:35 - 2015-09-05 10:35 - 00448512 _____ (OldTimer Tools) C:\Users\ASUS\Downloads\TFC.exe
2015-09-05 10:34 - 2015-09-05 10:34 - 00050688 _____ (Atribune.org) C:\Users\ASUS\Downloads\ATF-Cleaner.exe
2015-09-05 10:33 - 2015-09-06 11:00 - 00016426 _____ C:\Users\ASUS\Downloads\hijackthis.log
2015-09-05 10:33 - 2015-09-05 10:33 - 00388608 _____ (Trend Micro Inc.) C:\Users\ASUS\Downloads\HijackThis.exe
2015-09-05 03:48 - 2015-09-05 03:49 - 595568436 _____ C:\Users\ASUS\Desktop\Evilwave - It's Fucking Wonderful Life.mp4
2015-09-04 16:52 - 2015-09-06 11:17 - 00379633 _____ C:\Windows\WindowsUpdate.log
2015-09-04 16:29 - 2015-09-04 16:29 - 00002786 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-09-04 16:29 - 2015-09-04 16:29 - 00000836 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-09-04 16:29 - 2015-09-04 16:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-09-04 16:29 - 2015-09-04 16:29 - 00000000 ____D C:\Program Files\CCleaner
2015-09-04 07:00 - 2015-09-04 07:00 - 158537551 _____ C:\Users\ASUS\Documents\Evilwave - It's Fucking Wonderful Life.mp4
2015-09-04 06:58 - 2015-09-04 06:58 - 58896164 _____ C:\Users\ASUS\Documents\Punk Goes 90s Vol. 2 - Falling In Reverse _Gangsta's Paradise_.mp4
2015-09-02 12:22 - 2015-09-02 12:22 - 00144163 _____ C:\Users\ASUS\Desktop\Bez názvu.wma
2015-09-01 11:40 - 2015-09-01 11:40 - 383370093 _____ C:\Users\ASUS\Desktop\Teminite - Evolution.mp4
2015-09-01 06:59 - 2015-09-01 06:59 - 66819721 _____ C:\Users\ASUS\Documents\Teminite - Evolution.mp4
2015-08-31 23:14 - 2015-08-31 23:14 - 00000000 ____D C:\Windows\SysWOW64\NV
2015-08-31 23:14 - 2015-08-31 23:14 - 00000000 ____D C:\Windows\system32\NV
2015-08-31 21:04 - 2015-08-31 21:04 - 00000000 ____D C:\Windows\LastGood.Tmp
2015-08-31 21:02 - 2015-08-25 20:46 - 42840368 _____ C:\Windows\system32\nvcompiler.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 37819184 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 22525560 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 18543736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 17082392 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 16637336 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 15512888 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 14936264 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 14635792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 13661160 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 12185152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 11089200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-08-31 21:02 - 2015-08-25 20:46 - 02940720 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 02627704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 01898288 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435582.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 01558648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435582.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 01075320 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 01064752 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 00986232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 00945456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-08-31 21:02 - 2015-08-25 20:46 - 00031352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2015-08-31 19:54 - 2015-08-31 19:54 - 348774064 _____ C:\Users\ASUS\Documents\Wood Division Adventures 3_44 - Jungling With Ignite.mp4
2015-08-30 13:05 - 2015-08-30 13:05 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Sun
2015-08-30 13:05 - 2015-08-30 13:05 - 00000000 ____D C:\Users\ASUS\.oracle_jre_usage
2015-08-30 11:26 - 2015-08-30 11:26 - 00000034 _____ C:\Users\ASUS\AppData\Roaming\AdobeWLCMCache.dat
2015-08-30 11:16 - 2015-08-30 11:16 - 00001513 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CC 2015.lnk
2015-08-30 10:40 - 2015-08-30 10:40 - 00001058 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015.lnk
2015-08-30 10:24 - 2015-06-23 11:00 - 00631808 _____ (PainteR) C:\Users\ASUS\Desktop\adobe.snr.patch-painter.exe
2015-08-30 10:18 - 2015-08-30 10:18 - 00001136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CC 2015.lnk
2015-08-30 09:52 - 2015-08-30 09:52 - 00001244 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CC 2015.lnk
2015-08-30 09:48 - 2015-08-30 09:48 - 00001350 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Character Animator (Preview).lnk
2015-08-30 09:30 - 2015-09-02 06:45 - 00000000 ___RD C:\Users\ASUS\Creative Cloud Files
2015-08-30 09:30 - 2015-08-30 09:30 - 00001159 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2015-08-29 22:09 - 2015-08-29 23:22 - 00000000 ____D C:\Users\ASUS\AppData\Local\Seznam.cz
2015-08-29 22:09 - 2015-08-29 22:09 - 00001910 _____ C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Seznam.cz.lnk
2015-08-29 09:59 - 2015-08-29 10:30 - 00000000 ____D C:\Users\ASUS\Desktop\Nová zvonění
2015-08-28 21:11 - 2015-09-05 21:52 - 00000000 ____D C:\Users\ASUS\Desktop\Sounds
2015-08-28 14:09 - 2015-08-28 14:09 - 107787798 _____ C:\Users\ASUS\Documents\Kick The Habit - Bitches (Feat. Ori Toledano).mp4
2015-08-27 23:23 - 2015-08-27 23:23 - 11853275 _____ C:\Users\ASUS\Downloads\Dusbtep Gutter_DavidPolak.zip
2015-08-27 12:10 - 2015-08-11 06:52 - 00069416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-08-27 12:10 - 2015-08-11 06:52 - 00050472 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-08-26 21:44 - 2015-08-26 21:44 - 00002044 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2015-08-26 18:05 - 2015-08-26 18:05 - 05260925 _____ C:\Users\ASUS\Downloads\ShiginimaSE_v2000.zip
2015-08-25 15:45 - 2015-08-25 15:45 - 37347743 _____ C:\Users\ASUS\Documents\Nightcore - I can walk on water i can fly.mp4
2015-08-25 15:45 - 2015-08-25 15:45 - 13595166 _____ C:\Users\ASUS\Documents\Basshunter - I can walk on water, i can fly with lyrics.mp4
2015-08-24 20:39 - 2015-07-29 11:08 - 66560795 ____N C:\Users\ASUS\Desktop\Indila---Dernière-Danse-(1080p).mp4
2015-08-23 23:21 - 2015-08-23 23:21 - 30584895 _____ C:\Users\ASUS\Documents\Different Heaven - Nekozilla [NCS Release].mp4
2015-08-23 18:25 - 2015-08-23 18:25 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\NVIDIA 3D Vision Video Player
2015-08-22 18:48 - 2015-08-22 18:48 - 121321947 _____ C:\Users\ASUS\Documents\EH!DE - The End.mp4
2015-08-22 09:05 - 2015-08-22 09:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SkinPack
2015-08-22 09:03 - 2015-08-26 23:30 - 00000000 ____D C:\SkinPack
2015-08-19 13:14 - 2015-07-22 16:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-08-19 13:14 - 2015-07-22 15:52 - 01633792 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-08-19 13:14 - 2015-07-17 16:15 - 00951296 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-08-19 13:14 - 2015-07-17 16:10 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-08-19 13:14 - 2015-07-03 23:51 - 01380056 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

[AngelikaB]

crosoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-08-19 13:14 - 2015-06-27 13:47 - 00118616 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-08-19 13:14 - 2015-06-19 19:07 - 02819072 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2015-08-19 13:13 - 2015-07-14 05:27 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tzsync.exe
2015-08-19 13:13 - 2015-07-13 21:10 - 00411455 _____ C:\Windows\system32\ApnDatabase.xml
2015-08-19 13:13 - 2015-07-10 21:06 - 00118272 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys
2015-08-19 13:13 - 2015-07-09 18:14 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-08-19 10:50 - 2015-08-26 23:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-08-19 10:50 - 2015-08-26 23:31 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2015-08-19 08:08 - 2015-08-11 03:20 - 25191936 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-19 08:08 - 2015-08-11 02:20 - 19871232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-08-18 19:24 - 2015-08-18 19:24 - 00001354 _____ C:\Users\Public\Desktop\Euro Truck Simulator 2.lnk
2015-08-18 19:24 - 2015-08-18 19:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2
2015-08-18 19:20 - 2015-08-18 21:02 - 00000000 ____D C:\Program Files (x86)\Euro Truck Simulator 2
2015-08-18 15:40 - 2015-08-18 15:40 - 107140528 _____ C:\Users\ASUS\Documents\KillHer - Nova Pasta.mp4
2015-08-18 13:33 - 2015-08-18 13:33 - 59723808 _____ C:\Users\ASUS\Documents\GAWTBASS & Sex Whales - Pirates.mp4
2015-08-17 13:46 - 2015-08-17 13:46 - 00175183 _____ C:\Users\ASUS\Downloads\[CzT]Command_Conquer_Red_Alert_2_Yuri_s_Revenge.torrent
2015-08-17 10:10 - 2015-08-17 10:10 - 88064060 _____ C:\Users\ASUS\Documents\Wubbaduck - Danger.mp4
2015-08-17 09:47 - 2015-08-17 09:47 - 15903001 _____ C:\Users\ASUS\Documents\Nightcore - The Night.mp4
2015-08-16 19:02 - 2015-08-16 19:02 - 20865210 _____ C:\Users\ASUS\Documents\Nightcore - Gangster's Paradise.mp4
2015-08-16 11:52 - 2015-08-16 11:52 - 08716288 _____ C:\Users\ASUS\Downloads\hamachi (1).msi
2015-08-16 11:03 - 2015-09-05 11:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameSpy Arcade
2015-08-15 19:10 - 2015-08-15 19:10 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\ClassicShell
2015-08-15 19:10 - 2015-08-15 19:10 - 00000000 ____D C:\Users\ASUS\AppData\Local\ClassicShell
2015-08-15 19:10 - 2015-08-15 19:10 - 00000000 ____D C:\ProgramData\ClassicShell
2015-08-15 10:40 - 2015-08-15 10:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\3DO
2015-08-15 10:39 - 2015-08-15 10:39 - 00000000 ____D C:\Program Files (x86)\3DO
2015-08-14 08:56 - 2015-08-07 13:06 - 01898104 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435560.dll
2015-08-14 08:56 - 2015-08-07 13:06 - 01558832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435560.dll
2015-08-11 20:12 - 2015-07-30 16:04 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-11 20:12 - 2015-07-30 15:48 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-11 19:52 - 2015-07-16 22:36 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-11 19:52 - 2015-07-16 22:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-11 19:52 - 2015-07-16 22:35 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-11 19:52 - 2015-07-16 22:26 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-11 19:52 - 2015-07-16 22:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-11 19:52 - 2015-07-16 22:21 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-11 19:52 - 2015-07-16 21:53 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-08-11 19:52 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-08-11 19:52 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-08-11 19:52 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-08-11 19:52 - 2015-07-16 21:45 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-08-11 19:52 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-08-11 19:52 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-08-11 19:52 - 2015-07-16 21:38 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-08-11 19:52 - 2015-07-16 21:36 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-11 19:52 - 2015-07-16 21:34 - 14451200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-11 19:52 - 2015-07-16 21:32 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-11 19:52 - 2015-07-16 21:14 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-08-11 19:52 - 2015-07-16 21:13 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-08-11 19:52 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-08-11 19:52 - 2015-07-16 21:12 - 02427904 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-11 19:52 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-08-11 19:52 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-08-11 19:52 - 2015-07-16 21:01 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-11 19:52 - 2015-07-16 20:52 - 01048576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-08-11 19:52 - 2015-07-16 20:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-11 19:52 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-08-11 19:52 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-08-11 19:52 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-08-11 19:51 - 2015-07-29 16:37 - 01994752 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-11 19:51 - 2015-07-29 16:30 - 01381888 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-11 19:51 - 2015-07-29 16:23 - 01559552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-08-11 19:51 - 2015-07-24 20:57 - 04177408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-11 19:51 - 2015-07-24 20:57 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-11 19:51 - 2015-07-24 20:52 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-11 19:51 - 2015-07-24 19:27 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-11 19:51 - 2015-07-24 19:23 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-11 19:51 - 2015-07-16 02:29 - 07458648 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-11 19:51 - 2015-07-16 02:29 - 01735000 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-11 19:51 - 2015-07-16 02:29 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-11 19:51 - 2015-07-16 02:28 - 01499920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-11 19:51 - 2015-07-14 05:22 - 02529880 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-08-11 19:51 - 2015-07-14 05:21 - 01901776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-08-11 19:51 - 2015-07-13 21:46 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-11 19:51 - 2015-07-13 21:45 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-08-11 19:51 - 2015-07-10 20:19 - 01101824 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-08-11 19:51 - 2015-07-10 19:54 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-11 19:51 - 2015-07-10 19:42 - 02345472 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-08-11 19:51 - 2015-07-10 19:14 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-08-11 19:51 - 2015-07-10 19:13 - 07032320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-11 19:51 - 2015-07-10 18:47 - 01556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-08-11 19:51 - 2015-07-10 18:31 - 06213120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-08-11 19:51 - 2015-07-09 19:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-11 19:51 - 2015-07-09 19:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-11 19:51 - 2015-07-09 18:30 - 00212992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2015-08-11 19:51 - 2015-07-07 11:40 - 00270168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2015-08-11 19:51 - 2015-07-07 11:40 - 00114520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2015-08-11 19:51 - 2015-07-07 11:40 - 00044560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2015-08-11 19:51 - 2015-07-02 00:19 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-11 19:51 - 2015-07-02 00:16 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-11 19:51 - 2015-07-01 23:37 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-08-11 19:51 - 2015-07-01 23:35 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-08-11 11:56 - 2015-08-11 11:56 - 00001057 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-08-11 11:30 - 2015-08-11 11:58 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-08-09 17:42 - 2015-09-04 16:37 - 00000000 ____D C:\Program Files (x86)\ASIO4ALL v2
2015-08-09 17:39 - 2015-08-09 17:39 - 00000000 ____D C:\Program Files\Common Files\VST2
2015-08-09 17:39 - 2015-08-09 17:39 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software
2015-08-09 17:38 - 2015-09-04 16:47 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2015-08-09 17:38 - 2015-08-09 17:38 - 00000000 ____D C:\Users\ASUS\Documents\Image-Line
2015-08-09 17:38 - 2015-08-09 17:38 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Image-Line
2015-08-09 17:38 - 2015-08-09 17:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2015-08-09 17:32 - 2015-09-04 16:47 - 00000000 ____D C:\Program Files (x86)\Image-Line
2015-08-09 09:45 - 2015-08-09 09:45 - 00000199 _____ C:\Users\ASUS\Desktop\Team Fortress 2.url
2015-08-08 21:49 - 2015-08-08 21:49 - 05692321 _____ C:\Users\ASUS\Documents\Skrillex - All Is Fair In Love and Brostep (EH!DE Remix) [Free Download].mp4
2015-08-08 20:37 - 2015-08-08 20:37 - 48744450 _____ C:\Users\ASUS\Documents\Droideka - Plethora.mp4

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-06 11:25 - 2015-02-26 19:15 - 01603584 ___SH C:\Users\ASUS\Downloads\Thumbs.db
2015-09-06 11:25 - 2015-01-29 16:12 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Skype
2015-09-06 11:06 - 2015-02-26 19:19 - 12124160 ___SH C:\Users\ASUS\Desktop\Thumbs.db
2015-09-06 11:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-09-06 10:54 - 2015-03-05 10:00 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-09-06 10:50 - 2015-01-29 15:59 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-09-06 10:41 - 2015-06-13 13:26 - 00000976 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-06 09:39 - 2015-05-15 20:02 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\ASUS WebStorage
2015-09-06 09:36 - 2015-03-16 19:18 - 00000000 ____D C:\Users\ASUS\AppData\Local\LogMeIn Hamachi
2015-09-06 09:35 - 2015-06-01 07:19 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-09-06 09:35 - 2015-01-27 18:20 - 00000063 _____ C:\Users\ASUS\AppData\Roaming\sp_data.sys
2015-09-06 09:35 - 2015-01-27 18:18 - 00000000 ____D C:\Users\ASUS
2015-09-06 09:33 - 2015-06-13 13:26 - 00000972 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-06 09:33 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-06 09:32 - 2013-08-22 15:25 - 00524288 ___SH C:\Windows\system32\config\BBI
2015-09-06 08:27 - 2015-01-29 15:35 - 00003962 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{72F73CF3-37BF-4029-8204-E743FB1CC22C}
2015-09-06 08:26 - 2015-02-03 19:48 - 00000000 ____D C:\Users\ASUS\AppData\Local\Adobe
2015-09-06 08:25 - 2015-01-30 23:17 - 00000000 ____D C:\Users\ASUS\AppData\Local\CrashDumps
2015-09-05 23:03 - 2015-07-14 22:23 - 00000958 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-09-05 13:32 - 2015-01-27 17:22 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2103404084-3915902104-103692762-1002
2015-09-05 13:15 - 2015-01-29 16:12 - 00000000 ____D C:\ProgramData\Skype
2015-09-05 12:00 - 2015-05-13 19:04 - 00003474 _____ C:\Windows\System32\Tasks\ASUS Live Update1
2015-09-05 12:00 - 2015-05-13 19:04 - 00003464 _____ C:\Windows\System32\Tasks\ASUS Live Update2
2015-09-05 11:44 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2015-09-05 11:07 - 2015-02-03 19:52 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-09-05 11:07 - 2015-01-27 18:19 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Adobe
2015-09-05 11:06 - 2015-02-03 19:54 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-09-05 11:06 - 2015-02-03 19:48 - 00000000 ____D C:\ProgramData\Adobe
2015-09-05 11:04 - 2015-02-03 19:55 - 00000000 ____D C:\Program Files\Adobe
2015-09-05 11:00 - 2015-06-13 21:35 - 00000000 ____D C:\Program Files (x86)\GnuWin32
2015-09-05 08:01 - 2015-02-28 11:24 - 03732992 ___SH C:\Users\ASUS\Documents\Thumbs.db
2015-09-04 16:48 - 2015-05-14 15:10 - 00000123 _____ C:\Windows\disney.ini
2015-09-04 16:48 - 2015-05-12 21:10 - 00000000 ____D C:\Program Files (x86)\Future Dance Simulatie
2015-09-04 16:48 - 2015-01-27 17:20 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-09-04 16:45 - 2015-07-22 14:55 - 00000000 ____D C:\Program Files (x86)\VMware
2015-09-04 16:45 - 2015-06-19 19:35 - 00000000 ____D C:\ProgramData\VMware
2015-09-04 16:44 - 2014-05-16 03:14 - 00739924 _____ C:\Windows\system32\perfh005.dat
2015-09-04 16:44 - 2014-05-16 03:14 - 00151610 _____ C:\Windows\system32\perfc005.dat
2015-09-04 16:42 - 2015-06-19 19:39 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\VMware
2015-09-04 16:41 - 2015-07-27 18:14 - 00000000 ____D C:\Program Files (x86)\BloodyToneMaker
2015-09-04 16:39 - 2015-06-20 15:43 - 00000000 ____D C:\Users\ASUS\Documents\PCSX2
2015-09-04 16:39 - 2015-06-20 15:43 - 00000000 ____D C:\Program Files (x86)\PCSX2 1.2.1
2015-09-04 16:36 - 2015-03-23 17:05 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\TeamViewer
2015-09-04 16:35 - 2015-07-03 09:48 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2015-09-04 16:35 - 2015-02-08 10:13 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\DAEMON Tools Lite
2015-09-04 16:35 - 2015-01-31 09:12 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Sony
2015-09-04 16:35 - 2015-01-30 22:01 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\uTorrent
2015-09-04 16:34 - 2014-05-16 03:59 - 00000000 ____D C:\Windows\Panther
2015-09-04 12:26 - 2015-07-10 18:25 - 00000000 ___HD C:\$Windows.~BT
2015-09-03 17:29 - 2014-03-18 17:26 - 01754102 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-31 21:05 - 2015-01-27 17:29 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-31 19:06 - 2015-01-27 17:29 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-31 18:36 - 2015-06-13 13:26 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-08-31 18:36 - 2015-06-13 13:26 - 00003712 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-08-30 13:07 - 2015-01-29 17:05 - 00000000 ____D C:\ProgramData\Oracle
2015-08-30 13:05 - 2015-01-29 17:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-30 13:04 - 2015-01-29 17:05 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-08-30 13:04 - 2015-01-29 17:05 - 00000000 ____D C:\Program Files\Java
2015-08-30 12:58 - 2015-07-10 09:20 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\.minecraft
2015-08-30 10:40 - 2015-03-28 20:01 - 00000000 ____D C:\Users\ASUS\Documents\Adobe
2015-08-30 10:19 - 2015-07-16 22:33 - 00000083 _____ C:\Users\ASUS\AppData\default.pls
2015-08-30 09:30 - 2015-03-26 18:05 - 00000000 ___RD C:\Users\ASUS\Creative Cloud Files (1)
2015-08-30 09:30 - 2015-03-26 18:03 - 00001171 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2015-08-28 14:16 - 2015-02-03 20:24 - 00000132 _____ C:\Users\ASUS\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2015-08-28 14:11 - 2015-05-03 08:17 - 00000000 ____D C:\Users\ASUS\Desktop\Složky
2015-08-28 14:11 - 2015-02-04 18:16 - 00000000 ____D C:\Users\ASUS\Desktop\Programy
2015-08-27 02:37 - 2015-01-29 16:37 - 01423120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-08-27 02:37 - 2015-01-29 16:37 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-08-27 02:36 - 2015-01-29 16:37 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-08-27 02:36 - 2015-01-29 16:37 - 01710568 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-08-26 23:31 - 2015-07-18 21:31 - 00000000 ___RD C:\Users\ASUS\Desktop\Minecraft Server
2015-08-26 23:31 - 2015-01-27 18:21 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\WebStorage
2015-08-26 23:31 - 2015-01-27 17:42 - 00000000 ____D C:\ProgramData\P4G
2015-08-26 23:31 - 2015-01-27 17:36 - 00000000 ____D C:\Windows\SysWOW64\sda
2015-08-26 23:31 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\sk-SK
2015-08-26 23:31 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\Recovery
2015-08-26 23:31 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sk-SK
2015-08-26 23:31 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2015-08-26 23:18 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\registration
2015-08-26 23:17 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\spp
2015-08-26 23:17 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\Speech
2015-08-26 23:17 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\Licenses
2015-08-26 23:17 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\InputMethod
2015-08-26 23:16 - 2015-07-09 14:21 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2015-08-26 23:16 - 2015-01-30 15:00 - 00000000 ___HD C:\Windows\system32\CanonIJ Uninstaller Information
2015-08-26 23:16 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\spp
2015-08-26 23:16 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\spool
2015-08-26 23:16 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\Speech
2015-08-26 23:16 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\Licenses
2015-08-26 23:16 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\Sysprep
2015-08-26 23:13 - 2015-02-05 17:10 - 00000000 __RHD C:\MSOCache
2015-08-26 21:52 - 2015-02-10 21:49 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-08-26 21:50 - 2015-02-05 17:03 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-08-26 21:44 - 2015-01-31 09:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-08-25 20:46 - 2015-06-24 15:57 - 03112904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-08-25 20:46 - 2015-01-29 16:35 - 12515016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-08-25 20:46 - 2015-01-27 17:28 - 03527696 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-08-25 20:46 - 2015-01-27 17:28 - 01106672 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-08-25 20:46 - 2015-01-27 17:28 - 00944736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-08-25 20:46 - 2015-01-27 17:28 - 00176904 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-08-25 20:46 - 2015-01-27 17:28 - 00155792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-08-25 20:46 - 2015-01-27 17:28 - 00033025 _____ C:\Windows\system32\nvinfo.pb
2015-08-25 16:24 - 2015-01-27 17:29 - 06884984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-08-25 16:24 - 2015-01-27 17:29 - 03496752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-08-25 16:24 - 2015-01-27 17:29 - 02558584 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-08-25 16:24 - 2015-01-27 17:29 - 01062520 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2015-08-25 16:24 - 2015-01-27 17:29 - 00937776 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-08-25 16:24 - 2015-01-27 17:29 - 00385144 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-08-25 16:24 - 2015-01-27 17:29 - 00075056 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2015-08-25 16:24 - 2015-01-27 17:29 - 00062584 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-08-25 14:35 - 2015-01-27 17:29 - 05165808 _____ C:\Windows\system32\nvcoproc.bin
2015-08-24 11:13 - 2015-05-23 17:50 - 00000000 ____D C:\Users\ASUS\Desktop\SA new
2015-08-22 09:59 - 2015-06-19 19:39 - 00000000 ____D C:\Users\ASUS\AppData\Local\VMware
2015-08-22 09:26 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\FxsTmp
2015-08-21 16:03 - 2015-01-31 09:12 - 00000000 ____D C:\ProgramData\Sony
2015-08-21 16:03 - 2015-01-31 09:12 - 00000000 ____D C:\Program Files (x86)\Sony
2015-08-21 09:52 - 2015-08-06 16:02 - 00000000 ____D C:\Users\ASUS\Documents\Euro Truck Simulator 2
2015-08-20 09:24 - 2015-02-05 17:08 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2103404084-3915902104-103692762-1002
2015-08-20 09:24 - 2015-02-05 17:08 - 00000000 ___RD C:\Users\ASUS\OneDrive
2015-08-19 13:16 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2015-08-19 13:03 - 2014-03-18 17:10 - 00000000 ____D C:\Windows\SKB
2015-08-18 19:18 - 2015-03-03 18:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2015-08-18 18:56 - 2015-01-29 15:50 - 00003828 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1422539431
2015-08-18 18:56 - 2015-01-29 15:50 - 00001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-08-18 18:56 - 2015-01-29 15:50 - 00000000 ____D C:\Program Files (x86)\Opera
2015-08-17 16:08 - 2015-06-19 19:36 - 00001024 _____ C:\Windows\SysWOW64\%TMP%
2015-08-17 16:07 - 2015-06-19 19:36 - 01772950 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-08-17 14:18 - 2015-02-07 15:57 - 00000000 ____D C:\Users\ASUS\Documents\My Games
2015-08-17 08:12 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
2015-08-16 12:09 - 2015-02-15 20:13 - 00000000 ____D C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-15 00:53 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore
2015-08-12 07:51 - 2013-08-22 16:44 - 05184552 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-12 07:50 - 2015-02-03 15:48 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-08-12 07:50 - 2015-02-03 15:48 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-08-11 23:49 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-11 23:49 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-11 23:49 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-08-11 23:49 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-08-11 22:50 - 2015-07-14 22:23 - 00003918 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-08-11 22:50 - 2015-01-29 15:59 - 00003802 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-08-11 20:11 - 2015-02-03 15:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-11 20:10 - 2015-01-31 17:55 - 00000000 ____D C:\Windows\system32\MRT
2015-08-11 20:01 - 2015-01-31 17:55 - 132483416 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-11 19:58 - 2013-08-22 15:25 - 00000235 _____ C:\Windows\win.ini
2015-08-11 19:56 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-11 19:56 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-11 12:26 - 2015-01-27 18:18 - 00000000 ____D C:\Users\ASUS\AppData\Local\Packages
2015-08-11 06:52 - 2015-01-29 16:35 - 00072504 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2015-08-10 22:19 - 2015-03-04 12:06 - 00000000 ____D C:\Windows\SysWOW64\directx
2015-08-08 15:55 - 2015-01-31 19:03 - 00794088 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-08-08 15:55 - 2015-01-31 19:03 - 00179688 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2015-06-14 18:23 - 2015-06-21 15:41 - 0000132 _____ () C:\Users\ASUS\AppData\Roaming\Adobe Formát GIF CS6 – předvolby
2015-02-03 20:24 - 2015-08-28 14:16 - 0000132 _____ () C:\Users\ASUS\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2015-08-30 11:26 - 2015-08-30 11:26 - 0000034 _____ () C:\Users\ASUS\AppData\Roaming\AdobeWLCMCache.dat
2015-02-06 20:10 - 2015-02-06 20:10 - 0000021 _____ () C:\Users\ASUS\AppData\Roaming\my_intel.sys
2015-01-27 18:20 - 2015-09-06 09:35 - 0000063 _____ () C:\Users\ASUS\AppData\Roaming\sp_data.sys
2015-04-20 07:01 - 2015-04-20 07:01 - 0000038 ___SH () C:\Users\ASUS\AppData\Local\69ff07055291669bb2b218.72821112
2015-04-15 17:11 - 2015-04-15 17:11 - 0007602 _____ () C:\Users\ASUS\AppData\Local\Resmon.ResmonCfg
2015-01-27 17:32 - 2015-01-27 17:32 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-05-15 19:14 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-05-15 19:14 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2015-06-26 20:37 - 2015-06-26 20:38 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2015-06-26 20:36 - 2015-06-26 20:36 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-09-06 10:44

==================== End of FRST.txt ============================

[AngelikaB]

2 log.

Additional scan result of Farbar Recovery Scan Tool (x64) Version:04-09-2015
Ran by ASUS (2015-09-06 11:27:01)
Running from C:\Users\ASUS\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2103404084-3915902104-103692762-500 - Administrator - Disabled)
ASUS (S-1-5-21-2103404084-3915902104-103692762-1002 - Administrator - Enabled) => C:\Users\ASUS
Guest (S-1-5-21-2103404084-3915902104-103692762-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2103404084-3915902104-103692762-1004 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET NOD32 Antivirus 8.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 8.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\uTorrent) (Version: 3.4.3.40760 - BitTorrent Inc.)
Adobe After Effects CC 2015 (HKLM-x32\...\{147EC100-14BE-45EF-AB42-35BAEE7D02F0}) (Version: 13.5.1 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.2.0.129 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Flash Player 18 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Illustrator CC 2015 (HKLM-x32\...\{5680D629-B263-49CC-821E-3CEBD4507B51}) (Version: 19.1.0 - Adobe Systems Incorporated)
Adobe Media Encoder CC 2015 (HKLM-x32\...\{0FAC7130-BEC5-47A5-8813-1D339B8326ED}) (Version: 9.0.1 - Adobe Systems Incorporated)
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0.1 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.8.158 - Adobe Systems, Inc.)
Aktualizace NVIDIA 2.5.14.5 (Version: 2.5.14.5 - NVIDIA Corporation) Hidden
Amnesia - The Dark Descent (HKLM-x32\...\{54B7A3C7-0940-4C16-A509-FC3C3758D22A}_is1) (Version: 1.0.0 - Frictional Games)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo Burning Studio 15 v.15.0.2 (HKLM-x32\...\{91B33C97-5B38-0A92-D04A-A0F26F3F87D4}_is1) (Version: 15.0.2 - Ashampoo GmbH & Co. KG)
ASUS Backtracker (HKLM-x32\...\{C15C060C-ED1C-49EB-83B3-F7C0FD1CD661}) (Version: 3.0.4 - ASUS)
ASUS InstantOn (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 3.0.6 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS)
ASUS PC Link (HKLM-x32\...\{52AE8601-EA55-456E-80A9-7FB48E82CF81}_is1) (Version: 2.2.23.601 - ASUSTEK)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 3.0.8 - ASUS)
ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.3 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.10 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0021 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.5 - ASUS)
ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5712.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.5712.52 - CyberLink Corp.) Hidden
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.311 - ASUSTEK)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0031 - ASUS)
AVI to DVD Converter (HKLM-x32\...\AVI to DVD Converter) (Version: 3.0.26.0406 - ImTOO)
Bandicam (HKLM-x32\...\Bandicam) (Version: 1.9.1.419 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.0.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.0 - EA Digital Illusions CE AB)
Blitzer Simulatie (HKLM-x32\...\Blitzer Simulatie) (Version: - )
BlueStacks Notification Center (HKLM-x32\...\{3792811C-832F-4392-B44A-24092901EDDC}) (Version: 0.9.30.9239 - BlueStack Systems, Inc.)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: 4.5.0 - Canon Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.5.0.0 - Canon Inc.)
Canon MP Navigator EX 1.0 (HKLM-x32\...\MP Navigator EX 1.0) (Version: - )
Canon MP210 series (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series) (Version: - )
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.0.1 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.0.0 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.2.1 - Canon Inc.)
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version: - )
Castle Crashers (HKLM-x32\...\Castle Crashers) (Version: 1.3.1 - Jimbo)
CCleaner (HKLM\...\CCleaner) (Version: 5.09 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5306 - CDBurnerXP)
Command & Conquer 3 (HKLM-x32\...\{DDEDAF6C-488E-4CDA-8276-1CCF5F3C5C32}) (Version: 1.00.0000 - Electronic Arts Inc.)
Command & Conquer Generals (HKLM-x32\...\InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}) (Version: 0.50.0000 - Electronic Arts)
Command & Conquer Generals (x32 Version: 0.50.0000 - Electronic Arts) Hidden
Command and ConquerTM Generals Zero Hour (HKLM-x32\...\InstallShield_{F3E9C243-122E-4D6B-ACC1-E1FEC02F6CA1}) (Version: 1.00.0000 - Electronic Arts)
Command and ConquerTM Generals Zero Hour (x32 Version: 1.00.0000 - Electronic Arts) Hidden
Company of Heroes (HKLM-x32\...\Steam App 4560) (Version: - Relic Entertainment)
Counter-Strike Nexon: Zombies (HKLM-x32\...\Steam App 273110) (Version: - Nexon)
Counter-Strike Source verze 2230303 (HKLM\...\{28659B67-FC49-49DB-9DAC-1AD52203D75A}_is1) (Version: 2230303 - Strogino CS Portal)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
CPUID HWMonitor 1.25 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
CrystalDiskInfo 6.2.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.2.2 - Crystal Dew World)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0.0.8517 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Earth 2150: The Moon Project (HKLM-x32\...\Steam App 259280) (Version: - )
ESET NOD32 Antivirus (HKLM\...\{D56E0F0E-CC77-4BED-B63A-95432AFDC114}) (Version: 8.0.312.3 - ESET, spol s r. o.)
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.0.5 - SCS Software)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
FormatFactory 3.6.0.0 (HKLM-x32\...\FormatFactory) (Version: 3.6.0.0 - Format Factory)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
FreeStyle2: Street Basketball (HKLM-x32\...\Steam App 339610) (Version: - Joycity)
Game Explorer Categories - casual (HKLM-x32\...\WildTangentGameProvider-asus-casual) (Version: 3.2.0.6 - WildTangent, Inc.)
Game Explorer Categories - enthusiast (HKLM-x32\...\WildTangentGameProvider-asus-enthusiast) (Version: 3.2.0.6 - WildTangent, Inc.)
Game Explorer Categories - family (HKLM-x32\...\WildTangentGameProvider-asus-family) (Version: 3.2.0.6 - WildTangent, Inc.)
Game Explorer Categories - kids (HKLM-x32\...\WildTangentGameProvider-asus-kids) (Version: 3.2.0.6 - WildTangent, Inc.)
Game Explorer Categories - touch (HKLM-x32\...\WildTangentGameProvider-asus-touch) (Version: 3.2.0.6 - WildTangent, Inc.)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.85 - Google Inc.)
Google Update Helper (x32 Version: 1.3.28.13 - Google Inc.) Hidden
Grand Theft Auto: San Andreas (HKLM-x32\...\Steam App 12120) (Version: - Rockstar Games)
Half-Life 2 (HKLM-x32\...\Steam App 220) (Version: - Valve)
Half-Life Dedicated Server Update Tool (HKLM-x32\...\Half-Life Dedicated Server Update Tool) (Version: - )
Half-Life: Opposing Force (HKLM-x32\...\Steam App 50) (Version: - Gearbox Software)
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Heroes of Might and Magic 4 Complete (HKLM-x32\...\Heroes of Might and Magic 4 Complete_is1) (Version: - GOG.com)
Heroes of Might and Magic V - Hammers of Fate (HKLM-x32\...\{EEF7568A-BD2C-42B7-A22E-6D55EA287C34}) (Version: 2.1 - Ubisoft)
Heroes of Might and Magic V (HKLM-x32\...\{9B22D57A-5338-49A5-AC08-70FE3E8B878B}) (Version: 1.6 - Ubisoft)
Heroes of Might and Magic® IV (HKLM-x32\...\InstallShield_{192E2132-E977-4D3E-90BA-9DBCE1B57F8C}) (Version: 1.00.0000 - 3DO)
Heroes of Might and Magic® IV (x32 Version: 1.00.0000 - 3DO) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation)
Ionball 2 : Ionstorm (HKLM-x32\...\Steam App 287120) (Version: - Ironsun Studios)
Java 8 Update 60 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418060F0}) (Version: 8.0.600.27 - Oracle Corporation)
K-Lite Codec Pack 10.9.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.9.5 - )
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.383 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.383 - LogMeIn, Inc.) Hidden
Lucius (HKLM-x32\...\Steam App 218640) (Version: - Shiver Games)
Mafia II (HKLM-x32\...\Steam App 50130) (Version: - 2K Czech)
Malwarebytes Anti-Malware verze 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
McPixel version 1.0.4 (HKLM-x32\...\McPixel_is1) (Version: 1.0.4 - Sos)
Mediatek Bluetooth (HKLM\...\{F10FA818-DF9D-B070-DD53-94B07238F5DA}) (Version: 11.0.753.0 - Mediatek)
Men of War (HKLM-x32\...\Steam App 7830) (Version: - Best Way)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 15.0.4745.1002 - Microsoft Corporation)
Microsoft Office Language Pack 2013 - Czech/čeština (HKLM-x32\...\Office15.OMUI.cs-cz) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\OneDriveSetup.exe) (Version: 17.3.5930.0814 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Zoo Tycoon (HKLM-x32\...\Zoo Tycoon 1.0) (Version: - )
Might & Magic Heroes VI - Shades of Darkness (HKLM-x32\...\{745D37C2-26F4-4B65-BA13-F9840EBFA75B}) (Version: 2.1.0 - Ubisoft)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
MK LOL (HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\MK LOL) (Version: - )
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Need for Speed Underground 2 (HKLM-x32\...\Need for Speed Underground 2) (Version: - )
Nero 7 Premium (HKLM-x32\...\{C6115A28-F277-4E82-B067-84D28BF21029}) (Version: 7.03.1357 - Nero AG)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.6 - Notepad++ Team)
NVIDIA GeForce Experience 2.5.14.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.14.5 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 355.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 355.82 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4745.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4745.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4745.1002 - Microsoft Corporation) Hidden
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
Opera Stable 31.0.1889.174 (HKLM-x32\...\Opera 31.0.1889.174) (Version: 31.0.1889.174 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 8.5.0.4518 - Electronic Arts, Inc.)
Out There Somewhere (HKLM-x32\...\Steam App 263980) (Version: - MiniBoss)
Ovládací panel NVIDIA 355.82 (Version: 355.82 - NVIDIA Corporation) Hidden
Prohlížeč Seznam.cz (HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Seznam Browser) (Version: - Seznam.cz a.s.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.994 - Even Balance, Inc.)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.218 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
QuickTime (HKLM-x32\...\{08094E03-AFE4-4853-9D31-6D0743DF5328}) (Version: 7.1.6.200 - Apple Computer, Inc.)
Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 5.0.46.0 - Ralink)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.27040 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.36.826.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7188 - Realtek Semiconductor Corp.)
Red Giant Link (HKLM-x32\...\{10F82E5B-B611-4C65-8F29-666A9EC5680A}_is1) (Version: 1.9.2.19 - Red Giant, LLC)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{90150000-0100-0405-0000-0000000FF1CE}_Office15.OMUI.cs-cz_{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Sony PC Companion 2.10.281 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.281 - Sony)
Spacewar (HKLM-x32\...\Steam App 480) (Version: - Valve)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Super Hybrid Engine (HKLM-x32\...\{88F08F98-12BC-4613-81A2-8F9B88CFC73E}) (Version: 2.19 - AsusTek Computer)
Super Monday Night Combat (HKLM-x32\...\Steam App 104700) (Version: - Uber Entertainment)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer)
The Sims 2 (HKLM-x32\...\{6E7DD182-9FC6-4651-0095-2E666CC6AF35}) (Version: - )
Tom Clancy's Ghost Recon Phantoms - EU (HKLM-x32\...\Steam App 272350) (Version: - Ubisoft Singapore)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
Trapcode Suite v12.1.7 (HKLM-x32\...\{DFD2DC6B-C634-4C1C-81CC-5EF852E71CEE}_is1) (Version: 12.1.7 - Red Giant, LLC)
Unity Web Player (HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\UnityWebPlayer) (Version: 5.0.3f2 - Unity Technologies ApS)
Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton)
Update for Skype for Business 2015 (KB2889853) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0405-0000-0000000FF1CE}_Office15.OMUI.cs-cz_{6B99320D-817F-42CE-B45E-5C9AD42678E3}) (Version: - Microsoft)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Uplay (HKLM-x32\...\Uplay) (Version: 5.2 - Ubisoft)
Vegas Pro 12.0 (64-bit) (HKLM\...\{A7500970-FE98-11E1-B560-F04DA23A5C58}) (Version: 12.0.367 - Sony)
Vegas Pro 13.0 (64-bit) (HKLM\...\{D0360940-CCC6-11E3-B9C6-F04DA23A5C58}) (Version: 13.0.310 - Sony)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.0 - VideoLAN)
Watch_Dogs CZEHUN (HKLM-x32\...\Uplay Install 544) (Version: - Ubisoft)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.2.1.513 - ASUS Cloud Corporation)
Westwood Shared Internet Components (HKLM-x32\...\WOLAPI) (Version: - )
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.2 - WildTangent)
Windows 7 Games for Windows 8 (HKLM-x32\...\MicrosoftGamesForWin8) (Version: 1.0.0.2 - )
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Driver Package - ASUS (ATP) Mouse (01/07/2014 1.0.0.197) (HKLM\...\2BEE838DC3D664A0CAB23AEA0332BB3877ED0685) (Version: 01/07/2014 1.0.0.197 - ASUS)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
WinRAR 4.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
xParanormal Detector version 2.7 (HKLM-x32\...\{F960179C-72F7-4516-A71A-C7AE5D18DD84}_is1) (Version: 2.7 - eXtremeSenses Software)
Zoo Tycoon Čeština 1.05 (HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Zoo Tycoon Čeština 1.05) (Version: - )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2103404084-3915902104-103692762-1002_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
CustomCLSID: HKU\S-1-5-21-2103404084-3915902104-103692762-1002_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\ASUS\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points =========================

31-08-2015 18:09:33 Naplánovaný kontrolní bod
04-09-2015 16:40:06 Removed RollerCoaster Tycoon 2
06-09-2015 09:12:53 zoek.exe restore point

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2015-09-06 09:14 - 00000753 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {044A21F4-4E1A-47C9-A4B7-8EA1C9F9A311} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-11] (Adobe Systems Incorporated)
Task: {0C2803D7-8E7B-4801-81EE-870D02733C7B} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {0E2DCAD9-F720-4CB4-A333-58150EFFAF6F} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_18_0_0_232_pepper.exe [2015-08-11] (Adobe Systems Incorporated)
Task: {177B74E4-DD55-47E5-AD17-4A1742C5937F} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2103404084-3915902104-103692762-1002 => %localappdata%\Microsoft\OneDrive\OneDrive.exe
Task: {197277A6-C013-4C1C-A425-F534B5E6F439} - System32\Tasks\Opera scheduled Autoupdate 1422539431 => C:\Program Files (x86)\Opera\launcher.exe [2015-08-17] (Opera Software)
Task: {1A407644-6D7F-4EE5-AB6A-65AC699CEA58} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-02-25] (Realtek Semiconductor)
Task: {1E2E74DC-0A95-4AC8-9199-5AA1C03F018C} - System32\Tasks\Red Giant Link => C:\Program Files (x86)\Red Giant Link\Red Giant Link.exe [2015-06-16] ()
Task: {2CC20450-B9F4-4D5B-8CB9-F9C3A83B0BE7} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2015-02-12] ()
Task: {30198B12-02F9-427A-A06B-62A83D25F6B7} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-07-14] (Microsoft Corporation)
Task: {4050849A-FE6D-44F5-A200-C9A0C20FD430} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {44537099-0288-4DBD-BF12-2A5F6A24C876} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-02-13] (AsusTek)
Task: {44A6FD40-F228-4F5C-A09C-091FFB5058AB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-13] (Google Inc.)
Task: {44A9F84E-095A-4DFF-8E10-6EB2B9A2F053} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-13] (Google Inc.)
Task: {6E08AA52-6834-40E1-92AB-B8E45034D171} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {6EB5548A-E7C0-46EB-B67C-93677700C9AE} - System32\Tasks\{5DAADE44-1CD1-43F2-9F74-1F084D51D52C} => pcalua.exe -a F:\Setup.exe -d F:\
Task: {76B618B1-192C-42CE-A6F2-D0856AF6B4C6} - System32\Tasks\AdobeAAMUpdater-1.0-ASUS-PC-ASUS => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-07-22] (Adobe Systems Incorporated)
Task: {799875F2-D475-4C9F-8895-B62C3F4FB79B} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-02-24] (Realtek Semiconductor)
Task: {7DCCAE0D-65E0-4064-894D-35F8FB6B5B7C} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2013-10-07] (ASUS)
Task: {8BADC4F5-5FF6-4C92-9812-2BE19A159E2D} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {8F2658DD-8AFF-4F3E-84A2-947311C01AE5} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2014-02-11] (ASUS)
Task: {90E871CD-8B64-411F-8FFE-18306B59EE49} - System32\Tasks\{2C363F3D-CAD9-46EE-A6AD-C60FC36E67F3} => pcalua.exe -a C:\Users\ASUS\Desktop\setup.exe -d C:\Users\ASUS\Desktop
Task: {9119CDC0-E851-4EF4-8160-D554B99EE993} - System32\Tasks\ASUS InstantOn Config => C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe [2013-01-22] (ASUS)
Task: {9EDFC563-A7AA-4B55-B4CD-E1754CA296BC} - System32\Tasks\{E6454779-9E8C-4B80-B5D0-8F8517178FB3} => pcalua.exe -a "C:\Users\ASUS\Desktop\Samurize 1.64.33.exe" -d C:\Users\ASUS\Desktop
Task: {A5B0BEE9-D3E0-429A-8B91-E8DBE61A3A9D} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-11-04] ()
Task: {C03B73BA-13A8-4BCE-BC63-D3CACE7F027B} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2015-01-13] ()
Task: {C30B0281-9767-4295-8459-4BD3712344B9} - System32\Tasks\{6E1A1DB0-101C-4C1B-806E-353AD7B27F33} => pcalua.exe -a C:\Users\ASUS\Desktop\avi-to-dvd-converter.exe -d C:\Users\ASUS\Desktop
Task: {C9108B6A-C6AB-45B1-9B10-DF4C37E4EF1B} - System32\Tasks\P4GIntlCtrl => C:\Program Files\ASUS\P4G\IntlDPST.exe [2014-02-11] ()
Task: {CB1F5516-0021-4884-97CD-61EFB3A17C95} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {DB6F57BD-0415-4E3B-8D9E-4EF3687B2305} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-10-07] (ASUSTeK Computer Inc.)
Task: {E2C5F2C5-4692-4F1D-8228-A1B749F50723} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-08-20] (Piriform Ltd)
Task: {F69DF983-41D0-4D67-B010-12F5837E498E} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-09-18] (ASUSTek Computer Inc.)
Task: {FABB3E63-902C-4A45-8C89-21951BB02C8A} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-08-11] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_18_0_0_232_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-01-27 17:29 - 2015-08-25 16:24 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-01-27 17:28 - 2015-08-25 20:46 - 00011896 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2015-07-22 01:02 - 2015-07-22 01:02 - 00803488 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2014-02-11 19:08 - 2014-02-11 19:08 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2015-02-05 17:03 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2015-05-22 23:54 - 2015-05-22 23:54 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2012-12-28 12:04 - 2012-12-28 12:04 - 00084480 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2015-08-24 20:28 - 2015-08-24 20:28 - 00047104 _____ () C:\Program Files\CCleaner\lang\lang-1029.dll
2015-07-07 17:19 - 2014-12-05 10:24 - 05467527 _____ () C:\Program Files (x86)\ASUS\PC Link\tools\pclink_connect.exe
2015-07-07 17:19 - 2014-12-18 14:03 - 01009664 _____ () C:\Program Files (x86)\ASUS\PC Link\tools\adb.exe
2015-07-22 01:02 - 2015-07-22 01:02 - 31535264 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
2012-03-08 04:27 - 2012-03-08 04:27 - 00016384 _____ () C:\Program Files (x86)\ASUS\WebStorage\2.2.1.513\ACVsWin.dll
2015-05-08 08:24 - 2015-05-08 08:24 - 01378600 _____ () C:\Program Files (x86)\ASUS\WebStorage\2.2.1.513\AsusWSService.exe
2013-10-08 22:41 - 2013-10-08 22:41 - 00037968 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2013-09-09 20:23 - 2013-09-09 20:23 - 00162816 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2015-03-30 19:35 - 2015-08-27 02:37 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-01-29 16:35 - 2015-08-25 20:46 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2015-07-22 15:32 - 2015-07-22 15:32 - 36732592 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll
2013-03-06 16:37 - 2013-03-06 16:37 - 00626240 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2011-03-09 14:21 - 2011-03-09 14:21 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2015-01-27 17:25 - 2013-12-09 17:26 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-09-03 06:43 - 2015-08-28 02:17 - 01501512 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\libglesv2.dll
2015-09-03 06:43 - 2015-08-28 02:17 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\libegl.dll
2015-08-18 18:56 - 2015-08-18 18:55 - 58600568 _____ () C:\Program Files (x86)\Opera\31.0.1889.174\opera.dll
2015-08-18 18:55 - 2015-08-18 18:55 - 01781368 _____ () C:\Program Files (x86)\Opera\31.0.1889.174\libglesv2.dll
2015-08-18 18:55 - 2015-08-18 18:55 - 00081528 _____ () C:\Program Files (x86)\Opera\31.0.1889.174\libegl.dll
2015-09-03 06:43 - 2015-08-28 02:17 - 16393032 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

There are 7866 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2103404084-3915902104-103692762-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\ASUS\Downloads\eucliwood_hellscythe_kore_wa_zombie_desu_ka__1680x1080.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

[AngelikaB]

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{CD555D37-32D2-405A-84AF-98BD2183691F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{F9AF18AE-F185-4060-8009-E0B8B2DB6427}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{15829497-A071-4643-B718-C174F28EE845}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [TCP Query User{CC2A36DD-F3E0-4FB2-A984-7C4131A4D23E}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{65001D20-B951-4D5B-9A28-A6A5165EE832}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{1F632428-CB44-469A-985D-7D7D592F599E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{28F99720-50AE-46AB-99C2-812B7109062E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [TCP Query User{4FD0C25A-9426-4D59-A95A-04C54A08A380}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{E25B523E-2403-4DE8-9BAF-CD95B27E4634}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{27037D09-818E-4CDA-941C-E7F043E82530}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{3AEB57A4-9E93-4CDF-BCD2-6C4E982A71EB}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{21E2CDB9-2BF6-44ED-9997-DF915BD364CC}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{209BC286-28A1-4968-9F4E-57765F10BEDA}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{1071BCD6-76AD-47F6-97F8-84C818D13CF3}] => (Allow) C:\Users\ASUS\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E13006D9-943D-47E6-A3B4-1CE1F48A3840}] => (Allow) C:\Users\ASUS\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{FE3DD6DB-9737-4EEC-B600-74A9E4F2EAA3}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{7950BE3D-5E44-45A1-8A50-E8C8DD10AA43}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{903F6D74-F36C-4955-A37D-31EAAAF8D57C}] => (Allow) LPort=2869
FirewallRules: [{95338787-6FC3-4589-A0E1-EEFC0F9FD95B}] => (Allow) LPort=1900
FirewallRules: [{521E0954-7CA8-47AA-8F69-1CACA5C9B192}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{C3F4F7CD-D01D-426D-BA7F-F14F91730AA5}] => (Allow) C:\Users\ASUS\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [TCP Query User{48AE8183-5154-440C-AFD1-988FA9505CA4}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{9E716C1E-3233-4837-9197-68F73456E2C2}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{38A792A7-40D7-45BD-ACDF-8E47C5893758}C:\xampp\filezillaftp\filezillaserver.exe] => (Allow) C:\xampp\filezillaftp\filezillaserver.exe
FirewallRules: [UDP Query User{A0787E66-E722-4CA2-B71E-ACB851F2AD94}C:\xampp\filezillaftp\filezillaserver.exe] => (Allow) C:\xampp\filezillaftp\filezillaserver.exe
FirewallRules: [TCP Query User{3296228B-28BE-47AD-B5C7-5DF6B9B8D68D}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{039F6FDB-99D6-42B3-911A-58D200136B33}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [TCP Query User{9C31E2B9-8039-44B5-BA23-3D2EC460698C}C:\xampp\mercurymail\mercury.exe] => (Allow) C:\xampp\mercurymail\mercury.exe
FirewallRules: [UDP Query User{88830216-977B-4475-9F2F-34C183026E18}C:\xampp\mercurymail\mercury.exe] => (Allow) C:\xampp\mercurymail\mercury.exe
FirewallRules: [{842341E7-20C2-42CE-8FA2-0D6E23F26631}] => (Allow) D:\Watch Dogs\bin\Watch_Dogs.exe
FirewallRules: [{13F1E017-1E10-41FD-8C05-03A6867CE121}] => (Allow) D:\Watch Dogs\bin\Watch_Dogs.exe
FirewallRules: [{F54C7427-ECF3-43BC-ABF9-014C6AD1B40E}] => (Allow) D:\Heroes Might & Magic VI\Might & Magic Heroes VI.exe
FirewallRules: [{27D6C40C-3544-4646-8AB2-3AEA5CE303AF}] => (Allow) D:\Heroes Might & Magic VI\Might & Magic Heroes VI.exe
FirewallRules: [TCP Query User{218F5212-4583-404C-A9FC-D97DA8AC1BF9}D:\goat simulator\goat simulator\binaries\win32\goatgame-win32-shipping.exe] => (Allow) D:\goat simulator\goat simulator\binaries\win32\goatgame-win32-shipping.exe
FirewallRules: [UDP Query User{C2726234-7B30-472D-978C-A69EBA9872F3}D:\goat simulator\goat simulator\binaries\win32\goatgame-win32-shipping.exe] => (Allow) D:\goat simulator\goat simulator\binaries\win32\goatgame-win32-shipping.exe
FirewallRules: [TCP Query User{EBECC7B7-5897-42B4-ACDB-2C0B9FFA049B}D:\heroes 5\bin\h5_game.exe] => (Allow) D:\heroes 5\bin\h5_game.exe
FirewallRules: [UDP Query User{BAE9E8F2-D190-4FC3-8514-EC3B207A4445}D:\heroes 5\bin\h5_game.exe] => (Allow) D:\heroes 5\bin\h5_game.exe
FirewallRules: [{0CCE04A0-D30C-4C1B-B2B9-6ACD2B639099}] => (Allow) D:\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{3F94295F-D2AA-4040-8687-7097E09EC4C9}] => (Allow) D:\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{7C66D63E-5B80-486B-9CB0-7327124C9F20}] => (Allow) D:\Steam\steamapps\common\Mafia II\pc\mafia2.exe
FirewallRules: [{3149EFC6-F3FB-43A0-B083-69529A5F3952}] => (Allow) D:\Steam\steamapps\common\Mafia II\pc\mafia2.exe
FirewallRules: [{3578DF3E-224F-4C94-87CD-0645C2BB61EA}] => (Allow) D:\Steam\steamapps\common\Lucius\Lucius.exe
FirewallRules: [{6A487AAD-3557-4E9C-8B0F-2D911733DD95}] => (Allow) D:\Steam\steamapps\common\Lucius\Lucius.exe
FirewallRules: [{5B7A1B7F-DFBD-4025-8F12-241A3BA8813E}] => (Allow) D:\Steam\steamapps\common\SuperMNC\Binaries\Win32\SuperMNCGameClient.exe
FirewallRules: [{2FEA1AB9-51B5-48F4-AEF8-8324343FCAEB}] => (Allow) D:\Steam\steamapps\common\SuperMNC\Binaries\Win32\SuperMNCGameClient.exe
FirewallRules: [TCP Query User{7DAB5B67-1D3B-47D6-B565-D7CF3CA3F7FF}D:\steam\steamapps\common\cs source\counter-strike source\hl2.exe] => (Allow) D:\steam\steamapps\common\cs source\counter-strike source\hl2.exe
FirewallRules: [UDP Query User{B4A3D681-1678-47B9-BF2E-F76D15E50B42}D:\steam\steamapps\common\cs source\counter-strike source\hl2.exe] => (Allow) D:\steam\steamapps\common\cs source\counter-strike source\hl2.exe
FirewallRules: [{51C64BE9-9C0E-420B-A392-E7F47B5A70B0}] => (Block) D:\steam\steamapps\common\cs source\counter-strike source\hl2.exe
FirewallRules: [{E69EEEDE-3AC9-42ED-8B5E-C9F3A335ABB3}] => (Block) D:\steam\steamapps\common\cs source\counter-strike source\hl2.exe
FirewallRules: [TCP Query User{529BF495-7D1C-4558-8F6F-9C5207994257}C:\users\asus\gsplay\csko\hl.exe] => (Allow) C:\users\asus\gsplay\csko\hl.exe
FirewallRules: [UDP Query User{9E26384E-5BE9-4904-B1E1-CF5AA78EBFE3}C:\users\asus\gsplay\csko\hl.exe] => (Allow) C:\users\asus\gsplay\csko\hl.exe
FirewallRules: [{BC7AAB0E-6186-400E-B9AE-2D5A367364F4}] => (Block) C:\users\asus\gsplay\csko\hl.exe
FirewallRules: [{166072FE-7865-44B8-8518-7F270A423F6F}] => (Block) C:\users\asus\gsplay\csko\hl.exe
FirewallRules: [TCP Query User{6783B4EE-202B-4C47-993C-31B7A10AC8BE}C:\css\srcds.exe] => (Allow) C:\css\srcds.exe
FirewallRules: [UDP Query User{53563912-5E38-4E2D-9A31-45DCAADD15AE}C:\css\srcds.exe] => (Allow) C:\css\srcds.exe
FirewallRules: [{D9B7DC3C-65C9-4096-88A4-CFBA32CA5E6A}] => (Block) C:\css\srcds.exe
FirewallRules: [{A7ED5885-08DC-4E3B-B90F-549DB6555D52}] => (Block) C:\css\srcds.exe
FirewallRules: [TCP Query User{3992774B-224A-434C-BB7F-EF60B85E73A2}D:\csko\hltv.exe] => (Allow) D:\csko\hltv.exe
FirewallRules: [UDP Query User{410BCDAD-D055-4CA3-AACA-A5E39631EC7B}D:\csko\hltv.exe] => (Allow) D:\csko\hltv.exe
FirewallRules: [{D22DF0EB-1B2C-40BF-9856-C16A893E96C5}] => (Block) D:\csko\hltv.exe
FirewallRules: [{9C5D85F3-BF6D-4131-84C0-E3FC3E896E8F}] => (Block) D:\csko\hltv.exe
FirewallRules: [TCP Query User{ECED7A41-F4ED-4426-AEB6-70ADFBA6F7ED}D:\csko\hlds.exe] => (Allow) D:\csko\hlds.exe
FirewallRules: [UDP Query User{FC0FA455-23CD-471A-A0C7-4D73BAEAAFA2}D:\csko\hlds.exe] => (Allow) D:\csko\hlds.exe
FirewallRules: [{3CF177A5-52C8-4CA1-B9EB-214D62F369EB}] => (Allow) D:\csko\hlds.exe
FirewallRules: [{DA5292B0-C21B-4A27-838C-072213E8CF31}] => (Allow) D:\csko\hlds.exe
FirewallRules: [TCP Query User{E4824830-3FA3-4A02-B15A-0249CB91C1A0}D:\csko\hl.exe] => (Allow) D:\csko\hl.exe
FirewallRules: [UDP Query User{A1598CA1-A1CD-43E6-9AF8-E1A02ACAA06E}D:\csko\hl.exe] => (Allow) D:\csko\hl.exe
FirewallRules: [{ECF33995-FAA3-4682-AD04-BD4C2C8E8B6D}] => (Block) D:\csko\hl.exe
FirewallRules: [{8F16B693-DE77-429D-81F6-1608B6C8CEB1}] => (Block) D:\csko\hl.exe
FirewallRules: [TCP Query User{AD3D35BB-3716-4D33-A6A6-E478BD0755F2}D:\command & conquer kane's wrath\command and conquer 3 kane's wrath\retailexe\1.0\cnc3ep1.dat] => (Allow) D:\command & conquer kane's wrath\command and conquer 3 kane's wrath\retailexe\1.0\cnc3ep1.dat
FirewallRules: [UDP Query User{437158A6-F875-41F5-A205-1B08C3805CCC}D:\command & conquer kane's wrath\command and conquer 3 kane's wrath\retailexe\1.0\cnc3ep1.dat] => (Allow) D:\command & conquer kane's wrath\command and conquer 3 kane's wrath\retailexe\1.0\cnc3ep1.dat
FirewallRules: [{101053EC-605D-41F6-8EBC-D6D6C066BB71}] => (Block) D:\command & conquer kane's wrath\command and conquer 3 kane's wrath\retailexe\1.0\cnc3ep1.dat
FirewallRules: [{EEE19024-3174-4235-9BB8-3176F901E513}] => (Block) D:\command & conquer kane's wrath\command and conquer 3 kane's wrath\retailexe\1.0\cnc3ep1.dat
FirewallRules: [{C0C03735-AE28-4282-A0BA-99744314DB36}] => (Allow) D:\csko\hltv.exe
FirewallRules: [{AA7587C5-9FAB-4670-A0EA-D3BDFCFEC3AD}] => (Allow) D:\csko\hltv.exe
FirewallRules: [{9F5EB74E-D80C-48C6-9836-F9B85E756FCF}] => (Allow) D:\csko\hlds.exe
FirewallRules: [{C744987F-7E6F-444E-9A05-47939F159574}] => (Allow) D:\csko\hlds.exe
FirewallRules: [{E5C00D23-2998-48A9-B077-3F9665210F03}] => (Allow) D:\csko\hltv.exe
FirewallRules: [{8A494597-284D-4D11-8FFC-B81E56919DFA}] => (Allow) D:\csko\hltv.exe
FirewallRules: [{FD517000-9CFA-4CBF-AEC9-5445F93F12D5}] => (Allow) D:\csko\hlds.exe
FirewallRules: [{1F41E37C-D7D2-4363-AEEE-A9C0DDCEEB68}] => (Allow) D:\csko\hlds.exe
FirewallRules: [{F9C198DD-E3E7-4EA5-AD99-23A8D1E38F1E}] => (Allow) D:\csko\hltv.exe
FirewallRules: [{E40ABF1B-B036-4856-B98A-40E7FCD1A441}] => (Allow) D:\csko\hltv.exe
FirewallRules: [TCP Query User{72C5A4D3-2E80-4555-8F7C-8A56E8B04271}C:\steamcmd\steamapps\common\team fortress 2 dedicated server\srcds.exe] => (Allow) C:\steamcmd\steamapps\common\team fortress 2 dedicated server\srcds.exe
FirewallRules: [UDP Query User{0EA67899-64AC-4B97-8750-AD79E75F20B8}C:\steamcmd\steamapps\common\team fortress 2 dedicated server\srcds.exe] => (Allow) C:\steamcmd\steamapps\common\team fortress 2 dedicated server\srcds.exe
FirewallRules: [{49B04285-3094-4059-883E-968947E02793}] => (Allow) C:\css\srcds.exe
FirewallRules: [{9F3F21B5-F885-456B-82E4-8F422517C880}] => (Allow) C:\css\srcds.exe
FirewallRules: [TCP Query User{CE577884-50E0-47C6-8FE7-533B0963327E}D:\steamcmd\steamapps\common\team fortress 2 dedicated server\srcds.exe] => (Allow) D:\steamcmd\steamapps\common\team fortress 2 dedicated server\srcds.exe
FirewallRules: [UDP Query User{CC56F589-846E-47CD-B0BE-37C04C92DDC3}D:\steamcmd\steamapps\common\team fortress 2 dedicated server\srcds.exe] => (Allow) D:\steamcmd\steamapps\common\team fortress 2 dedicated server\srcds.exe
FirewallRules: [TCP Query User{C7FC1686-C81A-40D1-A5A2-4863244CBA6C}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{C3632BBB-A3C3-4340-AF52-2E4E896E7280}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{8722B4F7-1D7C-4D7C-B683-574CD99DD2F3}D:\portal 2\portal 2\portal2.exe] => (Allow) D:\portal 2\portal 2\portal2.exe
FirewallRules: [UDP Query User{79587959-25C1-4928-B2E7-ADF5729E16C2}D:\portal 2\portal 2\portal2.exe] => (Allow) D:\portal 2\portal 2\portal2.exe
FirewallRules: [TCP Query User{9CA86A1D-BBA0-41AF-85F9-B9C54BC21932}C:\program files\adobe\adobe after effects cc 2014\support files\afterfx.exe] => (Allow) C:\program files\adobe\adobe after effects cc 2014\support files\afterfx.exe
FirewallRules: [UDP Query User{501053FF-1457-4E08-92EF-EFAAA2AB21D7}C:\program files\adobe\adobe after effects cc 2014\support files\afterfx.exe] => (Allow) C:\program files\adobe\adobe after effects cc 2014\support files\afterfx.exe
FirewallRules: [{A7979196-F993-457F-80CF-3F13AE82C6AA}] => (Block) C:\program files\adobe\adobe after effects cc 2014\support files\afterfx.exe
FirewallRules: [{C1959613-9CF1-4BB3-AF06-97F5B9A8D7E4}] => (Block) C:\program files\adobe\adobe after effects cc 2014\support files\afterfx.exe
FirewallRules: [TCP Query User{3B4E47B2-B978-4B7C-9284-56103D2B8A28}C:\users\asus\desktop\gta server\samp-server.exe] => (Allow) C:\users\asus\desktop\gta server\samp-server.exe
FirewallRules: [UDP Query User{F2C4A3FE-96F2-47C1-986B-641283D0E042}C:\users\asus\desktop\gta server\samp-server.exe] => (Allow) C:\users\asus\desktop\gta server\samp-server.exe
FirewallRules: [{CC438697-2FE0-4CE9-B19F-45254F74B1D7}] => (Allow) C:\users\asus\desktop\gta server\samp-server.exe
FirewallRules: [{6F38F2D9-499D-4DAD-B07C-8B511ED7080C}] => (Allow) C:\users\asus\desktop\gta server\samp-server.exe
FirewallRules: [{88EDB8EB-20B9-4BCB-B305-CF2C051A4260}] => (Allow) C:\users\asus\desktop\gta server\samp-server.exe
FirewallRules: [{24DC767D-5E75-4FC5-8E83-BF8D47D608AB}] => (Allow) C:\users\asus\desktop\gta server\samp-server.exe
FirewallRules: [TCP Query User{65BA8577-38CC-47A7-866E-05B0912753C3}D:\steamcmd\steamapps\common\counter-strike source dedicated server\srcds.exe] => (Allow) D:\steamcmd\steamapps\common\counter-strike source dedicated server\srcds.exe
FirewallRules: [UDP Query User{05B1C490-ABFB-4F5D-8156-2779FB93CE32}D:\steamcmd\steamapps\common\counter-strike source dedicated server\srcds.exe] => (Allow) D:\steamcmd\steamapps\common\counter-strike source dedicated server\srcds.exe
FirewallRules: [{E359A48F-57B7-4964-8968-EFFB9034495A}] => (Allow) D:\steamcmd\steamapps\common\counter-strike source dedicated server\srcds.exe
FirewallRules: [{70D2D9A3-0AD3-44B5-887D-AE0715762A35}] => (Allow) D:\steamcmd\steamapps\common\counter-strike source dedicated server\srcds.exe
FirewallRules: [{816B4E35-3A1F-4AD7-B84E-8622B38C3A50}] => (Allow) C:\users\asus\desktop\gta server\samp-server.exe
FirewallRules: [{4CF542C2-E012-4651-AF14-2E964C5ADB97}] => (Allow) C:\users\asus\desktop\gta server\samp-server.exe
FirewallRules: [TCP Query User{EB09C31F-61A6-4E4B-9C7E-3E8E60E71248}E:\easysetupassistant\wr841n\easysetupassistant.exe] => (Allow) E:\easysetupassistant\wr841n\easysetupassistant.exe
FirewallRules: [UDP Query User{D93F7E2C-F0F3-4D3E-AA79-B3CE3BE99BD3}E:\easysetupassistant\wr841n\easysetupassistant.exe] => (Allow) E:\easysetupassistant\wr841n\easysetupassistant.exe
FirewallRules: [{CB377E75-E342-4B9F-B388-A69ACB2285AC}] => (Allow) D:\Steam\steamapps\common\Men of War\mow.exe
FirewallRules: [{43ABA9F3-B34B-46B5-8802-66FE2939DB0E}] => (Allow) D:\Steam\steamapps\common\Men of War\mow.exe
FirewallRules: [{6AA147AA-22EC-4D95-B8F0-BB61607532CC}] => (Allow) D:\Steam\steamapps\common\Men of War\mow_editor.exe
FirewallRules: [{A39A1318-0E27-400C-BC8B-0DF68C207F59}] => (Allow) D:\Steam\steamapps\common\Men of War\mow_editor.exe
FirewallRules: [{4C1E46D9-DB45-4CDA-BB07-898215067199}] => (Allow) D:\Steam\steamapps\common\Tom Clancy's Ghost Recon Phantoms - EU\Launcher.exe
FirewallRules: [{78C08CE3-F15D-416E-8AA6-1C3C4165FED7}] => (Allow) D:\Steam\steamapps\common\Tom Clancy's Ghost Recon Phantoms - EU\Launcher.exe
FirewallRules: [{CBB0217B-6240-4BE2-9E84-9388E20B4A65}] => (Allow) C:\Users\ASUS\AppData\Local\Temp\KMSnano\qemu-system-i386.exe
FirewallRules: [{1364039B-9428-4B37-8BDA-EE2846C5D369}] => (Allow) C:\Users\ASUS\AppData\Local\Temp\KMSnano\qemu-system-i386.exe
FirewallRules: [{FC9A3112-7222-4F73-B347-4D6630AA3D1D}] => (Allow) D:\Steam\steamapps\common\Spacewar\SteamworksExample.exe
FirewallRules: [{DB76877E-2B19-40FF-B969-1787A365C08B}] => (Allow) D:\Steam\steamapps\common\Spacewar\SteamworksExample.exe
FirewallRules: [{C56F2A5B-D083-4400-BA84-BC41C458971C}] => (Allow) D:\Steam\steamapps\common\Unturned\Unturned.exe
FirewallRules: [{BEAF4451-6120-418E-8895-FEA98688EDA1}] => (Allow) D:\Steam\steamapps\common\Unturned\Unturned.exe
FirewallRules: [{392B6EC9-3946-4AE5-9715-0DE849EA7AEB}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{6A3C8593-C6B6-4671-AF0C-F769598003A2}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{45683B54-C177-47BE-AF18-D87CA4A7A4F6}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{252D1A12-DEDB-49A2-B54E-7586A3BD7EFB}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{7B8E7282-710C-4D98-BA01-C38538276951}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{28F66A76-EC32-41BF-A6AD-034AF0A61003}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{D06E49DE-8EEF-47CB-A617-A42500BDD6EE}C:\program files (x86)\freetime\formatfactory\formatfactory.exe] => (Allow) C:\program files (x86)\freetime\formatfactory\formatfactory.exe
FirewallRules: [UDP Query User{14437042-D48E-4B97-98CE-3B2749B4A5B6}C:\program files (x86)\freetime\formatfactory\formatfactory.exe] => (Allow) C:\program files (x86)\freetime\formatfactory\formatfactory.exe
FirewallRules: [{4A8E77E5-0282-401D-8A71-4877234BAB6C}] => (Allow) D:\Watch Dogs\bin\Watch_Dogs.exe
FirewallRules: [{4C0B777C-F650-48DF-93F9-D045D3B42F19}] => (Allow) D:\Watch Dogs\bin\Watch_Dogs.exe
FirewallRules: [{40FF1211-C8DC-4FAE-B36C-BE1A5F6B7C27}] => (Allow) D:\Ubisoft\Ubisoft Game Launcher\games\Watch_Dogs CZEHUN\bin\watch_dogs.exe
FirewallRules: [{7F772F00-F153-435D-A0FF-0A1DD8E05980}] => (Allow) D:\Ubisoft\Ubisoft Game Launcher\games\Watch_Dogs CZEHUN\bin\watch_dogs.exe
FirewallRules: [{436E11FC-B5EA-4A79-9718-C8DA26336FCA}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{115B9572-3F6B-46A0-8842-39EAA796F82D}] => (Allow) D:\Steam\steamapps\common\FreeStyle2\LauncherSteam.exe
FirewallRules: [{4209ABF1-5D42-4D77-95B0-EB00F3C12E9E}] => (Allow) D:\Steam\steamapps\common\FreeStyle2\LauncherSteam.exe
FirewallRules: [TCP Query User{838489C9-3FE0-4385-BEC8-CFA56BB8262D}D:\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe] => (Allow) D:\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe
FirewallRules: [UDP Query User{E8894C0C-A696-48F3-9F62-B011B00D0F56}D:\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe] => (Allow) D:\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe
FirewallRules: [TCP Query User{C66A9BFC-DB1A-48D2-B9C6-A545DA5D8DAF}E:\easysetupassistant\wr741n\easysetupassistant.exe] => (Allow) E:\easysetupassistant\wr741n\easysetupassistant.exe
FirewallRules: [UDP Query User{82629D62-FDAC-4A94-8EF7-CB4C717FA0CD}E:\easysetupassistant\wr741n\easysetupassistant.exe] => (Allow) E:\easysetupassistant\wr741n\easysetupassistant.exe
FirewallRules: [TCP Query User{251D9C04-2C23-46D3-B8B2-6C1A16167F47}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{D75486E0-2DED-442D-A56A-0C6F97E83C0B}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{9D14591F-2E38-47D3-842B-BDA46FA13AD3}] => (Allow) D:\Ubisoft\Ubisoft Game Launcher\games\Might & Magic Heroes VI.exe
FirewallRules: [{71983DF9-92A0-49A8-8C3D-94245FA60489}] => (Allow) D:\Ubisoft\Ubisoft Game Launcher\games\Might & Magic Heroes VI.exe
FirewallRules: [TCP Query User{14147B2B-7AA3-4ACF-8806-15C50D51A654}D:\counter strike 1.6\hlds.exe] => (Allow) D:\counter strike 1.6\hlds.exe
FirewallRules: [UDP Query User{B9B6ED94-7F1B-450A-8262-B85F5785502F}D:\counter strike 1.6\hlds.exe] => (Allow) D:\counter strike 1.6\hlds.exe
FirewallRules: [{34888869-00B1-4737-8CC1-CD76A569B712}] => (Block) D:\counter strike 1.6\hlds.exe
FirewallRules: [{2BE89320-1861-4B97-9BCA-2C09F45EB263}] => (Block) D:\counter strike 1.6\hlds.exe
FirewallRules: [TCP Query User{18AF191C-48EF-400B-944D-E1931B0AB422}D:\counter strike 1.6\hl.exe] => (Allow) D:\counter strike 1.6\hl.exe
FirewallRules: [UDP Query User{1C832259-7D2E-489F-8A0D-BAD0001C44CD}D:\counter strike 1.6\hl.exe] => (Allow) D:\counter strike 1.6\hl.exe
FirewallRules: [{48BFF1CC-8EC7-4866-B5A4-B397ED0E434D}] => (Block) D:\counter strike 1.6\hl.exe
FirewallRules: [{D2B08ACA-81F9-4F9D-9DC6-4B29F75CA5A6}] => (Block) D:\counter strike 1.6\hl.exe
FirewallRules: [TCP Query User{40496C49-95E4-4145-8647-B1744B41C365}D:\ubisoft\ubisoft game launcher\games\watch_dogs czehun\bin\watch_dogs.exe] => (Allow) D:\ubisoft\ubisoft game launcher\games\watch_dogs czehun\bin\watch_dogs.exe
FirewallRules: [UDP Query User{A6AFDFF9-11DD-4507-B5D5-94E283A66B67}D:\ubisoft\ubisoft game launcher\games\watch_dogs czehun\bin\watch_dogs.exe] => (Allow) D:\ubisoft\ubisoft game launcher\games\watch_dogs czehun\bin\watch_dogs.exe
FirewallRules: [TCP Query User{CF9CF6E7-E54D-47C3-9E7D-A8C5047414D9}D:\program files (x86)\origin games\battlefield 3\bf3.exe] => (Allow) D:\program files (x86)\origin games\battlefield 3\bf3.exe
FirewallRules: [UDP Query User{241BA15B-7FFB-4077-8E17-0344214B2FE4}D:\program files (x86)\origin games\battlefield 3\bf3.exe] => (Allow) D:\program files (x86)\origin games\battlefield 3\bf3.exe
FirewallRules: [{AF06938F-18A5-4662-8059-0A9468BC7CB0}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F38DB85E-2032-4B7C-BE78-AB52C092BD82}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{09818388-3FBE-487A-BB79-873F7BDB5E9B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{42FD8138-EFAC-408C-8093-E52B962B2964}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [TCP Query User{144CF98A-B5A8-43BD-9902-35EBA59EA24B}C:\program files\adobe\adobe media encoder cc 2014\adobe media encoder.exe] => (Allow) C:\program files\adobe\adobe media encoder cc 2014\adobe media encoder.exe
FirewallRules: [UDP Query User{7FA8815F-5073-4C42-BDE5-00AB5F71E624}C:\program files\adobe\adobe media encoder cc 2014\adobe media encoder.exe] => (Allow) C:\program files\adobe\adobe media encoder cc 2014\adobe media encoder.exe
FirewallRules: [{3EE78594-4050-4515-821A-81583D857D9F}] => (Block) C:\program files\adobe\adobe media encoder cc 2014\adobe media encoder.exe
FirewallRules: [{F262BD33-02D5-43C3-9C64-64F229B365EB}] => (Block) C:\program files\adobe\adobe media encoder cc 2014\adobe media encoder.exe
FirewallRules: [TCP Query User{DD6BDEF1-B433-4C7A-826D-847B12FFE995}D:\heroes 5\bin\h5_game.exe] => (Allow) D:\heroes 5\bin\h5_game.exe
FirewallRules: [UDP Query User{F2B6355B-6289-414A-BCAE-117DE62F1042}D:\heroes 5\bin\h5_game.exe] => (Allow) D:\heroes 5\bin\h5_game.exe
FirewallRules: [TCP Query User{894328F7-8361-4BFB-93C6-0016796AE13E}C:\totalcmd\totalcmd64.exe] => (Allow) C:\totalcmd\totalcmd64.exe
FirewallRules: [UDP Query User{96FAFFA4-5037-4594-A88B-206C4830BA13}C:\totalcmd\totalcmd64.exe] => (Allow) C:\totalcmd\totalcmd64.exe
FirewallRules: [{701ED905-4617-494B-8C6E-DF56D110E9E4}] => (Block) C:\totalcmd\totalcmd64.exe
FirewallRules: [{2F3C4FF4-3A6D-4191-A114-027912F9523F}] => (Block) C:\totalcmd\totalcmd64.exe
FirewallRules: [TCP Query User{B124E33D-7B39-487A-9EFE-26C7622480E1}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe
FirewallRules: [UDP Query User{B6276591-0524-4D73-B4E9-ED8C7122EAC4}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe
FirewallRules: [{EFE215DF-84DC-4751-A0FB-45569E0CBB4E}] => (Block) C:\totalcmd\totalcmd.exe
FirewallRules: [{7870BB01-5690-4A3F-8633-2E829200E529}] => (Block) C:\totalcmd\totalcmd.exe
FirewallRules: [{48AF6018-9F5C-4877-800D-A99D5689D320}] => (Allow) D:\Steam\steamapps\common\Half-Life\hl.exe
FirewallRules: [{C1E1CA1E-DD81-4EFE-9140-8BFCE12BB261}] => (Allow) D:\Steam\steamapps\common\Half-Life\hl.exe
FirewallRules: [{1071D64A-0DFA-49AD-89A1-8F25C4CD85A2}] => (Allow) D:\Steam\steamapps\common\Half-Life 2\hl2.exe
FirewallRules: [{37D5A7AC-3DA3-46A9-99A3-BEC9E437B89E}] => (Allow) D:\Steam\steamapps\common\Half-Life 2\hl2.exe
FirewallRules: [{6A88A191-8400-48CB-BFD5-F88AAE35AAC8}] => (Allow) D:\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{8492DFCB-EFE3-4E00-89D1-AD70591DF4EA}] => (Allow) D:\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{A477F4A8-405F-4470-9A67-FB58C71FBDD7}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{84A96679-3E9D-49F4-9373-EB154D7C45B8}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{390066C1-BCC1-4B6C-B1DC-707A9C74823A}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{9671E6B0-66AD-4609-B886-F475F28D7CE6}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{6890516F-E052-4FBF-A9B3-CD8DBD855B17}] => (Allow) D:\Steam\steamapps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{F3DD2465-8ED6-4FE6-A653-7D1339C41D69}] => (Allow) D:\Steam\steamapps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{46CBFF31-EBF6-4BEE-8370-D8A836E46ADF}] => (Allow) D:\Steam\steamapps\common\outtheresomewhere\ots.exe
FirewallRules: [{4A241733-4153-47AC-BBF1-8ABADA3FA54D}] => (Allow) D:\Steam\steamapps\common\outtheresomewhere\ots.exe
FirewallRules: [{7EDC6A95-B362-4F29-BE6C-2A236E8A4BA5}] => (Allow) C:\Program Files (x86)\ASUS\PC Link\PCLinkService.exe
FirewallRules: [{BF0B474C-037A-4606-B928-F09B52A94539}] => (Allow) D:\Steam\steamapps\common\Ionball 2 Ionstorm\IonStorm_v1.1.exe
FirewallRules: [{756E4C3F-4D32-45A5-B9E8-1F9E6DF3FBBA}] => (Allow) D:\Steam\steamapps\common\Ionball 2 Ionstorm\IonStorm_v1.1.exe
FirewallRules: [{32CD0D49-94F2-4842-92CE-B8014ACBC190}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{C7F9D405-BF2C-418C-A659-0E694B2C89A9}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{0EDC2A0B-F205-4CC3-8042-179FBF649185}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{598DB28B-DCA9-4735-9AA9-8289FC65C6F2}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{033B44E3-3A18-4B33-ABF3-FF8A4AEA1BAF}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{ABBD7AF3-D6E0-4BF7-A009-6BA4DDF0A036}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{E7C02B97-11F8-48DE-A627-BFF2D54F5F82}] => (Allow) D:\Steam\steamapps\common\Grand Theft Auto San Andreas\gta-sa.exe
FirewallRules: [{7C9967F8-83D0-4EB8-9DE4-4D47AC4FF170}] => (Allow) D:\Steam\steamapps\common\Grand Theft Auto San Andreas\gta-sa.exe
FirewallRules: [{8B424080-BDB8-42C0-A6C8-9EC66FC3834D}] => (Allow) D:\BattleNet\Battle.net\Battle.net.exe
FirewallRules: [{3AC32993-5CAC-4E4A-B821-6D04DF8999C0}] => (Allow) D:\BattleNet\Battle.net\Battle.net.exe
FirewallRules: [TCP Query User{5C0F481C-F328-43E2-9441-3E8BFC7330AB}D:\c&c-g-zr\game.dat] => (Allow) D:\c&c-g-zr\game.dat
FirewallRules: [UDP Query User{D2BD52C9-2771-4880-86F8-E5F78CBAEBBD}D:\c&c-g-zr\game.dat] => (Allow) D:\c&c-g-zr\game.dat
FirewallRules: [{4B66790F-B79F-4711-93B3-30A61989D105}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{E2B30E3B-E14F-4DAD-9267-3D4BCDCFC7C1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{F5F486E0-25EE-4889-ACB0-1C5501F8F1B7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{C60B1A5D-8025-4FDE-9345-08B2DB61AE8D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{6E30C5E4-01D9-4754-AE46-4411AF078DA3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{1350FE96-0FB4-4155-92E2-7B666722CF87}] => (Allow) D:\BattleNet\Battle.net\Games\Hearthstone\Hearthstone.exe
FirewallRules: [{B5C433DD-8F27-4B94-9808-8B8F7A42B4BE}] => (Allow) D:\BattleNet\Battle.net\Games\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{E5989EBC-A19E-464C-9064-63A32BDAD934}D:\c&c-g-zr\game.dat] => (Allow) D:\c&c-g-zr\game.dat
FirewallRules: [UDP Query User{6D13BD76-EBAC-4F3F-8C5E-D6E792870EF3}D:\c&c-g-zr\game.dat] => (Allow) D:\c&c-g-zr\game.dat
FirewallRules: [TCP Query User{DFAE0D2A-B7A7-498A-8FE6-77E71B35DBB0}C:\program files\java\jre1.8.0_45\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\java.exe
FirewallRules: [UDP Query User{D3CD3F56-4F40-45EB-A762-FF739CEAABE0}C:\program files\java\jre1.8.0_45\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\java.exe
FirewallRules: [{AD45BD50-C4CE-4682-B96E-418C97EC4A9F}] => (Block) C:\program files\java\jre1.8.0_45\bin\java.exe
FirewallRules: [{8EA9D15B-943E-4B90-9459-10D50A845B8F}] => (Block) C:\program files\java\jre1.8.0_45\bin\java.exe
FirewallRules: [{4FC1FE27-D295-48E3-831C-712D87AF8E70}] => (Allow) C:\Users\ASUS\Desktop\Slendytubbies II V1.5 (64bit)\Slendytubbies II.exe
FirewallRules: [{ABDFA8FC-8F7D-4818-AC9D-FFC696599B0C}] => (Allow) C:\Users\ASUS\Desktop\Slendytubbies II V1.5 (64bit)\Slendytubbies II.exe
FirewallRules: [{EAF962C5-2CC5-44F1-BDC1-A55B70202120}] => (Allow) C:\Users\ASUS\Desktop\Slendytubbies II V1.5 (64bit)\Slendytubbies II.exe
FirewallRules: [{D37922A9-523A-4194-93B6-551508EE7281}] => (Allow) C:\Users\ASUS\Desktop\Slendytubbies II V1.5 (64bit)\Slendytubbies II.exe
FirewallRules: [{FF7A591F-7282-41D6-B901-1809435233EA}] => (Allow) C:\Users\ASUS\Desktop\Slendytubbies II V1.5 (64bit)\Slendytubbies II.exe
FirewallRules: [{2C7D44EA-E513-4873-A3C9-5FBF1E46F756}] => (Allow) C:\Users\ASUS\Desktop\Slendytubbies II V1.5 (64bit)\Slendytubbies II.exe
FirewallRules: [{FC4CDC33-AC86-45E3-8C65-B4B0DC80E729}] => (Allow) D:\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{657924F7-F46B-479A-9487-0780C2E57CB6}] => (Allow) D:\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{272C3EBA-25E5-4FC2-BF8A-AB2ADE8A1055}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{70C75C29-132E-439C-A4DB-A0468AC9F72C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{4DF03651-3EF0-4305-9A7B-C99EECAA4121}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{9DC890C5-B4FC-4A94-A66A-0BF460F108A9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{CF9B0A01-3DFF-4E19-9DC7-4249C7928985}] => (Allow) D:\Steam\steamapps\common\Earth 2150 The Moon Project\TheMoonProject.exe
FirewallRules: [{6C478A59-81EF-47D1-9B41-7954340D04C1}] => (Allow) D:\Steam\steamapps\common\Earth 2150 The Moon Project\TheMoonProject.exe
FirewallRules: [{67068CE8-EE3B-46E4-8D2C-D2076ABE50D4}] => (Allow) D:\Steam\steamapps\common\Earth 2150 The Moon Project\Setup.exe
FirewallRules: [{D75C0BC4-4FA4-4CE8-B1D1-05C86BCB349A}] => (Allow) D:\Steam\steamapps\common\Earth 2150 The Moon Project\Setup.exe
FirewallRules: [{4DBC00CB-3884-4E51-8F6F-912486ED72A9}] => (Allow) D:\Steam\steamapps\common\Company of Heroes\RelicCOH.exe
FirewallRules: [{8280816B-9D9C-4AC4-8056-9E6C37074DAC}] => (Allow) D:\Steam\steamapps\common\Company of Heroes\RelicCOH.exe
FirewallRules: [{ED1AB789-E40F-480F-8FA6-5C8C94E8FEAE}] => (Allow) C:\Program Files (x86)\GameSpy Arcade\Aphex.exe
FirewallRules: [{DDC6CFD6-C3F4-48CD-B681-54A45FAE1BC1}] => (Allow) C:\Program Files (x86)\GameSpy Arcade\Aphex.exe
FirewallRules: [TCP Query User{7F229264-828A-4784-9EB5-191E6486A1A6}C:\program files (x86)\3do\heroes of might and magic iv\heroes4c.exe] => (Allow) C:\program files (x86)\3do\heroes of might and magic iv\heroes4c.exe
FirewallRules: [UDP Query User{599F710D-85D1-4288-97F0-7AD28A020700}C:\program files (x86)\3do\heroes of might and magic iv\heroes4c.exe] => (Allow) C:\program files (x86)\3do\heroes of might and magic iv\heroes4c.exe
FirewallRules: [TCP Query User{1F082913-A3E5-4420-AD21-C9E207214663}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [UDP Query User{CD8309AE-691A-4478-8478-DA33A77B47A1}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [TCP Query User{E116D616-10DA-4E42-AF46-5269A25B6572}D:\steam\steamapps\common\company of heroes\relicdownloader\relicdownloader.exe] => (Allow) D:\steam\steamapps\common\company of heroes\relicdownloader\relicdownloader.exe
FirewallRules: [UDP Query User{A28D7A6C-3EA6-4692-8416-9D1A172DA261}D:\steam\steamapps\common\company of heroes\relicdownloader\relicdownloader.exe] => (Allow) D:\steam\steamapps\common\company of heroes\relicdownloader\relicdownloader.exe
FirewallRules: [{74886877-37EA-47CA-8611-83B08A9E72E9}] => (Allow) D:\Steam\steamapps\common\Company of Heroes Relaunch\RelicCOH.exe
FirewallRules: [{DAC7633F-C4B5-4869-8378-FFD954C2AA67}] => (Allow) D:\Steam\steamapps\common\Company of Heroes Relaunch\RelicCOH.exe
FirewallRules: [{E2CE1BD9-95CD-49E4-8FBA-EA9C393EBB53}] => (Allow) D:\heroes 5\bin\h5_game.exe
FirewallRules: [{501B35FA-2F0B-4C3D-B291-0CFDC0709ED6}] => (Allow) D:\heroes 5\bin\h5_game.exe
FirewallRules: [{86DCC2CD-E1BB-4DF2-AF3A-3B757C8AE85D}] => (Allow) C:\users\asus\gsplay\csko\hl.exe
FirewallRules: [{2103E343-7CA3-433F-AD1A-E0E395B8FDA1}] => (Allow) C:\users\asus\gsplay\csko\hl.exe
FirewallRules: [{51401371-9BFB-4B2B-A9EA-15A1DA7A896A}] => (Allow) D:\Steam\steamapps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{1E7CBF6C-A8EF-4A65-8713-3F755947C6AD}] => (Allow) D:\Steam\steamapps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [TCP Query User{6CAB29CA-66A5-45F0-8642-9C516A770AEE}C:\program files\adobe\adobe after effects cc 2015\support files\afterfx.exe] => (Allow) C:\program files\adobe\adobe after effects cc 2015\support files\afterfx.exe
FirewallRules: [UDP Query User{01AF6F0D-F84A-42BB-BB5A-4EA025666DFA}C:\program files\adobe\adobe after effects cc 2015\support files\afterfx.exe] => (Allow) C:\program files\adobe\adobe after effects cc 2015\support files\afterfx.exe
FirewallRules: [TCP Query User{42441D65-A655-4AE4-B947-CF92C662BEE8}C:\program files\adobe\adobe media encoder cc 2015\adobe media encoder.exe] => (Allow) C:\program files\adobe\adobe media encoder cc 2015\adobe media encoder.exe
FirewallRules: [UDP Query User{3CF382C0-88CA-4D6E-882C-47348E20DB8D}C:\program files\adobe\adobe media encoder cc 2015\adobe media encoder.exe] => (Allow) C:\program files\adobe\adobe media encoder cc 2015\adobe media encoder.exe
FirewallRules: [{D92E1718-CC03-41C7-9CA4-9A4300138E94}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

[AngelikaB]

==================== Event log errors: =========================

Application errors:
==================
Error: (09/06/2015 08:31:36 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073415161

Error: (09/06/2015 08:24:59 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: PCLinkService.exe, verze: 2.2.23.601, časové razítko: 0x556daa89
Název chybujícího modulu: KERNELBASE.dll, verze: 6.3.9600.17415, časové razítko: 0x54505737
Kód výjimky: 0xc000041d
Posun chyby: 0x0000000000008b9c
ID chybujícího procesu: 0x2940
Čas spuštění chybující aplikace: 0xPCLinkService.exe0
Cesta k chybující aplikaci: PCLinkService.exe1
Cesta k chybujícímu modulu: PCLinkService.exe2
ID zprávy: PCLinkService.exe3
Úplný název chybujícího balíčku: PCLinkService.exe4
ID aplikace související s chybujícím balíčkem: PCLinkService.exe5

Error: (09/06/2015 08:24:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: PCLinkService.exe, verze: 2.2.23.601, časové razítko: 0x556daa89
Název chybujícího modulu: KERNELBASE.dll, verze: 6.3.9600.17415, časové razítko: 0x54505737
Kód výjimky: 0xe0434352
Posun chyby: 0x0000000000008b9c
ID chybujícího procesu: 0x2940
Čas spuštění chybující aplikace: 0xPCLinkService.exe0
Cesta k chybující aplikaci: PCLinkService.exe1
Cesta k chybujícímu modulu: PCLinkService.exe2
ID zprávy: PCLinkService.exe3
Úplný název chybujícího balíčku: PCLinkService.exe4
ID aplikace související s chybujícím balíčkem: PCLinkService.exe5

Error: (09/06/2015 08:24:13 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: PCLinkService.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.InvalidOperationException
Zásobník:
na System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na System.Windows.Forms.SafeNativeMethods.TrackPopupMenuEx(System.Runtime.InteropServices.HandleRef, Int32, Int32, Int32, System.Runtime.InteropServices.HandleRef, TPMPARAMS)
na System.Windows.Forms.SafeNativeMethods.TrackPopupMenuEx(System.Runtime.InteropServices.HandleRef, Int32, Int32, Int32, System.Runtime.InteropServices.HandleRef, TPMPARAMS)
na System.Windows.Forms.NotifyIcon.ShowContextMenu()
na System.Windows.Forms.NotifyIcon.WndProc(System.Windows.Forms.Message ByRef)
na System.Windows.Forms.NativeWindow.Callback(IntPtr, Int32, IntPtr, IntPtr)
na MS.Internal.Automation.UiaCoreTypesApi.RawUiaLookupId(AutomationIdType, System.Guid ByRef)
na MS.Internal.Automation.UiaCoreTypesApi.RawUiaLookupId(AutomationIdType, System.Guid ByRef)
na System.Windows.Automation.AutomationIdentifier.Register(AutomationIdType, System.Guid, System.String)
na System.Windows.Automation.InvokePatternIdentifiers..cctor()
na System.Windows.Automation.Peers.AutomationPeer.Initialize()
na System.Windows.Automation.Peers.AutomationPeer..cctor()
na System.Windows.Automation.Peers.AutomationPeer.RaiseFocusChangedEventHelper(System.Windows.IInputElement)
na System.Windows.Input.KeyboardDevice.ChangeFocus(System.Windows.DependencyObject, Int32)
na System.Windows.Input.InputManager.RaiseProcessInputEventHandlers(System.Windows.Input.ProcessInputEventHandler, System.Windows.Input.ProcessInputEventArgs)
na System.Windows.Input.InputManager.ProcessStagingArea()
na System.Windows.Input.InputManager.ProcessInput(System.Windows.Input.InputEventArgs)
na System.Windows.Interop.HwndKeyboardInputProvider.ReportInput(IntPtr, System.Windows.Input.InputMode, Int32, System.Windows.Input.RawKeyboardActions, Int32, Boolean, Boolean, Int32)
na System.Windows.Interop.HwndKeyboardInputProvider.PossiblyDeactivate(IntPtr)
na System.Windows.Interop.HwndKeyboardInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef)
na System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na System.Threading.SynchronizationContext.WaitHelper(IntPtr[], Boolean, Int32)
na System.Windows.Threading.DispatcherSynchronizationContext.Wait(IntPtr[], Boolean, Int32)
na System.StubHelpers.InterfaceMarshaler.ConvertToManaged(IntPtr, IntPtr, IntPtr, Int32)
na MS.Win32.UnsafeNativeMethods.TF_CreateThreadMgr(ITfThreadMgr ByRef)
na MS.Internal.TextServicesLoader.Load()
na System.Windows.Input.TextServicesContext.get_ThreadManager()
na System.Windows.Input.TextServicesContext.RegisterTextStore(System.Windows.Input.DefaultTextStore)
na System.Windows.Input.DefaultTextStore.get_Current()
na System.Windows.Input.InputMethod.EnableOrDisableInputMethod(Boolean)
na System.Windows.Input.KeyboardDevice.ChangeFocus(System.Windows.DependencyObject, Int32)
na System.Windows.Input.KeyboardDevice.Focus(System.Windows.DependencyObject, Boolean, Boolean, Boolean)
na System.Windows.Input.KeyboardDevice.Focus(System.Windows.IInputElement)
na System.Windows.Interop.HwndKeyboardInputProvider.OnSetFocus(IntPtr)
na System.Windows.Interop.HwndKeyboardInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef)
na System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.HwndSubclass.DefWndProcWrapper(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.ShowWindow(System.Runtime.InteropServices.HandleRef, Int32)
na MS.Win32.UnsafeNativeMethods.ShowWindow(System.Runtime.InteropServices.HandleRef, Int32)
na System.Windows.Window.ShowHelper(System.Object)
na PCLinkService.Upgrade.DoCheckforUpgradeThread_RunWorkerCompleted(System.Object, System.ComponentModel.RunWorkerCompletedEventArgs)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.DispatcherOperation.InvokeImpl()
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
na System.Windows.Threading.DispatcherOperation.Invoke()
na System.Windows.Threading.Dispatcher.ProcessQueue()
na System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
na MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
na System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
na System.Windows.Application.RunInternal(System.Windows.Window)
na System.Windows.Application.Run()
na PCLinkService.App.Main()

Error: (09/05/2015 01:19:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: wmprph.exe, verze: 12.0.9600.17415, časové razítko: 0x54504e5a
Název chybujícího modulu: ntdll.dll, verze: 6.3.9600.17936, časové razítko: 0x55a68e0c
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000003d86e
ID chybujícího procesu: 0x2100
Čas spuštění chybující aplikace: 0xwmprph.exe0
Cesta k chybující aplikaci: wmprph.exe1
Cesta k chybujícímu modulu: wmprph.exe2
ID zprávy: wmprph.exe3
Úplný název chybujícího balíčku: wmprph.exe4
ID aplikace související s chybujícím balíčkem: wmprph.exe5

Error: (09/05/2015 01:15:23 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: ASUS-PC)
Description: Aplikaci nebo službu BlueStacks Agent nelze ukončit.

Error: (09/05/2015 11:07:23 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program backgroundTaskHost.exe verze 6.3.9600.17415 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 714

Čas spuštění: 01d0e7b98aa512c6

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Windows\syswow64\backgroundTaskHost.exe

ID hlášení: 7ed4018f-53ad-11e5-82ac-e03f493807b3

Úplný název chybujícího balíčku: Microsoft.MicrosoftMahjong_2.4.1412.2202_x86__8wekyb3d8bbwe

ID aplikace související s chybujícím balíčkem: MicrosoftMahjong

Error: (09/05/2015 10:45:14 AM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Index nebyl inicializován.

Podrobnosti:
Zadaný objekt nebyl nalezen. Zadejte název existujícího objektu. (HRESULT : 0x80040d06) (0x80040d06)

Error: (09/05/2015 10:45:14 AM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Aplikace nebyla inicializována.

Kontext: aplikace Windows

Podrobnosti:
Zadaný objekt nebyl nalezen. Zadejte název existujícího objektu. (HRESULT : 0x80040d06) (0x80040d06)

Error: (09/05/2015 10:45:14 AM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Objekt indexovacího modulu nebyl inicializován.

Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Zadaný objekt nebyl nalezen. Zadejte název existujícího objektu. (HRESULT : 0x80040d06) (0x80040d06)


System errors:
=============
Error: (09/06/2015 10:44:59 AM) (Source: DCOM) (EventID: 10010) (User: ASUS-PC)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (09/06/2015 10:44:29 AM) (Source: DCOM) (EventID: 10010) (User: ASUS-PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (09/06/2015 10:44:04 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: NT AUTHORITY)
Description: 0x8000002a42\SystemRoot\System32\Config\RegBack\SYSTEM

Error: (09/06/2015 09:59:57 AM) (Source: DCOM) (EventID: 10010) (User: ASUS-PC)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (09/06/2015 09:59:27 AM) (Source: DCOM) (EventID: 10010) (User: ASUS-PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (09/06/2015 09:59:01 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: NT AUTHORITY)
Description: 0x8000002a42\SystemRoot\System32\Config\RegBack\SYSTEM

Error: (09/06/2015 09:48:10 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80240020): Upgrade na Windows 10 Home.

Error: (09/06/2015 09:33:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba vcs neuspěla při spuštění v důsledku následující chyby:
%%577

Error: (09/06/2015 09:28:36 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (09/06/2015 09:28:36 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.


Microsoft Office:
=========================
Error: (09/06/2015 08:31:36 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073415161

Error: (09/06/2015 08:24:59 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: PCLinkService.exe2.2.23.601556daa89KERNELBASE.dll6.3.9600.1741554505737c000041d0000000000008b9c294001d0e86c588e52a6C:\Program Files (x86)\ASUS\PC Link\PCLinkService.exeC:\Windows\system32\KERNELBASE.dllff2a27ac-545f-11e5-82ac-e03f493807b3

Error: (09/06/2015 08:24:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: PCLinkService.exe2.2.23.601556daa89KERNELBASE.dll6.3.9600.1741554505737e04343520000000000008b9c294001d0e86c588e52a6C:\Program Files (x86)\ASUS\PC Link\PCLinkService.exeC:\Windows\system32\KERNELBASE.dlle5dd8a50-545f-11e5-82ac-e03f493807b3

Error: (09/06/2015 08:24:13 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: PCLinkService.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.InvalidOperationException
Zásobník:
na System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na System.Windows.Forms.SafeNativeMethods.TrackPopupMenuEx(System.Runtime.InteropServices.HandleRef, Int32, Int32, Int32, System.Runtime.InteropServices.HandleRef, TPMPARAMS)
na System.Windows.Forms.SafeNativeMethods.TrackPopupMenuEx(System.Runtime.InteropServices.HandleRef, Int32, Int32, Int32, System.Runtime.InteropServices.HandleRef, TPMPARAMS)
na System.Windows.Forms.NotifyIcon.ShowContextMenu()
na System.Windows.Forms.NotifyIcon.WndProc(System.Windows.Forms.Message ByRef)
na System.Windows.Forms.NativeWindow.Callback(IntPtr, Int32, IntPtr, IntPtr)
na MS.Internal.Automation.UiaCoreTypesApi.RawUiaLookupId(AutomationIdType, System.Guid ByRef)
na MS.Internal.Automation.UiaCoreTypesApi.RawUiaLookupId(AutomationIdType, System.Guid ByRef)
na System.Windows.Automation.AutomationIdentifier.Register(AutomationIdType, System.Guid, System.String)
na System.Windows.Automation.InvokePatternIdentifiers..cctor()
na System.Windows.Automation.Peers.AutomationPeer.Initialize()
na System.Windows.Automation.Peers.AutomationPeer..cctor()
na System.Windows.Automation.Peers.AutomationPeer.RaiseFocusChangedEventHelper(System.Windows.IInputElement)
na System.Windows.Input.KeyboardDevice.ChangeFocus(System.Windows.DependencyObject, Int32)
na System.Windows.Input.InputManager.RaiseProcessInputEventHandlers(System.Windows.Input.ProcessInputEventHandler, System.Windows.Input.ProcessInputEventArgs)
na System.Windows.Input.InputManager.ProcessStagingArea()
na System.Windows.Input.InputManager.ProcessInput(System.Windows.Input.InputEventArgs)
na System.Windows.Interop.HwndKeyboardInputProvider.ReportInput(IntPtr, System.Windows.Input.InputMode, Int32, System.Windows.Input.RawKeyboardActions, Int32, Boolean, Boolean, Int32)
na System.Windows.Interop.HwndKeyboardInputProvider.PossiblyDeactivate(IntPtr)
na System.Windows.Interop.HwndKeyboardInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef)
na System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na System.Threading.SynchronizationContext.WaitHelper(IntPtr[], Boolean, Int32)
na System.Windows.Threading.DispatcherSynchronizationContext.Wait(IntPtr[], Boolean, Int32)
na System.StubHelpers.InterfaceMarshaler.ConvertToManaged(IntPtr, IntPtr, IntPtr, Int32)
na MS.Win32.UnsafeNativeMethods.TF_CreateThreadMgr(ITfThreadMgr ByRef)
na MS.Internal.TextServicesLoader.Load()
na System.Windows.Input.TextServicesContext.get_ThreadManager()
na System.Windows.Input.TextServicesContext.RegisterTextStore(System.Windows.Input.DefaultTextStore)
na System.Windows.Input.DefaultTextStore.get_Current()
na System.Windows.Input.InputMethod.EnableOrDisableInputMethod(Boolean)
na System.Windows.Input.KeyboardDevice.ChangeFocus(System.Windows.DependencyObject, Int32)
na System.Windows.Input.KeyboardDevice.Focus(System.Windows.DependencyObject, Boolean, Boolean, Boolean)
na System.Windows.Input.KeyboardDevice.Focus(System.Windows.IInputElement)
na System.Windows.Interop.HwndKeyboardInputProvider.OnSetFocus(IntPtr)
na System.Windows.Interop.HwndKeyboardInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef)
na System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.HwndSubclass.DefWndProcWrapper(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.ShowWindow(System.Runtime.InteropServices.HandleRef, Int32)
na MS.Win32.UnsafeNativeMethods.ShowWindow(System.Runtime.InteropServices.HandleRef, Int32)
na System.Windows.Window.ShowHelper(System.Object)
na PCLinkService.Upgrade.DoCheckforUpgradeThread_RunWorkerCompleted(System.Object, System.ComponentModel.RunWorkerCompletedEventArgs)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.DispatcherOperation.InvokeImpl()
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
na System.Windows.Threading.DispatcherOperation.Invoke()
na System.Windows.Threading.Dispatcher.ProcessQueue()
na System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
na MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
na System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
na System.Windows.Application.RunInternal(System.Windows.Window)
na System.Windows.Application.Run()
na PCLinkService.App.Main()

Error: (09/05/2015 01:19:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: wmprph.exe12.0.9600.1741554504e5antdll.dll6.3.9600.1793655a68e0cc0000005000000000003d86e210001d0e7ccc518e0a8C:\Program Files\Windows Media Player\wmprph.exeC:\Windows\SYSTEM32\ntdll.dll03bbec7c-53c0-11e5-82ac-e03f493807b3

Error: (09/05/2015 01:15:23 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: ASUS-PC)
Description: 1C:\Program Files (x86)\BlueStacks\HD-Agent.exeBlueStacks Agent0211764760

Error: (09/05/2015 11:07:23 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: backgroundTaskHost.exe6.3.9600.1741571401d0e7b98aa512c64294967295C:\Windows\syswow64\backgroundTaskHost.exe7ed4018f-53ad-11e5-82ac-e03f493807b3Microsoft.MicrosoftMahjong_2.4.1412.2202_x86__8wekyb3d8bbweMicrosoftMahjong

Error: (09/05/2015 10:45:14 AM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Podrobnosti:
Zadaný objekt nebyl nalezen. Zadejte název existujícího objektu. (HRESULT : 0x80040d06) (0x80040d06)

Error: (09/05/2015 10:45:14 AM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Kontext: aplikace Windows

Podrobnosti:
Zadaný objekt nebyl nalezen. Zadejte název existujícího objektu. (HRESULT : 0x80040d06) (0x80040d06)

Error: (09/05/2015 10:45:14 AM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Zadaný objekt nebyl nalezen. Zadejte název existujícího objektu. (HRESULT : 0x80040d06) (0x80040d06)


CodeIntegrity:
===================================
Date: 2015-09-06 09:33:37.082
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-05 10:47:47.377
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-08-28 08:19:17.972
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-08-26 21:35:47.250
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-08-26 20:55:45.894
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-08-22 09:10:35.534
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-08-20 09:19:25.051
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-08-19 13:04:15.594
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-08-15 00:54:42.941
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-08-12 07:51:49.536
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz
Percentage of memory in use: 53%
Total physical RAM: 6029.54 MB
Available physical RAM: 2818.04 MB
Total Virtual: 12173.54 MB
Available Virtual: 8448.37 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:279.45 GB) (Free:159.97 GB) NTFS ==>[system with boot components (obtained from reading drive)]
Drive d: (Data) (Fixed) (Total:392.07 GB) (Free:229 GB) NTFS
Drive f: (ZOO_TYCN) (CDROM) (Total:0.55 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 698.6 GB) (Disk ID: 2B258E9F)

[jaro3]

Prosím, postupuj následujícím způsobem:
Otevřít poznámkový blok (Start => Všechny programy => Příslušenství => Poznámkový blok).
Prosím, zkopíruj do něj celý obsah níže.

Kód: Vybrat vše

Start
CloseProcesses:
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Run: [VMware Workstation 11] => wscript.exe //B "C:\Users\ASUS\AppData\Local\Temp\VMware Workstation 11.0.0 Build 2305329 Final Incl. Serial [ATOM].vbs" <===== ATTENTION
ShortcutTarget: Client Default.lnk -> C:\Program Files (x86)\Samurize\Client.exe (No File)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [No File]
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\ProgramData\DP45977C.lfl
C:\ProgramData\SetStretch.cmd
C:\ProgramData\SetStretch.exe
C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
Task: {44A6FD40-F228-4F5C-A09C-091FFB5058AB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-13] (Google Inc.)
Task: {44A9F84E-095A-4DFF-8E10-6EB2B9A2F053} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-13] (Google Inc.)
Task: {44A6FD40-F228-4F5C-A09C-091FFB5058AB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-13] (Google Inc.)
Task: {44A9F84E-095A-4DFF-8E10-6EB2B9A2F053} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-13] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
C:\Windows\system32\msstp.vbe
C:\Windows\inf\mncsbxpgx.vbe
EmptyTemp:
End

(Můžeš použít funkci „vybrat vše“, klepni pravým tlačítkem myši na levé horní políčko v otevřeném poznámkovém bloku a zvol „ Vložit“).

Ulož jej na na plochu jako fixlist.txt


Spusťt FRST a stiskni tlačítko „Fix“ (Opravit) jen jednou a čekej.
Nástroj vypracuje log na ploše (Fixlog.txt), prosím zkopíruj sem celý jeho obsah.

[AngelikaB]

Fix result of Farbar Recovery Scan Tool (x64) Version:04-09-2015
Ran by ASUS (2015-09-06 11:48:09) Run:1
Running from C:\Users\ASUS\Desktop
Loaded Profiles: ASUS (Available Profiles: ASUS)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\...\Run: [VMware Workstation 11] => wscript.exe //B "C:\Users\ASUS\AppData\Local\Temp\VMware Workstation 11.0.0 Build 2305329 Final Incl. Serial [ATOM].vbs" <===== ATTENTION
ShortcutTarget: Client Default.lnk -> C:\Program Files (x86)\Samurize\Client.exe (No File)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [No File]
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\ProgramData\DP45977C.lfl
C:\ProgramData\SetStretch.cmd
C:\ProgramData\SetStretch.exe
C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
Task: {44A6FD40-F228-4F5C-A09C-091FFB5058AB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-13] (Google Inc.)
Task: {44A9F84E-095A-4DFF-8E10-6EB2B9A2F053} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-13] (Google Inc.)
Task: {44A6FD40-F228-4F5C-A09C-091FFB5058AB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-13] (Google Inc.)
Task: {44A9F84E-095A-4DFF-8E10-6EB2B9A2F053} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-13] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
C:\Windows\system32\msstp.vbe
C:\Windows\inf\mncsbxpgx.vbe
EmptyTemp:
End
*****************

Processes closed successfully.
HKU\S-1-5-21-2103404084-3915902104-103692762-1002\Software\Microsoft\Windows\CurrentVersion\Run\\VMware Workstation 11 => value removed successfully
C:\Program Files (x86)\Samurize\Client.exe => not found.
"HKLM\SOFTWARE\Policies\Google" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\adobe.com/AdobeExManDetect" => key removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully
C:\ProgramData\SetStretch.cmd => moved successfully
C:\ProgramData\SetStretch.exe => moved successfully
C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log => moved successfully
C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{44A6FD40-F228-4F5C-A09C-091FFB5058AB}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{44A6FD40-F228-4F5C-A09C-091FFB5058AB}" => key removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{44A9F84E-095A-4DFF-8E10-6EB2B9A2F053}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{44A9F84E-095A-4DFF-8E10-6EB2B9A2F053}" => key removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{44A6FD40-F228-4F5C-A09C-091FFB5058AB} => key not found.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{44A9F84E-095A-4DFF-8E10-6EB2B9A2F053} => key not found.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA => key not found.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc" => key removed successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\007guard.com" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\008i.com" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\008k.com" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\00hq.com" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\010402.com" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\032439.com" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\0scan.com" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1-2005-search.com" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1-domains-registrations.com" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1000gratisproben.com" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\1001namen.com" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\100888290cs.com" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\100sexlinks.com" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\10sek.com" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\12-26.net" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\12-27.net" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\123fporn.info" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\123haustiereundmehr.com" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\123moviedownload.com" => key removed successfully
"HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\123simsen.com" => key removed successfully
"C:\Windows\system32\msstp.vbe" => File/Folder not found.
"C:\Windows\inf\mncsbxpgx.vbe" => File/Folder not found.
EmptyTemp: => 203.5 MB temporary data Removed.


The system needed a reboot..

==== End of Fixlog 11:48:14 ====