Prosím o kontrolu logu (sekanie ntb)

nermitus · Příspěvekod **nermitus** » 13 lis 2015 11:21

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:07-11-2015
Ran by Marek (administrator) on MONSTER (13-11-2015 11:01:47)
Running from C:\Users\Marek\Desktop
Loaded Profiles: Marek (Available Profiles: Marek & Administrator)
Platform: Windows 8.1 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\APRP\aprp.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17200_none_fa7026dd9b04586e\TiWorker.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\ASUSWSLoader.exe [63296 2014-08-20] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
HKU\S-1-5-21-2787382413-3702957683-2713730491-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8461224 2015-09-16] (Piriform Ltd)
HKU\S-1-5-21-2787382413-3702957683-2713730491-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)
HKU\S-1-5-21-2787382413-3702957683-2713730491-1001\...\MountPoints2: {7c73fe2f-84d3-11e5-8267-acb57dd8a8c4} - "F:\setup.exe"
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2015-02-14]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7FC3A935-A1A4-437D-9190-106021ABF8E8}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{F14EA36B-C99F-4A85-BF4D-140C137BF72A}: [DhcpNameServer] 192.168.48.1

Internet Explorer:
==================
HKU\S-1-5-21-2787382413-3702957683-2713730491-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome
SearchScopes: HKU\S-1-5-21-2787382413-3702957683-2713730491-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-24] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-24] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\wxikosxc.default
FF NewTab: about:newtab
FF Homepage: about:home
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-01-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-01-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-24] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-12] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-12] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-01] (Microsoft Corporation)

Chrome:
=======
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM ... PARAM__&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR Profile: C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-11]
CHR Extension: (Google Docs) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-11]
CHR Extension: (Google Drive) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-11]
CHR Extension: (YouTube) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-11]
CHR Extension: (Google Search) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-11]
CHR Extension: (Google Sheets) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-11]
CHR Extension: (Google Docs Offline) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-11]
CHR Extension: (AdBlock) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-11-11]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-11]
CHR Extension: (Gmail) - C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-11]
CHR HKU\S-1-5-21-2787382413-3702957683-2713730491-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bmkckgpgekmanipelfidlhmkfcjicion] - hxxps://clients2.google.com/service/update2/crx

Opera:
=======
OPR Extension: (Adblock Plus) - C:\Users\Marek\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2015-10-30]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe [71168 2014-08-20] (ASUS Cloud Corporation) [File not signed]
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2013-11-14] (Broadcom Corporation.)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2505472 2015-10-09] (ESET)
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1037568 2014-09-18] (Intel Corporation)
S2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344976 2014-12-15] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel(R) Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [158496 2015-01-06] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-10-21] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-10-21] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [69904 2014-09-19] (ASUS Corporation)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-11-14] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7546544 2015-02-14] (Broadcom Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
S3 DIRECTIO; C:\Program Files\PerformanceTest\DirectIo64.sys [31376 2015-03-10] ()
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [38720 2014-09-18] (Intel Corporation)
R3 dptf_pch; C:\Windows\System32\drivers\dptf_pch.sys [38208 2014-09-18] (Intel Corporation)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30352 2015-11-06] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264040 2015-09-23] (ESET)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [14976 2015-09-23] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [186784 2015-09-23] (ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [142976 2015-10-07] (ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [206312 2015-09-23] (ESET)
R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [52872 2015-09-23] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [69840 2015-09-23] (ESET)
R3 esif_lf; C:\Windows\System32\drivers\esif_lf.sys [216360 2014-09-18] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [79016 2014-08-26] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-11-10] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2015-01-06] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [35856 2014-10-21] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [257880 2014-10-21] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-10-21] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-13 11:01 - 2015-11-13 11:01 - 00017218 _____ C:\Users\Marek\Desktop\FRST.txt
2015-11-13 11:00 - 2015-11-13 11:01 - 00000000 ____D C:\FRST
2015-11-12 16:01 - 2015-11-12 16:01 - 02198528 _____ (Farbar) C:\Users\Marek\Desktop\FRST64.exe
2015-11-12 14:14 - 2015-11-12 14:14 - 00539136 _____ C:\Users\Marek\Downloads\Prednáška č. 4.ppt
2015-11-12 08:59 - 2015-11-12 08:59 - 05638248 _____ (Swearware) C:\Users\Marek\Desktop\ComboFix.exe
2015-11-11 22:22 - 2015-11-11 22:22 - 00388608 _____ (Trend Micro Inc.) C:\Users\Marek\Downloads\HijackThis.exe
2015-11-11 22:22 - 2015-11-11 22:22 - 00010748 _____ C:\Users\Marek\Downloads\hijackthis.log
2015-11-11 22:21 - 2015-11-11 22:21 - 00002868 _____ C:\Users\Marek\Desktop\rk_294E.tmp.txt
2015-11-11 15:34 - 2015-11-11 15:34 - 00508928 _____ C:\Users\Marek\Downloads\Prednáška č. 1.ppt
2015-11-11 15:32 - 2015-11-11 15:32 - 00557056 _____ C:\Users\Marek\Downloads\Prednáška č. 10.ppt
2015-11-11 13:11 - 2015-11-13 11:00 - 00000165 _____ C:\Users\Marek\AppData\Roaming\sp_data.sys
2015-11-11 13:11 - 2015-11-11 13:11 - 00006660 _____ C:\Users\Marek\Desktop\zoek-results.txt
2015-11-11 13:09 - 2015-11-11 12:38 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-11-11 12:58 - 2015-11-11 12:58 - 00000000 ____D C:\Users\Marek\AppData\Local\CrashDumps
2015-11-11 12:39 - 2015-11-11 13:11 - 00006660 _____ C:\zoek-results.log
2015-11-11 12:38 - 2015-11-11 13:07 - 00000000 ____D C:\zoek_backup
2015-11-11 12:38 - 2015-11-11 12:38 - 01309184 _____ C:\Users\Marek\Desktop\zoek.exe
2015-11-11 12:37 - 2015-11-11 12:37 - 00005776 _____ C:\Users\Marek\Desktop\rk_8D54.tmp.txt
2015-11-11 08:28 - 2015-11-11 22:08 - 00037624 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2015-11-11 08:28 - 2015-11-11 08:38 - 00000000 ____D C:\ProgramData\RogueKiller
2015-11-11 08:27 - 2015-11-11 08:28 - 22939720 _____ C:\Users\Marek\Desktop\RogueKillerX64.exe
2015-11-11 08:26 - 2015-11-11 08:26 - 00001210 _____ C:\Users\Marek\Desktop\JRT.txt
2015-11-11 08:22 - 2015-11-11 08:22 - 01801288 _____ (Malwarebytes) C:\Users\Marek\Desktop\JRT.exe
2015-11-11 08:21 - 2015-11-11 08:21 - 00000868 _____ C:\Users\Marek\Desktop\AdwCleaner[C1].txt
2015-11-10 22:48 - 2015-11-10 22:48 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-11-10 11:25 - 2015-11-10 11:25 - 00001224 _____ C:\Users\Marek\Desktop\mbam.txt
2015-11-10 11:11 - 2015-11-10 22:48 - 00000716 _____ C:\WINDOWS\setupact.log
2015-11-10 11:11 - 2015-11-10 11:11 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-11-10 11:00 - 2015-11-10 11:00 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-11-10 10:59 - 2015-11-10 10:59 - 00001120 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-11-10 10:59 - 2015-11-10 10:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-11-10 10:59 - 2015-11-10 10:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-11-10 10:59 - 2015-11-10 10:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-11-10 10:59 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-11-10 10:59 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-11-10 10:59 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-11-10 10:58 - 2015-11-10 10:59 - 22908888 _____ (Malwarebytes ) C:\Users\Marek\Downloads\mbam-setup-2.2.0.1024.exe
2015-11-10 10:57 - 2015-11-10 10:57 - 00000770 _____ C:\Users\Marek\Desktop\AdwCleaner[S1].txt
2015-11-10 10:53 - 2015-11-11 08:19 - 00000000 ____D C:\AdwCleaner
2015-11-10 10:52 - 2015-11-10 10:52 - 01712128 _____ C:\Users\Marek\Desktop\AdwCleaner.exe
2015-11-10 10:48 - 2015-11-10 10:48 - 00448512 _____ (OldTimer Tools) C:\Users\Marek\Downloads\TFC.exe
2015-11-10 10:47 - 2015-11-10 10:47 - 00050688 _____ (Atribune.org) C:\Users\Marek\Downloads\ATF-Cleaner.exe
2015-11-10 10:29 - 2015-11-10 10:29 - 00304000 _____ C:\WINDOWS\Minidump\111015-45609-01.dmp
2015-11-10 10:29 - 2015-11-10 10:29 - 00000000 ____D C:\WINDOWS\Minidump
2015-11-10 10:28 - 2015-11-11 13:10 - 00001288 _____ C:\WINDOWS\PFRO.log
2015-11-10 10:28 - 2015-11-10 10:28 - 498426783 _____ C:\WINDOWS\MEMORY.DMP
2015-11-10 09:01 - 2015-11-10 11:19 - 00000010 _____ C:\Users\Marek\Desktop\Nový textový dokument.txt
2015-11-10 00:25 - 2015-11-10 00:25 - 00000952 _____ C:\Users\Marek\Desktop\PerformanceTest.lnk
2015-11-10 00:25 - 2015-11-10 00:25 - 00000000 ____D C:\Users\Marek\Documents\PassMark
2015-11-10 00:25 - 2015-11-10 00:25 - 00000000 ____D C:\Users\Marek\AppData\Local\PassMark
2015-11-10 00:25 - 2015-11-10 00:25 - 00000000 ____D C:\ProgramData\Passmark
2015-11-10 00:25 - 2015-11-10 00:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PerformanceTest
2015-11-10 00:25 - 2015-11-10 00:25 - 00000000 ____D C:\Program Files\PerformanceTest
2015-11-10 00:23 - 2015-11-10 00:24 - 27082632 _____ (Passmark Software ) C:\Users\Marek\Downloads\petst.exe
2015-11-10 00:14 - 2015-11-13 11:01 - 00359077 _____ C:\WINDOWS\WindowsUpdate.log
2015-11-07 13:07 - 2015-11-08 22:05 - 00000000 ____D C:\Users\Marek\Downloads\Total.War.ATTILA.Empires.of.Sand.Culture.Pack.MULTi9-PROPHET
2015-11-07 13:06 - 2015-11-08 22:05 - 00000000 ____D C:\Users\Marek\AppData\LocalLow\BitTorrent
2015-11-07 02:40 - 2015-11-07 02:40 - 00000000 ____D C:\Users\Marek\AppData\Roaming\HighVoltz
2015-11-07 02:16 - 2015-06-04 14:28 - 00961192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2015-11-07 02:16 - 2015-06-04 14:28 - 00062304 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:28 - 00020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:28 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:28 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:28 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:28 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:28 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:28 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:28 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:28 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:28 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:28 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:28 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:28 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:28 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:26 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2015-11-07 02:16 - 2015-06-04 14:26 - 00064352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:26 - 00022368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:26 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:26 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:26 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:26 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:26 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:26 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:26 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:26 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:26 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:26 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:26 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:26 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-11-07 02:16 - 2015-06-04 14:26 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-11-07 02:04 - 2014-04-15 16:35 - 00028352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aspnet_counters.dll
2015-11-07 02:04 - 2014-04-15 16:34 - 00029888 _____ (Microsoft Corporation) C:\WINDOWS\system32\aspnet_counters.dll
2015-11-06 23:49 - 2015-11-06 23:49 - 00000851 _____ C:\Users\Marek\Desktop\Age of Empires II HD The African Kingdoms.lnk
2015-11-06 23:49 - 2015-11-06 23:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Age of Empires II HD The African Kingdoms
2015-11-06 23:43 - 2015-11-06 23:44 - 00030352 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtlitescsibus.sys
2015-11-06 23:43 - 2015-11-06 23:43 - 00001757 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2015-11-06 23:43 - 2015-11-06 23:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2015-11-06 23:43 - 2015-11-06 23:43 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2015-11-06 23:43 - 2015-11-06 23:43 - 00000000 ____D C:\Program Files (x86)\Disc Soft
2015-11-06 23:41 - 2015-11-06 23:43 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2015-11-06 22:23 - 2015-11-06 22:23 - 00000000 ____D C:\Users\Marek\AppData\Local\Bossland GmbH
2015-11-06 00:17 - 2015-11-06 12:43 - 2261942272 _____ C:\Users\Marek\Desktop\codex-age.of.empires.ii.hd.the.african.kingdoms.iso
2015-11-03 20:51 - 2015-11-03 20:51 - 00000000 ____D C:\Users\Marek\Desktop\ctm
2015-11-02 13:49 - 2012-07-09 15:11 - 00212992 _____ (***) C:\Users\Marek\Desktop\autocast.exe
2015-11-01 16:25 - 2015-11-01 16:25 - 00001352 _____ C:\Users\Marek\Documents\AutoHotkey.ahk
2015-11-01 16:14 - 2015-11-01 16:14 - 00000026 _____ C:\WINDOWS\propresser.bat
2015-11-01 16:09 - 2015-11-01 16:09 - 00000000 ____D C:\ProgramData\Cok Free Auto Typer
2015-10-30 18:00 - 2015-10-30 18:39 - 00000000 ____D C:\Users\Marek\AppData\Roaming\vlc
2015-10-30 17:44 - 2015-10-30 17:51 - 00000000 ____D C:\Users\Marek\AppData\Local\Mozilla
2015-10-30 17:44 - 2015-10-30 17:44 - 00001165 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-10-30 17:44 - 2015-10-30 17:44 - 00000000 ____D C:\Users\Marek\AppData\Roaming\Mozilla
2015-10-30 17:39 - 2015-11-05 17:40 - 00003840 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1446223135
2015-10-30 17:39 - 2015-11-05 17:40 - 00001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-10-30 17:39 - 2015-10-30 17:39 - 00001153 _____ C:\Users\Public\Desktop\Opera.lnk
2015-10-30 17:39 - 2015-10-30 17:39 - 00000000 ____D C:\Users\Marek\AppData\Roaming\Opera Software
2015-10-30 17:39 - 2015-10-30 17:39 - 00000000 ____D C:\Users\Marek\AppData\Local\Opera Software
2015-10-30 17:37 - 2015-11-05 17:40 - 00000000 ____D C:\Program Files (x86)\Opera
2015-10-28 22:39 - 2015-10-30 17:58 - 00001088 _____ C:\Users\Public\Desktop\VLC media player.lnk
2015-10-28 22:39 - 2015-10-28 22:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-10-28 22:38 - 2015-10-28 22:38 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2015-10-27 18:35 - 2015-10-27 18:35 - 00000000 ____D C:\Users\Marek\AppData\Local\CEF
2015-10-27 17:53 - 2015-10-27 17:53 - 00000000 ____D C:\ProgramData\HP
2015-10-24 13:01 - 2015-10-24 13:01 - 00000000 ____D C:\Users\Marek\Desktop\c
2015-10-24 10:57 - 2015-10-24 10:57 - 00000000 ____D C:\Users\Marek\Documents\Vlastné šablóny balíka Office
2015-10-22 23:27 - 2015-10-22 23:27 - 00000000 ____D C:\Users\Marek\AppData\LocalLow\Adobe
2015-10-22 22:34 - 2015-11-01 22:39 - 00003886 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-10-22 22:33 - 2015-10-29 20:52 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-10-22 22:33 - 2015-10-23 09:44 - 00000000 ____D C:\ProgramData\Adobe
2015-10-22 22:33 - 2015-10-22 22:33 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-10-22 22:31 - 2015-10-22 23:27 - 00000000 ____D C:\Users\Marek\AppData\Local\Adobe
2015-10-22 18:34 - 2015-10-22 18:34 - 00000948 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2015-10-22 18:34 - 2015-10-22 18:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2015-10-22 18:34 - 2015-10-22 18:34 - 00000000 ____D C:\Program Files\CPUID
2015-10-20 16:16 - 2015-10-20 16:17 - 00000000 ____D C:\Users\Marek\Desktop\Herout priloha
2015-10-19 21:06 - 2015-10-19 21:06 - 00000000 ____D C:\Users\Marek\Desktop\to c++ convertor
2015-10-19 20:21 - 2015-10-19 20:24 - 00000000 ____D C:\Users\Marek\AppData\Roaming\Dev-Cpp
2015-10-19 20:20 - 2015-10-19 20:20 - 00001014 _____ C:\Users\Marek\Desktop\Dev-C++.lnk
2015-10-19 20:20 - 2015-10-19 20:20 - 00001014 _____ C:\Users\Administrator\Desktop\Dev-C++.lnk
2015-10-19 20:20 - 2015-10-19 20:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloodshed Dev-C++
2015-10-19 20:19 - 2015-10-19 20:19 - 00000000 ____D C:\Program Files (x86)\Dev-Cpp
2015-10-19 19:55 - 2015-10-20 15:40 - 00000000 ____D C:\Program Files (x86)\CodeBlocks
2015-10-19 19:55 - 2015-10-19 22:52 - 00000000 ____D C:\Users\Marek\AppData\Roaming\CodeBlocks
2015-10-19 19:55 - 2015-10-19 20:04 - 00000000 ____D C:\Users\Marek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2015-10-19 19:55 - 2015-10-19 20:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2015-10-19 00:18 - 2015-11-01 17:33 - 00000000 ____D C:\Program Files (x86)\Cok Software
2015-10-19 00:18 - 2015-10-19 00:18 - 00001436 _____ C:\Users\Marek\Desktop\Cok Free Auto Clicker.lnk
2015-10-19 00:18 - 2015-10-19 00:18 - 00000000 ____D C:\ProgramData\Cok Free Auto Clicker
2015-10-18 00:53 - 2014-11-05 14:16 - 00027136 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\tap0901.sys
2015-10-18 00:39 - 2015-10-18 00:39 - 00000000 ____D C:\ProgramData\KMSAuto
2015-10-18 00:38 - 2015-10-18 00:49 - 00000000 ____D C:\Users\Marek\AppData\Local\MSfree Inc
2015-10-18 00:33 - 2015-10-18 00:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-10-18 00:32 - 2015-10-18 00:32 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2015-10-18 00:31 - 2015-10-18 00:31 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2015-10-18 00:30 - 2015-10-30 17:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-10-18 00:30 - 2015-10-18 00:31 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2015-10-18 00:30 - 2015-10-18 00:30 - 00000000 ____D C:\WINDOWS\PCHEALTH
2015-10-18 00:26 - 2015-10-18 00:26 - 00000000 __RHD C:\MSOCache
2015-10-18 00:26 - 2015-10-18 00:26 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2015-10-18 00:26 - 2015-10-18 00:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2015-10-18 00:12 - 2015-10-18 00:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-10-18 00:12 - 2015-10-18 00:12 - 00000000 ____D C:\Users\Marek\AppData\Roaming\WinRAR
2015-10-18 00:12 - 2015-10-18 00:12 - 00000000 ____D C:\Users\Marek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-10-18 00:12 - 2015-10-18 00:12 - 00000000 ____D C:\Program Files\WinRAR
2015-10-18 00:06 - 2015-10-18 00:06 - 00002689 _____ C:\Users\Marek\Desktop\BitTorrent.lnk
2015-10-18 00:05 - 2015-11-09 22:49 - 00000000 ____D C:\Users\Marek\AppData\Roaming\BitTorrent
2015-10-17 23:30 - 2015-10-17 23:30 - 00000000 ____D C:\Users\Marek\AppData\Roaming\VitySoft
2015-10-17 23:24 - 2015-10-24 10:06 - 00000000 ____D C:\Users\Marek\.oracle_jre_usage
2015-10-17 23:24 - 2015-10-24 10:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-10-17 23:24 - 2015-10-24 10:05 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-10-17 23:24 - 2015-10-17 23:24 - 00000000 ____D C:\Users\Marek\AppData\Roaming\Sun
2015-10-17 23:24 - 2015-10-17 23:24 - 00000000 ____D C:\Users\Marek\AppData\LocalLow\Sun
2015-10-17 23:23 - 2015-10-24 10:07 - 00000000 ____D C:\ProgramData\Oracle
2015-10-17 23:23 - 2015-10-24 10:05 - 00000000 ____D C:\Program Files (x86)\Java
2015-10-17 23:21 - 2015-10-17 23:21 - 00000000 ____D C:\Users\Marek\AppData\LocalLow\Oracle
2015-10-17 23:12 - 2015-10-17 23:12 - 00000000 ____D C:\Users\Marek\AppData\Local\ESET
2015-10-17 23:11 - 2015-10-17 23:11 - 00002045 _____ C:\Users\Public\Desktop\ESET Ochrana bankovníctva a platieb.lnk
2015-10-17 23:11 - 2015-10-17 23:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2015-10-17 23:11 - 2015-10-17 23:11 - 00000000 ____D C:\ProgramData\ESET
2015-10-17 23:11 - 2015-10-17 23:11 - 00000000 ____D C:\Program Files\ESET
2015-10-17 23:07 - 2015-11-06 21:53 - 00000000 ____D C:\Users\Marek\Desktop\FreeRapid-0.8
2015-10-14 09:03 - 2015-10-24 20:18 - 00000000 ____D C:\Users\Marek\AppData\Roaming\Skype
2015-10-14 09:03 - 2015-10-14 09:03 - 00000000 ____D C:\Users\Marek\AppData\Local\Skype
2015-10-14 09:02 - 2015-10-17 23:04 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-10-14 09:02 - 2015-10-14 09:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-10-14 08:59 - 2015-10-14 08:59 - 00003108 _____ C:\WINDOWS\System32\Tasks\{EE3141A2-91B0-4A2B-81DD-6348F48BC310}

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-13 11:00 - 2015-10-12 20:49 - 00001543 _____ C:\Users\Marek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AsusSmartGestureDetector.lnk
2015-11-13 11:00 - 2015-10-12 20:21 - 00000908 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-13 11:00 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-11-13 01:36 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-11-13 01:35 - 2015-02-14 09:33 - 00020245 _____ C:\WINDOWS\SysWOW64\Gms.log
2015-11-13 01:26 - 2015-10-12 20:21 - 00000912 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-13 00:02 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-11-12 14:51 - 2015-02-14 10:25 - 00000000 ____D C:\Users\Marek\AppData\Local\Packages
2015-11-12 12:20 - 2015-10-12 20:16 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2787382413-3702957683-2713730491-1001
2015-11-12 12:08 - 2015-10-13 13:12 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2015-11-12 12:08 - 2015-10-13 13:12 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2015-11-12 09:13 - 2014-03-18 16:26 - 00863592 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-12 08:54 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-11-11 13:28 - 2015-10-12 20:32 - 00002217 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-11-10 10:31 - 2015-10-12 20:05 - 00000000 ____D C:\Users\Marek
2015-11-07 02:41 - 2015-09-17 14:45 - 00000000 ____D C:\Users\Marek\Desktop\Deffender.eu_CATA_client_4.3.4
2015-11-07 02:16 - 2013-08-22 16:20 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-11-05 13:48 - 2014-10-21 13:09 - 00000000 ___DC C:\WINDOWS\Panther
2015-10-30 16:17 - 2015-10-12 20:05 - 00001908 _____ C:\WINDOWS\diagwrn.xml
2015-10-30 16:17 - 2015-10-12 20:05 - 00001908 _____ C:\WINDOWS\diagerr.xml
2015-10-22 23:27 - 2015-10-12 20:10 - 00000000 ____D C:\Users\Marek\AppData\Roaming\Adobe
2015-10-20 16:36 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-10-20 15:41 - 2013-08-22 15:44 - 00482008 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-10-19 21:51 - 2015-10-12 20:21 - 00000000 ____D C:\Users\Marek\AppData\Local\Google
2015-10-18 00:34 - 2015-10-12 21:03 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-10-18 00:32 - 2014-03-18 16:10 - 00000000 ____D C:\WINDOWS\ShellNew
2015-10-18 00:32 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-10-18 00:30 - 2015-10-12 21:03 - 00000000 ____D C:\Program Files\Microsoft Office
2015-10-18 00:27 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\System
2015-10-18 00:27 - 2013-08-22 14:25 - 00000199 _____ C:\WINDOWS\win.ini
2015-10-18 00:02 - 2015-10-12 21:21 - 00001204 _____ C:\Users\Marek\Desktop\CrystalDiskInfo.lnk
2015-10-18 00:02 - 2015-10-12 21:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2015-10-18 00:02 - 2015-10-12 21:21 - 00000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2015-10-17 23:57 - 2015-10-12 20:10 - 00000000 ____D C:\Users\Marek\AppData\Local\VirtualStore
2015-10-17 23:51 - 2015-10-12 21:07 - 00001814 _____ C:\Users\Marek\Desktop\CrystalDiskMark 5.lnk
2015-10-17 23:51 - 2015-10-12 21:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskMark5
2015-10-17 23:51 - 2015-10-12 21:07 - 00000000 ____D C:\Program Files\CrystalDiskMark5
2015-10-17 23:12 - 2013-08-22 16:36 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-10-15 14:39 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2015-10-15 14:37 - 2014-03-18 16:10 - 00000000 ____D C:\Program Files\Windows Journal
2015-10-15 14:37 - 2014-03-18 15:58 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2015-10-15 14:37 - 2014-03-18 15:58 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2015-10-15 14:37 - 2014-03-18 15:58 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2015-10-15 14:37 - 2014-03-18 15:58 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2015-10-15 14:37 - 2014-03-18 15:58 - 00000000 ____D C:\WINDOWS\system32\winrm
2015-10-15 14:37 - 2014-03-18 15:58 - 00000000 ____D C:\WINDOWS\system32\WCN
2015-10-15 14:37 - 2014-03-18 15:58 - 00000000 ____D C:\WINDOWS\system32\slmgr
2015-10-15 14:37 - 2014-03-18 15:58 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2015-10-15 14:37 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-10-15 14:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2015-10-15 14:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-10-15 14:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Com
2015-10-15 14:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-10-15 14:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-10-15 14:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\migwiz
2015-10-15 14:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Com
2015-10-15 14:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-10-15 14:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\IME
2015-10-15 14:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help
2015-10-15 14:37 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-10-15 14:37 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-10-15 14:37 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-10-15 14:37 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-10-15 14:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2015-10-15 14:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-10-15 14:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-10-15 14:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-10-15 14:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-10-15 14:37 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\servicing
2015-10-15 14:16 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2015-10-15 14:16 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-10-14 14:07 - 2015-10-12 22:02 - 00000000 ____D C:\Windows.old
2015-10-14 10:38 - 2015-10-12 19:42 - 00000000 ___HD C:\$SysReset
2015-10-14 09:02 - 2014-10-21 05:29 - 00000000 ____D C:\ProgramData\Skype

==================== Files in the root of some directories =======

2015-11-11 13:11 - 2015-11-13 11:00 - 0000165 _____ () C:\Users\Marek\AppData\Roaming\sp_data.sys
2015-02-14 09:37 - 2015-02-14 09:37 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-10-21 05:28 - 2012-09-07 12:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-10-21 05:28 - 2009-07-22 11:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe

Some files in TEMP:
====================
C:\Users\Marek\AppData\Local\Temp\dllnt_dump.dll

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-11-06 14:08

==================== End of FRST.txt ============================

Reklama

nermitus · Příspěvekod **nermitus** » 13 lis 2015 11:21

Additional scan result of Farbar Recovery Scan Tool (x64) Version:07-11-2015
Ran by Marek (2015-11-13 11:02:40)
Running from C:\Users\Marek\Desktop
Windows 8.1 (X64) (2015-10-12 19:07:44)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2787382413-3702957683-2713730491-500 - Administrator - Disabled) => C:\Users\Administrator
Guest (S-1-5-21-2787382413-3702957683-2713730491-501 - Limited - Disabled)
Marek (S-1-5-21-2787382413-3702957683-2713730491-1001 - Administrator - Enabled) => C:\Users\Marek

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET Smart Security 9.0.318.22 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 9.0.318.22 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personálny firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AC0F074E4100}) (Version: 15.009.20077 - Adobe Systems Incorporated)
Age of Empires II HD The African Kingdoms (HKLM-x32\...\Age of Empires II HD The African Kingdoms_is1) (Version: - )
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS)
ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 2.0.8 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 3.0.8 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.05.0001 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.0.2 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0037 - ASUS)
AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.0.42 - ICEpower a/s)
BitTorrent (HKU\S-1-5-21-2787382413-3702957683-2713730491-1001\...\BitTorrent) (Version: 7.9.5.41203 - BitTorrent Inc.)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.30.223.228 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.10 - Piriform)
CodeBlocks (HKU\S-1-5-21-2787382413-3702957683-2713730491-1001\...\CodeBlocks) (Version: 13.12 - The Code::Blocks Team)
Cok Free Auto Clicker 3.0 (HKLM-x32\...\Cok Free Auto Clicker_is1) (Version: 3.0 - Cok Software)
CPUID HWMonitor 1.28 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
CrystalDiskInfo 6.5.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.5.2 - Crystal Dew World)
CrystalDiskMark 5.0.2 (HKLM\...\CrystalDiskMark5_is1) (Version: 5.0.2 - Crystal Dew World)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 5.0.1.0406 - Disc Soft Ltd)
Dev-C++ (HKLM-x32\...\Dev-C++) (Version: 5.11 - Bloodshed Software)
Device Setup (HKLM-x32\...\{1F07F2C7-596F-4F34-B805-2C61A3E50E5A}) (Version: 1.0.18 - ASUSTek Computer Inc.)
ESET Smart Security (HKLM\...\{FB450702-BAD0-4DBA-8AF9-5572CC0B388B}) (Version: 9.0.318.22 - ESET, spol. s r.o.)
Foxit PhantomPDF (HKLM-x32\...\{FC76E6BB-7CBB-4CD6-8178-3BCADC0526C3}) (Version: 6.0.62.801 - Foxit Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.86 - Spoločnosť Google Inc.)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1017 - Intel Corporation)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.0.10100.71 - Intel Corporation)
Intel(R) Chipset Device Software (x32 Version: 10.0.22 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.38.1036 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4062 - Intel Corporation)
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
Malwarebytes Anti-Malware verzia 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft Office 2013 Professional Plus (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Mozilla Firefox 41.0.2 (x86 sk) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 sk)) (Version: 41.0.2 - Mozilla)
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
NVIDIA Graphics Driver 345.05 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 345.05 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Opera Stable 33.0.1990.58 (HKLM-x32\...\Opera 33.0.1990.58) (Version: 33.0.1990.58 - Opera Software)
PerformanceTest v8.0 (HKLM\...\PerformanceTest 8_is1) (Version: 8.0.1052.0 - Passmark Software)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.39048 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.33.529.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7417 - Realtek Semiconductor Corp.)
Skype™ 7.12 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.12.101 - Skype Technologies S.A.)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.11.399 - ASUS Cloud Corporation)
WIDCOMM Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.9840 - Broadcom Corporation)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.14 - WildTangent)
Windows Driver Package - ASUS (ATP) Mouse (07/02/2014 6.0.0.39) (HKLM\...\51B9B97722559D76D6429B83B71A86106A35BFCE) (Version: 07/02/2014 6.0.0.39 - ASUS)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.0.1 - ASUS)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Restore Points =========================

25-10-2015 18:27:56 Scheduled Checkpoint
04-11-2015 15:44:34 Scheduled Checkpoint
07-11-2015 02:15:26 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026
11-11-2015 08:24:20 JRT Pre-Junkware Removal

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2015-11-11 12:58 - 00000753 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0660E8CB-3061-4B2E-8DB9-E0FAC1FC019F} - System32\Tasks\{EE3141A2-91B0-4A2B-81DD-6348F48BC310} => Chrome.exe hxxp://ui.skype.com/ui/0/7.12.64.101/sk ... rogressBar
Task: {25AB588A-ED7A-4373-A7E1-F5F779398D26} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-09-16] (Piriform Ltd)
Task: {3F4AB9E7-E77E-4235-A75B-7B7EFBA9A093} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-09-11] (ASUSTek Computer Inc.)
Task: {409B8D6A-AA07-40F4-ACE6-743D80148589} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-12] (Google Inc.)
Task: {45EE1A0C-8904-4C17-B9E3-FEC7CA9D3F8D} - System32\Tasks\Opera scheduled Autoupdate 1446223135 => C:\Program Files (x86)\Opera\launcher.exe [2015-10-30] (Opera Software)
Task: {4BBC5893-45E3-4694-99C2-4555B69C7856} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2014-11-05] (ASUS)
Task: {6DA30928-130F-473E-8776-AD799C09F6DD} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2014-09-02] (ASUSTek Computer Inc.)
Task: {6F764147-338D-4C0E-8825-7BABD0F05891} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-12-26] (Realtek Semiconductor)
Task: {737CC88D-5A5A-48C9-A372-666AEED58590} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {742B9CB3-DDFF-4DFA-B819-63B5D0B30F82} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {A7B5FFDD-98F3-41BD-8856-E7D8AAB10CD3} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {A908ACFC-6F33-4E33-9E75-55A9E3D0C8A5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-12] (Google Inc.)
Task: {B0CCCC56-0FA2-4793-B0E3-7D54D567C60B} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2015-02-12] ()
Task: {D0F0023A-37B7-4484-9159-DEF3B97DAF3E} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {EF77008D-6C09-417D-B65C-63C8F3B0307B} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-09-19] (AsusTek)
Task: {F0953658-9CFD-4F9B-965F-3D7B7594E7EE} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {FADE4A53-280E-4FC3-94FB-961C42BB99F1} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {FD3D7C69-D944-47BF-A53C-C5C837C4B6CE} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-06-11] (ASUSTek Computer Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-02-14 09:33 - 2014-12-24 11:38 - 00115912 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-07-10 17:33 - 2014-07-10 17:33 - 00049408 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btwleapi.dll
2015-01-14 03:24 - 2014-12-15 06:26 - 00392592 _____ () C:\WINDOWS\system32\igfxTray.exe
2015-09-16 20:33 - 2015-09-16 20:33 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1051.dll
2014-11-05 13:44 - 2014-11-05 13:44 - 00037424 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2014-11-05 13:44 - 2014-11-05 13:44 - 00124928 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2015-01-06 16:40 - 2015-01-06 16:40 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2787382413-3702957683-2713730491-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\asus\wallpapers\asus.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run32: => "WebStorage"
HKU\S-1-5-21-2787382413-3702957683-2713730491-1001\...\StartupApproved\Run: => "DAEMON Tools Lite"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{9FF28AA5-8828-48D9-A89B-9DEDF7C73A7D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{45BA7068-E45B-4683-A4FF-22BC00293DB2}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{FF11E5A5-01F2-4AB6-9973-059D4C7D61AF}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{BFE89BC0-9241-4EEA-B49E-24390A31C83E}] => (Allow) C:\Users\Marek\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{142416C8-A09D-4CA0-A0CB-D5C42872A533}] => (Allow) C:\Users\Marek\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{2450AC28-C480-4380-9E98-FC96598BE7FD}] => (Allow) C:\Users\Marek\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{C55BBD08-8BA5-4953-B97F-A2C1AF142304}] => (Allow) C:\Users\Marek\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{9256B44D-7D65-4E4E-9F6F-D986B7ED09A8}] => (Allow) C:\Users\Marek\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{EE796B1A-1038-4DC2-A8C1-E55241181EAD}] => (Allow) C:\Users\Marek\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{B3666D43-C2F1-41B9-B340-FA6EE80959F8}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{480252B6-25EB-49DC-9901-728318A22B88}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{14218C96-135E-4F31-A6D1-BDE592225A73}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{CB6DE4B3-2359-4EAC-A55C-FBC84031DCC0}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{17AEF046-144E-4A6E-9CC5-B898502A09A5}] => (Allow) LPort=1688
FirewallRules: [{00D54628-8633-4B26-98DC-580B9383F5BF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{21C91C10-0789-4609-BE28-C618B1362086}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{8950175B-7833-42D8-8D4D-0BD75A25BD21}C:\users\marek\desktop\lubos\nová složka\hbcd_auth.exe] => (Allow) C:\users\marek\desktop\lubos\nová složka\hbcd_auth.exe
FirewallRules: [UDP Query User{503DBF20-E1E5-4111-AE87-746E92A7DAA4}C:\users\marek\desktop\lubos\nová složka\hbcd_auth.exe] => (Allow) C:\users\marek\desktop\lubos\nová složka\hbcd_auth.exe
FirewallRules: [TCP Query User{C9E8CD1B-734C-475E-8470-F973E0E34AD5}C:\users\marek\desktop\hb auth\hbcd_auth.exe] => (Allow) C:\users\marek\desktop\hb auth\hbcd_auth.exe
FirewallRules: [UDP Query User{FDA3B57C-402F-4365-BF15-57EF48D5370A}C:\users\marek\desktop\hb auth\hbcd_auth.exe] => (Allow) C:\users\marek\desktop\hb auth\hbcd_auth.exe
FirewallRules: [{DC39F766-0624-4B49-9517-DA1E58809C4C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (11/12/2015 09:13:42 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (11/12/2015 09:13:42 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (11/12/2015 08:53:34 AM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: Správca okien na pracovnej ploche zistil kritickú chybu (0x8898008d)

Error: (11/11/2015 01:15:44 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (11/11/2015 01:15:44 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (11/11/2015 12:39:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: DaS_21.exe, verzia: 2.1.0.4, časová značka: 0x540c90b2
Názov chybujúceho modulu: unknown, verzia: 0.0.0.0, časová značka: 0x00000000
Kód výnimky: 0xc0000005
Odstup chyby: 0x00007ffb082c2f4c
Identifikácia chybujúceho procesu: 0x8cc
Čas spustenia chybujúcej aplikácie: 0xDaS_21.exe0
Cesta chybujúcej aplikácie: DaS_21.exe1
Cesta chybujúceho modulu: DaS_21.exe2
Identifikácia hlásenia: DaS_21.exe3
Celé meno chybujúceho balíka: DaS_21.exe4
Identifikácia chybujúcej aplikácie vzhľadom na balík: DaS_21.exe5

Error: (11/11/2015 12:39:34 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: DaS_21.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
Stack:
at DriverAndServicesOut.GetProcess.GetPathName(System.String)
at DriverAndServicesOut.GetProcess.GetAllServices(System.String)
at DriverAndServicesOut.Program.Main(System.String[])

Error: (11/11/2015 08:27:24 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (11/11/2015 08:27:24 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (11/10/2015 10:54:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

System errors:
=============
Error: (11/12/2015 11:43:02 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 20. The Windows SChannel error state is 960.

Error: (11/12/2015 11:36:22 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 20. The Windows SChannel error state is 960.

Error: (11/12/2015 11:35:47 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 20. The Windows SChannel error state is 960.

Error: (11/12/2015 10:58:36 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 20. The Windows SChannel error state is 960.

Error: (11/12/2015 07:19:02 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 20. The Windows SChannel error state is 960.

Error: (11/12/2015 06:57:37 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 20. The Windows SChannel error state is 960.

Error: (11/12/2015 05:24:56 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 20. The Windows SChannel error state is 960.

Error: (11/12/2015 02:59:42 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 20. The Windows SChannel error state is 960.

Error: (11/12/2015 12:21:18 PM) (Source: DCOM) (EventID: 10010) (User: Monster)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (11/12/2015 12:20:48 PM) (Source: DCOM) (EventID: 10010) (User: Monster)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

CodeIntegrity:
===================================
Date: 2015-10-14 14:44:18.546
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-10-14 14:44:17.901
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz
Percentage of memory in use: 34%
Total physical RAM: 3998.84 MB
Available physical RAM: 2636.54 MB
Total Virtual: 8094.84 MB
Available Virtual: 6781.39 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:372.6 GB) (Free:308.39 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (Data) (Fixed) (Total:542.8 GB) (Free:535.92 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: F9D1BC81)

Partition: GPT.

==================== End of Addition.txt ============================

Příspěvekod **jaro3** » 13 lis 2015 17:14

Prosím, postupuj následujícím způsobem:
Otevřít poznámkový blok (Start => Všechny programy => Příslušenství => Poznámkový blok).
Prosím, zkopíruj do něj celý obsah níže.

Kód: Vybrat vše

Start
CloseProcesses:
HKU\S-1-5-21-2787382413-3702957683-2713730491-1001\...\MountPoints2: {7c73fe2f-84d3-11e5-8267-acb57dd8a8c4} - "F:\setup.exe"
SearchScopes: HKU\S-1-5-21-2787382413-3702957683-2713730491-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
CHR HKU\S-1-5-21-2787382413-3702957683-2713730491-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bmkckgpgekmanipelfidlhmkfcjicion] - hxxps://clients2.google.com/service/update2/crx
C:\WINDOWS\System32\Tasks\{EE3141A2-91B0-4A2B-81DD-6348F48BC310}
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\ProgramData\DP45977C.lfl
C:\ProgramData\SetStretch.cmd
C:\ProgramData\SetStretch.exe
C:\ProgramData\KMSAuto
C:\Users\Marek\AppData\Local\Temp\dllnt_dump.dll
Task: {409B8D6A-AA07-40F4-ACE6-743D80148589} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-12] (Google Inc.)
Task: {A908ACFC-6F33-4E33-9E75-55A9E3D0C8A5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-12] (Google Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

EmptyTemp:
End

(Můžeš použít funkci „vybrat vše“, klepni pravým tlačítkem myši na levé horní políčko v otevřeném poznámkovém bloku a zvol „ Vložit“).

Ulož jej na na plochu jako fixlist.txt

Spusťt FRST a stiskni tlačítko „Fix“ (Opravit) jen jednou a čekej.
Nástroj vypracuje log na ploše (Fixlog.txt), prosím zkopíruj sem celý jeho obsah.

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Toto otestuj na Virustotal
C:\Users\Marek\Desktop\rk_294E.tmp.txt
C:\Users\Marek\Desktop\rk_8D54.tmp.txt
C:\WINDOWS\propresser.bat

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

Nebo na:
http://www.virscan.org/

Stáhni si a nainstaluj WhoCrashed
otevři ho a klikni na Analyze.
Program vytvoří zprávu , zkopíruj celou a vlož prosím sem.

nermitus · Příspěvekod **nermitus** » 13 lis 2015 17:42

Fix result of Farbar Recovery Scan Tool (x64) Version:07-11-2015
Ran by Marek (2015-11-13 17:32:56) Run:1
Running from C:\Users\Marek\Desktop
Loaded Profiles: Marek (Available Profiles: Marek & Administrator)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
HKU\S-1-5-21-2787382413-3702957683-2713730491-1001\...\MountPoints2: {7c73fe2f-84d3-11e5-8267-acb57dd8a8c4} - "F:\setup.exe"
SearchScopes: HKU\S-1-5-21-2787382413-3702957683-2713730491-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
CHR HKU\S-1-5-21-2787382413-3702957683-2713730491-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bmkckgpgekmanipelfidlhmkfcjicion] - hxxps://clients2.google.com/service/update2/crx
C:\WINDOWS\System32\Tasks\{EE3141A2-91B0-4A2B-81DD-6348F48BC310}
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\ProgramData\DP45977C.lfl
C:\ProgramData\SetStretch.cmd
C:\ProgramData\SetStretch.exe
C:\ProgramData\KMSAuto
C:\Users\Marek\AppData\Local\Temp\dllnt_dump.dll
Task: {409B8D6A-AA07-40F4-ACE6-743D80148589} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-12] (Google Inc.)
Task: {A908ACFC-6F33-4E33-9E75-55A9E3D0C8A5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-12] (Google Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

EmptyTemp:
End
*****************

Processes closed successfully.
"HKU\S-1-5-21-2787382413-3702957683-2713730491-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7c73fe2f-84d3-11e5-8267-acb57dd8a8c4}" => key removed successfully
HKCR\CLSID\{7c73fe2f-84d3-11e5-8267-acb57dd8a8c4} => key not found.
"HKU\S-1-5-21-2787382413-3702957683-2713730491-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}" => key removed successfully
HKCR\CLSID\{012E1000-F331-11DB-8314-0800200C9A66} => key not found.
"HKU\S-1-5-21-2787382413-3702957683-2713730491-1001\SOFTWARE\Google\Chrome\Extensions\bmkckgpgekmanipelfidlhmkfcjicion" => key removed successfully
C:\WINDOWS\System32\Tasks\{EE3141A2-91B0-4A2B-81DD-6348F48BC310} => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully
C:\ProgramData\SetStretch.cmd => moved successfully
C:\ProgramData\SetStretch.exe => moved successfully
C:\ProgramData\KMSAuto => moved successfully
C:\Users\Marek\AppData\Local\Temp\dllnt_dump.dll => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{409B8D6A-AA07-40F4-ACE6-743D80148589}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{409B8D6A-AA07-40F4-ACE6-743D80148589}" => key removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A908ACFC-6F33-4E33-9E75-55A9E3D0C8A5}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A908ACFC-6F33-4E33-9E75-55A9E3D0C8A5}" => key removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => key removed successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => not found.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc" => key removed successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc" => key removed successfully
EmptyTemp: => 702.2 MB temporary data Removed.

The system needed a reboot.

==== End of Fixlog 17:33:30 ====

System Information (local)
--------------------------------------------------------------------------------

Computer name: MONSTER
Windows version: Windows 8.1 , 6.3, build: 9600
Windows dir: C:\WINDOWS
Hardware: X555LB, ASUSTeK COMPUTER INC.
CPU: GenuineIntel Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz Intel586, level: 6
4 logical processors, active mask: 15
RAM: 4193083392 bytes total

--------------------------------------------------------------------------------
Crash Dump Analysis
--------------------------------------------------------------------------------

Crash dump directory: C:\WINDOWS\Minidump

Crash dumps are enabled on your computer.

On Tue 10.11.2015 9:27:57 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\111015-45609-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x153CA0)
Bugcheck code: 0x1A (0x41287, 0x0, 0x0, 0x0)
Error: MEMORY_MANAGEMENT
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.

On Tue 10.11.2015 9:27:57 GMT your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0x1A (0x41287, 0x0, 0x0, 0x0)
Error: MEMORY_MANAGEMENT
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.

--------------------------------------------------------------------------------
Conclusion
--------------------------------------------------------------------------------

2 crash dumps have been found and analyzed. No offending third party drivers have been found. Connsider using WhoCrashed Professional which offers more detailed analysis using symbol resolution. Also configuring your system to produce a full memory dump may help you.

Virustotal nenašiel nič

Příspěvekod **jerabina** » 13 lis 2015 18:23

A co problémy?

nermitus · Příspěvekod **nermitus** » 13 lis 2015 18:29

Mám podozrenie že to môže byť harddiskom po tom ako mi pc sekne / lagne pozriem spravcu výkonu a vidim 100% výkon hdd

Příspěvekod **Orcus** » 13 lis 2015 19:42

Stáhni si Memtest:

Do políčka vlož největší velikost Tvé jednotlivé paměti RAM (256,512 nebo 1024,2048) dej Start , nech nejméně 2h běžet , pokud bude po 2h stále 0 errors , jsou v pořádku. Zobrazí-li se hlášení o omezení free verze. Spusť memtest tolikrát, kolikrát bude nutné pro zaplnění celé operační paměti.

====================================================

Je třeba zkontrolovat HDD na chyby , zkusit jeho defragmentaci ..

Stáhni si CrystalDiskInfo
Spusť program a klikni na Úpravy-Kopírovat. Poté sem vlož pomocí Ctrl+V obsah logu.

Nemáš málo volného místa na disku?

====================================================

Stáhni HWMonitor a nainstaluj jej.
- Spusť, případně proveď update pokud bude potřeba, a uveď PC do plného zatížení na alespoň 15 minut, abychom mohli vidět maximální teploty, kterých HW dosahuje.
- Udělej screenshot teplot a ten sem vlož, tak jak je popsáno v návodu k tomuto fóru.

nermitus · Příspěvekod **nermitus** » 17 lis 2015 22:59

Mem test nanašiel žiadnu chybu

----------------------------------------------------------------------------
CrystalDiskInfo 6.5.2 (C) 2008-2015 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 8.1 [6.3 Build 9600] (x64)
Date : 2015/11/17 22:18:44

-- Controller Map ----------------------------------------------------------
+ Intel(R) 9 Series Chipset Family SATA AHCI Controller [ATA]
- HGST HTS541010A9E680
- HL-DT-ST DVDRAM GUC0N
- Microsoft Storage Spaces Controller [SCSI]
- DAEMON Tools Lite Virtual SCSI Bus [SCSI]

-- Disk List ---------------------------------------------------------------
(1) HGST HTS541010A9E680 : 1000,2 GB [0/0/0, pd1]

----------------------------------------------------------------------------
(1) HGST HTS541010A9E680
----------------------------------------------------------------------------
Model : HGST HTS541010A9E680
Firmware : JA0OA560
Serial Number : JD1000CC24UN4J
Disk Size : 1000,2 GB (8,4/137,4/1000,2/1000,2)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 1953525168
Rotation Rate : 5400 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 6
Transfer Mode : SATA/600 | SATA/600
Power On Hours : 469 hours
Power On Count : 231 count
Temperature : 30 C (86 F)
Health Status : Good
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 4001h [ON]
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _62 000000000000 Read Error Rate
02 100 100 _40 000000000000 Throughput Performance
03 241 241 _33 001200000001 Spin-Up Time
04 _99 _99 __0 000000000A98 Start/Stop Count
05 100 100 __5 000000000000 Reallocated Sectors Count
07 100 100 _67 000000000000 Seek Error Rate
08 100 100 _40 000000000000 Seek Time Performance
09 _99 _99 __0 0000000001D5 Power-On Hours
0A 100 100 _60 000000000000 Spin Retry Count
0C 100 100 __0 0000000000E7 Power Cycle Count
BF 100 100 __0 000000000000 G-Sense Error Rate
C0 100 100 __0 000000000006 Power-off Retract Count
C1 _98 _98 __0 000000007299 Load/Unload Cycle Count
C2 200 200 __0 002A0011001E Temperature
C4 100 100 __0 000000000000 Reallocation Event Count
C5 100 100 __0 000000000000 Current Pending Sector Count
C6 100 100 __0 000000000000 Uncorrectable Sector Count
C7 200 200 __0 000000000000 UltraDMA CRC Error Count
DF 100 100 __0 000000000000 Load/Unload Retry Count

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 045A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 4A44 3130 3030 4343 3234 554E 344A
020: 0003 4000 0004 4A41 304F 4135 3630 4847 5354 2048
030: 5453 3534 3130 3130 4139 4536 3830 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 170E 0006 005E 000C
080: 01FC 0028 746B 7D69 6163 7469 BC49 6163 407F 006F
090: 0070 4001 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6DB0 7470 0000 0000 0000 0000 6003 826C 5000 CCA7
110: 92DE 60C7 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 000B
130: 0000 0000 2182 1CF1 FA00 0000 4000 2000 0009 0000
140: 0000 0703 0703 0504 0603 0000 0000 0000 0000 0000
150: 0000 0003 3033 4235 0000 2804 0000 5DBD 2388 8000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1518 0000 0000
220: 0000 0000 101F 0021 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 03E0 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 12A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 0B 00 64 64 00 00 00 00 00 00 00 02 05
010: 00 64 64 00 00 00 00 00 00 00 03 07 00 F1 F1 01
020: 00 00 00 12 00 00 04 12 00 63 63 98 0A 00 00 00
030: 00 00 05 33 00 64 64 00 00 00 00 00 00 00 07 0B
040: 00 64 64 00 00 00 00 00 00 00 08 05 00 64 64 00
050: 00 00 00 00 00 00 09 12 00 63 63 D5 01 00 00 00
060: 00 00 0A 13 00 64 64 00 00 00 00 00 00 00 0C 32
070: 00 64 64 E7 00 00 00 00 00 00 BF 0A 00 64 64 00
080: 00 00 00 00 00 00 C0 32 00 64 64 06 00 00 00 00
090: 00 00 C1 12 00 62 62 99 72 00 00 00 00 00 C2 02
0A0: 00 C8 C8 1E 00 11 00 2A 00 00 C4 32 00 64 64 00
0B0: 00 00 00 00 00 00 C5 22 00 64 64 00 00 00 00 00
0C0: 00 00 C6 08 00 64 64 00 00 00 00 00 00 00 C7 0A
0D0: 00 C8 C8 00 00 00 00 00 00 00 DF 0A 00 64 64 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 2D 00 01 5B
170: 03 00 01 00 02 E0 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 3E 00 00 00 00 00 00 00 00 00 00 02 28
010: 00 00 00 00 00 00 00 00 00 00 03 21 00 00 00 00
020: 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00
030: 00 00 05 05 00 00 00 00 00 00 00 00 00 00 07 43
040: 00 00 00 00 00 00 00 00 00 00 08 28 00 00 00 00
050: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
060: 00 00 0A 3C 00 00 00 00 00 00 00 00 00 00 0C 00
070: 00 00 00 00 00 00 00 00 00 00 BF 00 00 00 00 00
080: 00 00 00 00 00 00 C0 00 00 00 00 00 00 00 00 00
090: 00 00 C1 00 00 00 00 00 00 00 00 00 00 00 C2 00
0A0: 00 00 00 00 00 00 00 00 00 00 C4 00 00 00 00 00
0B0: 00 00 00 00 00 00 C5 00 00 00 00 00 00 00 00 00
0C0: 00 00 C6 00 00 00 00 00 00 00 00 00 00 00 C7 00
0D0: 00 00 00 00 00 00 00 00 00 00 DF 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 89

Příspěvekod **jaro3** » 18 lis 2015 10:10

001200000001 Spin-Up Time
udělej ještě jednou CDI.

Jak dlouho byl spuštěn Memtest?

nermitus · Příspěvekod **nermitus** » 18 lis 2015 12:13

----------------------------------------------------------------------------
CrystalDiskInfo 6.5.2 (C) 2008-2015 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 8.1 [6.3 Build 9600] (x64)
Date : 2015/11/18 12:12:29

-- Controller Map ----------------------------------------------------------
+ Intel(R) 9 Series Chipset Family SATA AHCI Controller [ATA]
- HGST HTS541010A9E680
- HL-DT-ST DVDRAM GUC0N
- Microsoft Storage Spaces Controller [SCSI]
- DAEMON Tools Lite Virtual SCSI Bus [SCSI]

-- Disk List ---------------------------------------------------------------
(1) HGST HTS541010A9E680 : 1000,2 GB [0/0/0, pd1]

----------------------------------------------------------------------------
(1) HGST HTS541010A9E680
----------------------------------------------------------------------------
Model : HGST HTS541010A9E680
Firmware : JA0OA560
Serial Number : JD1000CC24UN4J
Disk Size : 1000,2 GB (8,4/137,4/1000,2/1000,2)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 1953525168
Rotation Rate : 5400 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 6
Transfer Mode : SATA/600 | SATA/600
Power On Hours : 471 hours
Power On Count : 232 count
Temperature : 22 C (71 F)
Health Status : Good
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 4001h [ON]
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _62 000000000000 Read Error Rate
02 100 100 _40 000000000000 Throughput Performance
03 225 225 _33 001200000001 Spin-Up Time
04 _99 _99 __0 000000000A9A Start/Stop Count
05 100 100 __5 000000000000 Reallocated Sectors Count
07 100 100 _67 000000000000 Seek Error Rate
08 100 100 _40 000000000000 Seek Time Performance
09 _99 _99 __0 0000000001D7 Power-On Hours
0A 100 100 _60 000000000000 Spin Retry Count
0C 100 100 __0 0000000000E8 Power Cycle Count
BF 100 100 __0 000000000000 G-Sense Error Rate
C0 100 100 __0 000000000006 Power-off Retract Count
C1 _98 _98 __0 00000000729D Load/Unload Cycle Count
C2 253 253 __0 002A00110016 Temperature
C4 100 100 __0 000000000000 Reallocation Event Count
C5 100 100 __0 000000000000 Current Pending Sector Count
C6 100 100 __0 000000000000 Uncorrectable Sector Count
C7 200 200 __0 000000000000 UltraDMA CRC Error Count
DF 100 100 __0 000000000000 Load/Unload Retry Count

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 045A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 4A44 3130 3030 4343 3234 554E 344A
020: 0003 4000 0004 4A41 304F 4135 3630 4847 5354 2048
030: 5453 3534 3130 3130 4139 4536 3830 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 170E 0006 005E 000C
080: 01FC 0028 746B 7D69 6163 7469 BC49 6163 407F 006F
090: 0070 4001 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6DB0 7470 0000 0000 0000 0000 6003 826C 5000 CCA7
110: 92DE 60C7 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 000B
130: 0000 0000 2182 1CF1 FA00 0000 4000 2000 0009 0000
140: 0000 0703 0703 0504 0603 0000 0000 0000 0000 0000
150: 0000 0003 3033 4235 0000 2804 0000 5DBD 2388 8000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1518 0000 0000
220: 0000 0000 101F 0021 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 03E0 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 12A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 0B 00 64 64 00 00 00 00 00 00 00 02 05
010: 00 64 64 00 00 00 00 00 00 00 03 07 00 E1 E1 01
020: 00 00 00 12 00 00 04 12 00 63 63 9A 0A 00 00 00
030: 00 00 05 33 00 64 64 00 00 00 00 00 00 00 07 0B
040: 00 64 64 00 00 00 00 00 00 00 08 05 00 64 64 00
050: 00 00 00 00 00 00 09 12 00 63 63 D7 01 00 00 00
060: 00 00 0A 13 00 64 64 00 00 00 00 00 00 00 0C 32
070: 00 64 64 E8 00 00 00 00 00 00 BF 0A 00 64 64 00
080: 00 00 00 00 00 00 C0 32 00 64 64 06 00 00 00 00
090: 00 00 C1 12 00 62 62 9D 72 00 00 00 00 00 C2 02
0A0: 00 FD FD 16 00 11 00 2A 00 00 C4 32 00 64 64 00
0B0: 00 00 00 00 00 00 C5 22 00 64 64 00 00 00 00 00
0C0: 00 00 C6 08 00 64 64 00 00 00 00 00 00 00 C7 0A
0D0: 00 C8 C8 00 00 00 00 00 00 00 DF 0A 00 64 64 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 2D 00 01 5B
170: 03 00 01 00 02 E0 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 29

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 3E 00 00 00 00 00 00 00 00 00 00 02 28
010: 00 00 00 00 00 00 00 00 00 00 03 21 00 00 00 00
020: 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00
030: 00 00 05 05 00 00 00 00 00 00 00 00 00 00 07 43
040: 00 00 00 00 00 00 00 00 00 00 08 28 00 00 00 00
050: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
060: 00 00 0A 3C 00 00 00 00 00 00 00 00 00 00 0C 00
070: 00 00 00 00 00 00 00 00 00 00 BF 00 00 00 00 00
080: 00 00 00 00 00 00 C0 00 00 00 00 00 00 00 00 00
090: 00 00 C1 00 00 00 00 00 00 00 00 00 00 00 C2 00
0A0: 00 00 00 00 00 00 00 00 00 00 C4 00 00 00 00 00
0B0: 00 00 00 00 00 00 C5 00 00 00 00 00 00 00 00 00
0C0: 00 00 C6 00 00 00 00 00 00 00 00 00 00 00 C7 00
0D0: 00 00 00 00 00 00 00 00 00 00 DF 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 89

memtest testoval 2hodiny a 5 minút

Příspěvekod **Orcus** » 18 lis 2015 15:26

Chování disku je podezřelé, ale podle smart atributů by to neměl být zdroj problémů. Zkus přeinstalovat ovladače pro MB.

nermitus · Příspěvekod **nermitus** » 18 lis 2015 16:08

Ovládače na grafiku som našiel ale pre motherboard nič našlo mi to driver pre nejaký iný ntb
typ mojeho ntb je ASUS X555LB-XO067H

Prosím o kontrolu logu (sekanie ntb) Vyřešeno

Re: Prosím o kontrolu logu (sekanie ntb)

Re: Prosím o kontrolu logu (sekanie ntb)

Re: Prosím o kontrolu logu (sekanie ntb)

Re: Prosím o kontrolu logu (sekanie ntb)

Re: Prosím o kontrolu logu (sekanie ntb)

Re: Prosím o kontrolu logu (sekanie ntb)

Re: Prosím o kontrolu logu (sekanie ntb)

Re: Prosím o kontrolu logu (sekanie ntb)

Re: Prosím o kontrolu logu (sekanie ntb)

Re: Prosím o kontrolu logu (sekanie ntb)

Re: Prosím o kontrolu logu (sekanie ntb)

Re: Prosím o kontrolu logu (sekanie ntb)

Kdo je online