Prosím o kontrolu logu Vyřešeno

[jaro3]

Co problémy?

[Reklama]

[OTAS]

Ještě mě nejde odstranit z plochy tato ikona ani v nouzovém režimu

Výstřižek.JPG (10.73 KiB) Zobrazeno 546 x

[jaro3]

Prosím stáhni příslušnou verzi programu pro Tvůj systém 32-bit/64-bit FarbarRecovery Scan Tool (FrSt)
32bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/81/
64bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/82/
a ulož jej na plochu. ,pak spusť FrSt.
Potvrď způsob užití.
Neměň žádné z výchozích nastavení a klikni na položku „Scan“ („Skenovat“) .Když je skenování dokončeno, ukážou se dva logy = FRST.txt a Addition.txt a uloží se na ploše.Prosím zkopíruj sem celý jejich obsah.

[OTAS]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:26-11-2015
Ran by DOMA (administrator) on DOMA-PC (27-11-2015 15:32:01)
Running from C:\Users\DOMA\Desktop
Loaded Profiles: DOMA (Available Profiles: DOMA & UpdatusUser)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Vladimír Kraus, Czech Republic) C:\Trefik12\Trefik15_64.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7004376 2015-11-06] (AVAST Software)
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1403304 2015-10-29] (Garmin Ltd. or its subsidiaries)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-11-06] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{46CE7C2C-097E-4C61-B2B8-8D48A20850AB}: [DhcpNameServer] 213.46.172.37 213.46.172.36

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM-x32 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {090D232D-507A-425B-8F4C-C8B773624920} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {0F514B55-F5AC-49ED-BEB7-75B17542A9D4} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {3E6B2A6B-561F-476A-BF76-CCD96D33F394} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {835A5F0F-1322-4F1D-96CF-B5E455A4374E} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {8F020EED-463C-429D-859F-53BD2DC127A2} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {99AF7CD1-CFB1-44B0-9F14-B7D04EED05B9} URL = hxxp://www.mapy.cz/?query={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {D5BD6081-DD28-4A48-8083-DB0EF0EF6F1E} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {F30E5047-6E77-4BC5-A19D-6974F4181489} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_12454
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-11-06] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-11-06] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-06] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-06] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\DOMA\AppData\Roaming\Mozilla\Firefox\Profiles\nvutaozp.default-1431680418805
FF NewTab: about:newtab
FF Homepage: hxxps://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-10] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-10] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-06] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-06] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [No File]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-11-18] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-11-18] (Adobe Systems Inc.)
FF Extension: Google Translator for Firefox - C:\Users\DOMA\AppData\Roaming\Mozilla\Firefox\Profiles\nvutaozp.default-1431680418805\extensions\translator@zoli.bod.xpi [2015-06-30]
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\DOMA\AppData\Roaming\Mozilla\Firefox\Profiles\nvutaozp.default-1431680418805\Extensions\cs@dictionaries.addons.mozilla.org [2015-05-15] [not signed]
FF Extension: Flash and Video Download - C:\Users\DOMA\AppData\Roaming\Mozilla\Firefox\Profiles\nvutaozp.default-1431680418805\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2015-11-27]
FF Extension: Adblock Plus - C:\Users\DOMA\AppData\Roaming\Mozilla\Firefox\Profiles\nvutaozp.default-1431680418805\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-11-26]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: No Name - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-11-20] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: No Name - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2015-11-20] [not signed]

Chrome:
=======
CHR Profile: C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-24]
CHR Extension: (Google Docs) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-29]
CHR Extension: (Google Drive) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-22]
CHR Extension: (YouTube) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-02]
CHR Extension: (Google Search) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-22]
CHR Extension: (Avast SafePrice) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-11-22]
CHR Extension: (Google Sheets) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-24]
CHR Extension: (Google Docs Offline) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-22]
CHR Extension: (Avast Online Security) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-22]
CHR Extension: (Chrome Web Store Payments) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-24]
CHR Extension: (Gmail) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-29]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-11-06]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-06]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [174416 2015-11-06] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109520 2015-11-06] (AVAST Software)
S3 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [777744 2015-10-29] (Garmin Ltd. or its subsidiaries)
S3 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S4 UxTuneUp; C:\Windows\System32\uxtuneup.dll [44856 2015-02-25] (AVG Technologies)
S4 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [36664 2015-02-25] (AVG Technologies)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2014-04-28] (VIA Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-11-06] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-11-06] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-11-06] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [466400 2015-11-06] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-11-06] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-11-06] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1059656 2015-11-06] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449992 2015-11-06] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [154256 2015-11-06] (AVAST Software)
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [44640 2015-04-14] (The OpenVPN Project)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-11-06] (AVAST Software)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-10-06] (DT Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99800 2014-04-28] (Intel Corporation)
R3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-05-29 15:30 - 2016-05-29 15:30 - 00335112 _____ (AVAST Software s. r. o.) C:\Windows\AswCheck.exe
2015-11-27 15:32 - 2015-11-27 15:32 - 00014817 _____ C:\Users\DOMA\Desktop\FRST.txt
2015-11-27 15:31 - 2015-11-27 15:32 - 00000000 ____D C:\FRST
2015-11-27 15:30 - 2015-11-27 15:30 - 02348544 _____ (Farbar) C:\Users\DOMA\Desktop\FRST64.exe
2015-11-26 12:52 - 2015-11-27 15:21 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-11-26 12:52 - 2015-11-26 12:52 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-11-26 11:48 - 2015-11-26 11:48 - 00000912 _____ C:\Users\DOMA\Desktop\Trefik15_64 – zástupce.lnk
2015-11-26 11:32 - 2015-11-13 21:04 - 00038739 _____ C:\Users\DOMA\Desktop\vase_objedvka –.pdf
2015-11-26 11:07 - 2015-11-26 11:07 - 00138200 _____ C:\Users\DOMA\AppData\Local\GDIPFONTCACHEV1.DAT
2015-11-24 19:09 - 2015-11-24 19:09 - 00388608 _____ (Trend Micro Inc.) C:\Users\DOMA\Desktop\HijackThis.exe
2015-11-24 19:06 - 2015-11-24 19:06 - 00000972 _____ C:\DelFix.txt
2015-11-24 19:03 - 2015-11-26 13:03 - 00002052 _____ C:\Users\DOMA\Documents\cc_20151124_190339.reg
2015-11-24 19:01 - 2015-11-26 13:00 - 00002788 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-11-24 19:01 - 2015-11-24 19:01 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-11-24 19:01 - 2015-11-24 19:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-11-24 19:01 - 2015-11-24 19:01 - 00000000 ____D C:\Program Files\CCleaner
2015-11-24 15:50 - 2015-11-24 15:50 - 00000512 _____ C:\Users\DOMA\Documents\MBR.dat
2015-11-24 12:57 - 2015-11-26 12:52 - 00000000 ____D C:\Users\DOMA\AppData\Local\Adobe
2015-11-24 12:57 - 2015-11-24 12:57 - 00000000 ____D C:\Users\DOMA\AppData\Local\CEF
2015-11-22 17:56 - 2014-02-13 23:59 - 00024064 _____ C:\Windows\zoek-delete.exe
2015-11-22 12:59 - 2015-11-22 12:59 - 00479880 _____ C:\Windows\system32\FNTCACHE.DAT
2015-11-21 22:24 - 2015-11-21 22:24 - 06399528 _____ C:\Users\DOMA\Downloads\save2pc-Ultimate-5.44.1530.rar
2015-11-21 21:09 - 2015-11-21 22:03 - 975023191 _____ C:\Users\DOMA\Downloads\Laura-Branigan-Discography-(1982-2004).zip
2015-11-21 20:52 - 2015-11-21 20:53 - 00000000 ____D C:\Users\DOMA\Downloads\KATE RYAN - DISCOGRAPHY [CHANNEL NEO]
2015-11-20 17:41 - 2015-11-20 17:41 - 00942080 ____N C:\Users\DOMA\Desktop\Odesílání e-mailem - Ruecksendeschein_CZ.pdf.msg
2015-11-18 19:39 - 2015-11-20 20:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultra Video Joiner
2015-11-18 19:39 - 2015-11-20 20:14 - 00000000 ____D C:\Program Files (x86)\Ultra Video Joiner
2015-11-16 19:41 - 2015-11-16 19:42 - 00000000 ____D C:\Users\DOMA\Downloads\The Beloved_[tfile.ru]
2015-11-16 19:28 - 2015-11-16 19:35 - 00000000 ____D C:\Users\DOMA\Downloads\ICE MC[tfile.ru]
2015-11-16 19:13 - 2015-11-20 20:14 - 00000000 ____D C:\Users\DOMA\Downloads\Mabel - Discography (1999-2002)
2015-11-16 16:22 - 2015-11-18 18:11 - 00000000 ____D C:\Users\DOMA\Downloads\Running Wild
2015-11-16 15:37 - 2015-11-16 15:40 - 00000000 ____D C:\Users\DOMA\Downloads\Falco
2015-11-16 15:18 - 2015-11-21 20:05 - 00000000 ____D C:\Users\DOMA\Downloads\Lian Ross
2015-11-15 18:43 - 2015-11-15 18:56 - 00000000 ____D C:\Users\DOMA\Downloads\Falconer - Falconer (Ultimate Edition)
2015-11-15 18:33 - 2015-11-15 18:33 - 00000000 ____D C:\Users\DOMA\Downloads\Falconer - Black Moon Rising (2014)
2015-11-15 18:31 - 2015-11-15 18:35 - 00000000 ____D C:\Users\DOMA\Downloads\Falconer
2015-11-12 21:19 - 2015-11-12 21:19 - 00000000 ____D C:\Users\DOMA\Downloads\GloryHammer
2015-11-12 21:13 - 2015-11-12 21:13 - 00000000 ____D C:\Users\DOMA\Downloads\Brainstоrm - Firesоul (Limited Edition) (2014)
2015-11-12 21:12 - 2015-11-12 21:18 - 00000000 ____D C:\Users\DOMA\Downloads\Brainstorm
2015-11-12 20:49 - 2015-11-12 20:49 - 00000000 ____D C:\Users\DOMA\Downloads\Grave Digger 2014 - Return Of The Reaper (Limited Edition 2CD)
2015-11-12 20:47 - 2015-11-12 21:02 - 00000000 ____D C:\Users\DOMA\Downloads\Grave Digger
2015-11-06 16:34 - 2015-11-06 16:34 - 00003030 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1446824078
2015-11-06 16:34 - 2015-11-06 16:34 - 00001037 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2015-11-06 16:34 - 2015-11-06 16:34 - 00001037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2015-11-06 16:30 - 2015-11-06 16:30 - 00466400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2015-11-06 16:30 - 2015-11-06 16:30 - 00386096 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-11-06 16:30 - 2015-11-06 16:30 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-05-29 15:29 - 2015-04-29 16:59 - 00137288 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\asw3BDE.tmp
2015-11-27 15:31 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2015-11-27 15:22 - 2009-07-14 05:45 - 00031008 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-27 15:22 - 2009-07-14 05:45 - 00031008 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-27 15:08 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-26 13:04 - 2013-07-17 18:57 - 00000000 ____D C:\Users\DOMA\Desktop\Programy
2015-11-26 13:00 - 2015-08-22 19:09 - 00003556 _____ C:\Windows\System32\Tasks\GarminUpdaterTask
2015-11-26 13:00 - 2015-08-18 12:09 - 00003760 _____ C:\Windows\System32\Tasks\AutoKMS
2015-11-26 12:53 - 2015-03-21 18:16 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-11-26 11:49 - 2013-08-05 10:50 - 00000000 ____D C:\Trefik12
2015-11-24 19:02 - 2014-01-06 16:43 - 00000000 ____D C:\ProgramData\VSO
2015-11-24 19:02 - 2013-07-24 10:34 - 00000000 ____D C:\Users\DOMA\AppData\Roaming\uTorrent
2015-11-24 19:01 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2015-11-24 18:59 - 2014-09-30 17:32 - 00000000 ____D C:\Windows\erdnt
2015-11-24 13:24 - 2009-07-14 03:34 - 00000215 ____N C:\Windows\system.ini
2015-11-22 20:18 - 2013-07-17 19:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2015-11-22 17:18 - 2014-09-29 17:15 - 00037624 _____ C:\Windows\system32\Drivers\TrueSight.sys
2015-11-21 21:31 - 2013-07-19 20:52 - 00000000 ____D C:\Users\DOMA\AppData\Roaming\vlc
2015-11-21 17:41 - 2015-04-29 20:05 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-11-21 17:15 - 2015-05-01 21:44 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-11-20 23:35 - 2013-07-17 18:56 - 00000000 ____D C:\Táta
2015-11-20 20:15 - 2013-07-16 10:03 - 00000000 ____D C:\Users\DOMA
2015-11-20 20:15 - 2009-07-14 06:08 - 00032582 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-11-20 20:14 - 2015-05-13 21:16 - 00000000 ____D C:\ProgramData\RogueKiller
2015-11-20 20:14 - 2015-05-13 20:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-11-20 20:14 - 2015-05-13 20:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-11-20 20:14 - 2015-04-14 07:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-11-20 20:14 - 2015-04-01 09:30 - 00000000 ___SD C:\Windows\system32\GWX
2015-11-20 20:14 - 2013-07-16 10:27 - 00000000 ____D C:\Users\UpdatusUser
2015-11-20 20:14 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2015-11-20 20:14 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
2015-11-20 17:41 - 2015-01-31 18:00 - 00000000 ____D C:\Users\DOMA\Documents\Soubory aplikace Outlook
2015-11-18 20:53 - 2015-04-18 19:27 - 00000000 ____D C:\OutputFolder
2015-11-18 18:30 - 2009-07-14 16:18 - 00668866 _____ C:\Windows\system32\perfh005.dat
2015-11-18 18:30 - 2009-07-14 16:18 - 00141526 _____ C:\Windows\system32\perfc005.dat
2015-11-18 18:30 - 2009-07-14 06:13 - 01584554 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-13 18:36 - 2013-09-22 11:12 - 00000000 ____D C:\Users\DOMA\Desktop\Míša
2015-11-12 17:00 - 2013-07-21 15:33 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-11-10 20:37 - 2015-07-11 15:39 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-11-10 20:37 - 2013-07-17 18:06 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-11-10 20:37 - 2013-07-17 18:06 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-06 16:54 - 2015-09-17 11:19 - 00000000 ____D C:\Users\DOMA\.oracle_jre_usage
2015-11-06 16:53 - 2014-10-18 18:49 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-11-06 16:53 - 2014-10-18 18:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-11-06 16:53 - 2014-10-18 18:49 - 00000000 ____D C:\Program Files (x86)\Java
2015-11-06 16:30 - 2015-04-14 07:56 - 01059656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-11-06 16:30 - 2015-04-14 07:56 - 00449992 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-11-06 16:30 - 2015-04-14 07:56 - 00273784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-11-06 16:30 - 2015-04-14 07:56 - 00154256 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-11-06 16:30 - 2015-04-14 07:56 - 00097648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-11-06 16:30 - 2015-04-14 07:56 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-11-06 16:30 - 2015-04-14 07:56 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-11-06 16:30 - 2015-04-14 07:56 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-11-06 16:30 - 2015-04-14 07:56 - 00028144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2015-11-06 16:30 - 2015-04-14 07:55 - 00000000 ____D C:\Program Files\AVAST Software
2015-11-06 16:30 - 2015-04-13 17:28 - 00000000 ____D C:\ProgramData\AVAST Software
2015-11-05 16:49 - 2013-07-19 20:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2015-11-05 16:49 - 2013-07-19 20:00 - 00000000 ____D C:\Program Files (x86)\Garmin
2015-11-05 16:40 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2015-11-03 21:10 - 2014-11-17 20:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-10-31 19:08 - 2015-05-18 21:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle Studio 18

==================== Files in the root of some directories =======

2014-01-06 16:43 - 2015-09-06 19:59 - 0007859 _____ () C:\Users\DOMA\AppData\Roaming\pcouffin.cat
2014-01-06 16:43 - 2015-09-06 19:59 - 0001167 _____ () C:\Users\DOMA\AppData\Roaming\pcouffin.inf
2014-01-06 16:43 - 2015-09-06 19:59 - 0082816 _____ (VSO Software) C:\Users\DOMA\AppData\Roaming\pcouffin.sys
2014-04-04 11:15 - 2015-05-19 10:51 - 0022528 _____ () C:\Users\DOMA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-03-05 17:10 - 2015-10-24 17:12 - 0011579 _____ () C:\Users\DOMA\AppData\Local\MRDownloader.err
2014-03-05 16:05 - 2015-10-24 17:20 - 0001128 _____ () C:\Users\DOMA\AppData\Local\MRDownloader.nast
2015-03-23 21:25 - 2015-03-23 21:25 - 0000017 _____ () C:\Users\DOMA\AppData\Local\resmon.resmoncfg
2013-07-31 19:19 - 2014-03-05 17:12 - 0006603 _____ () C:\Users\DOMA\AppData\Local\SRDownloader.err
2013-07-29 19:27 - 2014-03-05 17:13 - 0001120 _____ () C:\Users\DOMA\AppData\Local\SRDownloader.nast
2015-05-10 18:45 - 2015-05-10 19:32 - 0000193 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll
[2013-07-17 19:55] - [2010-11-20 14:27] - 1008640 ____A (Microsoft Corporation) E573BD9AB55C8E333C202B9E255F972E

C:\Windows\SysWOW64\User32.dll
[2014-10-04 20:00] - [2014-10-04 20:00] - 0833024 ____A (Microsoft Corporation) 2C9CC9F492CA596B1B9FC1AE5E916356

C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-11-22 16:03

==================== End of FRST.txt ============================

[OTAS]

Additional scan result of Farbar Recovery Scan Tool (x64) Version:26-11-2015
Ran by DOMA (2015-11-27 15:32:33)
Running from C:\Users\DOMA\Desktop
Windows 7 Professional Service Pack 1 (X64) (2013-07-16 09:02:43)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1482381698-2929903929-1953463437-500 - Administrator - Disabled)
DOMA (S-1-5-21-1482381698-2929903929-1953463437-1000 - Administrator - Enabled) => C:\Users\DOMA
Guest (S-1-5-21-1482381698-2929903929-1953463437-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1482381698-2929903929-1953463437-1003 - Limited - Enabled)
UpdatusUser (S-1-5-21-1482381698-2929903929-1953463437-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\...\uTorrent) (Version: 3.4.2.31536 - BitTorrent Inc.)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.245 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated)
Aktualizace NVIDIA 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Ashampoo Burning Studio 2015 (HKLM-x32\...\{91B33C97-21E3-DF34-9630-2EE80DDE1648}_is1) (Version: 1.15.3 - Ashampoo GmbH & Co. KG)
Ashampoo Slideshow Studio HD 3 v.3.0.1 (HKLM-x32\...\{91B33C97-16DF-4A79-3990-449F9E068D76}_is1) (Version: 3.0.1 - Ashampoo GmbH & Co. KG)
ASUS Product Register Program (HKLM-x32\...\{49BE9B8A-E858-4533-A74A-64306C13DB59}) (Version: 1.0.014 - ASUS)
Avast Premier (HKLM-x32\...\Avast) (Version: 11.1.2241 - AVAST Software)
AVG PC TuneUp 2015 (x32 Version: 15.0.1001.403 - AVG Technologies) Hidden
Balíček ovladače systému Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Balíček ovladače systému Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - )
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.5.0.0 - Canon Inc.)
Canon MG5100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5100_series) (Version: - )
Canon MP Navigator EX 4.0 (HKLM-x32\...\MP Navigator EX 4.0) (Version: - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - )
Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 5.12 - Piriform)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
Defraggler (HKLM\...\Defraggler) (Version: 2.19 - Piriform)
DVDFab 9.2.0.9 (13/08/2015) (HKLM-x32\...\DVDFab 9_is1) (Version: - Fengtao Software Inc.)
Elevated Installer (x32 Version: 4.1.10.0 - Garmin Ltd or its subsidiaries) Hidden
FormatFactory 3.6.0.0 (HKLM-x32\...\FormatFactory) (Version: 3.6.0.0 - Format Factory)
Fotolab Fotosvet (HKLM-x32\...\Fotolab Fotosvet) (Version: 5.1.7 - CEWE Stiftung u Co. KGaA)
Garmin BaseCamp (HKLM-x32\...\{B0BED0BB-E1C4-49AA-840F-7CA052ADF5EB}) (Version: 4.3.4 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{b292f4e5-60ca-4bb8-8810-e5f908c3c1ff}) (Version: 4.1.10.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 4.1.10.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 4.1.10.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin MapSource (HKLM-x32\...\{AFBAB9A0-DDE8-49AE-8C17-A01B61BEE64B}) (Version: 6.16.3 - Garmin Ltd or its subsidiaries)
Garmin POI Loader (HKLM-x32\...\{3213ED5E-7BBE-4613-BE69-8B1E4FE520DD}) (Version: 2.7.3 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.86 - Google Inc.)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Inpaint 6.0 (HKLM\...\{2AEDC172-479F-47AE-8A48-A0524D4AED5B}_is1) (Version: - Teorex)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.17 - Oracle Corporation)
Kurzové sázky TIPSPORT - demo verze 1.01 (HKLM-x32\...\Kurzové sázky TIPSPORT - demo verze 1.01) (Version: - )
Malwarebytes Anti-Malware verze 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
MetaEditor (HKLM-x32\...\{97CC7905-57CD-4A75-9656-BD13797F4C3B}) (Version: 1.0.0 - kiwi.software.NET)
Microsoft .NET Framework 4.5.2 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 42.0 (x86 cs) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 cs)) (Version: 42.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NVIDIA Ovladače grafiky 309.08 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 309.08 - NVIDIA Corporation)
Ovládací panel NVIDIA 309.08 (Version: 309.08 - NVIDIA Corporation) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Pinnacle Studio 18 - Install Manager (HKLM\...\{39B53CC2-EE72-44E6-800D-C61A6465BF1A}) (Version: 18.0.234 - Corel Corporation)
Pinnacle Studio 18 (HKLM\...\{11FB47FB-B341-4FD8-A505-E4C0CC0536C1}) (Version: 18.5.1.827 - Corel Corporation)
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.61.612.2012 - Realtek)
Registrace uživatele zařízení Canon MG5100 series (HKLM-x32\...\Registrace uživatele zařízení Canon MG5100 series) (Version: - )
Revo Uninstaller Pro 3.1.4 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.4 - VS Revo Group, Ltd.)
SafeZone Stable 1.46.1990.55 (x32 Version: 1.46.1990.55 - Avast Software) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden
SES Driver (HKLM\...\{D8CC254C-C671-4664-9A38-FA368D1E2C97}) (Version: 1.0.0 - Western Digital)
Seznam Software (HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\...\SeznamInstall) (Version: - Seznam.cz)
Ultra Video Joiner 6.2.0411 (HKLM-x32\...\Ultra Video Joiner_is1) (Version: - Aone Software)
VIA Platforma Ovladače zařízení (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VSO ConvertXToDVD (HKLM-x32\...\{CE1F93C0-4353-4C9D-84DA-AB4E7C63ED32}_is1) (Version: 5.3.0.22 - VSO Software)
WD SES Driver Setup (x32 Version: 1.0.0 - Western Digital) Hidden
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Driver Package - Western Digital Technologies (WDC_SAM) WDC_SAM (01/19/2011 1.0.0009.0) (HKLM\...\4CA7CFBB29889F25ACB3DF6E3A42BAE29EB43B20) (Version: 01/19/2011 1.0.0009.0 - Western Digital Technologies)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Zoner Photo Studio 17 (HKLM\...\ZonerPhotoStudio17_CZ_is1) (Version: 17.0.1.12 - ZONER software)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

24-11-2015 19:06:45 End of disinfection
26-11-2015 12:49:17 Revo Uninstaller Pro's restore point - Adobe Acrobat Reader DC - Czech

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2015-11-24 13:24 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {04E53CCE-9EF4-4919-A6F9-82DB96E1C176} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2015-10-29] ()
Task: {1A4F236D-BC81-4700-A873-12A4D88FC8D6} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2015-08-18] ()
Task: {41040A00-EC72-48B0-A9FE-4D65D5B2EC2C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-11-16] (Piriform Ltd)
Task: {4688CE69-AF38-4DF2-8BAF-BADEC2D6A2BD} - \avastBCLRestart_firefox.exe -> No File <==== ATTENTION
Task: {53910CA5-5B50-40D0-9762-A920F6888B6D} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-10-06] (Oracle Corporation)
Task: {5F2786B8-240F-49EE-AA3C-E01D3DF0B303} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-11-06] (AVAST Software)
Task: {774CA559-E36B-445C-B441-EFDD1901D5A4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-10] (Adobe Systems Incorporated)
Task: {7C802F8C-1EAE-4355-827D-B60F819B47D5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {90E59EDC-F49E-4763-B767-79B258162665} - System32\Tasks\SafeZone scheduled Autoupdate 1446824078 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2015-10-30] (Avast Software)
Task: {F055303C-636F-464A-A4A2-A16310B8E2BE} - System32\Tasks\Program k provádění aktualizací online Adobe => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-11-06 16:30 - 2015-11-06 16:30 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-11-06 16:30 - 2015-11-06 16:30 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-11-26 10:54 - 2015-11-26 10:54 - 02995712 _____ () C:\Program Files\AVAST Software\Avast\defs\15112600\algo.dll
2015-11-06 16:30 - 2015-11-06 16:30 - 00466448 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2015-11-27 15:11 - 2015-11-27 15:11 - 02812416 _____ () C:\Program Files\AVAST Software\Avast\defs\15112700\algo.dll
2015-11-06 16:30 - 2015-11-06 16:30 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\DOMA\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 213.46.172.37 - 213.46.172.36
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: CanonMyPrinter => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
MSCONFIG\startupreg: CanonSolutionMenuEx => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: HDAudDeck => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
MSCONFIG\startupreg: MouseDriver => TiltWheelMouse.exe
MSCONFIG\startupreg: Zoner Photo Studio Autoupdate => "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{A3441171-AD58-455E-98E9-A5D17D3D5EBF}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{89F9ACEA-4101-47E7-B31A-7DE652DC6B35}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{51B08B60-6B93-454D-8FB7-31787CCE62DF}] => (Allow) C:\Users\DOMA\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{9835582B-0069-4397-9203-698CA3AC828A}] => (Allow) C:\Users\DOMA\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{1DD522BD-3A7B-437C-8AD2-28E0C09CD1D8}] => (Allow) C:\Program Files\Zoner\Photo Studio 17\Program32\MediaServer.exe
FirewallRules: [{A009BE1E-8AA5-4BC4-BB37-8F71BEAFE8CF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8D7BFBDB-4727-49FA-920F-1D7328BBF5B8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8067CC08-07EB-4D88-AF63-3EF7514C31BC}] => (Allow) C:\Users\DOMA\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{1C219860-76B2-47B0-9856-7DDAC59B94A0}] => (Allow) C:\Users\DOMA\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F663C1E5-4336-447F-BB24-FED60F1F2C01}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{2E0C9CC5-FD7C-446E-963A-5BFF63810999}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{A5409B32-77AE-4E08-B50C-7DFF22804280}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{86E3A5C5-45FE-46A3-9BCB-DC56913D4197}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [{1D500F2A-F6CB-475D-B43A-FDA408B0FBB3}] => (Allow) C:\Program Files\Pinnacle\Studio 18\programs\RM.exe
FirewallRules: [{A8D6ED97-F8C9-40F9-8416-125F8A0E7E9B}] => (Allow) C:\Program Files\Pinnacle\Studio 18\programs\RM.exe
FirewallRules: [{DBE6D203-9210-4D2C-A56F-C73254A32EFA}] => (Allow) C:\Program Files\Pinnacle\Studio 18\programs\NGStudio.exe
FirewallRules: [{04AEAB19-9E38-4DA3-AAC9-80666BA5DF9A}] => (Allow) C:\Program Files\Pinnacle\Studio 18\programs\NGStudio.exe
FirewallRules: [{94E08935-982A-4C03-8344-5F36888714E3}] => (Allow) C:\Program Files\Pinnacle\Studio 18\programs\UMI.exe
FirewallRules: [{2F95BAA4-65D4-4106-9A71-FBE8708FBC49}] => (Allow) C:\Program Files\Pinnacle\Studio 18\programs\UMI.exe
FirewallRules: [{5226E894-B52A-4AED-B05D-D9797C5CFE15}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1AEC352F-EF1D-4989-86C3-B503BD9259B9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{64417088-9BC7-4235-82A1-3E4957C244A0}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Adaptér tunelového režimu Microsoft Teredo
Description: Adaptér tunelového režimu Microsoft Teredo
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/27/2015 03:21:13 PM) (Source: MsiInstaller) (EventID: 1024) (User: DOMA-PC)
Description: Aktualizaci {AC76BA86-7AD7-0000-2550-AC0F094E6F00} produktu Adobe Acrobat Reader DC - Czech nebylo možné nainstalovat. Kód chyby: 1625. Instalační služba systému Windows může vytvořit soubor protokolu s informacemi, které usnadní řešení potíží při instalaci softwaru. Další informace naleznete na webu na adrese http://go.microsoft.com/fwlink/?LinkId=23127

Error: (11/27/2015 03:11:13 PM) (Source: Adobe Reader) (EventID: 16) (User: )
Description:

Error: (11/27/2015 03:11:00 PM) (Source: Adobe Reader) (EventID: 16) (User: )
Description:

Error: (11/26/2015 00:58:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: AutoKMS.exe, verze: 2.6.0.0, časové razítko: 0x55bfbc92
Název chybujícího modulu: KERNELBASE.dll, verze: 6.1.7601.18939, časové razítko: 0x55b02e7b
Kód výjimky: 0xe0434352
Posun chyby: 0x000000000000b16d
ID chybujícího procesu: 0x624
Čas spuštění chybující aplikace: 0xAutoKMS.exe0
Cesta k chybující aplikaci: AutoKMS.exe1
Cesta k chybujícímu modulu: AutoKMS.exe2
ID zprávy: AutoKMS.exe3

Error: (11/26/2015 00:58:51 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: AutoKMS.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.UnauthorizedAccessException
Zásobník:
na System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32, IntPtr)
na System.Management.ManagementObjectCollection+ManagementObjectEnumerator.MoveNext()
na ..
(System.String, System.String, ., System.String)
na ...ctor()
na ..
(.
)
na .
.
()

Error: (11/26/2015 00:49:17 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Chyba služby Stínová kopie svazků: Při dotazu na rozhraní IVssWriterCallback došlo k neočekávané chybě. hr = 0x80070005, Přístup byl odepřen.
.
To je často způsobeno nesprávným nastavením zabezpečení v modulu pro zápis nebo žadateli.


Operace:
Shromažďování dat modulu pro zápis

Kontext:
ID třídy modulu pro zápis: {e8132975-6f93-4464-a53e-1050253ae220}
Název modulu pro zápis: System Writer
ID instance modulu pro zápis: {83860b95-ff61-4162-8893-30ac40a79ae8}

Error: (11/26/2015 11:35:55 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: AutoKMS.exe, verze: 2.6.0.0, časové razítko: 0x55bfbc92
Název chybujícího modulu: KERNELBASE.dll, verze: 6.1.7601.18939, časové razítko: 0x55b02e7b
Kód výjimky: 0xe0434352
Posun chyby: 0x000000000000b16d
ID chybujícího procesu: 0x658
Čas spuštění chybující aplikace: 0xAutoKMS.exe0
Cesta k chybující aplikaci: AutoKMS.exe1
Cesta k chybujícímu modulu: AutoKMS.exe2
ID zprávy: AutoKMS.exe3

Error: (11/26/2015 11:35:52 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: AutoKMS.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.UnauthorizedAccessException
Zásobník:
na System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32, IntPtr)
na System.Management.ManagementObjectCollection+ManagementObjectEnumerator.MoveNext()
na ..
(System.String, System.String, ., System.String)
na ...ctor()
na ..
(.
)
na .
.
()

Error: (11/26/2015 10:53:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: AutoKMS.exe, verze: 2.6.0.0, časové razítko: 0x55bfbc92
Název chybujícího modulu: KERNELBASE.dll, verze: 6.1.7601.18939, časové razítko: 0x55b02e7b
Kód výjimky: 0xe0434352
Posun chyby: 0x000000000000b16d
ID chybujícího procesu: 0x63c
Čas spuštění chybující aplikace: 0xAutoKMS.exe0
Cesta k chybující aplikaci: AutoKMS.exe1
Cesta k chybujícímu modulu: AutoKMS.exe2
ID zprávy: AutoKMS.exe3

Error: (11/26/2015 10:53:24 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: AutoKMS.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.UnauthorizedAccessException
Zásobník:
na System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32, IntPtr)
na System.Management.ManagementObjectCollection+ManagementObjectEnumerator.MoveNext()
na ..
(System.String, System.String, ., System.String)
na ...ctor()
na ..
(.
)
na .
.
()


System errors:
=============
Error: (11/27/2015 03:09:37 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Seskupování v sítích peer-to-peer závisí na službě Protokol PNRP (Peer Name Resolution Protocol), která neuspěla při spuštění v důsledku následující chyby:
%%-2140993535

Error: (11/27/2015 03:09:37 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Protokol PNRP (Peer Name Resolution Protocol) byla ukončena s následující chybou:
%%-2140993535

Error: (11/27/2015 03:09:37 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Seskupování v sítích peer-to-peer závisí na službě Protokol PNRP (Peer Name Resolution Protocol), která neuspěla při spuštění v důsledku následující chyby:
%%-2140993535

Error: (11/27/2015 03:09:37 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Protokol PNRP (Peer Name Resolution Protocol) byla ukončena s následující chybou:
%%-2140993535

Error: (11/27/2015 03:09:37 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801

Error: (11/27/2015 03:09:37 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801

Error: (11/27/2015 03:09:26 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Seskupování v sítích peer-to-peer závisí na službě Protokol PNRP (Peer Name Resolution Protocol), která neuspěla při spuštění v důsledku následující chyby:
%%-2140993535

Error: (11/27/2015 03:09:26 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Protokol PNRP (Peer Name Resolution Protocol) byla ukončena s následující chybou:
%%-2140993535

Error: (11/27/2015 03:09:26 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801

Error: (11/27/2015 03:08:14 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Seskupování v sítích peer-to-peer závisí na službě Protokol PNRP (Peer Name Resolution Protocol), která neuspěla při spuštění v důsledku následující chyby:
%%-2140993535


CodeIntegrity:
===================================
Date: 2015-11-27 15:31:00.850
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-11-27 15:21:23.384
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-11-27 15:08:05.638
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-11-26 13:20:38.943
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-11-26 12:57:27.982
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-11-26 12:45:44.474
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-11-26 11:34:51.954
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-11-26 11:28:05.055
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-11-26 11:21:20.855
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-11-26 10:52:09.029
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\user32.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3-3220 CPU @ 3.30GHz
Percentage of memory in use: 41%
Total physical RAM: 4047.84 MB
Available physical RAM: 2353.04 MB
Total Virtual: 8093.89 MB
Available Virtual: 6321.91 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.45 GB) (Free:286.55 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or (Size: 465.8 GB) (Disk ID: 4965A0C3)
Partition 1: (Active) - (Size=314 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

[jerabina]

Odinstaluj AVG PC TuneUp 2015

Podívej se co je v těchto složkách:
C:\Users\DOMA\Downloads\ICE MC[tfile.ru]
C:\Users\DOMA\Downloads\The Beloved_[tfile.ru]

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému.

Toto otestuj na Virustotal
C:\Trefik12\Trefik15_64.exe
C:\Windows\system32\User32.dll
C:\Windows\SysWOW64\User32.dll

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

Prosím, postupuj následujícím způsobem:
Otevřít poznámkový blok (Start => Všechny programy => Příslušenství => Poznámkový blok).
Prosím, zkopíruj do něj celý obsah níže.

Kód: Vybrat vše

Start
CloseProcesses:

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
SearchScopes: HKLM-x32 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {090D232D-507A-425B-8F4C-C8B773624920} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {0F514B55-F5AC-49ED-BEB7-75B17542A9D4} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {3E6B2A6B-561F-476A-BF76-CCD96D33F394} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {835A5F0F-1322-4F1D-96CF-B5E455A4374E} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {8F020EED-463C-429D-859F-53BD2DC127A2} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {99AF7CD1-CFB1-44B0-9F14-B7D04EED05B9} URL = hxxp://www.mapy.cz/?query={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {D5BD6081-DD28-4A48-8083-DB0EF0EF6F1E} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {F30E5047-6E77-4BC5-A19D-6974F4181489} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_12454

FF NewTab: about:newtab
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [No File]

S4 UxTuneUp; C:\Windows\System32\uxtuneup.dll [44856 2015-02-25] (AVG Technologies)
S4 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [36664 2015-02-25] (AVG Technologies)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]

C:\ComboFix\catchme.sys
C:\Windows\TEMP\cpuz136\cpuz136_x64.sys

C:\Windows\System32\uxtuneup.dll
C:\Windows\SysWOW64\uxtuneup.dll

C:\ProgramData\RogueKiller
C:\Users\DOMA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Task: {1A4F236D-BC81-4700-A873-12A4D88FC8D6} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2015-08-18] ()
Task: {4688CE69-AF38-4DF2-8BAF-BADEC2D6A2BD} - \avastBCLRestart_firefox.exe -> No File <==== ATTENTION
Task: {53910CA5-5B50-40D0-9762-A920F6888B6D} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-10-06] (Oracle Corporation)
Task: {774CA559-E36B-445C-B441-EFDD1901D5A4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-10] (Adobe Systems Incorporated)
Task: {7C802F8C-1EAE-4355-827D-B60F819B47D5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {F055303C-636F-464A-A4A2-A16310B8E2BE} - System32\Tasks\Program k provádění aktualizací online Adobe => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)

C:\Windows\AutoKMS\AutoKMS.exe

EmptyTemp:
End

(Můžeš použít funkci „vybrat vše“, klepni pravým tlačítkem myši na levé horní políčko v otevřeném poznámkovém bloku a zvol „ Vložit“).

Ulož jej na na plochu jako fixlist.txt

Spusťt FRST a stiskni tlačítko „Fix“ (Opravit) jen jednou a čekej.
Nástroj vypracuje log na ploše (Fixlog.txt), prosím zkopíruj sem celý jeho obsah.

[OTAS]

složkách jsou mp3 písně C:\Users\DOMA\Downloads\ICE MC[tfile.ru]
C:\Users\DOMA\Downloads\The Beloved_[tfile.ru]
tato složka je k programu na sázení tipsportu C:\Trefik12\Trefik15_64.exe

https://www.virustotal.com/cs/file/2673 ... /analysis/
https://www.virustotal.com/cs/file/2673 ... /analysis/

[OTAS]

Fix result of Farbar Recovery Scan Tool (x64) Version:28-11-2015
Ran by DOMA (2015-11-28 17:37:23) Run:1
Running from C:\Users\DOMA\Desktop
Loaded Profiles: DOMA (Available Profiles: DOMA & UpdatusUser)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
SearchScopes: HKLM-x32 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {090D232D-507A-425B-8F4C-C8B773624920} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {0F514B55-F5AC-49ED-BEB7-75B17542A9D4} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {3E6B2A6B-561F-476A-BF76-CCD96D33F394} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {835A5F0F-1322-4F1D-96CF-B5E455A4374E} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {8F020EED-463C-429D-859F-53BD2DC127A2} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {99AF7CD1-CFB1-44B0-9F14-B7D04EED05B9} URL = hxxp://www.mapy.cz/?query={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {D5BD6081-DD28-4A48-8083-DB0EF0EF6F1E} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-1482381698-2929903929-1953463437-1000 -> {F30E5047-6E77-4BC5-A19D-6974F4181489} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_12454

FF NewTab: about:newtab
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [No File]

S4 UxTuneUp; C:\Windows\System32\uxtuneup.dll [44856 2015-02-25] (AVG Technologies)
S4 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [36664 2015-02-25] (AVG Technologies)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]

C:\ComboFix\catchme.sys
C:\Windows\TEMP\cpuz136\cpuz136_x64.sys

C:\Windows\System32\uxtuneup.dll
C:\Windows\SysWOW64\uxtuneup.dll

C:\ProgramData\RogueKiller
C:\Users\DOMA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Task: {1A4F236D-BC81-4700-A873-12A4D88FC8D6} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2015-08-18] ()
Task: {4688CE69-AF38-4DF2-8BAF-BADEC2D6A2BD} - \avastBCLRestart_firefox.exe -> No File <==== ATTENTION
Task: {53910CA5-5B50-40D0-9762-A920F6888B6D} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-10-06] (Oracle Corporation)
Task: {774CA559-E36B-445C-B441-EFDD1901D5A4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-10] (Adobe Systems Incorporated)
Task: {7C802F8C-1EAE-4355-827D-B60F819B47D5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {F055303C-636F-464A-A4A2-A16310B8E2BE} - System32\Tasks\Program k provádění aktualizací online Adobe => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)

C:\Windows\AutoKMS\AutoKMS.exe

EmptyTemp:
End
*****************

Processes closed successfully.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Local Page => value restored successfully
HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\Software\Microsoft\Internet Explorer\Main\\Local Page => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{090D232D-507A-425B-8F4C-C8B773624920}" => key removed successfully
HKCR\CLSID\{090D232D-507A-425B-8F4C-C8B773624920} => key not found.
"HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0F514B55-F5AC-49ED-BEB7-75B17542A9D4}" => key removed successfully
HKCR\CLSID\{0F514B55-F5AC-49ED-BEB7-75B17542A9D4} => key not found.
"HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{3E6B2A6B-561F-476A-BF76-CCD96D33F394}" => key removed successfully
HKCR\CLSID\{3E6B2A6B-561F-476A-BF76-CCD96D33F394} => key not found.
"HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{835A5F0F-1322-4F1D-96CF-B5E455A4374E}" => key removed successfully
HKCR\CLSID\{835A5F0F-1322-4F1D-96CF-B5E455A4374E} => key not found.
"HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{8F020EED-463C-429D-859F-53BD2DC127A2}" => key removed successfully
HKCR\CLSID\{8F020EED-463C-429D-859F-53BD2DC127A2} => key not found.
"HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{99AF7CD1-CFB1-44B0-9F14-B7D04EED05B9}" => key removed successfully
HKCR\CLSID\{99AF7CD1-CFB1-44B0-9F14-B7D04EED05B9} => key not found.
"HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D5BD6081-DD28-4A48-8083-DB0EF0EF6F1E}" => key removed successfully
HKCR\CLSID\{D5BD6081-DD28-4A48-8083-DB0EF0EF6F1E} => key not found.
"HKU\S-1-5-21-1482381698-2929903929-1953463437-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F30E5047-6E77-4BC5-A19D-6974F4181489}" => key removed successfully
HKCR\CLSID\{F30E5047-6E77-4BC5-A19D-6974F4181489} => key not found.
Firefox "newtab" removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9" => key removed successfully
UxTuneUp => service removed successfully
UxTuneUp => service not found.
catchme => service removed successfully
cpuz136 => service removed successfully
"C:\ComboFix\catchme.sys" => not found.
"C:\Windows\TEMP\cpuz136\cpuz136_x64.sys" => not found.
C:\Windows\System32\uxtuneup.dll => moved successfully
C:\Windows\SysWOW64\uxtuneup.dll => moved successfully
C:\ProgramData\RogueKiller => moved successfully
C:\Users\DOMA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{1A4F236D-BC81-4700-A873-12A4D88FC8D6}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1A4F236D-BC81-4700-A873-12A4D88FC8D6}" => key removed successfully
C:\Windows\System32\Tasks\AutoKMS => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoKMS" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4688CE69-AF38-4DF2-8BAF-BADEC2D6A2BD}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4688CE69-AF38-4DF2-8BAF-BADEC2D6A2BD}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\avastBCLRestart_firefox.exe" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{53910CA5-5B50-40D0-9762-A920F6888B6D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{53910CA5-5B50-40D0-9762-A920F6888B6D}" => key removed successfully
C:\Windows\System32\Tasks\Java Update Scheduler => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Java Update Scheduler" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{774CA559-E36B-445C-B441-EFDD1901D5A4}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{774CA559-E36B-445C-B441-EFDD1901D5A4}" => key removed successfully
C:\Windows\System32\Tasks\Adobe Flash Player Updater => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7C802F8C-1EAE-4355-827D-B60F819B47D5}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7C802F8C-1EAE-4355-827D-B60F819B47D5}" => key removed successfully
C:\Windows\System32\Tasks\Adobe Acrobat Update Task => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Acrobat Update Task" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F055303C-636F-464A-A4A2-A16310B8E2BE}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F055303C-636F-464A-A4A2-A16310B8E2BE}" => key removed successfully
C:\Windows\System32\Tasks\Program k provádění aktualizací online Adobe => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Program k provádění aktualizací online Adobe => key not found.
C:\Windows\AutoKMS\AutoKMS.exe => moved successfully
EmptyTemp: => 93.9 MB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 17:37:29 ====

[OTAS]

AVG PC TuneUp 2015 jsem nenašel v program files

[Orcus]

Co problémy?

[OTAS]

No stále mě nejde odstranit tato ikona na ploše.

[jerabina]

Jaká je cesta k tomu souboru?