1place.org fix

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
Seminko
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 12 Bře 2014 17:52

Re: 1place.org fix

#16 Příspěvek od Seminko »

Log ze Zoek.exe:



Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by Seminko on st 12.03.2014 at 19:20:31,45.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Seminko\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

12.3.2014 19:20:58 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2689021312-1815177175-1326683301-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-2689021312-1815177175-1326683301-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{47833539-D0C5-4125-9FA8-0819E2EAAC93} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5} deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Seminko\AppData\Roaming\Mozilla\Firefox\Profiles\rcattvw8.default\prefs.js:

Added to C:\Users\Seminko\AppData\Roaming\Mozilla\Firefox\Profiles\rcattvw8.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Free Download Manager deleted
C:\PROGRA~3\Free Download Manager deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [09.03.2014 13:30]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Seminko\AppData\Roaming\Mozilla\Firefox\Profiles\rcattvw8.default
- Undetermined - %ProfilePath%\extensions\fdm_ffext@freedownloadmanager.org

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================


==== Chrome Look ======================

Angry Birds - Seminko\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj
AdBlock - Seminko\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
Wowhead Tooltips - Seminko\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpolikihcjghnlikcgbdgacddibmofmh

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE11SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

C:\Users\Seminko\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Seminko\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2689021312-1815177175-1326683301-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC59E0F9-7E43-44FA-9FAA-8377850BF205} deleted successfully
HKEY_USERS\S-1-5-21-2689021312-1815177175-1326683301-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CC59E0F9-7E43-44FA-9FAA-8377850BF205} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{CC59E0F9-7E43-44FA-9FAA-8377850BF205} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Free Download Manager_is1 deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dolby Home Theater v4 deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Seminko\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Seminko\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\Seminko\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=210 folders=32 27492705 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Seminko\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Seminko\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on st 12.03.2014 at 19:31:45,11 ======================
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: 1place.org fix

#17 Příspěvek od vyosek »

Poprosim o novy log z FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Seminko
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 12 Bře 2014 17:52

Re: 1place.org fix

#18 Příspěvek od Seminko »

Tady je:


Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2014
Ran by Seminko (administrator) on SEMINKUV-COMP on 12-03-2014 19:40:39
Running from C:\Users\Seminko\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
() C:\Program Files (x86)\WinRST\WinRST.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\StrokeIt\strokeit.exe
(Dominik Reichl) C:\Program Files (x86)\KeePass Password Safe\KeePass.exe
() C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(forum.viry.cz) C:\Users\Seminko\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\PING.EXE


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AutoKMS] - C:\Windows\AutoKMS.exe [615936 2013-09-03] ()
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-24] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-03-09] (AVAST Software)
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\Run: [StrokeIt] - C:\Program Files (x86)\StrokeIt\StrokeIt.exe [26248 2010-01-03] ()
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\Run: [KeePass Password Safe] - C:\Program Files (x86)\KeePass Password Safe\KeePass.exe [2009600 2013-01-20] (Dominik Reichl)
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\Run: [OscarEditor] - C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe [3345408 2012-08-17] ()
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\Run: [AdobeBridge] - [X]
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\Run: [OscarKeyboard] - C:\Program Files (x86)\X7 Oscar Keyboard Editor\OscarEditor.exe [3543040 2010-12-18] ()
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\MountPoints2: {1d7d17c1-a423-11e2-ba28-50e5495345d3} - E:\setup.exe

==================== Internet (Whitelisted) ====================

ProxyServer: http=http://127.0.0.1:9880
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Seminko\AppData\Roaming\Mozilla\Firefox\Profiles\rcattvw8.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-03-28]

Chrome:
=======
CHR Extension: (Dokumenty Google) - C:\Users\Seminko\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-28]
CHR Extension: (Disk Google) - C:\Users\Seminko\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-28]
CHR Extension: (YouTube) - C:\Users\Seminko\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-28]
CHR Extension: (Vyhledávání Google) - C:\Users\Seminko\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-28]
CHR Extension: (Peněženka Google) - C:\Users\Seminko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Gmail) - C:\Users\Seminko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-28]

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-04-24] (Advanced Micro Devices, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-03-09] (AVAST Software)
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-03-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-10] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-10] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-03-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-03-09] (AVAST Software)
S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-03-09] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-10] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-04-13] (DT Soft Ltd)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-12 19:40 - 2014-03-12 19:40 - 00029696 _____ () C:\Users\Seminko\AppData\Local\MSGBOX.EXE
2014-03-12 19:40 - 2014-03-12 19:40 - 00015327 _____ () C:\Users\Seminko\Desktop\LM.bat
2014-03-12 19:40 - 2014-03-12 19:40 - 00010834 _____ () C:\Users\Seminko\Desktop\FRST.txt
2014-03-12 19:39 - 2014-03-12 19:39 - 00112640 _____ (forum.viry.cz) C:\Users\Seminko\Desktop\FRSTLauncher.exe
2014-03-12 19:31 - 2014-03-12 19:31 - 00000031 ____H () C:\Users\Seminko\Documents\hesla.kdb.lock
2014-03-12 19:28 - 2014-03-12 19:20 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-12 19:20 - 2014-03-12 19:31 - 00008498 _____ () C:\zoek-results.log
2014-03-12 19:20 - 2014-03-12 19:26 - 00000000 ____D () C:\zoek_backup
2014-03-12 19:19 - 2014-03-12 19:19 - 01285120 _____ () C:\Users\Seminko\Desktop\zoek.exe
2014-03-12 19:04 - 2014-03-12 19:04 - 00000865 _____ () C:\Users\Seminko\Desktop\JRT.txt
2014-03-12 19:00 - 2014-03-12 19:00 - 00000000 ____D () C:\Windows\ERUNT
2014-03-12 18:52 - 2014-03-12 18:56 - 00000000 ____D () C:\AdwCleaner
2014-03-12 18:37 - 2014-03-12 19:40 - 00000000 ____D () C:\FRST
2014-03-12 18:34 - 2014-03-12 18:34 - 02157056 _____ (Farbar) C:\Users\Seminko\Desktop\FRST64.exe
2014-03-12 18:19 - 2014-03-12 18:44 - 00000000 ____D () C:\Program Files\trend micro
2014-03-12 18:19 - 2014-03-12 18:42 - 00000000 ____D () C:\rsit
2014-03-12 06:44 - 2014-03-12 19:28 - 00001382 _____ () C:\Windows\PFRO.log
2014-03-11 21:46 - 2014-03-11 21:46 - 00003148 _____ () C:\Windows\System32\Tasks\{CB027888-A94E-4285-84EE-2320ECE4E32E}
2014-03-10 06:44 - 2014-03-12 19:29 - 00000504 _____ () C:\Windows\setupact.log
2014-03-10 06:44 - 2014-03-10 06:44 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-09 18:36 - 2014-03-09 18:36 - 00000600 _____ () C:\Users\Seminko\AppData\Roaming\winscp.rnd
2014-03-09 18:34 - 2014-03-09 18:34 - 00000729 _____ () C:\Users\Public\Desktop\South Park The Stick of Truth.lnk
2014-03-09 13:46 - 2014-03-09 13:46 - 00090638 _____ () C:\Users\Seminko\Documents\cc_20140309_134611.reg
2014-03-09 13:44 - 2014-03-09 13:44 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-03-09 13:44 - 2014-03-09 13:44 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-09 13:44 - 2014-03-09 13:44 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-07 20:19 - 2014-03-07 20:19 - 00000000 ____D () C:\Users\Seminko\AppData\Local\WinRST
2014-03-07 20:19 - 2014-03-07 20:19 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-03-07 20:07 - 2014-03-07 20:07 - 00002085 _____ () C:\Users\Public\Desktop\TrialDocSmartz - PDF to Word Converter v3.0.lnk
2014-03-07 20:07 - 2014-03-07 20:07 - 00000000 ____D () C:\Windows\SysWOW64\gs
2014-03-07 20:07 - 2014-03-07 20:07 - 00000000 ____D () C:\Windows\CRYSTAL
2014-03-07 20:07 - 2007-08-10 13:37 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.003
2014-03-07 20:07 - 2007-08-10 13:37 - 00343040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.001
2014-03-07 20:07 - 2007-08-10 13:37 - 00212240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Richtx32.ocx
2014-03-07 20:07 - 2007-08-10 13:37 - 00204848 _____ () C:\Windows\SysWOW64\gswin32c.exe
2014-03-07 20:07 - 2007-08-10 13:37 - 00196608 _____ (Netsmartz) C:\Windows\SysWOW64\Utility.dll
2014-03-07 20:07 - 2007-08-10 13:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.002
2014-03-07 20:07 - 2007-08-10 13:37 - 00117507 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.ocx
2014-03-07 20:07 - 2007-08-10 13:37 - 00051604 _____ () C:\Windows\SysWOW64\Adist5k.ppd
2014-03-07 20:07 - 2002-01-10 15:50 - 00270336 _____ (Seagate Software Information Management Group, Inc.) C:\Windows\SysWOW64\P2sodbc.dll
2014-03-07 20:07 - 2001-08-23 17:30 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.000
2014-03-07 20:07 - 2001-03-13 12:51 - 01066176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2014-03-07 20:07 - 2001-03-13 12:49 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COMDLG32.OCX
2014-03-07 20:07 - 1998-11-08 15:00 - 05350912 _____ (Seagate Software, Inc.) C:\Windows\SysWOW64\Crpe32.dll
2014-03-07 20:07 - 1998-11-08 15:00 - 00993996 _____ (Seagate Software, Inc.) C:\Windows\SysWOW64\Crystl32.ocx
2014-03-07 20:07 - 1998-11-08 15:00 - 00229888 _____ (Seagate Software, Information Management Group, Inc.) C:\Windows\SysWOW64\Crpaig32.dll
2014-03-07 20:07 - 1998-11-08 15:00 - 00059392 _____ (Seagate Software Information Management Group, Inc.) C:\Windows\SysWOW64\P2bbnd.dll
2014-03-07 20:07 - 1996-11-20 00:00 - 00087040 _____ (Seagate Software Information Management Group, Inc.) C:\Windows\SysWOW64\P2bdao.dll
2014-03-07 20:07 - 1996-11-18 00:00 - 00979456 _____ (Three D Graphics) C:\Windows\SysWOW64\Pg32.dll
2014-03-07 20:07 - 1996-11-18 00:00 - 00748160 _____ () C:\Windows\SysWOW64\Co2c40en.dll
2014-03-07 20:07 - 1996-11-18 00:00 - 00054272 _____ () C:\Windows\SysWOW64\P2irdao.dll
2014-03-07 20:07 - 1996-11-18 00:00 - 00050176 _____ () C:\Windows\SysWOW64\P2ctdao.dll
2014-03-07 20:07 - 1996-11-17 23:00 - 00018944 _____ ( ) C:\Windows\SysWOW64\Implode.dll
2014-03-07 20:07 - 1996-11-08 02:48 - 00368912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbar332.dll
2014-03-07 20:06 - 2014-03-07 20:07 - 00000000 ____D () C:\Program Files (x86)\TrialDocSmartz
2014-03-07 20:02 - 2014-03-07 20:04 - 00000000 ____D () C:\Program Files (x86)\Free PDF to Word Converter
2014-03-04 21:54 - 2014-03-04 22:37 - 00026107 _____ () C:\Users\Seminko\Documents\zkouska odesilani.xlsm
2014-03-03 19:57 - 2014-03-03 20:01 - 00000000 ___SD () C:\Users\Seminko\Documents\Zdroje dat
2014-02-27 20:13 - 2014-02-27 20:13 - 00000000 ____D () C:\Program Files (x86)\Mumble
2014-02-26 07:12 - 2014-02-27 22:40 - 01559340 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-24 18:01 - 2014-02-24 18:01 - 00000732 _____ () C:\Users\Public\Desktop\World of Warcraft.lnk
2014-02-23 20:44 - 2014-02-23 20:44 - 00000662 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2014-02-20 21:32 - 2014-02-20 21:32 - 00000340 _____ () C:\Users\Seminko\Desktop\script.txt
2014-02-12 18:50 - 2014-02-12 21:15 - 00003720 _____ () C:\Users\Seminko\Desktop\pravo_obsloužit.txt
2014-02-12 07:13 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-12 07:13 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-12 07:13 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-12 07:13 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-12 07:13 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-12 07:13 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-12 07:13 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-12 07:13 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-12 07:13 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-12 07:13 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-12 07:13 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-12 07:13 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-12 07:13 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-12 07:13 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-12 07:13 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-12 07:13 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-12 07:13 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-12 07:13 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-12 07:13 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-12 07:13 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-12 07:13 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-12 07:13 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-12 07:13 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-12 07:13 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-12 07:13 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-12 07:13 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-12 07:13 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-12 07:13 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-12 07:13 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-12 07:13 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-12 07:13 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-12 07:13 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-12 07:13 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-12 07:13 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-12 07:13 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-12 07:13 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-12 07:13 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-12 07:13 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-12 07:13 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-12 07:13 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 07:13 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-12 06:49 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 06:49 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 06:49 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 06:49 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 06:49 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 06:49 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 06:49 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 06:49 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 06:49 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 06:49 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 06:49 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 06:49 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 06:49 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 06:49 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 06:49 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 06:49 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 06:49 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 06:49 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 06:49 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 06:49 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 06:49 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 06:49 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 06:49 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 06:49 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 06:49 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 06:49 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 06:49 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 06:49 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

==================== One Month Modified Files and Folders =======

2014-03-12 19:40 - 2014-03-12 19:40 - 00029696 _____ () C:\Users\Seminko\AppData\Local\MSGBOX.EXE
2014-03-12 19:40 - 2014-03-12 19:40 - 00015327 _____ () C:\Users\Seminko\Desktop\LM.bat
2014-03-12 19:40 - 2014-03-12 19:40 - 00010834 _____ () C:\Users\Seminko\Desktop\FRST.txt
2014-03-12 19:40 - 2014-03-12 18:37 - 00000000 ____D () C:\FRST
2014-03-12 19:39 - 2014-03-12 19:39 - 00112640 _____ (forum.viry.cz) C:\Users\Seminko\Desktop\FRSTLauncher.exe
2014-03-12 19:37 - 2009-07-14 05:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-12 19:37 - 2009-07-14 05:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-12 19:33 - 2013-03-28 19:24 - 02095453 _____ () C:\Windows\WindowsUpdate.log
2014-03-12 19:33 - 2010-11-21 10:27 - 00668882 _____ () C:\Windows\system32\perfh005.dat
2014-03-12 19:33 - 2010-11-21 10:27 - 00141542 _____ () C:\Windows\system32\perfc005.dat
2014-03-12 19:33 - 2009-07-14 06:13 - 01584626 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-12 19:31 - 2014-03-12 19:31 - 00000031 ____H () C:\Users\Seminko\Documents\hesla.kdb.lock
2014-03-12 19:31 - 2014-03-12 19:20 - 00008498 _____ () C:\zoek-results.log
2014-03-12 19:31 - 2013-03-28 19:44 - 00000950 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-12 19:29 - 2014-03-10 06:44 - 00000504 _____ () C:\Windows\setupact.log
2014-03-12 19:29 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-12 19:28 - 2014-03-12 06:44 - 00001382 _____ () C:\Windows\PFRO.log
2014-03-12 19:26 - 2014-03-12 19:20 - 00000000 ____D () C:\zoek_backup
2014-03-12 19:23 - 2013-03-28 19:44 - 00000954 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-12 19:20 - 2014-03-12 19:28 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-12 19:19 - 2014-03-12 19:19 - 01285120 _____ () C:\Users\Seminko\Desktop\zoek.exe
2014-03-12 19:14 - 2013-04-14 08:08 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-12 19:04 - 2014-03-12 19:04 - 00000865 _____ () C:\Users\Seminko\Desktop\JRT.txt
2014-03-12 19:00 - 2014-03-12 19:00 - 00000000 ____D () C:\Windows\ERUNT
2014-03-12 18:56 - 2014-03-12 18:52 - 00000000 ____D () C:\AdwCleaner
2014-03-12 18:44 - 2014-03-12 18:19 - 00000000 ____D () C:\Program Files\trend micro
2014-03-12 18:42 - 2014-03-12 18:19 - 00000000 ____D () C:\rsit
2014-03-12 18:34 - 2014-03-12 18:34 - 02157056 _____ (Farbar) C:\Users\Seminko\Desktop\FRST64.exe
2014-03-12 18:14 - 2013-04-14 08:08 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 18:14 - 2013-04-14 08:08 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 18:14 - 2013-04-14 08:08 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 18:00 - 2013-08-17 15:07 - 00000000 ____D () C:\Users\Seminko\AppData\Local\Battle.net
2014-03-12 17:51 - 2013-08-30 20:03 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-03-12 07:12 - 2013-03-28 19:25 - 00000000 ____D () C:\Users\Seminko
2014-03-12 06:54 - 2013-03-30 14:21 - 00000000 ____D () C:\Users\Seminko\AppData\Local\Adobe
2014-03-11 21:57 - 2013-09-28 14:53 - 00000000 ____D () C:\Users\Seminko\AppData\Roaming\uTorrent
2014-03-11 21:46 - 2014-03-11 21:46 - 00003148 _____ () C:\Windows\System32\Tasks\{CB027888-A94E-4285-84EE-2320ECE4E32E}
2014-03-11 21:25 - 2013-03-28 20:22 - 00000000 ____D () C:\Users\Seminko\AppData\Roaming\Mumble
2014-03-10 06:44 - 2014-03-10 06:44 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-09 18:36 - 2014-03-09 18:36 - 00000600 _____ () C:\Users\Seminko\AppData\Roaming\winscp.rnd
2014-03-09 18:36 - 2013-04-13 15:20 - 00000000 ____D () C:\Users\Seminko\Documents\My Games
2014-03-09 18:36 - 2013-03-30 18:43 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-09 18:34 - 2014-03-09 18:34 - 00000729 _____ () C:\Users\Public\Desktop\South Park The Stick of Truth.lnk
2014-03-09 18:31 - 2013-04-13 14:56 - 00000000 ____D () C:\Users\Seminko\AppData\Roaming\DAEMON Tools Lite
2014-03-09 17:42 - 2013-03-28 19:56 - 00000000 ____D () C:\Users\Seminko\AppData\Roaming\Free Download Manager
2014-03-09 17:27 - 2013-03-28 21:13 - 00000000 ____D () C:\Users\Seminko\AppData\Roaming\Media Player Classic
2014-03-09 13:50 - 2013-03-29 18:18 - 00020124 _____ () C:\Users\Seminko\Documents\hesla.kdb
2014-03-09 13:46 - 2014-03-09 13:46 - 00090638 _____ () C:\Users\Seminko\Documents\cc_20140309_134611.reg
2014-03-09 13:45 - 2013-06-13 19:19 - 00000000 ____D () C:\Windows\Minidump
2014-03-09 13:45 - 2013-03-29 19:31 - 00000000 ____D () C:\Users\Seminko\AppData\Roaming\Winamp
2014-03-09 13:45 - 2013-03-28 19:20 - 00000000 ____D () C:\Windows\Panther
2014-03-09 13:44 - 2014-03-09 13:44 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-03-09 13:44 - 2014-03-09 13:44 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-09 13:44 - 2014-03-09 13:44 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-09 13:31 - 2013-03-28 20:00 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-03-09 13:30 - 2014-01-10 15:20 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-03-09 13:30 - 2013-03-28 20:00 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-03-09 13:30 - 2013-03-28 20:00 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-03-09 13:30 - 2013-03-28 20:00 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-03-09 13:30 - 2013-03-28 20:00 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-03-09 13:30 - 2013-03-28 20:00 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-03-09 13:30 - 2013-03-28 20:00 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-03-09 13:29 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-07 20:19 - 2014-03-07 20:19 - 00000000 ____D () C:\Users\Seminko\AppData\Local\WinRST
2014-03-07 20:19 - 2014-03-07 20:19 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-03-07 20:07 - 2014-03-07 20:07 - 00002085 _____ () C:\Users\Public\Desktop\TrialDocSmartz - PDF to Word Converter v3.0.lnk
2014-03-07 20:07 - 2014-03-07 20:07 - 00000000 ____D () C:\Windows\SysWOW64\gs
2014-03-07 20:07 - 2014-03-07 20:07 - 00000000 ____D () C:\Windows\CRYSTAL
2014-03-07 20:07 - 2014-03-07 20:06 - 00000000 ____D () C:\Program Files (x86)\TrialDocSmartz
2014-03-07 20:04 - 2014-03-07 20:02 - 00000000 ____D () C:\Program Files (x86)\Free PDF to Word Converter
2014-03-06 20:25 - 2013-04-23 16:58 - 00000000 ____D () C:\Users\Seminko\AppData\Local\Dolphe
2014-03-05 18:11 - 2013-08-19 15:17 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-03-04 22:37 - 2014-03-04 21:54 - 00026107 _____ () C:\Users\Seminko\Documents\zkouska odesilani.xlsm
2014-03-04 22:37 - 2013-09-01 08:49 - 00000000 ____D () C:\Users\Seminko\Documents\Soubory aplikace Outlook
2014-03-04 17:26 - 2013-03-28 19:44 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-03 20:01 - 2014-03-03 19:57 - 00000000 ___SD () C:\Users\Seminko\Documents\Zdroje dat
2014-03-02 12:24 - 2013-05-19 09:13 - 00000000 ____D () C:\Users\Seminko\AppData\Roaming\vlc
2014-02-27 22:40 - 2014-02-26 07:12 - 01559340 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-27 20:13 - 2014-02-27 20:13 - 00000000 ____D () C:\Program Files (x86)\Mumble
2014-02-27 19:09 - 2013-06-29 10:47 - 00000000 ____D () C:\Users\Seminko\AppData\Local\PMB Files
2014-02-27 19:09 - 2013-06-29 10:47 - 00000000 ____D () C:\ProgramData\PMB Files
2014-02-24 18:01 - 2014-02-24 18:01 - 00000732 _____ () C:\Users\Public\Desktop\World of Warcraft.lnk
2014-02-23 20:44 - 2014-02-23 20:44 - 00000662 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2014-02-21 18:10 - 2013-10-25 11:42 - 00000953 _____ () C:\Users\Seminko\SciTE.session
2014-02-20 21:32 - 2014-02-20 21:32 - 00000340 _____ () C:\Users\Seminko\Desktop\script.txt
2014-02-16 09:47 - 2013-08-15 10:22 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-16 09:46 - 2013-04-22 13:21 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-15 09:18 - 2013-03-28 19:44 - 00003950 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-15 09:18 - 2013-03-28 19:44 - 00003698 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-13 17:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-12 21:15 - 2014-02-12 18:50 - 00003720 _____ () C:\Users\Seminko\Desktop\pravo_obsloužit.txt
2014-02-12 07:18 - 2013-09-01 08:40 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-12 07:14 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-02 17:23

==================== End Of Log ============================
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: 1place.org fix

#19 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AutoKMS] - C:\Windows\AutoKMS.exe [615936 2013-09-03] ()
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\Run: [OscarEditor] - C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe [3345408 2012-08-17] ()
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\Run: [AdobeBridge] - [X]
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\Run: [OscarKeyboard] - C:\Program Files (x86)\X7 Oscar Keyboard Editor\OscarEditor.exe [3543040 2010-12-18] ()
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\MountPoints2: {1d7d17c1-a423-11e2-ba28-50e5495345d3} - E:\setup.exe

ProxyServer: http=http://127.0.0.1:9880
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}

R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()

014-03-12 19:40 - 2014-03-12 19:40 - 00029696 _____ () C:\Users\Seminko\AppData\Local\MSGBOX.EXE
2014-03-12 19:40 - 2014-03-12 19:40 - 00015327 _____ () C:\Users\Seminko\Desktop\LM.bat
2014-03-12 19:40 - 2014-03-12 19:40 - 00010834 _____ () C:\Users\Seminko\Desktop\FRST.txt
2014-03-12 19:39 - 2014-03-12 19:39 - 00112640 _____ (forum.viry.cz) C:\Users\Seminko\Desktop\FRSTLauncher.exe
2014-03-12 19:28 - 2014-03-12 19:20 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-12 19:20 - 2014-03-12 19:31 - 00008498 _____ () C:\zoek-results.log
2014-03-12 19:20 - 2014-03-12 19:26 - 00000000 ____D () C:\zoek_backup
2014-03-12 19:19 - 2014-03-12 19:19 - 01285120 _____ () C:\Users\Seminko\Desktop\zoek.exe
2014-03-12 19:04 - 2014-03-12 19:04 - 00000865 _____ () C:\Users\Seminko\Desktop\JRT.txt

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

AlternateDataStreams: C:\Users\Seminko\Soubory cookie:9HleeNPdncn12LUXcaUjvMx
AlternateDataStreams: C:\Users\Seminko\Soubory cookie:aovhNT5VORmiGwpxJvHI
AlternateDataStreams: C:\Users\Seminko\AppData\Local\Temporary Internet Files:WcSfTj0iqOR0LCr5nprbD
C:\Program Files (x86)\WinRST
C:\Windows\AutoKMS.exe

Hosts:
CMD: shutdown /r /f /t 2

End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Seminko
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 12 Bře 2014 17:52

Re: 1place.org fix

#20 Příspěvek od Seminko »

Fixlog:


Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2014
Ran by Seminko at 2014-03-12 19:56:23 Run:1
Running from C:\Users\Seminko\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AutoKMS] - C:\Windows\AutoKMS.exe [615936 2013-09-03] ()
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\Run: [OscarEditor] - C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe [3345408 2012-08-17] ()
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\Run: [AdobeBridge] - [X]
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\Run: [OscarKeyboard] - C:\Program Files (x86)\X7 Oscar Keyboard Editor\OscarEditor.exe [3543040 2010-12-18] ()
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\...\MountPoints2: {1d7d17c1-a423-11e2-ba28-50e5495345d3} - E:\setup.exe

ProxyServer: http=http://127.0.0.1:9880
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}

R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()

014-03-12 19:40 - 2014-03-12 19:40 - 00029696 _____ () C:\Users\Seminko\AppData\Local\MSGBOX.EXE
2014-03-12 19:40 - 2014-03-12 19:40 - 00015327 _____ () C:\Users\Seminko\Desktop\LM.bat
2014-03-12 19:40 - 2014-03-12 19:40 - 00010834 _____ () C:\Users\Seminko\Desktop\FRST.txt
2014-03-12 19:39 - 2014-03-12 19:39 - 00112640 _____ (forum.viry.cz) C:\Users\Seminko\Desktop\FRSTLauncher.exe
2014-03-12 19:28 - 2014-03-12 19:20 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-12 19:20 - 2014-03-12 19:31 - 00008498 _____ () C:\zoek-results.log
2014-03-12 19:20 - 2014-03-12 19:26 - 00000000 ____D () C:\zoek_backup
2014-03-12 19:19 - 2014-03-12 19:19 - 01285120 _____ () C:\Users\Seminko\Desktop\zoek.exe
2014-03-12 19:04 - 2014-03-12 19:04 - 00000865 _____ () C:\Users\Seminko\Desktop\JRT.txt

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

AlternateDataStreams: C:\Users\Seminko\Soubory cookie:9HleeNPdncn12LUXcaUjvMx
AlternateDataStreams: C:\Users\Seminko\Soubory cookie:aovhNT5VORmiGwpxJvHI
AlternateDataStreams: C:\Users\Seminko\AppData\Local\Temporary Internet Files:WcSfTj0iqOR0LCr5nprbD
C:\Program Files (x86)\WinRST
C:\Windows\AutoKMS.exe

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\BCSSync => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AutoKMS => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\APSDaemon => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task => Value deleted successfully.
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\Software\Microsoft\Windows\CurrentVersion\Run\\OscarEditor => Value deleted successfully.
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => Value deleted successfully.
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => Value deleted successfully.
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\Software\Microsoft\Windows\CurrentVersion\Run\\OscarKeyboard => Value deleted successfully.
HKU\S-1-5-21-2689021312-1815177175-1326683301-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1d7d17c1-a423-11e2-ba28-50e5495345d3} => Key deleted successfully.
HKCR\CLSID\{1d7d17c1-a423-11e2-ba28-50e5495345d3} => Key not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully.
HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found.
WinRST => Unable to stop service
WinRST => Service deleted successfully.
C:\Users\Seminko\Desktop\LM.bat => Moved successfully.
"C:\Users\Seminko\Desktop\FRST.txt" => File/Directory not found.
C:\Users\Seminko\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Seminko\Desktop\zoek.exe => Moved successfully.
C:\Users\Seminko\Desktop\JRT.txt => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
"C:\Users\Seminko\Soubory cookie" => ":9HleeNPdncn12LUXcaUjvMx" ADS not found.
"C:\Users\Seminko\Soubory cookie" => ":aovhNT5VORmiGwpxJvHI" ADS not found.
"C:\Users\Seminko\AppData\Local\Temporary Internet Files" => ":WcSfTj0iqOR0LCr5nprbD" ADS not found.
C:\Program Files (x86)\WinRST => Moved successfully.
C:\Windows\AutoKMS.exe => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========



The system needed a reboot.

==== End of Fixlog ====
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: 1place.org fix

#21 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Seminko
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 12 Bře 2014 17:52

Re: 1place.org fix

#22 Příspěvek od Seminko »

Na chvíli jsem odběh... Každopádně děkuju moc za SKVĚLÝ a hlavně pohodový support, a pokud finance dovolí, určitě rád přispěju!

Ještě jednou díky!
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: 1place.org fix

#23 Příspěvek od vyosek »

Nemate zac, rad jsem pomohl :worship: Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat :lock:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Zamčeno

Vrátit se na „Řešení problémů, logy“