Velmi zpomalené PC

Zpráva

petatape · #1 Příspěvek od **petatape** » 25 čer 2014 14:49

Prosím o pomoc. Manželky notebook je neskutečně pomalý. Otevření druhého okna trvá i deset vteřin. Dále začal psát, že operační systém není legální. To není možné, byl koupen v makru s win7 starter. Když se snažím spustit RSIT napíše error. Když se snažím spustit FRST píše, že není legitimní systém 32.
Co se s tím dá dělat? Klidně odmažu vše, ale problém je, že nevím co mohu odmazat. Prosím o pomoc.

#2 Příspěvek od **vyosek** » 25 čer 2014 14:54

Zdravim

Co se tyce legalnosti systemu, tak se obratte na podporu microsoftu

Spoustite FRST nebo FRSTLauncher, pokud Launcher, tak spustte jen samotny FRST

petatape · #3 Příspěvek od **petatape** » 25 čer 2014 16:24

Log:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-06-2014
Ran by Zdenka (administrator) on ZDENKA-PC on 25-06-2014 16:00:38
Running from C:\Users\Zdenka\Downloads
Platform: Microsoft Windows 7 Starter (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Samsung Electronics) C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(TODO: <회사 이름>) C:\Windows\Idle\DetectIdleTask.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-05-14] (AVAST Software)
HKU\S-1-5-21-459703492-136551128-3912174221-1000\...\Run: [Google Update] => C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-05-21] (Google Inc.)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {1529DAF1-9673-4924-ACF5-5F33CD7D8BA6} URL = http://search.ebay.de.anonymize-me.de/? ... bounce&k=0
SearchScopes: HKCU - {216F7B6C-694D-4E04-B3BA-2A11B2D0E5E3} URL = http://www.pricerunner.de.anonymize-me. ... bounce&k=0
SearchScopes: HKCU - {2ACF2092-330C-40AE-829A-0DF31CD7050B} URL = http://www.otto.de.anonymize-me.de/?to= ... bounce&k=0
SearchScopes: HKCU - {38DBD7F8-7C22-49DA-BF2D-97343F857D86} URL = http://www.myvideo.de.anonymize-me.de/? ... bounce&k=0
SearchScopes: HKCU - {5D80EDE1-65FD-4A9A-8E9F-43AC14448766} URL = http://www.amazon.de.anonymize-me.de/?t ... bounce&k=0
SearchScopes: HKCU - {CECDEA68-557A-4DC9-BC63-2DC77F1219CB} URL = http://de.wikipedia.org.anonymize-me.de ... bounce&k=0
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_11_6_602_171.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Zdenka\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Zdenka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Zdenka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension
FF Extension: Default Manager - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2010-09-16]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-10-05]

Chrome:
=======
CHR Extension: (Dokumenty Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-05]
CHR Extension: (Disk Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-05]
CHR Extension: (YouTube) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-05-21]
CHR Extension: (Vyhledávání Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-05-21]
CHR Extension: (Peněženka Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2012-10-05]
CHR Extension: (Gmail) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-05-21]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]
CHR StartMenuInternet: Google Chrome - C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-14] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
S3 Samsung UPD Service; C:\windows\System32\SUPDSvc.exe [131888 2010-08-09] (Samsung Electronics CO., LTD.)

==================== Drivers (Whitelisted) ====================

R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [24184 2014-05-14] ()
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [67824 2014-05-14] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [81768 2014-05-14] (AVAST Software)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49944 2014-05-14] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [777488 2014-05-18] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [411680 2014-05-18] (AVAST Software)
S2 aswStm; C:\windows\system32\drivers\aswStm.sys [68312 2014-05-18] (AVAST Software)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [180632 2014-05-14] ()
R3 ETD; C:\windows\System32\DRIVERS\ETD.sys [100744 2010-08-31] (ELAN Microelectronics Corp.)
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Zdenka\AppData\Local\Temp\catchme.sys [X]
R3 MBAMSwissArmy; \??\C:\windows\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-06-25 16:00 - 2014-06-25 16:02 - 00013559 _____ () C:\Users\Zdenka\Downloads\FRST.txt
2014-06-25 16:00 - 2014-06-25 16:01 - 00000000 ____D () C:\FRST
2014-06-25 15:58 - 2014-06-25 15:58 - 01073152 _____ (Farbar) C:\Users\Zdenka\Downloads\FRST.exe
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload
2014-06-25 15:42 - 2014-06-25 15:43 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe
2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit
2014-06-25 15:36 - 2014-06-25 15:37 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe
2014-06-25 15:24 - 2014-06-25 15:26 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe
2014-06-23 10:14 - 2014-06-23 10:14 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-459703492-136551128-3912174221-1000Core1cf8ebb273dc42e.job
2014-06-17 21:00 - 2014-06-17 21:00 - 00119358 _____ () C:\Users\Zdenka\Downloads\IMG_34562961854193.jpeg
2014-06-14 13:18 - 2014-06-14 13:31 - 912281600 _____ () C:\Users\Zdenka\Downloads\je nam 18 by Baresi of SU.avi
2014-06-12 19:03 - 2014-06-12 19:19 - 1207777594 _____ () C:\Users\Zdenka\Downloads\Iron Man 3 -2013-CZ dabing.avi
2014-06-12 18:30 - 2014-06-12 18:43 - 968425428 _____ () C:\Users\Zdenka\Downloads\Iron Man 2 (1).avi
2014-06-12 18:18 - 2014-06-12 18:25 - 191294727 _____ () C:\Users\Zdenka\Downloads\Iron Man 2.avi
2014-06-11 21:32 - 2014-06-11 21:32 - 00226951 _____ () C:\Users\Zdenka\Downloads\2014-03-26_08-3.jpeg
2014-06-11 21:05 - 2014-06-11 21:15 - 732958720 _____ () C:\Users\Zdenka\Downloads\iron-man-1-2008-CzDub super obraz i zvuk.avi
2014-06-05 16:58 - 2014-06-05 16:59 - 00000000 ____D () C:\Users\Zdenka\Desktop\právo

==================== One Month Modified Files and Folders =======

2014-06-25 16:02 - 2014-06-25 16:00 - 00013559 _____ () C:\Users\Zdenka\Downloads\FRST.txt
2014-06-25 16:01 - 2014-06-25 16:00 - 00000000 ____D () C:\FRST
2014-06-25 15:58 - 2014-06-25 15:58 - 01073152 _____ (Farbar) C:\Users\Zdenka\Downloads\FRST.exe
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload
2014-06-25 15:43 - 2014-06-25 15:42 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe
2014-06-25 15:42 - 2014-04-03 10:11 - 00000000 ____D () C:\Program Files\trend micro
2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit
2014-06-25 15:37 - 2014-06-25 15:36 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe
2014-06-25 15:30 - 2014-05-17 23:21 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-06-25 15:26 - 2014-06-25 15:24 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe
2014-06-25 15:12 - 2014-04-04 11:27 - 01725407 ____N () C:\windows\WindowsUpdate.log
2014-06-24 10:54 - 2013-09-29 22:36 - 00000000 ____D () C:\Users\Zdenka\Desktop\filmy
2014-06-24 10:32 - 2009-07-26 22:06 - 01471574 _____ () C:\windows\system32\PerfStringBackup.INI
2014-06-24 10:30 - 2012-05-22 12:56 - 00000000 ____D () C:\Users\Zdenka\Desktop\fotky
2014-06-23 10:14 - 2014-06-23 10:14 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-459703492-136551128-3912174221-1000Core1cf8ebb273dc42e.job
2014-06-17 21:00 - 2014-06-17 21:00 - 00119358 _____ () C:\Users\Zdenka\Downloads\IMG_34562961854193.jpeg
2014-06-14 13:31 - 2014-06-14 13:18 - 912281600 _____ () C:\Users\Zdenka\Downloads\je nam 18 by Baresi of SU.avi
2014-06-12 19:19 - 2014-06-12 19:03 - 1207777594 _____ () C:\Users\Zdenka\Downloads\Iron Man 3 -2013-CZ dabing.avi
2014-06-12 18:43 - 2014-06-12 18:30 - 968425428 _____ () C:\Users\Zdenka\Downloads\Iron Man 2 (1).avi
2014-06-12 18:25 - 2014-06-12 18:18 - 191294727 _____ () C:\Users\Zdenka\Downloads\Iron Man 2.avi
2014-06-11 21:32 - 2014-06-11 21:32 - 00226951 _____ () C:\Users\Zdenka\Downloads\2014-03-26_08-3.jpeg
2014-06-11 21:15 - 2014-06-11 21:05 - 732958720 _____ () C:\Users\Zdenka\Downloads\iron-man-1-2008-CzDub super obraz i zvuk.avi
2014-06-05 16:59 - 2014-06-05 16:58 - 00000000 ____D () C:\Users\Zdenka\Desktop\právo
2014-06-01 21:46 - 2013-09-29 22:41 - 00000000 ____D () C:\Users\Zdenka\AppData\Roaming\vlc
2014-05-29 23:13 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\system32\NDF
2014-05-28 20:41 - 2009-07-14 06:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT

==================== Bamital & volsnap Check =================

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-06-20 19:20

==================== End Of Log ============================

#4 Příspěvek od **vyosek** » 25 čer 2014 16:46

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

petatape · #5 Příspěvek od **petatape** » 25 čer 2014 17:20

# AdwCleaner v3.213 - Report created 25/06/2014 at 18:13:18
# Updated 23/06/2014 by Xplode
# Operating System : Windows 7 Starter (32 bits)
# Username : Zdenka - ZDENKA-PC
# Running from : C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1EC9510D-A439-4950-9399-B6399EDF9EA7}

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16446

-\\ Google Chrome v

[ File : C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R1].txt - [1636 octets] - [04/04/2014 19:21:56]
AdwCleaner[R2].txt - [985 octets] - [25/06/2014 18:09:31]
AdwCleaner[S1].txt - [1721 octets] - [04/04/2014 19:25:24]
AdwCleaner[S2].txt - [913 octets] - [25/06/2014 18:13:18]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [972 octets] ##########

#6 Příspěvek od **vyosek** » 25 čer 2014 17:25

Udelejte CDI dle kolegy

MiliNess píše:Stáhni CrystalDiskInfo, v nabídce Úpravy zvol Kopírovat a obsah schránky sem vlož pomocí Ctrl+V.

petatape · #7 Příspěvek od **petatape** » 25 čer 2014 17:39

----------------------------------------------------------------------------
CrystalDiskInfo 5.0.0 (C) 2008-2012 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Starter Edition [6.1 Build 7600] (x86)
Date : 2014/06/25 18:38:56

-- Controller Map ----------------------------------------------------------
+ Intel(R) NM10 Express Chipset [ATA]
- SAMSUNG HM160HI

-- Disk List ---------------------------------------------------------------
(1) SAMSUNG HM160HI : 160,0 GB [0/0/0, pd1]

----------------------------------------------------------------------------
(1) SAMSUNG HM160HI
----------------------------------------------------------------------------
Model : SAMSUNG HM160HI
Firmware : HH100-06
Serial Number : S1WWJDQZ953468
Disk Size : 160,0 GB (8,4/137,4/160,0)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 312581808
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA/ATAPI-7 T13 1532D version 0
Transfer Mode : SATA/150
Power On Hours : 42 hod.
Power On Count : 1909 krát
Temparature : 31 C (87 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, AAM, 48bit LBA, NCQ
APM Level : 0080h [OFF]
AAM Level : FE80h [ON]

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _51 000000000000 Počet chyb čtení
03 252 252 _25 000000000791 Čas na roztočení ploten
04 _96 _96 __0 0000000011E5 Počet spuštění/zastavení
05 252 252 _10 000000000000 Počet přemapovaných sektorů
07 252 252 _51 000000000000 Počet chybných hledání
08 252 252 _15 000000000000 Čas potřebný na vyhledání
09 _91 _91 __0 0000000013C7 Hodin v činnosti
0A 100 100 _51 000000000021 Počet opakovaných pokusů o roztočení ploten
0C _99 _99 __0 000000000775 Počet cyklů zapnutí zařízení
BF __6 __6 __0 0000000E9415 Počet udalostí zaznamenaných otřesovým senzorem
C0 100 100 __0 00000000001D Počet vypnutí disku
C2 145 112 __0 002B0010001F Teplota
C3 100 100 __0 000000000000 Počet oprav chybného čtení
C4 252 252 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 252 252 __0 000000000000 Počet podezřelých sektorů
C6 252 252 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 100 100 __0 000000000000 Počet chyb při zápisu sektorů
C9 252 252 __0 000000000000 Počet chyb při čtení programů z disku
DF _94 _94 __0 000000001830 Zatížení budiče magnetických hlav způsobené opakovanými úkony
E1 _75 _75 __0 000000040004 Počet cyklů načítání/vymazání

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 045A 3FFF C837 0010 8856 003F 003F 0000 0000 0000
010: 5331 5757 4A44 515A 3935 3638 3638 2020 2020 2020
020: 0003 4000 0004 4848 3130 3036 3036 5341 4D53 554E
030: 4720 484D 3136 3048 4920 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0200 0200 0007 3FFF 003F 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 0502 0502 0000 004C 004C
080: 01FE 001E 746B 7F09 6123 BE01 BE01 6123 40FF 001B
090: 001B 0080 FFFE 0000 FE80 0000 0000 0000 0000 0000
100: 9EB0 12A1 0000 0000 0000 0000 0000 0000 50F0 0000
110: 1A95 3468 0000 0000 0000 0000 0000 0000 0000 401E
120: 401E 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: FFFF 0400 9700 0000 0000 0300 0300 2400 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 003F 003F 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 100F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 BAA5

#8 Příspěvek od **vyosek** » 25 čer 2014 17:47

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

petatape · #9 Příspěvek od **petatape** » 25 čer 2014 18:27

Zoek.exe v5.0.0.0 Updated 22-06-2014
Tool run by Zdenka on st 25.06.2014 at 19:20:31,45.
Microsoft Windows 7 Starter 6.1.7600 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Zdenka\Desktop\zoek.exe [Scan all users] [Script inserted]

===== Runcheck 19:21:41,42 =====

--- Create Environment Variables 19:21:46,20
--- Create System Restore Point 19:22:04,63
--- Checking Input 19:22:52,37
--- Reset Hosts File 19:23:03,11
--- AU AppData Check 19:23:05,02
--- Remove From Windows Installer 19:23:10,93
--- IE Startpage Check 19:25:52,88

#10 Příspěvek od **vyosek** » 25 čer 2014 18:28

Tohle neni jeho log, pockejte na dokonceni a restart, pak vybehne jeho log...

petatape · #11 Příspěvek od **petatape** » 25 čer 2014 18:56

Zoek.exe v5.0.0.0 Updated 22-06-2014
Tool run by Zdenka on st 25.06.2014 at 19:20:31,45.
Microsoft Windows 7 Starter 6.1.7600 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Zdenka\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

25.6.2014 19:22:47 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{1529DAF1-9673-4924-ACF5-5F33CD7D8BA6} deleted successfully
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{216F7B6C-694D-4E04-B3BA-2A11B2D0E5E3} deleted successfully
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{2ACF2092-330C-40AE-829A-0DF31CD7050B} deleted successfully
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{38DBD7F8-7C22-49DA-BF2D-97343F857D86} deleted successfully
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5D80EDE1-65FD-4A9A-8E9F-43AC14448766} deleted successfully
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{CECDEA68-557A-4DC9-BC63-2DC77F1219CB} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\found.000 deleted
C:\Users\Zdenka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\iLivid.lnk deleted
C:\PROGRA~2\ICQ deleted
C:\Users\Zdenka\Searches deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"="C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5" [05.10.2012 17:00]

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[11.04.2014 19:46]
nneajnkjbffgblleaoojgaacokifdkhm - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx[12.12.2011 15:13]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="C:\\ProgramData\\ICQ\\ICQNewTab\\newTab.html"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7F6F62F0-7884-4CFB-B86C-597A4A6D9C4D} deleted successfully

==== Empty IE Cache ======================

C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Zdenka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=15 folders=5 41168 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Users\Zdenka\AppData\Local\temp will be emptied at reboot
C:\windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\windows\Temp successfully emptied
C:\Users\Zdenka\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Zdenka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on st 25.06.2014 at 19:53:09,47 ======================

#12 Příspěvek od **vyosek** » 25 čer 2014 18:59

Dejte novy log z FRST

petatape · #13 Příspěvek od **petatape** » 25 čer 2014 19:11

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-06-2014
Ran by Zdenka (administrator) on ZDENKA-PC on 25-06-2014 20:09:34
Running from C:\Users\Zdenka\Downloads
Platform: Microsoft Windows 7 Starter (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
(Samsung Electronics) C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-06-25] (AVAST Software)
HKU\S-1-5-21-459703492-136551128-3912174221-1000\...\Run: [Google Update] => C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-05-21] (Google Inc.)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_11_6_602_171.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Zdenka\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Zdenka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Zdenka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension
FF Extension: Default Manager - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2010-09-16]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-10-05]

Chrome:
=======
CHR Extension: (Dokumenty Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-05]
CHR Extension: (Disk Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-05]
CHR Extension: (YouTube) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-05-21]
CHR Extension: (Vyhledávání Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-05-21]
CHR Extension: (Skype Click to Call) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-06-25]
CHR Extension: (Peněženka Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2012-10-05]
CHR Extension: (Gmail) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-05-21]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]
CHR StartMenuInternet: Google Chrome - C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-14] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
S3 Samsung UPD Service; C:\windows\System32\SUPDSvc.exe [131888 2010-08-09] (Samsung Electronics CO., LTD.)

==================== Drivers (Whitelisted) ====================

R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [24184 2014-05-14] ()
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [67824 2014-05-14] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [81768 2014-05-14] (AVAST Software)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49944 2014-05-14] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [777488 2014-05-18] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [411680 2014-05-18] (AVAST Software)
R2 aswStm; C:\windows\system32\drivers\aswStm.sys [68312 2014-05-18] (AVAST Software)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [180632 2014-05-14] ()
R3 ETD; C:\windows\System32\DRIVERS\ETD.sys [100744 2010-08-31] (ELAN Microelectronics Corp.)
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Zdenka\AppData\Local\Temp\catchme.sys [X]
S3 MBAMSwissArmy; \??\C:\windows\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-06-25 19:51 - 2014-06-25 19:20 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-06-25 19:22 - 2014-06-25 19:53 - 00006958 _____ () C:\zoek-results.log
2014-06-25 19:20 - 2014-06-25 19:52 - 00000000 ____D () C:\zoek_backup
2014-06-25 19:18 - 2014-06-25 19:19 - 01285120 _____ () C:\Users\Zdenka\Desktop\zoek.exe
2014-06-25 18:36 - 2014-06-25 18:38 - 00000000 ____D () C:\Users\Zdenka\Desktop\Nová složka
2014-06-25 18:36 - 2014-06-25 18:36 - 00000000 ____D () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0
2014-06-25 18:33 - 2014-06-25 18:34 - 01496172 _____ () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0.zip
2014-06-25 18:16 - 2014-06-25 19:52 - 00000904 _____ () C:\windows\PFRO.log
2014-06-25 18:16 - 2014-06-25 19:52 - 00000112 _____ () C:\windows\setupact.log
2014-06-25 18:16 - 2014-06-25 18:16 - 00000000 _____ () C:\windows\setuperr.log
2014-06-25 18:11 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\system32\sqlite3.dll
2014-06-25 18:04 - 2014-06-25 18:05 - 01342659 _____ () C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe
2014-06-25 16:03 - 2014-06-25 16:05 - 00021778 _____ () C:\Users\Zdenka\Downloads\Addition.txt
2014-06-25 16:00 - 2014-06-25 20:09 - 00012812 _____ () C:\Users\Zdenka\Downloads\FRST.txt
2014-06-25 16:00 - 2014-06-25 20:09 - 00000000 ____D () C:\FRST
2014-06-25 15:58 - 2014-06-25 15:58 - 01073152 _____ (Farbar) C:\Users\Zdenka\Downloads\FRST.exe
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload
2014-06-25 15:42 - 2014-06-25 15:43 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe
2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit
2014-06-25 15:36 - 2014-06-25 15:37 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe
2014-06-25 15:24 - 2014-06-25 15:26 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe
2014-06-23 10:14 - 2014-06-23 10:14 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-459703492-136551128-3912174221-1000Core1cf8ebb273dc42e.job
2014-06-17 21:00 - 2014-06-17 21:00 - 00119358 _____ () C:\Users\Zdenka\Downloads\IMG_34562961854193.jpeg
2014-06-14 13:18 - 2014-06-14 13:31 - 912281600 _____ () C:\Users\Zdenka\Downloads\je nam 18 by Baresi of SU.avi
2014-06-12 19:03 - 2014-06-12 19:19 - 1207777594 _____ () C:\Users\Zdenka\Downloads\Iron Man 3 -2013-CZ dabing.avi
2014-06-12 18:30 - 2014-06-12 18:43 - 968425428 _____ () C:\Users\Zdenka\Downloads\Iron Man 2 (1).avi
2014-06-12 18:18 - 2014-06-12 18:25 - 191294727 _____ () C:\Users\Zdenka\Downloads\Iron Man 2.avi
2014-06-11 21:32 - 2014-06-11 21:32 - 00226951 _____ () C:\Users\Zdenka\Downloads\2014-03-26_08-3.jpeg
2014-06-11 21:05 - 2014-06-11 21:15 - 732958720 _____ () C:\Users\Zdenka\Downloads\iron-man-1-2008-CzDub super obraz i zvuk.avi
2014-06-05 16:58 - 2014-06-05 16:59 - 00000000 ____D () C:\Users\Zdenka\Desktop\právo

==================== One Month Modified Files and Folders =======

2014-06-25 20:10 - 2014-06-25 16:00 - 00012812 _____ () C:\Users\Zdenka\Downloads\FRST.txt
2014-06-25 20:09 - 2014-06-25 16:00 - 00000000 ____D () C:\FRST
2014-06-25 19:53 - 2014-06-25 19:22 - 00006958 _____ () C:\zoek-results.log
2014-06-25 19:52 - 2014-06-25 19:20 - 00000000 ____D () C:\zoek_backup
2014-06-25 19:52 - 2014-06-25 18:16 - 00000904 _____ () C:\windows\PFRO.log
2014-06-25 19:52 - 2014-06-25 18:16 - 00000112 _____ () C:\windows\setupact.log
2014-06-25 19:52 - 2009-07-14 06:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-06-25 19:51 - 2014-04-04 11:27 - 02063785 _____ () C:\windows\WindowsUpdate.log
2014-06-25 19:48 - 2012-05-21 18:39 - 00000000 ____D () C:\Users\Zdenka
2014-06-25 19:20 - 2014-06-25 19:51 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-06-25 19:19 - 2014-06-25 19:18 - 01285120 _____ () C:\Users\Zdenka\Desktop\zoek.exe
2014-06-25 18:38 - 2014-06-25 18:36 - 00000000 ____D () C:\Users\Zdenka\Desktop\Nová složka
2014-06-25 18:36 - 2014-06-25 18:36 - 00000000 ____D () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0
2014-06-25 18:34 - 2014-06-25 18:33 - 01496172 _____ () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0.zip
2014-06-25 18:16 - 2014-06-25 18:16 - 00000000 _____ () C:\windows\setuperr.log
2014-06-25 18:13 - 2013-10-05 20:24 - 00000000 ____D () C:\AdwCleaner
2014-06-25 18:05 - 2014-06-25 18:04 - 01342659 _____ () C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe
2014-06-25 16:05 - 2014-06-25 16:03 - 00021778 _____ () C:\Users\Zdenka\Downloads\Addition.txt
2014-06-25 15:58 - 2014-06-25 15:58 - 01073152 _____ (Farbar) C:\Users\Zdenka\Downloads\FRST.exe
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload
2014-06-25 15:43 - 2014-06-25 15:42 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe
2014-06-25 15:42 - 2014-04-03 10:11 - 00000000 ____D () C:\Program Files\trend micro
2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit
2014-06-25 15:37 - 2014-06-25 15:36 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe
2014-06-25 15:30 - 2014-05-17 23:21 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-06-25 15:26 - 2014-06-25 15:24 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe
2014-06-24 10:54 - 2013-09-29 22:36 - 00000000 ____D () C:\Users\Zdenka\Desktop\filmy
2014-06-24 10:32 - 2009-07-26 22:06 - 01471574 _____ () C:\windows\system32\PerfStringBackup.INI
2014-06-24 10:30 - 2012-05-22 12:56 - 00000000 ____D () C:\Users\Zdenka\Desktop\fotky
2014-06-23 10:14 - 2014-06-23 10:14 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-459703492-136551128-3912174221-1000Core1cf8ebb273dc42e.job
2014-06-17 21:00 - 2014-06-17 21:00 - 00119358 _____ () C:\Users\Zdenka\Downloads\IMG_34562961854193.jpeg
2014-06-14 13:31 - 2014-06-14 13:18 - 912281600 _____ () C:\Users\Zdenka\Downloads\je nam 18 by Baresi of SU.avi
2014-06-12 19:19 - 2014-06-12 19:03 - 1207777594 _____ () C:\Users\Zdenka\Downloads\Iron Man 3 -2013-CZ dabing.avi
2014-06-12 18:43 - 2014-06-12 18:30 - 968425428 _____ () C:\Users\Zdenka\Downloads\Iron Man 2 (1).avi
2014-06-12 18:25 - 2014-06-12 18:18 - 191294727 _____ () C:\Users\Zdenka\Downloads\Iron Man 2.avi
2014-06-11 21:32 - 2014-06-11 21:32 - 00226951 _____ () C:\Users\Zdenka\Downloads\2014-03-26_08-3.jpeg
2014-06-11 21:15 - 2014-06-11 21:05 - 732958720 _____ () C:\Users\Zdenka\Downloads\iron-man-1-2008-CzDub super obraz i zvuk.avi
2014-06-05 16:59 - 2014-06-05 16:58 - 00000000 ____D () C:\Users\Zdenka\Desktop\právo
2014-06-01 21:46 - 2013-09-29 22:41 - 00000000 ____D () C:\Users\Zdenka\AppData\Roaming\vlc
2014-05-29 23:13 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\system32\NDF

==================== Bamital & volsnap Check =================

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-06-20 19:20

==================== End Of Log ============================

#14 Příspěvek od **vyosek** » 26 čer 2014 21:19

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKU\S-1-5-21-459703492-136551128-3912174221-1000\...\Run: [Google Update] => C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-05-21] (Google Inc.)

SearchScopes: HKLM - DefaultScope value is missing.

BHO: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]

R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
C:\Program Files\Skype\Toolbars

S3 catchme; \??\C:\Users\Zdenka\AppData\Local\Temp\catchme.sys [X]

2014-06-25 19:51 - 2014-06-25 19:20 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-06-25 19:22 - 2014-06-25 19:53 - 00006958 _____ () C:\zoek-results.log
2014-06-25 19:20 - 2014-06-25 19:52 - 00000000 ____D () C:\zoek_backup
2014-06-25 19:18 - 2014-06-25 19:19 - 01285120 _____ () C:\Users\Zdenka\Desktop\zoek.exe
2014-06-25 18:36 - 2014-06-25 18:36 - 00000000 ____D () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0
2014-06-25 18:33 - 2014-06-25 18:34 - 01496172 _____ () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0.zip
2014-06-25 18:16 - 2014-06-25 19:52 - 00000904 _____ () C:\windows\PFRO.log
2014-06-25 18:16 - 2014-06-25 19:52 - 00000112 _____ () C:\windows\setupact.log
2014-06-25 18:16 - 2014-06-25 18:16 - 00000000 _____ () C:\windows\setuperr.log
2014-06-25 18:11 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\system32\sqlite3.dll
2014-06-25 18:04 - 2014-06-25 18:05 - 01342659 _____ () C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe
2014-06-25 16:03 - 2014-06-25 16:05 - 00021778 _____ () C:\Users\Zdenka\Downloads\Addition.txt
2014-06-25 16:00 - 2014-06-25 20:09 - 00012812 _____ () C:\Users\Zdenka\Downloads\FRST.txt
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload
2014-06-25 15:42 - 2014-06-25 15:43 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe
2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit
2014-06-25 15:36 - 2014-06-25 15:37 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe
2014-06-25 15:24 - 2014-06-25 15:26 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe

Hosts:
Reboot:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

petatape · #15 Příspěvek od **petatape** » 27 čer 2014 18:37

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:25-06-2014
Ran by Zdenka at 2014-06-27 19:31:54 Run:1
Running from C:\Users\Zdenka\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKU\S-1-5-21-459703492-136551128-3912174221-1000\...\Run: [Google Update] => C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-05-21] (Google Inc.)

SearchScopes: HKLM - DefaultScope value is missing.

BHO: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]

R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
C:\Program Files\Skype\Toolbars

S3 catchme; \??\C:\Users\Zdenka\AppData\Local\Temp\catchme.sys [X]

2014-06-25 19:51 - 2014-06-25 19:20 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-06-25 19:22 - 2014-06-25 19:53 - 00006958 _____ () C:\zoek-results.log
2014-06-25 19:20 - 2014-06-25 19:52 - 00000000 ____D () C:\zoek_backup
2014-06-25 19:18 - 2014-06-25 19:19 - 01285120 _____ () C:\Users\Zdenka\Desktop\zoek.exe
2014-06-25 18:36 - 2014-06-25 18:36 - 00000000 ____D () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0
2014-06-25 18:33 - 2014-06-25 18:34 - 01496172 _____ () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0.zip
2014-06-25 18:16 - 2014-06-25 19:52 - 00000904 _____ () C:\windows\PFRO.log
2014-06-25 18:16 - 2014-06-25 19:52 - 00000112 _____ () C:\windows\setupact.log
2014-06-25 18:16 - 2014-06-25 18:16 - 00000000 _____ () C:\windows\setuperr.log
2014-06-25 18:11 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\system32\sqlite3.dll
2014-06-25 18:04 - 2014-06-25 18:05 - 01342659 _____ () C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe
2014-06-25 16:03 - 2014-06-25 16:05 - 00021778 _____ () C:\Users\Zdenka\Downloads\Addition.txt
2014-06-25 16:00 - 2014-06-25 20:09 - 00012812 _____ () C:\Users\Zdenka\Downloads\FRST.txt
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload
2014-06-25 15:42 - 2014-06-25 15:43 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe
2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit
2014-06-25 15:36 - 2014-06-25 15:37 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe
2014-06-25 15:24 - 2014-06-25 15:26 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe

Hosts:
Reboot:
End
*****************

HKU\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA609D72-8482-4076-8991-8CDAE5B93BCB}' => Key deleted successfully.
'HKCR\CLSID\{AA609D72-8482-4076-8991-8CDAE5B93BCB}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}' => Key deleted successfully.
'HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}' => Key deleted successfully.
'HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl' => Key deleted successfully.
C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx => Moved successfully.
c2cautoupdatesvc => Service stopped successfully.
c2cautoupdatesvc => Service deleted successfully.
c2cpnrsvc => Service stopped successfully.
c2cpnrsvc => Service deleted successfully.
C:\Program Files\Skype\Toolbars => Moved successfully.
catchme => Service deleted successfully.
C:\windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Zdenka\Desktop\zoek.exe => Moved successfully.
C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0 => Moved successfully.
C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0.zip => Moved successfully.
C:\windows\PFRO.log => Moved successfully.
C:\windows\setupact.log => Moved successfully.
C:\windows\setuperr.log => Moved successfully.
C:\windows\system32\sqlite3.dll => Moved successfully.
C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe => Moved successfully.
C:\Users\Zdenka\Downloads\Addition.txt => Moved successfully.
C:\Users\Zdenka\Downloads\FRST.txt => Moved successfully.
C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload => Moved successfully.
C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload => Moved successfully.
C:\Users\Zdenka\Downloads\FRSTLauncher.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Users\Zdenka\Downloads\RSIT (1).exe => Moved successfully.
C:\Users\Zdenka\Downloads\ccsetup415.exe => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

The system needed a reboot.

==== End of Fixlog ====

VIRY.CZ

Velmi zpomalené PC

Velmi zpomalené PC

Re: Velmi zpomalené PC

Re: Velmi zpomalené PC

Re: Velmi zpomalené PC

Re: Velmi zpomalené PC

Re: Velmi zpomalené PC

Re: Velmi zpomalené PC

Re: Velmi zpomalené PC

Re: Velmi zpomalené PC

Re: Velmi zpomalené PC

Re: Velmi zpomalené PC

Re: Velmi zpomalené PC

Re: Velmi zpomalené PC

Re: Velmi zpomalené PC

Re: Velmi zpomalené PC