Velmi zpomalené PC
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Velmi zpomalené PC
Prosím o pomoc. Manželky notebook je neskutečně pomalý. Otevření druhého okna trvá i deset vteřin. Dále začal psát, že operační systém není legální. To není možné, byl koupen v makru s win7 starter. Když se snažím spustit RSIT napíše error. Když se snažím spustit FRST píše, že není legitimní systém 32.
Co se s tím dá dělat? Klidně odmažu vše, ale problém je, že nevím co mohu odmazat. Prosím o pomoc.
Co se s tím dá dělat? Klidně odmažu vše, ale problém je, že nevím co mohu odmazat. Prosím o pomoc.
Re: Velmi zpomalené PC
Zdravim
Co se tyce legalnosti systemu, tak se obratte na podporu microsoftu
Spoustite FRST nebo FRSTLauncher, pokud Launcher, tak spustte jen samotny FRST
Re: Velmi zpomalené PC
Log:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-06-2014
Ran by Zdenka (administrator) on ZDENKA-PC on 25-06-2014 16:00:38
Running from C:\Users\Zdenka\Downloads
Platform: Microsoft Windows 7 Starter (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 9
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Samsung Electronics) C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(TODO: <회사 이름>) C:\Windows\Idle\DetectIdleTask.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-05-14] (AVAST Software)
HKU\S-1-5-21-459703492-136551128-3912174221-1000\...\Run: [Google Update] => C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-05-21] (Google Inc.)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {1529DAF1-9673-4924-ACF5-5F33CD7D8BA6} URL = http://search.ebay.de.anonymize-me.de/? ... bounce&k=0
SearchScopes: HKCU - {216F7B6C-694D-4E04-B3BA-2A11B2D0E5E3} URL = http://www.pricerunner.de.anonymize-me. ... bounce&k=0
SearchScopes: HKCU - {2ACF2092-330C-40AE-829A-0DF31CD7050B} URL = http://www.otto.de.anonymize-me.de/?to= ... bounce&k=0
SearchScopes: HKCU - {38DBD7F8-7C22-49DA-BF2D-97343F857D86} URL = http://www.myvideo.de.anonymize-me.de/? ... bounce&k=0
SearchScopes: HKCU - {5D80EDE1-65FD-4A9A-8E9F-43AC14448766} URL = http://www.amazon.de.anonymize-me.de/?t ... bounce&k=0
SearchScopes: HKCU - {CECDEA68-557A-4DC9-BC63-2DC77F1219CB} URL = http://de.wikipedia.org.anonymize-me.de ... bounce&k=0
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1 192.168.1.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_11_6_602_171.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Zdenka\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Zdenka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Zdenka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension
FF Extension: Default Manager - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2010-09-16]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-10-05]
Chrome:
=======
CHR Extension: (Dokumenty Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-05]
CHR Extension: (Disk Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-05]
CHR Extension: (YouTube) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-05-21]
CHR Extension: (Vyhledávání Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-05-21]
CHR Extension: (Peněženka Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2012-10-05]
CHR Extension: (Gmail) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-05-21]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]
CHR StartMenuInternet: Google Chrome - C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
========================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-14] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
S3 Samsung UPD Service; C:\windows\System32\SUPDSvc.exe [131888 2010-08-09] (Samsung Electronics CO., LTD.)
==================== Drivers (Whitelisted) ====================
R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [24184 2014-05-14] ()
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [67824 2014-05-14] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [81768 2014-05-14] (AVAST Software)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49944 2014-05-14] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [777488 2014-05-18] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [411680 2014-05-18] (AVAST Software)
S2 aswStm; C:\windows\system32\drivers\aswStm.sys [68312 2014-05-18] (AVAST Software)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [180632 2014-05-14] ()
R3 ETD; C:\windows\System32\DRIVERS\ETD.sys [100744 2010-08-31] (ELAN Microelectronics Corp.)
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Zdenka\AppData\Local\Temp\catchme.sys [X]
R3 MBAMSwissArmy; \??\C:\windows\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-25 16:00 - 2014-06-25 16:02 - 00013559 _____ () C:\Users\Zdenka\Downloads\FRST.txt
2014-06-25 16:00 - 2014-06-25 16:01 - 00000000 ____D () C:\FRST
2014-06-25 15:58 - 2014-06-25 15:58 - 01073152 _____ (Farbar) C:\Users\Zdenka\Downloads\FRST.exe
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload
2014-06-25 15:42 - 2014-06-25 15:43 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe
2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit
2014-06-25 15:36 - 2014-06-25 15:37 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe
2014-06-25 15:24 - 2014-06-25 15:26 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe
2014-06-23 10:14 - 2014-06-23 10:14 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-459703492-136551128-3912174221-1000Core1cf8ebb273dc42e.job
2014-06-17 21:00 - 2014-06-17 21:00 - 00119358 _____ () C:\Users\Zdenka\Downloads\IMG_34562961854193.jpeg
2014-06-14 13:18 - 2014-06-14 13:31 - 912281600 _____ () C:\Users\Zdenka\Downloads\je nam 18 by Baresi of SU.avi
2014-06-12 19:03 - 2014-06-12 19:19 - 1207777594 _____ () C:\Users\Zdenka\Downloads\Iron Man 3 -2013-CZ dabing.avi
2014-06-12 18:30 - 2014-06-12 18:43 - 968425428 _____ () C:\Users\Zdenka\Downloads\Iron Man 2 (1).avi
2014-06-12 18:18 - 2014-06-12 18:25 - 191294727 _____ () C:\Users\Zdenka\Downloads\Iron Man 2.avi
2014-06-11 21:32 - 2014-06-11 21:32 - 00226951 _____ () C:\Users\Zdenka\Downloads\2014-03-26_08-3.jpeg
2014-06-11 21:05 - 2014-06-11 21:15 - 732958720 _____ () C:\Users\Zdenka\Downloads\iron-man-1-2008-CzDub super obraz i zvuk.avi
2014-06-05 16:58 - 2014-06-05 16:59 - 00000000 ____D () C:\Users\Zdenka\Desktop\právo
==================== One Month Modified Files and Folders =======
2014-06-25 16:02 - 2014-06-25 16:00 - 00013559 _____ () C:\Users\Zdenka\Downloads\FRST.txt
2014-06-25 16:01 - 2014-06-25 16:00 - 00000000 ____D () C:\FRST
2014-06-25 15:58 - 2014-06-25 15:58 - 01073152 _____ (Farbar) C:\Users\Zdenka\Downloads\FRST.exe
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload
2014-06-25 15:43 - 2014-06-25 15:42 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe
2014-06-25 15:42 - 2014-04-03 10:11 - 00000000 ____D () C:\Program Files\trend micro
2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit
2014-06-25 15:37 - 2014-06-25 15:36 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe
2014-06-25 15:30 - 2014-05-17 23:21 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-06-25 15:26 - 2014-06-25 15:24 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe
2014-06-25 15:12 - 2014-04-04 11:27 - 01725407 ____N () C:\windows\WindowsUpdate.log
2014-06-24 10:54 - 2013-09-29 22:36 - 00000000 ____D () C:\Users\Zdenka\Desktop\filmy
2014-06-24 10:32 - 2009-07-26 22:06 - 01471574 _____ () C:\windows\system32\PerfStringBackup.INI
2014-06-24 10:30 - 2012-05-22 12:56 - 00000000 ____D () C:\Users\Zdenka\Desktop\fotky
2014-06-23 10:14 - 2014-06-23 10:14 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-459703492-136551128-3912174221-1000Core1cf8ebb273dc42e.job
2014-06-17 21:00 - 2014-06-17 21:00 - 00119358 _____ () C:\Users\Zdenka\Downloads\IMG_34562961854193.jpeg
2014-06-14 13:31 - 2014-06-14 13:18 - 912281600 _____ () C:\Users\Zdenka\Downloads\je nam 18 by Baresi of SU.avi
2014-06-12 19:19 - 2014-06-12 19:03 - 1207777594 _____ () C:\Users\Zdenka\Downloads\Iron Man 3 -2013-CZ dabing.avi
2014-06-12 18:43 - 2014-06-12 18:30 - 968425428 _____ () C:\Users\Zdenka\Downloads\Iron Man 2 (1).avi
2014-06-12 18:25 - 2014-06-12 18:18 - 191294727 _____ () C:\Users\Zdenka\Downloads\Iron Man 2.avi
2014-06-11 21:32 - 2014-06-11 21:32 - 00226951 _____ () C:\Users\Zdenka\Downloads\2014-03-26_08-3.jpeg
2014-06-11 21:15 - 2014-06-11 21:05 - 732958720 _____ () C:\Users\Zdenka\Downloads\iron-man-1-2008-CzDub super obraz i zvuk.avi
2014-06-05 16:59 - 2014-06-05 16:58 - 00000000 ____D () C:\Users\Zdenka\Desktop\právo
2014-06-01 21:46 - 2013-09-29 22:41 - 00000000 ____D () C:\Users\Zdenka\AppData\Roaming\vlc
2014-05-29 23:13 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\system32\NDF
2014-05-28 20:41 - 2009-07-14 06:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
==================== Bamital & volsnap Check =================
C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-20 19:20
==================== End Of Log ============================
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-06-2014
Ran by Zdenka (administrator) on ZDENKA-PC on 25-06-2014 16:00:38
Running from C:\Users\Zdenka\Downloads
Platform: Microsoft Windows 7 Starter (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 9
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Samsung Electronics) C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(TODO: <회사 이름>) C:\Windows\Idle\DetectIdleTask.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-05-14] (AVAST Software)
HKU\S-1-5-21-459703492-136551128-3912174221-1000\...\Run: [Google Update] => C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-05-21] (Google Inc.)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {1529DAF1-9673-4924-ACF5-5F33CD7D8BA6} URL = http://search.ebay.de.anonymize-me.de/? ... bounce&k=0
SearchScopes: HKCU - {216F7B6C-694D-4E04-B3BA-2A11B2D0E5E3} URL = http://www.pricerunner.de.anonymize-me. ... bounce&k=0
SearchScopes: HKCU - {2ACF2092-330C-40AE-829A-0DF31CD7050B} URL = http://www.otto.de.anonymize-me.de/?to= ... bounce&k=0
SearchScopes: HKCU - {38DBD7F8-7C22-49DA-BF2D-97343F857D86} URL = http://www.myvideo.de.anonymize-me.de/? ... bounce&k=0
SearchScopes: HKCU - {5D80EDE1-65FD-4A9A-8E9F-43AC14448766} URL = http://www.amazon.de.anonymize-me.de/?t ... bounce&k=0
SearchScopes: HKCU - {CECDEA68-557A-4DC9-BC63-2DC77F1219CB} URL = http://de.wikipedia.org.anonymize-me.de ... bounce&k=0
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1 192.168.1.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_11_6_602_171.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Zdenka\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Zdenka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Zdenka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension
FF Extension: Default Manager - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2010-09-16]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-10-05]
Chrome:
=======
CHR Extension: (Dokumenty Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-05]
CHR Extension: (Disk Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-05]
CHR Extension: (YouTube) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-05-21]
CHR Extension: (Vyhledávání Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-05-21]
CHR Extension: (Peněženka Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2012-10-05]
CHR Extension: (Gmail) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-05-21]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]
CHR StartMenuInternet: Google Chrome - C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
========================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-14] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
S3 Samsung UPD Service; C:\windows\System32\SUPDSvc.exe [131888 2010-08-09] (Samsung Electronics CO., LTD.)
==================== Drivers (Whitelisted) ====================
R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [24184 2014-05-14] ()
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [67824 2014-05-14] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [81768 2014-05-14] (AVAST Software)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49944 2014-05-14] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [777488 2014-05-18] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [411680 2014-05-18] (AVAST Software)
S2 aswStm; C:\windows\system32\drivers\aswStm.sys [68312 2014-05-18] (AVAST Software)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [180632 2014-05-14] ()
R3 ETD; C:\windows\System32\DRIVERS\ETD.sys [100744 2010-08-31] (ELAN Microelectronics Corp.)
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Zdenka\AppData\Local\Temp\catchme.sys [X]
R3 MBAMSwissArmy; \??\C:\windows\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-25 16:00 - 2014-06-25 16:02 - 00013559 _____ () C:\Users\Zdenka\Downloads\FRST.txt
2014-06-25 16:00 - 2014-06-25 16:01 - 00000000 ____D () C:\FRST
2014-06-25 15:58 - 2014-06-25 15:58 - 01073152 _____ (Farbar) C:\Users\Zdenka\Downloads\FRST.exe
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload
2014-06-25 15:42 - 2014-06-25 15:43 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe
2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit
2014-06-25 15:36 - 2014-06-25 15:37 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe
2014-06-25 15:24 - 2014-06-25 15:26 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe
2014-06-23 10:14 - 2014-06-23 10:14 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-459703492-136551128-3912174221-1000Core1cf8ebb273dc42e.job
2014-06-17 21:00 - 2014-06-17 21:00 - 00119358 _____ () C:\Users\Zdenka\Downloads\IMG_34562961854193.jpeg
2014-06-14 13:18 - 2014-06-14 13:31 - 912281600 _____ () C:\Users\Zdenka\Downloads\je nam 18 by Baresi of SU.avi
2014-06-12 19:03 - 2014-06-12 19:19 - 1207777594 _____ () C:\Users\Zdenka\Downloads\Iron Man 3 -2013-CZ dabing.avi
2014-06-12 18:30 - 2014-06-12 18:43 - 968425428 _____ () C:\Users\Zdenka\Downloads\Iron Man 2 (1).avi
2014-06-12 18:18 - 2014-06-12 18:25 - 191294727 _____ () C:\Users\Zdenka\Downloads\Iron Man 2.avi
2014-06-11 21:32 - 2014-06-11 21:32 - 00226951 _____ () C:\Users\Zdenka\Downloads\2014-03-26_08-3.jpeg
2014-06-11 21:05 - 2014-06-11 21:15 - 732958720 _____ () C:\Users\Zdenka\Downloads\iron-man-1-2008-CzDub super obraz i zvuk.avi
2014-06-05 16:58 - 2014-06-05 16:59 - 00000000 ____D () C:\Users\Zdenka\Desktop\právo
==================== One Month Modified Files and Folders =======
2014-06-25 16:02 - 2014-06-25 16:00 - 00013559 _____ () C:\Users\Zdenka\Downloads\FRST.txt
2014-06-25 16:01 - 2014-06-25 16:00 - 00000000 ____D () C:\FRST
2014-06-25 15:58 - 2014-06-25 15:58 - 01073152 _____ (Farbar) C:\Users\Zdenka\Downloads\FRST.exe
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload
2014-06-25 15:43 - 2014-06-25 15:42 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe
2014-06-25 15:42 - 2014-04-03 10:11 - 00000000 ____D () C:\Program Files\trend micro
2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit
2014-06-25 15:37 - 2014-06-25 15:36 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe
2014-06-25 15:30 - 2014-05-17 23:21 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-06-25 15:26 - 2014-06-25 15:24 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe
2014-06-25 15:12 - 2014-04-04 11:27 - 01725407 ____N () C:\windows\WindowsUpdate.log
2014-06-24 10:54 - 2013-09-29 22:36 - 00000000 ____D () C:\Users\Zdenka\Desktop\filmy
2014-06-24 10:32 - 2009-07-26 22:06 - 01471574 _____ () C:\windows\system32\PerfStringBackup.INI
2014-06-24 10:30 - 2012-05-22 12:56 - 00000000 ____D () C:\Users\Zdenka\Desktop\fotky
2014-06-23 10:14 - 2014-06-23 10:14 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-459703492-136551128-3912174221-1000Core1cf8ebb273dc42e.job
2014-06-17 21:00 - 2014-06-17 21:00 - 00119358 _____ () C:\Users\Zdenka\Downloads\IMG_34562961854193.jpeg
2014-06-14 13:31 - 2014-06-14 13:18 - 912281600 _____ () C:\Users\Zdenka\Downloads\je nam 18 by Baresi of SU.avi
2014-06-12 19:19 - 2014-06-12 19:03 - 1207777594 _____ () C:\Users\Zdenka\Downloads\Iron Man 3 -2013-CZ dabing.avi
2014-06-12 18:43 - 2014-06-12 18:30 - 968425428 _____ () C:\Users\Zdenka\Downloads\Iron Man 2 (1).avi
2014-06-12 18:25 - 2014-06-12 18:18 - 191294727 _____ () C:\Users\Zdenka\Downloads\Iron Man 2.avi
2014-06-11 21:32 - 2014-06-11 21:32 - 00226951 _____ () C:\Users\Zdenka\Downloads\2014-03-26_08-3.jpeg
2014-06-11 21:15 - 2014-06-11 21:05 - 732958720 _____ () C:\Users\Zdenka\Downloads\iron-man-1-2008-CzDub super obraz i zvuk.avi
2014-06-05 16:59 - 2014-06-05 16:58 - 00000000 ____D () C:\Users\Zdenka\Desktop\právo
2014-06-01 21:46 - 2013-09-29 22:41 - 00000000 ____D () C:\Users\Zdenka\AppData\Roaming\vlc
2014-05-29 23:13 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\system32\NDF
2014-05-28 20:41 - 2009-07-14 06:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
==================== Bamital & volsnap Check =================
C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-20 19:20
==================== End Of Log ============================
Re: Velmi zpomalené PC
- Ulozte nejlepe na plochu
- Ukoncete vsechny programy
- Kliknete na Scan a nasledne Clean
- Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
Re: Velmi zpomalené PC
# AdwCleaner v3.213 - Report created 25/06/2014 at 18:13:18
# Updated 23/06/2014 by Xplode
# Operating System : Windows 7 Starter (32 bits)
# Username : Zdenka - ZDENKA-PC
# Running from : C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1EC9510D-A439-4950-9399-B6399EDF9EA7}
***** [ Browsers ] *****
-\\ Internet Explorer v9.0.8112.16446
-\\ Google Chrome v
[ File : C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R1].txt - [1636 octets] - [04/04/2014 19:21:56]
AdwCleaner[R2].txt - [985 octets] - [25/06/2014 18:09:31]
AdwCleaner[S1].txt - [1721 octets] - [04/04/2014 19:25:24]
AdwCleaner[S2].txt - [913 octets] - [25/06/2014 18:13:18]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [972 octets] ##########
# Updated 23/06/2014 by Xplode
# Operating System : Windows 7 Starter (32 bits)
# Username : Zdenka - ZDENKA-PC
# Running from : C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1EC9510D-A439-4950-9399-B6399EDF9EA7}
***** [ Browsers ] *****
-\\ Internet Explorer v9.0.8112.16446
-\\ Google Chrome v
[ File : C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R1].txt - [1636 octets] - [04/04/2014 19:21:56]
AdwCleaner[R2].txt - [985 octets] - [25/06/2014 18:09:31]
AdwCleaner[S1].txt - [1721 octets] - [04/04/2014 19:25:24]
AdwCleaner[S2].txt - [913 octets] - [25/06/2014 18:13:18]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [972 octets] ##########
Re: Velmi zpomalené PC
MiliNess napsal:Stáhni CrystalDiskInfo, v nabídce Úpravy zvol Kopírovat a obsah schránky sem vlož pomocí Ctrl+V.
Re: Velmi zpomalené PC
----------------------------------------------------------------------------
CrystalDiskInfo 5.0.0 (C) 2008-2012 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------
OS : Windows 7 Starter Edition [6.1 Build 7600] (x86)
Date : 2014/06/25 18:38:56
-- Controller Map ----------------------------------------------------------
+ Intel(R) NM10 Express Chipset [ATA]
- SAMSUNG HM160HI
-- Disk List ---------------------------------------------------------------
(1) SAMSUNG HM160HI : 160,0 GB [0/0/0, pd1]
----------------------------------------------------------------------------
(1) SAMSUNG HM160HI
----------------------------------------------------------------------------
Model : SAMSUNG HM160HI
Firmware : HH100-06
Serial Number : S1WWJDQZ953468
Disk Size : 160,0 GB (8,4/137,4/160,0)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 312581808
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA/ATAPI-7 T13 1532D version 0
Transfer Mode : SATA/150
Power On Hours : 42 hod.
Power On Count : 1909 krát
Temparature : 31 C (87 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, AAM, 48bit LBA, NCQ
APM Level : 0080h [OFF]
AAM Level : FE80h [ON]
-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _51 000000000000 Počet chyb čtení
03 252 252 _25 000000000791 Čas na roztočení ploten
04 _96 _96 __0 0000000011E5 Počet spuštění/zastavení
05 252 252 _10 000000000000 Počet přemapovaných sektorů
07 252 252 _51 000000000000 Počet chybných hledání
08 252 252 _15 000000000000 Čas potřebný na vyhledání
09 _91 _91 __0 0000000013C7 Hodin v činnosti
0A 100 100 _51 000000000021 Počet opakovaných pokusů o roztočení ploten
0C _99 _99 __0 000000000775 Počet cyklů zapnutí zařízení
BF __6 __6 __0 0000000E9415 Počet udalostí zaznamenaných otřesovým senzorem
C0 100 100 __0 00000000001D Počet vypnutí disku
C2 145 112 __0 002B0010001F Teplota
C3 100 100 __0 000000000000 Počet oprav chybného čtení
C4 252 252 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 252 252 __0 000000000000 Počet podezřelých sektorů
C6 252 252 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 100 100 __0 000000000000 Počet chyb při zápisu sektorů
C9 252 252 __0 000000000000 Počet chyb při čtení programů z disku
DF _94 _94 __0 000000001830 Zatížení budiče magnetických hlav způsobené opakovanými úkony
E1 _75 _75 __0 000000040004 Počet cyklů načítání/vymazání
-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 045A 3FFF C837 0010 8856 003F 003F 0000 0000 0000
010: 5331 5757 4A44 515A 3935 3638 3638 2020 2020 2020
020: 0003 4000 0004 4848 3130 3036 3036 5341 4D53 554E
030: 4720 484D 3136 3048 4920 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0200 0200 0007 3FFF 003F 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 0502 0502 0000 004C 004C
080: 01FE 001E 746B 7F09 6123 BE01 BE01 6123 40FF 001B
090: 001B 0080 FFFE 0000 FE80 0000 0000 0000 0000 0000
100: 9EB0 12A1 0000 0000 0000 0000 0000 0000 50F0 0000
110: 1A95 3468 0000 0000 0000 0000 0000 0000 0000 401E
120: 401E 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: FFFF 0400 9700 0000 0000 0300 0300 2400 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 003F 003F 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 100F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 BAA5
CrystalDiskInfo 5.0.0 (C) 2008-2012 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------
OS : Windows 7 Starter Edition [6.1 Build 7600] (x86)
Date : 2014/06/25 18:38:56
-- Controller Map ----------------------------------------------------------
+ Intel(R) NM10 Express Chipset [ATA]
- SAMSUNG HM160HI
-- Disk List ---------------------------------------------------------------
(1) SAMSUNG HM160HI : 160,0 GB [0/0/0, pd1]
----------------------------------------------------------------------------
(1) SAMSUNG HM160HI
----------------------------------------------------------------------------
Model : SAMSUNG HM160HI
Firmware : HH100-06
Serial Number : S1WWJDQZ953468
Disk Size : 160,0 GB (8,4/137,4/160,0)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 312581808
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA/ATAPI-7 T13 1532D version 0
Transfer Mode : SATA/150
Power On Hours : 42 hod.
Power On Count : 1909 krát
Temparature : 31 C (87 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, AAM, 48bit LBA, NCQ
APM Level : 0080h [OFF]
AAM Level : FE80h [ON]
-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _51 000000000000 Počet chyb čtení
03 252 252 _25 000000000791 Čas na roztočení ploten
04 _96 _96 __0 0000000011E5 Počet spuštění/zastavení
05 252 252 _10 000000000000 Počet přemapovaných sektorů
07 252 252 _51 000000000000 Počet chybných hledání
08 252 252 _15 000000000000 Čas potřebný na vyhledání
09 _91 _91 __0 0000000013C7 Hodin v činnosti
0A 100 100 _51 000000000021 Počet opakovaných pokusů o roztočení ploten
0C _99 _99 __0 000000000775 Počet cyklů zapnutí zařízení
BF __6 __6 __0 0000000E9415 Počet udalostí zaznamenaných otřesovým senzorem
C0 100 100 __0 00000000001D Počet vypnutí disku
C2 145 112 __0 002B0010001F Teplota
C3 100 100 __0 000000000000 Počet oprav chybného čtení
C4 252 252 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 252 252 __0 000000000000 Počet podezřelých sektorů
C6 252 252 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 100 100 __0 000000000000 Počet chyb při zápisu sektorů
C9 252 252 __0 000000000000 Počet chyb při čtení programů z disku
DF _94 _94 __0 000000001830 Zatížení budiče magnetických hlav způsobené opakovanými úkony
E1 _75 _75 __0 000000040004 Počet cyklů načítání/vymazání
-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 045A 3FFF C837 0010 8856 003F 003F 0000 0000 0000
010: 5331 5757 4A44 515A 3935 3638 3638 2020 2020 2020
020: 0003 4000 0004 4848 3130 3036 3036 5341 4D53 554E
030: 4720 484D 3136 3048 4920 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0200 0200 0007 3FFF 003F 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 0502 0502 0000 004C 004C
080: 01FE 001E 746B 7F09 6123 BE01 BE01 6123 40FF 001B
090: 001B 0080 FFFE 0000 FE80 0000 0000 0000 0000 0000
100: 9EB0 12A1 0000 0000 0000 0000 0000 0000 50F0 0000
110: 1A95 3468 0000 0000 0000 0000 0000 0000 0000 401E
120: 401E 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: FFFF 0400 9700 0000 0000 0300 0300 2400 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 003F 003F 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 100F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 BAA5
Re: Velmi zpomalené PC
- Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
- Do okna vlozte skript nize
Kód: Vybrat vše
autoclean; emptyclsid; iedefaults; FFdefaults; CHRdefaults; emptyalltemp; resethosts;- Nasledne kliknete na Run Script
- PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
Re: Velmi zpomalené PC
Zoek.exe v5.0.0.0 Updated 22-06-2014
Tool run by Zdenka on st 25.06.2014 at 19:20:31,45.
Microsoft Windows 7 Starter 6.1.7600 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Zdenka\Desktop\zoek.exe [Scan all users] [Script inserted]
===== Runcheck 19:21:41,42 =====
--- Create Environment Variables 19:21:46,20
--- Create System Restore Point 19:22:04,63
--- Checking Input 19:22:52,37
--- Reset Hosts File 19:23:03,11
--- AU AppData Check 19:23:05,02
--- Remove From Windows Installer 19:23:10,93
--- IE Startpage Check 19:25:52,88
Tool run by Zdenka on st 25.06.2014 at 19:20:31,45.
Microsoft Windows 7 Starter 6.1.7600 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Zdenka\Desktop\zoek.exe [Scan all users] [Script inserted]
===== Runcheck 19:21:41,42 =====
--- Create Environment Variables 19:21:46,20
--- Create System Restore Point 19:22:04,63
--- Checking Input 19:22:52,37
--- Reset Hosts File 19:23:03,11
--- AU AppData Check 19:23:05,02
--- Remove From Windows Installer 19:23:10,93
--- IE Startpage Check 19:25:52,88
Re: Velmi zpomalené PC
Tohle neni jeho log, pockejte na dokonceni a restart, pak vybehne jeho log...
Re: Velmi zpomalené PC
Zoek.exe v5.0.0.0 Updated 22-06-2014
Tool run by Zdenka on st 25.06.2014 at 19:20:31,45.
Microsoft Windows 7 Starter 6.1.7600 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Zdenka\Desktop\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
25.6.2014 19:22:47 Zoek.exe System Restore Point Created Succesfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{1529DAF1-9673-4924-ACF5-5F33CD7D8BA6} deleted successfully
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{216F7B6C-694D-4E04-B3BA-2A11B2D0E5E3} deleted successfully
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{2ACF2092-330C-40AE-829A-0DF31CD7050B} deleted successfully
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{38DBD7F8-7C22-49DA-BF2D-97343F857D86} deleted successfully
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5D80EDE1-65FD-4A9A-8E9F-43AC14448766} deleted successfully
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{CECDEA68-557A-4DC9-BC63-2DC77F1219CB} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== Deleting Files \ Folders ======================
C:\found.000 deleted
C:\Users\Zdenka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\iLivid.lnk deleted
C:\PROGRA~2\ICQ deleted
C:\Users\Zdenka\Searches deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"="C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5" [05.10.2012 17:00]
==== Chrome Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[11.04.2014 19:46]
nneajnkjbffgblleaoojgaacokifdkhm - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx[12.12.2011 15:13]
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="C:\\ProgramData\\ICQ\\ICQNewTab\\newTab.html"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"
==== Reset Google Chrome ======================
C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7F6F62F0-7884-4CFB-B86C-597A4A6D9C4D} deleted successfully
==== Empty IE Cache ======================
C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Zdenka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
No Flash Cache Found
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=15 folders=5 41168 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Users\Zdenka\AppData\Local\temp will be emptied at reboot
C:\windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\windows\Temp successfully emptied
C:\Users\Zdenka\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\Users\Zdenka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted
==== EOF on st 25.06.2014 at 19:53:09,47 ======================
Tool run by Zdenka on st 25.06.2014 at 19:20:31,45.
Microsoft Windows 7 Starter 6.1.7600 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Zdenka\Desktop\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
25.6.2014 19:22:47 Zoek.exe System Restore Point Created Succesfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{1529DAF1-9673-4924-ACF5-5F33CD7D8BA6} deleted successfully
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{216F7B6C-694D-4E04-B3BA-2A11B2D0E5E3} deleted successfully
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{2ACF2092-330C-40AE-829A-0DF31CD7050B} deleted successfully
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{38DBD7F8-7C22-49DA-BF2D-97343F857D86} deleted successfully
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5D80EDE1-65FD-4A9A-8E9F-43AC14448766} deleted successfully
HKEY_USERS\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Internet Explorer\SearchScopes\{CECDEA68-557A-4DC9-BC63-2DC77F1219CB} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== Deleting Files \ Folders ======================
C:\found.000 deleted
C:\Users\Zdenka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\iLivid.lnk deleted
C:\PROGRA~2\ICQ deleted
C:\Users\Zdenka\Searches deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"="C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5" [05.10.2012 17:00]
==== Chrome Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[11.04.2014 19:46]
nneajnkjbffgblleaoojgaacokifdkhm - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx[12.12.2011 15:13]
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="C:\\ProgramData\\ICQ\\ICQNewTab\\newTab.html"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"
==== Reset Google Chrome ======================
C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7F6F62F0-7884-4CFB-B86C-597A4A6D9C4D} deleted successfully
==== Empty IE Cache ======================
C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Zdenka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
No Flash Cache Found
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=15 folders=5 41168 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Users\Zdenka\AppData\Local\temp will be emptied at reboot
C:\windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\windows\Temp successfully emptied
C:\Users\Zdenka\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\Users\Zdenka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted
==== EOF on st 25.06.2014 at 19:53:09,47 ======================
Re: Velmi zpomalené PC
Dejte novy log z FRST
Re: Velmi zpomalené PC
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-06-2014
Ran by Zdenka (administrator) on ZDENKA-PC on 25-06-2014 20:09:34
Running from C:\Users\Zdenka\Downloads
Platform: Microsoft Windows 7 Starter (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 9
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
(Samsung Electronics) C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-06-25] (AVAST Software)
HKU\S-1-5-21-459703492-136551128-3912174221-1000\...\Run: [Google Update] => C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-05-21] (Google Inc.)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1 192.168.1.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_11_6_602_171.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Zdenka\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Zdenka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Zdenka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension
FF Extension: Default Manager - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2010-09-16]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-10-05]
Chrome:
=======
CHR Extension: (Dokumenty Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-05]
CHR Extension: (Disk Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-05]
CHR Extension: (YouTube) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-05-21]
CHR Extension: (Vyhledávání Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-05-21]
CHR Extension: (Skype Click to Call) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-06-25]
CHR Extension: (Peněženka Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2012-10-05]
CHR Extension: (Gmail) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-05-21]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]
CHR StartMenuInternet: Google Chrome - C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
========================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-14] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
S3 Samsung UPD Service; C:\windows\System32\SUPDSvc.exe [131888 2010-08-09] (Samsung Electronics CO., LTD.)
==================== Drivers (Whitelisted) ====================
R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [24184 2014-05-14] ()
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [67824 2014-05-14] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [81768 2014-05-14] (AVAST Software)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49944 2014-05-14] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [777488 2014-05-18] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [411680 2014-05-18] (AVAST Software)
R2 aswStm; C:\windows\system32\drivers\aswStm.sys [68312 2014-05-18] (AVAST Software)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [180632 2014-05-14] ()
R3 ETD; C:\windows\System32\DRIVERS\ETD.sys [100744 2010-08-31] (ELAN Microelectronics Corp.)
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Zdenka\AppData\Local\Temp\catchme.sys [X]
S3 MBAMSwissArmy; \??\C:\windows\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-25 19:51 - 2014-06-25 19:20 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-06-25 19:22 - 2014-06-25 19:53 - 00006958 _____ () C:\zoek-results.log
2014-06-25 19:20 - 2014-06-25 19:52 - 00000000 ____D () C:\zoek_backup
2014-06-25 19:18 - 2014-06-25 19:19 - 01285120 _____ () C:\Users\Zdenka\Desktop\zoek.exe
2014-06-25 18:36 - 2014-06-25 18:38 - 00000000 ____D () C:\Users\Zdenka\Desktop\Nová složka
2014-06-25 18:36 - 2014-06-25 18:36 - 00000000 ____D () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0
2014-06-25 18:33 - 2014-06-25 18:34 - 01496172 _____ () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0.zip
2014-06-25 18:16 - 2014-06-25 19:52 - 00000904 _____ () C:\windows\PFRO.log
2014-06-25 18:16 - 2014-06-25 19:52 - 00000112 _____ () C:\windows\setupact.log
2014-06-25 18:16 - 2014-06-25 18:16 - 00000000 _____ () C:\windows\setuperr.log
2014-06-25 18:11 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\system32\sqlite3.dll
2014-06-25 18:04 - 2014-06-25 18:05 - 01342659 _____ () C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe
2014-06-25 16:03 - 2014-06-25 16:05 - 00021778 _____ () C:\Users\Zdenka\Downloads\Addition.txt
2014-06-25 16:00 - 2014-06-25 20:09 - 00012812 _____ () C:\Users\Zdenka\Downloads\FRST.txt
2014-06-25 16:00 - 2014-06-25 20:09 - 00000000 ____D () C:\FRST
2014-06-25 15:58 - 2014-06-25 15:58 - 01073152 _____ (Farbar) C:\Users\Zdenka\Downloads\FRST.exe
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload
2014-06-25 15:42 - 2014-06-25 15:43 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe
2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit
2014-06-25 15:36 - 2014-06-25 15:37 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe
2014-06-25 15:24 - 2014-06-25 15:26 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe
2014-06-23 10:14 - 2014-06-23 10:14 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-459703492-136551128-3912174221-1000Core1cf8ebb273dc42e.job
2014-06-17 21:00 - 2014-06-17 21:00 - 00119358 _____ () C:\Users\Zdenka\Downloads\IMG_34562961854193.jpeg
2014-06-14 13:18 - 2014-06-14 13:31 - 912281600 _____ () C:\Users\Zdenka\Downloads\je nam 18 by Baresi of SU.avi
2014-06-12 19:03 - 2014-06-12 19:19 - 1207777594 _____ () C:\Users\Zdenka\Downloads\Iron Man 3 -2013-CZ dabing.avi
2014-06-12 18:30 - 2014-06-12 18:43 - 968425428 _____ () C:\Users\Zdenka\Downloads\Iron Man 2 (1).avi
2014-06-12 18:18 - 2014-06-12 18:25 - 191294727 _____ () C:\Users\Zdenka\Downloads\Iron Man 2.avi
2014-06-11 21:32 - 2014-06-11 21:32 - 00226951 _____ () C:\Users\Zdenka\Downloads\2014-03-26_08-3.jpeg
2014-06-11 21:05 - 2014-06-11 21:15 - 732958720 _____ () C:\Users\Zdenka\Downloads\iron-man-1-2008-CzDub super obraz i zvuk.avi
2014-06-05 16:58 - 2014-06-05 16:59 - 00000000 ____D () C:\Users\Zdenka\Desktop\právo
==================== One Month Modified Files and Folders =======
2014-06-25 20:10 - 2014-06-25 16:00 - 00012812 _____ () C:\Users\Zdenka\Downloads\FRST.txt
2014-06-25 20:09 - 2014-06-25 16:00 - 00000000 ____D () C:\FRST
2014-06-25 19:53 - 2014-06-25 19:22 - 00006958 _____ () C:\zoek-results.log
2014-06-25 19:52 - 2014-06-25 19:20 - 00000000 ____D () C:\zoek_backup
2014-06-25 19:52 - 2014-06-25 18:16 - 00000904 _____ () C:\windows\PFRO.log
2014-06-25 19:52 - 2014-06-25 18:16 - 00000112 _____ () C:\windows\setupact.log
2014-06-25 19:52 - 2009-07-14 06:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-06-25 19:51 - 2014-04-04 11:27 - 02063785 _____ () C:\windows\WindowsUpdate.log
2014-06-25 19:48 - 2012-05-21 18:39 - 00000000 ____D () C:\Users\Zdenka
2014-06-25 19:20 - 2014-06-25 19:51 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-06-25 19:19 - 2014-06-25 19:18 - 01285120 _____ () C:\Users\Zdenka\Desktop\zoek.exe
2014-06-25 18:38 - 2014-06-25 18:36 - 00000000 ____D () C:\Users\Zdenka\Desktop\Nová složka
2014-06-25 18:36 - 2014-06-25 18:36 - 00000000 ____D () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0
2014-06-25 18:34 - 2014-06-25 18:33 - 01496172 _____ () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0.zip
2014-06-25 18:16 - 2014-06-25 18:16 - 00000000 _____ () C:\windows\setuperr.log
2014-06-25 18:13 - 2013-10-05 20:24 - 00000000 ____D () C:\AdwCleaner
2014-06-25 18:05 - 2014-06-25 18:04 - 01342659 _____ () C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe
2014-06-25 16:05 - 2014-06-25 16:03 - 00021778 _____ () C:\Users\Zdenka\Downloads\Addition.txt
2014-06-25 15:58 - 2014-06-25 15:58 - 01073152 _____ (Farbar) C:\Users\Zdenka\Downloads\FRST.exe
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload
2014-06-25 15:43 - 2014-06-25 15:42 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe
2014-06-25 15:42 - 2014-04-03 10:11 - 00000000 ____D () C:\Program Files\trend micro
2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit
2014-06-25 15:37 - 2014-06-25 15:36 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe
2014-06-25 15:30 - 2014-05-17 23:21 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-06-25 15:26 - 2014-06-25 15:24 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe
2014-06-24 10:54 - 2013-09-29 22:36 - 00000000 ____D () C:\Users\Zdenka\Desktop\filmy
2014-06-24 10:32 - 2009-07-26 22:06 - 01471574 _____ () C:\windows\system32\PerfStringBackup.INI
2014-06-24 10:30 - 2012-05-22 12:56 - 00000000 ____D () C:\Users\Zdenka\Desktop\fotky
2014-06-23 10:14 - 2014-06-23 10:14 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-459703492-136551128-3912174221-1000Core1cf8ebb273dc42e.job
2014-06-17 21:00 - 2014-06-17 21:00 - 00119358 _____ () C:\Users\Zdenka\Downloads\IMG_34562961854193.jpeg
2014-06-14 13:31 - 2014-06-14 13:18 - 912281600 _____ () C:\Users\Zdenka\Downloads\je nam 18 by Baresi of SU.avi
2014-06-12 19:19 - 2014-06-12 19:03 - 1207777594 _____ () C:\Users\Zdenka\Downloads\Iron Man 3 -2013-CZ dabing.avi
2014-06-12 18:43 - 2014-06-12 18:30 - 968425428 _____ () C:\Users\Zdenka\Downloads\Iron Man 2 (1).avi
2014-06-12 18:25 - 2014-06-12 18:18 - 191294727 _____ () C:\Users\Zdenka\Downloads\Iron Man 2.avi
2014-06-11 21:32 - 2014-06-11 21:32 - 00226951 _____ () C:\Users\Zdenka\Downloads\2014-03-26_08-3.jpeg
2014-06-11 21:15 - 2014-06-11 21:05 - 732958720 _____ () C:\Users\Zdenka\Downloads\iron-man-1-2008-CzDub super obraz i zvuk.avi
2014-06-05 16:59 - 2014-06-05 16:58 - 00000000 ____D () C:\Users\Zdenka\Desktop\právo
2014-06-01 21:46 - 2013-09-29 22:41 - 00000000 ____D () C:\Users\Zdenka\AppData\Roaming\vlc
2014-05-29 23:13 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\system32\NDF
==================== Bamital & volsnap Check =================
C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-20 19:20
==================== End Of Log ============================
Ran by Zdenka (administrator) on ZDENKA-PC on 25-06-2014 20:09:34
Running from C:\Users\Zdenka\Downloads
Platform: Microsoft Windows 7 Starter (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 9
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
(Samsung Electronics) C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-06-25] (AVAST Software)
HKU\S-1-5-21-459703492-136551128-3912174221-1000\...\Run: [Google Update] => C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-05-21] (Google Inc.)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1 192.168.1.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_11_6_602_171.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Zdenka\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Zdenka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Zdenka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension
FF Extension: Default Manager - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2010-09-16]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-10-05]
Chrome:
=======
CHR Extension: (Dokumenty Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-05]
CHR Extension: (Disk Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-05]
CHR Extension: (YouTube) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-05-21]
CHR Extension: (Vyhledávání Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-05-21]
CHR Extension: (Skype Click to Call) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-06-25]
CHR Extension: (Peněženka Google) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2012-10-05]
CHR Extension: (Gmail) - C:\Users\Zdenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-05-21]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]
CHR StartMenuInternet: Google Chrome - C:\Users\Zdenka\AppData\Local\Google\Chrome\Application\chrome.exe
========================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-14] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
S3 Samsung UPD Service; C:\windows\System32\SUPDSvc.exe [131888 2010-08-09] (Samsung Electronics CO., LTD.)
==================== Drivers (Whitelisted) ====================
R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [24184 2014-05-14] ()
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [67824 2014-05-14] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [81768 2014-05-14] (AVAST Software)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49944 2014-05-14] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [777488 2014-05-18] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [411680 2014-05-18] (AVAST Software)
R2 aswStm; C:\windows\system32\drivers\aswStm.sys [68312 2014-05-18] (AVAST Software)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [180632 2014-05-14] ()
R3 ETD; C:\windows\System32\DRIVERS\ETD.sys [100744 2010-08-31] (ELAN Microelectronics Corp.)
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Zdenka\AppData\Local\Temp\catchme.sys [X]
S3 MBAMSwissArmy; \??\C:\windows\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-25 19:51 - 2014-06-25 19:20 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-06-25 19:22 - 2014-06-25 19:53 - 00006958 _____ () C:\zoek-results.log
2014-06-25 19:20 - 2014-06-25 19:52 - 00000000 ____D () C:\zoek_backup
2014-06-25 19:18 - 2014-06-25 19:19 - 01285120 _____ () C:\Users\Zdenka\Desktop\zoek.exe
2014-06-25 18:36 - 2014-06-25 18:38 - 00000000 ____D () C:\Users\Zdenka\Desktop\Nová složka
2014-06-25 18:36 - 2014-06-25 18:36 - 00000000 ____D () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0
2014-06-25 18:33 - 2014-06-25 18:34 - 01496172 _____ () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0.zip
2014-06-25 18:16 - 2014-06-25 19:52 - 00000904 _____ () C:\windows\PFRO.log
2014-06-25 18:16 - 2014-06-25 19:52 - 00000112 _____ () C:\windows\setupact.log
2014-06-25 18:16 - 2014-06-25 18:16 - 00000000 _____ () C:\windows\setuperr.log
2014-06-25 18:11 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\system32\sqlite3.dll
2014-06-25 18:04 - 2014-06-25 18:05 - 01342659 _____ () C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe
2014-06-25 16:03 - 2014-06-25 16:05 - 00021778 _____ () C:\Users\Zdenka\Downloads\Addition.txt
2014-06-25 16:00 - 2014-06-25 20:09 - 00012812 _____ () C:\Users\Zdenka\Downloads\FRST.txt
2014-06-25 16:00 - 2014-06-25 20:09 - 00000000 ____D () C:\FRST
2014-06-25 15:58 - 2014-06-25 15:58 - 01073152 _____ (Farbar) C:\Users\Zdenka\Downloads\FRST.exe
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload
2014-06-25 15:42 - 2014-06-25 15:43 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe
2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit
2014-06-25 15:36 - 2014-06-25 15:37 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe
2014-06-25 15:24 - 2014-06-25 15:26 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe
2014-06-23 10:14 - 2014-06-23 10:14 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-459703492-136551128-3912174221-1000Core1cf8ebb273dc42e.job
2014-06-17 21:00 - 2014-06-17 21:00 - 00119358 _____ () C:\Users\Zdenka\Downloads\IMG_34562961854193.jpeg
2014-06-14 13:18 - 2014-06-14 13:31 - 912281600 _____ () C:\Users\Zdenka\Downloads\je nam 18 by Baresi of SU.avi
2014-06-12 19:03 - 2014-06-12 19:19 - 1207777594 _____ () C:\Users\Zdenka\Downloads\Iron Man 3 -2013-CZ dabing.avi
2014-06-12 18:30 - 2014-06-12 18:43 - 968425428 _____ () C:\Users\Zdenka\Downloads\Iron Man 2 (1).avi
2014-06-12 18:18 - 2014-06-12 18:25 - 191294727 _____ () C:\Users\Zdenka\Downloads\Iron Man 2.avi
2014-06-11 21:32 - 2014-06-11 21:32 - 00226951 _____ () C:\Users\Zdenka\Downloads\2014-03-26_08-3.jpeg
2014-06-11 21:05 - 2014-06-11 21:15 - 732958720 _____ () C:\Users\Zdenka\Downloads\iron-man-1-2008-CzDub super obraz i zvuk.avi
2014-06-05 16:58 - 2014-06-05 16:59 - 00000000 ____D () C:\Users\Zdenka\Desktop\právo
==================== One Month Modified Files and Folders =======
2014-06-25 20:10 - 2014-06-25 16:00 - 00012812 _____ () C:\Users\Zdenka\Downloads\FRST.txt
2014-06-25 20:09 - 2014-06-25 16:00 - 00000000 ____D () C:\FRST
2014-06-25 19:53 - 2014-06-25 19:22 - 00006958 _____ () C:\zoek-results.log
2014-06-25 19:52 - 2014-06-25 19:20 - 00000000 ____D () C:\zoek_backup
2014-06-25 19:52 - 2014-06-25 18:16 - 00000904 _____ () C:\windows\PFRO.log
2014-06-25 19:52 - 2014-06-25 18:16 - 00000112 _____ () C:\windows\setupact.log
2014-06-25 19:52 - 2009-07-14 06:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-06-25 19:51 - 2014-04-04 11:27 - 02063785 _____ () C:\windows\WindowsUpdate.log
2014-06-25 19:48 - 2012-05-21 18:39 - 00000000 ____D () C:\Users\Zdenka
2014-06-25 19:20 - 2014-06-25 19:51 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-06-25 19:19 - 2014-06-25 19:18 - 01285120 _____ () C:\Users\Zdenka\Desktop\zoek.exe
2014-06-25 18:38 - 2014-06-25 18:36 - 00000000 ____D () C:\Users\Zdenka\Desktop\Nová složka
2014-06-25 18:36 - 2014-06-25 18:36 - 00000000 ____D () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0
2014-06-25 18:34 - 2014-06-25 18:33 - 01496172 _____ () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0.zip
2014-06-25 18:16 - 2014-06-25 18:16 - 00000000 _____ () C:\windows\setuperr.log
2014-06-25 18:13 - 2013-10-05 20:24 - 00000000 ____D () C:\AdwCleaner
2014-06-25 18:05 - 2014-06-25 18:04 - 01342659 _____ () C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe
2014-06-25 16:05 - 2014-06-25 16:03 - 00021778 _____ () C:\Users\Zdenka\Downloads\Addition.txt
2014-06-25 15:58 - 2014-06-25 15:58 - 01073152 _____ (Farbar) C:\Users\Zdenka\Downloads\FRST.exe
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload
2014-06-25 15:43 - 2014-06-25 15:42 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe
2014-06-25 15:42 - 2014-04-03 10:11 - 00000000 ____D () C:\Program Files\trend micro
2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit
2014-06-25 15:37 - 2014-06-25 15:36 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe
2014-06-25 15:30 - 2014-05-17 23:21 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-06-25 15:26 - 2014-06-25 15:24 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe
2014-06-24 10:54 - 2013-09-29 22:36 - 00000000 ____D () C:\Users\Zdenka\Desktop\filmy
2014-06-24 10:32 - 2009-07-26 22:06 - 01471574 _____ () C:\windows\system32\PerfStringBackup.INI
2014-06-24 10:30 - 2012-05-22 12:56 - 00000000 ____D () C:\Users\Zdenka\Desktop\fotky
2014-06-23 10:14 - 2014-06-23 10:14 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-459703492-136551128-3912174221-1000Core1cf8ebb273dc42e.job
2014-06-17 21:00 - 2014-06-17 21:00 - 00119358 _____ () C:\Users\Zdenka\Downloads\IMG_34562961854193.jpeg
2014-06-14 13:31 - 2014-06-14 13:18 - 912281600 _____ () C:\Users\Zdenka\Downloads\je nam 18 by Baresi of SU.avi
2014-06-12 19:19 - 2014-06-12 19:03 - 1207777594 _____ () C:\Users\Zdenka\Downloads\Iron Man 3 -2013-CZ dabing.avi
2014-06-12 18:43 - 2014-06-12 18:30 - 968425428 _____ () C:\Users\Zdenka\Downloads\Iron Man 2 (1).avi
2014-06-12 18:25 - 2014-06-12 18:18 - 191294727 _____ () C:\Users\Zdenka\Downloads\Iron Man 2.avi
2014-06-11 21:32 - 2014-06-11 21:32 - 00226951 _____ () C:\Users\Zdenka\Downloads\2014-03-26_08-3.jpeg
2014-06-11 21:15 - 2014-06-11 21:05 - 732958720 _____ () C:\Users\Zdenka\Downloads\iron-man-1-2008-CzDub super obraz i zvuk.avi
2014-06-05 16:59 - 2014-06-05 16:58 - 00000000 ____D () C:\Users\Zdenka\Desktop\právo
2014-06-01 21:46 - 2013-09-29 22:41 - 00000000 ____D () C:\Users\Zdenka\AppData\Roaming\vlc
2014-05-29 23:13 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\system32\NDF
==================== Bamital & volsnap Check =================
C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-20 19:20
==================== End Of Log ============================
Re: Velmi zpomalené PC
- Spustte poznamkovy blok (Start-spustit-notepad)
- Zkopirujte skript nize
Kód: Vybrat vše
Start HKU\S-1-5-21-459703492-136551128-3912174221-1000\...\Run: [Google Update] => C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-05-21] (Google Inc.) SearchScopes: HKLM - DefaultScope value is missing. BHO: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll () BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11] R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation) C:\Program Files\Skype\Toolbars S3 catchme; \??\C:\Users\Zdenka\AppData\Local\Temp\catchme.sys [X] 2014-06-25 19:51 - 2014-06-25 19:20 - 00024064 _____ () C:\windows\zoek-delete.exe 2014-06-25 19:22 - 2014-06-25 19:53 - 00006958 _____ () C:\zoek-results.log 2014-06-25 19:20 - 2014-06-25 19:52 - 00000000 ____D () C:\zoek_backup 2014-06-25 19:18 - 2014-06-25 19:19 - 01285120 _____ () C:\Users\Zdenka\Desktop\zoek.exe 2014-06-25 18:36 - 2014-06-25 18:36 - 00000000 ____D () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0 2014-06-25 18:33 - 2014-06-25 18:34 - 01496172 _____ () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0.zip 2014-06-25 18:16 - 2014-06-25 19:52 - 00000904 _____ () C:\windows\PFRO.log 2014-06-25 18:16 - 2014-06-25 19:52 - 00000112 _____ () C:\windows\setupact.log 2014-06-25 18:16 - 2014-06-25 18:16 - 00000000 _____ () C:\windows\setuperr.log 2014-06-25 18:11 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\system32\sqlite3.dll 2014-06-25 18:04 - 2014-06-25 18:05 - 01342659 _____ () C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe 2014-06-25 16:03 - 2014-06-25 16:05 - 00021778 _____ () C:\Users\Zdenka\Downloads\Addition.txt 2014-06-25 16:00 - 2014-06-25 20:09 - 00012812 _____ () C:\Users\Zdenka\Downloads\FRST.txt 2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload 2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload 2014-06-25 15:42 - 2014-06-25 15:43 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe 2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit 2014-06-25 15:36 - 2014-06-25 15:37 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe 2014-06-25 15:24 - 2014-06-25 15:26 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe Hosts: Reboot: End- Ulozte vytvoreny TXT jako fixlist.txt
- Presunte vytvoreny fixlist vedle FRST
- Kliknete na Fix
- Probehne oprava a vytvori log Fixlog.txt
Re: Velmi zpomalené PC
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:25-06-2014
Ran by Zdenka at 2014-06-27 19:31:54 Run:1
Running from C:\Users\Zdenka\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKU\S-1-5-21-459703492-136551128-3912174221-1000\...\Run: [Google Update] => C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-05-21] (Google Inc.)
SearchScopes: HKLM - DefaultScope value is missing.
BHO: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
C:\Program Files\Skype\Toolbars
S3 catchme; \??\C:\Users\Zdenka\AppData\Local\Temp\catchme.sys [X]
2014-06-25 19:51 - 2014-06-25 19:20 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-06-25 19:22 - 2014-06-25 19:53 - 00006958 _____ () C:\zoek-results.log
2014-06-25 19:20 - 2014-06-25 19:52 - 00000000 ____D () C:\zoek_backup
2014-06-25 19:18 - 2014-06-25 19:19 - 01285120 _____ () C:\Users\Zdenka\Desktop\zoek.exe
2014-06-25 18:36 - 2014-06-25 18:36 - 00000000 ____D () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0
2014-06-25 18:33 - 2014-06-25 18:34 - 01496172 _____ () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0.zip
2014-06-25 18:16 - 2014-06-25 19:52 - 00000904 _____ () C:\windows\PFRO.log
2014-06-25 18:16 - 2014-06-25 19:52 - 00000112 _____ () C:\windows\setupact.log
2014-06-25 18:16 - 2014-06-25 18:16 - 00000000 _____ () C:\windows\setuperr.log
2014-06-25 18:11 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\system32\sqlite3.dll
2014-06-25 18:04 - 2014-06-25 18:05 - 01342659 _____ () C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe
2014-06-25 16:03 - 2014-06-25 16:05 - 00021778 _____ () C:\Users\Zdenka\Downloads\Addition.txt
2014-06-25 16:00 - 2014-06-25 20:09 - 00012812 _____ () C:\Users\Zdenka\Downloads\FRST.txt
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload
2014-06-25 15:42 - 2014-06-25 15:43 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe
2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit
2014-06-25 15:36 - 2014-06-25 15:37 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe
2014-06-25 15:24 - 2014-06-25 15:26 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe
Hosts:
Reboot:
End
*****************
HKU\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA609D72-8482-4076-8991-8CDAE5B93BCB}' => Key deleted successfully.
'HKCR\CLSID\{AA609D72-8482-4076-8991-8CDAE5B93BCB}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}' => Key deleted successfully.
'HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}' => Key deleted successfully.
'HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl' => Key deleted successfully.
C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx => Moved successfully.
c2cautoupdatesvc => Service stopped successfully.
c2cautoupdatesvc => Service deleted successfully.
c2cpnrsvc => Service stopped successfully.
c2cpnrsvc => Service deleted successfully.
C:\Program Files\Skype\Toolbars => Moved successfully.
catchme => Service deleted successfully.
C:\windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Zdenka\Desktop\zoek.exe => Moved successfully.
C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0 => Moved successfully.
C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0.zip => Moved successfully.
C:\windows\PFRO.log => Moved successfully.
C:\windows\setupact.log => Moved successfully.
C:\windows\setuperr.log => Moved successfully.
C:\windows\system32\sqlite3.dll => Moved successfully.
C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe => Moved successfully.
C:\Users\Zdenka\Downloads\Addition.txt => Moved successfully.
C:\Users\Zdenka\Downloads\FRST.txt => Moved successfully.
C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload => Moved successfully.
C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload => Moved successfully.
C:\Users\Zdenka\Downloads\FRSTLauncher.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Users\Zdenka\Downloads\RSIT (1).exe => Moved successfully.
C:\Users\Zdenka\Downloads\ccsetup415.exe => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
The system needed a reboot.
==== End of Fixlog ====
Ran by Zdenka at 2014-06-27 19:31:54 Run:1
Running from C:\Users\Zdenka\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKU\S-1-5-21-459703492-136551128-3912174221-1000\...\Run: [Google Update] => C:\Users\Zdenka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-05-21] (Google Inc.)
SearchScopes: HKLM - DefaultScope value is missing.
BHO: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
C:\Program Files\Skype\Toolbars
S3 catchme; \??\C:\Users\Zdenka\AppData\Local\Temp\catchme.sys [X]
2014-06-25 19:51 - 2014-06-25 19:20 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-06-25 19:22 - 2014-06-25 19:53 - 00006958 _____ () C:\zoek-results.log
2014-06-25 19:20 - 2014-06-25 19:52 - 00000000 ____D () C:\zoek_backup
2014-06-25 19:18 - 2014-06-25 19:19 - 01285120 _____ () C:\Users\Zdenka\Desktop\zoek.exe
2014-06-25 18:36 - 2014-06-25 18:36 - 00000000 ____D () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0
2014-06-25 18:33 - 2014-06-25 18:34 - 01496172 _____ () C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0.zip
2014-06-25 18:16 - 2014-06-25 19:52 - 00000904 _____ () C:\windows\PFRO.log
2014-06-25 18:16 - 2014-06-25 19:52 - 00000112 _____ () C:\windows\setupact.log
2014-06-25 18:16 - 2014-06-25 18:16 - 00000000 _____ () C:\windows\setuperr.log
2014-06-25 18:11 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\system32\sqlite3.dll
2014-06-25 18:04 - 2014-06-25 18:05 - 01342659 _____ () C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe
2014-06-25 16:03 - 2014-06-25 16:05 - 00021778 _____ () C:\Users\Zdenka\Downloads\Addition.txt
2014-06-25 16:00 - 2014-06-25 20:09 - 00012812 _____ () C:\Users\Zdenka\Downloads\FRST.txt
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload
2014-06-25 15:57 - 2014-06-25 15:57 - 00112640 _____ (forum.viry.cz) C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload
2014-06-25 15:42 - 2014-06-25 15:43 - 00001138 _____ () C:\Users\Zdenka\Downloads\FRSTLauncher.exe
2014-06-25 15:37 - 2014-06-25 15:37 - 00000000 ____D () C:\rsit
2014-06-25 15:36 - 2014-06-25 15:37 - 00781909 _____ () C:\Users\Zdenka\Downloads\RSIT (1).exe
2014-06-25 15:24 - 2014-06-25 15:26 - 04812672 _____ (Piriform Ltd) C:\Users\Zdenka\Downloads\ccsetup415.exe
Hosts:
Reboot:
End
*****************
HKU\S-1-5-21-459703492-136551128-3912174221-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA609D72-8482-4076-8991-8CDAE5B93BCB}' => Key deleted successfully.
'HKCR\CLSID\{AA609D72-8482-4076-8991-8CDAE5B93BCB}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}' => Key deleted successfully.
'HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}' => Key deleted successfully.
'HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl' => Key deleted successfully.
C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx => Moved successfully.
c2cautoupdatesvc => Service stopped successfully.
c2cautoupdatesvc => Service deleted successfully.
c2cpnrsvc => Service stopped successfully.
c2cpnrsvc => Service deleted successfully.
C:\Program Files\Skype\Toolbars => Moved successfully.
catchme => Service deleted successfully.
C:\windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Zdenka\Desktop\zoek.exe => Moved successfully.
C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0 => Moved successfully.
C:\Users\Zdenka\Downloads\CrystalDiskInfo5_0_0.zip => Moved successfully.
C:\windows\PFRO.log => Moved successfully.
C:\windows\setupact.log => Moved successfully.
C:\windows\setuperr.log => Moved successfully.
C:\windows\system32\sqlite3.dll => Moved successfully.
C:\Users\Zdenka\Desktop\adwcleaner_3.213.exe => Moved successfully.
C:\Users\Zdenka\Downloads\Addition.txt => Moved successfully.
C:\Users\Zdenka\Downloads\FRST.txt => Moved successfully.
C:\Users\Zdenka\Downloads\Nepotvrzeno 978927.crdownload => Moved successfully.
C:\Users\Zdenka\Downloads\Nepotvrzeno 600841.crdownload => Moved successfully.
C:\Users\Zdenka\Downloads\FRSTLauncher.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Users\Zdenka\Downloads\RSIT (1).exe => Moved successfully.
C:\Users\Zdenka\Downloads\ccsetup415.exe => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
The system needed a reboot.
==== End of Fixlog ====



Přispějete na provoz fóra?