Zpomalený PC

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
greatone
Návštěvník
Návštěvník
Příspěvky: 149
Registrován: 14 Kvě 2005 17:02
Místo/Bydliště: Brno

Re: Zpomalený PC

#16 Příspěvek od greatone »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-07-2014 01
Ran by Aldosek (administrator) on ALDOSEK-TOSH on 10-07-2014 17:53:54
Running from C:\Users\Aldosek\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\GFNEXSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIGAU.EXE
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosA2dp.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHid.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHSP.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosAVRC.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\tosOBEX.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\tosBtProc.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
() C:\Users\Aldosek\Desktop\zoek.exe
(Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
(Microsoft Corporation) C:\Windows\System32\reg.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcfgex.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Aldosek\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [597928 2010-12-13] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38304 2010-12-14] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba TEMPRO] => C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [571304 2010-12-09] (TOSHIBA Corporation)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [973176 2010-12-15] (TOSHIBA Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11775592 2011-01-12] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2186856 2011-01-10] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2679592 2011-02-03] (Synaptics Incorporated)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710040 2010-12-08] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba Registration] => C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-02-28] (Toshiba Europe GmbH)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ITSecMng] => C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [83336 2009-07-22] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1295736 2011-02-11] (TOSHIBA Corporation)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4411952 2014-01-21] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKU\.DEFAULT\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [845176 2011-02-18] (TOSHIBA)
HKU\S-1-5-19\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [845176 2011-02-18] (TOSHIBA)
HKU\S-1-5-20\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [845176 2011-02-18] (TOSHIBA)
HKU\S-1-5-21-3403336580-929929243-3446877537-1000\...\Run: [EPSON BX525WD Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGAU.EXE [224768 2010-01-12] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3403336580-929929243-3446877537-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-10-06] (Google Inc.)
HKU\S-1-5-21-3403336580-929929243-3446877537-1000\...\Run: [ICQ] => C:\Program Files (x86)\ICQ7.6\ICQ.exe [127040 2011-10-10] (ICQ, LLC.)
Startup: C:\Users\Aldosek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Manager.lnk
ShortcutTarget: Bluetooth Manager.lnk -> C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\TEMP.Aldosek-TOSH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
SearchScopes: HKLM - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - {4BB8E517-6008-4295-A3B8-10D84BB3ED02} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {AC88EEE5-DAFC-4B8B-AA66-4F54D0CEC7EC} URL = http://rover.ebay.com/rover/1/710-71511 ... earchTerms}
SearchScopes: HKCU - {F01FC3D8-B18C-4692-A60E-3D5BA3F1F27B} URL = http://www.amazon.co.uk/gp/search?ie=UT ... nkCode=ur2
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
DPF: HKLM-x32 {672EE252-D813-4F5E-81BB-5DD163DD4FA5} https://www.mojedatovaschranka.cz/stati ... ?3,16,13,0
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @software602.cz/602XML Filler - C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR StartupUrls: "hxxp://www.google.com/"
CHR Extension: (YouTube) - C:\Users\Aldosek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-02-18]
CHR Extension: (Vyhledávání Google) - C:\Users\Aldosek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-02-18]
CHR Extension: (Peněženka Google) - C:\Users\Aldosek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-05]
CHR Extension: (Gmail) - C:\Users\Aldosek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-02-18]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 avgfws; C:\Program Files (x86)\AVG\AVG2013\avgfws.exe [1432080 2013-10-23] (AVG Technologies CZ, s.r.o.)
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.)
R2 GFNEXSrv; C:\Windows\System32\GFNEXSrv.exe [162824 2010-09-09] ()
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)

==================== Drivers (Whitelisted) ====================

R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [50296 2012-09-04] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [206648 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311608 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [240952 2014-04-15] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50464 2014-06-26] (AVG Technologies)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-10 17:53 - 2014-07-10 17:54 - 00018635 _____ () C:\Users\Aldosek\Desktop\FRST.txt
2014-07-08 23:46 - 2014-07-08 23:46 - 00000021 _____ () C:\folders.log
2014-07-08 23:46 - 2014-07-08 23:46 - 00000000 ____D () C:\zoek
2014-07-08 23:36 - 2014-07-08 23:36 - 00001303 _____ () C:\zoek-results.log
2014-07-08 23:34 - 2014-07-08 23:46 - 00002921 _____ () C:\runcheck.txt
2014-07-08 23:34 - 2014-07-08 23:34 - 00000000 ____D () C:\zoek_backup
2014-07-08 23:33 - 2014-07-08 23:33 - 01285120 _____ () C:\Users\Aldosek\Downloads\zoek.exe
2014-07-08 23:33 - 2014-07-08 23:33 - 01285120 _____ () C:\Users\Aldosek\Desktop\zoek.exe
2014-07-08 08:49 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-08 08:48 - 2014-07-08 08:51 - 00000000 ____D () C:\AdwCleaner
2014-07-08 08:21 - 2014-07-08 08:21 - 00010555 _____ () C:\Users\Aldosek\Desktop\JRT.txt
2014-07-08 08:12 - 2014-07-08 08:12 - 00000000 ____D () C:\Windows\ERUNT
2014-07-08 08:12 - 2014-07-08 08:11 - 01346519 _____ () C:\Users\Aldosek\Desktop\adwcleaner_3.214.exe
2014-07-08 08:11 - 2014-07-08 08:11 - 01346519 _____ () C:\Users\Aldosek\Downloads\adwcleaner_3.214.exe
2014-07-08 08:11 - 2014-07-08 08:11 - 01016261 _____ (Thisisu) C:\Users\Aldosek\Downloads\JRT.exe
2014-07-08 08:11 - 2014-07-08 08:11 - 01016261 _____ (Thisisu) C:\Users\Aldosek\Desktop\JRT.exe
2014-07-05 17:34 - 2014-07-05 17:34 - 00000000 ____D () C:\rsit
2014-07-05 17:34 - 2014-07-05 17:34 - 00000000 ____D () C:\Program Files\trend micro
2014-07-05 17:28 - 2014-07-10 17:53 - 00000000 ____D () C:\FRST
2014-07-05 17:27 - 2014-07-05 17:27 - 00112640 _____ (forum.viry.cz) C:\Users\Aldosek\Desktop\FRSTLauncher.exe
2014-07-05 17:25 - 2014-07-05 17:25 - 00112640 _____ (forum.viry.cz) C:\Users\Aldosek\Downloads\Nepotvrzeno 170969.crdownload
2014-07-05 17:24 - 2014-07-05 17:24 - 00000000 _____ () C:\Users\Aldosek\Downloads\FRSTLauncher.exe
2014-07-05 17:24 - 2014-07-05 17:23 - 02084352 _____ (Farbar) C:\Users\Aldosek\Desktop\FRST64.exe
2014-07-05 17:24 - 2014-07-05 17:21 - 01222144 _____ () C:\Users\Aldosek\Desktop\RSITx64.exe
2014-07-05 17:23 - 2014-07-05 17:23 - 02084352 _____ (Farbar) C:\Users\Aldosek\Downloads\FRST64.exe
2014-07-05 17:21 - 2014-07-05 17:21 - 01222144 _____ () C:\Users\Aldosek\Downloads\RSITx64.exe
2014-07-05 13:38 - 2014-07-05 13:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-05 13:38 - 2014-05-07 15:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-05 13:38 - 2014-05-07 14:59 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-05 13:38 - 2014-05-07 14:59 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-05 13:38 - 2014-05-07 14:58 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-05 13:36 - 2014-07-05 13:38 - 00005499 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_60-b19.log
2014-07-05 13:34 - 2014-07-05 13:35 - 00004608 ___SH () C:\Users\Aldosek\AppData\Roaming\Thumbs.db
2014-07-02 05:38 - 2014-07-02 05:42 - 00000000 ____D () C:\Users\TEMP.Aldosek-TOSH
2014-07-02 05:38 - 2012-05-04 21:51 - 00000000 ____D () C:\Users\TEMP.Aldosek-TOSH\AppData\Local\Microsoft Help
2014-07-02 05:38 - 2011-02-28 19:01 - 00000000 ____D () C:\Users\TEMP.Aldosek-TOSH\AppData\Roaming\Macromedia
2014-07-02 05:38 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\TEMP.Aldosek-TOSH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-02 05:38 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\TEMP.Aldosek-TOSH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-06-17 20:30 - 2014-06-17 20:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-06-12 18:27 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-12 18:27 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-12 18:27 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-12 18:27 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-12 18:27 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-12 18:27 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-12 18:27 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-12 18:27 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-12 18:27 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-12 18:27 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-12 18:27 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-12 18:27 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-12 18:27 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-12 18:27 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-12 18:27 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-12 18:27 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-12 18:27 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-12 18:27 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-12 18:27 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-12 18:27 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-12 18:27 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-12 18:27 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-12 18:27 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-12 18:27 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-12 18:27 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-12 18:27 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-12 18:27 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-12 18:27 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-12 18:27 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-12 18:27 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-12 18:27 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-12 18:27 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-12 18:27 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-12 18:27 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-12 18:27 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-12 18:27 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-12 18:27 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-12 18:27 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-12 18:27 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-12 18:27 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-12 18:27 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-12 18:27 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-12 18:27 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-12 18:27 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-12 18:27 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-12 18:27 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-12 18:27 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-12 18:27 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-12 18:27 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-12 18:27 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-12 18:27 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-12 18:27 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-12 18:27 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-12 18:27 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-12 18:27 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 18:27 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-12 18:27 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-12 18:27 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-12 18:27 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-12 18:27 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-12 18:27 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-12 18:27 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-12 18:27 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-12 18:27 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-12 18:27 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-06-12 18:27 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-12 18:26 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-12 18:26 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

==================== One Month Modified Files and Folders =======

2014-07-10 17:54 - 2014-07-10 17:53 - 00018635 _____ () C:\Users\Aldosek\Desktop\FRST.txt
2014-07-10 17:53 - 2014-07-05 17:28 - 00000000 ____D () C:\FRST
2014-07-10 17:30 - 2011-10-06 16:30 - 00000954 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-10 17:26 - 2011-10-21 19:06 - 00000000 ____D () C:\ProgramData\MFAData
2014-07-10 17:22 - 2013-02-18 13:28 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-10 14:02 - 2011-04-27 04:49 - 01374312 _____ () C:\Windows\WindowsUpdate.log
2014-07-10 13:30 - 2011-10-06 16:30 - 00000950 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-08 23:46 - 2014-07-08 23:46 - 00000021 _____ () C:\folders.log
2014-07-08 23:46 - 2014-07-08 23:46 - 00000000 ____D () C:\zoek
2014-07-08 23:46 - 2014-07-08 23:34 - 00002921 _____ () C:\runcheck.txt
2014-07-08 23:36 - 2014-07-08 23:36 - 00001303 _____ () C:\zoek-results.log
2014-07-08 23:34 - 2014-07-08 23:34 - 00000000 ____D () C:\zoek_backup
2014-07-08 23:33 - 2014-07-08 23:33 - 01285120 _____ () C:\Users\Aldosek\Downloads\zoek.exe
2014-07-08 23:33 - 2014-07-08 23:33 - 01285120 _____ () C:\Users\Aldosek\Desktop\zoek.exe
2014-07-08 20:00 - 2009-07-14 06:45 - 00025120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-08 20:00 - 2009-07-14 06:45 - 00025120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-08 19:57 - 2011-02-14 10:37 - 09191778 _____ () C:\Windows\system32\perfh005.dat
2014-07-08 19:57 - 2011-02-14 10:37 - 03136164 _____ () C:\Windows\system32\perfc005.dat
2014-07-08 19:57 - 2009-07-14 07:13 - 00006512 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-08 19:53 - 2013-06-04 08:57 - 00000350 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2014-07-08 19:53 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-08 19:53 - 2009-07-14 06:51 - 00102457 _____ () C:\Windows\setupact.log
2014-07-08 19:22 - 2013-02-18 13:28 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-08 19:22 - 2013-02-18 13:28 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-08 19:22 - 2011-10-06 16:30 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-08 08:53 - 2010-11-21 05:47 - 00195496 _____ () C:\Windows\PFRO.log
2014-07-08 08:51 - 2014-07-08 08:48 - 00000000 ____D () C:\AdwCleaner
2014-07-08 08:51 - 2011-09-28 16:55 - 00000000 ____D () C:\ProgramData\ICQ
2014-07-08 08:51 - 2011-09-19 11:33 - 00000000 ____D () C:\Users\Aldosek
2014-07-08 08:21 - 2014-07-08 08:21 - 00010555 _____ () C:\Users\Aldosek\Desktop\JRT.txt
2014-07-08 08:12 - 2014-07-08 08:12 - 00000000 ____D () C:\Windows\ERUNT
2014-07-08 08:11 - 2014-07-08 08:12 - 01346519 _____ () C:\Users\Aldosek\Desktop\adwcleaner_3.214.exe
2014-07-08 08:11 - 2014-07-08 08:11 - 01346519 _____ () C:\Users\Aldosek\Downloads\adwcleaner_3.214.exe
2014-07-08 08:11 - 2014-07-08 08:11 - 01016261 _____ (Thisisu) C:\Users\Aldosek\Downloads\JRT.exe
2014-07-08 08:11 - 2014-07-08 08:11 - 01016261 _____ (Thisisu) C:\Users\Aldosek\Desktop\JRT.exe
2014-07-05 18:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-07-05 18:17 - 2013-11-06 08:28 - 00000000 ____D () C:\Users\TEMP
2014-07-05 17:34 - 2014-07-05 17:34 - 00000000 ____D () C:\rsit
2014-07-05 17:34 - 2014-07-05 17:34 - 00000000 ____D () C:\Program Files\trend micro
2014-07-05 17:27 - 2014-07-05 17:27 - 00112640 _____ (forum.viry.cz) C:\Users\Aldosek\Desktop\FRSTLauncher.exe
2014-07-05 17:25 - 2014-07-05 17:25 - 00112640 _____ (forum.viry.cz) C:\Users\Aldosek\Downloads\Nepotvrzeno 170969.crdownload
2014-07-05 17:24 - 2014-07-05 17:24 - 00000000 _____ () C:\Users\Aldosek\Downloads\FRSTLauncher.exe
2014-07-05 17:23 - 2014-07-05 17:24 - 02084352 _____ (Farbar) C:\Users\Aldosek\Desktop\FRST64.exe
2014-07-05 17:23 - 2014-07-05 17:23 - 02084352 _____ (Farbar) C:\Users\Aldosek\Downloads\FRST64.exe
2014-07-05 17:21 - 2014-07-05 17:24 - 01222144 _____ () C:\Users\Aldosek\Desktop\RSITx64.exe
2014-07-05 17:21 - 2014-07-05 17:21 - 01222144 _____ () C:\Users\Aldosek\Downloads\RSITx64.exe
2014-07-05 13:43 - 2013-11-07 18:13 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-05 13:38 - 2014-07-05 13:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-05 13:38 - 2014-07-05 13:36 - 00005499 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_60-b19.log
2014-07-05 13:38 - 2013-11-07 18:13 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-05 13:35 - 2014-07-05 13:34 - 00004608 ___SH () C:\Users\Aldosek\AppData\Roaming\Thumbs.db
2014-07-02 05:42 - 2014-07-02 05:38 - 00000000 ____D () C:\Users\TEMP.Aldosek-TOSH
2014-07-01 19:25 - 2011-09-21 19:36 - 00000000 ____D () C:\Users\Aldosek\Documents\REKLAMA
2014-07-01 19:02 - 2011-09-21 19:37 - 00046786 _____ () C:\Users\Aldosek\Documents\doch_list.xlsx
2014-06-30 17:41 - 2013-12-08 14:23 - 00179712 ___SH () C:\Users\Aldosek\Downloads\Thumbs.db
2014-06-30 16:31 - 2014-01-25 17:02 - 00000000 ____D () C:\Users\Aldosek\Documents\FAKTURY_2014_SRO
2014-06-29 16:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-28 10:42 - 2011-09-21 19:25 - 00000000 ____D () C:\Users\Aldosek\Documents\ZET_EVELINKA
2014-06-26 13:25 - 2011-10-06 16:30 - 00003950 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-26 13:25 - 2011-10-06 16:30 - 00003698 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-26 12:53 - 2014-02-18 10:02 - 00050464 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2014-06-17 20:30 - 2014-06-17 20:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-06-13 07:41 - 2013-07-19 11:17 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-13 07:38 - 2012-04-17 12:26 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-13 07:36 - 2012-01-02 22:39 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-13 07:33 - 2014-05-06 21:42 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-11 05:26 - 2009-07-14 07:08 - 00032584 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

Some content of TEMP:
====================
C:\Users\Aldosek\AppData\Local\Temp\7za.exe
C:\Users\Aldosek\AppData\Local\Temp\APNStub.exe
C:\Users\Aldosek\AppData\Local\Temp\avguidx.dll
C:\Users\Aldosek\AppData\Local\Temp\CommonInstaller.exe
C:\Users\Aldosek\AppData\Local\Temp\GoogleToolbarInstaller_en32_signed.exe
C:\Users\Aldosek\AppData\Local\Temp\hijackthis.exe
C:\Users\Aldosek\AppData\Local\Temp\iGearedHelper.dll
C:\Users\Aldosek\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Aldosek\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
C:\Users\Aldosek\AppData\Local\Temp\MachineIdCreator.exe
C:\Users\Aldosek\AppData\Local\Temp\MSNE235.exe
C:\Users\Aldosek\AppData\Local\Temp\NirCmd.exe
C:\Users\Aldosek\AppData\Local\Temp\oi_{32AE8F52-32C8-4323-9CAA-06565B05BDEA}.exe
C:\Users\Aldosek\AppData\Local\Temp\ose00000.exe
C:\Users\Aldosek\AppData\Local\Temp\PEVZ.EXE
C:\Users\Aldosek\AppData\Local\Temp\Quarantine.exe
C:\Users\Aldosek\AppData\Local\Temp\remove.exe
C:\Users\Aldosek\AppData\Local\Temp\sed.exe
C:\Users\Aldosek\AppData\Local\Temp\shortcut.exe
C:\Users\Aldosek\AppData\Local\Temp\swreg.exe
C:\Users\Aldosek\AppData\Local\Temp\swxcacls.exe
C:\Users\Aldosek\AppData\Local\Temp\ToolbarInstaller.exe
C:\Users\Aldosek\AppData\Local\Temp\wget.exe
C:\Users\Aldosek\AppData\Local\Temp\zoek-delete.exe
C:\Users\Aldosek\AppData\Local\Temp\~convert2472944202562162929.exe
C:\Users\Aldosek\AppData\Local\Temp\~convert4902116676766606364.exe
C:\Users\Aldosek\AppData\Local\Temp\~convert5177044589388683680.exe
C:\Users\Aldosek\AppData\Local\Temp\~convert653389849776678337.exe
C:\Users\Aldosek\AppData\Local\Temp\~convert705155003513883216.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{7A00223A-101B-4A16-ADD9-3F952371D389}.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: AVG Internet Security Business Edition (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security Business Edition (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
FW: AVG Internet Security Business Edition (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Aldosek\Desktop" je 279 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Nahoru
greatone
Návštěvník
Návštěvník
Příspěvky: 149
Registrován: 14 Kvě 2005 17:02
Místo/Bydliště: Brno

Re: Zpomalený PC

#17 Příspěvek od greatone »

Ještě se chci zeptat co s tim zoekem ? NTB mě pořád jede.... a ten zoek od té doby neskončil.... Když ho vypnu křížkem v pravo nahoře tak se nevypne. Ani ve správci úloh nejde ukončit... Můžu zkusit restartovat pc, nevadí to že ten program takto natvrdo ukončím ?
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Zpomalený PC

#18 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKU\.DEFAULT\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [845176 2011-02-18] (TOSHIBA)
HKU\S-1-5-19\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [845176 2011-02-18] (TOSHIBA)
HKU\S-1-5-20\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [845176 2011-02-18] (TOSHIBA)
HKU\S-1-5-21-3403336580-929929243-3446877537-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-10-06] (Google Inc.)
HKU\S-1-5-21-3403336580-929929243-3446877537-1000\...\Run: [ICQ] => C:\Program Files (x86)\ICQ7.6\ICQ.exe [127040 2011-10-10] (ICQ, LLC.)

SearchScopes: HKLM - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - {4BB8E517-6008-4295-A3B8-10D84BB3ED02} URL = 
SearchScopes: HKCU - {AC88EEE5-DAFC-4B8B-AA66-4F54D0CEC7EC} URL = http://rover.ebay.com/rover/1/710-71511 ... 4?satitle={searchTerms}
SearchScopes: HKCU - {F01FC3D8-B18C-4692-A60E-3D5BA3F1F27B} URL = http://www.amazon.co.uk/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibauk-win7-ie-search-21&index=blended&linkCode=ur2
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

2014-07-10 17:53 - 2014-07-10 17:54 - 00018635 _____ () C:\Users\Aldosek\Desktop\FRST.txt
2014-07-08 23:46 - 2014-07-08 23:46 - 00000021 _____ () C:\folders.log
2014-07-08 23:46 - 2014-07-08 23:46 - 00000000 ____D () C:\zoek
2014-07-08 23:36 - 2014-07-08 23:36 - 00001303 _____ () C:\zoek-results.log
2014-07-08 23:34 - 2014-07-08 23:46 - 00002921 _____ () C:\runcheck.txt
2014-07-08 23:34 - 2014-07-08 23:34 - 00000000 ____D () C:\zoek_backup
2014-07-08 23:33 - 2014-07-08 23:33 - 01285120 _____ () C:\Users\Aldosek\Downloads\zoek.exe
2014-07-08 23:33 - 2014-07-08 23:33 - 01285120 _____ () C:\Users\Aldosek\Desktop\zoek.exe
2014-07-08 08:49 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-08 08:48 - 2014-07-08 08:51 - 00000000 ____D () C:\AdwCleaner
2014-07-08 08:21 - 2014-07-08 08:21 - 00010555 _____ () C:\Users\Aldosek\Desktop\JRT.txt
2014-07-08 08:12 - 2014-07-08 08:12 - 00000000 ____D () C:\Windows\ERUNT
2014-07-08 08:12 - 2014-07-08 08:11 - 01346519 _____ () C:\Users\Aldosek\Desktop\adwcleaner_3.214.exe
2014-07-08 08:11 - 2014-07-08 08:11 - 01346519 _____ () C:\Users\Aldosek\Downloads\adwcleaner_3.214.exe
2014-07-08 08:11 - 2014-07-08 08:11 - 01016261 _____ (Thisisu) C:\Users\Aldosek\Downloads\JRT.exe
2014-07-08 08:11 - 2014-07-08 08:11 - 01016261 _____ (Thisisu) C:\Users\Aldosek\Desktop\JRT.exe
2014-07-05 17:34 - 2014-07-05 17:34 - 00000000 ____D () C:\rsit
2014-07-05 17:34 - 2014-07-05 17:34 - 00000000 ____D () C:\Program Files\trend micro
2014-07-05 17:27 - 2014-07-05 17:27 - 00112640 _____ (forum.viry.cz) C:\Users\Aldosek\Desktop\FRSTLauncher.exe
2014-07-05 17:25 - 2014-07-05 17:25 - 00112640 _____ (forum.viry.cz) C:\Users\Aldosek\Downloads\Nepotvrzeno 170969.crdownload
2014-07-05 17:24 - 2014-07-05 17:24 - 00000000 _____ () C:\Users\Aldosek\Downloads\FRSTLauncher.exe
2014-07-05 17:24 - 2014-07-05 17:21 - 01222144 _____ () C:\Users\Aldosek\Desktop\RSITx64.exe
2014-07-05 17:21 - 2014-07-05 17:21 - 01222144 _____ () C:\Users\Aldosek\Downloads\RSITx64.exe
C:\Users\Aldosek\AppData\Local\Temp\7za.exe
C:\Users\Aldosek\AppData\Local\Temp\APNStub.exe
C:\Users\Aldosek\AppData\Local\Temp\avguidx.dll
C:\Users\Aldosek\AppData\Local\Temp\CommonInstaller.exe
C:\Users\Aldosek\AppData\Local\Temp\GoogleToolbarInstaller_en32_signed.exe
C:\Users\Aldosek\AppData\Local\Temp\hijackthis.exe
C:\Users\Aldosek\AppData\Local\Temp\iGearedHelper.dll
C:\Users\Aldosek\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Aldosek\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
C:\Users\Aldosek\AppData\Local\Temp\MachineIdCreator.exe
C:\Users\Aldosek\AppData\Local\Temp\MSNE235.exe
C:\Users\Aldosek\AppData\Local\Temp\NirCmd.exe
C:\Users\Aldosek\AppData\Local\Temp\oi_{32AE8F52-32C8-4323-9CAA-06565B05BDEA}.exe
C:\Users\Aldosek\AppData\Local\Temp\ose00000.exe
C:\Users\Aldosek\AppData\Local\Temp\PEVZ.EXE
C:\Users\Aldosek\AppData\Local\Temp\Quarantine.exe
C:\Users\Aldosek\AppData\Local\Temp\remove.exe
C:\Users\Aldosek\AppData\Local\Temp\sed.exe
C:\Users\Aldosek\AppData\Local\Temp\shortcut.exe
C:\Users\Aldosek\AppData\Local\Temp\swreg.exe
C:\Users\Aldosek\AppData\Local\Temp\swxcacls.exe
C:\Users\Aldosek\AppData\Local\Temp\ToolbarInstaller.exe
C:\Users\Aldosek\AppData\Local\Temp\wget.exe
C:\Users\Aldosek\AppData\Local\Temp\zoek-delete.exe
C:\Users\Aldosek\AppData\Local\Temp\~convert2472944202562162929.exe
C:\Users\Aldosek\AppData\Local\Temp\~convert4902116676766606364.exe
C:\Users\Aldosek\AppData\Local\Temp\~convert5177044589388683680.exe
C:\Users\Aldosek\AppData\Local\Temp\~convert653389849776678337.exe
C:\Users\Aldosek\AppData\Local\Temp\~convert705155003513883216.exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{7A00223A-101B-4A16-ADD9-3F952371D389}.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Hosts:
Reboot:
End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
greatone
Návštěvník
Návštěvník
Příspěvky: 149
Registrován: 14 Kvě 2005 17:02
Místo/Bydliště: Brno

Re: Zpomalený PC

#19 Příspěvek od greatone »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-07-2014
Ran by Aldosek at 2014-07-10 22:38:36 Run:1
Running from C:\Users\Aldosek\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKU\.DEFAULT\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [845176 2011-02-18] (TOSHIBA)
HKU\S-1-5-19\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [845176 2011-02-18] (TOSHIBA)
HKU\S-1-5-20\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [845176 2011-02-18] (TOSHIBA)
HKU\S-1-5-21-3403336580-929929243-3446877537-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-10-06] (Google Inc.)
HKU\S-1-5-21-3403336580-929929243-3446877537-1000\...\Run: [ICQ] => C:\Program Files (x86)\ICQ7.6\ICQ.exe [127040 2011-10-10] (ICQ, LLC.)

SearchScopes: HKLM - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - {4BB8E517-6008-4295-A3B8-10D84BB3ED02} URL =
SearchScopes: HKCU - {AC88EEE5-DAFC-4B8B-AA66-4F54D0CEC7EC} URL = http://rover.ebay.com/rover/1/710-71511 ... 4?satitle={searchTerms}
SearchScopes: HKCU - {F01FC3D8-B18C-4692-A60E-3D5BA3F1F27B} URL = http://www.amazon.co.uk/gp/search?ie=UT ... nkCode=ur2
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

2014-07-10 17:53 - 2014-07-10 17:54 - 00018635 _____ () C:\Users\Aldosek\Desktop\FRST.txt
2014-07-08 23:46 - 2014-07-08 23:46 - 00000021 _____ () C:\folders.log
2014-07-08 23:46 - 2014-07-08 23:46 - 00000000 ____D () C:\zoek
2014-07-08 23:36 - 2014-07-08 23:36 - 00001303 _____ () C:\zoek-results.log
2014-07-08 23:34 - 2014-07-08 23:46 - 00002921 _____ () C:\runcheck.txt
2014-07-08 23:34 - 2014-07-08 23:34 - 00000000 ____D () C:\zoek_backup
2014-07-08 23:33 - 2014-07-08 23:33 - 01285120 _____ () C:\Users\Aldosek\Downloads\zoek.exe
2014-07-08 23:33 - 2014-07-08 23:33 - 01285120 _____ () C:\Users\Aldosek\Desktop\zoek.exe
2014-07-08 08:49 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-08 08:48 - 2014-07-08 08:51 - 00000000 ____D () C:\AdwCleaner
2014-07-08 08:21 - 2014-07-08 08:21 - 00010555 _____ () C:\Users\Aldosek\Desktop\JRT.txt
2014-07-08 08:12 - 2014-07-08 08:12 - 00000000 ____D () C:\Windows\ERUNT
2014-07-08 08:12 - 2014-07-08 08:11 - 01346519 _____ () C:\Users\Aldosek\Desktop\adwcleaner_3.214.exe
2014-07-08 08:11 - 2014-07-08 08:11 - 01346519 _____ () C:\Users\Aldosek\Downloads\adwcleaner_3.214.exe
2014-07-08 08:11 - 2014-07-08 08:11 - 01016261 _____ (Thisisu) C:\Users\Aldosek\Downloads\JRT.exe
2014-07-08 08:11 - 2014-07-08 08:11 - 01016261 _____ (Thisisu) C:\Users\Aldosek\Desktop\JRT.exe
2014-07-05 17:34 - 2014-07-05 17:34 - 00000000 ____D () C:\rsit
2014-07-05 17:34 - 2014-07-05 17:34 - 00000000 ____D () C:\Program Files\trend micro
2014-07-05 17:27 - 2014-07-05 17:27 - 00112640 _____ (forum.viry.cz) C:\Users\Aldosek\Desktop\FRSTLauncher.exe
2014-07-05 17:25 - 2014-07-05 17:25 - 00112640 _____ (forum.viry.cz) C:\Users\Aldosek\Downloads\Nepotvrzeno 170969.crdownload
2014-07-05 17:24 - 2014-07-05 17:24 - 00000000 _____ () C:\Users\Aldosek\Downloads\FRSTLauncher.exe
2014-07-05 17:24 - 2014-07-05 17:21 - 01222144 _____ () C:\Users\Aldosek\Desktop\RSITx64.exe
2014-07-05 17:21 - 2014-07-05 17:21 - 01222144 _____ () C:\Users\Aldosek\Downloads\RSITx64.exe
C:\Users\Aldosek\AppData\Local\Temp\7za.exe
C:\Users\Aldosek\AppData\Local\Temp\APNStub.exe
C:\Users\Aldosek\AppData\Local\Temp\avguidx.dll
C:\Users\Aldosek\AppData\Local\Temp\CommonInstaller.exe
C:\Users\Aldosek\AppData\Local\Temp\GoogleToolbarInstaller_en32_signed.exe
C:\Users\Aldosek\AppData\Local\Temp\hijackthis.exe
C:\Users\Aldosek\AppData\Local\Temp\iGearedHelper.dll
C:\Users\Aldosek\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Aldosek\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
C:\Users\Aldosek\AppData\Local\Temp\MachineIdCreator.exe
C:\Users\Aldosek\AppData\Local\Temp\MSNE235.exe
C:\Users\Aldosek\AppData\Local\Temp\NirCmd.exe
C:\Users\Aldosek\AppData\Local\Temp\oi_{32AE8F52-32C8-4323-9CAA-06565B05BDEA}.exe
C:\Users\Aldosek\AppData\Local\Temp\ose00000.exe
C:\Users\Aldosek\AppData\Local\Temp\PEVZ.EXE
C:\Users\Aldosek\AppData\Local\Temp\Quarantine.exe
C:\Users\Aldosek\AppData\Local\Temp\remove.exe
C:\Users\Aldosek\AppData\Local\Temp\sed.exe
C:\Users\Aldosek\AppData\Local\Temp\shortcut.exe
C:\Users\Aldosek\AppData\Local\Temp\swreg.exe
C:\Users\Aldosek\AppData\Local\Temp\swxcacls.exe
C:\Users\Aldosek\AppData\Local\Temp\ToolbarInstaller.exe
C:\Users\Aldosek\AppData\Local\Temp\wget.exe
C:\Users\Aldosek\AppData\Local\Temp\zoek-delete.exe
C:\Users\Aldosek\AppData\Local\Temp\~convert2472944202562162929.exe
C:\Users\Aldosek\AppData\Local\Temp\~convert4902116676766606364.exe
C:\Users\Aldosek\AppData\Local\Temp\~convert5177044589388683680.exe
C:\Users\Aldosek\AppData\Local\Temp\~convert653389849776678337.exe
C:\Users\Aldosek\AppData\Local\Temp\~convert705155003513883216.exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{7A00223A-101B-4A16-ADD9-3F952371D389}.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Hosts:
Reboot:
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\EEventManager => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run\\TOPI.EXE => value deleted successfully.
HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run\\TOPI.EXE => value deleted successfully.
HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run\\TOPI.EXE => value deleted successfully.
HKU\S-1-5-21-3403336580-929929243-3446877537-1000\Software\Microsoft\Windows\CurrentVersion\Run\\swg => value deleted successfully.
HKU\S-1-5-21-3403336580-929929243-3446877537-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ICQ => value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
'HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}' => Key deleted successfully.
'HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}'=> Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{4BB8E517-6008-4295-A3B8-10D84BB3ED02}' => Key deleted successfully.
'HKCR\CLSID\{4BB8E517-6008-4295-A3B8-10D84BB3ED02}'=> Key not found.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AC88EEE5-DAFC-4B8B-AA66-4F54D0CEC7EC}' => Key deleted successfully.
'HKCR\CLSID\{AC88EEE5-DAFC-4B8B-AA66-4F54D0CEC7EC}'=> Key not found.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F01FC3D8-B18C-4692-A60E-3D5BA3F1F27B}' => Key deleted successfully.
'HKCR\CLSID\{F01FC3D8-B18C-4692-A60E-3D5BA3F1F27B}'=> Key not found.
'HKCR\PROTOCOLS\Handler\skype-ie-addon-data' => Key deleted successfully.
'HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}'=> Key not found.
'HKLM\SOFTWARE\Policies\Google' => Key deleted successfully.
C:\Users\Aldosek\Desktop\FRST.txt => Moved successfully.
C:\folders.log => Moved successfully.
C:\zoek => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\runcheck.txt => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Aldosek\Downloads\zoek.exe => Moved successfully.
C:\Users\Aldosek\Desktop\zoek.exe => Moved successfully.
C:\Windows\SysWOW64\sqlite3.dll => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Aldosek\Desktop\JRT.txt => Moved successfully.
C:\Windows\ERUNT => Moved successfully.
C:\Users\Aldosek\Desktop\adwcleaner_3.214.exe => Moved successfully.
C:\Users\Aldosek\Downloads\adwcleaner_3.214.exe => Moved successfully.
C:\Users\Aldosek\Downloads\JRT.exe => Moved successfully.
C:\Users\Aldosek\Desktop\JRT.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
"C:\Users\Aldosek\Desktop\FRSTLauncher.exe" => File/Directory not found.
C:\Users\Aldosek\Downloads\Nepotvrzeno 170969.crdownload => Moved successfully.
C:\Users\Aldosek\Downloads\FRSTLauncher.exe => Moved successfully.
C:\Users\Aldosek\Desktop\RSITx64.exe => Moved successfully.
C:\Users\Aldosek\Downloads\RSITx64.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\7za.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\APNStub.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\avguidx.dll => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\CommonInstaller.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\GoogleToolbarInstaller_en32_signed.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\hijackthis.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\iGearedHelper.dll => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\MachineIdCreator.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\MSNE235.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\NirCmd.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\oi_{32AE8F52-32C8-4323-9CAA-06565B05BDEA}.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\ose00000.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\PEVZ.EXE => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\remove.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\sed.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\shortcut.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\swreg.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\swxcacls.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\ToolbarInstaller.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\wget.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\zoek-delete.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\~convert2472944202562162929.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\~convert4902116676766606364.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\~convert5177044589388683680.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\~convert653389849776678337.exe => Moved successfully.
C:\Users\Aldosek\AppData\Local\Temp\~convert705155003513883216.exe => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.


The system needed a reboot.

==== End of Fixlog ====
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Zpomalený PC

#20 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
greatone
Návštěvník
Návštěvník
Příspěvky: 149
Registrován: 14 Kvě 2005 17:02
Místo/Bydliště: Brno

Re: Zpomalený PC

#21 Příspěvek od greatone »

Dekuji moc.
V tuhle chvilu je tedy banka bezpecna, co se tam zanese casem uz samozrejme nepocitam .-)
Pokud uz reknete ze je cisto, dotazy nebudou. Mam vse hotove.
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Zpomalený PC

#22 Příspěvek od vyosek »

Nemate zac, rad jsem pomohl :worship: Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat :lock:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Zamčeno

Vrátit se na „Řešení problémů, logy“