vskakujicí hlášky AVAST

Zpráva

muf98a · #1 Příspěvek od **muf98a** » 02 srp 2014 19:31

Ahoj
Mam prosbu. Od jisté doby mě po zapnutí prohlížeče vyskakují hlášky od AVASTU na zablokované stránky. Že se počítač zkouší připojit na nebezpečné stránky (bdalakafiles.com, gethexnow.com, appsarehere.info atd)
Zde přikládám lok z RIST

Děkuji za radu
Muf
Logfile of random's system information tool 1.10 (written by random/random)
Run by EB at 2014-08-02 20:23:44
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 602 GB (84%) free of 715 GB
Total RAM: 2998 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:23:55, on 2.8.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17207)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\EB.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Epson Stylus SX510W(Síť)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFIE.EXE /FU "C:\Windows\TEMP\E_SD23C.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: RtVOsdService Installer (RtVOsdService) - Realtek Semiconductor Corp. - C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8937 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Windows\System32\spool\drivers\x64\3\E_IATIFIE.EXE" /FU "C:\Windows\TEMP\E_SD23C.tmp" /EF "HKCU"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe"
"C:\Program Files\Realtek\RtVOsd\RtVOsd.exe"
C:\Windows\System32\svchost.exe -k secsvcs
/QuitInfo:00000000000007C8;00000000000003DC;
"C:\Windows\system32\wbengine.exe"
C:\Windows\System32\vds.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2868.0.990333611\422464605" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,15 --disable-accelerated-video-decode --gpu-vendor-id=0x1002 --gpu-device-id=0x68e4 --gpu-driver-vendor="ATI Technologies Inc." --gpu-driver-version=8.771.1.4000 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/ML Kodachrome dev/EnhancedBookmarks/Default/ExtensionInstallVerification/None/GoogleNow/Enable/Prerender/PrerenderMulti/PrerenderLocalPredictorSpec/cd=3:LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_50/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/WindowsLogoffRace/Control/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --enable-software-compositing --channel="2868.1.353236425\979388915" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Disabled/BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/ML Kodachrome dev/EnhancedBookmarks/Default/ExtensionInstallVerification/None/GoogleNow/Enable/Prerender/PrerenderMulti/PrerenderLocalPredictorSpec/cd=3:LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_50/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/WindowsLogoffRace/Control/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --enable-software-compositing --channel="2868.2.2043828399\1808630482" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Disabled/BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/ML Kodachrome dev/EnhancedBookmarks/Default/ExtensionInstallVerification/None/GoogleNow/Enable/Prerender/PrerenderMulti/PrerenderLocalPredictorSpec/cd=3:LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_50/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/WindowsLogoffRace/Control/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --enable-software-compositing --channel="2868.3.1236205538\1565705378" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Disabled/BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/ML Kodachrome dev/EnhancedBookmarks/Default/ExtensionInstallVerification/None/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/Prerender/PrerenderMulti/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/cd=3:LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_50/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/WindowsLogoffRace/Control/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --enable-software-compositing --channel="2868.8.1388772778\919825769" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Disabled/BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/ML Kodachrome dev/EnhancedBookmarks/Default/ExtensionInstallVerification/None/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/Prerender/PrerenderMulti/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/cd=3:LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_50/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/WindowsLogoffRace/Control/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --enable-software-compositing --channel="2868.9.943837975\265123288" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutoReloadExperiment/Disabled/BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/ML Kodachrome dev/EnhancedBookmarks/Default/ExtensionInstallVerification/None/FlashHardwareVideoDecode/HwVideo/GoogleNow/Enable/Prerender/PrerenderMulti/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/cd=3:LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_50/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/WindowsLogoffRace/Control/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --enable-software-compositing --channel="2868.11.1133443590\1557755513" /prefetch:673131151
C:\Windows\system32\sppsvc.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
"C:\Users\EB\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\AutoKMS.job - C:\Windows\AutoKMS\AutoKMS.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-07-13 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-13 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2010-09-21 6489704]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-14 2837288]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Epson Stylus SX510W(Síť)"=C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFIE.EXE [2008-11-20 223232]
"Sony PC Companion"=C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [2014-05-23 466656]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-01-26 98304]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-04-13 284696]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-02 4085896]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-08-02 20:23:44 ----D---- C:\rsit
2014-08-02 20:23:44 ----D---- C:\Program Files\trend micro
2014-07-14 10:29:41 ----D---- C:\Users\EB\AppData\Roaming\DropboxMaster
2014-07-14 10:27:50 ----D---- C:\Users\EB\AppData\Roaming\Dropbox
2014-07-14 09:11:22 ----A---- C:\Windows\system32\drivers\ggsomc.sys
2014-07-14 09:11:21 ----A---- C:\Windows\system32\drivers\ggflt.sys
2014-07-14 09:10:40 ----D---- C:\ProgramData\Sony Mobile
2014-07-14 09:10:40 ----D---- C:\Program Files (x86)\Sony Mobile
2014-07-14 09:06:18 ----D---- C:\ProgramData\Sony
2014-07-14 09:06:18 ----D---- C:\Program Files (x86)\Sony
2014-07-13 16:44:00 ----A---- C:\Windows\avastSS.scr
2014-07-13 16:43:17 ----D---- C:\Users\EB\AppData\Roaming\WinRAR
2014-07-13 11:09:40 ----AD---- C:\Kaspersky Rescue Disk 10.0
2014-07-09 16:11:29 ----A---- C:\Windows\system32\aepdu.dll
2014-07-09 16:11:29 ----A---- C:\Windows\system32\aeinv.dll
2014-07-09 16:11:21 ----A---- C:\Windows\system32\win32k.sys
2014-07-09 16:11:20 ----A---- C:\Windows\SYSWOW64\osk.exe
2014-07-09 16:11:20 ----A---- C:\Windows\system32\osk.exe
2014-07-09 16:11:19 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-07-09 16:11:19 ----A---- C:\Windows\system32\qedit.dll
2014-07-09 16:11:19 ----A---- C:\Windows\system32\drivers\afd.sys
2014-07-09 16:11:17 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-07-09 16:11:17 ----A---- C:\Windows\system32\schannel.dll
2014-07-09 16:11:16 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-07-09 16:11:16 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-07-09 16:11:16 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-07-09 16:11:16 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-07-09 16:11:16 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-07-09 16:11:16 ----A---- C:\Windows\system32\wdigest.dll
2014-07-09 16:11:16 ----A---- C:\Windows\system32\TSpkg.dll
2014-07-09 16:11:16 ----A---- C:\Windows\system32\ncrypt.dll
2014-07-09 16:11:16 ----A---- C:\Windows\system32\msv1_0.dll
2014-07-09 16:11:16 ----A---- C:\Windows\system32\kerberos.dll
2014-07-09 16:11:15 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-07-09 16:11:15 ----A---- C:\Windows\system32\credssp.dll
2014-07-09 16:11:11 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-07-09 16:11:11 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-07-09 16:11:11 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-07-09 16:11:11 ----A---- C:\Windows\system32\iernonce.dll
2014-07-09 16:11:10 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-07-09 16:11:10 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-07-09 16:11:10 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-07-09 16:11:09 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-07-09 16:11:09 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-07-09 16:11:09 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-07-09 16:11:09 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 16:11:09 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-07-09 16:11:09 ----A---- C:\Windows\system32\iedkcs32.dll
2014-07-09 16:11:08 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-07-09 16:11:07 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-07-09 16:11:07 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-07-09 16:11:07 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-07-09 16:11:07 ----A---- C:\Windows\system32\urlmon.dll
2014-07-09 16:11:07 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 16:11:07 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-07-09 16:11:06 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-07-09 16:11:06 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-07-09 16:11:06 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-07-09 16:11:06 ----A---- C:\Windows\system32\msfeeds.dll
2014-07-09 16:11:06 ----A---- C:\Windows\system32\dxtmsft.dll
2014-07-09 16:11:05 ----A---- C:\Windows\system32\iesetup.dll
2014-07-09 16:11:05 ----A---- C:\Windows\system32\iertutil.dll
2014-07-09 16:11:05 ----A---- C:\Windows\system32\ie4uinit.exe
2014-07-09 16:11:04 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-07-09 16:11:04 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-07-09 16:11:04 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-07-09 16:11:03 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-07-09 16:11:03 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-07-09 16:11:03 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-07-09 16:11:03 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-07-09 16:11:03 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-07-09 16:11:03 ----A---- C:\Windows\system32\jsproxy.dll
2014-07-09 16:11:02 ----A---- C:\Windows\system32\ieui.dll
2014-07-09 16:11:02 ----A---- C:\Windows\system32\ieframe.dll
2014-07-09 16:11:02 ----A---- C:\Windows\system32\dxtrans.dll
2014-07-09 16:11:01 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-07-09 16:11:01 ----A---- C:\Windows\system32\mshtmled.dll
2014-07-09 16:11:01 ----A---- C:\Windows\system32\jscript9diag.dll
2014-07-09 16:11:01 ----A---- C:\Windows\system32\jscript9.dll
2014-07-09 16:11:01 ----A---- C:\Windows\system32\ieUnatt.exe
2014-07-09 16:11:00 ----A---- C:\Windows\system32\wininet.dll
2014-07-09 16:11:00 ----A---- C:\Windows\system32\vbscript.dll
2014-07-09 16:11:00 ----A---- C:\Windows\system32\ieapfltr.dll
2014-07-09 16:10:59 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 16:10:59 ----A---- C:\Windows\system32\msrating.dll
2014-07-09 16:10:59 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-07-09 16:10:58 ----A---- C:\Windows\system32\mshtml.dll
2014-07-09 16:10:16 ----A---- C:\Windows\system32\lsasrv.dll
2014-07-09 16:10:15 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-07-09 16:10:15 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-07-07 18:10:17 ----D---- C:\ProgramData\Adblocker
2014-07-07 18:10:17 ----D---- C:\Program Files (x86)\Adblocker
2014-07-07 18:10:02 ----D---- C:\ProgramData\VaudiX
2014-07-07 18:10:02 ----D---- C:\Program Files (x86)\VaudiX
2014-07-07 18:09:39 ----D---- C:\ProgramData\d47a9fa6125aa45e
2014-07-07 18:09:02 ----D---- C:\ProgramData\InstallMate

======List of files/folders modified in the last 1 month======

2014-08-02 20:23:46 ----D---- C:\Windows\Temp
2014-08-02 20:23:44 ----D---- C:\Program Files
2014-08-02 20:21:05 ----D---- C:\Windows\system32\config
2014-08-02 20:15:31 ----SHD---- C:\System Volume Information
2014-08-02 20:15:31 ----D---- C:\Windows\Logs
2014-08-02 20:15:26 ----D---- C:\Windows\inf
2014-08-02 20:15:26 ----D---- C:\Windows\debug
2014-08-02 20:15:26 ----D---- C:\Windows
2014-08-02 20:08:54 ----D---- C:\Windows\system32\Tasks
2014-08-02 20:08:53 ----D---- C:\Windows\Tasks
2014-08-02 19:08:34 ----D---- C:\Windows\system32\wdi
2014-08-02 16:51:29 ----D---- C:\Windows\system32\catroot2
2014-08-02 16:51:28 ----D---- C:\Windows\system32\DriverStore
2014-08-02 16:51:28 ----D---- C:\Windows\system32\catroot
2014-08-02 16:51:24 ----D---- C:\Windows\system32\drivers
2014-07-24 13:35:41 ----D---- C:\Windows\System32
2014-07-24 13:35:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-07-19 19:02:40 ----D---- C:\Users\EB\AppData\Roaming\vlc
2014-07-14 10:09:35 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-07-14 09:10:40 ----RD---- C:\Program Files (x86)
2014-07-14 09:10:40 ----HD---- C:\ProgramData
2014-07-14 09:04:12 ----D---- C:\Windows\system32\drivers\UMDF
2014-07-13 16:44:00 ----A---- C:\Windows\system32\aswBoot.exe
2014-07-11 12:34:04 ----SD---- C:\Users\EB\AppData\Roaming\Microsoft
2014-07-10 09:46:57 ----D---- C:\Windows\winsxs
2014-07-10 09:45:29 ----SD---- C:\Windows\system32\CompatTel
2014-07-10 09:45:29 ----D---- C:\Program Files\Windows Journal
2014-07-10 09:45:28 ----D---- C:\Windows\SYSWOW64\Dism
2014-07-10 09:45:28 ----D---- C:\Windows\system32\Dism
2014-07-10 09:45:26 ----D---- C:\Windows\SysWOW64
2014-07-10 09:45:26 ----D---- C:\Windows\ehome
2014-07-10 09:45:25 ----D---- C:\Windows\system32\cs-CZ
2014-07-10 09:45:24 ----D---- C:\Windows\SYSWOW64\en-US
2014-07-10 09:45:24 ----D---- C:\Program Files\Internet Explorer
2014-07-10 09:45:23 ----D---- C:\Windows\system32\en-US
2014-07-10 09:45:20 ----D---- C:\Program Files (x86)\Internet Explorer
2014-07-09 17:44:56 ----SHD---- C:\Windows\Installer
2014-07-09 17:44:55 ----D---- C:\ProgramData\Microsoft Help
2014-07-09 17:42:59 ----D---- C:\Windows\system32\MRT
2014-07-09 17:41:15 ----A---- C:\Windows\system32\MRT.exe
2014-07-09 17:39:13 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-07-07 18:09:39 ----HD---- C:\Windows\system32\GroupPolicy
2014-07-07 18:09:39 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2014-07-07 18:09:37 ----RD---- C:\Users
2014-07-07 18:09:37 ----D---- C:\Program Files (x86)\Google

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-07-13 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-07-13 224896]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-04-13 540696]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-07-13 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-07-13 1041168]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-07-13 427360]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-07-13 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-07-13 79184]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-07-13 92008]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-01-26 7767552]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-01-26 279040]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2010-11-16 115216]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-09-21 2494056]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2012-12-06 2350176]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-10-14 396848]
S3 ggflt;SOMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2014-07-14 16088]
S3 ggsomc;SOMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsomc.sys [2014-07-14 30424]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-05-07 245792]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-05-08 65432]
R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-17 98208]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-01-26 203264]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-13 50344]
R2 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [2006-12-19 94208]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]
R2 RtVOsdService;RtVOsdService Installer; C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe [2010-06-24 315392]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09 262320]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-06-19 111616]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-06-22 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 02 srp 2014 19:51

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

Ulozte nejlepe na plochu
Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
Probehne vytvoreni zalohy a nasledne prohledavani
Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

muf98a · #3 Příspěvek od **muf98a** » 03 srp 2014 08:32

Zdravim
Tady jdou požadované logy.

Jen jedna věcí.
Po kontrole adwcleaner se po restartu notebook ještě 3x restartoval. pak proběhla kontrola disku - bez závad.
Pak notebook nastartoval. Teď když zapnu|googlechome, tak už žádné hlášky nevyskakují a zdá de být vše OK.

Dík za rady
Muf

Junkware Removal Tool log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by EB on ne 03.08.2014 at 9:11:04,92
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\vaudix"
Successfully deleted: [Folder] "C:\Program Files (x86)\vaudix"

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 03.08.2014 at 9:18:47,92
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

AdwCleaner log

# AdwCleaner v3.302 - Report created 03/08/2014 at 09:24:27
# Updated 30/07/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : EB - EB-PC
# Running from : C:\Users\EB\Desktop\adwcleaner_3.302.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Adblocker
Folder Deleted : C:\Program Files (x86)\Adblocker
Folder Deleted : C:\Users\Administrator\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\Administrator\AppData\Local\torch
Folder Deleted : C:\Users\EB\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\EB\AppData\Local\torch
Folder Deleted : C:\Users\Guest\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\Guest\AppData\Local\torch

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKCU\Software\RegisteredApplicationsEx

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17207

-\\ Google Chrome v36.0.1985.125

[ File : C:\Users\EB\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [1436 octets] - [03/08/2014 09:23:18]
AdwCleaner[S0].txt - [1227 octets] - [03/08/2014 09:24:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1287 octets] ##########

#4 Příspěvek od **vyosek** » 03 srp 2014 08:48

Jeste to procistime, at je to poradne

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

muf98a · #5 Příspěvek od **muf98a** » 03 srp 2014 19:02

Zdravím
Tady vkládám Log.
PC se už chová normálně.
Moc děkuji za pomoc.

Muf98a

Zoek.exe v5.0.0.0 Updated 03-August-2014
Tool run by EB on ne 03.08.2014 at 19:46:55,99.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\EB\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

3.8.2014 19:47:56 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\PROGRA~3\InstallMate deleted
C:\Users\EB\Searches deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
"C:\PROGRA~3\d47a9fa6125aa45e\{4820778D-AB0D-6D18-C316-52A6A0E1D507}.20140707181017" deleted
"C:\PROGRA~3\d47a9fa6125aa45e\{681002C6-5019-81A2-7871-A43754F71E56}.20140707180939" deleted
"C:\PROGRA~3\d47a9fa6125aa45e\{681002C6-5019-81A2-7871-A43754F71E56}.20140707181002" deleted
"C:\PROGRA~3\d47a9fa6125aa45e\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}.20140707181028" deleted
"C:\PROGRA~3\d47a9fa6125aa45e" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [02.08.2014 16:51]

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[13.07.2014 16:43]

Vaudix - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alclmmjbbaegoknkjghgbpmggfimklfe
Smart Saver - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff
Vaudix - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\alclmmjbbaegoknkjghgbpmggfimklfe
Smart Saver - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff
Vaudix - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alclmmjbbaegoknkjghgbpmggfimklfe
Smart Saver - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff
Vaudix - EB\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alclmmjbbaegoknkjghgbpmggfimklfe
Smart Saver - EB\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff
avast Online Security - EB\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Speed Dial 2 - EB\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpfpebmajhhopeonhlcgidhclcccjcik
Vaudix - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alclmmjbbaegoknkjghgbpmggfimklfe
Smart Saver - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff
Vaudix - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\alclmmjbbaegoknkjghgbpmggfimklfe
Smart Saver - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff
Vaudix - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alclmmjbbaegoknkjghgbpmggfimklfe
Smart Saver - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff

==== Chrome Fix ======================

C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff deleted successfully
C:\Users\EB\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff deleted successfully
C:\Users\EB\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpfpebmajhhopeonhlcgidhclcccjcik deleted successfully
C:\Users\EB\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jpfpebmajhhopeonhlcgidhclcccjcik_0.localstorage deleted successfully
C:\Users\EB\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jpfpebmajhhopeonhlcgidhclcccjcik_0.localstorage-journal deleted successfully
C:\Users\EB\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_jpfpebmajhhopeonhlcgidhclcccjcik_0 deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alclmmjbbaegoknkjghgbpmggfimklfe deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\alclmmjbbaegoknkjghgbpmggfimklfe deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alclmmjbbaegoknkjghgbpmggfimklfe deleted successfully
C:\Users\EB\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alclmmjbbaegoknkjghgbpmggfimklfe deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\alclmmjbbaegoknkjghgbpmggfimklfe deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\alclmmjbbaegoknkjghgbpmggfimklfe deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\alclmmjbbaegoknkjghgbpmggfimklfe deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE11SR"

==== Reset Google Chrome ======================

C:\Users\EB\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\EB\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\EB\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\EB\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ML0HYF1U will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\EB\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=221 folders=51 2344549 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\EB\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\EB\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\EB\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ML0HYF1U" not found

==== EOF on ne 03.08.2014 at 20:00:02,33 ======================

#6 Příspěvek od **vyosek** » 03 srp 2014 19:03

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100 a docistime zbytecky a drobnosti

muf98a · #7 Příspěvek od **muf98a** » 03 srp 2014 19:14

Zdravím
Zde přikládám log z FRST

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-08-2014
Ran by EB (administrator) on EB-PC on 03-08-2014 20:07:54
Running from C:\Users\EB\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6489704 2010-09-21] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2011-01-26] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-13] (Intel Corporation)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-02] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-752894797-3801039742-2176900254-1000\...\Run: [Epson Stylus SX510W(Síe)] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFIE.EXE [223232 2008-11-20] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-752894797-3801039742-2176900254-1000\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [466656 2014-05-23] (Sony)
HKU\S-1-5-21-752894797-3801039742-2176900254-1000\...\MountPoints2: {1c8de887-0a9a-11e4-912c-984be1922e11} - F:\Startme.exe
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

SearchScopes: HKCU - DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-06-21]

Chrome:
=======
CHR Extension: (Dokumenty Google) - C:\Users\EB\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-02]
CHR Extension: (Disk Google) - C:\Users\EB\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-02]
CHR Extension: (YouTube) - C:\Users\EB\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-02]
CHR Extension: (Vyhledávání Google) - C:\Users\EB\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-02]
CHR Extension: (avast! Online Security) - C:\Users\EB\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-08-02]
CHR Extension: (Peněženka Google) - C:\Users\EB\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-02]
CHR Extension: (Gmail) - C:\Users\EB\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-02]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-13]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-13] (AVAST Software)
R2 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
S2 gupdate1cfae82cbafb6d8; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648 2014-08-02] (Google Inc.)
S3 gupdatem1cfae82cbb6daf9; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648 2014-08-02] (Google Inc.)
R2 RtVOsdService; C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe [315392 2010-06-24] (Realtek Semiconductor Corp.) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-13] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-13] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-13] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-13] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-13] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-13] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-13] ()
S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [30424 2014-07-14] (Sony Mobile Communications)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-03 20:07 - 2014-08-03 20:08 - 00010821 _____ () C:\Users\EB\Desktop\FRST.txt
2014-08-03 20:07 - 2014-08-03 20:07 - 00000000 ____D () C:\FRST
2014-08-03 20:05 - 2014-08-03 20:06 - 02094080 _____ (Farbar) C:\Users\EB\Desktop\FRST64.exe
2014-08-03 20:05 - 2014-08-03 20:05 - 00112640 _____ (forum.viry.cz) C:\Users\EB\Downloads\Nepotvrzeno 562266.crdownload
2014-08-03 19:58 - 2014-08-03 19:46 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-03 19:47 - 2014-08-03 20:00 - 00010297 _____ () C:\zoek-results.log
2014-08-03 19:46 - 2014-08-03 19:57 - 00000000 ____D () C:\zoek_backup
2014-08-03 17:00 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-03 17:00 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-03 17:00 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-03 17:00 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-03 17:00 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-03 17:00 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-03 17:00 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-03 17:00 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-03 17:00 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-03 17:00 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-03 17:00 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-03 17:00 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-03 17:00 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-03 17:00 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-03 09:56 - 2014-08-03 09:56 - 00142598 _____ () C:\Windows\DPINST.LOG
2014-08-03 09:23 - 2014-08-03 09:41 - 00000000 ____D () C:\AdwCleaner
2014-08-03 09:23 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-03 09:11 - 2014-08-03 09:11 - 00000000 ____D () C:\Windows\ERUNT
2014-08-02 21:01 - 2014-08-03 19:59 - 00023144 _____ () C:\Windows\PFRO.log
2014-08-02 21:01 - 2014-08-03 19:59 - 00000392 _____ () C:\Windows\setupact.log
2014-08-02 21:01 - 2014-08-02 21:01 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-02 20:52 - 2014-08-02 20:52 - 00002255 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-02 20:52 - 2014-08-02 20:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-02 20:51 - 2014-08-02 20:52 - 00000000 ____D () C:\Users\EB\AppData\Local\Google
2014-08-02 20:51 - 2014-08-02 20:51 - 00000000 ____D () C:\Users\EB\AppData\Local\Deployment
2014-08-02 20:51 - 2014-08-02 20:51 - 00000000 ____D () C:\Users\EB\AppData\Local\Apps\2.0
2014-08-02 20:51 - 2014-08-02 20:51 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-02 20:23 - 2014-08-02 20:23 - 00000000 ____D () C:\Program Files\trend micro
2014-08-02 16:51 - 2014-08-02 16:51 - 00001926 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-07-14 10:29 - 2014-07-14 10:29 - 00000000 ____D () C:\Users\EB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-07-14 10:29 - 2014-07-14 10:29 - 00000000 ____D () C:\Users\EB\AppData\Roaming\DropboxMaster
2014-07-14 10:27 - 2014-07-14 10:29 - 00000000 ____D () C:\Users\EB\AppData\Roaming\Dropbox
2014-07-14 09:37 - 2014-07-14 09:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ggsomc_01009.Wdf
2014-07-14 09:37 - 2014-07-14 09:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ggflt_01009.Wdf
2014-07-14 09:11 - 2014-07-14 09:11 - 00030424 _____ (Sony Mobile Communications) C:\Windows\system32\Drivers\ggsomc.sys
2014-07-14 09:11 - 2014-07-14 09:11 - 00016088 _____ (Sony Mobile Communications) C:\Windows\system32\Drivers\ggflt.sys
2014-07-14 09:10 - 2014-07-14 09:10 - 00000000 ____D () C:\ProgramData\Sony Mobile
2014-07-14 09:10 - 2014-07-14 09:10 - 00000000 ____D () C:\Program Files (x86)\Sony Mobile
2014-07-14 09:06 - 2014-08-03 09:56 - 00002098 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2014-07-14 09:06 - 2014-08-03 09:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2014-07-14 09:06 - 2014-07-14 09:06 - 00000000 ____D () C:\ProgramData\Sony
2014-07-14 09:06 - 2014-07-14 09:06 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-07-14 09:04 - 2014-07-14 09:04 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-07-13 16:44 - 2014-07-13 16:44 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-07-13 16:43 - 2014-07-13 16:43 - 00000000 ____D () C:\Users\EB\AppData\Roaming\WinRAR
2014-07-13 16:42 - 2014-07-13 18:28 - 00000000 ____D () C:\Users\EB\Desktop\Artifact
2014-07-11 10:26 - 2014-07-11 11:07 - 733997057 _____ () C:\Users\EB\Desktop\Vampires-suck.avi
2014-07-09 16:11 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-09 16:11 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-09 16:11 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-09 16:11 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-09 16:11 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-09 16:11 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 16:11 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 16:11 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-09 16:11 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-09 16:11 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-09 16:11 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-09 16:11 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-09 16:11 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-09 16:11 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-09 16:11 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-09 16:11 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-09 16:11 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-09 16:11 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 16:11 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 16:11 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-09 16:11 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 16:11 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 16:11 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 16:11 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-09 16:11 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-09 16:11 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-09 16:11 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-09 16:11 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-09 16:11 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 16:11 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-09 16:11 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-09 16:11 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-09 16:11 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 16:11 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-09 16:11 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-09 16:11 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-09 16:11 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-09 16:11 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-09 16:11 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-09 16:11 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-09 16:11 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-09 16:11 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 16:11 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-09 16:11 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-09 16:11 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 16:11 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-09 16:11 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-09 16:11 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-09 16:11 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-09 16:11 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 16:11 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-09 16:11 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-09 16:11 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-09 16:11 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-09 16:11 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-09 16:11 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-09 16:11 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 16:11 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 16:11 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-09 16:11 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-09 16:11 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-09 16:11 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-09 16:11 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-09 16:11 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-09 16:11 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-09 16:11 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-09 16:11 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-09 16:11 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-09 16:11 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-09 16:11 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-09 16:11 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-09 16:11 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-09 16:11 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-09 16:11 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-09 16:10 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 16:10 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-09 16:10 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 16:10 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-09 16:10 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-09 16:10 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-09 16:10 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-07 18:09 - 2014-07-07 18:09 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-07-07 18:09 - 2014-07-07 18:09 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-07-07 18:09 - 2014-07-07 18:09 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-07-07 18:09 - 2014-07-07 18:09 - 00000000 ____D () C:\Users\Guest
2014-07-07 18:09 - 2014-07-07 18:09 - 00000000 ____D () C:\Users\EB\AppData\Local\Comodo
2014-07-07 18:09 - 2014-07-07 18:09 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-07-07 18:09 - 2014-07-07 18:09 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-07-07 18:09 - 2014-07-07 18:09 - 00000000 ____D () C:\Users\Administrator

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-03 20:08 - 2014-08-03 20:07 - 00010821 _____ () C:\Users\EB\Desktop\FRST.txt
2014-08-03 20:07 - 2014-08-03 20:07 - 00000000 ____D () C:\FRST
2014-08-03 20:06 - 2014-08-03 20:05 - 02094080 _____ (Farbar) C:\Users\EB\Desktop\FRST64.exe
2014-08-03 20:05 - 2014-08-03 20:05 - 00112640 _____ (forum.viry.cz) C:\Users\EB\Downloads\Nepotvrzeno 562266.crdownload
2014-08-03 20:05 - 2014-06-21 20:22 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{9B69F1BB-A86A-40F8-B808-EE3FF8850AFB}
2014-08-03 20:05 - 2009-07-14 06:45 - 00028320 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-03 20:05 - 2009-07-14 06:45 - 00028320 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-03 20:04 - 2014-06-21 20:18 - 01853488 _____ () C:\Windows\WindowsUpdate.log
2014-08-03 20:00 - 2014-08-03 19:47 - 00010297 _____ () C:\zoek-results.log
2014-08-03 20:00 - 2014-06-21 23:07 - 00002896 _____ () C:\Windows\System32\Tasks\AutoKMS
2014-08-03 20:00 - 2014-06-21 23:07 - 00000266 _____ () C:\Windows\Tasks\AutoKMS.job
2014-08-03 19:59 - 2014-08-02 21:01 - 00023144 _____ () C:\Windows\PFRO.log
2014-08-03 19:59 - 2014-08-02 21:01 - 00000392 _____ () C:\Windows\setupact.log
2014-08-03 19:59 - 2014-06-21 23:11 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-03 19:59 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-03 19:57 - 2014-08-03 19:46 - 00000000 ____D () C:\zoek_backup
2014-08-03 19:56 - 2014-06-21 23:11 - 00000944 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-03 19:56 - 2014-06-21 20:20 - 00000000 ____D () C:\Users\EB
2014-08-03 19:46 - 2014-08-03 19:58 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-03 18:39 - 2014-06-21 21:34 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-03 09:56 - 2014-08-03 09:56 - 00142598 _____ () C:\Windows\DPINST.LOG
2014-08-03 09:56 - 2014-07-14 09:06 - 00002098 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2014-08-03 09:56 - 2014-07-14 09:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2014-08-03 09:55 - 2014-06-21 20:49 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-08-03 09:41 - 2014-08-03 09:23 - 00000000 ____D () C:\AdwCleaner
2014-08-03 09:11 - 2014-08-03 09:11 - 00000000 ____D () C:\Windows\ERUNT
2014-08-02 21:01 - 2014-08-02 21:01 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-02 20:52 - 2014-08-02 20:52 - 00002255 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-02 20:52 - 2014-08-02 20:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-02 20:52 - 2014-08-02 20:51 - 00000000 ____D () C:\Users\EB\AppData\Local\Google
2014-08-02 20:51 - 2014-08-02 20:51 - 00000000 ____D () C:\Users\EB\AppData\Local\Deployment
2014-08-02 20:51 - 2014-08-02 20:51 - 00000000 ____D () C:\Users\EB\AppData\Local\Apps\2.0
2014-08-02 20:51 - 2014-08-02 20:51 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-02 20:51 - 2014-06-21 23:11 - 00003940 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-08-02 20:51 - 2014-06-21 23:11 - 00003688 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-08-02 20:23 - 2014-08-02 20:23 - 00000000 ____D () C:\Program Files\trend micro
2014-08-02 20:08 - 2014-06-21 23:11 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-08-02 16:51 - 2014-08-02 16:51 - 00001926 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-08-02 16:51 - 2014-06-21 23:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-07-24 19:19 - 2014-06-21 22:26 - 00000000 ____D () C:\Users\EB\Desktop\h
2014-07-24 13:35 - 2010-11-21 11:27 - 00668376 _____ () C:\Windows\system32\perfh005.dat
2014-07-24 13:35 - 2010-11-21 11:27 - 00141004 _____ () C:\Windows\system32\perfc005.dat
2014-07-24 13:35 - 2009-07-14 07:13 - 01582262 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-19 19:02 - 2014-06-21 23:20 - 00000000 ____D () C:\Users\EB\AppData\Roaming\vlc
2014-07-14 10:32 - 2014-06-21 20:20 - 00000000 ____D () C:\Users\EB\AppData\Local\VirtualStore
2014-07-14 10:29 - 2014-07-14 10:29 - 00000000 ____D () C:\Users\EB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-07-14 10:29 - 2014-07-14 10:29 - 00000000 ____D () C:\Users\EB\AppData\Roaming\DropboxMaster
2014-07-14 10:29 - 2014-07-14 10:27 - 00000000 ____D () C:\Users\EB\AppData\Roaming\Dropbox
2014-07-14 09:37 - 2014-07-14 09:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ggsomc_01009.Wdf
2014-07-14 09:37 - 2014-07-14 09:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ggflt_01009.Wdf
2014-07-14 09:11 - 2014-07-14 09:11 - 00030424 _____ (Sony Mobile Communications) C:\Windows\system32\Drivers\ggsomc.sys
2014-07-14 09:11 - 2014-07-14 09:11 - 00016088 _____ (Sony Mobile Communications) C:\Windows\system32\Drivers\ggflt.sys
2014-07-14 09:10 - 2014-07-14 09:10 - 00000000 ____D () C:\ProgramData\Sony Mobile
2014-07-14 09:10 - 2014-07-14 09:10 - 00000000 ____D () C:\Program Files (x86)\Sony Mobile
2014-07-14 09:06 - 2014-07-14 09:06 - 00000000 ____D () C:\ProgramData\Sony
2014-07-14 09:06 - 2014-07-14 09:06 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-07-14 09:04 - 2014-07-14 09:04 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-07-13 18:28 - 2014-07-13 16:42 - 00000000 ____D () C:\Users\EB\Desktop\Artifact
2014-07-13 16:44 - 2014-07-13 16:44 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-07-13 16:44 - 2014-06-21 23:10 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-07-13 16:44 - 2014-06-21 23:10 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-07-13 16:44 - 2014-06-21 23:10 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-07-13 16:44 - 2014-06-21 23:10 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-07-13 16:44 - 2014-06-21 23:10 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-07-13 16:44 - 2014-06-21 23:10 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-07-13 16:44 - 2014-06-21 23:10 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-07-13 16:44 - 2014-06-21 23:10 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-07-13 16:44 - 2014-06-21 23:10 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-07-13 16:44 - 2014-06-21 22:32 - 00000000 ____D () C:\Users\EB\Desktop\Nepoužívané
2014-07-13 16:43 - 2014-07-13 16:43 - 00000000 ____D () C:\Users\EB\AppData\Roaming\WinRAR
2014-07-13 16:43 - 2014-06-21 22:33 - 00000000 ____D () C:\Users\EB\Desktop\Videa
2014-07-13 16:35 - 2014-06-21 22:27 - 00000000 ____D () C:\Users\EB\Desktop\Into The Wild (2007)
2014-07-11 11:07 - 2014-07-11 10:26 - 733997057 _____ () C:\Users\EB\Desktop\Vampires-suck.avi
2014-07-10 09:46 - 2009-07-14 06:45 - 00415584 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-10 09:45 - 2014-06-21 22:48 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-10 09:45 - 2010-11-21 11:38 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-10 09:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-10 09:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-09 17:44 - 2014-06-21 22:58 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-09 17:42 - 2014-06-21 22:34 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-09 17:41 - 2014-06-21 22:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-09 17:39 - 2014-06-21 21:34 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-09 17:39 - 2014-06-21 21:34 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-09 17:39 - 2014-06-21 21:34 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-07 18:09 - 2014-07-07 18:09 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-07-07 18:09 - 2014-07-07 18:09 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-07-07 18:09 - 2014-07-07 18:09 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-07-07 18:09 - 2014-07-07 18:09 - 00000000 ____D () C:\Users\Guest
2014-07-07 18:09 - 2014-07-07 18:09 - 00000000 ____D () C:\Users\EB\AppData\Local\Comodo
2014-07-07 18:09 - 2014-07-07 18:09 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-07-07 18:09 - 2014-07-07 18:09 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-07-07 18:09 - 2014-07-07 18:09 - 00000000 ____D () C:\Users\Administrator
2014-07-07 18:09 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-07-07 18:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-06-21 20:08

==================== End Of Log ============================

#8 Příspěvek od **vyosek** » 03 srp 2014 19:28

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-752894797-3801039742-2176900254-1000\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [466656 2014-05-23] (Sony)
HKU\S-1-5-21-752894797-3801039742-2176900254-1000\...\MountPoints2: {1c8de887-0a9a-11e4-912c-984be1922e11} - F:\Startme.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

2014-08-03 20:07 - 2014-08-03 20:08 - 00010821 _____ () C:\Users\EB\Desktop\FRST.txt
2014-08-03 20:05 - 2014-08-03 20:05 - 00112640 _____ (forum.viry.cz) C:\Users\EB\Downloads\Nepotvrzeno 562266.crdownload
2014-08-03 19:58 - 2014-08-03 19:46 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-03 19:47 - 2014-08-03 20:00 - 00010297 _____ () C:\zoek-results.log
2014-08-03 19:46 - 2014-08-03 19:57 - 00000000 ____D () C:\zoek_backup
2014-08-03 09:23 - 2014-08-03 09:41 - 00000000 ____D () C:\AdwCleaner
2014-08-03 09:23 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-03 09:11 - 2014-08-03 09:11 - 00000000 ____D () C:\Windows\ERUNT
2014-08-02 21:01 - 2014-08-03 19:59 - 00023144 _____ () C:\Windows\PFRO.log
2014-08-02 21:01 - 2014-08-03 19:59 - 00000392 _____ () C:\Windows\setupact.log
2014-08-02 21:01 - 2014-08-02 21:01 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-03 20:00 - 2014-06-21 23:07 - 00002896 _____ () C:\Windows\System32\Tasks\AutoKMS
2014-08-03 20:00 - 2014-06-21 23:07 - 00000266 _____ () C:\Windows\Tasks\AutoKMS.job
C:\Windows\AutoKMS

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Hosts:
Reboot:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

muf98a · #9 Příspěvek od **muf98a** » 03 srp 2014 19:34

Zdravím
Přikládám nový log

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-08-2014
Ran by EB at 2014-08-03 20:30:41 Run:1
Running from C:\Users\EB\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-752894797-3801039742-2176900254-1000\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [466656 2014-05-23] (Sony)
HKU\S-1-5-21-752894797-3801039742-2176900254-1000\...\MountPoints2: {1c8de887-0a9a-11e4-912c-984be1922e11} - F:\Startme.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

2014-08-03 20:07 - 2014-08-03 20:08 - 00010821 _____ () C:\Users\EB\Desktop\FRST.txt
2014-08-03 20:05 - 2014-08-03 20:05 - 00112640 _____ (forum.viry.cz) C:\Users\EB\Downloads\Nepotvrzeno 562266.crdownload
2014-08-03 19:58 - 2014-08-03 19:46 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-03 19:47 - 2014-08-03 20:00 - 00010297 _____ () C:\zoek-results.log
2014-08-03 19:46 - 2014-08-03 19:57 - 00000000 ____D () C:\zoek_backup
2014-08-03 09:23 - 2014-08-03 09:41 - 00000000 ____D () C:\AdwCleaner
2014-08-03 09:23 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-03 09:11 - 2014-08-03 09:11 - 00000000 ____D () C:\Windows\ERUNT
2014-08-02 21:01 - 2014-08-03 19:59 - 00023144 _____ () C:\Windows\PFRO.log
2014-08-02 21:01 - 2014-08-03 19:59 - 00000392 _____ () C:\Windows\setupact.log
2014-08-02 21:01 - 2014-08-02 21:01 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-03 20:00 - 2014-06-21 23:07 - 00002896 _____ () C:\Windows\System32\Tasks\AutoKMS
2014-08-03 20:00 - 2014-06-21 23:07 - 00000266 _____ () C:\Windows\Tasks\AutoKMS.job
C:\Windows\AutoKMS

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Hosts:
Reboot:
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKU\S-1-5-21-752894797-3801039742-2176900254-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Sony PC Companion => value deleted successfully.
"HKU\S-1-5-21-752894797-3801039742-2176900254-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1c8de887-0a9a-11e4-912c-984be1922e11}" => Key deleted successfully.
"HKCR\CLSID\{1c8de887-0a9a-11e4-912c-984be1922e11}" => Key not found.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
C:\Users\EB\Desktop\FRST.txt => Moved successfully.
"C:\Users\EB\Downloads\Nepotvrzeno 562266.crdownload" => File/Directory not found.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Windows\SysWOW64\sqlite3.dll => Moved successfully.
C:\Windows\ERUNT => Moved successfully.
C:\Windows\PFRO.log => Moved successfully.
C:\Windows\setupact.log => Moved successfully.
C:\Windows\setuperr.log => Moved successfully.
C:\Windows\System32\Tasks\AutoKMS => Moved successfully.
C:\Windows\Tasks\AutoKMS.job => Moved successfully.
C:\Windows\AutoKMS => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\AutoKMS.job not found.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

The system needed a reboot.

==== End of Fixlog ====

#10 Příspěvek od **vyosek** » 03 srp 2014 19:37

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

muf98a · #11 Příspěvek od **muf98a** » 03 srp 2014 19:54

Zdravím

PC je OK.
Ještě jednou děkuji za pomoc.
Muf

#12 Příspěvek od **vyosek** » 03 srp 2014 19:54

Nemate zac, rad jsem pomohl

Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat

VIRY.CZ

vskakujicí hlášky AVAST

vskakujicí hlášky AVAST

Re: vskakujicí hlášky AVAST

Re: vskakujicí hlášky AVAST

Re: vskakujicí hlášky AVAST

Re: vskakujicí hlášky AVAST

Re: vskakujicí hlášky AVAST

Re: vskakujicí hlášky AVAST

Re: vskakujicí hlášky AVAST

Re: vskakujicí hlášky AVAST

Re: vskakujicí hlášky AVAST

Re: vskakujicí hlášky AVAST

Re: vskakujicí hlášky AVAST