Pomale PC + RSIT

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
kocour123
Návštěvník
Návštěvník
Příspěvky: 27
Registrován: 22 Črv 2014 14:57

Pomale PC + RSIT

#1 Příspěvek od kocour123 »

Hi,
mam zpomaleny PC, asi jsem neco chytil, ale Avast nic nenasel. Prosim o kontrolu. Posilam 1/2Logfile of random's system information tool 1.10 (written by random/random)
Run by new at 2014-08-09 09:29:21
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 35 GB (25%) free of 138 GB
Total RAM: 4055 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 09:29:26, on 09/08/2014
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16561)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\WallpaperSS\WallpaperSS.exe
C:\Users\new\AppData\Roaming\Search Protection\SearchProtection.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\new.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://uk.search.yahoo.com/?type=93781 ... got-yhp-ie
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Deal Keeper - {1ec8187a-6435-44e3-bbe4-6ce6d3c69254} - C:\Program Files (x86)\Deal Keeper\DealKeeperbho.dll
O2 - BHO: Browser Extensions - {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} - C:\Users\new\AppData\Roaming\Browser Extensions\Coupons.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Dell DataSafe Online] "C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe" /m
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [BingDesktop] C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe /fromkey
O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WallpaperSS] C:\Program Files (x86)\WallpaperSS\WallpaperSS.exe
O4 - HKCU\..\Run: [SearchProtection] "C:\Users\new\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart
O4 - HKCU\..\Run: [Browser Extensions] "C:\Users\new\AppData\Roaming\Browser Extensions\CouponsHelper.exe"
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKCU\..\Run: [DellSystemDetect] C:\Users\new\AppData\Local\Apps\2.0\NGAPRWHV.TY8\7H7O4R4E.7H1\dell..tion_0f612f649c4a10af_0005.0008_a4204ff54ae5d3ac\DellSystemDetect.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Startup: Tapety 2.12.lnk = C:\Program Files (x86)\Tapety 2.12\Tapety.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.dell.com
O20 - AppInit_DLLs:
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Unknown owner - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_54cb4575\AESTSr64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Ask Update Service (APNMCP) - APN LLC. - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bing Desktop Update service (BingDesktopUpdate) - Unknown owner - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (file missing)
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 2014\Nero BackItUp\NBService\NBService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Audio Service (STacSV) - Unknown owner - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_54cb4575\STacSV64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Update Deal Keeper - Unknown owner - C:\Program Files (x86)\Deal Keeper\updateDealKeeper.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10569 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_54cb4575\STacSV64.exe

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\Dell\DellDock\DockLogin.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\WLTRYSVC.EXE C:\Windows\System32\bcmwltry.exe
C:\Windows\System32\bcmwltry.exe
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_54cb4575\AESTSr64.exe
"C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files (x86)\Nero\Nero 2014\Nero BackItUp\NBService\NBService.exe"
taskeng.exe {C8F0A099-0770-46EE-AF71-5A1C52DD791F}
"C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Deal Keeper\updateDealKeeper.exe"
"C:\Windows\system32\Dwm.exe"
taskeng.exe {BB0486EA-3AB4-4FD4-9754-6B5730AE033B}
C:\Windows\Explorer.EXE
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Defender\MSASCui.exe" -hide
"C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe"
"C:\Program Files\DellTPad\Apoint.exe"
"C:\WINDOWS\System32\hkcmd.exe"
"C:\WINDOWS\System32\igfxpers.exe"
"C:\WINDOWS\System32\WLTRAY.EXE"
"C:\Program Files\Dell\QuickSet\quickset.exe"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\WINDOWS\ehome\ehtray.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\WallpaperSS\WallpaperSS.exe"
C:\Windows\ehome\ehmsas.exe -Embedding
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Users\new\AppData\Roaming\Search Protection\SearchProtection.exe" /autostart
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
"C:\Users\new\AppData\Local\Apps\2.0\NGAPRWHV.TY8\7H7O4R4E.7H1\dell..tion_0f612f649c4a10af_0005.0008_a4204ff54ae5d3ac\DellSystemDetect.exe"
"C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe" /m
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
"C:\Program Files\DellTPad\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"Apntex.exe"
"C:\Program Files\DellTPad\HidFind.exe"
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
taskeng.exe {4E8CEE97-AC86-46E7-845D-44FC43CA1A02}
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 644 648 656 65536 652
"C:\Users\new\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}]
Browser Extensions - C:\Users\new\AppData\Roaming\Browser Extensions\Coupons64.dll [2014-07-29 730472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-07-02 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1ec8187a-6435-44e3-bbe4-6ce6d3c69254}]
Deal Keeper - C:\Program Files (x86)\Deal Keeper\DealKeeperbho.dll [2014-07-19 249632]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}]
Browser Extensions - C:\Users\new\AppData\Roaming\Browser Extensions\Coupons.dll [2014-07-29 610152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-08-06 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-02 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-08-06 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1584184]
"Apoint"=C:\Program Files\DellTPad\Apoint.exe [2009-03-31 305664]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-03-31 154648]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-03-31 227352]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-03-31 202264]
"Broadcom Wireless Manager UI"=C:\Windows\system32\WLTRAY.exe [2008-12-21 4119552]
"QuickSet"=C:\Program Files\Dell\QuickSet\QuickSet.exe [2009-03-27 2115664]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2008-06-15 178712]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-02-26 487424]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 138240]
"WallpaperSS"=C:\Program Files (x86)\WallpaperSS\WallpaperSS.exe [2012-05-03 460864]
"SearchProtection"=C:\Users\new\AppData\Roaming\Search Protection\SearchProtection.EXE [2014-07-31 878440]
"Browser Extensions"=C:\Users\new\AppData\Roaming\Browser Extensions\CouponsHelper.exe [2014-07-29 962408]
"Sony PC Companion"=C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [2014-05-23 466656]
"DellSystemDetect"=C:\Users\new\AppData\Local\Apps\2.0\NGAPRWHV.TY8\7H7O4R4E.7H1\dell..tion_0f612f649c4a10af_0005.0008_a4204ff54ae5d3ac\DellSystemDetect.exe [2014-06-23 262720]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dell DataSafe Online"=C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe [2009-07-07 1779952]
"Microsoft Default Manager"=C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2009-04-24 250192]
"DellSupportCenter"=C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe /P DellSupportCenter []
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-07-02 4086432]
"BingDesktop"=C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe /fromkey []
"ApnTBMon"=C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2014-07-31 1957784]

C:\Users\new\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Tapety 2.12.lnk - C:\Program Files (x86)\Tapety 2.12\Tapety.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-03-31 230400]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"EnableLinkedConnections"=1 logu RSIT.

Log:
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Pomale PC + RSIT

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
  • Ulozte nejlepe na plochu
  • Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
  • Probehne vytvoreni zalohy a nasledne prohledavani
  • Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
kocour123
Návštěvník
Návštěvník
Příspěvky: 27
Registrován: 22 Črv 2014 14:57

Re: Pomale PC + RSIT

#3 Příspěvek od kocour123 »

Log JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows (TM) Vista Home Premium x64
Ran by new on 09/08/2014 at 10:23:56.40
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] APNMCP
Successfully deleted: [Service] APNMCP



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\searchprotection



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\speedupmypc
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Successfully deleted: [Registry Key] "hkey_current_user\software\askpartnernetwork"
Successfully deleted: [Registry Key] "hkey_local_machine\software\askpartnernetwork"



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\ProgramData\ytd video downloader"
Successfully deleted: [Folder] "C:\Users\new\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\new\AppData\Roaming\search protection"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader"
Successfully deleted: [Folder] "C:\ProgramData\AskPartnerNetwork"
Successfully deleted: [Folder] "C:\Program Files (x86)\askpartnernetwork"



~~~ FireFox

Successfully deleted the following from C:\Users\new\AppData\Roaming\mozilla\firefox\profiles\80dz04l1.default\prefs.js

user_pref("extensions.ORJ-SPE.domain", "\"www.search.ask.com\"");
user_pref("extensions.ORJ-SPE.hpr_ff", "\"hxxp://www.search.ask.com/?tpid=ORJ-SPE&o=APN1 ... =%5EOSJ000
Emptied folder: C:\Users\new\AppData\Roaming\mozilla\firefox\profiles\80dz04l1.default\minidumps [11 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09/08/2014 at 10:37:10.11
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Log Adw:

# AdwCleaner v3.304 - Report created 09/08/2014 at 10:39:03
# Updated 08/08/2014 by Xplode
# Operating System : Windows (TM) Vista Home Premium Service Pack 2 (64 bits)
# Username : new - NEW-PC
# Running from : C:\Users\new\Desktop\adwcleaner_3.304.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : Update Deal Keeper
Service Deleted : wltrysvc

***** [ Files / Folders ] *****

[!] Folder Deleted : C:\ProgramData\systemk
[!] Folder Deleted : C:\Program Files (x86)\GreenTree Applications
[!] Folder Deleted : C:\Program Files (x86)\enformation
[!] Folder Deleted : C:\Program Files (x86)\Deal Keeper
[!] Folder Deleted : C:\Users\new\AppData\Local\AskPartnerNetwork
[!] Folder Deleted : C:\Users\new\AppData\Local\Temp\apn
[!] Folder Deleted : C:\Users\new\AppData\Local\Temp\Deal Keeper
[!] Folder Deleted : C:\Users\new\AppData\Roaming\Browser Extensions
File Deleted : C:\Windows\System32\WLTRYSVC.EXE
File Deleted : C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\80dz04l1.default\searchplugins\ask-search.xml

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1ec8187a-6435-44e3-bbe4-6ce6d3c69254}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{ba0ab49b-34a1-4c36-bb3b-e6f458974507}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1ec8187a-6435-44e3-bbe4-6ce6d3c69254}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1ec8187a-6435-44e3-bbe4-6ce6d3c69254}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1ec8187a-6435-44e3-bbe4-6ce6d3c69254}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Key Deleted : HKCU\Software\Deal Keeper
Key Deleted : HKCU\Software\SupHpUISoft
Key Deleted : HKCU\Software\AppDataLow\Software\Search Protection
Key Deleted : HKCU\Software\AppDataLow\Software\enformation
Key Deleted : HKLM\Software\Deal Keeper
Key Deleted : HKLM\Software\SystemK
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\Software\enformation
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3A787631-66A2-4634-B928-A37E73B58FB6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DesktopWeatherAlerts
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Search Protection
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WindowsMangerProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\enformation
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Deal Keeper

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16561

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v31.0 (x86 cs)

[ File : C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\80dz04l1.default\prefs.js ]

Line Deleted : user_pref("extensions.ORJ-SPE.domain", "\"www.search.ask.com\"");
Line Deleted : user_pref("extensions.ORJ-SPE.hpr_ff", "\"hxxp://www.search.ask.com/?tpid=ORJ-SPE&o=APN1 ... _dbr=ff_31.[...]
Line Deleted : user_pref("extensions.toolbar_ORJ-SPE@apn.ask.com.install-event-fired", true);
Line Deleted : user_pref("imtranslator.ImTranslatorSelectedText", "This%20browser%20error%20assistant%20page%20is%20designed%20to%20help%20you%20when%20you%20mistype%20an%20address%20or%20the%20website%20is%20unavai[...]

-\\ Google Chrome v36.0.1985.125

[ File : C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://uk.ask.com/web?q={searchTerms}

*************************

AdwCleaner[R5].txt - [10443 octets] - [09/08/2014 10:37:44]
AdwCleaner[S5].txt - [8833 octets] - [09/08/2014 10:39:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S5].txt - [8893 octets] ##########
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Pomale PC + RSIT

#4 Příspěvek od vyosek »

:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
kocour123
Návštěvník
Návštěvník
Příspěvky: 27
Registrován: 22 Črv 2014 14:57

Re: Pomale PC + RSIT

#5 Příspěvek od kocour123 »

Log Zoek:


Zoek.exe v5.0.0.0 Updated 07-August-2014
Tool run by new on 09/08/2014 at 13:42:32.19.
Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\new\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

09/08/2014 13:43:34 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1710971718-3430145923-3092330257-1000\Software\Microsoft\Internet Explorer\SearchScopes\{89D7D193-E7F6-43EF-8EED-86BDEF79F839} deleted successfully
HKEY_USERS\S-1-5-21-1710971718-3430145923-3092330257-1000\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} deleted successfully
HKEY_USERS\S-1-5-21-1710971718-3430145923-3092330257-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\80dz04l1.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.co.uk/");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "default-search.net");
user_pref("browser.search.selectedEngine", "default-search.net");
user_pref("browser.search.order.1", "default-search.net");
user_pref("extensions.APN_TB.first-previous-keyword-url", "");
user_pref("extensions.ORJ-SPE.my-keyword-url", "\"\"");
user_pref("extensions.ORJ-SPE.previous-keyword-url", "\"https://uk.search.yahoo.com/search?fr=g ... =937811&p=\"");
user_pref("extensions.ORJ-V7C.my-keyword-url", "\"\"");
user_pref("extensions.ORJ-V7C.previous-keyword-url", "\"\"");
user_pref("keyword.URL", "http://www.default-search.net/search?si ... &src=ds&p=");
user_pref("browser.search.useDBForOrder", true);

Added to C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\80dz04l1.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("extensions.APN_TB.first-previous-keyword-url", "");
user_pref("extensions.ORJ-SPE.my-keyword-url", "\"\"");
user_pref("extensions.ORJ-SPE.previous-keyword-url", "\"https://uk.search.yahoo.com/search?fr=g ... =937811&p=\"");
user_pref("extensions.ORJ-V7C.my-keyword-url", "\"\"");
user_pref("extensions.ORJ-V7C.previous-keyword-url", "\"\"");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\80dz04l1.default

user.js not found
---- Lines mybrowserbar removed from prefs.js ----
user_pref("extensions.saamazon@mybrowserbar.com.install-event-fired", true);
user_pref("extensions.saebay@mybrowserbar.com.install-event-fired", true);
user_pref("extensions.savingsslider@mybrowserbar.com.install-event-fired", true);
---- FireFox user.js and prefs.js backups ----

prefs_072014_1305_.backup
prefs_082014_1400_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~3\Wideblue installer deleted
C:\PROGRA~2\Mozilla Firefox\browser\searchplugins\default-search.xml deleted
C:\PROGRA~2\COMMON~1\DVDVideoSoft\bin deleted
C:\Users\new\AppData\Roaming\OpenCandy deleted
C:\PROGRA~3\hpe4F6A.dll deleted
C:\Users\new\Searches deleted
C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\80dz04l1.default\searchplugins\default-search.xml deleted
"C:\PROGRA~2\Settings Manager\smdmf\x64\del_DM_LL_nszA652.dll" deleted
"C:\PROGRA~2\Settings Manager" not deleted
"C:\PROGRA~2\Settings Manager\smdmf" not deleted
"C:\PROGRA~2\Settings Manager\smdmf\x64" not deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [02/07/2014 15:31]

==== Firefox Extensions ======================

ProfilePath: C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\80dz04l1.default
- Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
- avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
- Linkey for Firefox - %ProfilePath%\extensions\extension@linkeyproject.com
- ColorfulTabs - %ProfilePath%\extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe}
- DownloadHelper - %ProfilePath%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
- Download Manager S3 - %ProfilePath%\extensions\s3download@statusbar.xpi
- Google Translator for Firefox - %ProfilePath%\extensions\translator@zoli.bod.xpi
- Quick Translator - %ProfilePath%\extensions\{5C655500-E712-41e7-9349-CE462F844B19}.xpi
- ImTranslator - %ProfilePath%\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi
- DownThemAll - %ProfilePath%\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\80dz04l1.default
4390CCD3790F8D9C427C0C29590C62D7 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll - Shockwave Flash
AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation


==== Deleted Firefox Extensions ======================

C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\80dz04l1.default\extensions\extension@linkeyproject.com deleted

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
fpmeembnagmagppkgghhfjfdfajdfcah - C:\Users\new\AppData\Local\Linkey\ChromeExtension\ChromeExtension.crx[17/07/2014 10:56]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[02/07/2014 15:31]

Google Translate - new\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb
Beautiful landscape - new\AppData\Local\Google\Chrome\User Data\Default\Extensions\ambfimhigppdidfmelpjmojccbfdoeig
avast Online Security - new\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
ImTranslator Google Translate - new\AppData\Local\Google\Chrome\User Data\Default\Extensions\noaijdpnepcgjemiklgfkcfbkokogabh

==== Chromium Startpages ======================

C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "http://google.co.uk/",


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.default-search.net?sid=503&a ... 34&src=hmp"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{A73BABC1-F83A-46EB-9CA8-0D6C489E5E5E} Bing Url="http://www.bing.com/search?FORM=BDT3DF& ... -SearchBox"

==== Reset Google Chrome ======================

C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\new\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\new\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\new\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\new\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\new\AppData\Local\Mozilla\Firefox\Profiles\80dz04l1.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=157 folders=36 84366278 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\new\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\new\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\new\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\PROGRA~2\Settings Manager" not found

==== EOF on 09/08/2014 at 14:19:44.97 ======================
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Pomale PC + RSIT

#6 Příspěvek od vyosek »

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
kocour123
Návštěvník
Návštěvník
Příspěvky: 27
Registrován: 22 Črv 2014 14:57

Re: Pomale PC + RSIT

#7 Příspěvek od kocour123 »

Log FRST:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-08-2014
Ran by new (administrator) on NEW-PC on 09-08-2014 15:52:01
Running from C:\Users\new\Desktop
Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) OS Language: English (United States)
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IDT, Inc.) C:\WINDOWS\System32\DriverStore\FileRepository\stwrt64.inf_54cb4575\stacsv64.exe
(Microsoft Corporation) C:\WINDOWS\System32\SLsvc.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\WINDOWS\System32\DriverStore\FileRepository\stwrt64.inf_54cb4575\AESTSr64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Nero AG) C:\Program Files (x86)\Nero\Nero 2014\Nero BackItUp\NBService\NBService.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(SoftThinks) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Intel Corporation) C:\WINDOWS\System32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\System32\igfxpers.exe
(Intel Corporation) C:\WINDOWS\System32\igfxsrvc.exe
(Dell Inc.) C:\WINDOWS\System32\WLTRAY.EXE
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\WINDOWS\ehome\ehtray.exe
(Gianpaolo Bottin) C:\Program Files (x86)\WallpaperSS\WallpaperSS.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
() C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Microsoft Corporation) C:\WINDOWS\ehome\ehmsas.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Adobe Systems, Inc.) C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Anvsoft Inc.) C:\Program Files (x86)\AnvSoft\Any Video Converter\AVCFree.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [305664 2009-03-31] (Alps Electric Co., Ltd.)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Windows\system32\WLTRAY.exe [4119552 2008-12-21] (Dell Inc.)
HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [2115664 2009-03-27] (Dell Inc.)
HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [178712 2008-06-15] (Intel Corporation)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-02-26] (IDT, Inc.)
HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe [1779952 2009-07-07] ()
HKLM-x32\...\Run: [Microsoft Default Manager] => C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [250192 2009-04-24] (Microsoft Corporation)
HKLM-x32\...\Run: [DellSupportCenter] => "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4086432 2014-07-02] (AVAST Software)
HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe /fromkey
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-1710971718-3430145923-3092330257-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [138240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-1710971718-3430145923-3092330257-1000\...\Run: [WallpaperSS] => C:\Program Files (x86)\WallpaperSS\WallpaperSS.exe [460864 2012-05-03] (Gianpaolo Bottin)
HKU\S-1-5-21-1710971718-3430145923-3092330257-1000\...\Run: [Browser Extensions] => "C:\Users\new\AppData\Roaming\Browser Extensions\CouponsHelper.exe"
HKU\S-1-5-21-1710971718-3430145923-3092330257-1000\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [466656 2014-05-23] (Sony)
HKU\S-1-5-21-1710971718-3430145923-3092330257-1000\...\Run: [DellSystemDetect] => C:\Users\new\AppData\Local\Apps\2.0\NGAPRWHV.TY8\7H7O4R4E.7H1\dell..tion_0f612f649c4a10af_0005.0008_a4204ff54ae5d3ac\DellSystemDetect.exe [262720 2014-06-23] (Dell)
AppInit_DLLs: C:\Users\new\AppData\Local\Linkey\IEEXTE~1\iedll64.dll => C:\Users\new\AppData\Local\Linkey\IEExtension\iedll64.dll [202256 2014-07-17] (Aztec Media Inc)
AppInit_DLLs-x32: C:\Users\new\AppData\Local\Linkey\IEEXTE~1\iedll.dll => C:\Users\new\AppData\Local\Linkey\IEExtension\iedll.dll [175632 2014-07-17] (Aztec Media Inc)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\new\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tapety 2.12.lnk
ShortcutTarget: Tapety 2.12.lnk -> C:\Program Files (x86)\Tapety 2.12\Tapety.exe (No File)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Linkey -> {4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47} -> C:\Users\new\AppData\Local\Linkey\IEExtension\iedll64.dll (Aztec Media Inc)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Linkey -> {4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47} -> C:\Users\new\AppData\Local\Linkey\IEExtension\iedll.dll (Aztec Media Inc)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 194.168.4.100 194.168.8.100

FireFox:
========
FF ProfilePath: C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\80dz04l1.default
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: ColorfulTabs - C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\80dz04l1.default\Extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} [2014-07-24]
FF Extension: DownloadHelper - C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\80dz04l1.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-08-08]
FF Extension: Download Manager (S3) - C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\80dz04l1.default\Extensions\s3download@statusbar.xpi [2014-06-25]
FF Extension: Google Translator for Firefox - C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\80dz04l1.default\Extensions\translator@zoli.bod.xpi [2014-08-09]
FF Extension: ImTranslator - C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\80dz04l1.default\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2014-06-24]
FF Extension: DownThemAll! - C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\80dz04l1.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-06-25]
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-04-24]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-06-22]

Chrome:
=======
CHR Extension: (Google Translate) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2014-08-08]
CHR Extension: (Beautiful landscape) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\ambfimhigppdidfmelpjmojccbfdoeig [2014-08-08]
CHR Extension: (Google Docs) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-11]
CHR Extension: (Google Drive) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-11]
CHR Extension: (YouTube) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-11]
CHR Extension: (Google Search) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-11]
CHR Extension: (avast! Online Security) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-07-04]
CHR Extension: (Chrono Download Manager) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\mciiogijehkdemklbdcbfkefimifhecn [2014-08-08]
CHR Extension: (Google Wallet) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-22]
CHR Extension: (ImTranslator: Google Translate) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\noaijdpnepcgjemiklgfkcfbkokogabh [2014-08-01]
CHR Extension: (Gmail) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-11]
CHR HKLM-x32\...\Chrome\Extension: [fpmeembnagmagppkgghhfjfdfajdfcah] - C:\Users\new\AppData\Local\Linkey\ChromeExtension\ChromeExtension.crx [2014-08-09]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-02]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_54cb4575\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-02] (AVAST Software)
R2 DockLoginService; C:\Program Files\Dell\DellDock\DockLogin.exe [155648 2008-12-18] (Stardock Corporation) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 NBService; C:\Program Files (x86)\Nero\Nero 2014\Nero BackItUp\NBService\NBService.exe [265552 2014-05-10] (Nero AG)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_54cb4575\STacSV64.exe [244736 2010-02-26] (IDT, Inc.)
S2 BingDesktopUpdate; "C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-02] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-02] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [64752 2014-07-02] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-02] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-02] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [426848 2014-07-02] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2014-07-02] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-02] ()
S3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [102600 2009-06-18] (McAfee, Inc.)
S3 mfebopk; C:\Windows\System32\drivers\mfebopk.sys [41032 2009-06-18] (McAfee, Inc.)
R1 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [307400 2009-06-18] (McAfee, Inc.)
S3 mferkdk; C:\Windows\System32\drivers\mferkdk.sys [40904 2009-06-18] (McAfee, Inc.)
S3 mfesmfk; C:\Windows\System32\drivers\mfesmfk.sys [49480 2009-06-18] (McAfee, Inc.)
S3 SPPD; C:\Windows\system32\drivers\SPPD.sys [21464 2014-07-18] ()
S3 cpuz134; \??\C:\Users\new\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-09 15:52 - 2014-08-09 15:53 - 00018106 _____ () C:\Users\new\Desktop\FRST.txt
2014-08-09 15:51 - 2014-08-09 15:52 - 00000000 ____D () C:\FRST
2014-08-09 15:50 - 2014-08-09 15:50 - 02094080 _____ (Farbar) C:\Users\new\Desktop\FRST64.exe
2014-08-09 14:42 - 2014-08-09 14:42 - 00000000 ____D () C:\Users\new\Desktop\DVD_PAL
2014-08-09 14:23 - 2014-08-09 14:23 - 00012247 _____ () C:\Users\new\Desktop\zoek-results.txt
2014-08-09 14:07 - 2014-08-09 13:42 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-09 13:43 - 2014-08-09 14:19 - 00012247 _____ () C:\zoek-results.log
2014-08-09 13:42 - 2014-08-09 14:03 - 00000000 ____D () C:\zoek_backup
2014-08-09 13:41 - 2014-08-09 13:41 - 01288704 _____ () C:\Users\new\Desktop\zoek.exe
2014-08-09 11:28 - 2014-08-09 11:30 - 00000000 ____D () C:\Users\new\AppData\Roaming\Skype
2014-08-09 11:28 - 2014-08-09 11:28 - 00000000 ____D () C:\Users\new\AppData\Local\Skype
2014-08-09 11:27 - 2014-08-09 11:30 - 00000000 ____D () C:\ProgramData\Skype
2014-08-09 11:26 - 2014-08-09 13:16 - 00000000 ____D () C:\Users\new\Desktop\programy na mobil
2014-08-09 11:25 - 2014-08-09 11:25 - 00000000 ____D () C:\Users\new\AppData\Roaming\FirefoxToolbar
2014-08-09 11:25 - 2014-08-09 11:25 - 00000000 ____D () C:\Users\new\AppData\Local\Linkey
2014-08-09 11:24 - 2014-08-09 11:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-09 11:24 - 2014-08-09 11:25 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-08-09 11:23 - 2014-08-09 11:24 - 00000000 ____D () C:\Users\new\AppData\Roaming\DVDVideoSoft
2014-08-09 10:37 - 2014-08-09 10:39 - 00000000 ____D () C:\AdwCleaner
2014-08-09 10:37 - 2014-08-09 10:37 - 00002610 _____ () C:\Users\new\Desktop\JRT.txt
2014-08-09 10:22 - 2014-08-09 10:22 - 01366203 _____ () C:\Users\new\Desktop\adwcleaner_3.304.exe
2014-08-09 10:21 - 2014-08-09 10:22 - 01016261 _____ (Thisisu) C:\Users\new\Desktop\JRT.exe
2014-08-09 09:29 - 2014-08-09 09:29 - 00000000 ____D () C:\rsit
2014-08-09 09:28 - 2014-08-09 09:28 - 01222144 _____ () C:\Users\new\Desktop\RSITx64.exe
2014-08-08 16:45 - 2014-08-08 17:37 - 00000000 ____D () C:\Users\new\Desktop\New Folder
2014-08-08 15:37 - 2014-08-08 15:37 - 00000000 ____D () C:\ProgramData\Sony
2014-08-08 15:37 - 2014-08-08 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2014-08-08 15:37 - 2014-08-08 15:37 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-08-08 15:12 - 2014-08-08 15:12 - 00000000 ____D () C:\Users\new\AppData\Local\Sony Ericsson
2014-08-08 15:12 - 2014-08-08 15:12 - 00000000 ____D () C:\ProgramData\BVRP Software
2014-08-08 15:08 - 2014-08-09 13:11 - 00639954 _____ () C:\Windows\DpInst.log
2014-08-08 15:08 - 2014-08-08 15:08 - 00000000 ____D () C:\ProgramData\Sony Ericsson
2014-08-06 19:04 - 2014-08-06 19:03 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-06 19:03 - 2014-08-06 19:03 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-08-06 19:03 - 2014-08-06 19:03 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-08-06 19:03 - 2014-08-06 19:03 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-06 19:03 - 2014-08-06 19:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-06 19:03 - 2014-08-06 19:03 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-02 15:42 - 2014-08-02 15:42 - 00000000 ____D () C:\Users\new\AppData\Roaming\Nikon
2014-08-02 15:42 - 2014-08-02 15:42 - 00000000 ____D () C:\Users\new\AppData\Local\Nikon
2014-08-02 12:21 - 2014-08-02 12:21 - 00000000 ____D () C:\Program Files (x86)\DownloadToolz
2014-08-01 12:38 - 2014-08-01 15:06 - 1367545102 _____ () C:\Users\new\Desktop\Pamatkari-Monuments-Men,-The-2014-cesky-dabing+forced-cz-tit-v-obraze.avi
2014-08-01 12:21 - 2014-08-09 15:26 - 00000946 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-01 12:21 - 2014-08-09 14:19 - 00000942 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-29 14:10 - 2014-07-29 14:10 - 00000000 ____D () C:\Users\new\AppData\Roaming\AVG
2014-07-29 14:10 - 2014-07-29 14:10 - 00000000 ____D () C:\Users\new\AppData\Local\AVG
2014-07-29 14:08 - 2014-08-09 11:26 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-07-29 14:08 - 2014-07-29 14:11 - 00000000 ____D () C:\ProgramData\AVG
2014-07-29 14:03 - 2014-07-29 14:03 - 00000000 ____D () C:\Users\new\Documents\Any Video Converter
2014-07-29 14:03 - 2014-07-29 14:03 - 00000000 ____D () C:\Users\new\AppData\Roaming\AnvSoft
2014-07-29 14:03 - 2014-07-29 14:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnvSoft
2014-07-29 14:03 - 2014-07-29 14:03 - 00000000 ____D () C:\Program Files (x86)\AnvSoft
2014-07-26 00:59 - 2014-07-26 01:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Softendo.com
2014-07-23 16:59 - 2014-08-08 16:08 - 00001300 _____ () C:\Users\new\AppData\Roaming\wklnhst.dat
2014-07-23 16:59 - 2014-07-23 16:59 - 00000000 ____D () C:\Users\new\AppData\Roaming\Template
2014-07-23 14:38 - 2014-07-23 14:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2014-07-23 14:38 - 2014-07-23 14:38 - 00000000 ____D () C:\GOG Games
2014-07-22 20:19 - 2014-07-25 11:15 - 00000000 ____D () C:\Users\new\Desktop\CV and motivacni dopis
2014-07-21 13:38 - 2014-07-21 13:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Return To Castle Wolfenstein
2014-07-21 13:36 - 2014-07-21 13:36 - 00000000 ____D () C:\Program Files (x86)\Return To Castle Wolfenstein
2014-07-21 12:29 - 2014-07-21 12:29 - 00000000 ____D () C:\Users\new\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DFIncBackup Std
2014-07-18 15:51 - 2014-07-18 15:51 - 00525792 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll
2014-07-18 15:50 - 2014-07-18 19:11 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-07-18 15:50 - 2014-07-18 15:50 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-07-18 15:50 - 2014-02-26 15:16 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-07-18 15:49 - 2014-07-18 20:17 - 00021464 _____ () C:\Windows\system32\Drivers\SPPD.sys
2014-07-17 15:04 - 2014-07-17 15:04 - 00000000 ____D () C:\Windows\System32\Tasks\Auslogics
2014-07-17 15:03 - 2014-07-17 15:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2014-07-17 15:03 - 2014-07-17 15:03 - 00000000 ____D () C:\ProgramData\Auslogics
2014-07-17 15:03 - 2014-07-17 15:03 - 00000000 ____D () C:\Program Files (x86)\Auslogics
2014-07-16 19:55 - 2014-07-24 18:03 - 00000000 ____D () C:\Users\new\AppData\Local\Microsoft Games
2014-07-16 12:54 - 2014-07-16 12:54 - 00000000 ____D () C:\Windows\System32\Tasks\Nero
2014-07-16 12:51 - 2014-07-16 12:54 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-07-16 11:49 - 2014-07-16 11:54 - 00000000 ____D () C:\Users\new\AppData\Roaming\WallpaperSS
2014-07-16 11:48 - 2014-07-16 12:20 - 00000000 ____D () C:\Program Files (x86)\WallpaperSS
2014-07-15 12:14 - 2014-07-15 12:14 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
2014-07-15 11:10 - 2014-07-15 11:42 - 00000000 ____D () C:\Program Files (x86)\PhotoFiltre 7
2014-07-15 11:10 - 2014-07-15 11:10 - 00000000 ____D () C:\Users\new\AppData\Roaming\PhotoFiltre 7
2014-07-15 11:10 - 2014-07-15 11:10 - 00000000 ____D () C:\Users\new\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
2014-07-15 11:10 - 2014-07-15 11:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
2014-07-14 08:13 - 2014-07-14 08:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-07-13 01:14 - 2014-07-13 01:14 - 00000000 ____D () C:\Users\new\Documents\NFS Most Wanted
2014-07-12 22:24 - 2014-07-12 22:24 - 00000000 ____D () C:\Users\new\Documents\Criterion Games
2014-07-12 14:58 - 2014-07-12 14:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES
2014-07-12 14:55 - 2014-07-12 14:56 - 00000000 ____D () C:\NFSMWDemo
2014-07-11 18:48 - 2014-07-11 18:49 - 00000000 ____D () C:\Users\new\Documents\Puzzle Quest
2014-07-11 18:45 - 2014-07-11 18:47 - 00000000 ____D () C:\Program Files (x86)\Puzzle Quest
2014-07-11 18:45 - 2014-07-11 18:45 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-07-11 18:45 - 2014-07-11 18:45 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-07-11 18:45 - 2014-07-11 18:45 - 00133632 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-07-11 18:45 - 2014-07-11 18:45 - 00110592 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-07-11 18:45 - 2014-07-11 18:45 - 00000000 ____D () C:\Users\new\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Puzzle Quest
2014-07-11 18:45 - 2014-07-11 18:45 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-07-10 15:11 - 2014-07-10 15:11 - 00000000 ____D () C:\Windows\ERUNT
2014-07-10 12:03 - 2014-07-10 12:03 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-07-10 12:03 - 2014-07-10 12:03 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-09 15:53 - 2014-08-09 15:52 - 00018106 _____ () C:\Users\new\Desktop\FRST.txt
2014-08-09 15:52 - 2014-08-09 15:51 - 00000000 ____D () C:\FRST
2014-08-09 15:50 - 2014-08-09 15:50 - 02094080 _____ (Farbar) C:\Users\new\Desktop\FRST64.exe
2014-08-09 15:31 - 2014-06-22 12:10 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-08-09 15:26 - 2014-08-01 12:21 - 00000946 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-09 15:00 - 2014-06-22 19:08 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-09 14:42 - 2014-08-09 14:42 - 00000000 ____D () C:\Users\new\Desktop\DVD_PAL
2014-08-09 14:23 - 2014-08-09 14:23 - 00012247 _____ () C:\Users\new\Desktop\zoek-results.txt
2014-08-09 14:20 - 2009-09-21 22:02 - 02083124 _____ () C:\Windows\WindowsUpdate.log
2014-08-09 14:19 - 2014-08-09 13:43 - 00012247 _____ () C:\zoek-results.log
2014-08-09 14:19 - 2014-08-01 12:21 - 00000942 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-09 14:10 - 2006-11-02 16:42 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-09 14:10 - 2006-11-02 16:22 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-09 14:10 - 2006-11-02 16:22 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-09 14:09 - 2008-01-21 04:26 - 00621572 _____ () C:\Windows\PFRO.log
2014-08-09 14:09 - 2006-11-02 16:42 - 00032624 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-09 14:03 - 2014-08-09 13:42 - 00000000 ____D () C:\zoek_backup
2014-08-09 14:01 - 2014-06-19 05:09 - 00000000 ____D () C:\Users\new
2014-08-09 13:42 - 2014-08-09 14:07 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-09 13:41 - 2014-08-09 13:41 - 01288704 _____ () C:\Users\new\Desktop\zoek.exe
2014-08-09 13:16 - 2014-08-09 11:26 - 00000000 ____D () C:\Users\new\Desktop\programy na mobil
2014-08-09 13:12 - 2009-09-22 03:31 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-08-09 13:11 - 2014-08-08 15:08 - 00639954 _____ () C:\Windows\DpInst.log
2014-08-09 12:01 - 2014-06-23 13:40 - 00003440 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask
2014-08-09 12:00 - 2006-11-02 13:46 - 00763562 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-09 11:57 - 2014-06-25 11:38 - 00000000 ____D () C:\Users\new\Desktop\mnauuu moje filmy mnauuu
2014-08-09 11:30 - 2014-08-09 11:28 - 00000000 ____D () C:\Users\new\AppData\Roaming\Skype
2014-08-09 11:30 - 2014-08-09 11:27 - 00000000 ____D () C:\ProgramData\Skype
2014-08-09 11:28 - 2014-08-09 11:28 - 00000000 ____D () C:\Users\new\AppData\Local\Skype
2014-08-09 11:26 - 2014-07-29 14:08 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-08-09 11:25 - 2014-08-09 11:25 - 00000000 ____D () C:\Users\new\AppData\Roaming\FirefoxToolbar
2014-08-09 11:25 - 2014-08-09 11:25 - 00000000 ____D () C:\Users\new\AppData\Local\Linkey
2014-08-09 11:25 - 2014-08-09 11:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-09 11:25 - 2014-08-09 11:24 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-08-09 11:24 - 2014-08-09 11:23 - 00000000 ____D () C:\Users\new\AppData\Roaming\DVDVideoSoft
2014-08-09 10:39 - 2014-08-09 10:37 - 00000000 ____D () C:\AdwCleaner
2014-08-09 10:37 - 2014-08-09 10:37 - 00002610 _____ () C:\Users\new\Desktop\JRT.txt
2014-08-09 10:22 - 2014-08-09 10:22 - 01366203 _____ () C:\Users\new\Desktop\adwcleaner_3.304.exe
2014-08-09 10:22 - 2014-08-09 10:21 - 01016261 _____ (Thisisu) C:\Users\new\Desktop\JRT.exe
2014-08-09 09:29 - 2014-08-09 09:29 - 00000000 ____D () C:\rsit
2014-08-09 09:29 - 2014-06-22 15:03 - 00000000 ____D () C:\Program Files\trend micro
2014-08-09 09:28 - 2014-08-09 09:28 - 01222144 _____ () C:\Users\new\Desktop\RSITx64.exe
2014-08-08 17:37 - 2014-08-08 16:45 - 00000000 ____D () C:\Users\new\Desktop\New Folder
2014-08-08 16:08 - 2014-07-23 16:59 - 00001300 _____ () C:\Users\new\AppData\Roaming\wklnhst.dat
2014-08-08 16:05 - 2006-11-02 16:27 - 00196863 _____ () C:\Windows\setupact.log
2014-08-08 15:37 - 2014-08-08 15:37 - 00000000 ____D () C:\ProgramData\Sony
2014-08-08 15:37 - 2014-08-08 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2014-08-08 15:37 - 2014-08-08 15:37 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-08-08 15:12 - 2014-08-08 15:12 - 00000000 ____D () C:\Users\new\AppData\Local\Sony Ericsson
2014-08-08 15:12 - 2014-08-08 15:12 - 00000000 ____D () C:\ProgramData\BVRP Software
2014-08-08 15:08 - 2014-08-08 15:08 - 00000000 ____D () C:\ProgramData\Sony Ericsson
2014-08-08 11:13 - 2014-06-22 15:30 - 00000000 ____D () C:\Users\new\AppData\Roaming\vlc
2014-08-07 18:49 - 2014-06-22 12:21 - 00000000 ____D () C:\Users\new\Desktop\programy
2014-08-07 18:46 - 2014-06-26 11:00 - 00000000 ____D () C:\Users\new\Desktop\Mnauuu Hraju si Mnauuu
2014-08-07 11:49 - 2014-06-22 13:26 - 00007208 _____ () C:\Windows\system32\spsys.log
2014-08-06 19:05 - 2014-07-04 10:56 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-06 19:03 - 2014-08-06 19:04 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-06 19:03 - 2014-08-06 19:03 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-08-06 19:03 - 2014-08-06 19:03 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-08-06 19:03 - 2014-08-06 19:03 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-06 19:03 - 2014-08-06 19:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-06 19:03 - 2014-08-06 19:03 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-02 15:42 - 2014-08-02 15:42 - 00000000 ____D () C:\Users\new\AppData\Roaming\Nikon
2014-08-02 15:42 - 2014-08-02 15:42 - 00000000 ____D () C:\Users\new\AppData\Local\Nikon
2014-08-02 15:42 - 2014-07-09 12:37 - 00000020 ____H () C:\ProgramData\PKP_DLet.DAT
2014-08-02 12:21 - 2014-08-02 12:21 - 00000000 ____D () C:\Program Files (x86)\DownloadToolz
2014-08-01 18:48 - 2014-06-25 20:08 - 00000000 ____D () C:\Users\new\Documents\My Games
2014-08-01 15:06 - 2014-08-01 12:38 - 1367545102 _____ () C:\Users\new\Desktop\Pamatkari-Monuments-Men,-The-2014-cesky-dabing+forced-cz-tit-v-obraze.avi
2014-08-01 12:21 - 2014-06-22 11:59 - 00003942 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-08-01 12:21 - 2014-06-22 11:59 - 00003690 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-08-01 12:21 - 2014-06-22 11:59 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-30 17:23 - 2014-06-22 11:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-30 11:49 - 2014-06-22 11:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-29 14:11 - 2014-07-29 14:08 - 00000000 ____D () C:\ProgramData\AVG
2014-07-29 14:10 - 2014-07-29 14:10 - 00000000 ____D () C:\Users\new\AppData\Roaming\AVG
2014-07-29 14:10 - 2014-07-29 14:10 - 00000000 ____D () C:\Users\new\AppData\Local\AVG
2014-07-29 14:03 - 2014-07-29 14:03 - 00000000 ____D () C:\Users\new\Documents\Any Video Converter
2014-07-29 14:03 - 2014-07-29 14:03 - 00000000 ____D () C:\Users\new\AppData\Roaming\AnvSoft
2014-07-29 14:03 - 2014-07-29 14:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnvSoft
2014-07-29 14:03 - 2014-07-29 14:03 - 00000000 ____D () C:\Program Files (x86)\AnvSoft
2014-07-26 01:12 - 2014-07-26 00:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Softendo.com
2014-07-25 11:15 - 2014-07-22 20:19 - 00000000 ____D () C:\Users\new\Desktop\CV and motivacni dopis
2014-07-25 09:44 - 2014-06-22 14:00 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-07-25 09:36 - 2006-11-02 14:34 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-07-24 20:58 - 2009-09-22 03:46 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 20:14 - 2014-06-23 11:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-24 18:03 - 2014-07-16 19:55 - 00000000 ____D () C:\Users\new\AppData\Local\Microsoft Games
2014-07-23 19:45 - 2014-06-19 05:09 - 00102048 _____ () C:\Users\new\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-23 19:43 - 2006-11-02 16:21 - 00384864 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-23 19:31 - 2014-07-09 15:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-07-23 19:31 - 2009-09-22 03:47 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-23 19:19 - 2009-09-22 03:36 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-07-23 19:17 - 2006-11-02 16:07 - 00000000 ____D () C:\Windows\ShellNew
2014-07-23 19:16 - 2006-11-02 13:34 - 00000128 _____ () C:\Windows\win.ini
2014-07-23 16:59 - 2014-07-23 16:59 - 00000000 ____D () C:\Users\new\AppData\Roaming\Template
2014-07-23 16:42 - 2009-09-22 03:36 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-07-23 14:38 - 2014-07-23 14:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2014-07-23 14:38 - 2014-07-23 14:38 - 00000000 ____D () C:\GOG Games
2014-07-21 13:38 - 2014-07-21 13:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Return To Castle Wolfenstein
2014-07-21 13:36 - 2014-07-21 13:36 - 00000000 ____D () C:\Program Files (x86)\Return To Castle Wolfenstein
2014-07-21 12:29 - 2014-07-21 12:29 - 00000000 ____D () C:\Users\new\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DFIncBackup Std
2014-07-19 12:24 - 2014-06-22 12:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-19 12:24 - 2014-06-22 11:30 - 00000803 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-07-19 12:24 - 2014-06-19 05:13 - 00000907 _____ () C:\Users\new\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-07-19 12:24 - 2014-06-19 05:12 - 00000907 _____ () C:\Users\new\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-18 20:17 - 2014-07-18 15:49 - 00021464 _____ () C:\Windows\system32\Drivers\SPPD.sys
2014-07-18 19:31 - 2014-07-09 12:36 - 00000000 ____D () C:\Users\new\AppData\Local\Downloaded Installations
2014-07-18 19:12 - 2006-11-02 14:34 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-07-18 19:12 - 2006-11-02 13:33 - 67108864 _____ () C:\Windows\system32\config\software_previous
2014-07-18 19:12 - 2006-11-02 13:33 - 59768832 _____ () C:\Windows\system32\config\components_previous
2014-07-18 19:12 - 2006-11-02 13:33 - 26214400 _____ () C:\Windows\system32\config\system_previous
2014-07-18 19:12 - 2006-11-02 13:33 - 00262144 _____ () C:\Windows\system32\config\security_previous
2014-07-18 19:12 - 2006-11-02 13:33 - 00262144 _____ () C:\Windows\system32\config\sam_previous
2014-07-18 19:12 - 2006-11-02 13:33 - 00262144 _____ () C:\Windows\system32\config\default_previous
2014-07-18 19:11 - 2014-07-18 15:50 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-07-18 19:11 - 2006-11-02 14:34 - 00000000 ____D () C:\Windows\system32\spool
2014-07-18 19:11 - 2006-11-02 14:33 - 00000000 ____D () C:\Windows\registration
2014-07-18 15:51 - 2014-07-18 15:51 - 00525792 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll
2014-07-18 15:50 - 2014-07-18 15:50 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-07-17 15:04 - 2014-07-17 15:04 - 00000000 ____D () C:\Windows\System32\Tasks\Auslogics
2014-07-17 15:03 - 2014-07-17 15:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2014-07-17 15:03 - 2014-07-17 15:03 - 00000000 ____D () C:\ProgramData\Auslogics
2014-07-17 15:03 - 2014-07-17 15:03 - 00000000 ____D () C:\Program Files (x86)\Auslogics
2014-07-16 12:54 - 2014-07-16 12:54 - 00000000 ____D () C:\Windows\System32\Tasks\Nero
2014-07-16 12:54 - 2014-07-16 12:51 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-07-16 12:53 - 2014-06-30 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2014-07-16 12:51 - 2014-06-30 10:16 - 00000000 ____D () C:\ProgramData\Nero
2014-07-16 12:26 - 2014-06-23 13:35 - 00000000 ____D () C:\Users\new\AppData\Roaming\PCDr
2014-07-16 12:20 - 2014-07-16 11:48 - 00000000 ____D () C:\Program Files (x86)\WallpaperSS
2014-07-16 11:54 - 2014-07-16 11:49 - 00000000 ____D () C:\Users\new\AppData\Roaming\WallpaperSS
2014-07-15 12:14 - 2014-07-15 12:14 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
2014-07-15 11:42 - 2014-07-15 11:10 - 00000000 ____D () C:\Program Files (x86)\PhotoFiltre 7
2014-07-15 11:10 - 2014-07-15 11:10 - 00000000 ____D () C:\Users\new\AppData\Roaming\PhotoFiltre 7
2014-07-15 11:10 - 2014-07-15 11:10 - 00000000 ____D () C:\Users\new\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
2014-07-15 11:10 - 2014-07-15 11:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
2014-07-14 08:13 - 2014-07-14 08:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-07-14 08:13 - 2014-06-22 15:29 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-07-13 18:50 - 2014-07-04 11:12 - 00000000 ____D () C:\Users\new\AppData\Local\Adobe
2014-07-13 18:50 - 2014-06-22 11:22 - 00000000 ____D () C:\Users\new\AppData\Roaming\Adobe
2014-07-13 01:14 - 2014-07-13 01:14 - 00000000 ____D () C:\Users\new\Documents\NFS Most Wanted
2014-07-12 22:24 - 2014-07-12 22:24 - 00000000 ____D () C:\Users\new\Documents\Criterion Games
2014-07-12 14:58 - 2014-07-12 14:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES
2014-07-12 14:57 - 2009-09-22 03:44 - 00233815 _____ () C:\Windows\DirectX.log
2014-07-12 14:56 - 2014-07-12 14:55 - 00000000 ____D () C:\NFSMWDemo
2014-07-11 18:49 - 2014-07-11 18:48 - 00000000 ____D () C:\Users\new\Documents\Puzzle Quest
2014-07-11 18:47 - 2014-07-11 18:45 - 00000000 ____D () C:\Program Files (x86)\Puzzle Quest
2014-07-11 18:45 - 2014-07-11 18:45 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-07-11 18:45 - 2014-07-11 18:45 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-07-11 18:45 - 2014-07-11 18:45 - 00133632 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-07-11 18:45 - 2014-07-11 18:45 - 00110592 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-07-11 18:45 - 2014-07-11 18:45 - 00000000 ____D () C:\Users\new\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Puzzle Quest
2014-07-11 18:45 - 2014-07-11 18:45 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-07-10 15:11 - 2014-07-10 15:11 - 00000000 ____D () C:\Windows\ERUNT
2014-07-10 12:38 - 2014-06-22 16:13 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-07-10 12:37 - 2014-06-22 16:12 - 00000000 _____ () C:\Windows\SysWOW64\sinstall.log
2014-07-10 12:20 - 2006-11-02 16:07 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-10 12:03 - 2014-07-10 12:03 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-07-10 12:03 - 2014-07-10 12:03 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-07-10 12:03 - 2014-06-23 08:32 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-10 12:00 - 2006-11-02 13:35 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-09 14:24

==================== End Of Log ============================
Nahoru
kocour123
Návštěvník
Návštěvník
Příspěvky: 27
Registrován: 22 Črv 2014 14:57

Re: Pomale PC + RSIT

#8 Příspěvek od kocour123 »

Mam jeste neco udelat nebo je to v poradku?
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Pomale PC + RSIT

#9 Příspěvek od vyosek »

:arrow: Ono je vikend a ja bych se taky rad venoval rodine a svym konickum, pripadne byl v praci

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-1710971718-3430145923-3092330257-1000\...\Run: [Browser Extensions] => "C:\Users\new\AppData\Roaming\Browser Extensions\CouponsHelper.exe"

AppInit_DLLs: C:\Users\new\AppData\Local\Linkey\IEEXTE~1\iedll64.dll => C:\Users\new\AppData\Local\Linkey\IEExtension\iedll64.dll [202256 2014-07-17] (Aztec Media Inc)
AppInit_DLLs-x32: C:\Users\new\AppData\Local\Linkey\IEEXTE~1\iedll.dll => C:\Users\new\AppData\Local\Linkey\IEExtension\iedll.dll [175632 2014-07-17] (Aztec Media Inc)
CHR HKLM-x32\...\Chrome\Extension: [fpmeembnagmagppkgghhfjfdfajdfcah] - C:\Users\new\AppData\Local\Linkey\ChromeExtension\ChromeExtension.crx [2014-08-09]

S2 BingDesktopUpdate; "C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe" [X]

S3 cpuz134; \??\C:\Users\new\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

2014-08-09 15:52 - 2014-08-09 15:53 - 00018106 _____ () C:\Users\new\Desktop\FRST.txt
2014-08-09 14:23 - 2014-08-09 14:23 - 00012247 _____ () C:\Users\new\Desktop\zoek-results.txt
2014-08-09 14:07 - 2014-08-09 13:42 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-09 13:43 - 2014-08-09 14:19 - 00012247 _____ () C:\zoek-results.log
2014-08-09 13:42 - 2014-08-09 14:03 - 00000000 ____D () C:\zoek_backup
2014-08-09 13:41 - 2014-08-09 13:41 - 01288704 _____ () C:\Users\new\Desktop\zoek.exe
2014-08-09 11:25 - 2014-08-09 11:25 - 00000000 ____D () C:\Users\new\AppData\Roaming\FirefoxToolbar
2014-08-09 10:37 - 2014-08-09 10:39 - 00000000 ____D () C:\AdwCleaner
2014-08-09 10:37 - 2014-08-09 10:37 - 00002610 _____ () C:\Users\new\Desktop\JRT.txt
2014-08-09 10:22 - 2014-08-09 10:22 - 01366203 _____ () C:\Users\new\Desktop\adwcleaner_3.304.exe
2014-08-09 10:21 - 2014-08-09 10:22 - 01016261 _____ (Thisisu) C:\Users\new\Desktop\JRT.exe
2014-08-09 09:29 - 2014-08-09 09:29 - 00000000 ____D () C:\rsit
2014-08-09 09:28 - 2014-08-09 09:28 - 01222144 _____ () C:\Users\new\Desktop\RSITx64.exe
2014-08-09 11:25 - 2014-08-09 11:25 - 00000000 ____D () C:\Users\new\AppData\Local\Linkey

Hosts:
Reboot:
End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
kocour123
Návštěvník
Návštěvník
Příspěvky: 27
Registrován: 22 Črv 2014 14:57

Re: Pomale PC + RSIT

#10 Příspěvek od kocour123 »

Log:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-08-2014
Ran by new at 2014-08-10 14:35:09 Run:1
Running from C:\Users\new\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-1710971718-3430145923-3092330257-1000\...\Run: [Browser Extensions] => "C:\Users\new\AppData\Roaming\Browser Extensions\CouponsHelper.exe"

AppInit_DLLs: C:\Users\new\AppData\Local\Linkey\IEEXTE~1\iedll64.dll => C:\Users\new\AppData\Local\Linkey\IEExtension\iedll64.dll [202256 2014-07-17] (Aztec Media Inc)
AppInit_DLLs-x32: C:\Users\new\AppData\Local\Linkey\IEEXTE~1\iedll.dll => C:\Users\new\AppData\Local\Linkey\IEExtension\iedll.dll [175632 2014-07-17] (Aztec Media Inc)
CHR HKLM-x32\...\Chrome\Extension: [fpmeembnagmagppkgghhfjfdfajdfcah] - C:\Users\new\AppData\Local\Linkey\ChromeExtension\ChromeExtension.crx [2014-08-09]

S2 BingDesktopUpdate; "C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe" [X]

S3 cpuz134; \??\C:\Users\new\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

2014-08-09 15:52 - 2014-08-09 15:53 - 00018106 _____ () C:\Users\new\Desktop\FRST.txt
2014-08-09 14:23 - 2014-08-09 14:23 - 00012247 _____ () C:\Users\new\Desktop\zoek-results.txt
2014-08-09 14:07 - 2014-08-09 13:42 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-08-09 13:43 - 2014-08-09 14:19 - 00012247 _____ () C:\zoek-results.log
2014-08-09 13:42 - 2014-08-09 14:03 - 00000000 ____D () C:\zoek_backup
2014-08-09 13:41 - 2014-08-09 13:41 - 01288704 _____ () C:\Users\new\Desktop\zoek.exe
2014-08-09 11:25 - 2014-08-09 11:25 - 00000000 ____D () C:\Users\new\AppData\Roaming\FirefoxToolbar
2014-08-09 10:37 - 2014-08-09 10:39 - 00000000 ____D () C:\AdwCleaner
2014-08-09 10:37 - 2014-08-09 10:37 - 00002610 _____ () C:\Users\new\Desktop\JRT.txt
2014-08-09 10:22 - 2014-08-09 10:22 - 01366203 _____ () C:\Users\new\Desktop\adwcleaner_3.304.exe
2014-08-09 10:21 - 2014-08-09 10:22 - 01016261 _____ (Thisisu) C:\Users\new\Desktop\JRT.exe
2014-08-09 09:29 - 2014-08-09 09:29 - 00000000 ____D () C:\rsit
2014-08-09 09:28 - 2014-08-09 09:28 - 01222144 _____ () C:\Users\new\Desktop\RSITx64.exe
2014-08-09 11:25 - 2014-08-09 11:25 - 00000000 ____D () C:\Users\new\AppData\Local\Linkey

Hosts:
Reboot:
End
*****************

HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run\\WindowsWelcomeCenter => value deleted successfully.
HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run\\WindowsWelcomeCenter => value deleted successfully.
HKU\S-1-5-21-1710971718-3430145923-3092330257-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Browser Extensions => value deleted successfully.
"C:\Users\new\AppData\Local\Linkey\IEEXTE~1\iedll64.dll" => Value Data removed successfully.
"C:\Users\new\AppData\Local\Linkey\IEEXTE~1\iedll.dll" => Value Data removed successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fpmeembnagmagppkgghhfjfdfajdfcah" => Key deleted successfully.
C:\Users\new\AppData\Local\Linkey\ChromeExtension\ChromeExtension.crx => Moved successfully.
BingDesktopUpdate => Service deleted successfully.
cpuz134 => Service deleted successfully.
IpInIp => Service deleted successfully.
NwlnkFlt => Service deleted successfully.
NwlnkFwd => Service deleted successfully.
C:\Users\new\Desktop\FRST.txt => Moved successfully.
C:\Users\new\Desktop\zoek-results.txt => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\new\Desktop\zoek.exe => Moved successfully.
C:\Users\new\AppData\Roaming\FirefoxToolbar => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\new\Desktop\JRT.txt => Moved successfully.
C:\Users\new\Desktop\adwcleaner_3.304.exe => Moved successfully.
C:\Users\new\Desktop\JRT.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Users\new\Desktop\RSITx64.exe => Moved successfully.
C:\Users\new\AppData\Local\Linkey => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.


The system needed a reboot.

==== End of Fixlog ====
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Pomale PC + RSIT

#11 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
kocour123
Návštěvník
Návštěvník
Příspěvky: 27
Registrován: 22 Črv 2014 14:57

Re: Pomale PC + RSIT

#12 Příspěvek od kocour123 »

Moc vam dekuji za vycisteni PC.
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Pomale PC + RSIT

#13 Příspěvek od vyosek »

Nemate zac, rad jsem pomohl :worship: Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat :lock:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Zamčeno

Vrátit se na „Řešení problémů, logy“