Logfile of random's system information tool 1.10 (written by random/random)
Run by bongoro at 2014-08-08 14:56:45
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 90 GB (59%) free of 153 GB
Total RAM: 1023 MB (10% free)
HijackThis download failed
======Scheduled tasks folder======
C:\Windows\tasks\adca3079-8020-4cfb-b4bd-ccac35e5da7c.job - C:\Program Files\TheTorntv V10\f944725e-bdd6-4ffc-9ba0-0db1ccccd727-4.exe /TUfvYS=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
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\f944725e-bdd6-4ffc-9ba0-0db1ccccd727-1.job - C:\Program Files\TheTorntv V10\TheTorntv V10-codedownloader.exe /LNPYoFAu /klqxvZXa=task /KomBLJbIr='TheTorntv V10' /LxLqfKdO=61855 /NjIpZZA='001823' /HVMwYN='0' /ugyCMV='0' /xKmZsGy=8B1A821B6F374C58BC559CAF9E493F7CIE /GFtqnLxi=14d9859c75b75ae8cec358dc0c6ff991 /kBLHy=1_34_07_29 /vkgxEec=1.34.7.29 /DfNjMZ=1407339061 /jpVnoI=http://stats.infostatsserv.com /FqvPBj=http://errors.infostatsserv.com /GDQHj=http://cr.install-daddy.com /sgSQWEExS=ff /OuDSPgADu='TheTorntv V10' /GGGVQFfop=http://cr.install-daddy.com /FFhevoU /sFuwCaR='{"asw":[2, -2147483643, 536870912]}' /rmyGSKboH='http://update.infostatsserv.com/ie_code ... pdate.json' /klqxvZXa='task' /OSkFNzZpE=''
C:\Windows\tasks\f944725e-bdd6-4ffc-9ba0-0db1ccccd727-11.job - C:\Program Files\TheTorntv V10\f944725e-bdd6-4ffc-9ba0-0db1ccccd727-11.exe /TUfvYS=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
C:\Windows\tasks\f944725e-bdd6-4ffc-9ba0-0db1ccccd727-2.job - C:\Program Files\TheTorntv V10\f944725e-bdd6-4ffc-9ba0-0db1ccccd727-2.exe /qMPcHbhq /KomBLJbIr='TheTorntv V10' /LxLqfKdO=61855 /NjIpZZA='001823' /HVMwYN='0' /ugyCMV='0' /xKmZsGy=8B1A821B6F374C58BC559CAF9E493F7CIE /GFtqnLxi=14d9859c75b75ae8cec358dc0c6ff991 /kBLHy=1_34_07_29 /DfNjMZ=1407339061 /jpVnoI=http://stats.infostatsserv.com /FqvPBj=http://errors.infostatsserv.com /ePcGB=11111111-1111-1111-1111-110611181155 /sgSQWEExS=ff /FFhevoU /rmyGSKboH='http://update.infostatsserv.com/ie_enab ... pdate.json' /klqxvZXa='task' /OSkFNzZpE=''
C:\Windows\tasks\f944725e-bdd6-4ffc-9ba0-0db1ccccd727-3.job - C:\Program Files\TheTorntv V10\f944725e-bdd6-4ffc-9ba0-0db1ccccd727-3.exe /TUfvYS=WSRRdL3XrabaEpV3XOZ5HrZjpHxooONIRgAP5AXKBmQrQ6yVs8TJhYZ+lqHdgUYtNxePEFxbC/7Q9nOwPlutwOg9sDt/bOM0XwjjGZ9q6eel1FpbG5oYb3yXa5Yq4Tr1PRR3pkMY5Ws8Kg8XuXeS6vB45Z0sfCn2G9Aga9cBGQuu24MQY1rl3HFDy5FlYrEESIK4zyTsoVyYPvHZBXSydzu02afsd0pV9z1sf69U2P8jI5ZBTj/7ta9yEhMb2whYBifonlZMP38GZZ0ZiooX4OJHCWJZ6JogwHlf90SRE7JKprnl7iGkyJkUxpVpaI6EVhOztr9C4vqB6gscjDG0y5O8tcFFh0afgogTKzCwO2ymEg+fBo+5/wjaAts/TlcJSlanIwbUdp74rwZW6JPQnW6WCTqY8t/be5H9/+b9TFehRP2/BX0Bnx72NqtG87t80hhh5MXzJ57DzMLNwRF8QFPce2UjYJkGOjwWApJR/rXZl1IfoJblvtIqDsnxQTCZBE+UKYWzKV7Xq7mZ7In/d3fP3i63Q/XzAYHrOkJIi43ASo/n5h3XJHotwJ2I3P+xjsm1+Pt2ZqvGBuqZrR14sOhZJX8SiYfpPmTqviOKEl9xy5uAEfNl4h1PKsOfxxzazmGhHDhP+naJ5DdxGntk165L6R761kXvFRaRZ36dPMAzB0ILcFugSL2u19lBv5/CCwLYMf5PrIGKAQIWjcGugBNYGxCzEN2ikY5ne1YwEw2BeTgvuyZxkcRb8KfVO3h4BxfA5R775aPv9ww+nJwlMxfB3PXj8HmJvdItJTcOjV/sb7MVnJo0834/HKpRHeQLsY6rxGlJsvhDLEWp62uBUEJuezmvEU4GEcE1oIJUXUHuI904tij/mrMPSqCm1+2fAVO86Kd6Fq/zpB/Bjk0EKXWeRlMxuUI5oQbU+GL/nD8ZPa1H1RjUgqpwx1hgvvwAGf+7GhBWT5KQ09D7Jc/bRvF9SN/NPPrkBT3vc43GITw9uR3z++eDCdTlV/WG4O4h
C:\Windows\tasks\f944725e-bdd6-4ffc-9ba0-0db1ccccd727-4.job - C:\Program Files\TheTorntv V10\f944725e-bdd6-4ffc-9ba0-0db1ccccd727-4.exe /hLCePUT /KomBLJbIr='TheTorntv V10' /LqYcNjzO='C:\Program Files\TheTorntv V10\f944725e-bdd6-4ffc-9ba0-0db1ccccd727.xpi' /LxLqfKdO=61855 /NjIpZZA='001823' /HVMwYN='0' /ugyCMV='0' /xKmZsGy=8B1A821B6F374C58BC559CAF9E493F7CIE /GFtqnLxi=14d9859c75b75ae8cec358dc0c6ff991 /kBLHy=1_34_07_29 /vkgxEec=1.34.7.29 /DfNjMZ=1407339061 /jpVnoI=http://stats.infostatsserv.com /FqvPBj=http://errors.infostatsserv.com /UHPcBDdtb=300 /mfbRIgJM=44e4876d5886435183fea8e@44f892d6c2ac4a44858c85e3636.com /pjMYb=0.95 /WsQoHxja=a44e4876d5886435183fea8e44f892d6c2ac4a44858c85e3636com61855 /uKIoO=https://w9u6a2p6.ssl.hwcdn.net/plugin/f ... /61855.rdf /prgkQOhAi='TheTorntv V10' /mNZGaRK='The must-have App extensions for Television fans! Watch free TV channels, live sports and more' /iCrYTjQ='esc' /sgSQWEExS=ff /sFuwCaR='{"asw":[2, -2147483643, 536870912]}' /FFhevoU /gnPjEf /OmUjXyD /rmyGSKboH='http://update.infostatsserv.com/ff_agen ... pdate.json' /klqxvZXa='task' /OSkFNzZpE=''
C:\Windows\tasks\f944725e-bdd6-4ffc-9ba0-0db1ccccd727-5.job - C:\Program Files\TheTorntv V10\f944725e-bdd6-4ffc-9ba0-0db1ccccd727-5.exe /QFrSq /KomBLJbIr='TheTorntv V10' /LxLqfKdO=61855 /NjIpZZA='001823' /HVMwYN='0' /ugyCMV='0' /xKmZsGy=8B1A821B6F374C58BC559CAF9E493F7CIE /GFtqnLxi=14d9859c75b75ae8cec358dc0c6ff991 /kBLHy=1_34_07_29 /DfNjMZ=1407339061 /jpVnoI=http://stats.infostatsserv.com /FqvPBj=http://errors.infostatsserv.com /QEHRdKF=http://ipgeoapi.com/ /QcTwuCD=http://update.infostatsserv.com /ovfkobclI=2 /CDFTled=http://logs.infostatsserv.com /rmyGSKboH='http://update.infostatsserv.com/updater ... pdate.json' /klqxvZXa='task' /OSkFNzZpE=''
C:\Windows\tasks\f944725e-bdd6-4ffc-9ba0-0db1ccccd727-5_user.job - C:\Program Files\TheTorntv V10\f944725e-bdd6-4ffc-9ba0-0db1ccccd727-5.exe /QFrSq /KomBLJbIr='TheTorntv V10' /LxLqfKdO=61855 /NjIpZZA='001823' /HVMwYN='0' /ugyCMV='0' /xKmZsGy=8B1A821B6F374C58BC559CAF9E493F7CIE /GFtqnLxi=14d9859c75b75ae8cec358dc0c6ff991 /kBLHy=1_34_07_29 /DfNjMZ=1407339061 /jpVnoI=http://stats.infostatsserv.com /FqvPBj=http://errors.infostatsserv.com /QEHRdKF=http://ipgeoapi.com/ /QcTwuCD=http://update.infostatsserv.com /ovfkobclI=2 /CDFTled=http://logs.infostatsserv.com /rmyGSKboH='http://update.infostatsserv.com/updater ... pdate.json' /KOSnWQa /klqxvZXa='task' /OSkFNzZpE=''
C:\Windows\tasks\f944725e-bdd6-4ffc-9ba0-0db1ccccd727-7.job - C:\Program Files\TheTorntv V10\f944725e-bdd6-4ffc-9ba0-0db1ccccd727-7.exe /niSjldx /KomBLJbIr='TheTorntv V10' /LxLqfKdO=61855 /NjIpZZA='001823' /HVMwYN='0' /ugyCMV='0' /xKmZsGy=8B1A821B6F374C58BC559CAF9E493F7CIE /GFtqnLxi=14d9859c75b75ae8cec358dc0c6ff991 /kBLHy=1_34_07_29 /vkgxEec=1.34.7.29 /DfNjMZ=1407339061 /jpVnoI=http://stats.infostatsserv.com /FqvPBj=http://errors.infostatsserv.com /GDQHj=http://cr.install-daddy.com /sgSQWEExS=ff /DwaiEOFu /OuDSPgADu=TheTorntv V10 /tvkodozSdf8915b64-caec-40cf-88b4-10b12c314291.dll /iMEjqIj2666fc56-39d7-4474-bcde-e3ffa1313149.dll /rVzsVUQmf944725e-bdd6-4ffc-9ba0-0db1ccccd727-64.exe /CvUpL='nova' /GGGVQFfop=http://cr.install-daddy.com /sFuwCaR='{"asw":[2, -2147483643, 536870912]}' /klqxvZXa=task /rmyGSKboH='http://update.infostatsserv.com/novacod ... pdate.json' /klqxvZXa='task' /OSkFNzZpE=''
C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files\globalUpdate\Update\GoogleUpdate.exe /c
C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files\globalUpdate\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
=========Mozilla firefox=========
ProfilePath - C:\Users\bongoro\AppData\Roaming\Mozilla\Firefox\Profiles\1fd4hres.default
prefs.js - "browser.search.useDBForOrder" - "false"
prefs.js - "browser.startup.homepage" - "http://www.istartsurf.com/?type=hp&ts=1 ... 4_6496A0F3"
prefs.js - "keyword.URL" - "https://search.yahoo.com/search?fr=gree ... =501549&p="
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 14.0.0.145 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.65.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.65.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10]
"Description"=globalUpdate Update
"Path"=C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4]
"Description"=globalUpdate Update
"Path"=C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
C:\Users\bongoro\AppData\Roaming\Mozilla\Firefox\Profiles\1fd4hres.default\extensions\
44e4876d5886435183fea8e@44f892d6c2ac4a44858c85e3636.com
C:\Users\bongoro\AppData\Roaming\Mozilla\Firefox\Profiles\1fd4hres.default\searchplugins\
yahoo_ff.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611181155}]
TheTorntv V10 - C:\Program Files\TheTorntv V10\TheTorntv V10-bho.dll [2014-08-06 656744]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-07-11 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-26 457712]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-07-11 171944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2012-06-11 10996368]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-07-11 256896]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-01 4085896]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"GSplay.exe"=C:\Users\bongoro\Desktop\GSplay.exe [2014-03-12 4772747]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe -silent []
"uTorrent"=C:\Users\bongoro\AppData\Roaming\uTorrent\uTorrent.exe [2014-05-18 1270864]
"Torntv Downloader"=C:\Program Files\TornTV.com\Torntv Downloader.exe /c=startup []
C:\Users\bongoro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
TorntvDownloader.lnk - C:\Program Files\TornTV.com\Torntv Downloader.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2014-08-08 14:56:47 ----D---- C:\Program Files\trend micro
2014-08-08 14:56:45 ----D---- C:\rsit
2014-08-08 14:01:45 ----A---- C:\Windows\system32\drivers\{ed7eb956-75ed-460d-8f69-29a93b07afd1}w.sys
2014-08-06 17:33:32 ----D---- C:\Program Files\WebSpades
2014-08-06 17:31:24 ----D---- C:\Program Files\globalUpdate
2014-08-06 17:31:18 ----D---- C:\Program Files\TheTorntv V10
2014-08-04 14:32:45 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-08-04 14:32:45 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-08-04 14:32:44 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-08-04 14:32:44 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-08-04 14:32:44 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-08-04 14:32:44 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-08-04 14:32:44 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-08-04 14:32:43 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-08-04 14:32:42 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-08-04 14:32:42 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-08-04 14:32:41 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-08-04 14:32:41 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-08-04 14:32:39 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-08-04 14:32:36 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-08-04 14:32:35 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-08-04 14:32:34 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-08-04 14:32:34 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-08-04 14:32:33 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-08-04 14:32:33 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-08-04 14:32:32 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-08-04 14:32:32 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-08-04 14:32:29 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-08-04 14:32:26 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-08-04 14:32:26 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-08-04 14:32:24 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-08-04 14:32:23 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-08-04 14:32:19 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-08-04 14:32:19 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-08-04 14:32:17 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-08-04 14:30:23 ----HD---- C:\Windows\msdownld.tmp
2014-08-04 14:30:11 ----D---- C:\Windows\system32\directx
2014-08-04 12:46:45 ----D---- C:\Program Files\The Witcher 2 (CZ)
2014-07-31 20:41:00 ----D---- C:\ProgramData\Caphyon
2014-07-31 20:37:00 ----D---- C:\Program Files\QuadCoreM2
2014-07-31 20:32:26 ----D---- C:\Users\bongoro\AppData\Roaming\Quadcore Games
2014-07-28 17:06:04 ----D---- C:\ProgramData\Battle.net
2014-07-28 16:37:17 ----D---- C:\ProgramData\Blizzard Entertainment
2014-07-28 16:37:17 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2014-07-28 16:09:46 ----D---- C:\ProgramData\Blizzard Entertainment.18842e29.temp
2014-07-28 16:09:46 ----D---- C:\Program Files\Common Files\Blizzard Entertainment.7c209ca6.temp
2014-07-28 14:36:21 ----D---- C:\ProgramData\Blizzard Entertainment.temp
2014-07-28 14:36:21 ----D---- C:\Program Files\Common Files\Blizzard Entertainment.temp
2014-07-26 11:10:46 ----A---- C:\Windows\unins001.exe
2014-07-26 11:10:46 ----A---- C:\Windows\unins001.dat
2014-07-26 10:43:56 ----D---- C:\Users\bongoro\AppData\Roaming\AVAST Software
2014-07-26 10:39:36 ----A---- C:\Windows\system32\drivers\aswStm.sys
2014-07-26 10:39:35 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-07-26 10:39:34 ----A---- C:\Windows\system32\drivers\aswsp.sys
2014-07-26 10:39:34 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2014-07-26 10:39:33 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-07-26 10:39:33 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-07-26 10:39:32 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2014-07-26 10:39:31 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-07-26 10:39:29 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2014-07-26 10:39:19 ----A---- C:\Windows\system32\aswBoot.exe
2014-07-26 10:39:06 ----A---- C:\Windows\avastSS.scr
2014-07-26 10:38:31 ----A---- C:\Windows\system32\drivers\aswNdisFlt.sys
2014-07-26 10:36:15 ----D---- C:\Program Files\AVAST Software
2014-07-25 21:45:17 ----A---- C:\Windows\unins000.exe
2014-07-25 21:45:17 ----A---- C:\Windows\unins000.dat
2014-07-24 21:51:59 ----A---- C:\Windows\system32\msxml6.dll
2014-07-24 21:51:59 ----A---- C:\Windows\system32\msxml3.dll
2014-07-24 21:51:58 ----A---- C:\Windows\system32\msxml6r.dll
2014-07-24 21:51:58 ----A---- C:\Windows\system32\msxml3r.dll
2014-07-24 21:51:47 ----A---- C:\Windows\system32\lsasrv.dll
2014-07-24 21:51:40 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-24 21:51:40 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-07-24 21:51:40 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-07-24 21:51:38 ----A---- C:\Windows\system32\urlmon.dll
2014-07-24 21:51:38 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-24 21:51:38 ----A---- C:\Windows\system32\iernonce.dll
2014-07-24 21:51:37 ----A---- C:\Windows\system32\jsproxy.dll
2014-07-24 21:51:37 ----A---- C:\Windows\system32\ieUnatt.exe
2014-07-24 21:51:37 ----A---- C:\Windows\system32\iedkcs32.dll
2014-07-24 21:51:36 ----A---- C:\Windows\system32\msfeeds.dll
2014-07-24 21:51:36 ----A---- C:\Windows\system32\ieapfltr.dll
2014-07-24 21:51:36 ----A---- C:\Windows\system32\dxtmsft.dll
2014-07-24 21:51:34 ----A---- C:\Windows\system32\msrating.dll
2014-07-24 21:51:34 ----A---- C:\Windows\system32\ie4uinit.exe
2014-07-24 21:51:33 ----A---- C:\Windows\system32\iesetup.dll
2014-07-24 21:51:32 ----A---- C:\Windows\system32\wininet.dll
2014-07-24 21:51:32 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-07-24 21:51:30 ----A---- C:\Windows\system32\dxtrans.dll
2014-07-24 21:51:29 ----A---- C:\Windows\system32\ieui.dll
2014-07-24 21:51:28 ----A---- C:\Windows\system32\ieframe.dll
2014-07-24 21:51:27 ----A---- C:\Windows\system32\mshtmled.dll
2014-07-24 21:51:26 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-07-24 21:51:26 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-07-24 21:51:25 ----A---- C:\Windows\system32\iertutil.dll
2014-07-24 21:51:24 ----A---- C:\Windows\system32\jscript9diag.dll
2014-07-24 21:51:22 ----A---- C:\Windows\system32\mshtml.dll
2014-07-24 21:51:21 ----A---- C:\Windows\system32\vbscript.dll
2014-07-24 21:51:20 ----A---- C:\Windows\system32\jscript9.dll
2014-07-24 21:51:11 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-07-24 21:51:11 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-07-24 21:50:41 ----A---- C:\Windows\system32\win32k.sys
2014-07-24 21:50:40 ----A---- C:\Windows\system32\osk.exe
2014-07-24 21:50:36 ----A---- C:\Windows\system32\drivers\afd.sys
2014-07-24 21:50:34 ----A---- C:\Windows\system32\qedit.dll
2014-07-24 21:47:11 ----A---- C:\Windows\system32\schannel.dll
2014-07-24 21:47:09 ----A---- C:\Windows\system32\kerberos.dll
2014-07-24 21:47:07 ----A---- C:\Windows\system32\msv1_0.dll
2014-07-24 21:47:05 ----A---- C:\Windows\system32\wdigest.dll
2014-07-24 21:47:05 ----A---- C:\Windows\system32\ncrypt.dll
2014-07-24 21:47:03 ----A---- C:\Windows\system32\TSpkg.dll
2014-07-24 21:47:00 ----A---- C:\Windows\system32\credssp.dll
2014-07-24 21:45:57 ----A---- C:\Windows\system32\aepdu.dll
2014-07-24 21:45:57 ----A---- C:\Windows\system32\aeinv.dll
2014-07-24 21:45:50 ----A---- C:\Windows\system32\usp10.dll
2014-07-24 16:44:11 ----D---- C:\Program Files\Common Files\Java
2014-07-24 16:44:03 ----A---- C:\Windows\system32\javaws.exe
2014-07-24 16:43:53 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2014-07-24 16:43:53 ----A---- C:\Windows\system32\javaw.exe
2014-07-24 16:43:53 ----A---- C:\Windows\system32\java.exe
2014-07-24 15:58:17 ----N---- C:\bootsqm.dat
======List of files/folders modified in the last 1 month======
2014-08-08 14:56:47 ----D---- C:\Windows\Prefetch
2014-08-08 14:56:47 ----D---- C:\Program Files
2014-08-08 14:56:08 ----A---- C:\Windows\win.ini
2014-08-08 14:56:00 ----D---- C:\Users\bongoro\AppData\Roaming\uTorrent
2014-08-08 14:55:20 ----D---- C:\Windows\Temp
2014-08-08 14:54:33 ----D---- C:\Windows\system32\config
2014-08-08 14:31:30 ----D---- C:\Windows\Tasks
2014-08-08 14:31:30 ----D---- C:\Windows\system32\Tasks
2014-08-08 14:05:31 ----SHD---- C:\Windows\Installer
2014-08-08 14:01:45 ----D---- C:\Windows\system32\drivers
2014-08-08 13:58:55 ----SHD---- C:\System Volume Information
2014-08-06 17:14:57 ----D---- C:\Windows\tracing
2014-08-06 13:17:54 ----D---- C:\Windows\Minidump
2014-08-06 13:17:52 ----D---- C:\Windows
2014-08-05 20:26:54 ----D---- C:\Windows\System32
2014-08-05 12:27:29 ----D---- C:\Windows\system32\catroot2
2014-08-04 14:30:10 ----D---- C:\Windows\Logs
2014-08-01 16:59:41 ----D---- C:\Windows\inf
2014-08-01 15:48:43 ----HD---- C:\Program Files\InstallShield Installation Information
2014-08-01 13:10:51 ----D---- C:\Windows\system32\wfp
2014-08-01 13:10:46 ----D---- C:\Windows\system32\wbem
2014-08-01 13:10:46 ----D---- C:\Windows\registration
2014-08-01 13:10:40 ----HD---- C:\ProgramData
2014-08-01 12:18:10 ----D---- C:\Windows\system32\catroot
2014-08-01 12:17:52 ----D---- C:\Windows\system32\DriverStore
2014-07-31 13:03:18 ----D---- C:\Users\bongoro\AppData\Roaming\DAEMON Tools Lite
2014-07-31 10:14:29 ----D---- C:\Windows\system32\CodeIntegrity
2014-07-31 10:14:27 ----D---- C:\ProgramData\DAEMON Tools Lite
2014-07-28 22:17:28 ----D---- C:\Windows\Panther
2014-07-28 22:17:22 ----D---- C:\Windows\debug
2014-07-28 21:52:57 ----D---- C:\Program Files\Mozilla Firefox
2014-07-28 17:02:22 ----D---- C:\Program Files\Common Files
2014-07-26 10:36:15 ----D---- C:\ProgramData\AVAST Software
2014-07-25 11:10:36 ----D---- C:\Windows\rescache
2014-07-25 08:40:44 ----D---- C:\Windows\winsxs
2014-07-25 08:37:39 ----D---- C:\Program Files\Windows Journal
2014-07-25 08:37:37 ----D---- C:\Windows\system32\en-US
2014-07-25 08:37:33 ----D---- C:\Program Files\Internet Explorer
2014-07-25 08:37:21 ----D---- C:\Windows\ehome
2014-07-25 08:37:18 ----D---- C:\Windows\system32\Dism
2014-07-25 08:37:17 ----D---- C:\Windows\system32\cs-CZ
2014-07-25 08:37:16 ----SD---- C:\Windows\system32\CompatTel
2014-07-24 22:06:32 ----D---- C:\ProgramData\Microsoft Help
2014-07-24 22:01:49 ----D---- C:\Windows\system32\MRT
2014-07-24 17:06:34 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2014-07-24 16:44:17 ----D---- C:\ProgramData\Oracle
2014-07-24 16:43:51 ----D---- C:\Program Files\Java
2014-07-24 16:18:12 ----D---- C:\Windows\system32\NDF
2014-07-23 10:52:02 ----N---- C:\Windows\system32\MpSigStub.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2014-07-26 270752]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-07-26 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-07-26 192352]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2014-05-18 320120]
R1 {0782648b-1717-4fef-ac58-8cb3ce03adb3}w;{0782648b-1717-4fef-ac58-8cb3ce03adb3}w; C:\Windows\system32\drivers\{0782648b-1717-4fef-ac58-8cb3ce03adb3}w.sys [2014-05-29 52928]
R1 {ed7eb956-75ed-460d-8f69-29a93b07afd1}w;{ed7eb956-75ed-460d-8f69-29a93b07afd1}w; C:\Windows\system32\drivers\{ed7eb956-75ed-460d-8f69-29a93b07afd1}w.sys [2014-08-06 52928]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-07-26 26136]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-07-26 81768]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-07-26 779536]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-07-26 414520]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-05-25 243128]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-07-26 24184]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-07-26 67824]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-07-26 71944]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2014-05-18 281760]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2014-05-18 25888]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2012-06-19 3240400]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
S1 {0782648b-1717-4fef-ac58-8cb3ce03adb3}Gw;{0782648b-1717-4fef-ac58-8cb3ce03adb3}Gw; C:\Windows\system32\drivers\{0782648b-1717-4fef-ac58-8cb3ce03adb3}Gw.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 AndNetDiag;LGE AndroidNet USB Serial Port; C:\Windows\system32\DRIVERS\lgandnetdiag.sys [2014-03-28 23168]
S3 ANDNetModem;LGE AndroidNet USB Modem; C:\Windows\system32\DRIVERS\lgandnetmodem.sys [2014-03-28 27776]
S3 axuumsly;axuumsly; C:\Windows\system32\drivers\axuumsly.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-05-08 65432]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-26 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-07-26 106488]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-31 634656]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-19 1259296]
R2 Update WebSpades;Update WebSpades; C:\Program Files\WebSpades\updateWebSpades.exe [2014-08-08 323360]
R2 Util WebSpades;Util WebSpades; C:\Program Files\WebSpades\bin\utilWebSpades.exe [2014-08-08 323360]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-08-06 68608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-05-17 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-24 262320]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-08-06 68608]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-05-17 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-06-19 108032]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-07 119408]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-05-18 1343400]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Tu je ten rsit
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Tu je ten rsit
Dobrý večer
Stáhněte Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
-Uložte program na plochu a spusťte . Pak se zobrazí se licenční podminky - potvrďte start libovolnou klávesou.
- vytvoří se záloha a proběhne skenování.
Po skončení skenování na Vás vyběhne log (bude uložen v c:\JRT jako JRT.txt) - zkopírujte jej sem
Stáhněte AdwCleaner http://www.bleepingcomputer.com/download/adwcleaner/
-Uložte program na plochu a ukončete všechny spuštěné programy .
-spusťte AdwCleaner, klikněte na Scan a po dokončení skenu na Clean
- provede se oprava, restartuje se pc - (případně restartujte) a objeví se log C:\AdwCleaner\AdwCleaner.txt , obsah logu zkopírujte zde.


-Uložte program na plochu a spusťte . Pak se zobrazí se licenční podminky - potvrďte start libovolnou klávesou.
- vytvoří se záloha a proběhne skenování.
Po skončení skenování na Vás vyběhne log (bude uložen v c:\JRT jako JRT.txt) - zkopírujte jej sem

-Uložte program na plochu a ukončete všechny spuštěné programy .
-spusťte AdwCleaner, klikněte na Scan a po dokončení skenu na Clean
- provede se oprava, restartuje se pc - (případně restartujte) a objeví se log C:\AdwCleaner\AdwCleaner.txt , obsah logu zkopírujte zde.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
-
- Návštěvník
- Příspěvky: 22
- Registrován: 07 čer 2014 11:13
Re: Tu je ten rsit
# AdwCleaner v3.304 - Report created 13/08/2014 at 16:32:10
# Updated 08/08/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (32 bits)
# Username : bongoro - BONGORO-PC
# Running from : C:\Users\bongoro\Downloads\AdwCleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17207
-\\ Mozilla Firefox v
[ File : C:\Users\bongoro\AppData\Roaming\Mozilla\Firefox\Profiles\1fd4hres.default\prefs.js ]
-\\ Google Chrome v
[ File : C:\Users\bongoro\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R4].txt - [5635 octets] - [12/08/2014 16:06:42]
AdwCleaner[R5].txt - [1561 octets] - [13/08/2014 16:27:41]
AdwCleaner[S3].txt - [5178 octets] - [12/08/2014 16:08:36]
AdwCleaner[S4].txt - [1303 octets] - [13/08/2014 16:32:10]
########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [1363 octets] ##########
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x86
Ran by bongoro on st 13. 08. 2014 at 16:22:32,50
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on st 13. 08. 2014 at 16:26:18,17
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Updated 08/08/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (32 bits)
# Username : bongoro - BONGORO-PC
# Running from : C:\Users\bongoro\Downloads\AdwCleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17207
-\\ Mozilla Firefox v
[ File : C:\Users\bongoro\AppData\Roaming\Mozilla\Firefox\Profiles\1fd4hres.default\prefs.js ]
-\\ Google Chrome v
[ File : C:\Users\bongoro\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R4].txt - [5635 octets] - [12/08/2014 16:06:42]
AdwCleaner[R5].txt - [1561 octets] - [13/08/2014 16:27:41]
AdwCleaner[S3].txt - [5178 octets] - [12/08/2014 16:08:36]
AdwCleaner[S4].txt - [1303 octets] - [13/08/2014 16:32:10]
########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [1363 octets] ##########
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x86
Ran by bongoro on st 13. 08. 2014 at 16:22:32,50
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on st 13. 08. 2014 at 16:26:18,17
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Re: Tu je ten rsit
Máte s počítačem nějaké problémy?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
-
- Návštěvník
- Příspěvky: 22
- Registrován: 07 čer 2014 11:13
Re: Tu je ten rsit
ano furt sa zasekava asi kazde 2 min a to uplne ze nic nejde a trva to asi 5 min pokym sa obnovi
Re: Tu je ten rsit
To je stolní pc? CHtělo by to aspon 2GB RAM.
total RAM: 1023 MB (10% free)
Vypněte si po startu zbytečné programy, at se nevytěžuje pc. Hlavně ty torenty.
total RAM: 1023 MB (10% free)
Vypněte si po startu zbytečné programy, at se nevytěžuje pc. Hlavně ty torenty.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
-
- Návštěvník
- Příspěvky: 22
- Registrován: 07 čer 2014 11:13
Re: Tu je ten rsit
Dakujem velmi pekne
Re: Tu je ten rsit
Počkejte
, pomohlo to trošku?

Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.