Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Pro Vyosek - prosím o kontrolu

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
takos
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 216
Registrován: 07 lis 2010 14:25

Re: Pro Vyosek - prosím o kontrolu

#16 Příspěvek od takos »

zdravím, toto mi vyskočilo. Provedl jsem Quarantine je to v pořádku nebo jsem měl použít něco jiného? Díky Jestli je to v pořádku jaký bude další postup? Díky
Přílohy
malware.JPG
malware.JPG (144.78 KiB) Zobrazeno 1764 x

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Pro Vyosek - prosím o kontrolu

#17 Příspěvek od vyosek »

:arrow: V poradku

:arrow: Jak se chova PC??
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

takos
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 216
Registrován: 07 lis 2010 14:25

Re: Pro Vyosek - prosím o kontrolu

#18 Příspěvek od takos »

No, stále stejný problém. Pokusil jsem se provést novou kontrolu vš vpohodě než jsem restartoval PC. potom zase původní sitiace "zásek"

Mám takové pocit, že se Avast s tím Malwarebytes perou. v nouzovém režimu to funguje.

Máte nápad? Děkuji za váš čas :worship:

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Pro Vyosek - prosím o kontrolu

#19 Příspěvek od vyosek »

:arrow: Zkuste MBAM i Avast odinstalovat - pak pouzijte jeste jejich removery
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

takos
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 216
Registrován: 07 lis 2010 14:25

Re: Pro Vyosek - prosím o kontrolu

#20 Příspěvek od takos »

ok, a potom bude jaký další krok? :oops:

Mám znovu Avast nainstalovat? Pokud ano máte nějaký odkaz na neplacenou verzy? Díky


Co s tím odinstalátorem MBAM? a s ostatními utilitamy co jsem používal? Díky

Díky za pomoc. :worship: jen bych chtěl poprosit i více kroků najednou. :turned: :worship: :turned: :worship:

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Pro Vyosek - prosím o kontrolu

#21 Příspěvek od vyosek »

:arrow: Zkuste stav bez MBAMu a Avastu

:arrow: Nainstalujte Avast Free http://www.avast.com/cs-cz/index

:arrow: Odinstalatory a utility smazte

:arrow: Napiste stav a postrehy v chovani
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

takos
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 216
Registrován: 07 lis 2010 14:25

Re: Pro Vyosek - prosím o kontrolu

#22 Příspěvek od takos »

Zdá se to v pořádku, máte pro mě ještě nějaké zajímavosti nebo rady a vylepšení chodu PC díky :worship: :worship: :worship:

takos
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 216
Registrován: 07 lis 2010 14:25

Re: Pro Vyosek - prosím o kontrolu

#23 Příspěvek od takos »

Ještě mě napadá jestli je to svinstvu určitě venku a jestli to není jen někde schované :?: :worship:

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Pro Vyosek - prosím o kontrolu

#24 Příspěvek od vyosek »

Ja si myslim, ze by melo byt cisto :worship:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

takos
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 216
Registrován: 07 lis 2010 14:25

Re: Pro Vyosek - prosím o kontrolu

#25 Příspěvek od takos »

OK, budeme dělat nějaké dočištovačky jako obvikle? Díky Jirka :worship:

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Pro Vyosek - prosím o kontrolu

#26 Příspěvek od vyosek »

Dejte novy log z FRST a mrknem na zbytky a pozustatky
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

takos
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 216
Registrován: 07 lis 2010 14:25

Re: Pro Vyosek - prosím o kontrolu

#27 Příspěvek od takos »

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-10-2014
Ran by sangoko (administrator) on TAKOS on 21-10-2014 15:51:41
Running from C:\Users\sangoko\Desktop
Loaded Profile: sangoko (Available profiles: sangoko)
Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Agere Systems) C:\Windows\System32\agrsmsvc.exe
(Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
( ) C:\Windows\System32\lxducoms.exe
(Motive Communications, Inc.) C:\Program Files\Common Files\Motive\McciCMService.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
(Memeo) C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
() C:\Program Files\RocketDock\RocketDock.exe
() C:\Program Files\WandouLabs\wandoujia_helper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynToshiba.exe
(Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(forum.viry.cz) C:\Users\sangoko\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [topi] => C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe [577536 2007-04-02] (TOSHIBA)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1451304 2009-03-20] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4489216 2007-06-13] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-05-28] (Realtek Semiconductor Corp.)
HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM\...\Run: [Bonus.SSR.FR12] => C:\Program Files\ABBYY FineReader 12\Bonus.ScreenshotReader.exe [1472312 2014-05-11] (ABBYY Production LLC.)
HKLM\...\Run: [EfficientAddressBook] => [X]
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-10-20] (AVAST Software)
HKU\S-1-5-21-750613624-948088251-3038114490-1000\...\Run: [RocketDock] => C:\Program Files\RocketDock\RocketDock.exe [495616 2007-09-02] ()
Startup: C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Bandwidth Meter.lnk
Startup: C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\thunderbird.exe – zástupce.lnk
ShortcutTarget: thunderbird.exe – zástupce.lnk -> C:\Program Files\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation)
Startup: C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wandoujia_helper.lnk
ShortcutTarget: wandoujia_helper.lnk -> C:\Program Files\WandouLabs\wandoujia_helper.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [GDriveBlacklistedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedEditOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSharedViewOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: [GDriveSyncingOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

SearchScopes: HKCU - DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 02 %SystemRoot%\system32\napinsp.dll [50176] (Společnost Microsoft)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\sangoko\AppData\Roaming\Mozilla\Firefox\Profiles\qu52wjqv.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Heuréka
FF DefaultSearchUrl: http://www.google.com/search?btnG=Google+Search&q=
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Heuréka
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nokia.com/EnablerPlugin -> C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @lingea.com/x-lingea-translate -> C:\Program Files\Common Files\Lingea Shared\LG_Mozilla.dll (Lingea s.r.o.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\sangoko\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\sangoko\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\sangoko\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npLegitCheckPlugin.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np_gp.dll (NOS Microsystems Ltd.)
FF Plugin ProgramFiles/Appdata: C:\Users\sangoko\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\sangoko\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\sangoko\AppData\Roaming\Mozilla\Firefox\Profiles\qu52wjqv.default\searchplugins\heurkacz.xml
FF SearchPlugin: C:\Users\sangoko\AppData\Roaming\Mozilla\Firefox\Profiles\qu52wjqv.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Download Youtube Videos + - C:\Users\sangoko\AppData\Roaming\Mozilla\Firefox\Profiles\qu52wjqv.default\Extensions\video.downloader.plugin@ffpimp.com [2012-03-22]
FF Extension: BlackFox V2-Blue - C:\Users\sangoko\AppData\Roaming\Mozilla\Firefox\Profiles\qu52wjqv.default\Extensions\zigboom.designs@gmail.com [2014-09-21]
FF Extension: FT DeepDark - C:\Users\sangoko\AppData\Roaming\Mozilla\Firefox\Profiles\qu52wjqv.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2014-09-21]
FF Extension: DownloadHelper - C:\Users\sangoko\AppData\Roaming\Mozilla\Firefox\Profiles\qu52wjqv.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-09-05]
FF Extension: FoxLingo - C:\Users\sangoko\AppData\Roaming\Mozilla\Firefox\Profiles\qu52wjqv.default\Extensions\{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}(49) [2012-09-02]
FF Extension: Google Translator for Firefox - C:\Users\sangoko\AppData\Roaming\Mozilla\Firefox\Profiles\qu52wjqv.default\Extensions\translator@zoli.bod.xpi [2012-10-23]
FF Extension: Walnut for Firefox - C:\Users\sangoko\AppData\Roaming\Mozilla\Firefox\Profiles\qu52wjqv.default\Extensions\{5A170DD3-63CA-4c58-93B7-DE9FF536C2FF}.xpi [2011-07-13]
FF Extension: DownThemAll! - C:\Users\sangoko\AppData\Roaming\Mozilla\Firefox\Profiles\qu52wjqv.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2012-06-26]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-04-23]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-10-20]

Chrome:
=======
CHR Profile: C:\Users\sangoko\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\sangoko\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-09]
CHR Extension: (Google Drive) - C:\Users\sangoko\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-09]
CHR Extension: (YouTube) - C:\Users\sangoko\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-09]
CHR Extension: (Google Search) - C:\Users\sangoko\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-09]
CHR Extension: (Google Wallet) - C:\Users\sangoko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-09]
CHR Extension: (Gmail) - C:\Users\sangoko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-09]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-10-20]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-10-20] (AVAST Software)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (http://www.BitComet.com)
S3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed]
S3 CFSvcs; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960 2006-11-14] (TOSHIBA CORPORATION) [File not signed]
R2 FirebirdGuardianDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2013-03-19] (Firebird Project) [File not signed]
R3 FirebirdServerDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe [3784704 2013-03-19] (Firebird Project) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S2 lxduCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxduserv.exe [98984 2008-05-24] (Lexmark International, Inc.)
R2 lxdu_device; C:\Windows\system32\lxducoms.exe [594600 2008-05-24] ( )
R2 McciCMService; C:\Program Files\Common Files\Motive\McciCMService.exe [303104 2007-10-15] (Motive Communications, Inc.) [File not signed]
R2 TNaviSrv; C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe [77824 2007-06-28] (TOSHIBA Corporation) [File not signed]
R2 TODDSrv; C:\Windows\system32\TODDSrv.exe [114688 2006-05-25] (TOSHIBA Corporation) [File not signed]
S3 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2006-08-23] (Ulead Systems, Inc.) [File not signed]
R2 WDDMService; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [110592 2009-11-13] (WDC) [File not signed]
R2 WDSmartWareBackgroundService; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [20480 2009-06-16] (Memeo) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-10-20] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-10-20] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [55112 2014-10-20] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-10-20] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [779536 2014-10-20] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [414520 2014-10-20] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57800 2014-10-20] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [192352 2014-10-20] ()
S3 BVRPMPR5; C:\Windows\system32\drivers\BVRPMPR5.SYS [44224 2006-09-06] (BVRP Software) [File not signed]
R0 CplIR; C:\Windows\System32\DRIVERS\CplIR.SYS [14848 2007-03-06] (COMPAL ELECTRONIC INC.)
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [190424 2009-04-11] (Společnost Microsoft)
S3 FreshIO; C:\Program Files\FreshDevices\FreshDiagnose\FreshIO.sys [2410 2004-10-26] () [File not signed]
R0 FSProFilter; C:\Windows\System32\Drivers\FSPFltd.sys [41912 2010-07-22] (FSPro Labs)
S3 GemCCID; C:\Windows\System32\DRIVERS\GemCCID.sys [98816 2013-04-24] (Gemalto)
R0 LPCFilter; C:\Windows\System32\DRIVERS\LPCFilter.sys [19456 2006-07-28] (COMPAL ELECTRONIC INC.)
S3 LVPr2Mon; C:\Windows\System32\Drivers\LVPr2Mon.sys [25752 2009-10-07] ()
R3 LVUSBSta; C:\Windows\System32\drivers\LVUSBSta.sys [41752 2008-12-17] (Logitech Inc.)
S3 MREMP50; C:\Program Files\Common Files\Motive\MREMP50.sys [21248 2008-03-29] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 MRESP50; C:\Program Files\Common Files\Motive\MRESP50.sys [20096 2008-03-29] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
R2 npf; C:\Windows\System32\drivers\npf.sys [34064 2008-06-01] (CACE Technologies)
R3 Ntfs; C:\Windows\system32\Drivers\Ntfs.sys [1082232 2013-03-03] (Společnost Microsoft)
S3 pepifilter; C:\Windows\System32\DRIVERS\lv302af.sys [13976 2009-05-01] (Logitech Inc.)
S3 PID_PEPI; C:\Windows\System32\DRIVERS\LV302V32.SYS [2687512 2009-05-01] (Logitech Inc.)
S3 sonypvs1; C:\Windows\System32\DRIVERS\sonypvs1.sys [102220 2002-10-15] (Sony Corporation) [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [477240 2012-06-16] (Duplex Secure Ltd.)
S3 tosporte; C:\Windows\System32\DRIVERS\tosporte.sys [41600 2006-10-10] (TOSHIBA Corporation) [File not signed]
S3 tosrfbd; C:\Windows\System32\DRIVERS\tosrfbd.sys [113920 2007-02-22] (TOSHIBA CORPORATION) [File not signed]
S3 tosrfbnp; C:\Windows\System32\Drivers\tosrfbnp.sys [36480 2006-11-20] (TOSHIBA Corporation) [File not signed]
S1 Tosrfcom; C:\Windows\System32\Drivers\tosrfcom.sys [64896 2005-08-01] (TOSHIBA Corporation) [File not signed]
S3 Tosrfhid; C:\Windows\System32\DRIVERS\Tosrfhid.sys [73728 2007-03-01] (TOSHIBA Corporation.) [File not signed]
S3 tosrfnds; C:\Windows\System32\DRIVERS\tosrfnds.sys [18612 2005-01-06] (TOSHIBA Corporation.) [File not signed]
S3 TosRfSnd; C:\Windows\System32\drivers\tosrfsnd.sys [53376 2007-01-22] (TOSHIBA Corporation) [File not signed]
S3 Tosrfusb; C:\Windows\System32\DRIVERS\tosrfusb.sys [41344 2007-02-28] (TOSHIBA CORPORATION) [File not signed]
S3 usbbus; C:\Windows\System32\DRIVERS\lgusbbus.sys [21344 2005-05-26] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgusbdiag.sys [38144 2005-05-26] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgusbmodem.sys [39036 2005-06-24] (LG Electronics Inc.)
R3 UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [11776 2007-04-16] (Chicony Electronics Co., Ltd.)
R2 v2imount; C:\Windows\System32\DRIVERS\v2imount.sys [38112 2008-01-19] (Symantec Corporation)
S3 WinRing0_1_2_0; C:\Program Files\BatteryCare\WinRing0.sys [14416 2008-07-26] (OpenLibSys.org)
S3 ApfiltrService; system32\DRIVERS\Apfiltr.sys [X]
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-19] (Microsoft Corporation)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S2 cpuz134; \??\C:\Windows\system32\drivers\cpuz134_x32.sys [X]
U5 FontCache3.0.0.0; C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [43904 2009-02-18] (Microsoft Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 ivusb; system32\DRIVERS\ivusb.sys [X]
S3 MREMP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [X]
S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [X]
S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [X]
S3 MRESP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 SymIMMP; system32\DRIVERS\SymIM.sys [X]
S3 TpChoice; system32\DRIVERS\TpChoice.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-21 15:51 - 2014-10-21 15:52 - 00023041 _____ () C:\Users\sangoko\Desktop\FRST.txt
2014-10-21 15:50 - 2014-10-21 15:50 - 00112640 _____ (forum.viry.cz) C:\Users\sangoko\Desktop\FRSTLauncher.exe
2014-10-21 13:30 - 2014-10-21 13:30 - 01102336 _____ (Farbar) C:\Users\sangoko\Desktop\FRST.exe
2014-10-20 18:01 - 2014-10-20 18:01 - 00006997 _____ () C:\Users\sangoko\Desktop\googlecalendartab.xpi
2014-10-20 16:52 - 2014-10-20 16:53 - 03676400 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-20 16:38 - 2014-10-20 16:39 - 00000000 ____D () C:\Users\sangoko\Desktop\Akvacleaning
2014-10-20 15:15 - 2014-10-20 15:15 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\AVAST Software
2014-10-20 15:15 - 2014-10-20 15:15 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-20 15:15 - 2014-10-20 15:15 - 00000000 _____ () C:\Windows\setupact.log
2014-10-20 15:14 - 2014-10-20 15:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-10-20 15:13 - 2014-10-20 15:14 - 00414520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-10-20 15:13 - 2014-10-20 15:13 - 00779536 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-10-20 15:13 - 2014-10-20 15:13 - 00276432 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-10-20 15:13 - 2014-10-20 15:13 - 00192352 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-10-20 15:13 - 2014-10-20 15:13 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-10-20 15:13 - 2014-10-20 15:13 - 00057800 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2014-10-20 15:13 - 2014-10-20 15:13 - 00055112 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys
2014-10-20 15:13 - 2014-10-20 15:13 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-10-20 15:13 - 2014-10-20 15:13 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-10-20 15:13 - 2014-10-20 15:13 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-10-20 15:11 - 2014-10-20 15:11 - 00078360 _____ () C:\Users\sangoko\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-20 15:11 - 2014-10-20 15:11 - 00000000 ____D () C:\Program Files\AVAST Software
2014-10-20 15:05 - 2014-10-20 15:11 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-10-18 22:13 - 2014-10-18 22:13 - 00000000 ____D () C:\Users\sangoko\AppData\Local\{487DBBA1-0913-41E7-A3AD-AB5347FFA9E5}
2014-10-18 05:14 - 2014-10-18 05:13 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-10-18 05:13 - 2014-10-18 05:13 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-10-18 05:13 - 2014-10-18 05:13 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-10-18 05:13 - 2014-10-18 05:13 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-10-17 23:21 - 2014-06-16 00:18 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-17 23:21 - 2014-06-13 20:22 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-17 23:21 - 2014-06-13 20:22 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-17 23:17 - 2014-09-28 01:29 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-17 22:58 - 2014-09-05 01:27 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2014-10-17 22:55 - 2014-09-16 18:56 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 11083264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 06004224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 02006016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-17 18:43 - 2014-09-23 22:08 - 01214976 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 00916992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-17 18:43 - 2014-09-23 22:08 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll
2014-10-17 18:43 - 2014-09-23 20:38 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-10-17 18:43 - 2014-09-23 20:31 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-17 18:43 - 2014-09-23 20:31 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-17 18:43 - 2014-09-23 20:30 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-17 18:43 - 2014-09-23 20:30 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-10-16 23:52 - 2014-10-17 01:01 - 00000000 ____D () C:\AdwCleaner
2014-10-15 15:40 - 2014-10-21 15:51 - 00000000 ____D () C:\FRST
2014-10-15 15:34 - 2014-10-15 15:34 - 00000000 ____D () C:\rsit
2014-10-15 15:34 - 2014-10-15 15:34 - 00000000 ____D () C:\Program Files\trend micro
2014-10-06 11:13 - 2014-10-06 11:14 - 00000000 ____D () C:\Users\sangoko\Desktop\Společnosti Kopřiva
2014-10-05 09:30 - 2014-10-20 16:52 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-30 19:05 - 2014-09-30 19:05 - 00003201 _____ () C:\Users\sangoko\Documents\Bez názvu 1.csv
2014-09-25 14:22 - 2014-09-27 08:59 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-24 18:03 - 2014-09-09 08:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-24 17:48 - 2014-09-24 17:48 - 00002046 _____ () C:\Users\sangoko\.recently-used.xbel

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-21 14:09 - 2006-11-02 14:47 - 00003296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-21 14:09 - 2006-11-02 14:47 - 00003296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-21 13:30 - 2012-06-17 00:46 - 01799957 _____ () C:\Windows\WindowsUpdate.log
2014-10-21 12:54 - 2008-02-16 21:02 - 00000000 ____D () C:\Users\sangoko\AppData\Local\Google
2014-10-21 12:14 - 2014-07-29 12:36 - 00000440 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{1FD776CB-3058-4844-897A-E17B4997AABB}.job
2014-10-21 12:10 - 2009-12-07 16:32 - 00000435 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-10-21 12:09 - 2011-01-12 23:23 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-10-21 12:09 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-20 22:40 - 2011-01-17 21:34 - 00000012 _____ () C:\Windows\bthservsdp.dat
2014-10-20 22:40 - 2006-11-02 15:01 - 00032554 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-20 17:00 - 2006-11-02 12:33 - 01558484 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-20 16:51 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-10-20 16:39 - 2014-08-17 16:02 - 00000000 ___RD () C:\Users\sangoko\Desktop\faktury
2014-10-20 16:36 - 2014-06-06 14:05 - 00000000 ____D () C:\Users\sangoko\Desktop\Účetní DC
2014-10-20 16:36 - 2008-02-22 09:33 - 00000000 ___RD () C:\Users\sangoko\Obrásky
2014-10-20 15:48 - 2014-08-20 00:24 - 00000000 ____D () C:\Users\sangoko\Desktop\Záloha kontaktů
2014-10-20 15:35 - 2012-06-20 22:49 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-10-20 15:35 - 2012-06-20 22:49 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-10-20 15:25 - 2009-08-29 13:14 - 00000000 ____D () C:\Program Files\WinRAR
2014-10-20 15:24 - 2012-10-17 20:34 - 00002425 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-10-20 15:23 - 2007-04-27 10:47 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-10-20 15:10 - 2013-11-17 15:27 - 00000000 ____D () C:\temp
2014-10-20 12:59 - 2006-11-02 12:23 - 00002592 _____ () C:\Windows\system32\config.nt
2014-10-20 12:54 - 2013-11-01 16:04 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Wandoujia2
2014-10-19 19:52 - 2014-07-06 19:36 - 00000000 ____D () C:\Users\sangoko\.gimp-2.6
2014-10-18 05:14 - 2007-04-27 09:27 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-10-18 03:32 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-17 23:15 - 2013-07-11 18:15 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-17 22:59 - 2006-11-02 12:24 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-10-17 18:21 - 2013-08-10 08:01 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-10-17 18:12 - 2008-01-17 15:01 - 00000000 ____D () C:\Users\sangoko
2014-10-17 18:12 - 2006-11-02 12:22 - 56098816 _____ () C:\Windows\system32\config\software_previous
2014-10-17 18:12 - 2006-11-02 12:22 - 52166656 _____ () C:\Windows\system32\config\system_previous
2014-10-17 18:12 - 2006-11-02 12:22 - 46137344 _____ () C:\Windows\system32\config\components_previous
2014-10-17 18:12 - 2006-11-02 12:22 - 00786432 _____ () C:\Windows\system32\config\default_previous
2014-10-17 18:12 - 2006-11-02 12:22 - 00094208 _____ () C:\Windows\system32\config\sam_previous
2014-10-17 18:12 - 2006-11-02 12:22 - 00028672 _____ () C:\Windows\system32\config\security_previous
2014-10-17 18:11 - 2012-03-10 18:52 - 00000000 ___RD () C:\Users\sangoko\Documents\Notes
2014-10-17 18:11 - 2010-09-12 00:01 - 00000000 ____D () C:\Users\sangoko\Documents\Skenování
2014-10-17 18:11 - 2010-08-16 19:45 - 00000000 ___RD () C:\Users\sangoko\GIGAHITY
2014-10-17 18:11 - 2010-08-02 14:03 - 00000000 ___RD () C:\Users\sangoko\Documents\Adobe
2014-10-17 18:11 - 2009-05-12 13:27 - 00000000 ____D () C:\Users\sangoko\Documents\FFOutput
2014-10-17 18:11 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\spool
2014-10-17 18:11 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-10-17 18:10 - 2014-08-19 19:10 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Efficient Software
2014-10-17 18:10 - 2014-08-17 16:58 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Efficient Address Book
2014-10-17 18:10 - 2014-08-12 10:01 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-10-17 18:10 - 2014-07-11 11:34 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\gtk-2.0
2014-10-17 18:10 - 2014-07-10 08:30 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Audacity
2014-10-17 18:10 - 2014-05-07 14:57 - 00000000 ___SD () C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0
2014-10-17 18:10 - 2013-11-01 16:04 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SnapPea
2014-10-17 18:10 - 2013-07-27 23:53 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nexus Radio
2014-10-17 18:10 - 2013-07-27 23:53 - 00000000 ____D () C:\Program Files\Nexus Radio
2014-10-17 18:10 - 2013-01-11 19:14 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\RidNacs
2014-10-17 18:10 - 2012-09-30 17:44 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\vlc
2014-10-17 18:10 - 2012-08-07 16:37 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Posta
2014-10-17 18:10 - 2012-06-14 19:46 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Hunspell
2014-10-17 18:10 - 2012-06-14 19:29 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Balabolka
2014-10-17 18:10 - 2012-06-14 19:29 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Balabolka
2014-10-17 18:10 - 2012-06-05 16:23 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Thunderbird
2014-10-17 18:10 - 2012-02-11 20:17 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Uschovna
2014-10-17 18:10 - 2010-08-15 11:42 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-10-17 18:10 - 2010-08-15 11:42 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\GHISLER
2014-10-17 18:10 - 2010-08-14 22:43 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-10-17 18:10 - 2010-08-11 23:35 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoZoom Pro 3
2014-10-17 18:10 - 2010-03-13 22:09 - 00000000 ____D () C:\Users\sangoko\AppData\Local\vdownloader
2014-10-17 18:10 - 2009-11-23 21:04 - 00000000 ____D () C:\Users\sangoko\AppData\Local\Painkiller Resurrection
2014-10-17 18:10 - 2009-11-16 19:45 - 00000000 ____D () C:\Users\sangoko\AppData\Local\Painkiller Overdose Demo
2014-10-17 18:10 - 2009-08-02 21:16 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\SMS posílač Treca
2014-10-17 18:10 - 2009-05-15 23:04 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2014-10-17 18:10 - 2008-01-17 15:01 - 00000000 ___RD () C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-10-17 18:10 - 2008-01-17 15:01 - 00000000 ___RD () C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-17 18:10 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\registration
2014-10-17 17:57 - 2012-08-31 17:55 - 00001356 _____ () C:\Users\sangoko\AppData\Local\d3d9caps.dat
2014-10-17 09:45 - 2013-02-06 20:45 - 00000000 ____D () C:\Windows\Driver Cache
2014-10-15 15:22 - 2012-07-27 13:01 - 00000000 ____D () C:\Users\sangoko\AppData\Local\CrashDumps
2014-10-14 19:15 - 2012-05-13 18:36 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-10-13 22:55 - 2014-01-22 20:59 - 00000000 ____D () C:\Users\sangoko\Desktop\Stahování
2014-10-09 23:17 - 2014-08-11 10:35 - 00000000 ____D () C:\Users\sangoko\Documents\SnapPea
2014-10-07 01:31 - 2008-02-16 21:03 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\Skype
2014-10-06 00:01 - 2010-12-31 01:25 - 00000000 ____D () C:\Users\sangoko\AppData\Roaming\TeamViewer
2014-10-02 15:53 - 2009-10-02 22:01 - 00231568 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-09-25 14:05 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\rescache

Some content of TEMP:
====================
C:\Users\sangoko\AppData\Local\Temp\IHUF2E6.tmp.exe
C:\Users\sangoko\AppData\Local\Temp\IHUF3EF.tmp.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-21 12:25




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (Vista) (Fixed) (Total:74.52 GB) (Free:4.65 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: (Data) (Fixed) (Total:42.08 GB) (Free:17.31 GB) NTFS

Available physical RAM: 1100.96 MB
Total physical RAM: 2045.69 MB
Percentage of memory in use: 46%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 149.1 GB) (Disk ID: FFD7BCD5)
Partition 1: (Not Active) - (Size=1.5 GB) - (Type=27)
Partition 2: (Active) - (Size=74.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=42.1 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=31 GB) - (Type=05)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{1FD776CB-3058-4844-897A-E17B4997AABB}.job => C:\Windows\system32\msfeedssync.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\sangoko\Desktop" je 39 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nexus Radio
C:\Program Files\Nexus Radio\Nexus Radio.exe -0 [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile-based device management
%windir%\WindowsMobile\wmdc.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Secunia PSI Tray.lnk
C:\PROGRA~1\Secunia\PSI\psi_tray.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SymmTime.lnk
C:\PROGRA~1\SYMMET~1\SymmTime\GeTTime.exe


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Přílohy
Addition.zip
(12.62 KiB) Staženo 51 x

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Pro Vyosek - prosím o kontrolu

#28 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize
  • Kód: Vybrat vše

    Start
    CloseProcesses:
    
    HKLM\...\Run: [Bonus.SSR.FR12] => C:\Program Files\ABBYY FineReader 12\Bonus.ScreenshotReader.exe [1472312 2014-05-11] (ABBYY Production LLC.)
    HKLM\...\Run: [EfficientAddressBook] => [X]
    HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
    Startup: C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wandoujia_helper.lnk
    ShortcutTarget: wandoujia_helper.lnk -> C:\Program Files\WandouLabs\wandoujia_helper.exe ()
    C:\Program Files\WandouLabs
    ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File
    
    S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
    S3 ivusb; system32\DRIVERS\ivusb.sys [X]
    S3 MREMP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [X]
    S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [X]
    S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [X]
    S3 MRESP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [X]
    S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
    S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
    S3 SymIMMP; system32\DRIVERS\SymIM.sys [X]
    S3 TpChoice; system32\DRIVERS\TpChoice.sys [X]
    S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
    S2 cpuz134; \??\C:\Windows\system32\drivers\cpuz134_x32.sys [X]
    S3 ApfiltrService; system32\DRIVERS\Apfiltr.sys [X]
    
    2014-10-21 15:51 - 2014-10-21 15:52 - 00023041 _____ () C:\Users\sangoko\Desktop\FRST.txt
    2014-10-21 15:50 - 2014-10-21 15:50 - 00112640 _____ (forum.viry.cz) C:\Users\sangoko\Desktop\FRSTLauncher.exe
    2014-10-16 23:52 - 2014-10-17 01:01 - 00000000 ____D () C:\AdwCleaner
    2014-10-15 15:34 - 2014-10-15 15:34 - 00000000 ____D () C:\rsit
    2014-10-15 15:34 - 2014-10-15 15:34 - 00000000 ____D () C:\Program Files\trend micro
    
    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\User_Feed_Synchronization-{1FD776CB-3058-4844-897A-E17B4997AABB}.job => C:\Windows\system32\msfeedssync.exe
    
    Hosts:
    EmptyTemp:
    Reboot:
    End
    
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

takos
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 216
Registrován: 07 lis 2010 14:25

Re: Pro Vyosek - prosím o kontrolu

#29 Příspěvek od takos »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 21-10-2014
Ran by sangoko at 2014-10-22 15:44:39 Run:1
Running from C:\Users\sangoko\Desktop
Loaded Profile: sangoko (Available profiles: sangoko)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
CloseProcesses:

HKLM\...\Run: [Bonus.SSR.FR12] => C:\Program Files\ABBYY FineReader 12\Bonus.ScreenshotReader.exe [1472312 2014-05-11] (ABBYY Production LLC.)
HKLM\...\Run: [EfficientAddressBook] => [X]
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
Startup: C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wandoujia_helper.lnk
ShortcutTarget: wandoujia_helper.lnk -> C:\Program Files\WandouLabs\wandoujia_helper.exe ()
C:\Program Files\WandouLabs
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 ivusb; system32\DRIVERS\ivusb.sys [X]
S3 MREMP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [X]
S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [X]
S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [X]
S3 MRESP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 SymIMMP; system32\DRIVERS\SymIM.sys [X]
S3 TpChoice; system32\DRIVERS\TpChoice.sys [X]
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S2 cpuz134; \??\C:\Windows\system32\drivers\cpuz134_x32.sys [X]
S3 ApfiltrService; system32\DRIVERS\Apfiltr.sys [X]

2014-10-21 15:51 - 2014-10-21 15:52 - 00023041 _____ () C:\Users\sangoko\Desktop\FRST.txt
2014-10-21 15:50 - 2014-10-21 15:50 - 00112640 _____ (forum.viry.cz) C:\Users\sangoko\Desktop\FRSTLauncher.exe
2014-10-16 23:52 - 2014-10-17 01:01 - 00000000 ____D () C:\AdwCleaner
2014-10-15 15:34 - 2014-10-15 15:34 - 00000000 ____D () C:\rsit
2014-10-15 15:34 - 2014-10-15 15:34 - 00000000 ____D () C:\Program Files\trend micro

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{1FD776CB-3058-4844-897A-E17B4997AABB}.job => C:\Windows\system32\msfeedssync.exe

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Bonus.SSR.FR12 => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\EfficientAddressBook => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
C:\Users\sangoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wandoujia_helper.lnk => Moved successfully.
C:\Program Files\WandouLabs\wandoujia_helper.exe => Moved successfully.
C:\Program Files\WandouLabs => Moved successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt1" => Key deleted successfully.
"HKCR\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt2" => Key deleted successfully.
"HKCR\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt3" => Key deleted successfully.
"HKCR\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\DropboxExt4" => Key deleted successfully.
"HKCR\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" => Key not found.
IpInIp => Service deleted successfully.
ivusb => Service deleted successfully.
MREMP50a64 => Service deleted successfully.
MREMPR5 => Service deleted successfully.
MRENDIS5 => Service deleted successfully.
MRESP50a64 => Service deleted successfully.
NwlnkFlt => Service deleted successfully.
NwlnkFwd => Service deleted successfully.
SymIMMP => Service deleted successfully.
TpChoice => Service deleted successfully.
blbdrive => Service deleted successfully.
cpuz134 => Service deleted successfully.
ApfiltrService => Service deleted successfully.
C:\Users\sangoko\Desktop\FRST.txt => Moved successfully.
C:\Users\sangoko\Desktop\FRSTLauncher.exe => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\User_Feed_Synchronization-{1FD776CB-3058-4844-897A-E17B4997AABB}.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 388 MB temporary data.


The system needed a reboot.

==== End of Fixlog ====

Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Pro Vyosek - prosím o kontrolu

#30 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Odpovědět