
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
PC pomalé, zasekává se ... dva antiviry
Moderátor: Moderátoři
Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
PC pomalé, zasekává se ... dva antiviry
Ahoj,
kamarádka mě donesla PC, kde jsou dva antiviry a jede děsně pomalu a seká se.
Udělejte mě prosím preventivku.
Děkuji .. Zde log z FRST.
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-11-2014 01
Ran by Marika (administrator) on MARIKA-PC on 27-11-2014 22:16:05
Running from C:\Users\Marika\Desktop
Loaded Profile: Marika (Available profiles: Marika)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\Common Framework\UdaterUI.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\VirusScan Enterprise\VsTskMgr.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\VirusScan Enterprise\mfeann.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\Common Framework\McTray.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\Common Framework\naPrdMgr.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\VirusScan Enterprise\shstat.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(forum.viry.cz) C:\Users\Marika\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13213840 2012-10-26] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [McAfeeUpdaterUI] => C:\Program Files (x86)\McAfee\Common Framework\udaterui.exe [333376 2011-11-15] (McAfee, Inc.)
HKLM-x32\...\Run: [ShStatEXE] => C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE [215656 2012-08-14] (McAfee, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-11-21] (AVAST Software)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [NoComputersNearMe] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Run: [SpeedItupFree] => "C:\Program Files (x86)\SpeedItup Free\speeditupfree.exe"
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Run: [Google+ Auto Backup] => "C:\Users\Marika\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoNetHood] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoComputersNearMe] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\MountPoints2: {29528603-d51e-11e3-a109-94de80df2f88} - F:\SISetup.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKU\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKU\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2707257128-485334616-489766779-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-2707257128-485334616-489766779-1000 -> {5358A9D3-C9C1-4EF0-9BA5-433689B01C7D} URL = http://www.search.ask.com/web?tpid=FF3- ... erms}&psv=
SearchScopes: HKU\S-1-5-21-2707257128-485334616-489766779-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
BHO: No Name -> {4646332D-5637-4300-76A7-7A786E7484D7} -> No File
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20140107193450.dll (McAfee, Inc.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20140107193450.dll (McAfee, Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKU\S-1-5-21-2707257128-485334616-489766779-1000 -> No Name - {4646332D-5637-4300-76A7-7A786E7484D7} - No File
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Hosts: 127.0.0.1 acdid.acdsystems.com
Tcpip\Parameters: [DhcpNameServer] 77.48.100.254 212.158.128.2
FireFox:
========
FF ProfilePath: C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default
FF Homepage: hxxp://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Marika\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF Extension: Windows Media Player Extension for Firefox - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\jid0-nRwp7VvCqZcSRTppwWz2npqGEKw@jetpack [2014-01-04]
FF Extension: VratnePenize.cz - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\toolbar@vratnepenize.cz [2014-04-01]
FF Extension: Firefox Old Version Update Hotfix - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\firefox-hotfix@mozilla.org.xpi [2014-09-28]
FF Extension: HTML5 Media Player - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\html5player@horning.us.xpi [2014-01-04]
FF Extension: Adblock Plus - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-04]
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF Extension: IDS_SS_NAME - C:\Program Files (x86)\Common Files\McAfee\SystemCore [2014-01-07]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-11-21]
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-21]
CHR Extension: (Dokumenty Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-21]
CHR Extension: (Disk Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-21]
CHR Extension: (YouTube) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-21]
CHR Extension: (Vyhledávání Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-21]
CHR Extension: (Tabulky Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-21]
CHR Extension: (Avast Online Security) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-11-21]
CHR Extension: (Peněženka Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-21]
CHR Extension: (Gmail) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-21]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-21]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-07] (Advanced Micro Devices, Inc.) [File not signed]
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-21] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-21] (Avast Software)
R2 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-11-29] (CyberLink)
R2 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [327432 2013-11-29] (CyberLink)
R2 McAfeeFramework; C:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe [132672 2011-11-15] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [201864 2014-01-07] (McAfee, Inc.)
R2 McTaskManager; C:\Program Files (x86)\McAfee\VirusScan Enterprise\VsTskMgr.exe [210056 2012-08-14] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [170440 2014-01-07] (McAfee, Inc.)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22680 2012-10-25] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-21] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-21] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-21] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-04] (Disc Soft Ltd)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [160952 2014-01-07] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [274880 2014-01-07] (McAfee, Inc.)
U3 mfeavfk01; No ImagePath
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [665768 2014-01-07] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [101200 2014-01-07] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [303464 2014-01-07] (McAfee, Inc.)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-12-24] (Marvell Semiconductor, Inc.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-21] (Avast Software)
R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [32456 2013-11-29] (CyberLink Corp.)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-27 22:15 - 2014-11-27 21:50 - 00112640 _____ (forum.viry.cz) C:\Users\Marika\Desktop\FRSTLauncher.exe
2014-11-27 22:06 - 2014-11-27 22:16 - 00019106 _____ () C:\Users\Marika\Desktop\FRST.txt
2014-11-27 22:04 - 2014-11-27 22:04 - 00000197 _____ () C:\Windows\system32\2014-11-27-21-04-06.054-AvastVBoxSVC.exe-2320.log
2014-11-27 22:03 - 2014-11-27 22:16 - 00000000 ____D () C:\FRST
2014-11-27 22:01 - 2014-11-27 21:47 - 02117632 _____ (Farbar) C:\Users\Marika\Desktop\FRST64.exe
2014-11-27 21:14 - 2014-11-27 22:05 - 00003758 _____ () C:\Windows\System32\Tasks\AutoKMS
2014-11-27 21:14 - 2014-11-27 21:14 - 00000197 _____ () C:\Windows\system32\2014-11-27-20-14-05.082-AvastVBoxSVC.exe-2408.log
2014-11-22 08:58 - 2014-11-22 08:59 - 00000197 _____ () C:\Windows\system32\2014-11-22-07-58-52.044-AvastVBoxSVC.exe-3836.log
2014-11-21 20:39 - 2014-11-21 20:39 - 00000197 _____ () C:\Windows\system32\2014-11-21-19-39-31.089-AvastVBoxSVC.exe-2840.log
2014-11-21 19:00 - 2014-11-21 19:00 - 00000197 _____ () C:\Windows\system32\2014-11-21-18-00-43.061-AvastVBoxSVC.exe-3716.log
2014-11-21 18:27 - 2014-11-21 18:27 - 00000197 _____ () C:\Windows\system32\2014-11-21-17-27-47.043-AvastVBoxSVC.exe-2756.log
2014-11-21 17:45 - 2014-11-21 17:45 - 00000197 _____ () C:\Windows\system32\2014-11-21-16-45-11.046-AvastVBoxSVC.exe-4736.log
2014-11-21 17:10 - 2014-11-21 17:10 - 00000197 _____ () C:\Windows\system32\2014-11-21-16-10-53.009-AvastVBoxSVC.exe-3168.log
2014-11-21 16:43 - 2014-11-21 16:43 - 00000247 _____ () C:\Windows\system32\2014-11-21-15-43-44.041-aswFe.exe-2684.log
2014-11-21 16:39 - 2014-11-21 16:43 - 00000247 _____ () C:\Windows\system32\2014-11-21-15-39-08.021-aswFe.exe-4212.log
2014-11-21 16:39 - 2014-11-21 16:39 - 00000197 _____ () C:\Windows\system32\2014-11-21-15-39-02.097-AvastVBoxSVC.exe-3056.log
2014-11-21 09:33 - 2014-11-21 09:33 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-33-19.093-aswFe.exe-4264.log
2014-11-21 09:33 - 2014-11-21 09:33 - 00000197 _____ () C:\Windows\system32\2014-11-21-08-33-17.008-AvastVBoxSVC.exe-4668.log
2014-11-21 09:25 - 2014-11-21 09:25 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-25-40.036-aswFe.exe-5852.log
2014-11-21 09:16 - 2014-11-21 09:23 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-16-42.099-aswFe.exe-5292.log
2014-11-21 09:16 - 2014-11-21 09:16 - 00000197 _____ () C:\Windows\system32\2014-11-21-08-16-37.065-AvastVBoxSVC.exe-2272.log
2014-11-21 09:05 - 2014-11-21 09:05 - 00000000 ____D () C:\Users\Marika\AppData\Roaming\AVAST Software
2014-11-21 07:59 - 2014-11-21 07:59 - 00000000 ____D () C:\Windows\SysWOW64\vbox
2014-11-21 07:59 - 2014-11-21 07:59 - 00000000 ____D () C:\Windows\system32\vbox
2014-11-21 07:58 - 2014-11-22 08:57 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-11-21 07:58 - 2014-11-21 07:58 - 00002255 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-21 07:58 - 2014-11-21 07:58 - 00001964 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-11-21 07:58 - 2014-11-21 07:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-21 07:58 - 2014-11-21 07:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-11-21 07:51 - 2014-11-27 22:04 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-21 07:51 - 2014-11-27 22:01 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-21 07:51 - 2014-11-22 09:02 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-11-21 07:51 - 2014-11-21 07:58 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-21 07:51 - 2014-11-21 07:58 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-21 07:51 - 2014-11-21 07:50 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-11-21 07:51 - 2014-11-21 07:50 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-11-21 07:50 - 2014-11-21 07:50 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-11-20 19:12 - 2014-11-20 19:12 - 00000000 ____D () C:\Program Files\AVAST Software
2014-11-20 19:04 - 2014-11-20 19:12 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-11-19 06:02 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 06:02 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-19 06:02 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-19 06:02 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-12 17:20 - 2014-11-12 17:20 - 00000000 __SHD () C:\Users\Marika\AppData\Local\EmieBrowserModeList
2014-11-12 08:22 - 2014-11-05 18:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 08:22 - 2014-11-05 18:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 08:22 - 2014-11-05 18:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 08:22 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 08:22 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 08:22 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 08:22 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 08:22 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 08:22 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-12 08:22 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-12 08:22 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-12 08:22 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-12 08:21 - 2014-11-07 20:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 08:21 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-12 08:21 - 2014-11-06 05:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 08:21 - 2014-11-06 05:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 08:21 - 2014-11-06 05:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 08:21 - 2014-11-06 04:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 08:21 - 2014-11-06 04:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 08:21 - 2014-11-06 04:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 08:21 - 2014-11-06 04:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 08:21 - 2014-11-06 04:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 08:21 - 2014-11-06 04:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 08:21 - 2014-11-06 04:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 08:21 - 2014-11-06 04:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 08:21 - 2014-11-06 04:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 08:21 - 2014-11-06 04:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 08:21 - 2014-11-06 04:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 08:21 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-12 08:21 - 2014-11-06 04:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 08:21 - 2014-11-06 04:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 08:21 - 2014-11-06 04:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 08:21 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-12 08:21 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-12 08:21 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-12 08:21 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-12 08:21 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-12 08:21 - 2014-11-06 04:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 08:21 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-12 08:21 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-12 08:21 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-12 08:21 - 2014-11-06 04:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 08:21 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-12 08:21 - 2014-11-06 04:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 08:21 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-12 08:21 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-12 08:21 - 2014-11-06 03:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 08:21 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-12 08:21 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 08:21 - 2014-11-06 03:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 08:21 - 2014-11-06 03:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 08:21 - 2014-11-06 03:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 08:21 - 2014-11-06 03:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 08:21 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-12 08:21 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-12 08:21 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-12 08:21 - 2014-11-06 03:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 08:21 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-12 08:21 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-12 08:21 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-12 08:21 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-12 08:21 - 2014-11-06 03:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 08:21 - 2014-11-06 03:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 08:21 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-12 08:21 - 2014-11-06 02:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 08:21 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-12 08:21 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-12 08:21 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-12 08:18 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 08:18 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-12 08:18 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 08:18 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 08:18 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 08:18 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 08:18 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 08:18 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-12 08:18 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-12 08:18 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-12 08:18 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 08:18 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 08:18 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-12 08:18 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-12 08:18 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 08:18 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-12 08:17 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 08:17 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-11-12 08:17 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 08:16 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 08:16 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-10-29 19:30 - 2014-11-21 20:56 - 00000000 ____D () C:\Users\Marika\Desktop\hellowen
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-27 22:10 - 2009-07-14 05:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-27 22:10 - 2009-07-14 05:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-27 22:05 - 2010-11-21 10:27 - 00668866 _____ () C:\Windows\system32\perfh005.dat
2014-11-27 22:05 - 2010-11-21 10:27 - 00141526 _____ () C:\Windows\system32\perfc005.dat
2014-11-27 22:05 - 2009-07-14 06:13 - 01584554 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-27 22:04 - 2014-01-07 21:06 - 00053743 _____ () C:\Windows\setupact.log
2014-11-27 22:00 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-27 21:17 - 2014-01-06 19:34 - 02032490 _____ () C:\Windows\WindowsUpdate.log
2014-11-21 20:56 - 2014-01-28 16:28 - 00000000 ____D () C:\Users\Marika\Desktop\filmy
2014-11-21 20:55 - 2014-01-10 10:33 - 00000000 ____D () C:\Users\Marika\Desktop\A
2014-11-21 20:49 - 2014-01-09 08:48 - 00000000 ___RD () C:\Users\Marika\Desktop\Účetnictví
2014-11-21 18:05 - 2014-05-27 19:21 - 00000000 ___RD () C:\Users\Marika\Desktop\Dokumenty
2014-11-21 09:48 - 2014-01-07 21:06 - 00014822 _____ () C:\Windows\PFRO.log
2014-11-21 09:05 - 2014-01-09 11:20 - 00000000 ____D () C:\Users\Marika\AppData\Local\Google
2014-11-21 07:57 - 2014-01-09 11:20 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-19 10:38 - 2014-01-07 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Divoký míč 3
2014-11-12 18:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-11-12 17:25 - 2014-01-04 09:46 - 00086144 _____ () C:\Users\Marika\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-12 17:18 - 2009-07-14 05:45 - 00341520 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-12 17:16 - 2014-05-06 08:07 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-12 16:30 - 2014-01-04 19:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-12 16:27 - 2014-01-04 10:43 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 16:24 - 2014-01-04 10:43 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-12 14:30 - 2014-01-04 11:31 - 00000000 ____D () C:\Users\Marika\Desktop\Programy
2014-11-11 12:05 - 2014-10-02 12:17 - 00000000 ____D () C:\Users\Marika\Desktop\Angličtina Filip
2014-11-07 19:29 - 2009-07-14 06:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
Some content of TEMP:
====================
C:\Users\Marika\AppData\Local\Temp\AskPIP_FF_.exe
C:\Users\Marika\AppData\Local\Temp\BackupSetup.exe
C:\Users\Marika\AppData\Local\Temp\PCOptimizerProSetup_CMN_1.exe
C:\Users\Marika\AppData\Local\Temp\PCOPUpdation.exe
C:\Users\Marika\AppData\Local\Temp\siinst.exe
C:\Users\Marika\AppData\Local\Temp\spuad0.exe
C:\Users\Marika\AppData\Local\Temp\spuad1.exe
C:\Users\Marika\AppData\Local\Temp\spuad2.exe
C:\Users\Marika\AppData\Local\Temp\strings.dll
C:\Users\Marika\AppData\Local\Temp\vcredist_x64.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-11-15 11:48
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:148.95 GB) (Free:80.11 GB) NTFS
Drive d: () (Fixed) (Total:74.53 GB) (Free:69.4 GB) NTFS
Drive f: () (Removable) (Total:7.62 GB) (Free:0.35 GB) NTFS
Available physical RAM: 2133.81 MB
Total physical RAM: 3286.91 MB
Percentage of memory in use: 35%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149.1 GB) (Disk ID: D2F926F8)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=149 GB) - (Type=07 NTFS)
Disk: 1 (Size: 74.5 GB) (Disk ID: 61D761D7)
Partition 1: (Not Active) - (Size=74.5 GB) - (Type=07 NTFS)
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 7.6 GB) (Disk ID: F5797799)
Partition 1: (Active) - (Size=7.6 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\Temp:07BF512B
==================== Security Center ==================
AV: McAfee VirusScan Enterprise (Enabled - Out of date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: McAfee VirusScan Enterprise Antispyware Module (Enabled - Out of date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Marika\Desktop" je 17518 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
kamarádka mě donesla PC, kde jsou dva antiviry a jede děsně pomalu a seká se.
Udělejte mě prosím preventivku.
Děkuji .. Zde log z FRST.
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-11-2014 01
Ran by Marika (administrator) on MARIKA-PC on 27-11-2014 22:16:05
Running from C:\Users\Marika\Desktop
Loaded Profile: Marika (Available profiles: Marika)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\Common Framework\UdaterUI.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\VirusScan Enterprise\VsTskMgr.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\VirusScan Enterprise\mfeann.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\Common Framework\McTray.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\Common Framework\naPrdMgr.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\VirusScan Enterprise\shstat.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(forum.viry.cz) C:\Users\Marika\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13213840 2012-10-26] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [McAfeeUpdaterUI] => C:\Program Files (x86)\McAfee\Common Framework\udaterui.exe [333376 2011-11-15] (McAfee, Inc.)
HKLM-x32\...\Run: [ShStatEXE] => C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE [215656 2012-08-14] (McAfee, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-11-21] (AVAST Software)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [NoComputersNearMe] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Run: [SpeedItupFree] => "C:\Program Files (x86)\SpeedItup Free\speeditupfree.exe"
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Run: [Google+ Auto Backup] => "C:\Users\Marika\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoNetHood] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoComputersNearMe] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\MountPoints2: {29528603-d51e-11e3-a109-94de80df2f88} - F:\SISetup.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKU\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKU\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2707257128-485334616-489766779-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-2707257128-485334616-489766779-1000 -> {5358A9D3-C9C1-4EF0-9BA5-433689B01C7D} URL = http://www.search.ask.com/web?tpid=FF3- ... erms}&psv=
SearchScopes: HKU\S-1-5-21-2707257128-485334616-489766779-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
BHO: No Name -> {4646332D-5637-4300-76A7-7A786E7484D7} -> No File
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20140107193450.dll (McAfee, Inc.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20140107193450.dll (McAfee, Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKU\S-1-5-21-2707257128-485334616-489766779-1000 -> No Name - {4646332D-5637-4300-76A7-7A786E7484D7} - No File
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Hosts: 127.0.0.1 acdid.acdsystems.com
Tcpip\Parameters: [DhcpNameServer] 77.48.100.254 212.158.128.2
FireFox:
========
FF ProfilePath: C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default
FF Homepage: hxxp://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Marika\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF Extension: Windows Media Player Extension for Firefox - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\jid0-nRwp7VvCqZcSRTppwWz2npqGEKw@jetpack [2014-01-04]
FF Extension: VratnePenize.cz - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\toolbar@vratnepenize.cz [2014-04-01]
FF Extension: Firefox Old Version Update Hotfix - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\firefox-hotfix@mozilla.org.xpi [2014-09-28]
FF Extension: HTML5 Media Player - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\html5player@horning.us.xpi [2014-01-04]
FF Extension: Adblock Plus - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-04]
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF Extension: IDS_SS_NAME - C:\Program Files (x86)\Common Files\McAfee\SystemCore [2014-01-07]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-11-21]
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-21]
CHR Extension: (Dokumenty Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-21]
CHR Extension: (Disk Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-21]
CHR Extension: (YouTube) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-21]
CHR Extension: (Vyhledávání Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-21]
CHR Extension: (Tabulky Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-21]
CHR Extension: (Avast Online Security) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-11-21]
CHR Extension: (Peněženka Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-21]
CHR Extension: (Gmail) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-21]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-21]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-07] (Advanced Micro Devices, Inc.) [File not signed]
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-21] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-21] (Avast Software)
R2 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-11-29] (CyberLink)
R2 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [327432 2013-11-29] (CyberLink)
R2 McAfeeFramework; C:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe [132672 2011-11-15] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [201864 2014-01-07] (McAfee, Inc.)
R2 McTaskManager; C:\Program Files (x86)\McAfee\VirusScan Enterprise\VsTskMgr.exe [210056 2012-08-14] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [170440 2014-01-07] (McAfee, Inc.)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22680 2012-10-25] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-21] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-21] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-21] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-04] (Disc Soft Ltd)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [160952 2014-01-07] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [274880 2014-01-07] (McAfee, Inc.)
U3 mfeavfk01; No ImagePath
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [665768 2014-01-07] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [101200 2014-01-07] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [303464 2014-01-07] (McAfee, Inc.)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-12-24] (Marvell Semiconductor, Inc.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-21] (Avast Software)
R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [32456 2013-11-29] (CyberLink Corp.)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-27 22:15 - 2014-11-27 21:50 - 00112640 _____ (forum.viry.cz) C:\Users\Marika\Desktop\FRSTLauncher.exe
2014-11-27 22:06 - 2014-11-27 22:16 - 00019106 _____ () C:\Users\Marika\Desktop\FRST.txt
2014-11-27 22:04 - 2014-11-27 22:04 - 00000197 _____ () C:\Windows\system32\2014-11-27-21-04-06.054-AvastVBoxSVC.exe-2320.log
2014-11-27 22:03 - 2014-11-27 22:16 - 00000000 ____D () C:\FRST
2014-11-27 22:01 - 2014-11-27 21:47 - 02117632 _____ (Farbar) C:\Users\Marika\Desktop\FRST64.exe
2014-11-27 21:14 - 2014-11-27 22:05 - 00003758 _____ () C:\Windows\System32\Tasks\AutoKMS
2014-11-27 21:14 - 2014-11-27 21:14 - 00000197 _____ () C:\Windows\system32\2014-11-27-20-14-05.082-AvastVBoxSVC.exe-2408.log
2014-11-22 08:58 - 2014-11-22 08:59 - 00000197 _____ () C:\Windows\system32\2014-11-22-07-58-52.044-AvastVBoxSVC.exe-3836.log
2014-11-21 20:39 - 2014-11-21 20:39 - 00000197 _____ () C:\Windows\system32\2014-11-21-19-39-31.089-AvastVBoxSVC.exe-2840.log
2014-11-21 19:00 - 2014-11-21 19:00 - 00000197 _____ () C:\Windows\system32\2014-11-21-18-00-43.061-AvastVBoxSVC.exe-3716.log
2014-11-21 18:27 - 2014-11-21 18:27 - 00000197 _____ () C:\Windows\system32\2014-11-21-17-27-47.043-AvastVBoxSVC.exe-2756.log
2014-11-21 17:45 - 2014-11-21 17:45 - 00000197 _____ () C:\Windows\system32\2014-11-21-16-45-11.046-AvastVBoxSVC.exe-4736.log
2014-11-21 17:10 - 2014-11-21 17:10 - 00000197 _____ () C:\Windows\system32\2014-11-21-16-10-53.009-AvastVBoxSVC.exe-3168.log
2014-11-21 16:43 - 2014-11-21 16:43 - 00000247 _____ () C:\Windows\system32\2014-11-21-15-43-44.041-aswFe.exe-2684.log
2014-11-21 16:39 - 2014-11-21 16:43 - 00000247 _____ () C:\Windows\system32\2014-11-21-15-39-08.021-aswFe.exe-4212.log
2014-11-21 16:39 - 2014-11-21 16:39 - 00000197 _____ () C:\Windows\system32\2014-11-21-15-39-02.097-AvastVBoxSVC.exe-3056.log
2014-11-21 09:33 - 2014-11-21 09:33 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-33-19.093-aswFe.exe-4264.log
2014-11-21 09:33 - 2014-11-21 09:33 - 00000197 _____ () C:\Windows\system32\2014-11-21-08-33-17.008-AvastVBoxSVC.exe-4668.log
2014-11-21 09:25 - 2014-11-21 09:25 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-25-40.036-aswFe.exe-5852.log
2014-11-21 09:16 - 2014-11-21 09:23 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-16-42.099-aswFe.exe-5292.log
2014-11-21 09:16 - 2014-11-21 09:16 - 00000197 _____ () C:\Windows\system32\2014-11-21-08-16-37.065-AvastVBoxSVC.exe-2272.log
2014-11-21 09:05 - 2014-11-21 09:05 - 00000000 ____D () C:\Users\Marika\AppData\Roaming\AVAST Software
2014-11-21 07:59 - 2014-11-21 07:59 - 00000000 ____D () C:\Windows\SysWOW64\vbox
2014-11-21 07:59 - 2014-11-21 07:59 - 00000000 ____D () C:\Windows\system32\vbox
2014-11-21 07:58 - 2014-11-22 08:57 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-11-21 07:58 - 2014-11-21 07:58 - 00002255 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-21 07:58 - 2014-11-21 07:58 - 00001964 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-11-21 07:58 - 2014-11-21 07:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-21 07:58 - 2014-11-21 07:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-11-21 07:51 - 2014-11-27 22:04 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-21 07:51 - 2014-11-27 22:01 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-21 07:51 - 2014-11-22 09:02 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-11-21 07:51 - 2014-11-21 07:58 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-21 07:51 - 2014-11-21 07:58 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-21 07:51 - 2014-11-21 07:50 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-11-21 07:51 - 2014-11-21 07:50 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-11-21 07:50 - 2014-11-21 07:50 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-11-20 19:12 - 2014-11-20 19:12 - 00000000 ____D () C:\Program Files\AVAST Software
2014-11-20 19:04 - 2014-11-20 19:12 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-11-19 06:02 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 06:02 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-19 06:02 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-19 06:02 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-12 17:20 - 2014-11-12 17:20 - 00000000 __SHD () C:\Users\Marika\AppData\Local\EmieBrowserModeList
2014-11-12 08:22 - 2014-11-05 18:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 08:22 - 2014-11-05 18:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 08:22 - 2014-11-05 18:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 08:22 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 08:22 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 08:22 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 08:22 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 08:22 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 08:22 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-12 08:22 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-12 08:22 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-12 08:22 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-12 08:21 - 2014-11-07 20:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 08:21 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-12 08:21 - 2014-11-06 05:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 08:21 - 2014-11-06 05:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 08:21 - 2014-11-06 05:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 08:21 - 2014-11-06 04:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 08:21 - 2014-11-06 04:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 08:21 - 2014-11-06 04:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 08:21 - 2014-11-06 04:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 08:21 - 2014-11-06 04:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 08:21 - 2014-11-06 04:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 08:21 - 2014-11-06 04:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 08:21 - 2014-11-06 04:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 08:21 - 2014-11-06 04:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 08:21 - 2014-11-06 04:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 08:21 - 2014-11-06 04:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 08:21 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-12 08:21 - 2014-11-06 04:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 08:21 - 2014-11-06 04:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 08:21 - 2014-11-06 04:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 08:21 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-12 08:21 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-12 08:21 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-12 08:21 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-12 08:21 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-12 08:21 - 2014-11-06 04:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 08:21 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-12 08:21 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-12 08:21 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-12 08:21 - 2014-11-06 04:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 08:21 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-12 08:21 - 2014-11-06 04:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 08:21 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-12 08:21 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-12 08:21 - 2014-11-06 03:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 08:21 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-12 08:21 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 08:21 - 2014-11-06 03:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 08:21 - 2014-11-06 03:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 08:21 - 2014-11-06 03:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 08:21 - 2014-11-06 03:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 08:21 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-12 08:21 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-12 08:21 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-12 08:21 - 2014-11-06 03:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 08:21 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-12 08:21 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-12 08:21 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-12 08:21 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-12 08:21 - 2014-11-06 03:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 08:21 - 2014-11-06 03:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 08:21 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-12 08:21 - 2014-11-06 02:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 08:21 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-12 08:21 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-12 08:21 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-12 08:18 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 08:18 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-12 08:18 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 08:18 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 08:18 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 08:18 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 08:18 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 08:18 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-12 08:18 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-12 08:18 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-12 08:18 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 08:18 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 08:18 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-12 08:18 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-12 08:18 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 08:18 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-12 08:17 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 08:17 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-11-12 08:17 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 08:16 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 08:16 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-10-29 19:30 - 2014-11-21 20:56 - 00000000 ____D () C:\Users\Marika\Desktop\hellowen
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-27 22:10 - 2009-07-14 05:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-27 22:10 - 2009-07-14 05:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-27 22:05 - 2010-11-21 10:27 - 00668866 _____ () C:\Windows\system32\perfh005.dat
2014-11-27 22:05 - 2010-11-21 10:27 - 00141526 _____ () C:\Windows\system32\perfc005.dat
2014-11-27 22:05 - 2009-07-14 06:13 - 01584554 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-27 22:04 - 2014-01-07 21:06 - 00053743 _____ () C:\Windows\setupact.log
2014-11-27 22:00 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-27 21:17 - 2014-01-06 19:34 - 02032490 _____ () C:\Windows\WindowsUpdate.log
2014-11-21 20:56 - 2014-01-28 16:28 - 00000000 ____D () C:\Users\Marika\Desktop\filmy
2014-11-21 20:55 - 2014-01-10 10:33 - 00000000 ____D () C:\Users\Marika\Desktop\A
2014-11-21 20:49 - 2014-01-09 08:48 - 00000000 ___RD () C:\Users\Marika\Desktop\Účetnictví
2014-11-21 18:05 - 2014-05-27 19:21 - 00000000 ___RD () C:\Users\Marika\Desktop\Dokumenty
2014-11-21 09:48 - 2014-01-07 21:06 - 00014822 _____ () C:\Windows\PFRO.log
2014-11-21 09:05 - 2014-01-09 11:20 - 00000000 ____D () C:\Users\Marika\AppData\Local\Google
2014-11-21 07:57 - 2014-01-09 11:20 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-19 10:38 - 2014-01-07 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Divoký míč 3
2014-11-12 18:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-11-12 17:25 - 2014-01-04 09:46 - 00086144 _____ () C:\Users\Marika\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-12 17:18 - 2009-07-14 05:45 - 00341520 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-12 17:16 - 2014-05-06 08:07 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-12 16:30 - 2014-01-04 19:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-12 16:27 - 2014-01-04 10:43 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 16:24 - 2014-01-04 10:43 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-12 14:30 - 2014-01-04 11:31 - 00000000 ____D () C:\Users\Marika\Desktop\Programy
2014-11-11 12:05 - 2014-10-02 12:17 - 00000000 ____D () C:\Users\Marika\Desktop\Angličtina Filip
2014-11-07 19:29 - 2009-07-14 06:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
Some content of TEMP:
====================
C:\Users\Marika\AppData\Local\Temp\AskPIP_FF_.exe
C:\Users\Marika\AppData\Local\Temp\BackupSetup.exe
C:\Users\Marika\AppData\Local\Temp\PCOptimizerProSetup_CMN_1.exe
C:\Users\Marika\AppData\Local\Temp\PCOPUpdation.exe
C:\Users\Marika\AppData\Local\Temp\siinst.exe
C:\Users\Marika\AppData\Local\Temp\spuad0.exe
C:\Users\Marika\AppData\Local\Temp\spuad1.exe
C:\Users\Marika\AppData\Local\Temp\spuad2.exe
C:\Users\Marika\AppData\Local\Temp\strings.dll
C:\Users\Marika\AppData\Local\Temp\vcredist_x64.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-11-15 11:48
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:148.95 GB) (Free:80.11 GB) NTFS
Drive d: () (Fixed) (Total:74.53 GB) (Free:69.4 GB) NTFS
Drive f: () (Removable) (Total:7.62 GB) (Free:0.35 GB) NTFS
Available physical RAM: 2133.81 MB
Total physical RAM: 3286.91 MB
Percentage of memory in use: 35%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149.1 GB) (Disk ID: D2F926F8)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=149 GB) - (Type=07 NTFS)
Disk: 1 (Size: 74.5 GB) (Disk ID: 61D761D7)
Partition 1: (Not Active) - (Size=74.5 GB) - (Type=07 NTFS)
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 7.6 GB) (Disk ID: F5797799)
Partition 1: (Active) - (Size=7.6 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\Temp:07BF512B
==================== Security Center ==================
AV: McAfee VirusScan Enterprise (Enabled - Out of date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: McAfee VirusScan Enterprise Antispyware Module (Enabled - Out of date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Marika\Desktop" je 17518 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
- Přílohy
-
- Addition.rar
- (6.47 KiB) Staženo 134 x
Re: PC pomalé, zasekává se ... dva antiviry
Zdravim
Antivir od McAfee odinstalujte, pripadne zde remover http://download.mcafee.com/products/lic ... s/MCPR.exe
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu



- Ulozte nejlepe na plochu
- Ukoncete vsechny programy
- Po spusteni probehne stazeni databaze
- Kliknete na Scan a nasledne Clean
- Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

- Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
- Do okna vlozte skript nize
Kód: Vybrat vše
autoclean; resethosts; emptyclsid; IEdefaults; FFdefaults; CHRdefaults; emptyIEcache; emptyFFcache; emptyCHRcache; emptyalltemp; emptyflash; emptyjava; emptyrecycle.bin;
- Nasledne kliknete na Run Script
- PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
Re: PC pomalé, zasekává se ... dva antiviry
Tak zde jsou logy:
# AdwCleaner v4.102 - Report created 28/11/2014 at 14:16:17
# Updated 23/11/2014 by Xplode
# Database : 2014-11-27.1 [Live]
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Marika - MARIKA-PC
# Running from : F:\Hofec\adwcleaner_4.102.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\PC Optimizer Pro
Folder Deleted : C:\ProgramData\AlawarWrapper
Folder Deleted : C:\Program Files (x86)\MyPC Backup
Folder Deleted : C:\Program Files (x86)\SpeedItup Free
Folder Deleted : C:\Program Files\PC Optimizer Pro
Folder Deleted : C:\Users\Marika\AppData\Local\AlawarWrapper
Folder Deleted : C:\Users\Marika\AppData\Local\Temp\apn
Folder Deleted : C:\Users\Public\Documents\AlawarWrapper
File Deleted : C:\Windows\SpeedItup Free Setup Log.txt
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5358A9D3-C9C1-4EF0-9BA5-433689B01C7D}
Key Deleted : HKCU\Software\pc optimizer pro
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17420
-\\ Mozilla Firefox v30.0 (cs)
-\\ Google Chrome v39.0.2171.65
*************************
AdwCleaner[R0].txt - [1683 octets] - [28/11/2014 14:11:36]
AdwCleaner[S0].txt - [1467 octets] - [28/11/2014 14:16:17]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1527 octets] ##########
---------------------------------------------------------------------------------------------------------------------
Zoek.exe v5.0.0.0 Updated 27-11-2014
Tool run by Marika on p 28.11.2014 at 14:32:39,21.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Marika\Desktop\zoek.exe [Scan all users] [Script inserted]
==== Older Logs ======================
C:\zoek-results2014-11-28-132853.log 1559 bytes
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7DB2D5A0-7241-4E79-B68D-6309F01C5231} deleted successfully
HKEY_USERS\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7DB2D5A0-7241-4E79-B68D-6309F01C5231} deleted successfully
HKEY_USERS\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4646332D-5637-4300-76A7-7A786E7484D7} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4646332D-5637-4300-76A7-7A786E7484D7} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_USERS\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{4646332D-5637-4300-76A7-7A786E7484D7} deleted successfully
==== Deleting Services ======================
==== FireFox Fix ======================
Deleted from C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.seznam.cz/");
Added to C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);
==== Deleting Files \ Folders ======================
C:\PROGRA~2\Alawarhry.cz deleted
C:\Users\Marika\AppData\Roaming\Alawar deleted
C:\Users\Marika\AppData\Roaming\AlawarEntertainment deleted
C:\PROGRA~3\spds90.txt deleted
C:\PROGRA~3\Package Cache deleted
C:\Windows\SpeedItup Free Uninstall Log.txt deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\jetpack deleted
C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\extensions\jid0-nRwp7VvCqZcSRTppwWz2npqGEKw@jetpack deleted
C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\extensions\toolbar@vratnepenize.cz deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [21.11.2014 07:51]
==== Firefox Extensions ======================
ProfilePath: C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default
- Undetermined - C:\Program Files (x86)\Common Files\McAfee\SystemCore
- Firefox Old Version Update Hotfix - %ProfilePath%\extensions\firefox-hotfix@mozilla.org.xpi
- HTML5 Media Player - %ProfilePath%\extensions\html5player@horning.us.xpi
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
==== Firefox Plugins ======================
Profilepath: C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default
F891089A6AB9E12FEDEBCC5EC0F40D66 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll - Shockwave Flash
F3B0E300AFC94E1A775A2D935A7D384F - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll - Shockwave for Director / Shockwave for Director
99F97C9FE748C37528C338A423577FCB - C:\Users\Marika\AppData\Roaming\Mozilla\plugins\np-mswmp.dll - Microsoft® Windows Media Player Firefox Plugin
==== Chromium Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[21.11.2014 07:50]
Avast Online Security - Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/"
"Search Page"="http://www.google.com"
"Search Bar"="http://www.google.com/ie"
"Default_Search_URL"="http://www.google.com/ie"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
@="http://www.google.com/search?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com/ie"
"Default_Search_URL"="http://www.google.com/ie"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.seznam.cz/"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/ ... chasst.htm"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IESR02"
{247ABE7E-5D9B-47A0-A928-168FB5AB9037} Google Url="http://www.google.com/search?q={searchT ... f8&oe=utf8"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Goo Url="http://www.google.com/search?q={sear"
==== Reset Google Chrome ======================
C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Marika\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
C:\Users\Marika\AppData\Local\Mozilla\Firefox\Profiles\c9723zix.default\Cache emptied successfully
==== Empty Chrome Cache ======================
C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=4892 folders=440 1864735363 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Marika\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Marika\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== EOF on p 28.11.2014 at 21:03:33,12 ======================
# AdwCleaner v4.102 - Report created 28/11/2014 at 14:16:17
# Updated 23/11/2014 by Xplode
# Database : 2014-11-27.1 [Live]
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Marika - MARIKA-PC
# Running from : F:\Hofec\adwcleaner_4.102.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\PC Optimizer Pro
Folder Deleted : C:\ProgramData\AlawarWrapper
Folder Deleted : C:\Program Files (x86)\MyPC Backup
Folder Deleted : C:\Program Files (x86)\SpeedItup Free
Folder Deleted : C:\Program Files\PC Optimizer Pro
Folder Deleted : C:\Users\Marika\AppData\Local\AlawarWrapper
Folder Deleted : C:\Users\Marika\AppData\Local\Temp\apn
Folder Deleted : C:\Users\Public\Documents\AlawarWrapper
File Deleted : C:\Windows\SpeedItup Free Setup Log.txt
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5358A9D3-C9C1-4EF0-9BA5-433689B01C7D}
Key Deleted : HKCU\Software\pc optimizer pro
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17420
-\\ Mozilla Firefox v30.0 (cs)
-\\ Google Chrome v39.0.2171.65
*************************
AdwCleaner[R0].txt - [1683 octets] - [28/11/2014 14:11:36]
AdwCleaner[S0].txt - [1467 octets] - [28/11/2014 14:16:17]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1527 octets] ##########
---------------------------------------------------------------------------------------------------------------------
Zoek.exe v5.0.0.0 Updated 27-11-2014
Tool run by Marika on p 28.11.2014 at 14:32:39,21.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Marika\Desktop\zoek.exe [Scan all users] [Script inserted]
==== Older Logs ======================
C:\zoek-results2014-11-28-132853.log 1559 bytes
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7DB2D5A0-7241-4E79-B68D-6309F01C5231} deleted successfully
HKEY_USERS\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7DB2D5A0-7241-4E79-B68D-6309F01C5231} deleted successfully
HKEY_USERS\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4646332D-5637-4300-76A7-7A786E7484D7} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4646332D-5637-4300-76A7-7A786E7484D7} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_USERS\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{4646332D-5637-4300-76A7-7A786E7484D7} deleted successfully
==== Deleting Services ======================
==== FireFox Fix ======================
Deleted from C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.seznam.cz/");
Added to C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);
==== Deleting Files \ Folders ======================
C:\PROGRA~2\Alawarhry.cz deleted
C:\Users\Marika\AppData\Roaming\Alawar deleted
C:\Users\Marika\AppData\Roaming\AlawarEntertainment deleted
C:\PROGRA~3\spds90.txt deleted
C:\PROGRA~3\Package Cache deleted
C:\Windows\SpeedItup Free Uninstall Log.txt deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\jetpack deleted
C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\extensions\jid0-nRwp7VvCqZcSRTppwWz2npqGEKw@jetpack deleted
C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\extensions\toolbar@vratnepenize.cz deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [21.11.2014 07:51]
==== Firefox Extensions ======================
ProfilePath: C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default
- Undetermined - C:\Program Files (x86)\Common Files\McAfee\SystemCore
- Firefox Old Version Update Hotfix - %ProfilePath%\extensions\firefox-hotfix@mozilla.org.xpi
- HTML5 Media Player - %ProfilePath%\extensions\html5player@horning.us.xpi
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
==== Firefox Plugins ======================
Profilepath: C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default
F891089A6AB9E12FEDEBCC5EC0F40D66 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll - Shockwave Flash
F3B0E300AFC94E1A775A2D935A7D384F - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll - Shockwave for Director / Shockwave for Director
99F97C9FE748C37528C338A423577FCB - C:\Users\Marika\AppData\Roaming\Mozilla\plugins\np-mswmp.dll - Microsoft® Windows Media Player Firefox Plugin
==== Chromium Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[21.11.2014 07:50]
Avast Online Security - Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/"
"Search Page"="http://www.google.com"
"Search Bar"="http://www.google.com/ie"
"Default_Search_URL"="http://www.google.com/ie"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
@="http://www.google.com/search?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com/ie"
"Default_Search_URL"="http://www.google.com/ie"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.seznam.cz/"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/ ... chasst.htm"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IESR02"
{247ABE7E-5D9B-47A0-A928-168FB5AB9037} Google Url="http://www.google.com/search?q={searchT ... f8&oe=utf8"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Goo Url="http://www.google.com/search?q={sear"
==== Reset Google Chrome ======================
C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Marika\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
C:\Users\Marika\AppData\Local\Mozilla\Firefox\Profiles\c9723zix.default\Cache emptied successfully
==== Empty Chrome Cache ======================
C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=4892 folders=440 1864735363 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Marika\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Marika\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== EOF on p 28.11.2014 at 21:03:33,12 ======================
Re: PC pomalé, zasekává se ... dva antiviry
Poprosim o novy log z FRST
Re: PC pomalé, zasekává se ... dva antiviry
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-11-2014 01
Ran by Marika (administrator) on MARIKA-PC on 29-11-2014 08:24:55
Running from C:\Users\Marika\Desktop
Loaded Profile: Marika (Available profiles: Marika)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13213840 2012-10-26] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-11-21] (AVAST Software)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [NoComputersNearMe] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Run: [SpeedItupFree] => "C:\Program Files (x86)\SpeedItup Free\speeditupfree.exe"
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Run: [Google+ Auto Backup] => "C:\Users\Marika\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoNetHood] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoComputersNearMe] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\MountPoints2: {29528603-d51e-11e3-a109-94de80df2f88} - F:\SISetup.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2707257128-485334616-489766779-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-2707257128-485334616-489766779-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2707257128-485334616-489766779-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.10.1
FireFox:
========
FF ProfilePath: C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q=
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Marika\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF Extension: Firefox Old Version Update Hotfix - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\firefox-hotfix@mozilla.org.xpi [2014-09-28]
FF Extension: HTML5 Media Player - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\html5player@horning.us.xpi [2014-01-04]
FF Extension: Adblock Plus - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-04]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-11-21]
FF Extension: No Name - C:\Program Files (x86)\Common Files\McAfee\SystemCore [Not Found]
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-21]
CHR Extension: (Dokumenty Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-21]
CHR Extension: (Disk Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-21]
CHR Extension: (YouTube) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-21]
CHR Extension: (Vyhledávání Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-21]
CHR Extension: (Tabulky Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-21]
CHR Extension: (Avast Online Security) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-11-21]
CHR Extension: (Peněženka Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-21]
CHR Extension: (Gmail) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-21]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-21]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-07] (Advanced Micro Devices, Inc.) [File not signed]
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-21] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-21] (Avast Software)
R2 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-11-29] (CyberLink)
R2 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [327432 2013-11-29] (CyberLink)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22680 2012-10-25] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-21] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-21] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-21] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-04] (Disc Soft Ltd)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-12-24] (Marvell Semiconductor, Inc.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-21] (Avast Software)
R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [32456 2013-11-29] (CyberLink Corp.)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-29 08:24 - 2014-11-29 08:25 - 00015835 _____ () C:\Users\Marika\Desktop\FRST.txt
2014-11-29 08:21 - 2014-11-29 08:21 - 00000197 _____ () C:\Windows\system32\2014-11-29-07-21-54.080-AvastVBoxSVC.exe-3208.log
2014-11-28 21:07 - 2014-11-28 21:07 - 00000000 ____D () C:\Users\Marika\AppData\Roaming\Alawar
2014-11-28 21:05 - 2014-11-28 21:05 - 00000197 _____ () C:\Windows\system32\2014-11-28-20-05-32.009-AvastVBoxSVC.exe-3320.log
2014-11-28 15:11 - 2014-02-13 23:59 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-11-28 14:35 - 2014-11-28 14:28 - 00001559 _____ () C:\zoek-results2014-11-28-132853.log
2014-11-28 14:33 - 2014-11-29 08:20 - 00003754 _____ () C:\Windows\System32\Tasks\AutoKMS
2014-11-28 14:33 - 2014-11-28 14:33 - 00000197 _____ () C:\Windows\system32\2014-11-28-13-33-16.099-AvastVBoxSVC.exe-2672.log
2014-11-28 14:24 - 2014-11-28 21:03 - 00009923 _____ () C:\zoek-results.log
2014-11-28 14:22 - 2014-11-28 15:04 - 00000000 ____D () C:\zoek_backup
2014-11-28 14:21 - 2014-11-28 14:21 - 00000280 _____ () C:\Windows\system32\2014-11-28-13-21-20.034-aswFe.exe-3116.log
2014-11-28 14:21 - 2014-11-28 14:21 - 00000197 _____ () C:\Windows\system32\2014-11-28-13-21-01.003-AvastVBoxSVC.exe-2788.log
2014-11-28 14:19 - 2014-11-27 23:20 - 01428769 _____ () C:\Users\Marika\Desktop\zoek.exe
2014-11-28 14:12 - 2014-11-28 14:12 - 00000197 _____ () C:\Windows\system32\2014-11-28-13-12-15.046-AvastVBoxSVC.exe-2496.log
2014-11-28 14:02 - 2014-11-28 14:16 - 00000000 ____D () C:\AdwCleaner
2014-11-28 14:02 - 2014-11-28 14:02 - 00000280 _____ () C:\Windows\system32\2014-11-28-13-02-12.014-aswFe.exe-2256.log
2014-11-28 13:54 - 2014-11-28 13:54 - 00000197 _____ () C:\Windows\system32\2014-11-28-12-54-52.092-AvastVBoxSVC.exe-3308.log
2014-11-28 13:19 - 2014-11-28 13:19 - 00000197 _____ () C:\Windows\system32\2014-11-28-12-19-47.036-AvastVBoxSVC.exe-1040.log
2014-11-27 22:04 - 2014-11-27 22:04 - 00000197 _____ () C:\Windows\system32\2014-11-27-21-04-06.054-AvastVBoxSVC.exe-2320.log
2014-11-27 22:03 - 2014-11-29 08:24 - 00000000 ____D () C:\FRST
2014-11-27 22:01 - 2014-11-27 21:47 - 02117632 _____ (Farbar) C:\Users\Marika\Desktop\FRST64.exe
2014-11-27 21:14 - 2014-11-27 21:14 - 00000197 _____ () C:\Windows\system32\2014-11-27-20-14-05.082-AvastVBoxSVC.exe-2408.log
2014-11-22 08:58 - 2014-11-22 08:59 - 00000197 _____ () C:\Windows\system32\2014-11-22-07-58-52.044-AvastVBoxSVC.exe-3836.log
2014-11-21 20:39 - 2014-11-21 20:39 - 00000197 _____ () C:\Windows\system32\2014-11-21-19-39-31.089-AvastVBoxSVC.exe-2840.log
2014-11-21 19:00 - 2014-11-21 19:00 - 00000197 _____ () C:\Windows\system32\2014-11-21-18-00-43.061-AvastVBoxSVC.exe-3716.log
2014-11-21 18:27 - 2014-11-21 18:27 - 00000197 _____ () C:\Windows\system32\2014-11-21-17-27-47.043-AvastVBoxSVC.exe-2756.log
2014-11-21 17:45 - 2014-11-21 17:45 - 00000197 _____ () C:\Windows\system32\2014-11-21-16-45-11.046-AvastVBoxSVC.exe-4736.log
2014-11-21 17:10 - 2014-11-21 17:10 - 00000197 _____ () C:\Windows\system32\2014-11-21-16-10-53.009-AvastVBoxSVC.exe-3168.log
2014-11-21 16:43 - 2014-11-21 16:43 - 00000247 _____ () C:\Windows\system32\2014-11-21-15-43-44.041-aswFe.exe-2684.log
2014-11-21 16:39 - 2014-11-21 16:43 - 00000247 _____ () C:\Windows\system32\2014-11-21-15-39-08.021-aswFe.exe-4212.log
2014-11-21 16:39 - 2014-11-21 16:39 - 00000197 _____ () C:\Windows\system32\2014-11-21-15-39-02.097-AvastVBoxSVC.exe-3056.log
2014-11-21 09:33 - 2014-11-21 09:33 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-33-19.093-aswFe.exe-4264.log
2014-11-21 09:33 - 2014-11-21 09:33 - 00000197 _____ () C:\Windows\system32\2014-11-21-08-33-17.008-AvastVBoxSVC.exe-4668.log
2014-11-21 09:25 - 2014-11-21 09:25 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-25-40.036-aswFe.exe-5852.log
2014-11-21 09:16 - 2014-11-21 09:23 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-16-42.099-aswFe.exe-5292.log
2014-11-21 09:16 - 2014-11-21 09:16 - 00000197 _____ () C:\Windows\system32\2014-11-21-08-16-37.065-AvastVBoxSVC.exe-2272.log
2014-11-21 09:05 - 2014-11-21 09:05 - 00000000 ____D () C:\Users\Marika\AppData\Roaming\AVAST Software
2014-11-21 07:59 - 2014-11-21 07:59 - 00000000 ____D () C:\Windows\SysWOW64\vbox
2014-11-21 07:59 - 2014-11-21 07:59 - 00000000 ____D () C:\Windows\system32\vbox
2014-11-21 07:58 - 2014-11-28 21:03 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-11-21 07:58 - 2014-11-28 15:05 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-21 07:58 - 2014-11-21 07:58 - 00001964 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-11-21 07:58 - 2014-11-21 07:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-21 07:58 - 2014-11-21 07:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-11-21 07:51 - 2014-11-29 08:19 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-21 07:51 - 2014-11-28 15:05 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-21 07:51 - 2014-11-22 09:02 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-11-21 07:51 - 2014-11-21 07:58 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-21 07:51 - 2014-11-21 07:58 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-21 07:51 - 2014-11-21 07:50 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-11-21 07:51 - 2014-11-21 07:50 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-11-21 07:50 - 2014-11-21 07:50 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-11-20 19:12 - 2014-11-20 19:12 - 00000000 ____D () C:\Program Files\AVAST Software
2014-11-20 19:04 - 2014-11-20 19:12 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-11-19 06:02 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 06:02 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-19 06:02 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-19 06:02 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-12 17:20 - 2014-11-12 17:20 - 00000000 __SHD () C:\Users\Marika\AppData\Local\EmieBrowserModeList
2014-11-12 08:22 - 2014-11-05 18:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 08:22 - 2014-11-05 18:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 08:22 - 2014-11-05 18:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 08:22 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 08:22 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 08:22 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 08:22 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 08:22 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 08:22 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-12 08:22 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-12 08:22 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-12 08:22 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-12 08:21 - 2014-11-07 20:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 08:21 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-12 08:21 - 2014-11-06 05:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 08:21 - 2014-11-06 05:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 08:21 - 2014-11-06 05:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 08:21 - 2014-11-06 04:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 08:21 - 2014-11-06 04:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 08:21 - 2014-11-06 04:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 08:21 - 2014-11-06 04:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 08:21 - 2014-11-06 04:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 08:21 - 2014-11-06 04:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 08:21 - 2014-11-06 04:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 08:21 - 2014-11-06 04:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 08:21 - 2014-11-06 04:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 08:21 - 2014-11-06 04:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 08:21 - 2014-11-06 04:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 08:21 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-12 08:21 - 2014-11-06 04:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 08:21 - 2014-11-06 04:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 08:21 - 2014-11-06 04:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 08:21 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-12 08:21 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-12 08:21 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-12 08:21 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-12 08:21 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-12 08:21 - 2014-11-06 04:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 08:21 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-12 08:21 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-12 08:21 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-12 08:21 - 2014-11-06 04:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 08:21 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-12 08:21 - 2014-11-06 04:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 08:21 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-12 08:21 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-12 08:21 - 2014-11-06 03:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 08:21 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-12 08:21 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 08:21 - 2014-11-06 03:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 08:21 - 2014-11-06 03:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 08:21 - 2014-11-06 03:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 08:21 - 2014-11-06 03:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 08:21 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-12 08:21 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-12 08:21 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-12 08:21 - 2014-11-06 03:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 08:21 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-12 08:21 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-12 08:21 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-12 08:21 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-12 08:21 - 2014-11-06 03:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 08:21 - 2014-11-06 03:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 08:21 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-12 08:21 - 2014-11-06 02:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 08:21 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-12 08:21 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-12 08:21 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-12 08:18 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 08:18 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-12 08:18 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 08:18 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 08:18 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 08:18 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 08:18 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 08:18 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-12 08:18 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-12 08:18 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-12 08:18 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 08:18 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 08:18 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-12 08:18 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-12 08:18 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 08:18 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-12 08:17 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 08:17 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-11-12 08:17 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 08:16 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 08:16 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-29 08:25 - 2009-07-14 05:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-29 08:25 - 2009-07-14 05:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-29 08:22 - 2014-01-06 19:34 - 01052214 _____ () C:\Windows\WindowsUpdate.log
2014-11-29 08:19 - 2014-01-07 21:06 - 00054169 _____ () C:\Windows\setupact.log
2014-11-29 08:18 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-28 21:03 - 2014-01-07 21:06 - 00020720 _____ () C:\Windows\PFRO.log
2014-11-28 13:57 - 2014-03-26 19:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-27 22:05 - 2010-11-21 10:27 - 00668866 _____ () C:\Windows\system32\perfh005.dat
2014-11-27 22:05 - 2010-11-21 10:27 - 00141526 _____ () C:\Windows\system32\perfc005.dat
2014-11-27 22:05 - 2009-07-14 06:13 - 01584554 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-24 14:04 - 2010-11-21 04:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-21 20:56 - 2014-10-29 19:30 - 00000000 ____D () C:\Users\Marika\Desktop\hellowen
2014-11-21 20:56 - 2014-01-28 16:28 - 00000000 ____D () C:\Users\Marika\Desktop\filmy
2014-11-21 20:55 - 2014-01-10 10:33 - 00000000 ____D () C:\Users\Marika\Desktop\A
2014-11-21 20:49 - 2014-01-09 08:48 - 00000000 ___RD () C:\Users\Marika\Desktop\Účetnictví
2014-11-21 18:05 - 2014-05-27 19:21 - 00000000 ___RD () C:\Users\Marika\Desktop\Dokumenty
2014-11-21 09:05 - 2014-01-09 11:20 - 00000000 ____D () C:\Users\Marika\AppData\Local\Google
2014-11-21 07:57 - 2014-01-09 11:20 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-19 10:38 - 2014-01-07 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Divoký míč 3
2014-11-12 18:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-11-12 17:25 - 2014-01-04 09:46 - 00086144 _____ () C:\Users\Marika\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-12 17:18 - 2009-07-14 05:45 - 00341520 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-12 17:16 - 2014-05-06 08:07 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-12 16:30 - 2014-01-04 19:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-12 16:27 - 2014-01-04 10:43 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 16:24 - 2014-01-04 10:43 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-12 14:30 - 2014-01-04 11:31 - 00000000 ____D () C:\Users\Marika\Desktop\Programy
2014-11-11 12:05 - 2014-10-02 12:17 - 00000000 ____D () C:\Users\Marika\Desktop\Angličtina Filip
2014-11-07 19:29 - 2009-07-14 06:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-11-28 13:46
==================== End Of Log ============================
Ran by Marika (administrator) on MARIKA-PC on 29-11-2014 08:24:55
Running from C:\Users\Marika\Desktop
Loaded Profile: Marika (Available profiles: Marika)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13213840 2012-10-26] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-11-21] (AVAST Software)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [NoComputersNearMe] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Run: [SpeedItupFree] => "C:\Program Files (x86)\SpeedItup Free\speeditupfree.exe"
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Run: [Google+ Auto Backup] => "C:\Users\Marika\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoNetHood] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoComputersNearMe] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\MountPoints2: {29528603-d51e-11e3-a109-94de80df2f88} - F:\SISetup.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2707257128-485334616-489766779-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-2707257128-485334616-489766779-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2707257128-485334616-489766779-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.10.1
FireFox:
========
FF ProfilePath: C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q=
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Marika\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF Extension: Firefox Old Version Update Hotfix - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\firefox-hotfix@mozilla.org.xpi [2014-09-28]
FF Extension: HTML5 Media Player - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\html5player@horning.us.xpi [2014-01-04]
FF Extension: Adblock Plus - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-04]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-11-21]
FF Extension: No Name - C:\Program Files (x86)\Common Files\McAfee\SystemCore [Not Found]
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-21]
CHR Extension: (Dokumenty Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-21]
CHR Extension: (Disk Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-21]
CHR Extension: (YouTube) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-21]
CHR Extension: (Vyhledávání Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-21]
CHR Extension: (Tabulky Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-21]
CHR Extension: (Avast Online Security) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-11-21]
CHR Extension: (Peněženka Google) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-21]
CHR Extension: (Gmail) - C:\Users\Marika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-21]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-21]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-07] (Advanced Micro Devices, Inc.) [File not signed]
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-21] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-21] (Avast Software)
R2 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-11-29] (CyberLink)
R2 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [327432 2013-11-29] (CyberLink)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22680 2012-10-25] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-21] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-21] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-21] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-04] (Disc Soft Ltd)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-12-24] (Marvell Semiconductor, Inc.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-21] (Avast Software)
R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [32456 2013-11-29] (CyberLink Corp.)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-29 08:24 - 2014-11-29 08:25 - 00015835 _____ () C:\Users\Marika\Desktop\FRST.txt
2014-11-29 08:21 - 2014-11-29 08:21 - 00000197 _____ () C:\Windows\system32\2014-11-29-07-21-54.080-AvastVBoxSVC.exe-3208.log
2014-11-28 21:07 - 2014-11-28 21:07 - 00000000 ____D () C:\Users\Marika\AppData\Roaming\Alawar
2014-11-28 21:05 - 2014-11-28 21:05 - 00000197 _____ () C:\Windows\system32\2014-11-28-20-05-32.009-AvastVBoxSVC.exe-3320.log
2014-11-28 15:11 - 2014-02-13 23:59 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-11-28 14:35 - 2014-11-28 14:28 - 00001559 _____ () C:\zoek-results2014-11-28-132853.log
2014-11-28 14:33 - 2014-11-29 08:20 - 00003754 _____ () C:\Windows\System32\Tasks\AutoKMS
2014-11-28 14:33 - 2014-11-28 14:33 - 00000197 _____ () C:\Windows\system32\2014-11-28-13-33-16.099-AvastVBoxSVC.exe-2672.log
2014-11-28 14:24 - 2014-11-28 21:03 - 00009923 _____ () C:\zoek-results.log
2014-11-28 14:22 - 2014-11-28 15:04 - 00000000 ____D () C:\zoek_backup
2014-11-28 14:21 - 2014-11-28 14:21 - 00000280 _____ () C:\Windows\system32\2014-11-28-13-21-20.034-aswFe.exe-3116.log
2014-11-28 14:21 - 2014-11-28 14:21 - 00000197 _____ () C:\Windows\system32\2014-11-28-13-21-01.003-AvastVBoxSVC.exe-2788.log
2014-11-28 14:19 - 2014-11-27 23:20 - 01428769 _____ () C:\Users\Marika\Desktop\zoek.exe
2014-11-28 14:12 - 2014-11-28 14:12 - 00000197 _____ () C:\Windows\system32\2014-11-28-13-12-15.046-AvastVBoxSVC.exe-2496.log
2014-11-28 14:02 - 2014-11-28 14:16 - 00000000 ____D () C:\AdwCleaner
2014-11-28 14:02 - 2014-11-28 14:02 - 00000280 _____ () C:\Windows\system32\2014-11-28-13-02-12.014-aswFe.exe-2256.log
2014-11-28 13:54 - 2014-11-28 13:54 - 00000197 _____ () C:\Windows\system32\2014-11-28-12-54-52.092-AvastVBoxSVC.exe-3308.log
2014-11-28 13:19 - 2014-11-28 13:19 - 00000197 _____ () C:\Windows\system32\2014-11-28-12-19-47.036-AvastVBoxSVC.exe-1040.log
2014-11-27 22:04 - 2014-11-27 22:04 - 00000197 _____ () C:\Windows\system32\2014-11-27-21-04-06.054-AvastVBoxSVC.exe-2320.log
2014-11-27 22:03 - 2014-11-29 08:24 - 00000000 ____D () C:\FRST
2014-11-27 22:01 - 2014-11-27 21:47 - 02117632 _____ (Farbar) C:\Users\Marika\Desktop\FRST64.exe
2014-11-27 21:14 - 2014-11-27 21:14 - 00000197 _____ () C:\Windows\system32\2014-11-27-20-14-05.082-AvastVBoxSVC.exe-2408.log
2014-11-22 08:58 - 2014-11-22 08:59 - 00000197 _____ () C:\Windows\system32\2014-11-22-07-58-52.044-AvastVBoxSVC.exe-3836.log
2014-11-21 20:39 - 2014-11-21 20:39 - 00000197 _____ () C:\Windows\system32\2014-11-21-19-39-31.089-AvastVBoxSVC.exe-2840.log
2014-11-21 19:00 - 2014-11-21 19:00 - 00000197 _____ () C:\Windows\system32\2014-11-21-18-00-43.061-AvastVBoxSVC.exe-3716.log
2014-11-21 18:27 - 2014-11-21 18:27 - 00000197 _____ () C:\Windows\system32\2014-11-21-17-27-47.043-AvastVBoxSVC.exe-2756.log
2014-11-21 17:45 - 2014-11-21 17:45 - 00000197 _____ () C:\Windows\system32\2014-11-21-16-45-11.046-AvastVBoxSVC.exe-4736.log
2014-11-21 17:10 - 2014-11-21 17:10 - 00000197 _____ () C:\Windows\system32\2014-11-21-16-10-53.009-AvastVBoxSVC.exe-3168.log
2014-11-21 16:43 - 2014-11-21 16:43 - 00000247 _____ () C:\Windows\system32\2014-11-21-15-43-44.041-aswFe.exe-2684.log
2014-11-21 16:39 - 2014-11-21 16:43 - 00000247 _____ () C:\Windows\system32\2014-11-21-15-39-08.021-aswFe.exe-4212.log
2014-11-21 16:39 - 2014-11-21 16:39 - 00000197 _____ () C:\Windows\system32\2014-11-21-15-39-02.097-AvastVBoxSVC.exe-3056.log
2014-11-21 09:33 - 2014-11-21 09:33 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-33-19.093-aswFe.exe-4264.log
2014-11-21 09:33 - 2014-11-21 09:33 - 00000197 _____ () C:\Windows\system32\2014-11-21-08-33-17.008-AvastVBoxSVC.exe-4668.log
2014-11-21 09:25 - 2014-11-21 09:25 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-25-40.036-aswFe.exe-5852.log
2014-11-21 09:16 - 2014-11-21 09:23 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-16-42.099-aswFe.exe-5292.log
2014-11-21 09:16 - 2014-11-21 09:16 - 00000197 _____ () C:\Windows\system32\2014-11-21-08-16-37.065-AvastVBoxSVC.exe-2272.log
2014-11-21 09:05 - 2014-11-21 09:05 - 00000000 ____D () C:\Users\Marika\AppData\Roaming\AVAST Software
2014-11-21 07:59 - 2014-11-21 07:59 - 00000000 ____D () C:\Windows\SysWOW64\vbox
2014-11-21 07:59 - 2014-11-21 07:59 - 00000000 ____D () C:\Windows\system32\vbox
2014-11-21 07:58 - 2014-11-28 21:03 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-11-21 07:58 - 2014-11-28 15:05 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-21 07:58 - 2014-11-21 07:58 - 00001964 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-11-21 07:58 - 2014-11-21 07:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-21 07:58 - 2014-11-21 07:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-11-21 07:51 - 2014-11-29 08:19 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-21 07:51 - 2014-11-28 15:05 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-21 07:51 - 2014-11-22 09:02 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-11-21 07:51 - 2014-11-21 07:58 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-21 07:51 - 2014-11-21 07:58 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-21 07:51 - 2014-11-21 07:50 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-11-21 07:51 - 2014-11-21 07:50 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-11-21 07:51 - 2014-11-21 07:50 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-11-21 07:50 - 2014-11-21 07:50 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-11-20 19:12 - 2014-11-20 19:12 - 00000000 ____D () C:\Program Files\AVAST Software
2014-11-20 19:04 - 2014-11-20 19:12 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-11-19 06:02 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 06:02 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-19 06:02 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-19 06:02 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-12 17:20 - 2014-11-12 17:20 - 00000000 __SHD () C:\Users\Marika\AppData\Local\EmieBrowserModeList
2014-11-12 08:22 - 2014-11-05 18:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 08:22 - 2014-11-05 18:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 08:22 - 2014-11-05 18:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 08:22 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 08:22 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 08:22 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 08:22 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 08:22 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 08:22 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-12 08:22 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-12 08:22 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-12 08:22 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-12 08:21 - 2014-11-07 20:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 08:21 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-12 08:21 - 2014-11-06 05:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 08:21 - 2014-11-06 05:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 08:21 - 2014-11-06 05:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 08:21 - 2014-11-06 04:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 08:21 - 2014-11-06 04:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 08:21 - 2014-11-06 04:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 08:21 - 2014-11-06 04:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 08:21 - 2014-11-06 04:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 08:21 - 2014-11-06 04:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 08:21 - 2014-11-06 04:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 08:21 - 2014-11-06 04:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 08:21 - 2014-11-06 04:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 08:21 - 2014-11-06 04:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 08:21 - 2014-11-06 04:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 08:21 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-12 08:21 - 2014-11-06 04:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 08:21 - 2014-11-06 04:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 08:21 - 2014-11-06 04:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 08:21 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-12 08:21 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-12 08:21 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-12 08:21 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-12 08:21 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-12 08:21 - 2014-11-06 04:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 08:21 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-12 08:21 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-12 08:21 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-12 08:21 - 2014-11-06 04:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 08:21 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-12 08:21 - 2014-11-06 04:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 08:21 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-12 08:21 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-12 08:21 - 2014-11-06 03:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 08:21 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-12 08:21 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 08:21 - 2014-11-06 03:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 08:21 - 2014-11-06 03:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 08:21 - 2014-11-06 03:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 08:21 - 2014-11-06 03:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 08:21 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-12 08:21 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-12 08:21 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-12 08:21 - 2014-11-06 03:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 08:21 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-12 08:21 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-12 08:21 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-12 08:21 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-12 08:21 - 2014-11-06 03:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 08:21 - 2014-11-06 03:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 08:21 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-12 08:21 - 2014-11-06 02:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 08:21 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-12 08:21 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-12 08:21 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-12 08:18 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 08:18 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-12 08:18 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 08:18 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 08:18 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 08:18 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 08:18 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 08:18 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-12 08:18 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-12 08:18 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 08:18 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-12 08:18 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-12 08:18 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 08:18 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 08:18 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-12 08:18 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-12 08:18 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 08:18 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-12 08:17 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 08:17 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-11-12 08:17 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 08:16 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 08:16 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-29 08:25 - 2009-07-14 05:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-29 08:25 - 2009-07-14 05:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-29 08:22 - 2014-01-06 19:34 - 01052214 _____ () C:\Windows\WindowsUpdate.log
2014-11-29 08:19 - 2014-01-07 21:06 - 00054169 _____ () C:\Windows\setupact.log
2014-11-29 08:18 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-28 21:03 - 2014-01-07 21:06 - 00020720 _____ () C:\Windows\PFRO.log
2014-11-28 13:57 - 2014-03-26 19:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-27 22:05 - 2010-11-21 10:27 - 00668866 _____ () C:\Windows\system32\perfh005.dat
2014-11-27 22:05 - 2010-11-21 10:27 - 00141526 _____ () C:\Windows\system32\perfc005.dat
2014-11-27 22:05 - 2009-07-14 06:13 - 01584554 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-24 14:04 - 2010-11-21 04:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-21 20:56 - 2014-10-29 19:30 - 00000000 ____D () C:\Users\Marika\Desktop\hellowen
2014-11-21 20:56 - 2014-01-28 16:28 - 00000000 ____D () C:\Users\Marika\Desktop\filmy
2014-11-21 20:55 - 2014-01-10 10:33 - 00000000 ____D () C:\Users\Marika\Desktop\A
2014-11-21 20:49 - 2014-01-09 08:48 - 00000000 ___RD () C:\Users\Marika\Desktop\Účetnictví
2014-11-21 18:05 - 2014-05-27 19:21 - 00000000 ___RD () C:\Users\Marika\Desktop\Dokumenty
2014-11-21 09:05 - 2014-01-09 11:20 - 00000000 ____D () C:\Users\Marika\AppData\Local\Google
2014-11-21 07:57 - 2014-01-09 11:20 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-19 10:38 - 2014-01-07 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Divoký míč 3
2014-11-12 18:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-11-12 17:25 - 2014-01-04 09:46 - 00086144 _____ () C:\Users\Marika\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-12 17:18 - 2009-07-14 05:45 - 00341520 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-12 17:16 - 2014-05-06 08:07 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-12 16:30 - 2014-01-04 19:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-12 16:27 - 2014-01-04 10:43 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 16:24 - 2014-01-04 10:43 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-12 14:30 - 2014-01-04 11:31 - 00000000 ____D () C:\Users\Marika\Desktop\Programy
2014-11-11 12:05 - 2014-10-02 12:17 - 00000000 ____D () C:\Users\Marika\Desktop\Angličtina Filip
2014-11-07 19:29 - 2009-07-14 06:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-11-28 13:46
==================== End Of Log ============================
- Přílohy
-
- Addition.rar
- (6.01 KiB) Staženo 112 x
Re: PC pomalé, zasekává se ... dva antiviry

- Spustte poznamkovy blok (Start-spustit-notepad)
- Zkopirujte skript nize
Kód: Vybrat vše
Start CloseProcesses: HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKLM\...\Policies\Explorer: [NoComputersNearMe] 0 HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Run: [SpeedItupFree] => "C:\Program Files (x86)\SpeedItup Free\speeditupfree.exe" HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoNetHood] 0 HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoComputersNearMe] 0 HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\MountPoints2: {29528603-d51e-11e3-a109-94de80df2f88} - F:\SISetup.exe HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-2707257128-485334616-489766779-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTIO FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Extension: Firefox Old Version Update Hotfix - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\firefox-hotfix@mozilla.org.xpi [2014-09-28] FF Extension: No Name - C:\Program Files (x86)\Common Files\McAfee\SystemCore [Not Found] C:\Program Files (x86)\SpeedItup Free 2014-11-29 08:24 - 2014-11-29 08:25 - 00015835 _____ () C:\Users\Marika\Desktop\FRST.txt 2014-11-29 08:21 - 2014-11-29 08:21 - 00000197 _____ () C:\Windows\system32\2014-11-29-07-21-54.080-AvastVBoxSVC.exe-3208.log 2014-11-28 21:07 - 2014-11-28 21:07 - 00000000 ____D () C:\Users\Marika\AppData\Roaming\Alawar 2014-11-28 21:05 - 2014-11-28 21:05 - 00000197 _____ () C:\Windows\system32\2014-11-28-20-05-32.009-AvastVBoxSVC.exe-3320.log 2014-11-28 15:11 - 2014-02-13 23:59 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-11-28 14:35 - 2014-11-28 14:28 - 00001559 _____ () C:\zoek-results2014-11-28-132853.log 2014-11-28 14:33 - 2014-11-29 08:20 - 00003754 _____ () C:\Windows\System32\Tasks\AutoKMS 2014-11-28 14:33 - 2014-11-28 14:33 - 00000197 _____ () C:\Windows\system32\2014-11-28-13-33-16.099-AvastVBoxSVC.exe-2672.log 2014-11-28 14:24 - 2014-11-28 21:03 - 00009923 _____ () C:\zoek-results.log 2014-11-28 14:22 - 2014-11-28 15:04 - 00000000 ____D () C:\zoek_backup 2014-11-28 14:21 - 2014-11-28 14:21 - 00000280 _____ () C:\Windows\system32\2014-11-28-13-21-20.034-aswFe.exe-3116.log 2014-11-28 14:21 - 2014-11-28 14:21 - 00000197 _____ () C:\Windows\system32\2014-11-28-13-21-01.003-AvastVBoxSVC.exe-2788.log 2014-11-28 14:19 - 2014-11-27 23:20 - 01428769 _____ () C:\Users\Marika\Desktop\zoek.exe 2014-11-28 14:12 - 2014-11-28 14:12 - 00000197 _____ () C:\Windows\system32\2014-11-28-13-12-15.046-AvastVBoxSVC.exe-2496.log 2014-11-28 14:02 - 2014-11-28 14:16 - 00000000 ____D () C:\AdwCleaner 2014-11-28 14:02 - 2014-11-28 14:02 - 00000280 _____ () C:\Windows\system32\2014-11-28-13-02-12.014-aswFe.exe-2256.log 2014-11-28 13:54 - 2014-11-28 13:54 - 00000197 _____ () C:\Windows\system32\2014-11-28-12-54-52.092-AvastVBoxSVC.exe-3308.log 2014-11-28 13:19 - 2014-11-28 13:19 - 00000197 _____ () C:\Windows\system32\2014-11-28-12-19-47.036-AvastVBoxSVC.exe-1040.log 2014-11-27 22:04 - 2014-11-27 22:04 - 00000197 _____ () C:\Windows\system32\2014-11-27-21-04-06.054-AvastVBoxSVC.exe-2320.log 2014-11-27 21:14 - 2014-11-27 21:14 - 00000197 _____ () C:\Windows\system32\2014-11-27-20-14-05.082-AvastVBoxSVC.exe-2408.log 2014-11-22 08:58 - 2014-11-22 08:59 - 00000197 _____ () C:\Windows\system32\2014-11-22-07-58-52.044-AvastVBoxSVC.exe-3836.log 2014-11-21 20:39 - 2014-11-21 20:39 - 00000197 _____ () C:\Windows\system32\2014-11-21-19-39-31.089-AvastVBoxSVC.exe-2840.log 2014-11-21 19:00 - 2014-11-21 19:00 - 00000197 _____ () C:\Windows\system32\2014-11-21-18-00-43.061-AvastVBoxSVC.exe-3716.log 2014-11-21 18:27 - 2014-11-21 18:27 - 00000197 _____ () C:\Windows\system32\2014-11-21-17-27-47.043-AvastVBoxSVC.exe-2756.log 2014-11-21 17:45 - 2014-11-21 17:45 - 00000197 _____ () C:\Windows\system32\2014-11-21-16-45-11.046-AvastVBoxSVC.exe-4736.log 2014-11-21 17:10 - 2014-11-21 17:10 - 00000197 _____ () C:\Windows\system32\2014-11-21-16-10-53.009-AvastVBoxSVC.exe-3168.log 2014-11-21 16:43 - 2014-11-21 16:43 - 00000247 _____ () C:\Windows\system32\2014-11-21-15-43-44.041-aswFe.exe-2684.log 2014-11-21 16:39 - 2014-11-21 16:43 - 00000247 _____ () C:\Windows\system32\2014-11-21-15-39-08.021-aswFe.exe-4212.log 2014-11-21 16:39 - 2014-11-21 16:39 - 00000197 _____ () C:\Windows\system32\2014-11-21-15-39-02.097-AvastVBoxSVC.exe-3056.log 2014-11-21 09:33 - 2014-11-21 09:33 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-33-19.093-aswFe.exe-4264.log 2014-11-21 09:33 - 2014-11-21 09:33 - 00000197 _____ () C:\Windows\system32\2014-11-21-08-33-17.008-AvastVBoxSVC.exe-4668.log 2014-11-21 09:25 - 2014-11-21 09:25 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-25-40.036-aswFe.exe-5852.log 2014-11-21 09:16 - 2014-11-21 09:23 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-16-42.099-aswFe.exe-5292.log 2014-11-21 09:16 - 2014-11-21 09:16 - 00000197 _____ () C:\Windows\system32\2014-11-21-08-16-37.065-AvastVBoxSVC.exe-2272.log Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe AlternateDataStreams: C:\ProgramData\Temp:07BF512B Hosts: EmptyTemp: Reboot: End
- Ulozte vytvoreny TXT jako fixlist.txt
- Presunte vytvoreny fixlist vedle FRST

- Kliknete na Fix
- Probehne oprava a vytvori log Fixlog.txt

Re: PC pomalé, zasekává se ... dva antiviry
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-11-2014 01
Ran by Marika at 2014-11-29 11:22:00 Run:1
Running from C:\Users\Marika\Desktop
Loaded Profile: Marika (Available profiles: Marika)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
CloseProcesses:
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [NoComputersNearMe] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Run: [SpeedItupFree] => "C:\Program Files (x86)\SpeedItup Free\speeditupfree.exe"
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoNetHood] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoComputersNearMe] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\MountPoints2: {29528603-d51e-11e3-a109-94de80df2f88} - F:\SISetup.exe
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2707257128-485334616-489766779-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTIO
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Extension: Firefox Old Version Update Hotfix - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\firefox-hotfix@mozilla.org.xpi [2014-09-28]
FF Extension: No Name - C:\Program Files (x86)\Common Files\McAfee\SystemCore [Not Found]
C:\Program Files (x86)\SpeedItup Free
2014-11-29 08:24 - 2014-11-29 08:25 - 00015835 _____ () C:\Users\Marika\Desktop\FRST.txt
2014-11-29 08:21 - 2014-11-29 08:21 - 00000197 _____ () C:\Windows\system32\2014-11-29-07-21-54.080-AvastVBoxSVC.exe-3208.log
2014-11-28 21:07 - 2014-11-28 21:07 - 00000000 ____D () C:\Users\Marika\AppData\Roaming\Alawar
2014-11-28 21:05 - 2014-11-28 21:05 - 00000197 _____ () C:\Windows\system32\2014-11-28-20-05-32.009-AvastVBoxSVC.exe-3320.log
2014-11-28 15:11 - 2014-02-13 23:59 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-11-28 14:35 - 2014-11-28 14:28 - 00001559 _____ () C:\zoek-results2014-11-28-132853.log
2014-11-28 14:33 - 2014-11-29 08:20 - 00003754 _____ () C:\Windows\System32\Tasks\AutoKMS
2014-11-28 14:33 - 2014-11-28 14:33 - 00000197 _____ () C:\Windows\system32\2014-11-28-13-33-16.099-AvastVBoxSVC.exe-2672.log
2014-11-28 14:24 - 2014-11-28 21:03 - 00009923 _____ () C:\zoek-results.log
2014-11-28 14:22 - 2014-11-28 15:04 - 00000000 ____D () C:\zoek_backup
2014-11-28 14:21 - 2014-11-28 14:21 - 00000280 _____ () C:\Windows\system32\2014-11-28-13-21-20.034-aswFe.exe-3116.log
2014-11-28 14:21 - 2014-11-28 14:21 - 00000197 _____ () C:\Windows\system32\2014-11-28-13-21-01.003-AvastVBoxSVC.exe-2788.log
2014-11-28 14:19 - 2014-11-27 23:20 - 01428769 _____ () C:\Users\Marika\Desktop\zoek.exe
2014-11-28 14:12 - 2014-11-28 14:12 - 00000197 _____ () C:\Windows\system32\2014-11-28-13-12-15.046-AvastVBoxSVC.exe-2496.log
2014-11-28 14:02 - 2014-11-28 14:16 - 00000000 ____D () C:\AdwCleaner
2014-11-28 14:02 - 2014-11-28 14:02 - 00000280 _____ () C:\Windows\system32\2014-11-28-13-02-12.014-aswFe.exe-2256.log
2014-11-28 13:54 - 2014-11-28 13:54 - 00000197 _____ () C:\Windows\system32\2014-11-28-12-54-52.092-AvastVBoxSVC.exe-3308.log
2014-11-28 13:19 - 2014-11-28 13:19 - 00000197 _____ () C:\Windows\system32\2014-11-28-12-19-47.036-AvastVBoxSVC.exe-1040.log
2014-11-27 22:04 - 2014-11-27 22:04 - 00000197 _____ () C:\Windows\system32\2014-11-27-21-04-06.054-AvastVBoxSVC.exe-2320.log
2014-11-27 21:14 - 2014-11-27 21:14 - 00000197 _____ () C:\Windows\system32\2014-11-27-20-14-05.082-AvastVBoxSVC.exe-2408.log
2014-11-22 08:58 - 2014-11-22 08:59 - 00000197 _____ () C:\Windows\system32\2014-11-22-07-58-52.044-AvastVBoxSVC.exe-3836.log
2014-11-21 20:39 - 2014-11-21 20:39 - 00000197 _____ () C:\Windows\system32\2014-11-21-19-39-31.089-AvastVBoxSVC.exe-2840.log
2014-11-21 19:00 - 2014-11-21 19:00 - 00000197 _____ () C:\Windows\system32\2014-11-21-18-00-43.061-AvastVBoxSVC.exe-3716.log
2014-11-21 18:27 - 2014-11-21 18:27 - 00000197 _____ () C:\Windows\system32\2014-11-21-17-27-47.043-AvastVBoxSVC.exe-2756.log
2014-11-21 17:45 - 2014-11-21 17:45 - 00000197 _____ () C:\Windows\system32\2014-11-21-16-45-11.046-AvastVBoxSVC.exe-4736.log
2014-11-21 17:10 - 2014-11-21 17:10 - 00000197 _____ () C:\Windows\system32\2014-11-21-16-10-53.009-AvastVBoxSVC.exe-3168.log
2014-11-21 16:43 - 2014-11-21 16:43 - 00000247 _____ () C:\Windows\system32\2014-11-21-15-43-44.041-aswFe.exe-2684.log
2014-11-21 16:39 - 2014-11-21 16:43 - 00000247 _____ () C:\Windows\system32\2014-11-21-15-39-08.021-aswFe.exe-4212.log
2014-11-21 16:39 - 2014-11-21 16:39 - 00000197 _____ () C:\Windows\system32\2014-11-21-15-39-02.097-AvastVBoxSVC.exe-3056.log
2014-11-21 09:33 - 2014-11-21 09:33 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-33-19.093-aswFe.exe-4264.log
2014-11-21 09:33 - 2014-11-21 09:33 - 00000197 _____ () C:\Windows\system32\2014-11-21-08-33-17.008-AvastVBoxSVC.exe-4668.log
2014-11-21 09:25 - 2014-11-21 09:25 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-25-40.036-aswFe.exe-5852.log
2014-11-21 09:16 - 2014-11-21 09:23 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-16-42.099-aswFe.exe-5292.log
2014-11-21 09:16 - 2014-11-21 09:16 - 00000197 _____ () C:\Windows\system32\2014-11-21-08-16-37.065-AvastVBoxSVC.exe-2272.log
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
AlternateDataStreams: C:\ProgramData\Temp:07BF512B
Hosts:
EmptyTemp:
Reboot:
End
*****************
Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoControlPanel => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoComputersNearMe => value deleted successfully.
HKU\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Windows\CurrentVersion\Run\\SpeedItupFree => value deleted successfully.
HKU\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoControlPanel => value deleted successfully.
HKU\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoNetHood => value deleted successfully.
HKU\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoComputersNearMe => value deleted successfully.
"HKU\S-1-5-21-2707257128-485334616-489766779-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{29528603-d51e-11e3-a109-94de80df2f88}" => Key deleted successfully.
"HKCR\CLSID\{29528603-d51e-11e3-a109-94de80df2f88}" => Key not found.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-2707257128-485334616-489766779-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@Nero.com/KM" => Key deleted successfully.
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) not found.
C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\firefox-hotfix@mozilla.org.xpi => Moved successfully.
C:\Program Files (x86)\Common Files\McAfee\SystemCore not found.
"C:\Program Files (x86)\SpeedItup Free" => File/Directory not found.
"C:\Users\Marika\Desktop\FRST.txt" => File/Directory not found.
Could not move "C:\Windows\system32\2014-11-29-07-21-54.080-AvastVBoxSVC.exe-3208.log" => Scheduled to move on reboot.
C:\Users\Marika\AppData\Roaming\Alawar => Moved successfully.
C:\Windows\system32\2014-11-28-20-05-32.009-AvastVBoxSVC.exe-3320.log => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results2014-11-28-132853.log => Moved successfully.
C:\Windows\System32\Tasks\AutoKMS => Moved successfully.
C:\Windows\system32\2014-11-28-13-33-16.099-AvastVBoxSVC.exe-2672.log => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Windows\system32\2014-11-28-13-21-20.034-aswFe.exe-3116.log => Moved successfully.
C:\Windows\system32\2014-11-28-13-21-01.003-AvastVBoxSVC.exe-2788.log => Moved successfully.
C:\Users\Marika\Desktop\zoek.exe => Moved successfully.
C:\Windows\system32\2014-11-28-13-12-15.046-AvastVBoxSVC.exe-2496.log => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Windows\system32\2014-11-28-13-02-12.014-aswFe.exe-2256.log => Moved successfully.
C:\Windows\system32\2014-11-28-12-54-52.092-AvastVBoxSVC.exe-3308.log => Moved successfully.
C:\Windows\system32\2014-11-28-12-19-47.036-AvastVBoxSVC.exe-1040.log => Moved successfully.
C:\Windows\system32\2014-11-27-21-04-06.054-AvastVBoxSVC.exe-2320.log => Moved successfully.
C:\Windows\system32\2014-11-27-20-14-05.082-AvastVBoxSVC.exe-2408.log => Moved successfully.
C:\Windows\system32\2014-11-22-07-58-52.044-AvastVBoxSVC.exe-3836.log => Moved successfully.
C:\Windows\system32\2014-11-21-19-39-31.089-AvastVBoxSVC.exe-2840.log => Moved successfully.
C:\Windows\system32\2014-11-21-18-00-43.061-AvastVBoxSVC.exe-3716.log => Moved successfully.
C:\Windows\system32\2014-11-21-17-27-47.043-AvastVBoxSVC.exe-2756.log => Moved successfully.
C:\Windows\system32\2014-11-21-16-45-11.046-AvastVBoxSVC.exe-4736.log => Moved successfully.
C:\Windows\system32\2014-11-21-16-10-53.009-AvastVBoxSVC.exe-3168.log => Moved successfully.
C:\Windows\system32\2014-11-21-15-43-44.041-aswFe.exe-2684.log => Moved successfully.
C:\Windows\system32\2014-11-21-15-39-08.021-aswFe.exe-4212.log => Moved successfully.
C:\Windows\system32\2014-11-21-15-39-02.097-AvastVBoxSVC.exe-3056.log => Moved successfully.
C:\Windows\system32\2014-11-21-08-33-19.093-aswFe.exe-4264.log => Moved successfully.
C:\Windows\system32\2014-11-21-08-33-17.008-AvastVBoxSVC.exe-4668.log => Moved successfully.
C:\Windows\system32\2014-11-21-08-25-40.036-aswFe.exe-5852.log => Moved successfully.
C:\Windows\system32\2014-11-21-08-16-42.099-aswFe.exe-5292.log => Moved successfully.
C:\Windows\system32\2014-11-21-08-16-37.065-AvastVBoxSVC.exe-2272.log => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\ProgramData\Temp => ":07BF512B" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 75.3 MB temporary data.
=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-11-29 11:24:39)<=
C:\Windows\system32\2014-11-29-07-21-54.080-AvastVBoxSVC.exe-3208.log => Is moved successfully.
==== End of Fixlog ====
Ran by Marika at 2014-11-29 11:22:00 Run:1
Running from C:\Users\Marika\Desktop
Loaded Profile: Marika (Available profiles: Marika)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
CloseProcesses:
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [NoComputersNearMe] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Run: [SpeedItupFree] => "C:\Program Files (x86)\SpeedItup Free\speeditupfree.exe"
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoNetHood] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\Policies\Explorer: [NoComputersNearMe] 0
HKU\S-1-5-21-2707257128-485334616-489766779-1000\...\MountPoints2: {29528603-d51e-11e3-a109-94de80df2f88} - F:\SISetup.exe
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2707257128-485334616-489766779-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTIO
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Extension: Firefox Old Version Update Hotfix - C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\firefox-hotfix@mozilla.org.xpi [2014-09-28]
FF Extension: No Name - C:\Program Files (x86)\Common Files\McAfee\SystemCore [Not Found]
C:\Program Files (x86)\SpeedItup Free
2014-11-29 08:24 - 2014-11-29 08:25 - 00015835 _____ () C:\Users\Marika\Desktop\FRST.txt
2014-11-29 08:21 - 2014-11-29 08:21 - 00000197 _____ () C:\Windows\system32\2014-11-29-07-21-54.080-AvastVBoxSVC.exe-3208.log
2014-11-28 21:07 - 2014-11-28 21:07 - 00000000 ____D () C:\Users\Marika\AppData\Roaming\Alawar
2014-11-28 21:05 - 2014-11-28 21:05 - 00000197 _____ () C:\Windows\system32\2014-11-28-20-05-32.009-AvastVBoxSVC.exe-3320.log
2014-11-28 15:11 - 2014-02-13 23:59 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-11-28 14:35 - 2014-11-28 14:28 - 00001559 _____ () C:\zoek-results2014-11-28-132853.log
2014-11-28 14:33 - 2014-11-29 08:20 - 00003754 _____ () C:\Windows\System32\Tasks\AutoKMS
2014-11-28 14:33 - 2014-11-28 14:33 - 00000197 _____ () C:\Windows\system32\2014-11-28-13-33-16.099-AvastVBoxSVC.exe-2672.log
2014-11-28 14:24 - 2014-11-28 21:03 - 00009923 _____ () C:\zoek-results.log
2014-11-28 14:22 - 2014-11-28 15:04 - 00000000 ____D () C:\zoek_backup
2014-11-28 14:21 - 2014-11-28 14:21 - 00000280 _____ () C:\Windows\system32\2014-11-28-13-21-20.034-aswFe.exe-3116.log
2014-11-28 14:21 - 2014-11-28 14:21 - 00000197 _____ () C:\Windows\system32\2014-11-28-13-21-01.003-AvastVBoxSVC.exe-2788.log
2014-11-28 14:19 - 2014-11-27 23:20 - 01428769 _____ () C:\Users\Marika\Desktop\zoek.exe
2014-11-28 14:12 - 2014-11-28 14:12 - 00000197 _____ () C:\Windows\system32\2014-11-28-13-12-15.046-AvastVBoxSVC.exe-2496.log
2014-11-28 14:02 - 2014-11-28 14:16 - 00000000 ____D () C:\AdwCleaner
2014-11-28 14:02 - 2014-11-28 14:02 - 00000280 _____ () C:\Windows\system32\2014-11-28-13-02-12.014-aswFe.exe-2256.log
2014-11-28 13:54 - 2014-11-28 13:54 - 00000197 _____ () C:\Windows\system32\2014-11-28-12-54-52.092-AvastVBoxSVC.exe-3308.log
2014-11-28 13:19 - 2014-11-28 13:19 - 00000197 _____ () C:\Windows\system32\2014-11-28-12-19-47.036-AvastVBoxSVC.exe-1040.log
2014-11-27 22:04 - 2014-11-27 22:04 - 00000197 _____ () C:\Windows\system32\2014-11-27-21-04-06.054-AvastVBoxSVC.exe-2320.log
2014-11-27 21:14 - 2014-11-27 21:14 - 00000197 _____ () C:\Windows\system32\2014-11-27-20-14-05.082-AvastVBoxSVC.exe-2408.log
2014-11-22 08:58 - 2014-11-22 08:59 - 00000197 _____ () C:\Windows\system32\2014-11-22-07-58-52.044-AvastVBoxSVC.exe-3836.log
2014-11-21 20:39 - 2014-11-21 20:39 - 00000197 _____ () C:\Windows\system32\2014-11-21-19-39-31.089-AvastVBoxSVC.exe-2840.log
2014-11-21 19:00 - 2014-11-21 19:00 - 00000197 _____ () C:\Windows\system32\2014-11-21-18-00-43.061-AvastVBoxSVC.exe-3716.log
2014-11-21 18:27 - 2014-11-21 18:27 - 00000197 _____ () C:\Windows\system32\2014-11-21-17-27-47.043-AvastVBoxSVC.exe-2756.log
2014-11-21 17:45 - 2014-11-21 17:45 - 00000197 _____ () C:\Windows\system32\2014-11-21-16-45-11.046-AvastVBoxSVC.exe-4736.log
2014-11-21 17:10 - 2014-11-21 17:10 - 00000197 _____ () C:\Windows\system32\2014-11-21-16-10-53.009-AvastVBoxSVC.exe-3168.log
2014-11-21 16:43 - 2014-11-21 16:43 - 00000247 _____ () C:\Windows\system32\2014-11-21-15-43-44.041-aswFe.exe-2684.log
2014-11-21 16:39 - 2014-11-21 16:43 - 00000247 _____ () C:\Windows\system32\2014-11-21-15-39-08.021-aswFe.exe-4212.log
2014-11-21 16:39 - 2014-11-21 16:39 - 00000197 _____ () C:\Windows\system32\2014-11-21-15-39-02.097-AvastVBoxSVC.exe-3056.log
2014-11-21 09:33 - 2014-11-21 09:33 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-33-19.093-aswFe.exe-4264.log
2014-11-21 09:33 - 2014-11-21 09:33 - 00000197 _____ () C:\Windows\system32\2014-11-21-08-33-17.008-AvastVBoxSVC.exe-4668.log
2014-11-21 09:25 - 2014-11-21 09:25 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-25-40.036-aswFe.exe-5852.log
2014-11-21 09:16 - 2014-11-21 09:23 - 00000247 _____ () C:\Windows\system32\2014-11-21-08-16-42.099-aswFe.exe-5292.log
2014-11-21 09:16 - 2014-11-21 09:16 - 00000197 _____ () C:\Windows\system32\2014-11-21-08-16-37.065-AvastVBoxSVC.exe-2272.log
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
AlternateDataStreams: C:\ProgramData\Temp:07BF512B
Hosts:
EmptyTemp:
Reboot:
End
*****************
Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoControlPanel => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoComputersNearMe => value deleted successfully.
HKU\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Windows\CurrentVersion\Run\\SpeedItupFree => value deleted successfully.
HKU\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoControlPanel => value deleted successfully.
HKU\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoNetHood => value deleted successfully.
HKU\S-1-5-21-2707257128-485334616-489766779-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoComputersNearMe => value deleted successfully.
"HKU\S-1-5-21-2707257128-485334616-489766779-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{29528603-d51e-11e3-a109-94de80df2f88}" => Key deleted successfully.
"HKCR\CLSID\{29528603-d51e-11e3-a109-94de80df2f88}" => Key not found.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-2707257128-485334616-489766779-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@Nero.com/KM" => Key deleted successfully.
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) not found.
C:\Users\Marika\AppData\Roaming\Mozilla\Firefox\Profiles\c9723zix.default\Extensions\firefox-hotfix@mozilla.org.xpi => Moved successfully.
C:\Program Files (x86)\Common Files\McAfee\SystemCore not found.
"C:\Program Files (x86)\SpeedItup Free" => File/Directory not found.
"C:\Users\Marika\Desktop\FRST.txt" => File/Directory not found.
Could not move "C:\Windows\system32\2014-11-29-07-21-54.080-AvastVBoxSVC.exe-3208.log" => Scheduled to move on reboot.
C:\Users\Marika\AppData\Roaming\Alawar => Moved successfully.
C:\Windows\system32\2014-11-28-20-05-32.009-AvastVBoxSVC.exe-3320.log => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results2014-11-28-132853.log => Moved successfully.
C:\Windows\System32\Tasks\AutoKMS => Moved successfully.
C:\Windows\system32\2014-11-28-13-33-16.099-AvastVBoxSVC.exe-2672.log => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Windows\system32\2014-11-28-13-21-20.034-aswFe.exe-3116.log => Moved successfully.
C:\Windows\system32\2014-11-28-13-21-01.003-AvastVBoxSVC.exe-2788.log => Moved successfully.
C:\Users\Marika\Desktop\zoek.exe => Moved successfully.
C:\Windows\system32\2014-11-28-13-12-15.046-AvastVBoxSVC.exe-2496.log => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Windows\system32\2014-11-28-13-02-12.014-aswFe.exe-2256.log => Moved successfully.
C:\Windows\system32\2014-11-28-12-54-52.092-AvastVBoxSVC.exe-3308.log => Moved successfully.
C:\Windows\system32\2014-11-28-12-19-47.036-AvastVBoxSVC.exe-1040.log => Moved successfully.
C:\Windows\system32\2014-11-27-21-04-06.054-AvastVBoxSVC.exe-2320.log => Moved successfully.
C:\Windows\system32\2014-11-27-20-14-05.082-AvastVBoxSVC.exe-2408.log => Moved successfully.
C:\Windows\system32\2014-11-22-07-58-52.044-AvastVBoxSVC.exe-3836.log => Moved successfully.
C:\Windows\system32\2014-11-21-19-39-31.089-AvastVBoxSVC.exe-2840.log => Moved successfully.
C:\Windows\system32\2014-11-21-18-00-43.061-AvastVBoxSVC.exe-3716.log => Moved successfully.
C:\Windows\system32\2014-11-21-17-27-47.043-AvastVBoxSVC.exe-2756.log => Moved successfully.
C:\Windows\system32\2014-11-21-16-45-11.046-AvastVBoxSVC.exe-4736.log => Moved successfully.
C:\Windows\system32\2014-11-21-16-10-53.009-AvastVBoxSVC.exe-3168.log => Moved successfully.
C:\Windows\system32\2014-11-21-15-43-44.041-aswFe.exe-2684.log => Moved successfully.
C:\Windows\system32\2014-11-21-15-39-08.021-aswFe.exe-4212.log => Moved successfully.
C:\Windows\system32\2014-11-21-15-39-02.097-AvastVBoxSVC.exe-3056.log => Moved successfully.
C:\Windows\system32\2014-11-21-08-33-19.093-aswFe.exe-4264.log => Moved successfully.
C:\Windows\system32\2014-11-21-08-33-17.008-AvastVBoxSVC.exe-4668.log => Moved successfully.
C:\Windows\system32\2014-11-21-08-25-40.036-aswFe.exe-5852.log => Moved successfully.
C:\Windows\system32\2014-11-21-08-16-42.099-aswFe.exe-5292.log => Moved successfully.
C:\Windows\system32\2014-11-21-08-16-37.065-AvastVBoxSVC.exe-2272.log => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\ProgramData\Temp => ":07BF512B" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 75.3 MB temporary data.
=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-11-29 11:24:39)<=
C:\Windows\system32\2014-11-29-07-21-54.080-AvastVBoxSVC.exe-3208.log => Is moved successfully.
==== End of Fixlog ====
Re: PC pomalé, zasekává se ... dva antiviry
Jak se chova PC, muzem uklizet??
Re: PC pomalé, zasekává se ... dva antiviry
No jo, vypadá to dobře, pustíme se do úklidu.
Re: PC pomalé, zasekává se ... dva antiviry
Tak jeste uklidime
DelFix https://toolslib.net/downloads/finish/2/
Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič
A pokud nejsou problemy ci dotazy, je to z me strany vse 


- Stahnete a spustte
- Ponechte zatrzitkou pouze u volby Remote disinfection tools
- Kliknete na Run

Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy


Re: PC pomalé, zasekává se ... dva antiviry
SUPER ... jako vždy 100% práce. DĚKUJI MNOHOKRÁT.
JSEM RÁD, ŽE JSTE .. opět jste mě vytáhli, ze šlamastiky.
Hezký den, na oplátku se budu drobně revanšovat.
JSEM RÁD, ŽE JSTE .. opět jste mě vytáhli, ze šlamastiky.
Hezký den, na oplátku se budu drobně revanšovat.
Re: PC pomalé, zasekává se ... dva antiviry
Dle slíbeného, zadal jsem drobnou platbu převodem z účtu č. 19-480....../0100
DĚKUJI.
DĚKUJI.
Re: PC pomalé, zasekává se ... dva antiviry
Nemate zac, rad jsem pomohl
Zase nekdy 
Za podporu fora jmenem celeho tymu dekuji
A na zaklade Pravidla o zamykani temat


Za podporu fora jmenem celeho tymu dekuji

A na zaklade Pravidla o zamykani temat
