Zbavení se YTA

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
kubosh1
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 06 Pro 2014 19:53

Zbavení se YTA

#1 Příspěvek od kubosh1 »

Dobrý den ,nainstaloval se mi do počítače youtube accelerator+další bordel.Použil jsem adw cleaner a zda se že je pryč.Proto prosím o kontrolu logu. Děkuji


Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-12-2014 02
Ran by kubosh (administrator) on KUBOSH-PC on 06-12-2014 19:34:10
Running from C:\Users\kubosh\Desktop
Loaded Profile: kubosh (Available profiles: kubosh & Administrator & Guest)
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
() C:\Windows\System32\PnkBstrA.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(DT Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTLite.exe
(Google Inc.) C:\Users\kubosh\AppData\Local\Google\Update\GoogleUpdate.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(forum.viry.cz) C:\Users\kubosh\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9398888 2010-07-28] (Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-11-24] (AVAST Software)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-29] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AMD AVT] => C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
Winlogon\Notify\klogon: C:\Windows\system32\klogon.dll (Kaspersky Lab ZAO)
HKU\S-1-5-21-496298057-2278604049-792952523-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [357696 2010-04-01] (DT Soft Ltd)
HKU\S-1-5-21-496298057-2278604049-792952523-1001\...\Run: [Google Update] => C:\Users\kubosh\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-28] (Google Inc.)
HKU\S-1-5-21-496298057-2278604049-792952523-1001\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [1562264 2014-07-25] (Samsung)
HKU\S-1-5-21-496298057-2278604049-792952523-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-496298057-2278604049-792952523-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-496298057-2278604049-792952523-1001\...\MountPoints2: {43e41542-362f-11e2-a399-001d7d03eca8} - J:\DisneySplash.exe
HKU\S-1-5-21-496298057-2278604049-792952523-1001\...\MountPoints2: {9f9832ba-b58d-11e2-9137-001d7d03eca6} - L:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-496298057-2278604049-792952523-1001\...\MountPoints2: {ba8eca45-62b5-11e4-a3bf-001d7d03eca6} - R:\setup_vmb_lite.exe /checkApplicationPresence
AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll => C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll File Not Found
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kubosh\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kubosh\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\kubosh\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll (Dropbox, Inc.)
CHR HKU\S-1-5-21-496298057-2278604049-792952523-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-496298057-2278604049-792952523-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKU\S-1-5-21-496298057-2278604049-792952523-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com
SearchScopes: HKU\S-1-5-21-496298057-2278604049-792952523-1001 -> {7BF6C937-9002-4BE9-95C9-9F0FA7096D56} URL = http://www.google.cz/search?q={searchTe ... {startPage}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://download.bitdefender.com/resourc ... oscan8.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\kubosh\AppData\Roaming\Mozilla\Firefox\Profiles\9l6ooll2.default
FF SearchEngineOrder.1: Google
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.12.450 -> C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-496298057-2278604049-792952523-1001: @tools.google.com/Google Update;version=3 -> C:\Users\kubosh\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-496298057-2278604049-792952523-1001: @tools.google.com/Google Update;version=9 -> C:\Users\kubosh\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Extension: Anti-Banner - C:\Program Files\Mozilla Firefox\extensions\KavAntiBanner@Kaspersky.ru [2014-09-08]
FF HKLM\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-06-11]
FF Extension: No Name - C:\Users\kubosh\AppData\Roaming\Mozilla\Firefox\Profiles\9l6ooll2.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E} [Not Found]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR Profile: C:\Users\kubosh\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\kubosh\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-18]
CHR Extension: (Vyhledávání Google) - C:\Users\kubosh\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-18]
CHR Extension: (Avast Online Security) - C:\Users\kubosh\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-07-21]
CHR Extension: (Peněženka Google) - C:\Users\kubosh\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-28]
CHR Extension: (Gmail) - C:\Users\kubosh\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-18]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-24]
CHR StartMenuInternet: Google Chrome - C:\Users\kubosh\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-04-29] (Advanced Micro Devices, Inc.) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-24] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3192344 2014-11-24] (Avast Software)
R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2014-01-23] (Teruten) [File not signed]
S3 ICCS; C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2011-06-20] (Hewlett-Packard Company) [File not signed]
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75136 2012-12-02] ()
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 Amfilter; C:\Windows\System32\DRIVERS\Amfilter.sys [9216 2007-05-14] (A4Tech Co.,Ltd.) [File not signed]
S3 Amusbprt; C:\Windows\System32\DRIVERS\Amusbprt.sys [14336 2007-05-14] (A4Tech Co.,Ltd.) [File not signed]
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-11-24] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2014-11-24] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-11-24] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-11-24] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787800 2014-11-24] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423784 2014-11-24] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [91496 2014-11-24] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206248 2014-11-24] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2010-12-19] ()
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2014-01-23] () [File not signed]
S3 gdrv; C:\Windows\gdrv.sys [17488 2014-05-04] (Windows (R) 2000 DDK provider)
S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [26328 2014-09-08] (Sony Mobile Communications)
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [File not signed]
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [22688 2014-05-04] (REALiX(tm))
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [132184 2010-06-09] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11352 2010-06-09] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [488024 2011-05-22] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [22104 2010-04-22] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [19984 2009-11-02] (Kaspersky Lab)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2010-12-19] ()
R3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus.sys [171520 2005-09-23] (Pinnacle Systems GmbH)
R3 pfc; C:\Windows\System32\drivers\pfc.sys [10368 2003-12-05] (Padus, Inc.) [File not signed]
S3 Rockusb; C:\Windows\System32\DRIVERS\rockusb.sys [46160 2013-03-12] (Fuzhou Rockchip Electronics Co,Ltd.)
R0 speedfan; C:\Windows\System32\speedfan.sys [24184 2012-12-29] (Almico Software)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2010-10-30] () [File not signed]
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [184192 2014-06-16] (DEVGURU Co., LTD.(http://www.devguru.co.kr))
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [218192 2014-11-24] (Avast Software)
U3 a37k3lib; C:\Windows\system32\Drivers\a37k3lib.sys [0 ] (Microsoft Corporation)
S2 adfs; No ImagePath
S3 ALSysIO; \??\C:\Users\kubosh\AppData\Local\Temp\ALSysIO.sys [X]
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S3 PCASp60; System32\Drivers\PCASp60.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-06 19:34 - 2014-12-06 19:34 - 00017816 _____ () C:\Users\kubosh\Desktop\FRST.txt
2014-12-06 19:31 - 2014-12-06 19:31 - 00000056 _____ () C:\Windows\setupact.log
2014-12-06 19:31 - 2014-12-06 19:31 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-06 19:29 - 2014-12-06 19:29 - 00001466 _____ () C:\Users\kubosh\Documents\cc_20141206_192949.reg
2014-12-06 19:27 - 2014-12-06 19:27 - 00009114 _____ () C:\Users\kubosh\Documents\cc_20141206_192724.reg
2014-12-06 19:18 - 2014-12-06 19:30 - 00000000 ____D () C:\rsit
2014-12-06 19:18 - 2014-12-06 19:18 - 00000000 ____D () C:\Program Files\trend micro
2014-12-06 19:17 - 2014-12-06 19:17 - 01107968 _____ () C:\Users\kubosh\Desktop\RSIT.exe
2014-12-06 19:14 - 2014-12-06 19:14 - 00112640 _____ (forum.viry.cz) C:\Users\kubosh\Desktop\FRSTLauncher.exe
2014-12-06 18:54 - 2014-12-06 18:56 - 00000000 ____D () C:\AdwCleaner
2014-12-06 18:54 - 2014-12-06 18:54 - 00000055 _____ () C:\AdwCleanerDebug.txt
2014-12-06 18:45 - 2014-12-06 19:34 - 00000000 ____D () C:\FRST
2014-12-06 18:41 - 2014-12-06 18:41 - 01111040 _____ (Farbar) C:\Users\kubosh\Desktop\FRST.exe
2014-12-06 18:40 - 2014-12-06 18:40 - 01707646 _____ (Thisisu) C:\Users\kubosh\Desktop\JRT.exe
2014-12-06 18:38 - 2014-12-06 18:38 - 02153472 _____ () C:\Users\kubosh\Desktop\adwcleaner_4.104.exe
2014-12-06 18:04 - 2014-12-06 18:04 - 00000626 _____ () C:\Users\kubosh\AppData\Roaming\All CPU MeterV3_Settings.ini
2014-12-06 18:03 - 2014-12-06 18:04 - 00000284 _____ () C:\Users\kubosh\AppData\Roaming\GPU MeterV2_Settings.ini
2014-12-06 17:44 - 2014-12-06 17:44 - 00172032 _____ (Jin Hui E-mail: jinhui@jcomsoft.com Web: http://www.jcomsoft.com) C:\Windows\system32\AniGIF.ocx
2014-12-06 17:43 - 2014-12-06 18:23 - 00000000 ____D () C:\Users\kubosh\AppData\Roaming\Seznam.cz
2014-12-06 12:25 - 2014-12-06 12:25 - 00001330 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2014-12-06 12:20 - 2014-12-06 12:20 - 00000000 ____D () C:\Users\kubosh\Downloads\GPU_Meter
2014-12-06 12:19 - 2014-12-06 12:19 - 00206064 _____ () C:\Users\kubosh\Downloads\All_CPU_Meter.zip
2014-12-06 12:19 - 2014-12-06 12:19 - 00000000 ____D () C:\Users\kubosh\Downloads\All_CPU_Meter
2014-12-06 12:18 - 2014-12-06 12:19 - 00617196 _____ () C:\Users\kubosh\Downloads\GPU_Meter.zip
2014-12-06 11:14 - 2014-12-06 11:14 - 00000000 ____D () C:\TempDump
2014-12-04 23:05 - 2014-11-13 08:01 - 00000000 ____D () C:\Users\kubosh\Downloads\Microsoft.Windows.XP.Professional.SP3.x86.Integrated.November.2014
2014-11-29 18:50 - 2014-11-29 18:50 - 02898792 _____ () C:\Users\kubosh\Downloads\nuz.mp4
2014-11-29 13:41 - 2014-11-29 13:41 - 00000000 ____D () C:\Windows\system32\vbox
2014-11-24 21:11 - 2014-11-24 21:11 - 00291352 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-11-24 21:11 - 2014-11-24 21:11 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-11-24 21:11 - 2014-11-24 21:11 - 00002005 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-11-24 21:11 - 2014-11-24 21:11 - 00002005 _____ () C:\ProgramData\Desktop\Avast Free Antivirus.lnk
2014-11-24 20:45 - 2014-11-24 20:45 - 00000000 ____D () C:\Users\kubosh\AppData\Roaming\Greenshot
2014-11-24 20:45 - 2014-11-24 20:45 - 00000000 ____D () C:\Users\kubosh\AppData\Local\Greenshot
2014-11-24 20:44 - 2014-11-24 20:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Greenshot
2014-11-24 20:44 - 2014-11-24 20:44 - 00000000 ____D () C:\Program Files\Greenshot
2014-11-24 18:15 - 2014-11-24 18:15 - 01313061 _____ (Greenshot ) C:\Users\kubosh\Downloads\Greenshot-INSTALLER-1.1.9.13.exe
2014-11-21 19:53 - 2014-11-22 18:30 - 00000000 ____D () C:\Users\kubosh\Documents\Euro Truck Simulator 2
2014-11-21 19:53 - 2014-11-21 19:53 - 00000000 ___SH () C:\Users\kubosh\AppData\Local\LumaEmu
2014-11-21 19:51 - 2014-11-21 19:51 - 00002176 _____ () C:\Users\kubosh\Desktop\Euro Truck Simulator 2.lnk
2014-11-21 19:51 - 2014-11-21 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2
2014-11-21 19:47 - 2014-11-21 19:51 - 00000000 ____D () C:\Program Files\Euro Truck Simulator 2
2014-11-21 19:45 - 2014-12-04 21:57 - 00000000 ____D () C:\Users\kubosh\AppData\Roaming\vlc
2014-11-21 19:44 - 2014-11-21 19:44 - 00000984 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-11-21 19:44 - 2014-11-21 19:44 - 00000984 _____ () C:\ProgramData\Desktop\VLC media player.lnk
2014-11-21 19:44 - 2014-11-21 19:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-11-21 19:40 - 2014-11-21 19:41 - 24743106 _____ () C:\Users\kubosh\Downloads\vlc-2.1.5-win32.exe
2014-11-21 19:25 - 2014-11-21 19:27 - 00000000 ____D () C:\Users\kubosh\Downloads\ETS_2_R.G.ILITA
2014-11-21 19:23 - 2010-06-02 04:55 - 01801048 ____N () C:\Users\kubosh\Downloads\dsetup32.dll
2014-11-21 19:23 - 2010-06-02 04:55 - 00089944 ____N (Microsoft Corporation) C:\Users\kubosh\Downloads\dsetup.dll
2014-11-21 19:23 - 2010-06-02 04:54 - 00057743 _____ () C:\Users\kubosh\Downloads\dxwsetup.cif
2014-11-21 19:23 - 2010-06-02 04:35 - 00498688 ____N () C:\Users\kubosh\Downloads\dxwsetup.exe
2014-11-20 17:37 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-20 17:37 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-17 16:58 - 2014-11-17 16:58 - 00000000 __SHD () C:\Users\kubosh\AppData\Local\EmieBrowserModeList
2014-11-12 23:18 - 2014-11-05 18:50 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 23:18 - 2014-11-05 18:50 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 23:18 - 2014-11-05 18:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 23:18 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 23:18 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 23:18 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 23:18 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 23:18 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 23:18 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 23:18 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 23:18 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 23:17 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 23:17 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 23:17 - 2014-11-06 04:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 23:17 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 23:17 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 23:17 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 23:17 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 23:17 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 23:17 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 23:17 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 23:17 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 23:17 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 23:17 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 23:17 - 2014-11-06 03:59 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 23:17 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 23:17 - 2014-11-06 03:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 23:17 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 23:17 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 23:17 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 23:17 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 23:17 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 23:17 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 23:17 - 2014-11-06 03:22 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 23:17 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 23:17 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 23:17 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 23:17 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 23:17 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 23:17 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 23:17 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 23:17 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 23:17 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 23:17 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 23:17 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 23:17 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 23:17 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 23:17 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 23:17 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 23:17 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 23:17 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 23:16 - 2014-10-14 02:56 - 00136632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 23:16 - 2014-10-14 02:50 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 23:16 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 23:16 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 23:16 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-11 21:23 - 2014-06-16 07:01 - 00184192 _____ (DEVGURU Co., LTD.(http://www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudserd.sys
2014-11-11 21:23 - 2014-06-16 07:01 - 00184192 _____ (DEVGURU Co., LTD.(http://www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2014-11-11 21:23 - 2014-06-16 07:01 - 00089856 _____ (DEVGURU Co., LTD.(http://www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2014-11-11 20:51 - 2014-01-23 04:20 - 00153672 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ssadmdm.sys
2014-11-11 20:51 - 2014-01-23 04:20 - 00136904 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ssadbus.sys
2014-11-11 20:51 - 2014-01-23 04:20 - 00130248 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ssadserd.sys
2014-11-11 20:51 - 2014-01-23 04:20 - 00017864 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ssadmdfl.sys
2014-11-11 20:51 - 2014-01-23 04:20 - 00015560 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ssadcmnt.sys
2014-11-11 20:51 - 2014-01-23 04:20 - 00015304 _____ (MCCI Corporation) C:\Windows\system32\Drivers\ssadwhnt.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-06 19:34 - 2010-10-30 10:44 - 01285208 _____ () C:\Windows\WindowsUpdate.log
2014-12-06 19:31 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-06 19:29 - 2013-04-06 18:19 - 00000000 ____D () C:\Users\kubosh\AppData\Local\CrashDumps
2014-12-06 19:29 - 2011-03-01 06:31 - 00000000 ____D () C:\Windows\Minidump
2014-12-06 19:29 - 2010-10-30 19:56 - 00000000 ____D () C:\Users\kubosh\AppData\Roaming\DAEMON Tools Lite
2014-12-06 19:16 - 2009-07-14 05:34 - 00020880 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-06 19:16 - 2009-07-14 05:34 - 00020880 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-06 18:42 - 2011-04-07 22:02 - 00000000 ____D () C:\ProgramData\Temp
2014-12-06 18:16 - 2014-03-27 19:53 - 00003504 _____ () C:\Users\kubosh\AppData\Local\MRDownloader.nast
2014-12-06 17:31 - 2010-10-30 10:51 - 01584626 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-06 16:03 - 2010-10-30 11:20 - 00000914 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-496298057-2278604049-792952523-1001Core.job
2014-12-06 15:15 - 2014-03-27 19:55 - 00003303 _____ () C:\Users\kubosh\AppData\Local\MRDownloader.err
2014-12-06 12:25 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-12-03 18:13 - 2014-06-21 10:54 - 00000000 ____D () C:\Users\kubosh\AppData\Local\Adobe
2014-12-03 18:13 - 2012-06-24 15:03 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-12-03 18:13 - 2011-05-18 05:51 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-30 09:35 - 2010-10-30 20:17 - 00000000 ____D () C:\Users\kubosh\Documents\My Games
2014-11-29 19:01 - 2010-11-28 10:23 - 02542592 ___SH () C:\Users\kubosh\Desktop\Thumbs.db
2014-11-29 19:01 - 2010-11-07 06:41 - 04631040 ___SH () C:\Users\kubosh\Downloads\Thumbs.db
2014-11-29 18:49 - 2014-01-19 12:30 - 00000000 ____D () C:\Users\kubosh\AppData\Roaming\uTorrent
2014-11-24 21:11 - 2014-04-26 16:37 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-11-24 21:11 - 2014-01-04 17:45 - 00091496 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-11-24 21:11 - 2013-03-15 16:45 - 00206248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-11-24 21:11 - 2013-03-15 16:45 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-11-24 21:11 - 2012-03-23 17:21 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-11-24 21:11 - 2011-06-11 05:33 - 00787800 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-11-24 21:11 - 2011-06-11 05:33 - 00423784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-11-24 21:11 - 2011-06-11 05:33 - 00070384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-11-21 20:22 - 2010-11-02 10:29 - 00000000 ___RD () C:\Users\kubosh\Desktop\HRY
2014-11-21 19:52 - 2011-05-27 17:17 - 00000000 ____D () C:\Windows\system32\directx
2014-11-21 19:44 - 2014-06-21 12:25 - 00000000 ____D () C:\Program Files\VideoLAN
2014-11-21 18:59 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-11-19 19:25 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-11-17 16:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-17 15:58 - 2010-10-30 11:20 - 00000966 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-496298057-2278604049-792952523-1001UA.job
2014-11-17 15:55 - 2009-07-14 05:33 - 03872232 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-13 01:25 - 2014-04-26 09:56 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-12 23:34 - 2014-04-27 14:03 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-11-12 23:34 - 2011-08-27 08:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-12 23:31 - 2009-07-14 03:04 - 00000478 _____ () C:\Windows\win.ini
2014-11-12 23:25 - 2013-07-13 07:06 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 23:19 - 2010-10-30 11:12 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-11 21:24 - 2014-02-07 08:17 - 00001948 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2014-11-11 21:24 - 2014-02-07 08:17 - 00001948 _____ () C:\ProgramData\Desktop\Samsung Kies (Lite).lnk
2014-11-08 19:29 - 2014-03-07 18:04 - 00000000 ____D () C:\Program Files\FastShare

Some content of TEMP:
====================
C:\Users\kubosh\AppData\Local\Temp\appshat_generic.exe
C:\Users\kubosh\AppData\Local\Temp\cabex.dll
C:\Users\kubosh\AppData\Local\Temp\IeSearchProvider3041781477189829286.exe
C:\Users\kubosh\AppData\Local\Temp\InstallGenieo.exe
C:\Users\kubosh\AppData\Local\Temp\listicka-partner-13415-1.1.2-offline.exe
C:\Users\kubosh\AppData\Local\Temp\Quarantine.exe
C:\Users\kubosh\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\kubosh\AppData\Local\Temp\sqlite3.dll
C:\Users\kubosh\AppData\Local\Temp\unelevate.exe
C:\Users\kubosh\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe
C:\Users\kubosh\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-30 15:34




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:195.31 GB) (Free:39.64 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:400.86 GB) (Free:68.2 GB) NTFS
Drive f: (Nový svazek) (Fixed) (Total:149.05 GB) (Free:105.98 GB) NTFS
Drive g: () (Fixed) (Total:68.36 GB) (Free:15.16 GB) NTFS
Drive h: () (Fixed) (Total:43.42 GB) (Free:14.62 GB) NTFS
Drive i: (Nový svazek) (Fixed) (Total:298.09 GB) (Free:106.97 GB) NTFS

Available physical RAM: 2241.5 MB
Total physical RAM: 3326.49 MB
Percentage of memory in use: 32%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 9C270751)
Partition 1: (Active) - (Size=195.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=400.9 GB) - (Type=07 NTFS)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: BAB3ABD8)
Partition 1: (Not Active) - (Size=149 GB) - (Type=07 NTFS)
Disk: 2 (Size: 111.8 GB) (Disk ID: 25BB25BA)
Partition 1: (Active) - (Size=68.4 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=43.4 GB) - (Type=OF Extended)
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 44FDFE06)
Partition 1: (Not Active) - (Size=298.1 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-496298057-2278604049-792952523-1001Core.job => C:\Users\kubosh\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-496298057-2278604049-792952523-1001UA.job => C:\Users\kubosh\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\Temp:56E2E879
AlternateDataStreams: C:\ProgramData\Temp:DF462FF6

==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\kubosh\Desktop" je 6298 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher
"C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
"C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeBridge
"C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager
"C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVP
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync
C:\Program Files\EaseUS\EaseUS Partition Master 9.2.1 Home Edition\bin\EpmNews.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring
"C:\Users\kubosh\AppData\Local\Google\Update\GoogleUpdate.exe" /c [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EaseUS EPM tray
C:\Program Files\Samsung\Kies\KiesHelper.exe /s [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper
C:\Program Files\Samsung\Kies\Kies.exe /preload [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR
C:\Program Files\OO Software\Defrag\oodtray.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload
"C:\Program Files\QuickTime\QTTask.exe" -atboottime [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray
"C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task
"C:\Program Files\Common Files\Java\Java Update\jusched.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC
C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
"C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerProducer" UpdateWithCreateOnce "Software\CyberLink\PowerProducer\5.0" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard
C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePPShortCut
C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USBToolTip
Re�im ECHO je vypnut.

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate
Re�im ECHO je vypnut.

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^O&O Defrag Tray.lnk
C:\Windows\INSTAL~1\{CEA6E~1\app_icon.ico [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^kubosh^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^V��ezy obrazovky a spu�t�n� aplikace OneNote 2010.lnk
C:\PROGRA~1\MIF5BA~1\Office14\ONENOTEM.EXE [x]


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Zbavení se YTA

#2 Příspěvek od vyosek »

Zdravim

:arrow: Jen se zeptam pouzivate legalni operacni system, nejvyssi licence (v hodnote nejake tisic) Ultimate zrovna neni bezna domaci verze
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

kubosh1
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 06 Pro 2014 19:53

Re: Zbavení se YTA

#3 Příspěvek od kubosh1 »

Ne-Aktivace slic 2.1

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Zbavení se YTA

#4 Příspěvek od vyosek »

Pak je mi lito, ale nase forum se nezabyva nelegalnimi operacnimi systemy - je to zcela jasne popsano v pravidlech fora i charte mezinarodni aliance ASAP, jejiz jsme cleny...
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

kubosh1
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 06 Pro 2014 19:53

Re: Zbavení se YTA

#5 Příspěvek od kubosh1 »

ok díky

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Zbavení se YTA

#6 Příspěvek od vyosek »

Nemate zac, doufam ze na nase forum nezavrhnete a priste budeme jiz pomoci pomoci...

Pekny zbytek vecera :worship:


:closed:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Zamčeno