Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 09-12-2014
Ran by pc (administrator) on PC-PC on 09-12-2014 15:08:01
Running from C:\Users\pc\Desktop
Loaded Profiles: pc & Míša (Available profiles: pc & Míša)
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Foxit Software Inc.) C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\tv_w32.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\tv_w32.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-11-26] (AVAST Software)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKU\S-1-5-21-326841346-825053965-1951781011-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [4810520 2014-09-25] (Piriform Ltd)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page =
SearchScopes: HKU\S-1-5-21-326841346-825053965-1951781011-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 172.16.10.1
FireFox:
========
FF ProfilePath: C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\0rjzexvx.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q=
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.centrum.cz/
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-09-27]
FF Extension: No Name - wrc@avast.com [Not Found]
Chrome:
=======
CHR Profile: C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (avast! Online Security) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-09-27]
CHR Extension: (Peněženka Google) - C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-27]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-26]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-26] (AVAST Software)
R2 FoxitCloudUpdateService; C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [242912 2014-09-11] (Foxit Software Inc.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ASTRA32; C:\Program Files\ASTRA32\ASTRA32.sys [30864 2007-02-22] (Licensed for Sysinfo Lab)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-11-26] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2014-11-26] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-11-26] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-11-26] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787800 2014-11-26] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423784 2014-11-26] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [91496 2014-11-26] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206248 2014-11-26] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2014-12-09] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-11-21] (Malwarebytes Corporation)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-09 15:08 - 2014-12-09 15:08 - 00009568 _____ () C:\Users\pc\Desktop\FRST.txt
2014-12-09 15:07 - 2014-12-09 15:08 - 00000000 ____D () C:\FRST
2014-12-09 15:05 - 2014-12-09 15:05 - 01111040 _____ (Farbar) C:\Users\pc\Desktop\FRST.exe
2014-12-09 06:13 - 2014-12-09 06:13 - 00000000 ____D () C:\Users\Míša.pc-PC\AppData\Local\VirtualStore
2014-12-08 20:50 - 2014-12-08 20:50 - 00000000 ____D () C:\Users\pc\AppData\Local\VirtualStore
2014-12-08 20:45 - 2014-12-08 17:46 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-12-08 20:44 - 2014-12-08 20:44 - 00000086 _____ () C:\folders.txt
2014-12-08 17:51 - 2014-12-08 17:32 - 00001294 _____ () C:\zoek-results2014-12-08-163242.log
2014-12-08 17:30 - 2014-12-08 20:52 - 00011571 _____ () C:\zoek-results.log
2014-12-08 17:26 - 2014-12-08 20:13 - 00000000 ____D () C:\zoek_backup
2014-12-08 17:23 - 2014-12-08 17:23 - 01295360 _____ () C:\Users\pc\Desktop\zoek.exe
2014-12-08 17:18 - 2014-12-08 20:50 - 00000966 _____ () C:\Windows\PFRO.log
2014-12-08 17:11 - 2014-12-08 17:17 - 00000000 ____D () C:\AdwCleaner
2014-12-08 17:11 - 2014-12-08 17:11 - 00000055 _____ () C:\AdwCleanerDebug.txt
2014-12-08 17:08 - 2014-12-08 17:08 - 02153472 _____ () C:\Users\pc\Desktop\adwcleaner_4.104.exe
2014-12-07 09:05 - 2014-12-09 06:11 - 00000392 _____ () C:\Windows\setupact.log
2014-12-07 09:05 - 2014-12-07 09:05 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-06 22:09 - 2014-12-06 22:09 - 00030418 _____ () C:\Users\pc\Desktop\Extras.Txt
2014-12-06 22:05 - 2014-12-06 22:05 - 00087954 _____ () C:\Users\pc\Desktop\OTL.Txt
2014-12-06 20:54 - 2014-12-06 20:54 - 00000512 _____ () C:\PhysicalMBR.bin
2014-12-06 20:45 - 2014-12-06 20:46 - 00602112 _____ (OldTimer Tools) C:\Users\pc\Desktop\OTL.exe
2014-12-05 16:43 - 2014-12-05 16:43 - 00000000 ____D () C:\rsit
2014-12-05 16:43 - 2014-12-05 16:43 - 00000000 ____D () C:\Program Files\trend micro
2014-12-05 16:42 - 2014-12-05 16:42 - 01107968 _____ () C:\Users\pc\Downloads\RSIT.exe
2014-12-01 17:51 - 2014-12-01 17:51 - 00003584 _____ () C:\Users\Míša.pc-PC\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-11-30 16:01 - 2014-11-30 16:59 - 1899786240 _____ () C:\Users\Míša.pc-PC\Downloads\Úsvit-planety-opic-(2014)-CZ-dabing.avi
2014-11-28 21:10 - 2014-11-28 21:12 - 00000000 ____D () C:\Users\pc\Desktop\Brdy ruda
2014-11-26 18:49 - 2014-11-26 18:49 - 00002045 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-11-26 18:48 - 2014-11-26 18:48 - 00291352 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-11-26 18:48 - 2014-11-26 18:48 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-11-26 18:37 - 2014-11-26 18:37 - 00000000 ____D () C:\Users\Míša.pc-PC\AppData\Roaming\Winamp
2014-11-21 20:07 - 2014-11-21 20:07 - 00013026 _____ () C:\Users\pc\Desktop\Stažené soubory – zástupce.lnk
2014-11-21 19:24 - 2014-11-22 14:30 - 1667213312 _____ () C:\Users\Míša.pc-PC\Downloads\putovani-s-dinosaury-dobrodruzny-2013-cz-sten-ok-pres-MultiLoad.cz.avi
2014-11-20 16:35 - 2014-11-20 16:35 - 00000753 _____ () C:\Users\pc\Desktop\Muzika – zástupce.lnk
2014-11-19 19:43 - 2014-11-19 21:35 - 990179380 _____ () C:\Users\Míša.pc-PC\Downloads\Scary-Movie-5-cz.avi
2014-11-11 15:11 - 2014-11-11 17:06 - 00000000 ____D () C:\Users\pc\Desktop\jedová hora
2014-11-11 15:08 - 2014-11-11 15:08 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-11-10 11:16 - 2014-11-10 11:16 - 01540816 _____ ( ) C:\Users\pc\Downloads\cpu-z_1.71-setup-en.exe
2014-11-10 11:05 - 2014-11-17 18:57 - 00000000 ____D () C:\Users\pc\AppData\Roaming\Foxit Software
2014-11-10 11:05 - 2014-11-10 11:05 - 00000000 ____D () C:\Users\Public\Foxit Software
2014-11-10 11:04 - 2014-11-10 11:04 - 00002091 _____ () C:\Users\Public\Desktop\Foxit Reader.lnk
2014-11-10 11:04 - 2014-11-10 11:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-11-10 11:04 - 2014-11-10 11:04 - 00000000 ____D () C:\Program Files\Foxit Software
2014-11-10 11:02 - 2014-11-10 11:03 - 37730024 _____ (Foxit Software Inc. ) C:\Users\pc\Downloads\FoxitReader703.0916_enu_Setup.exe
2014-11-10 10:41 - 2014-11-10 10:41 - 44845588 _____ () C:\Users\pc\Downloads\adobereader-setup.exe
2014-11-09 20:05 - 2014-11-09 20:05 - 00109280 _____ () C:\Users\Míša.pc-PC\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-09 19:47 - 2014-11-09 19:47 - 00000000 ____D () C:\Users\Míša.pc-PC\Desktop\Původní data aplikace Firefox
2014-11-09 10:31 - 2014-11-09 10:31 - 00000000 ____D () C:\Windows\system32\appmgmt
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-09 15:09 - 2014-09-27 10:03 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-09 15:08 - 2014-09-27 09:42 - 01788899 _____ () C:\Windows\WindowsUpdate.log
2014-12-09 15:01 - 2014-09-27 21:35 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-09 14:59 - 2014-09-27 10:03 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-09 14:58 - 2014-09-27 09:56 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-09 07:30 - 2014-09-27 20:59 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-12-09 06:20 - 2009-07-14 05:34 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-09 06:20 - 2009-07-14 05:34 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-09 06:11 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-08 20:31 - 2014-10-01 18:35 - 00000000 ____D () C:\Users\Míša\AppData\Local\Google
2014-12-06 14:02 - 2014-11-06 18:31 - 00000000 ____D () C:\Users\Míša.pc-PC\AppData\Roaming\vlc
2014-12-05 16:39 - 2014-09-27 21:35 - 00001060 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-05 16:39 - 2014-09-27 21:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-12-05 16:39 - 2014-09-27 21:35 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-12-03 20:09 - 2010-11-20 22:01 - 01582262 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-02 16:24 - 2014-09-27 21:00 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-11-29 18:20 - 2014-09-27 21:25 - 00000000 ____D () C:\Users\pc\AppData\Roaming\vlc
2014-11-26 18:49 - 2014-09-27 10:02 - 00787800 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-11-26 18:49 - 2014-09-27 10:02 - 00423784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-11-26 18:48 - 2014-09-27 10:02 - 00206248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-11-26 18:48 - 2014-09-27 10:02 - 00091496 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-11-26 18:48 - 2014-09-27 10:02 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-11-26 18:48 - 2014-09-27 10:02 - 00070384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-11-26 18:48 - 2014-09-27 10:02 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-11-26 18:48 - 2014-09-27 10:02 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-11-26 15:37 - 2014-09-27 10:05 - 00002129 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-26 15:26 - 2014-09-27 09:56 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-11-26 15:26 - 2014-09-27 09:56 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-21 06:14 - 2014-09-27 21:35 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-21 06:14 - 2014-09-27 21:35 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-21 06:14 - 2014-09-27 21:35 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-10 19:54 - 2014-09-28 06:55 - 00000000 ____D () C:\Windows\Minidump
2014-11-10 11:16 - 2014-09-30 19:25 - 00001022 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2014-11-10 11:05 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-12-07 10:05
==================== End Of Log ============================

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
pomalé PC procesor na 100% výkonu.
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: pomalé PC procesor na 100% výkonu.

- Spustte poznamkovy blok (Start-spustit-notepad)
- Zkopirujte skript nize
Kód: Vybrat vše
Start CloseProcesses: HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation) HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = 2014-12-09 15:08 - 2014-12-09 15:08 - 00009568 _____ () C:\Users\pc\Desktop\FRST.txt 2014-12-08 20:45 - 2014-12-08 17:46 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-12-08 20:44 - 2014-12-08 20:44 - 00000086 _____ () C:\folders.txt 2014-12-08 17:51 - 2014-12-08 17:32 - 00001294 _____ () C:\zoek-results2014-12-08-163242.log 2014-12-08 17:30 - 2014-12-08 20:52 - 00011571 _____ () C:\zoek-results.log 2014-12-08 17:26 - 2014-12-08 20:13 - 00000000 ____D () C:\zoek_backup 2014-12-08 17:23 - 2014-12-08 17:23 - 01295360 _____ () C:\Users\pc\Desktop\zoek.exe 2014-12-08 17:18 - 2014-12-08 20:50 - 00000966 _____ () C:\Windows\PFRO.log 2014-12-08 17:11 - 2014-12-08 17:17 - 00000000 ____D () C:\AdwCleaner 2014-12-08 17:11 - 2014-12-08 17:11 - 00000055 _____ () C:\AdwCleanerDebug.txt 2014-12-08 17:08 - 2014-12-08 17:08 - 02153472 _____ () C:\Users\pc\Desktop\adwcleaner_4.104.exe 2014-12-07 09:05 - 2014-12-09 06:11 - 00000392 _____ () C:\Windows\setupact.log 2014-12-07 09:05 - 2014-12-07 09:05 - 00000000 _____ () C:\Windows\setuperr.log 2014-12-06 22:09 - 2014-12-06 22:09 - 00030418 _____ () C:\Users\pc\Desktop\Extras.Txt 2014-12-06 22:05 - 2014-12-06 22:05 - 00087954 _____ () C:\Users\pc\Desktop\OTL.Txt 2014-12-06 20:54 - 2014-12-06 20:54 - 00000512 _____ () C:\PhysicalMBR.bin 2014-12-06 20:45 - 2014-12-06 20:46 - 00602112 _____ (OldTimer Tools) C:\Users\pc\Desktop\OTL.exe 2014-12-05 16:43 - 2014-12-05 16:43 - 00000000 ____D () C:\rsit 2014-12-05 16:43 - 2014-12-05 16:43 - 00000000 ____D () C:\Program Files\trend micro 2014-12-05 16:42 - 2014-12-05 16:42 - 01107968 _____ () C:\Users\pc\Downloads\RSIT.exe C:\Windows\Tasks\Adobe Flash Player Updater.job C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job Hosts: EmptyTemp: Reboot: End
- Ulozte vytvoreny TXT jako fixlist.txt
- Presunte vytvoreny fixlist vedle FRST

- Kliknete na Fix
- Probehne oprava a vytvori log Fixlog.txt

Re: pomalé PC procesor na 100% výkonu.
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 09-12-2014
Ran by pc at 2014-12-09 20:42:38 Run:1
Running from C:\Users\pc\Desktop
Loaded Profiles: pc & Míša (Available profiles: pc & Míša)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
CloseProcesses:
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page =
2014-12-09 15:08 - 2014-12-09 15:08 - 00009568 _____ () C:\Users\pc\Desktop\FRST.txt
2014-12-08 20:45 - 2014-12-08 17:46 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-12-08 20:44 - 2014-12-08 20:44 - 00000086 _____ () C:\folders.txt
2014-12-08 17:51 - 2014-12-08 17:32 - 00001294 _____ () C:\zoek-results2014-12-08-163242.log
2014-12-08 17:30 - 2014-12-08 20:52 - 00011571 _____ () C:\zoek-results.log
2014-12-08 17:26 - 2014-12-08 20:13 - 00000000 ____D () C:\zoek_backup
2014-12-08 17:23 - 2014-12-08 17:23 - 01295360 _____ () C:\Users\pc\Desktop\zoek.exe
2014-12-08 17:18 - 2014-12-08 20:50 - 00000966 _____ () C:\Windows\PFRO.log
2014-12-08 17:11 - 2014-12-08 17:17 - 00000000 ____D () C:\AdwCleaner
2014-12-08 17:11 - 2014-12-08 17:11 - 00000055 _____ () C:\AdwCleanerDebug.txt
2014-12-08 17:08 - 2014-12-08 17:08 - 02153472 _____ () C:\Users\pc\Desktop\adwcleaner_4.104.exe
2014-12-07 09:05 - 2014-12-09 06:11 - 00000392 _____ () C:\Windows\setupact.log
2014-12-07 09:05 - 2014-12-07 09:05 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-06 22:09 - 2014-12-06 22:09 - 00030418 _____ () C:\Users\pc\Desktop\Extras.Txt
2014-12-06 22:05 - 2014-12-06 22:05 - 00087954 _____ () C:\Users\pc\Desktop\OTL.Txt
2014-12-06 20:54 - 2014-12-06 20:54 - 00000512 _____ () C:\PhysicalMBR.bin
2014-12-06 20:45 - 2014-12-06 20:46 - 00602112 _____ (OldTimer Tools) C:\Users\pc\Desktop\OTL.exe
2014-12-05 16:43 - 2014-12-05 16:43 - 00000000 ____D () C:\rsit
2014-12-05 16:43 - 2014-12-05 16:43 - 00000000 ____D () C:\Program Files\trend micro
2014-12-05 16:42 - 2014-12-05 16:42 - 01107968 _____ () C:\Users\pc\Downloads\RSIT.exe
C:\Windows\Tasks\Adobe Flash Player Updater.job
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
Hosts:
EmptyTemp:
Reboot:
Ran by pc at 2014-12-09 20:42:38 Run:1
Running from C:\Users\pc\Desktop
Loaded Profiles: pc & Míša (Available profiles: pc & Míša)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
CloseProcesses:
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page =
2014-12-09 15:08 - 2014-12-09 15:08 - 00009568 _____ () C:\Users\pc\Desktop\FRST.txt
2014-12-08 20:45 - 2014-12-08 17:46 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-12-08 20:44 - 2014-12-08 20:44 - 00000086 _____ () C:\folders.txt
2014-12-08 17:51 - 2014-12-08 17:32 - 00001294 _____ () C:\zoek-results2014-12-08-163242.log
2014-12-08 17:30 - 2014-12-08 20:52 - 00011571 _____ () C:\zoek-results.log
2014-12-08 17:26 - 2014-12-08 20:13 - 00000000 ____D () C:\zoek_backup
2014-12-08 17:23 - 2014-12-08 17:23 - 01295360 _____ () C:\Users\pc\Desktop\zoek.exe
2014-12-08 17:18 - 2014-12-08 20:50 - 00000966 _____ () C:\Windows\PFRO.log
2014-12-08 17:11 - 2014-12-08 17:17 - 00000000 ____D () C:\AdwCleaner
2014-12-08 17:11 - 2014-12-08 17:11 - 00000055 _____ () C:\AdwCleanerDebug.txt
2014-12-08 17:08 - 2014-12-08 17:08 - 02153472 _____ () C:\Users\pc\Desktop\adwcleaner_4.104.exe
2014-12-07 09:05 - 2014-12-09 06:11 - 00000392 _____ () C:\Windows\setupact.log
2014-12-07 09:05 - 2014-12-07 09:05 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-06 22:09 - 2014-12-06 22:09 - 00030418 _____ () C:\Users\pc\Desktop\Extras.Txt
2014-12-06 22:05 - 2014-12-06 22:05 - 00087954 _____ () C:\Users\pc\Desktop\OTL.Txt
2014-12-06 20:54 - 2014-12-06 20:54 - 00000512 _____ () C:\PhysicalMBR.bin
2014-12-06 20:45 - 2014-12-06 20:46 - 00602112 _____ (OldTimer Tools) C:\Users\pc\Desktop\OTL.exe
2014-12-05 16:43 - 2014-12-05 16:43 - 00000000 ____D () C:\rsit
2014-12-05 16:43 - 2014-12-05 16:43 - 00000000 ____D () C:\Program Files\trend micro
2014-12-05 16:42 - 2014-12-05 16:42 - 01107968 _____ () C:\Users\pc\Downloads\RSIT.exe
C:\Windows\Tasks\Adobe Flash Player Updater.job
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
Hosts:
EmptyTemp:
Reboot:
Re: pomalé PC procesor na 100% výkonu.
Tak jeste uklidime
DelFix https://toolslib.net/downloads/finish/2/
Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič
A pokud nejsou problemy ci dotazy, je to z me strany vse 


- Stahnete a spustte
- Ponechte zatrzitkou pouze u volby Remote disinfection tools
- Kliknete na Run

Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy


Re: pomalé PC procesor na 100% výkonu.
Využití procesoru se zklidnilo - pohybuje se od 20% - k 90% a PC běhá svižněji.
Děkuji moc.
Děkuji moc.