Shopdrop + AllCheapPrice

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
vapis
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 19 Pro 2014 14:44

Shopdrop + AllCheapPrice

#1 Příspěvek od vapis »

Zdravím, dnes se mi podařilo zavirovat PC, sám netuším čím. Během běžného brouzdání (Twitter, FB, seznam) se najednou restartoval Chrome, Windwos Defender zahlásil nakázu a od té doby marně bojuji. Něco mi říká, že by za tím mohl stát web

Kód: Vybrat vše

www.saudigazette.com.sa
, protože jeho návštěva byla asi to nejneobvyklejší, co jsem dnes stihl. Nebudu zdržovat, dále RSIT log. Je velký, takže v příloze. Díky za pomoc.
Přílohy
log-rsit.zip
(37.6 KiB) Staženo 46 x
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Shopdrop + AllCheapPrice

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Po spusteni probehne stazeni databaze
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
vapis
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 19 Pro 2014 14:44

Re: Shopdrop + AllCheapPrice

#3 Příspěvek od vapis »

AdwCleaner jsem shodou okolností použil již před vytvářením RSIT logu, snad to nebude ničemu vadit. Zde je tedy log z něj. Po jeho použití jsem navíc přeinstaloval chrome a nestandartní chování zmizelo, což samozřejmě není záruka, že už je vyléčeno.

# AdwCleaner v4.105 - Report created 19/12/2014 at 14:36:27
# Updated 08/12/2014 by Xplode
# Database : 2014-12-16.1 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : Lukáš - LUCKY
# Running from : E:\Downloads\adwcleaner_4.105.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\81d3e5e939ddccbe
Folder Deleted : C:\ProgramData\9355073640839630014
Folder Deleted : C:\Program Files (x86)\Amazon\ABB
Folder Deleted : C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio
File Deleted : C:\END
File Deleted : C:\Users\Lukáš\AppData\Roaming\LiveSupport.exe_log.txt
File Deleted : C:\Users\Lukáš\AppData\Roaming\regsvr32.exe_log.txt

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}
Key Deleted : HKCU\Software\Optimizer Pro
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B6D700D3-3D0D-FEEB-D675-2CE78F9EC5D6}

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [First Home Page]

-\\ Google Chrome v39.0.2171.95


*************************

AdwCleaner[R0].txt - [2313 octets] - [19/12/2014 14:34:56]
AdwCleaner[S0].txt - [1862 octets] - [19/12/2014 14:36:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1922 octets] ##########
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Shopdrop + AllCheapPrice

#4 Příspěvek od vyosek »

:arrow: Spustte AdwCleaner znovu prosim, byl proveden velky update databaze, tak treba nam jeste neco najde

:arrow: Aplikujte Zoek
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
vapis
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 19 Pro 2014 14:44

Re: Shopdrop + AllCheapPrice

#5 Příspěvek od vapis »

AdwCleaner nic nenašel, zde log:

# AdwCleaner v4.106 - Report created 21/12/2014 at 22:01:28
# Updated 21/12/2014 by Xplode
# Database : 2014-12-21.4 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : Lukáš - LUCKY
# Running from : C:\Users\Lukáš\Desktop\adwcleaner_4.106.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Google Chrome v39.0.2171.95


*************************

AdwCleaner[R0].txt - [2313 octets] - [19/12/2014 14:34:56]
AdwCleaner[R1].txt - [842 octets] - [21/12/2014 21:59:55]
AdwCleaner[S0].txt - [2014 octets] - [19/12/2014 14:36:27]
AdwCleaner[S1].txt - [764 octets] - [21/12/2014 22:01:28]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [823 octets] ##########


A Zoek:

Zoek.exe v5.0.0.0 Updated 21-December-2014
Tool run by Luk ç on ne 21. 12. 2014 at 22:05:46,73.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\LUK~1\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

21. 12. 2014 22:06:53 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\Amazon deleted successfully
C:\PROGRA~2\COMMON~1\Blizzard Entertainment deleted successfully
C:\Program Files\ATI Technologies deleted successfully
C:\Users\LUK~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\LGFlashTool deleted successfully
C:\Users\LUK~1\AppData\Local\CrashDumps deleted successfully
C:\Users\LUK~1\AppData\Local\LSC deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~2\Adblock for Pirate Bay deleted
C:\Users\LUK~1\.android deleted
C:\LGExtract.exe deleted
C:\PROGRA~3\Package Cache deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [19. 12. 2014 12:53]

==== Chromium Look ======================
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Shopdrop + AllCheapPrice

#6 Příspěvek od vyosek »

Zoek nam nedobehl, nechte jej pracovat, pockejte na restart, ktery udela a pak log bude c:\zoek_result.log
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
vapis
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 19 Pro 2014 14:44

Re: Shopdrop + AllCheapPrice

#7 Příspěvek od vapis »

To všechno udělal, nicméně pro jistotu jsem jej spustil znovu, zde log.


Zoek.exe v5.0.0.0 Updated 22-12-2014
Tool run by Luk ç on Łt 23. 12. 2014 at 16:40:29,58.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\LUK~1\Desktop\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2014-12-21-213340.log 7200 bytes

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~2\Microsoft SQL Server Compact Edition deleted
C:\PROGRA~2\NVIDIA Corporation deleted
C:\PROGRA~2\Vimicro Corporation deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [19. 12. 2014 12:53]

==== Chromium Look ======================

Google Chrome Version: 39.0.2171.95 (Could not determine latest Stable Version)

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[19. 12. 2014 12:53]

Angry Birds - LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj
AdBlock - LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
Avast Online Security - LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Google Cast API - LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mafeflapfdfljijmlienjedomfjfmhpd
Inbox - LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkclgpgponpjmpfokoepglboejdobkpl

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.msn.com/?pc=MSE1"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.msn.com/?pc=MSE1"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{B8C7FEDF-6E21-4356-9EB3-05BC24AFE3BC} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IESR02"

==== Reset Google Chrome ======================

C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\LUK~1\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\LUK~1\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\LUK~1\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\LUK~1\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=151 folders=67 154057131 bytes)

==== Empty Temp Folders ======================

C:\Users\ADMINI~1\AppData\Local\Temp emptied successfully
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\LUK~1\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\LUK~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on Łt 23. 12. 2014 at 17:09:16,58 ======================
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Shopdrop + AllCheapPrice

#8 Příspěvek od vyosek »

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
vapis
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 19 Pro 2014 14:44

Re: Shopdrop + AllCheapPrice

#9 Příspěvek od vapis »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-12-2014
Ran by Lukáš (administrator) on LUCKY on 24-12-2014 12:12:54
Running from C:\Users\Lukáš\Desktop
Loaded Profile: Lukáš (Available profiles: Lukáš)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
(Microsoft) C:\Program Files (x86)\Lenovo\Lenovo Dashboard\DdMgr.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft) C:\Program Files (x86)\Lenovo\EducationPortal\Services\IdeaTouch.LocalDataServer.Education.exe
(Microsoft) C:\Program Files (x86)\Lenovo\GamePortal\Services\IdeaTouch.LocalDataServer.Game.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(AMD) C:\Windows\System32\atieclxx.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
() C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files (x86)\Common Files\AVerMedia\AVerHIDReceiver\AVerHIDReceiver.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Silver Silk Wireless Keyboard\skd8861.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(cyberlink) C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(forum.viry.cz) C:\Users\Lukáš\Desktop\FRSTLauncher.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13625048 2013-06-18] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1311304 2013-06-05] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-02-01] (Intel Corporation)
HKLM\...\Run: [IgfxTray] => C:\windows\system32\igfxtray.exe [457616 2014-10-03] ()
HKLM-x32\...\Run: [Lenovo Silver Silk Wireless Keyboard] => C:\Program Files (x86)\Lenovo\Lenovo Silver Silk Wireless Keyboard\skd8861.exe [392192 2012-02-17] (Lenovo)
HKLM-x32\...\Run: [LVT] => C:\Program Files\Lenovo\LVT\LJYZ.exe [886112 2011-11-24] (Lenovo)
HKLM-x32\...\Run: [Lenovo Eye Distance System] => C:\Program Files\Lenovo\Lenovo Eye Distance System\Lenovo Eye Distance System.exe [270680 2012-07-19] (Lenovo)
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-12-15] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167640 2012-12-15] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [95192 2013-03-09] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-03-08] (cyberlink)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-05] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM-x32\...\Run: [Lenovo Dynamic Brightness System] => C:\Program Files\Lenovo\Lenovo Brightness System\RunLDBS.exe [1753432 2012-09-18] (Lenovo)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-09-15] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2014-12-19] (AVAST Software)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-06-28] ( (Qualcomm®Atheros®))
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [Facebook Update] => "C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [GoogleChromeAutoLaunch_032E85145F9C73D9B43D5ED2AF6BF5BD] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\RunOnce: [Adobe Speed Launcher] => 1419409714
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Policies\Explorer: [NoDrives] 0x00000003
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\MountPoints2: {78275e82-5daa-11e4-be76-48d224d3a8b5} - "F:\steambackup2.EXE"
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\MountPoints2: {c89df8a2-6267-11e4-be77-48d224d3a8b5} - "G:\LG_PC_Programs.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk
ShortcutTarget: AVer HID Receiver.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerHIDReceiver\AVerHIDReceiver.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSE1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSE1
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4263180883-3752867461-2742355753-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095}
Tcpip\Parameters: [DhcpNameServer] 5.74.41.6

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-4263180883-3752867461-2742355753-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Lukáš\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-4263180883-3752867461-2742355753-1001: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll No File
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-19]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.firstclass.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-19]
CHR Extension: (Angry Birds) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-12-19]
CHR Extension: (Dokumenty Google) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-19]
CHR Extension: (Disk Google) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-19]
CHR Extension: (YouTube) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-19]
CHR Extension: (Vyhledávání Google) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-19]
CHR Extension: (Kalendář Google) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2014-12-19]
CHR Extension: (Tabulky Google) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-19]
CHR Extension: (Filmy Google Play) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdijeikdkaembjbdobgfkoidjkpbmlkd [2014-12-23]
CHR Extension: (AdBlock) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-12-19]
CHR Extension: (Avast Online Security) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-19]
CHR Extension: (Hovory Hangouts) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbpgddbgniojgndnhlkjbkpknjhppkbk [2014-12-19]
CHR Extension: (Google Cast API) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\mafeflapfdfljijmlienjedomfjfmhpd [2014-12-23]
CHR Extension: (Kontrola e-mailu Google) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2014-12-19]
CHR Extension: (Peněženka Google) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-19]
CHR Extension: (Google Calendar Checker (by Google)) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookhcbgokankfmjafalglpofmolfopek [2014-12-19]
CHR Extension: (Gmail) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-19]
CHR Extension: (Inbox by Gmail) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkclgpgponpjmpfokoepglboejdobkpl [2014-12-19]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-19]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-06-28] (Windows (R) Win 7 DDK provider)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-19] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-19] (Avast Software)
R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [364544 2012-08-08] (AVerMedia) [File not signed]
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [403456 2011-04-01] () [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [448384 2014-12-09] ()
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2014-10-17] (BitRaider, LLC)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
S2 CLKMSVC10_3A60B698; C:\Program Files (x86)\Lenovo\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-03-09] (CyberLink)
R2 Dashboard Service; C:\Program Files (x86)\Lenovo\Lenovo Dashboard\DdMgr.exe [25936 2013-03-22] (Microsoft) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-02-01] (Intel Corporation)
R2 IdeaTouch.LocalDataServer.Education; C:\Program Files (x86)\Lenovo\EducationPortal\Services\IdeaTouch.LocalDataServer.Education.exe [7680 2012-05-17] (Microsoft) [File not signed]
R2 IdeaTouch.LocalDataServer.Game; C:\Program Files (x86)\Lenovo\GamePortal\Services\IdeaTouch.LocalDataServer.Game.exe [7680 2013-01-18] (Microsoft) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-10-03] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [167736 2013-01-30] (Intel Corporation)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-10-16] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-06-28] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2013-12-13] (Advanced Micro Devices, Inc.)
S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2013-04-18] (Google Inc)
S3 AndNetDiag; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [29184 2013-04-18] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [36352 2013-06-28] (LG Electronics Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-19] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-19] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-19] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-19] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-19] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-19] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-19] ()
R3 AVerPola; C:\Windows\system32\DRIVERS\AVerPola.sys [745472 2012-11-07] (AVerMedia TECHNOLOGIES, Inc.)
R3 AVPolDIR; C:\Windows\System32\drivers\AVPolDIR.sys [7168 2012-11-07] (AVerMedia TECHNOLOGIES, Inc.)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-10-31] (Disc Soft Ltd)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [288328 2013-01-23] (Realtek Semiconductor Corp.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-19] (Avast Software)
R3 VMC412; C:\Windows\System32\Drivers\VMC412.sys [232576 2012-09-24] (Vimicro Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R0 WinI2C-DDC; C:\Windows\System32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.)
R0 WinI2C-DDC; C:\Windows\SysWOW64\drivers\DDCDrv.sys [15712 2010-03-23] (Nicomsoft Ltd.)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-24 12:12 - 2014-12-24 12:13 - 00023395 _____ () C:\Users\Lukáš\Desktop\FRST.txt
2014-12-24 12:12 - 2014-12-24 12:12 - 00000000 ____D () C:\FRST
2014-12-24 12:11 - 2014-12-24 12:11 - 00112640 _____ (forum.viry.cz) C:\Users\Lukáš\Desktop\FRSTLauncher.exe
2014-12-24 12:09 - 2014-12-24 12:09 - 00112640 _____ (forum.viry.cz) C:\Users\Lukáš\Desktop\Nepotvrzeno 944058.crdownload
2014-12-24 12:04 - 2014-12-24 12:04 - 02122240 _____ (Farbar) C:\Users\Lukáš\Desktop\FRST64.exe
2014-12-24 11:52 - 2014-12-24 12:02 - 00000416 _____ () C:\Users\Lukáš\Desktop\dayz.txt
2014-12-24 09:38 - 2014-12-24 09:38 - 00000149 _____ () C:\WINDOWS\setupact.log
2014-12-24 09:38 - 2014-12-24 09:38 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-12-23 17:09 - 2014-12-23 17:09 - 00000197 _____ () C:\WINDOWS\system32\2014-12-23-16-09-07.067-AvastVBoxSVC.exe-3036.log
2014-12-23 17:02 - 2014-12-23 16:40 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-12-23 16:41 - 2014-12-21 22:33 - 00007200 _____ () C:\zoek-results2014-12-21-213340.log
2014-12-21 22:34 - 2014-12-21 22:34 - 00000197 _____ () C:\WINDOWS\system32\2014-12-21-21-34-47.047-AvastVBoxSVC.exe-2452.log
2014-12-21 22:06 - 2014-12-23 17:09 - 00006267 _____ () C:\zoek-results.log
2014-12-21 22:05 - 2014-12-23 17:00 - 00000000 ____D () C:\zoek_backup
2014-12-21 22:04 - 2014-12-21 22:04 - 00000197 _____ () C:\WINDOWS\system32\2014-12-21-21-04-18.041-AvastVBoxSVC.exe-2700.log
2014-12-21 22:00 - 2014-12-21 22:00 - 01295360 _____ () C:\Users\Lukáš\Desktop\zoek.exe
2014-12-21 21:59 - 2014-12-21 21:59 - 02173952 _____ () C:\Users\Lukáš\Desktop\adwcleaner_4.106.exe
2014-12-21 12:06 - 2014-12-24 09:48 - 00245535 _____ () C:\WINDOWS\WindowsUpdate.log
2014-12-20 16:03 - 2014-12-20 16:04 - 00000197 _____ () C:\WINDOWS\system32\2014-12-20-15-03-40.006-AvastVBoxSVC.exe-2828.log
2014-12-20 15:44 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-12-20 15:44 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-12-19 15:57 - 2014-12-23 16:37 - 00000000 ____D () C:\Users\Lukáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome
2014-12-19 15:56 - 2014-12-19 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-12-19 15:52 - 2014-12-24 11:57 - 00000962 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-19 15:52 - 2014-12-24 09:28 - 00000958 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-19 15:52 - 2014-12-19 15:55 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-19 15:52 - 2014-12-19 15:52 - 00003934 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-12-19 15:52 - 2014-12-19 15:52 - 00003698 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-12-19 14:58 - 2014-12-19 14:58 - 00038498 _____ () C:\Users\Lukáš\Desktop\log-rsit.zip
2014-12-19 14:42 - 2014-12-19 14:42 - 00000000 ____D () C:\rsit
2014-12-19 14:42 - 2014-12-19 14:42 - 00000000 ____D () C:\Program Files\trend micro
2014-12-19 14:37 - 2014-12-19 14:37 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-13-37-34.012-AvastVBoxSVC.exe-2572.log
2014-12-19 14:34 - 2014-12-21 22:01 - 00000000 ____D () C:\AdwCleaner
2014-12-19 13:59 - 2014-12-19 13:59 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-59-39.083-aswFe.exe-3688.log
2014-12-19 13:56 - 2014-12-19 13:59 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-56-06.087-aswFe.exe-7992.log
2014-12-19 13:56 - 2014-12-19 13:56 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-12-56-04.056-AvastVBoxSVC.exe-512.log
2014-12-19 13:38 - 2014-12-19 13:38 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-38-34.046-aswFe.exe-3056.log
2014-12-19 13:38 - 2014-12-19 13:38 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-12-38-32.061-AvastVBoxSVC.exe-1256.log
2014-12-19 13:22 - 2014-12-20 15:54 - 00003272 _____ () C:\WINDOWS\System32\Tasks\avastBCLRestartS-1-5-21-4263180883-3752867461-2742355753-1001
2014-12-19 12:54 - 2014-12-19 12:54 - 00000000 ____D () C:\Users\Lukáš\AppData\Roaming\AVAST Software
2014-12-19 12:53 - 2014-12-19 12:54 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-12-19 12:53 - 2014-12-19 12:53 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2014-12-19 12:53 - 2014-12-19 12:53 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-12-19 12:53 - 2014-12-19 12:53 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-12-19 12:53 - 2014-12-19 12:53 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-12-19 12:53 - 2014-12-19 12:53 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-12-19 12:53 - 2014-12-19 12:53 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-12-19 12:53 - 2014-12-19 12:53 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-12-19 12:53 - 2014-12-19 12:53 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-12-19 12:53 - 2014-12-19 12:53 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-12-19 12:53 - 2014-12-19 12:53 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-12-19 12:53 - 2014-12-19 12:53 - 00000000 ____D () C:\WINDOWS\SysWOW64\vbox
2014-12-19 12:53 - 2014-12-19 12:53 - 00000000 ____D () C:\WINDOWS\system32\vbox
2014-12-19 12:53 - 2014-12-19 12:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-12-19 12:52 - 2014-12-19 12:52 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-12-19 12:52 - 2014-12-19 12:52 - 00000000 ____D () C:\Program Files\AVAST Software
2014-12-19 12:39 - 2014-12-19 12:39 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-19 12:28 - 2014-12-19 12:30 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-19 12:28 - 2014-12-19 12:28 - 00002772 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2014-12-19 12:28 - 2014-12-19 12:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-12-17 18:31 - 2014-12-17 18:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-12-17 18:31 - 2014-12-17 18:31 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-12-17 14:12 - 2014-12-17 14:12 - 00000000 ____D () C:\Users\Lukáš\AppData\Local\Blizzard
2014-12-17 14:06 - 2014-12-17 14:12 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-12-17 14:06 - 2014-12-17 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2014-12-17 14:03 - 2014-12-17 14:58 - 00000000 ____D () C:\Users\Lukáš\AppData\Local\Battle.net
2014-12-17 14:03 - 2014-12-17 14:05 - 00000000 ____D () C:\Users\Lukáš\AppData\Roaming\Battle.net
2014-12-17 14:03 - 2014-12-17 14:03 - 00000000 ____D () C:\Users\Lukáš\AppData\Local\Blizzard Entertainment
2014-12-17 14:03 - 2014-12-17 14:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-12-17 14:03 - 2014-12-17 14:03 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-12-17 14:03 - 2014-12-17 14:03 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-12-17 13:59 - 2014-12-17 14:00 - 00000000 ____D () C:\ProgramData\Battle.net
2014-12-14 02:02 - 2014-12-14 02:02 - 00000000 __SHD () C:\Users\Lukáš\AppData\Local\EmieBrowserModeList
2014-12-12 14:59 - 2014-12-12 14:59 - 00000000 ____D () C:\Program Files (x86)\LG Electronics
2014-12-12 14:59 - 2013-06-28 11:45 - 00036352 _____ (LG Electronics Inc.) C:\WINDOWS\system32\Drivers\lgandnetmodem64.sys
2014-12-12 14:59 - 2013-04-18 16:14 - 00029184 _____ (LG Electronics Inc.) C:\WINDOWS\system32\Drivers\lgandnetdiag64.sys
2014-12-12 14:59 - 2013-04-18 16:12 - 00031744 _____ (Google Inc) C:\WINDOWS\system32\Drivers\lgandnetadb.sys
2014-12-12 14:59 - 2011-07-18 06:03 - 01919968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdfcoinstaller01005.dll
2014-12-12 14:39 - 2014-12-12 14:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LGFlashTool
2014-12-12 14:39 - 2014-12-12 14:39 - 00000000 ____D () C:\LG
2014-12-12 14:26 - 2013-08-13 20:50 - 1014497496 _____ () C:\BIN_LGD605AT-00-V10a-EUR-XX-AUG-13-2013+0_Develop.wdb
2014-12-12 14:26 - 2013-08-13 20:50 - 00000362 _____ () C:\BIN_LGD605AT-00-V10a-EUR-XX-AUG-13-2013+0_Develop.wdh
2014-12-12 14:26 - 2013-07-10 16:50 - 00895488 _____ (LG Electronics) C:\LGUP_L9II.dll
2014-12-12 14:24 - 2014-12-12 14:24 - 1015298289 _____ () C:\D60510A_00.cab
2014-12-12 14:18 - 2014-12-12 14:12 - 1015298289 _____ () C:\D60510A_00.kdz
2014-12-12 13:15 - 2014-12-12 13:15 - 00000000 ____D () C:\Program Files (x86)\BuuyNsavE
2014-12-11 15:07 - 2014-12-11 15:07 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2014-12-11 06:52 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2014-12-11 06:52 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2014-12-11 06:52 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2014-12-11 06:52 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2014-12-11 06:40 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-12-11 06:40 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-12-11 06:40 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-12-11 06:40 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-12-11 06:40 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-12-11 06:40 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-12-11 06:40 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-12-11 06:40 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-12-11 06:40 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-12-11 06:40 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-12-11 06:40 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-12-11 06:40 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-12-11 06:40 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-12-11 06:40 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-12-11 06:40 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-12-11 06:40 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-12-11 06:40 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-12-11 06:40 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-12-11 06:40 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-12-11 06:40 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-12-11 06:40 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-12-11 06:40 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-12-11 06:40 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-12-11 06:40 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-12-11 06:40 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-12-11 06:40 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-12-11 06:40 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-12-11 06:40 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-12-11 06:40 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-12-11 06:40 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-12-11 06:40 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-12-11 06:40 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-12-11 06:40 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-12-11 06:40 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-12-11 06:40 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-12-11 06:40 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-12-11 06:40 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-12-11 06:40 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-12-11 06:40 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-12-11 06:40 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-12-11 06:40 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2014-12-11 06:40 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-12-11 06:40 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-12-09 20:15 - 2014-12-09 20:30 - 00000000 ____D () C:\Users\Lukáš\AppData\Local\DayZ
2014-12-08 20:17 - 2014-12-08 20:17 - 00115916 _____ () C:\Users\Lukáš\AppData\Roaming\icarus-dxdiag.xml
2014-12-06 21:24 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2014-12-06 21:24 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2014-12-06 21:24 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2014-12-06 21:24 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2014-12-06 21:24 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2014-12-06 21:24 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2014-12-06 21:24 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2014-12-06 21:24 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2014-12-06 20:44 - 2014-12-06 20:44 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-12-06 20:44 - 2014-12-06 20:44 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2014-12-06 12:19 - 2014-12-06 12:19 - 00000000 ____D () C:\Users\Lukáš\AppData\Roaming\StunlockStudios
2014-12-06 09:53 - 2014-12-06 09:53 - 00003166 _____ () C:\WINDOWS\System32\Tasks\{E3E57851-5E18-4670-A1B3-9963E6282F16}
2014-12-05 18:07 - 2014-12-05 18:07 - 00000000 ____D () C:\Users\Lukáš\AppData\Local\Ubisoft
2014-12-05 18:07 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2014-12-05 18:07 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2014-12-05 18:07 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2014-12-05 18:07 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-24 12:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-12-24 10:57 - 2014-10-16 18:52 - 00000940 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001UA.job
2014-12-24 10:00 - 2014-10-17 17:31 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-24 09:28 - 2014-10-17 04:50 - 00000000 __RDO () C:\Users\Lukáš\OneDrive
2014-12-23 22:54 - 2014-10-29 15:57 - 00003958 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{828BD814-1623-419B-B927-172F7F4356B7}
2014-12-23 22:46 - 2014-10-17 17:29 - 00000000 ____D () C:\Users\Lukáš\AppData\Roaming\vlc
2014-12-23 19:57 - 2014-10-16 18:52 - 00000918 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001Core.job
2014-12-23 17:13 - 2014-09-24 17:23 - 01749406 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-12-23 17:13 - 2014-09-24 16:39 - 00739720 _____ () C:\WINDOWS\system32\perfh005.dat
2014-12-23 17:13 - 2014-09-24 16:39 - 00151940 _____ () C:\WINDOWS\system32\perfc005.dat
2014-12-23 17:08 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-12-23 17:08 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-12-23 17:06 - 2014-10-15 10:30 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4263180883-3752867461-2742355753-1001
2014-12-22 18:52 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-12-21 22:25 - 2014-10-16 23:41 - 00000000 ____D () C:\Users\Lukáš
2014-12-20 16:42 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-12-19 15:56 - 2014-10-15 10:25 - 00000000 ____D () C:\Users\Lukáš\AppData\Local\Google
2014-12-19 12:48 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\addins
2014-12-19 12:32 - 2014-10-31 14:44 - 00000000 ____D () C:\Users\Lukáš\AppData\Roaming\DAEMON Tools Lite
2014-12-19 12:32 - 2014-10-29 18:03 - 00000000 ____D () C:\Users\Lukáš\AppData\Roaming\TeamViewer
2014-12-19 12:32 - 2014-10-20 15:22 - 00000000 ____D () C:\WINDOWS\Minidump
2014-12-19 12:32 - 2014-10-17 00:33 - 00000000 ___DC () C:\WINDOWS\Panther
2014-12-17 09:11 - 2013-11-06 07:04 - 00000000 ____D () C:\ProgramData\Lenovo
2014-12-13 08:36 - 2014-10-17 17:40 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-12 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-12-12 14:59 - 2013-11-06 06:52 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-12-11 14:01 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-12-11 07:03 - 2014-10-16 18:34 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-12-11 07:03 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2014-12-11 07:03 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2014-12-11 07:01 - 2014-10-16 18:34 - 112710672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-12-06 21:26 - 2014-10-15 10:15 - 00000000 ____D () C:\Users\Lukáš\AppData\Local\VirtualStore
2014-12-06 20:38 - 2014-10-31 12:16 - 00000000 ____D () C:\Users\Lukáš\AppData\Roaming\Webshare
2014-12-06 10:48 - 2014-11-06 19:21 - 00028160 ___SH () C:\Users\Lukáš\Desktop\Thumbs.db
2014-12-05 13:54 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-11-26 22:10 - 2014-09-24 20:08 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-11-26 22:10 - 2014-09-24 20:08 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

Files to move or delete:
====================
C:\ProgramData\Lenovo-31529.vbs


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-23 07:12




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (Windows8_OS) (Fixed) (Total:455.86 GB) (Free:359.72 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (Data) (Fixed) (Total:449.39 GB) (Free:413.97 GB) NTFS
Drive f: (Dead Island) (CDROM) (Total:5.55 GB) (Free:0 GB) UDF

Available physical RAM: 4430.56 MB
Total physical RAM: 8092.27 MB
Percentage of memory in use: 45%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 931.5 GB) (Disk ID: 59C83015)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001Core.job => C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001UA.job => C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm
AlternateDataStreams: C:\Users\Lukáš\OneDrive:ms-properties

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Luk��\Desktop" je 10 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\\Program Files (x86)\\TriDef 3D\\TriDef\\TriDefMediaPlayer\\TriDefMediaPlayer.exe"="C:\\Program Files (x86)\\TriDef 3D\\TriDef\\TriDefMediaPlayer\\TriDefMediaPlayer.exe:*:Enabled:TriDef 3D Media Player"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Shopdrop + AllCheapPrice

#10 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [95192 2013-03-09] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-03-08] (cyberlink)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-05] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [Facebook Update] => "C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [GoogleChromeAutoLaunch_032E85145F9C73D9B43D5ED2AF6BF5BD] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\RunOnce: [Adobe Speed Launcher] => 1419409714
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Policies\Explorer: [NoDrives] 0x00000003
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\MountPoints2: {78275e82-5daa-11e4-be76-48d224d3a8b5} - "F:\steambackup2.EXE" 
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\MountPoints2: {c89df8a2-6267-11e4-be77-48d224d3a8b5} - "G:\LG_PC_Programs.exe"
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => No File

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

2014-12-24 12:12 - 2014-12-24 12:13 - 00023395 _____ () C:\Users\Lukáš\Desktop\FRST.txt
2014-12-24 12:11 - 2014-12-24 12:11 - 00112640 _____ (forum.viry.cz) C:\Users\Lukáš\Desktop\FRSTLauncher.exe
2014-12-24 12:09 - 2014-12-24 12:09 - 00112640 _____ (forum.viry.cz) C:\Users\Lukáš\Desktop\Nepotvrzeno 944058.crdownload
2014-12-24 09:38 - 2014-12-24 09:38 - 00000149 _____ () C:\WINDOWS\setupact.log
2014-12-24 09:38 - 2014-12-24 09:38 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-12-23 17:09 - 2014-12-23 17:09 - 00000197 _____ () C:\WINDOWS\system32\2014-12-23-16-09-07.067-AvastVBoxSVC.exe-3036.log
2014-12-23 17:02 - 2014-12-23 16:40 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-12-23 16:41 - 2014-12-21 22:33 - 00007200 _____ () C:\zoek-results2014-12-21-213340.log
2014-12-21 22:34 - 2014-12-21 22:34 - 00000197 _____ () C:\WINDOWS\system32\2014-12-21-21-34-47.047-AvastVBoxSVC.exe-2452.log
2014-12-21 22:06 - 2014-12-23 17:09 - 00006267 _____ () C:\zoek-results.log
2014-12-21 22:05 - 2014-12-23 17:00 - 00000000 ____D () C:\zoek_backup
2014-12-21 22:04 - 2014-12-21 22:04 - 00000197 _____ () C:\WINDOWS\system32\2014-12-21-21-04-18.041-AvastVBoxSVC.exe-2700.log
2014-12-21 22:00 - 2014-12-21 22:00 - 01295360 _____ () C:\Users\Lukáš\Desktop\zoek.exe
2014-12-21 21:59 - 2014-12-21 21:59 - 02173952 _____ () C:\Users\Lukáš\Desktop\adwcleaner_4.106.exe
2014-12-19 14:58 - 2014-12-19 14:58 - 00038498 _____ () C:\Users\Lukáš\Desktop\log-rsit.zip
2014-12-19 14:42 - 2014-12-19 14:42 - 00000000 ____D () C:\rsit
2014-12-19 14:42 - 2014-12-19 14:42 - 00000000 ____D () C:\Program Files\trend micro
2014-12-19 14:37 - 2014-12-19 14:37 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-13-37-34.012-AvastVBoxSVC.exe-2572.log
2014-12-19 14:34 - 2014-12-21 22:01 - 00000000 ____D () C:\AdwCleaner
2014-12-19 13:59 - 2014-12-19 13:59 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-59-39.083-aswFe.exe-3688.log
2014-12-19 13:56 - 2014-12-19 13:59 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-56-06.087-aswFe.exe-7992.log
2014-12-19 13:56 - 2014-12-19 13:56 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-12-56-04.056-AvastVBoxSVC.exe-512.log
2014-12-19 13:38 - 2014-12-19 13:38 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-38-34.046-aswFe.exe-3056.log
2014-12-19 13:38 - 2014-12-19 13:38 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-12-38-32.061-AvastVBoxSVC.exe-1256.log
C:\ProgramData\Lenovo-31529.vbs

Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001Core.job => C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001UA.job => C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm

Hosts:
EmptyTemp:
Reboot:
End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
vapis
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 19 Pro 2014 14:44

Re: Shopdrop + AllCheapPrice

#11 Příspěvek od vapis »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-12-2014
Ran by Lukáš at 2014-12-27 10:55:37 Run:1
Running from C:\Users\Lukáš\Desktop
Loaded Profile: Lukáš (Available profiles: Lukáš)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [95192 2013-03-09] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-03-08] (cyberlink)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-05] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [Facebook Update] => "C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [GoogleChromeAutoLaunch_032E85145F9C73D9B43D5ED2AF6BF5BD] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\RunOnce: [Adobe Speed Launcher] => 1419409714
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Policies\Explorer: [NoDrives] 0x00000003
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\MountPoints2: {78275e82-5daa-11e4-be76-48d224d3a8b5} - "F:\steambackup2.EXE"
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\MountPoints2: {c89df8a2-6267-11e4-be77-48d224d3a8b5} - "G:\LG_PC_Programs.exe"
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => No File

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

2014-12-24 12:12 - 2014-12-24 12:13 - 00023395 _____ () C:\Users\Lukáš\Desktop\FRST.txt
2014-12-24 12:11 - 2014-12-24 12:11 - 00112640 _____ (forum.viry.cz) C:\Users\Lukáš\Desktop\FRSTLauncher.exe
2014-12-24 12:09 - 2014-12-24 12:09 - 00112640 _____ (forum.viry.cz) C:\Users\Lukáš\Desktop\Nepotvrzeno 944058.crdownload
2014-12-24 09:38 - 2014-12-24 09:38 - 00000149 _____ () C:\WINDOWS\setupact.log
2014-12-24 09:38 - 2014-12-24 09:38 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-12-23 17:09 - 2014-12-23 17:09 - 00000197 _____ () C:\WINDOWS\system32\2014-12-23-16-09-07.067-AvastVBoxSVC.exe-3036.log
2014-12-23 17:02 - 2014-12-23 16:40 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-12-23 16:41 - 2014-12-21 22:33 - 00007200 _____ () C:\zoek-results2014-12-21-213340.log
2014-12-21 22:34 - 2014-12-21 22:34 - 00000197 _____ () C:\WINDOWS\system32\2014-12-21-21-34-47.047-AvastVBoxSVC.exe-2452.log
2014-12-21 22:06 - 2014-12-23 17:09 - 00006267 _____ () C:\zoek-results.log
2014-12-21 22:05 - 2014-12-23 17:00 - 00000000 ____D () C:\zoek_backup
2014-12-21 22:04 - 2014-12-21 22:04 - 00000197 _____ () C:\WINDOWS\system32\2014-12-21-21-04-18.041-AvastVBoxSVC.exe-2700.log
2014-12-21 22:00 - 2014-12-21 22:00 - 01295360 _____ () C:\Users\Lukáš\Desktop\zoek.exe
2014-12-21 21:59 - 2014-12-21 21:59 - 02173952 _____ () C:\Users\Lukáš\Desktop\adwcleaner_4.106.exe
2014-12-19 14:58 - 2014-12-19 14:58 - 00038498 _____ () C:\Users\Lukáš\Desktop\log-rsit.zip
2014-12-19 14:42 - 2014-12-19 14:42 - 00000000 ____D () C:\rsit
2014-12-19 14:42 - 2014-12-19 14:42 - 00000000 ____D () C:\Program Files\trend micro
2014-12-19 14:37 - 2014-12-19 14:37 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-13-37-34.012-AvastVBoxSVC.exe-2572.log
2014-12-19 14:34 - 2014-12-21 22:01 - 00000000 ____D () C:\AdwCleaner
2014-12-19 13:59 - 2014-12-19 13:59 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-59-39.083-aswFe.exe-3688.log
2014-12-19 13:56 - 2014-12-19 13:59 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-56-06.087-aswFe.exe-7992.log
2014-12-19 13:56 - 2014-12-19 13:56 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-12-56-04.056-AvastVBoxSVC.exe-512.log
2014-12-19 13:38 - 2014-12-19 13:38 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-38-34.046-aswFe.exe-3056.log
2014-12-19 13:38 - 2014-12-19 13:38 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-12-38-32.061-AvastVBoxSVC.exe-1256.log
C:\ProgramData\Lenovo-31529.vbs

Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001Core.job => C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001UA.job => C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\RemoteControl10 => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\BDRegion => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\CLMLServer => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\UpdateP2GoShortCut => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value not found.
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Facebook Update => value deleted successfully.
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value deleted successfully.
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value deleted successfully.
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_032E85145F9C73D9B43D5ED2AF6BF5BD => value deleted successfully.
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Adobe Speed Launcher => Value not found.
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoDrives => value deleted successfully.
"HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{78275e82-5daa-11e4-be76-48d224d3a8b5}" => Key deleted successfully.
HKCR\CLSID\{78275e82-5daa-11e4-be76-48d224d3a8b5} => Key not found.
"HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c89df8a2-6267-11e4-be77-48d224d3a8b5}" => Key deleted successfully.
HKCR\CLSID\{c89df8a2-6267-11e4-be77-48d224d3a8b5} => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncBackedUp" => Key deleted successfully.
HKCR\CLSID\{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncPending" => Key deleted successfully.
HKCR\CLSID\{62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncRoot" => Key deleted successfully.
HKCR\CLSID\{A759AFF6-5851-457D-A540-F4ECED148351} => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncShared" => Key deleted successfully.
HKCR\CLSID\{1574C9EF-7D58-488F-B358-8B78C1538F51} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"C:\Users\Lukáš\Desktop\FRST.txt" => File/Directory not found.
"C:\Users\Lukáš\Desktop\FRSTLauncher.exe" => File/Directory not found.
"C:\Users\Lukáš\Desktop\Nepotvrzeno 944058.crdownload" => File/Directory not found.
C:\WINDOWS\setupact.log => Moved successfully.
C:\WINDOWS\setuperr.log => Moved successfully.
Could not move "C:\WINDOWS\system32\2014-12-23-16-09-07.067-AvastVBoxSVC.exe-3036.log" => Scheduled to move on reboot.
C:\WINDOWS\zoek-delete.exe => Moved successfully.
C:\zoek-results2014-12-21-213340.log => Moved successfully.
C:\WINDOWS\system32\2014-12-21-21-34-47.047-AvastVBoxSVC.exe-2452.log => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\WINDOWS\system32\2014-12-21-21-04-18.041-AvastVBoxSVC.exe-2700.log => Moved successfully.
C:\Users\Lukáš\Desktop\zoek.exe => Moved successfully.
C:\Users\Lukáš\Desktop\adwcleaner_4.106.exe => Moved successfully.
C:\Users\Lukáš\Desktop\log-rsit.zip => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\WINDOWS\system32\2014-12-19-13-37-34.012-AvastVBoxSVC.exe-2572.log => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\WINDOWS\system32\2014-12-19-12-59-39.083-aswFe.exe-3688.log => Moved successfully.
C:\WINDOWS\system32\2014-12-19-12-56-06.087-aswFe.exe-7992.log => Moved successfully.
C:\WINDOWS\system32\2014-12-19-12-56-04.056-AvastVBoxSVC.exe-512.log => Moved successfully.
C:\WINDOWS\system32\2014-12-19-12-38-34.046-aswFe.exe-3056.log => Moved successfully.
C:\WINDOWS\system32\2014-12-19-12-38-32.061-AvastVBoxSVC.exe-1256.log => Moved successfully.
C:\ProgramData\Lenovo-31529.vbs => Moved successfully.
C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001Core.job => Moved successfully.
C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001UA.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\ProgramData\Reprise => ":wupeogjxldtlfudivq`qsp`26hfm" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 741.1 MB temporary data.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-12-27 10:57:18)<=

C:\WINDOWS\system32\2014-12-23-16-09-07.067-AvastVBoxSVC.exe-3036.log => Is moved successfully.

==== End of Fixlog 10:57:18 ====
Nahoru
vapis
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 19 Pro 2014 14:44

Re: Shopdrop + AllCheapPrice

#12 Příspěvek od vapis »

Windows mi krátce po restartu vyhodili chybovou hlášku viz příloha.
Přílohy
error.JPG
error.JPG (17.52 KiB) Zobrazeno 1859 x
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Shopdrop + AllCheapPrice

#13 Příspěvek od vyosek »

:arrow: Spustte znovu FRST
  • Do okenka Search vlozte Lenovo-31529.vbs
  • Kliknete na Search Registry
  • Vysledny log mi sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
vapis
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 19 Pro 2014 14:44

Re: Shopdrop + AllCheapPrice

#14 Příspěvek od vapis »

Farbar Recovery Scan Tool (x64) Version: 28-12-2014
Ran by Lukáš at 2014-12-29 06:19:34
Running from C:\Users\Lukáš\Desktop
Boot Mode: Normal

================== Search Registry: "Lenovo-31529.vbs" ===========


====== End Of Search ======
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Shopdrop + AllCheapPrice

#15 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: DelFix https://toolslib.net/downloads/finish/2/
  • Stahnete a spustte
  • Ponechte zatrzitkou pouze u volby Remote disinfection tools
  • Kliknete na Run
:arrow: Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: Napiste ci jsou problemy a hlaska Lenova stale vyskakuje
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Vrátit se na „Řešení problémů, logy“