Ahoj,
včera se mi na počítači stala taková věc, zničeho nic přestal fungovat avast (asi po půl roce používání), následně vpravo dole v systray, vyskočila nějaká ikonka s červeným křížkem, a začalo to hlásit něco jako "všechny štíty vypnuté". Od té doby běží nějaký větrák v PC prakticky pořád naplno, začala blbnout myš (prakticky nefunguje rollování), zasekává se mi prohlížeč (stránky se načítají půl hodiny, nebo se vůbec nenačtou), a taky adblock už nefunguje jak má. Dřív reklamy ze stránek úplně zmizely, teď jsou tam místo nich bílé plochy, a ze stran každou chvíli skáčou zase šedivé plochy, bez ničeho, jen s křížkem vpravo nahoře na vypnutí.
Můžete pomoct? Navigovat mě co a jak?
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Počítač zlobí.. POMOC! :)
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 119428
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Počítač zlobí.. POMOC! :)
Zdravím!
Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .
Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Počítač zlobí.. POMOC! :)
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-02-2015
Ran by fleker (administrator) on FLEKER-PC on 14-02-2015 23:58:49
Running from Q:\Downloads
Loaded Profiles: fleker (Available profiles: fleker & berry)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\cmdagent.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\cavwp.exe
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\cistray.exe
(PcWinTech.com) C:\Program Files\CleanMem\Mini_Monitor.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Petr Laštovička) C:\Users\fleker\Downloads\hotkeyp\HotkeyP.exe
(BitTorrent Inc.) C:\Users\fleker\AppData\Roaming\uTorrent\uTorrent.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Ghisler Software GmbH) C:\Program Files\Total Commander\TOTALCMD.EXE
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\cis.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\calc.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Farbar) Q:\Downloads\FRST (1).exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [6667992 2014-05-18] (Realtek Semiconductor)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1243864 2015-02-04] (COMODO)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2015-02-10] (Oracle Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-02-14] (AVAST Software)
HKU\S-1-5-21-2860077999-920603677-2990381230-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [354304 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-2860077999-920603677-2990381230-1000\...\Run: [EPSON S22 Series] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGEE.EXE [200704 2009-09-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2860077999-920603677-2990381230-1000\...\Run: [HotkeyP] => C:\Users\fleker\Downloads\hotkeyp\HotkeyP.exe [60928 2014-05-03] (Petr Laštovička)
HKU\S-1-5-21-2860077999-920603677-2990381230-1000\...\Run: [uTorrent] => C:\Users\fleker\AppData\Roaming\uTorrent\uTorrent.exe [1374032 2015-01-16] (BitTorrent Inc.)
HKU\S-1-5-21-2860077999-920603677-2990381230-1000\...\RunOnce: [Application Restart #3] => C:\Program Files\Google\Chrome\Application\chrome.exe [843592 2015-02-06] (Google Inc.)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-06-01] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\COMODO Firewall.lnk
ShortcutTarget: COMODO Firewall.lnk -> C:\Program Files\Comodo\COMODO Internet Security\cistray.exe (COMODO)
Startup: C:\Users\fleker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google Chrome.lnk
ShortcutTarget: Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
Startup: C:\Users\fleker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sticky Notes.lnk
ShortcutTarget: Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
Startup: C:\Users\fleker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Total Commander.lnk
ShortcutTarget: Total Commander.lnk -> C:\Program Files\Total Commander\TOTALCMD.EXE (Ghisler Software GmbH)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
BootExecute: autocheck autochk * aswBoot.exe /M:1abd0d843 /dir:"C:\Program Files\AVAST Software\Avast"
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-2860077999-920603677-2990381230-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKU\S-1-5-21-2860077999-920603677-2990381230-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-2860077999-920603677-2990381230-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\S-1-5-21-2860077999-920603677-2990381230-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\S-1-5-21-2860077999-920603677-2990381230-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type= ... earchTerms}
SearchScopes: HKU\S-1-5-21-2860077999-920603677-2990381230-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ChromeFrame BHO -> {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} -> C:\Program Files\Google\Chrome Frame\Application\28.0.1500.72\npchrome_frame.dll No File
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files\Google\Chrome Frame\Application\28.0.1500.72\npchrome_frame.dll No File
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&t ... XXW1D2SX96
FireFox:
========
FF ProfilePath: C:\Users\fleker\AppData\Roaming\Mozilla\Firefox\Profiles\uuy52ycx.default
FF DefaultSearchEngine: Google (avast)
FF DefaultSearchUrl: https://www.google.com/search/?trackid=sp-006
FF SearchEngineOrder.1: Google (avast)
FF SelectedSearchEngine: Google (avast)
FF Homepage: https://www.google.com/?trackid=sp-006
FF Keyword.URL: https://www.google.com/search/?trackid=sp-006
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: TorchVLC -> C:\Users\fleker\AppData\Local\Torch\Plugins\Video\VLC\npvlc.dll No File
FF Plugin HKU\S-1-5-21-2860077999-920603677-2990381230-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\fleker\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\fleker\AppData\Roaming\Mozilla\Firefox\Profiles\uuy52ycx.default\searchplugins\google-avast.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\mystartsearch.xml
FF Extension: No Name - C:\Users\fleker\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2013-10-06]
FF Extension: No Name - C:\Users\fleker\AppData\Roaming\Mozilla\Firefox\profiles\extensions\searchplugins [2014-02-13]
FF Extension: jid0GaZOxvWNYcafEsmayJDIG3XXVi8jetpack - C:\Users\fleker\AppData\Roaming\Mozilla\Firefox\Profiles\uuy52ycx.default\Extensions\jid0-GaZOxvWNYcafEsmayJDIG3XXVi8@jetpack [2015-02-14]
FF HKLM\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\fleker\AppData\Roaming\Mozilla\Firefox\Profiles\uuy52ycx.default\extensions\faststartff@gmail.com
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-02-14]
StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.mystartsearch.com/?type=sc&t ... XXW1D2SX96
Chrome:
=======
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=14144 ... XXW1D2SX96"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (TooManyTabs for Chrome) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\amigcgbheognjmfkaieeeadojiibgbdp [2014-08-05]
CHR Extension: (Dokumenty Google) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-29]
CHR Extension: (Disk Google) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-29]
CHR Extension: (YouTube) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-29]
CHR Extension: (OneTab) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2014-08-05]
CHR Extension: (Vyhledávání Google) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-29]
CHR Extension: (Tabs Outliner) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\eggkanocgddhmamlbiijnphhppkpkmkl [2014-08-05]
CHR Extension: (Ads Removal) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen [2014-08-27]
CHR Extension: (Auto Refresh) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifooldnmmcmlbdennkpdnlnbgbmfalko [2014-09-11]
CHR Extension: (Tabs saver) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmabfaomlcjlnplkoflgenkmmpilmead [2014-09-01]
CHR Extension: (Linkclump) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfpjkncokllnfokkgpkobnkbkmelfefj [2014-05-29]
CHR Extension: (TabHamster) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfjjmjmnplabnplceaekkjcmdddokee [2014-08-05]
CHR Extension: (nedjejdfkkjgebciefdfofjhmeogiaga) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga [2015-02-14]
CHR Extension: (FreshStart - Cross Browser Session Manager) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmidkjogcjnnlfimjcedenagjfacpobb [2014-11-13]
CHR Extension: (Peněženka Google) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-05]
CHR Extension: (Context Menu Search) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocpcmghnefmdhljkoiapafejjohldoga [2014-05-29]
CHR Extension: (Gmail) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-29]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-02-14]
CHR HKLM\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma.crx [2014-10-28]
Opera:
=======
StartMenuInternet: (HKLM) Opera - c:\program files\opera\opera.exe http://www.mystartsearch.com/?type=sc&t ... XXW1D2SX96
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2012-12-19] (Advanced Micro Devices, Inc.) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-02-14] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3192344 2015-02-14] (Avast Software)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5868440 2015-02-04] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [1664216 2015-02-04] (COMODO)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S2 Update SourceApp; "C:\Program Files\SourceApp\updateSourceApp.exe" [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [48256 2012-04-09] (Advanced Micro Devices)
R0 asahci32; C:\Windows\System32\DRIVERS\asahci32.sys [40344 2013-01-10] (Asmedia Technology)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2015-02-14] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2015-02-14] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2015-02-14] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2015-02-14] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787800 2015-02-14] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423784 2015-02-14] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [91496 2015-02-14] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206248 2015-02-14] ()
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [17088 2015-01-30] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [618072 2015-01-30] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [41248 2015-01-30] (COMODO)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-06-01] (DT Soft Ltd)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [43368 2013-05-23] (ThreatTrack Security)
S3 glavcam; C:\Windows\System32\DRIVERS\glavcam.sys [64384 2014-05-25] (Windows (R) Codename Longhorn DDK provider) [File not signed]
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [91200 2015-01-30] (COMODO)
R3 rusb3hub; C:\Windows\System32\DRIVERS\rusb3hub.sys [91016 2012-08-27] (Renesas Electronics Corporation)
R3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [181128 2012-08-27] (Renesas Electronics Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [218192 2015-02-14] (Avast Software)
R1 {72074a89-563a-4402-894b-cfea7ec6858b}Gw; C:\Windows\System32\drivers\{72074a89-563a-4402-894b-cfea7ec6858b}Gw.sys [43152 2015-02-10] (StdLib)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-14 23:58 - 2015-02-14 23:58 - 00000000 ____D () C:\FRST
2015-02-14 23:55 - 2015-02-14 23:55 - 00112640 _____ (forum.viry.cz) C:\Users\fleker\Downloads\FRSTLauncher(1).exe
2015-02-14 23:55 - 2015-02-14 23:55 - 00029696 _____ () C:\Users\fleker\AppData\Local\MSGBOX.EXE
2015-02-14 23:55 - 2015-02-14 23:55 - 00015327 _____ () C:\Users\fleker\Desktop\LM.bat
2015-02-14 23:54 - 2015-02-14 23:54 - 00112640 _____ (forum.viry.cz) C:\Users\fleker\Downloads\FRSTLauncher.exe
2015-02-14 21:08 - 2015-02-14 21:14 - 00000247 _____ () C:\Windows\system32\2015-02-14-20-08-12.063-aswFe.exe-1556.log
2015-02-14 21:07 - 2015-02-14 21:07 - 00000197 _____ () C:\Windows\system32\2015-02-14-20-07-56.065-AvastVBoxSVC.exe-2932.log
2015-02-14 20:58 - 2015-02-14 20:59 - 00000000 ____D () C:\Windows\system32\vbox
2015-02-14 20:43 - 2015-02-14 20:43 - 00002005 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-02-14 20:41 - 2015-02-14 20:41 - 00291352 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-02-14 20:41 - 2015-02-14 20:41 - 00091496 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-02-14 20:41 - 2015-02-14 20:41 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-02-14 20:41 - 2015-02-14 20:41 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-02-14 20:35 - 2015-02-14 20:35 - 00000000 ____D () C:\Users\fleker\AppData\Roaming\AVAST Software
2015-02-14 20:34 - 2015-02-14 20:42 - 00787800 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2015-02-14 20:34 - 2015-02-14 20:42 - 00423784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2015-02-14 20:34 - 2015-02-14 20:41 - 00206248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-02-14 20:34 - 2015-02-14 20:41 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-02-14 20:34 - 2015-02-14 20:41 - 00070384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-02-14 20:34 - 2015-02-14 20:41 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-02-14 20:34 - 2015-02-14 20:34 - 00000000 ____D () C:\Program Files\AVAST Software
2015-02-13 01:49 - 2015-02-13 01:49 - 04300800 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-13 01:49 - 2015-02-13 01:49 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-11 06:41 - 2015-02-11 06:41 - 02380288 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 06:41 - 2015-02-11 06:41 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 06:41 - 2015-02-11 06:41 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 06:41 - 2015-02-11 06:41 - 00369968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 06:41 - 2015-02-11 06:41 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 06:41 - 2015-02-11 06:41 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 06:41 - 2015-02-11 06:41 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 06:41 - 2015-02-11 06:41 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 06:41 - 2015-02-11 06:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 06:41 - 2015-02-11 06:41 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 06:41 - 2015-02-11 06:41 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 06:41 - 2015-02-11 06:41 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 06:41 - 2015-02-11 06:41 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 06:40 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-02-11 06:40 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 06:40 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 06:39 - 2015-02-04 03:54 - 00482304 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 06:39 - 2015-02-04 03:53 - 00767488 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 06:39 - 2015-02-04 03:53 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 06:39 - 2015-02-04 03:53 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 06:39 - 2015-02-04 03:53 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 06:39 - 2015-02-04 03:53 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 06:39 - 2015-02-04 03:49 - 00886784 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 06:39 - 2015-01-28 00:36 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 06:38 - 2015-02-11 06:38 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 06:38 - 2015-02-11 06:38 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 06:38 - 2015-02-11 06:38 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 06:38 - 2015-02-11 06:38 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 06:38 - 2015-02-11 06:38 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 06:38 - 2015-02-11 06:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 06:38 - 2015-02-11 06:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 19740160 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 12829184 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 02277888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 06:36 - 2015-02-11 06:36 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 06:36 - 2015-02-11 06:36 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 06:36 - 2015-02-11 06:36 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00342712 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 06:36 - 2015-02-11 06:36 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 06:36 - 2015-02-11 06:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 06:36 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 06:33 - 2015-02-11 06:33 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 06:32 - 2015-02-11 06:32 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 06:32 - 2015-02-11 06:32 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-10 21:45 - 2015-02-14 21:18 - 00000000 ____D () C:\Program Files\SensePlus
2015-02-10 21:44 - 2015-02-10 21:44 - 00043152 _____ (StdLib) C:\Windows\system32\Drivers\{72074a89-563a-4402-894b-cfea7ec6858b}Gw.sys
2015-02-10 21:36 - 2015-02-10 21:36 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2015-02-10 21:36 - 2015-02-10 21:36 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2015-02-10 21:36 - 2015-02-10 21:36 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-02-10 21:36 - 2015-02-10 21:36 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-02-10 21:36 - 2015-02-10 21:36 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-02-10 21:36 - 2015-02-10 21:36 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-02-10 21:36 - 2015-02-10 21:36 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-02-10 21:35 - 2015-02-12 22:07 - 00000000 ____D () C:\Program Files\globalUpdate
2015-02-10 21:35 - 2015-02-10 21:35 - 00000000 ____D () C:\Users\fleker\AppData\Local\globalUpdate
2015-02-10 21:34 - 2015-02-10 22:04 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
2015-02-10 21:34 - 2015-02-10 21:34 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper
2015-02-10 21:34 - 2015-02-10 21:34 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2015-02-10 21:34 - 2015-02-10 21:34 - 00000000 ____D () C:\Users\fleker\AppData\Local\CrashRpt
2015-01-28 10:49 - 2015-01-28 10:49 - 00003584 _____ () C:\Users\fleker\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-01-18 00:47 - 2015-01-18 00:47 - 00001645 _____ () C:\Users\fleker\Desktop\uTorrent – zástupce.lnk
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-14 23:59 - 2013-05-30 12:52 - 00000000 ____D () C:\Users\fleker\AppData\Roaming\uTorrent
2015-02-14 23:43 - 2013-05-30 11:57 - 01259352 _____ () C:\Windows\WindowsUpdate.log
2015-02-14 23:28 - 2014-12-22 17:10 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-14 23:17 - 2013-05-30 12:31 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-14 22:27 - 2013-06-01 15:39 - 00000000 ____D () C:\Users\fleker\AppData\Roaming\vlc
2015-02-14 21:03 - 2009-07-14 05:34 - 00022656 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-14 21:03 - 2009-07-14 05:34 - 00022656 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-14 21:02 - 2013-05-30 11:58 - 01720276 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-14 20:57 - 2014-08-07 00:23 - 00001792 _____ () C:\Users\fleker\Desktop\KMP Games.lnk
2015-02-14 20:57 - 2013-09-05 14:19 - 00000932 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-02-14 20:57 - 2013-09-05 14:19 - 00000932 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-02-14 20:56 - 2014-09-11 06:37 - 00003805 _____ () C:\Windows\setupact.log
2015-02-14 20:56 - 2014-09-11 06:36 - 00803876 _____ () C:\Windows\PFRO.log
2015-02-14 20:56 - 2013-05-30 12:31 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-14 20:56 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-14 20:31 - 2013-05-31 14:02 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-02-13 05:06 - 2014-01-24 14:42 - 00000000 ____D () C:\Users\fleker\Desktop\Na výmaz
2015-02-12 17:46 - 2014-10-10 18:30 - 00000000 ____D () C:\Users\fleker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jitbit Macro Recorder
2015-02-12 17:46 - 2013-05-30 12:31 - 00000000 ____D () C:\Users\fleker\AppData\Local\Deployment
2015-02-12 17:45 - 2014-12-24 01:06 - 00000000 ____D () C:\Program Files\Natipuj
2015-02-12 17:45 - 2014-03-17 02:11 - 00000000 ____D () C:\Program Files\28kviz
2015-02-12 17:44 - 2013-07-09 12:27 - 00000000 ____D () C:\Users\fleker\AppData\Local\CrashDumps
2015-02-12 16:07 - 2013-12-13 08:05 - 00000000 ____D () C:\Windows\rescache
2015-02-12 15:41 - 2009-07-14 05:33 - 03805776 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-12 15:40 - 2014-12-11 03:32 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-12 15:40 - 2014-05-07 02:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-12 03:23 - 2013-08-15 02:08 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-12 03:07 - 2013-05-31 14:25 - 113756392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-12 03:06 - 2013-06-01 18:18 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-11 03:22 - 2013-06-20 22:23 - 00000000 ____D () C:\Users\fleker\Desktop\CASKRMENI
2015-02-10 22:04 - 2013-07-10 23:38 - 00000000 ____D () C:\Program Files\Seznam.cz
2015-02-10 22:04 - 2013-07-10 23:37 - 00000000 ____D () C:\Users\fleker\AppData\Roaming\Seznam.cz
2015-02-10 22:03 - 2013-05-30 20:48 - 00000000 ____D () C:\ProgramData\TEMP
2015-02-10 21:56 - 2009-07-14 03:04 - 00000895 _____ () C:\Windows\win.ini
2015-02-07 13:09 - 2013-09-30 04:50 - 00003790 _____ () C:\Windows\system32\Drivers\fvstore.dat
2015-02-05 16:28 - 2014-12-22 17:10 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-02-05 16:28 - 2014-12-22 17:10 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-01-30 13:27 - 2013-01-24 21:43 - 00386768 _____ (COMODO) C:\Windows\system32\guard32.dll
2015-01-30 13:27 - 2013-01-24 21:43 - 00033520 _____ (COMODO) C:\Windows\system32\cmdcsr.dll
2015-01-30 13:27 - 2013-01-24 21:42 - 00286424 _____ (COMODO) C:\Windows\system32\cmdvrt32.dll
2015-01-30 13:27 - 2013-01-24 21:42 - 00040664 _____ (COMODO) C:\Windows\system32\cmdkbd32.dll
2015-01-30 13:27 - 2013-01-16 18:51 - 00618072 _____ (COMODO) C:\Windows\system32\Drivers\cmdguard.sys
2015-01-30 13:27 - 2013-01-16 18:51 - 00091200 _____ (COMODO) C:\Windows\system32\Drivers\inspect.sys
2015-01-30 13:27 - 2013-01-16 18:51 - 00041248 _____ (COMODO) C:\Windows\system32\Drivers\cmdhlp.sys
2015-01-30 13:27 - 2013-01-16 18:51 - 00017088 _____ (COMODO) C:\Windows\system32\Drivers\cmderd.sys
2015-01-24 16:27 - 2013-06-12 16:42 - 00000000 ____D () C:\Users\fleker\AppData\Local\PokerStars
==================== Files in the root of some directories =======
2013-06-28 13:32 - 2013-06-28 13:32 - 0411509 _____ () C:\Program Files\GSpot270a.zip
2015-01-28 10:49 - 2015-01-28 10:49 - 0003584 _____ () C:\Users\fleker\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-07-31 08:00 - 2013-07-31 08:00 - 0000058 _____ () C:\Users\fleker\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2015-02-14 23:55 - 2015-02-14 23:55 - 0029696 _____ () C:\Users\fleker\AppData\Local\MSGBOX.EXE
2013-05-31 14:13 - 2014-08-29 13:27 - 0007605 _____ () C:\Users\fleker\AppData\Local\Resmon.ResmonCfg
2014-05-18 18:42 - 2014-05-18 18:42 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Some content of TEMP:
====================
C:\Users\fleker\AppData\Local\Temp\appshat_generic.exe
C:\Users\fleker\AppData\Local\Temp\autorun.exe
C:\Users\fleker\AppData\Local\Temp\bdfilters.dll
C:\Users\fleker\AppData\Local\Temp\bitool.dll
C:\Users\fleker\AppData\Local\Temp\cabex.dll
C:\Users\fleker\AppData\Local\Temp\FreeFrameSDK_1.0.0.3_Setup.exe
C:\Users\fleker\AppData\Local\Temp\IeSearchProvider5057390602329170748.exe
C:\Users\fleker\AppData\Local\Temp\InstallGenieo.exe
C:\Users\fleker\AppData\Local\Temp\jreInstall.exe
C:\Users\fleker\AppData\Local\Temp\listicka-partner-13415-1.1.2-offline.exe
C:\Users\fleker\AppData\Local\Temp\lua5.1.dll
C:\Users\fleker\AppData\Local\Temp\lua51.dll
C:\Users\fleker\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\fleker\AppData\Local\Temp\tu17p84.exe
C:\Users\fleker\AppData\Local\Temp\unelevate.exe
C:\Users\fleker\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\fleker\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe
C:\Users\fleker\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-02-11 05:41
==================== End Of Log ============================
Ran by fleker (administrator) on FLEKER-PC on 14-02-2015 23:58:49
Running from Q:\Downloads
Loaded Profiles: fleker (Available profiles: fleker & berry)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\cmdagent.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\cavwp.exe
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\cistray.exe
(PcWinTech.com) C:\Program Files\CleanMem\Mini_Monitor.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Petr Laštovička) C:\Users\fleker\Downloads\hotkeyp\HotkeyP.exe
(BitTorrent Inc.) C:\Users\fleker\AppData\Roaming\uTorrent\uTorrent.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Ghisler Software GmbH) C:\Program Files\Total Commander\TOTALCMD.EXE
(COMODO) C:\Program Files\Comodo\COMODO Internet Security\cis.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\calc.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Farbar) Q:\Downloads\FRST (1).exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [6667992 2014-05-18] (Realtek Semiconductor)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1243864 2015-02-04] (COMODO)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2015-02-10] (Oracle Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-02-14] (AVAST Software)
HKU\S-1-5-21-2860077999-920603677-2990381230-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [354304 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-2860077999-920603677-2990381230-1000\...\Run: [EPSON S22 Series] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGEE.EXE [200704 2009-09-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2860077999-920603677-2990381230-1000\...\Run: [HotkeyP] => C:\Users\fleker\Downloads\hotkeyp\HotkeyP.exe [60928 2014-05-03] (Petr Laštovička)
HKU\S-1-5-21-2860077999-920603677-2990381230-1000\...\Run: [uTorrent] => C:\Users\fleker\AppData\Roaming\uTorrent\uTorrent.exe [1374032 2015-01-16] (BitTorrent Inc.)
HKU\S-1-5-21-2860077999-920603677-2990381230-1000\...\RunOnce: [Application Restart #3] => C:\Program Files\Google\Chrome\Application\chrome.exe [843592 2015-02-06] (Google Inc.)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-06-01] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\COMODO Firewall.lnk
ShortcutTarget: COMODO Firewall.lnk -> C:\Program Files\Comodo\COMODO Internet Security\cistray.exe (COMODO)
Startup: C:\Users\fleker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google Chrome.lnk
ShortcutTarget: Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
Startup: C:\Users\fleker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sticky Notes.lnk
ShortcutTarget: Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
Startup: C:\Users\fleker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Total Commander.lnk
ShortcutTarget: Total Commander.lnk -> C:\Program Files\Total Commander\TOTALCMD.EXE (Ghisler Software GmbH)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
BootExecute: autocheck autochk * aswBoot.exe /M:1abd0d843 /dir:"C:\Program Files\AVAST Software\Avast"
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-2860077999-920603677-2990381230-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKU\S-1-5-21-2860077999-920603677-2990381230-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-2860077999-920603677-2990381230-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\S-1-5-21-2860077999-920603677-2990381230-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\S-1-5-21-2860077999-920603677-2990381230-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type= ... earchTerms}
SearchScopes: HKU\S-1-5-21-2860077999-920603677-2990381230-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ChromeFrame BHO -> {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} -> C:\Program Files\Google\Chrome Frame\Application\28.0.1500.72\npchrome_frame.dll No File
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files\Google\Chrome Frame\Application\28.0.1500.72\npchrome_frame.dll No File
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&t ... XXW1D2SX96
FireFox:
========
FF ProfilePath: C:\Users\fleker\AppData\Roaming\Mozilla\Firefox\Profiles\uuy52ycx.default
FF DefaultSearchEngine: Google (avast)
FF DefaultSearchUrl: https://www.google.com/search/?trackid=sp-006
FF SearchEngineOrder.1: Google (avast)
FF SelectedSearchEngine: Google (avast)
FF Homepage: https://www.google.com/?trackid=sp-006
FF Keyword.URL: https://www.google.com/search/?trackid=sp-006
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: TorchVLC -> C:\Users\fleker\AppData\Local\Torch\Plugins\Video\VLC\npvlc.dll No File
FF Plugin HKU\S-1-5-21-2860077999-920603677-2990381230-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\fleker\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\fleker\AppData\Roaming\Mozilla\Firefox\Profiles\uuy52ycx.default\searchplugins\google-avast.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\mystartsearch.xml
FF Extension: No Name - C:\Users\fleker\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2013-10-06]
FF Extension: No Name - C:\Users\fleker\AppData\Roaming\Mozilla\Firefox\profiles\extensions\searchplugins [2014-02-13]
FF Extension: jid0GaZOxvWNYcafEsmayJDIG3XXVi8jetpack - C:\Users\fleker\AppData\Roaming\Mozilla\Firefox\Profiles\uuy52ycx.default\Extensions\jid0-GaZOxvWNYcafEsmayJDIG3XXVi8@jetpack [2015-02-14]
FF HKLM\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\fleker\AppData\Roaming\Mozilla\Firefox\Profiles\uuy52ycx.default\extensions\faststartff@gmail.com
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-02-14]
StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.mystartsearch.com/?type=sc&t ... XXW1D2SX96
Chrome:
=======
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=14144 ... XXW1D2SX96"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (TooManyTabs for Chrome) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\amigcgbheognjmfkaieeeadojiibgbdp [2014-08-05]
CHR Extension: (Dokumenty Google) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-29]
CHR Extension: (Disk Google) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-29]
CHR Extension: (YouTube) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-29]
CHR Extension: (OneTab) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2014-08-05]
CHR Extension: (Vyhledávání Google) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-29]
CHR Extension: (Tabs Outliner) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\eggkanocgddhmamlbiijnphhppkpkmkl [2014-08-05]
CHR Extension: (Ads Removal) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen [2014-08-27]
CHR Extension: (Auto Refresh) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifooldnmmcmlbdennkpdnlnbgbmfalko [2014-09-11]
CHR Extension: (Tabs saver) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmabfaomlcjlnplkoflgenkmmpilmead [2014-09-01]
CHR Extension: (Linkclump) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfpjkncokllnfokkgpkobnkbkmelfefj [2014-05-29]
CHR Extension: (TabHamster) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfjjmjmnplabnplceaekkjcmdddokee [2014-08-05]
CHR Extension: (nedjejdfkkjgebciefdfofjhmeogiaga) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga [2015-02-14]
CHR Extension: (FreshStart - Cross Browser Session Manager) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmidkjogcjnnlfimjcedenagjfacpobb [2014-11-13]
CHR Extension: (Peněženka Google) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-05]
CHR Extension: (Context Menu Search) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocpcmghnefmdhljkoiapafejjohldoga [2014-05-29]
CHR Extension: (Gmail) - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-29]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-02-14]
CHR HKLM\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\fleker\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma.crx [2014-10-28]
Opera:
=======
StartMenuInternet: (HKLM) Opera - c:\program files\opera\opera.exe http://www.mystartsearch.com/?type=sc&t ... XXW1D2SX96
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2012-12-19] (Advanced Micro Devices, Inc.) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-02-14] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3192344 2015-02-14] (Avast Software)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5868440 2015-02-04] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [1664216 2015-02-04] (COMODO)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S2 Update SourceApp; "C:\Program Files\SourceApp\updateSourceApp.exe" [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [48256 2012-04-09] (Advanced Micro Devices)
R0 asahci32; C:\Windows\System32\DRIVERS\asahci32.sys [40344 2013-01-10] (Asmedia Technology)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2015-02-14] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2015-02-14] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2015-02-14] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2015-02-14] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787800 2015-02-14] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423784 2015-02-14] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [91496 2015-02-14] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206248 2015-02-14] ()
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [17088 2015-01-30] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [618072 2015-01-30] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [41248 2015-01-30] (COMODO)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-06-01] (DT Soft Ltd)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [43368 2013-05-23] (ThreatTrack Security)
S3 glavcam; C:\Windows\System32\DRIVERS\glavcam.sys [64384 2014-05-25] (Windows (R) Codename Longhorn DDK provider) [File not signed]
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [91200 2015-01-30] (COMODO)
R3 rusb3hub; C:\Windows\System32\DRIVERS\rusb3hub.sys [91016 2012-08-27] (Renesas Electronics Corporation)
R3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [181128 2012-08-27] (Renesas Electronics Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [218192 2015-02-14] (Avast Software)
R1 {72074a89-563a-4402-894b-cfea7ec6858b}Gw; C:\Windows\System32\drivers\{72074a89-563a-4402-894b-cfea7ec6858b}Gw.sys [43152 2015-02-10] (StdLib)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-14 23:58 - 2015-02-14 23:58 - 00000000 ____D () C:\FRST
2015-02-14 23:55 - 2015-02-14 23:55 - 00112640 _____ (forum.viry.cz) C:\Users\fleker\Downloads\FRSTLauncher(1).exe
2015-02-14 23:55 - 2015-02-14 23:55 - 00029696 _____ () C:\Users\fleker\AppData\Local\MSGBOX.EXE
2015-02-14 23:55 - 2015-02-14 23:55 - 00015327 _____ () C:\Users\fleker\Desktop\LM.bat
2015-02-14 23:54 - 2015-02-14 23:54 - 00112640 _____ (forum.viry.cz) C:\Users\fleker\Downloads\FRSTLauncher.exe
2015-02-14 21:08 - 2015-02-14 21:14 - 00000247 _____ () C:\Windows\system32\2015-02-14-20-08-12.063-aswFe.exe-1556.log
2015-02-14 21:07 - 2015-02-14 21:07 - 00000197 _____ () C:\Windows\system32\2015-02-14-20-07-56.065-AvastVBoxSVC.exe-2932.log
2015-02-14 20:58 - 2015-02-14 20:59 - 00000000 ____D () C:\Windows\system32\vbox
2015-02-14 20:43 - 2015-02-14 20:43 - 00002005 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-02-14 20:41 - 2015-02-14 20:41 - 00291352 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-02-14 20:41 - 2015-02-14 20:41 - 00091496 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-02-14 20:41 - 2015-02-14 20:41 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-02-14 20:41 - 2015-02-14 20:41 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-02-14 20:35 - 2015-02-14 20:35 - 00000000 ____D () C:\Users\fleker\AppData\Roaming\AVAST Software
2015-02-14 20:34 - 2015-02-14 20:42 - 00787800 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2015-02-14 20:34 - 2015-02-14 20:42 - 00423784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2015-02-14 20:34 - 2015-02-14 20:41 - 00206248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-02-14 20:34 - 2015-02-14 20:41 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-02-14 20:34 - 2015-02-14 20:41 - 00070384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-02-14 20:34 - 2015-02-14 20:41 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-02-14 20:34 - 2015-02-14 20:34 - 00000000 ____D () C:\Program Files\AVAST Software
2015-02-13 01:49 - 2015-02-13 01:49 - 04300800 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-13 01:49 - 2015-02-13 01:49 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-11 06:41 - 2015-02-11 06:41 - 02380288 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 06:41 - 2015-02-11 06:41 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 06:41 - 2015-02-11 06:41 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 06:41 - 2015-02-11 06:41 - 00369968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 06:41 - 2015-02-11 06:41 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 06:41 - 2015-02-11 06:41 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 06:41 - 2015-02-11 06:41 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 06:41 - 2015-02-11 06:41 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 06:41 - 2015-02-11 06:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 06:41 - 2015-02-11 06:41 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 06:41 - 2015-02-11 06:41 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 06:41 - 2015-02-11 06:41 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 06:41 - 2015-02-11 06:41 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 06:40 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-02-11 06:40 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 06:40 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 06:39 - 2015-02-04 03:54 - 00482304 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 06:39 - 2015-02-04 03:53 - 00767488 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 06:39 - 2015-02-04 03:53 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 06:39 - 2015-02-04 03:53 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 06:39 - 2015-02-04 03:53 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 06:39 - 2015-02-04 03:53 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 06:39 - 2015-02-04 03:49 - 00886784 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 06:39 - 2015-01-28 00:36 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 06:38 - 2015-02-11 06:38 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 06:38 - 2015-02-11 06:38 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 06:38 - 2015-02-11 06:38 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 06:38 - 2015-02-11 06:38 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 06:38 - 2015-02-11 06:38 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 06:38 - 2015-02-11 06:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 06:38 - 2015-02-11 06:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 19740160 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 12829184 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 02277888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 06:36 - 2015-02-11 06:36 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 06:36 - 2015-02-11 06:36 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 06:36 - 2015-02-11 06:36 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00342712 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 06:36 - 2015-02-11 06:36 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 06:36 - 2015-02-11 06:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 06:36 - 2015-02-11 06:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 06:36 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 06:33 - 2015-02-11 06:33 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 06:32 - 2015-02-11 06:32 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 06:32 - 2015-02-11 06:32 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-10 21:45 - 2015-02-14 21:18 - 00000000 ____D () C:\Program Files\SensePlus
2015-02-10 21:44 - 2015-02-10 21:44 - 00043152 _____ (StdLib) C:\Windows\system32\Drivers\{72074a89-563a-4402-894b-cfea7ec6858b}Gw.sys
2015-02-10 21:36 - 2015-02-10 21:36 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2015-02-10 21:36 - 2015-02-10 21:36 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2015-02-10 21:36 - 2015-02-10 21:36 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-02-10 21:36 - 2015-02-10 21:36 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-02-10 21:36 - 2015-02-10 21:36 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-02-10 21:36 - 2015-02-10 21:36 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-02-10 21:36 - 2015-02-10 21:36 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-02-10 21:35 - 2015-02-12 22:07 - 00000000 ____D () C:\Program Files\globalUpdate
2015-02-10 21:35 - 2015-02-10 21:35 - 00000000 ____D () C:\Users\fleker\AppData\Local\globalUpdate
2015-02-10 21:34 - 2015-02-10 22:04 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
2015-02-10 21:34 - 2015-02-10 21:34 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper
2015-02-10 21:34 - 2015-02-10 21:34 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2015-02-10 21:34 - 2015-02-10 21:34 - 00000000 ____D () C:\Users\fleker\AppData\Local\CrashRpt
2015-01-28 10:49 - 2015-01-28 10:49 - 00003584 _____ () C:\Users\fleker\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-01-18 00:47 - 2015-01-18 00:47 - 00001645 _____ () C:\Users\fleker\Desktop\uTorrent – zástupce.lnk
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-14 23:59 - 2013-05-30 12:52 - 00000000 ____D () C:\Users\fleker\AppData\Roaming\uTorrent
2015-02-14 23:43 - 2013-05-30 11:57 - 01259352 _____ () C:\Windows\WindowsUpdate.log
2015-02-14 23:28 - 2014-12-22 17:10 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-14 23:17 - 2013-05-30 12:31 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-14 22:27 - 2013-06-01 15:39 - 00000000 ____D () C:\Users\fleker\AppData\Roaming\vlc
2015-02-14 21:03 - 2009-07-14 05:34 - 00022656 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-14 21:03 - 2009-07-14 05:34 - 00022656 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-14 21:02 - 2013-05-30 11:58 - 01720276 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-14 20:57 - 2014-08-07 00:23 - 00001792 _____ () C:\Users\fleker\Desktop\KMP Games.lnk
2015-02-14 20:57 - 2013-09-05 14:19 - 00000932 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-02-14 20:57 - 2013-09-05 14:19 - 00000932 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-02-14 20:56 - 2014-09-11 06:37 - 00003805 _____ () C:\Windows\setupact.log
2015-02-14 20:56 - 2014-09-11 06:36 - 00803876 _____ () C:\Windows\PFRO.log
2015-02-14 20:56 - 2013-05-30 12:31 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-14 20:56 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-14 20:31 - 2013-05-31 14:02 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-02-13 05:06 - 2014-01-24 14:42 - 00000000 ____D () C:\Users\fleker\Desktop\Na výmaz
2015-02-12 17:46 - 2014-10-10 18:30 - 00000000 ____D () C:\Users\fleker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jitbit Macro Recorder
2015-02-12 17:46 - 2013-05-30 12:31 - 00000000 ____D () C:\Users\fleker\AppData\Local\Deployment
2015-02-12 17:45 - 2014-12-24 01:06 - 00000000 ____D () C:\Program Files\Natipuj
2015-02-12 17:45 - 2014-03-17 02:11 - 00000000 ____D () C:\Program Files\28kviz
2015-02-12 17:44 - 2013-07-09 12:27 - 00000000 ____D () C:\Users\fleker\AppData\Local\CrashDumps
2015-02-12 16:07 - 2013-12-13 08:05 - 00000000 ____D () C:\Windows\rescache
2015-02-12 15:41 - 2009-07-14 05:33 - 03805776 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-12 15:40 - 2014-12-11 03:32 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-12 15:40 - 2014-05-07 02:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-12 03:23 - 2013-08-15 02:08 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-12 03:07 - 2013-05-31 14:25 - 113756392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-12 03:06 - 2013-06-01 18:18 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-11 03:22 - 2013-06-20 22:23 - 00000000 ____D () C:\Users\fleker\Desktop\CASKRMENI
2015-02-10 22:04 - 2013-07-10 23:38 - 00000000 ____D () C:\Program Files\Seznam.cz
2015-02-10 22:04 - 2013-07-10 23:37 - 00000000 ____D () C:\Users\fleker\AppData\Roaming\Seznam.cz
2015-02-10 22:03 - 2013-05-30 20:48 - 00000000 ____D () C:\ProgramData\TEMP
2015-02-10 21:56 - 2009-07-14 03:04 - 00000895 _____ () C:\Windows\win.ini
2015-02-07 13:09 - 2013-09-30 04:50 - 00003790 _____ () C:\Windows\system32\Drivers\fvstore.dat
2015-02-05 16:28 - 2014-12-22 17:10 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-02-05 16:28 - 2014-12-22 17:10 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-01-30 13:27 - 2013-01-24 21:43 - 00386768 _____ (COMODO) C:\Windows\system32\guard32.dll
2015-01-30 13:27 - 2013-01-24 21:43 - 00033520 _____ (COMODO) C:\Windows\system32\cmdcsr.dll
2015-01-30 13:27 - 2013-01-24 21:42 - 00286424 _____ (COMODO) C:\Windows\system32\cmdvrt32.dll
2015-01-30 13:27 - 2013-01-24 21:42 - 00040664 _____ (COMODO) C:\Windows\system32\cmdkbd32.dll
2015-01-30 13:27 - 2013-01-16 18:51 - 00618072 _____ (COMODO) C:\Windows\system32\Drivers\cmdguard.sys
2015-01-30 13:27 - 2013-01-16 18:51 - 00091200 _____ (COMODO) C:\Windows\system32\Drivers\inspect.sys
2015-01-30 13:27 - 2013-01-16 18:51 - 00041248 _____ (COMODO) C:\Windows\system32\Drivers\cmdhlp.sys
2015-01-30 13:27 - 2013-01-16 18:51 - 00017088 _____ (COMODO) C:\Windows\system32\Drivers\cmderd.sys
2015-01-24 16:27 - 2013-06-12 16:42 - 00000000 ____D () C:\Users\fleker\AppData\Local\PokerStars
==================== Files in the root of some directories =======
2013-06-28 13:32 - 2013-06-28 13:32 - 0411509 _____ () C:\Program Files\GSpot270a.zip
2015-01-28 10:49 - 2015-01-28 10:49 - 0003584 _____ () C:\Users\fleker\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-07-31 08:00 - 2013-07-31 08:00 - 0000058 _____ () C:\Users\fleker\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2015-02-14 23:55 - 2015-02-14 23:55 - 0029696 _____ () C:\Users\fleker\AppData\Local\MSGBOX.EXE
2013-05-31 14:13 - 2014-08-29 13:27 - 0007605 _____ () C:\Users\fleker\AppData\Local\Resmon.ResmonCfg
2014-05-18 18:42 - 2014-05-18 18:42 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Some content of TEMP:
====================
C:\Users\fleker\AppData\Local\Temp\appshat_generic.exe
C:\Users\fleker\AppData\Local\Temp\autorun.exe
C:\Users\fleker\AppData\Local\Temp\bdfilters.dll
C:\Users\fleker\AppData\Local\Temp\bitool.dll
C:\Users\fleker\AppData\Local\Temp\cabex.dll
C:\Users\fleker\AppData\Local\Temp\FreeFrameSDK_1.0.0.3_Setup.exe
C:\Users\fleker\AppData\Local\Temp\IeSearchProvider5057390602329170748.exe
C:\Users\fleker\AppData\Local\Temp\InstallGenieo.exe
C:\Users\fleker\AppData\Local\Temp\jreInstall.exe
C:\Users\fleker\AppData\Local\Temp\listicka-partner-13415-1.1.2-offline.exe
C:\Users\fleker\AppData\Local\Temp\lua5.1.dll
C:\Users\fleker\AppData\Local\Temp\lua51.dll
C:\Users\fleker\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\fleker\AppData\Local\Temp\tu17p84.exe
C:\Users\fleker\AppData\Local\Temp\unelevate.exe
C:\Users\fleker\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\fleker\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe
C:\Users\fleker\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-02-11 05:41
==================== End Of Log ============================
- Přílohy
-
- Addition.zip
- (9.98 KiB) Staženo 38 x
-
Rudy
- Site Admin
- Příspěvky: 119428
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Počítač zlobí.. POMOC! :)
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://www.stahuj.centrum.cz/utility_a_ ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve >Scan< a potom na >Clean< (smazat)
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?