Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Rsit + chyba v dll

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
Cizap
Návštěvník
Návštěvník
Příspěvky: 81
Registrován: 07 dub 2014 11:56

Rsit + chyba v dll

#1 Příspěvek od Cizap »

Hezký den, prosím o zkontrolování logu a notebook po zapnutí hází chybu (viz screenshot - špatná kvalita, pokud to nebude čitelné tak po restartu dám jiný), tak pokud by někdo věděl o co jde. Díky :?: .:



Logfile of random's system information tool 1.10 (written by random/random)
Run by DOMA at 2015-04-03 15:46:18
Microsoft Windows 8.1 Pro
System drive C: has 417 GB (87%) free of 477 GB
Total RAM: 4044 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:46:51, on 3. 4. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\SysWOW64\ctfmon.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files\trend micro\DOMA.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp ... XX5VJEPGMH
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\Microsoft Office\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\Microsoft Office\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: StartMenu8 Service (StartMenuService) - IObit - C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @oem3.inf,%WBFService_SvcDesc%;Validity WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\WINDOWS\system32\valWBFPolicyService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7636 bytes

======Listing Processes======






wininit.exe

C:\WINDOWS\system32\lsass.exe
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
atieclxx
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\WLANExt.exe 689615285248
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
taskhostex.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
taskeng.exe {83F90A2E-3F09-461F-9AFE-A7755B34C7B3}
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\IDT\WDM\AESTSr64.exe"
dashost.exe {10d4b16e-11a7-47ed-96323d8d55f7d5a8}
"C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"
"C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe"
"C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe" Service
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\WINDOWS\system32\valWBFPolicyService.exe
"C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\IObit\Start Menu 8\InstallServices.exe" /HotCorners
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-5d0f9c69-c490-4be2-b801-6155b0c6fd96 -SystemEventPortName:HostProcess-219a87c8-bcc9-4ad6-a9a4-bb03d6c3b853 -IoCancelEventPortName:HostProcess-60a099f0-513f-4992-bea9-ffbeec4c0fec -NonStateChangingEventPortName:HostProcess-daeffa48-ce25-484d-a10e-49fc2a68e9c3 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:6b077ca8-a09b-48a0-af5f-1a6f9a9d00ae -DeviceGroupId:
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
ctfmon.exe
"C:\Program Files (x86)\Opera\opera.exe" http://istart.webssearches.com/?type=sc ... XX5VJEPGMH

"C:\Users\DOMA\Desktop\av\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\1014avtUpdateInfo.job - C:\ProgramData\Avg_Update_1014avt\1014avt_AVG-Secure-Search-Update.exe /SETINFO /CMPID=1014avt /INFORETRY=3
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\DOMA\AppData\Roaming\Mozilla\Firefox\Profiles\osp022sh.default

prefs.js - "browser.startup.homepage" - "http://istart.webssearches.com/?type=hp ... XX5VJEPGMH"
prefs.js - "keyword.URL" - "https://de.search.yahoo.com/search?fr=g ... =227087&p="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.134 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nppl3260;version=6.0.12.775]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprjplug;version=1.0.3.775]
"Description"=RealJukebox Netscape Plugin
"Path"=C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprphtml5videoshim;version=1.0.0.0]
"Description"=RealPlayer(tm) HTML5VideoShim Plug-In
"Path"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.775]
"Description"=6.0.12.775
"Path"=C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.134 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-29 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2014-08-19 49440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2014-08-19 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-29 565304]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2014-01-29 171992]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2014-01-29 399832]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2014-01-29 442328]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-14 2837288]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2014-08-19 1702912]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-08-27 22041192]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-07-04 766688]
"TkBellExe"=C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe [2014-08-19 202256]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-03-29 5512912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2014-01-29 442880]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StartMenuService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\str]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-04-03 15:46:18 ----D---- C:\rsit
2015-04-03 15:46:18 ----D---- C:\Program Files\trend micro
2015-04-03 15:36:08 ----SHD---- C:\Config.Msi
2015-03-29 14:04:01 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2015-03-29 14:04:01 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2015-03-29 14:04:01 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2015-03-29 14:04:00 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2015-03-29 14:04:00 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2015-03-29 14:04:00 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2015-03-29 14:03:59 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2015-03-29 14:03:58 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2015-03-29 14:03:50 ----A---- C:\WINDOWS\system32\aswBoot.exe
2015-03-29 14:03:22 ----A---- C:\WINDOWS\avastSS.scr
2015-03-24 19:39:25 ----A---- C:\WINDOWS\system32\appraiser.dll
2015-03-24 19:39:25 ----A---- C:\WINDOWS\system32\acmigration.dll
2015-03-24 19:39:24 ----A---- C:\WINDOWS\system32\generaltel.dll
2015-03-24 19:39:23 ----A---- C:\WINDOWS\system32\invagent.dll
2015-03-24 19:39:23 ----A---- C:\WINDOWS\system32\aeinv.dll
2015-03-24 19:39:22 ----A---- C:\WINDOWS\system32\devinv.dll
2015-03-24 19:39:21 ----A---- C:\WINDOWS\system32\aepdu.dll
2015-03-17 05:50:07 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2015-03-11 21:03:25 ----D---- C:\WINDOWS\Minidump
2015-03-11 21:02:56 ----ASH---- C:\pagefile.sys
2015-03-10 21:04:24 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2015-03-10 21:04:24 ----A---- C:\WINDOWS\system32\SHCore.dll
2015-03-10 21:04:11 ----A---- C:\WINDOWS\SYSWOW64\calc.exe
2015-03-10 21:04:11 ----A---- C:\WINDOWS\system32\calc.exe
2015-03-10 21:04:01 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2015-03-10 21:04:01 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2015-03-10 21:04:00 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys
2015-03-10 21:03:58 ----A---- C:\WINDOWS\system32\winshfhc.dll
2015-03-10 21:03:57 ----A---- C:\WINDOWS\SYSWOW64\winshfhc.dll
2015-03-10 21:03:14 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2015-03-10 21:03:14 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2015-03-10 21:03:14 ----A---- C:\WINDOWS\system32\atmlib.dll
2015-03-10 21:03:14 ----A---- C:\WINDOWS\system32\atmfd.dll
2015-03-10 21:03:12 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2015-03-10 21:03:11 ----A---- C:\WINDOWS\system32\rdpudd.dll
2015-03-10 21:03:10 ----A---- C:\WINDOWS\system32\ubpm.dll
2015-03-10 21:03:06 ----A---- C:\WINDOWS\SYSWOW64\photowiz.dll
2015-03-10 21:03:06 ----A---- C:\WINDOWS\system32\photowiz.dll
2015-03-10 21:02:24 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2015-03-10 21:02:23 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2015-03-10 21:02:23 ----A---- C:\WINDOWS\system32\ntdll.dll
2015-03-10 21:02:18 ----A---- C:\WINDOWS\system32\win32spl.dll
2015-03-10 21:02:18 ----A---- C:\WINDOWS\system32\localspl.dll
2015-03-10 21:02:14 ----A---- C:\WINDOWS\system32\win32k.sys
2015-03-10 21:02:11 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2015-03-10 21:02:11 ----A---- C:\WINDOWS\system32\schannel.dll
2015-03-10 21:02:09 ----A---- C:\WINDOWS\SYSWOW64\StorageContextHandler.dll
2015-03-10 21:02:09 ----A---- C:\WINDOWS\system32\StorageContextHandler.dll
2015-03-10 21:02:07 ----A---- C:\WINDOWS\system32\msftedit.dll
2015-03-10 21:02:06 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2015-03-10 21:02:04 ----A---- C:\WINDOWS\system32\authui.dll
2015-03-10 21:02:03 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2015-03-10 21:01:57 ----A---- C:\WINDOWS\system32\WSShared.dll
2015-03-10 21:01:56 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2015-03-10 21:01:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-10 21:01:56 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-10 21:01:53 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2015-03-10 21:01:53 ----A---- C:\WINDOWS\system32\dwmcore.dll
2015-03-10 21:01:52 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2015-03-10 21:01:50 ----A---- C:\WINDOWS\system32\mfc42u.dll
2015-03-10 21:01:50 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2015-03-10 21:01:49 ----A---- C:\WINDOWS\SYSWOW64\mfc42u.dll
2015-03-10 21:01:49 ----A---- C:\WINDOWS\SYSWOW64\mfc42.dll
2015-03-10 21:01:49 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2015-03-10 21:01:49 ----A---- C:\WINDOWS\SYSWOW64\atlthunk.dll
2015-03-10 21:01:49 ----A---- C:\WINDOWS\system32\mfc42.dll
2015-03-10 21:01:48 ----AC---- C:\WINDOWS\system32\drivers\hidbth.sys
2015-03-10 21:01:47 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll
2015-03-10 21:01:47 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll
2015-03-10 21:01:47 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2015-03-10 21:01:47 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll
2015-03-10 21:01:47 ----A---- C:\WINDOWS\system32\eapphost.dll
2015-03-10 21:01:47 ----A---- C:\WINDOWS\system32\eappgnui.dll
2015-03-10 21:01:47 ----A---- C:\WINDOWS\system32\eappcfg.dll
2015-03-10 21:01:47 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2015-03-10 21:01:36 ----A---- C:\WINDOWS\system32\mshtml.dll
2015-03-10 21:01:32 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2015-03-10 21:01:25 ----A---- C:\WINDOWS\system32\jscript9.dll
2015-03-10 21:01:24 ----A---- C:\WINDOWS\system32\ieframe.dll
2015-03-10 21:01:23 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2015-03-10 21:01:19 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2015-03-10 21:01:18 ----A---- C:\WINDOWS\system32\wininet.dll
2015-03-10 21:01:18 ----A---- C:\WINDOWS\system32\iertutil.dll
2015-03-10 21:01:17 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2015-03-10 21:01:17 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2015-03-10 21:01:17 ----A---- C:\WINDOWS\system32\urlmon.dll
2015-03-10 21:01:16 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2015-03-10 21:01:16 ----A---- C:\WINDOWS\system32\inetcomm.dll
2015-03-10 21:01:15 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2015-03-10 21:01:15 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2015-03-10 21:01:13 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2015-03-10 21:01:13 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2015-03-10 21:01:13 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2015-03-10 21:01:13 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2015-03-10 21:01:13 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2015-03-10 21:01:13 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2015-03-10 21:01:13 ----A---- C:\WINDOWS\system32\webcheck.dll
2015-03-10 21:01:13 ----A---- C:\WINDOWS\system32\vbscript.dll
2015-03-10 21:01:13 ----A---- C:\WINDOWS\system32\mshtmled.dll
2015-03-10 21:01:13 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2015-03-10 21:01:13 ----A---- C:\WINDOWS\system32\msfeeds.dll
2015-03-10 21:01:13 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2015-03-10 21:01:13 ----A---- C:\WINDOWS\system32\jscript.dll
2015-03-10 21:01:13 ----A---- C:\WINDOWS\system32\iepeers.dll
2015-03-10 21:01:13 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2015-03-10 21:01:13 ----A---- C:\WINDOWS\system32\dxtrans.dll
2015-03-10 21:01:12 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2015-03-10 21:01:12 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2015-03-10 21:01:12 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2015-03-10 21:01:12 ----A---- C:\WINDOWS\system32\actxprxy.dll
2015-03-10 21:01:01 ----A---- C:\WINDOWS\SYSWOW64\WMPhoto.dll
2015-03-10 21:01:01 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2015-03-10 21:01:00 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2015-03-10 21:01:00 ----A---- C:\WINDOWS\system32\msctf.dll
2015-03-10 21:00:58 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2015-03-10 21:00:57 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2015-03-10 21:00:56 ----A---- C:\WINDOWS\system32\shell32.dll
2015-03-10 21:00:54 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2015-03-10 21:00:53 ----A---- C:\WINDOWS\explorer.exe
2015-03-10 21:00:52 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2015-03-10 21:00:52 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2015-03-10 21:00:51 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2015-03-10 21:00:51 ----A---- C:\WINDOWS\system32\LockScreenContentServer.exe

======List of files/folders modified in the last 1 month======

2015-04-03 15:46:26 ----D---- C:\WINDOWS\Prefetch
2015-04-03 15:46:18 ----RD---- C:\Program Files
2015-04-03 15:39:18 ----D---- C:\ProgramData\MFAData
2015-04-03 15:36:50 ----SHD---- C:\WINDOWS\Installer
2015-04-03 15:36:50 ----D---- C:\WINDOWS\Temp
2015-04-03 15:36:41 ----HD---- C:\$AVG
2015-04-03 15:36:41 ----D---- C:\ProgramData\AVG2015
2015-04-03 15:36:36 ----D---- C:\WINDOWS\system32\drivers
2015-04-03 15:36:35 ----D---- C:\Users\DOMA\AppData\Roaming\Skype
2015-04-03 15:36:34 ----D---- C:\WINDOWS\Inf
2015-04-03 15:33:37 ----D---- C:\WINDOWS\System32
2015-04-03 15:33:36 ----D---- C:\WINDOWS\system32\Tasks
2015-04-03 15:33:33 ----D---- C:\WINDOWS\SysWOW64
2015-04-03 15:33:05 ----SHD---- C:\System Volume Information
2015-04-03 15:17:29 ----D---- C:\WINDOWS\debug
2015-04-03 15:13:30 ----D---- C:\Windows
2015-04-03 15:08:03 ----D---- C:\Program Files\CCleaner
2015-04-03 15:00:01 ----D---- C:\WINDOWS\system32\sru
2015-04-03 14:36:41 ----D---- C:\WINDOWS\Microsoft.NET
2015-04-03 14:28:03 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-03-31 18:52:43 ----D---- C:\WINDOWS\system32\NDF
2015-03-29 14:05:11 ----D---- C:\WINDOWS\system32\catroot2
2015-03-29 14:04:13 ----D---- C:\WINDOWS\system32\DriverStore
2015-03-28 15:42:37 ----D---- C:\ProgramData\ProductData
2015-03-25 21:14:24 ----D---- C:\WINDOWS\system32\config
2015-03-25 20:23:07 ----D---- C:\WINDOWS\system32\catroot
2015-03-24 22:44:40 ----D---- C:\WINDOWS\CbsTemp
2015-03-24 22:44:37 ----D---- C:\WINDOWS\WinSxS
2015-03-24 22:44:33 ----SD---- C:\WINDOWS\system32\CompatTel
2015-03-24 22:44:33 ----D---- C:\WINDOWS\system32\wbem
2015-03-24 22:44:33 ----D---- C:\WINDOWS\system32\appraiser
2015-03-24 22:44:33 ----D---- C:\WINDOWS\apppatch
2015-03-24 19:23:52 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-23 19:44:05 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-03-19 21:03:45 ----D---- C:\WINDOWS\rescache
2015-03-16 21:28:44 ----D---- C:\Program Files\Windows Defender
2015-03-16 21:28:44 ----D---- C:\Program Files (x86)\Windows Defender
2015-03-16 21:28:43 ----D---- C:\WINDOWS\PolicyDefinitions
2015-03-16 21:28:42 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2015-03-16 21:28:42 ----D---- C:\WINDOWS\system32\cs-CZ
2015-03-16 21:28:41 ----RD---- C:\WINDOWS\ToastData
2015-03-16 21:28:40 ----D---- C:\WINDOWS\WinStore
2015-03-16 21:28:37 ----D---- C:\Program Files\Internet Explorer
2015-03-16 21:28:37 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-16 20:48:14 ----D---- C:\WINDOWS\AppReadiness
2015-03-16 20:48:13 ----HD---- C:\Program Files\WindowsApps
2015-03-16 20:19:32 ----D---- C:\WINDOWS\system32\MRT
2015-03-16 20:10:56 ----A---- C:\WINDOWS\system32\MRT.exe
2015-03-08 20:45:44 ----D---- C:\WINDOWS\system32\drivers\UMDF
2015-03-08 10:52:52 ----D---- C:\Users\DOMA\AppData\Roaming\vlc
2015-03-04 20:44:29 ----D---- C:\WINDOWS\SYSWOW64\config
2015-03-04 19:51:27 ----D---- C:\ProgramData\7146d2b600002113

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-03-29 65736]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-03-29 271200]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2015-03-29 93528]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-03-29 1047320]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-03-29 442264]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-03-29 29168]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-03-29 88408]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2015-03-29 136752]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2014-07-21 13209088]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2014-07-21 626688]
R3 BCM43XX;@oem4.inf,%BCM43XX_Service_DispName%;Ovladač síťového adaptéru Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2014-08-19 9525936]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2014-01-29 5363200]
R3 IntcDAud;@oem6.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2014-08-19 442368]
R3 MEIx64;@oem14.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2014-08-19 100312]
R3 RSPCIESTOR;@oem5.inf,%Rts5208%;Realtek PCIE CardReader Driver; C:\WINDOWS\system32\DRIVERS\RtsPStor.sys [2014-08-19 359128]
R3 RTL8168;@oem9.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2014-12-01 874712]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [2014-08-19 544768]
R3 SynTP;@oem15.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2011-10-14 396848]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2014-11-21 212736]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
R4 AVGIDSHA;AVGIDSHA; C:\WINDOWS\system32\DRIVERS\avgidsha.sys []
R4 Avgrkx64;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx64.sys []
S3 athur;@oem16.inf,%ATHR.Service.DispName%;Atheros AR9271 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athurx.sys [2010-01-05 1847296]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2014-08-19 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2014-07-21 239616]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-03-29 343336]
R2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-01-14 2635552]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2014-08-19 332800]
R2 StartMenuService;StartMenu8 Service; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [2015-01-14 1055008]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2014-12-15 5426448]
R2 valWBFPolicyService;@oem3.inf,%WBFService_SvcDesc%;Validity WBF Policy Service; C:\WINDOWS\system32\valWBFPolicyService.exe [2013-10-30 35328]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-19 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-15 268464]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-11-21 38792]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2014-01-29 279000]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-19 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-03-23 148080]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------
Přílohy
chyba.jpg
chyba.jpg (87.05 KiB) Zobrazeno 1358 x
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Rsit + chyba v dll

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Po spusteni probehne stazeni databaze
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Cizap
Návštěvník
Návštěvník
Příspěvky: 81
Registrován: 07 dub 2014 11:56

Re: Rsit + chyba v dll

#3 Příspěvek od Cizap »

provedeno popořadě zde:



# AdwCleaner v4.200 - Log vytvooen 03/04/2015 v 18:18:32
# Aktualizováno 29/03/2015 by Xplode
# Databáze : 2015-03-29.1 [Server]
# Operaení system : Windows 8.1 Pro (x64)
# Uživatelské jméno : DOMA - HP
# Spuštino z : C:\Users\DOMA\Desktop\adwcleaner_4.200.exe
# Nastavení : Eištiní

***** [ Služby ] *****


***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\7146d2b600002113
Složka Smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plus500
Složka Smazáno : C:\Program Files (x86)\globalUpdate
Složka Smazáno : C:\Program Files (x86)\predm
Složka Smazáno : C:\Program Files (x86)\Probit Software
Složka Smazáno : C:\Program Files (x86)\Plus500
Složka Smazáno : C:\Program Files (x86)\XTab
Složka Smazáno : C:\Users\DOMA\AppData\Local\globalUpdate
Složka Smazáno : C:\Users\DOMA\AppData\Local\Plus500
Složka Smazáno : C:\Users\DOMA\AppData\Local\CleanerPro
Složka Smazáno : C:\Users\DOMA\AppData\Roaming\AnyProtectEx
Složka Smazáno : C:\Users\DOMA\AppData\Roaming\Probit Software
Složka Smazáno : C:\Users\DOMA\AppData\Roaming\Search Protection
Složka Smazáno : C:\Users\DOMA\AppData\Roaming\Systweak
Složka Smazáno : C:\Users\DOMA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Plus500
Složka Smazáno : C:\Users\DOMA\Documents\Optimizer Pro
Složka Smazáno : C:\Users\DOMA\Documents\CleanerPro
Složka Smazáno : C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Soubor Smazáno : C:\WINDOWS\System32\roboot64.exe
Soubor Smazáno : C:\Users\DOMA\AppData\Roaming\Mozilla\Firefox\Profiles\osp022sh.default\user.js

***** [ Naplánované úlohy ] *****

Úloha Smazáno : APSnotifierPP1
Úloha Smazáno : APSnotifierPP2
Úloha Smazáno : APSnotifierPP3
Úloha Smazáno : CleanerPro_Popup
Úloha Smazáno : CleanerPro_Start
Úloha Smazáno : PC SpeedUp Service Deactivator
Úloha Smazáno : RocketTab
Úloha Smazáno : SMupdate1
Úloha Smazáno : YTDownloader

***** [ Zástupci ] *****

Zástupce Vyléeeno : C:\Users\Public\Desktop\Opera.lnk
Zástupce Vyléeeno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Zástupce Vyléeeno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
Zástupce Vyléeeno : C:\Users\DOMA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Zástupce Vyléeeno : C:\Users\DOMA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera12.01 1532.lnk

***** [ Registry ] *****

Klíe Smazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Klíe Smazáno : HKLM\SOFTWARE\Classes\AppID\SysMenu.DLL
Klíe Smazáno : HKLM\SOFTWARE\4b482daf-1b00-07a8-4d21-c356fb539528
Klíe Smazáno : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Klíe Smazáno : HKLM\SOFTWARE\Classes\AppID\{D813D5BB-EBC7-45F9-B8A4-36A305168069}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Klíe Smazáno : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Klíe Smazáno : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Klíe Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Klíe Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Klíe Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Klíe Smazáno : HKCU\Software\AnyProtect
Klíe Smazáno : HKCU\Software\GlobalUpdate
Klíe Smazáno : HKCU\Software\Optimizer Pro
Klíe Smazáno : HKCU\Software\rttasks
Klíe Smazáno : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Klíe Smazáno : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Klíe Smazáno : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Klíe Smazáno : HKLM\SOFTWARE\SupDp
Klíe Smazáno : HKLM\SOFTWARE\systweak
Klíe Smazáno : HKLM\SOFTWARE\Tutorials
Klíe Smazáno : [x64] HKLM\SOFTWARE\ShopperPro
Klíe Smazáno : [x64] HKLM\SOFTWARE\YTDownloader
Data Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>

***** [ Prohlížeee ] *****

-\\ Internet Explorer v11.0.9600.17416

Nastavení Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]

-\\ Mozilla Firefox v36.0.4 (x86 cs)

[osp022sh.default\prefs.js] - Oádek Smazáno : user_pref("browser.startup.homepage", "hxxp://istart.webssearches.com/?type=hppp&ts=1421467977&from=obw&uid=ST9500420AS_5VJEPGMHXXXX5VJEPGMH");
[osp022sh.default\prefs.js] - Oádek Smazáno : user_pref("startpage.ntsearch_url", "hxxps://de.search.yahoo.com/search?fr=spigot-nt-ff&ei=utf-8&ilc=12&type=227087&p={searchTerms}");

-\\ Google Chrome v40.0.2214.93

[C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Extension] : eofcbnmajmjmplflapaojjnihcjkigck

*************************

AdwCleaner[R0].txt - [5654 bytu] - [03/04/2015 18:17:57]
AdwCleaner[S0].txt - [5095 bytu] - [03/04/2015 18:18:32]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5153 bytu] ##########






__________________________________________________________________________________________________________________________________________________________________________________________________________







Zoek.exe v5.0.0.0 Updated 02-April-2015
Tool run by DOMA on p  03. 04. 2015 at 18:30:26,51.
Microsoft Windows 8.1 Pro 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\DOMA\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

3. 4. 2015 18:31:22 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\Program Files\Google deleted successfully
C:\Users\DOMA\AppData\Roaming\QuickScan deleted successfully
C:\Users\DOMA\AppData\Roaming\Zoner deleted successfully
C:\Users\DOMA\AppData\Local\CrashDumps deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\SearchScopes\{37EF026B-43E9-4925-8988-6A96FEAEF8BC} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DBC80044-A445-435B-BC74-9C25C1C588A9} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{144FB305-6158-4646-A135-7DE9E5F566CB} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{174945C9-E16B-4FF9-91FE-2F798271786} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1AC689F8-AD94-44DD-9F70-8915553C8F2} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1C768E7E-A29C-4038-AAA7-3DB5571731} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{45A765FD-53EC-48D3-ADC-89AF729672D2} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4ABA59D-EB97-49A1-A54C-DE0C09A5087} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{542B9130-A1B0-4444-831F-9E9785A6F3EA} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{60778C8E-2516-4135-A8C7-91CF922C9663} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{61585125-D5F9-4086-9AC8-C0B1F3A658D8} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6B75D72B-54F2-4556-9024-3ACB8643700} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7AE4424C-A03F-4BAA-A9D6-96F5708DE0DA} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7C4387D6-BD60-4C4C-8D60-F6C44D99D6D} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F1A522B-1AF2-48AC-B391-C457EFC67F6F} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{81BB2DFE-9847-4906-BC4-9A10B12ED32A} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8564D477-651E-4790-BE96-E4F53C7445C} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{91863C0C-40FE-418F-B1C5-128527F19511} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9DD8E479-2694-406C-A9B0-98283A3A9737} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A30BEB48-F951-4F12-A062-1AED3DEA6150} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A66256C9-2959-429E-B830-B72654CE871} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BED87DD9-D83C-45E5-B4A-7BA3A4E05E6} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C463CDB7-BDB6-4172-AA3E-E71C8CBD3463} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CA7772C6-7254-4F67-804B-E68137DB8334} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CE29D0E1-55B6-4807-A5AB-689D575C9EA0} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DBC2269C-871C-46EC-A732-9023AAAE38AF} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B3549E-9CAE-4050-9850-E334812E6A1C} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EA94F777-C7DB-4492-8958-C6C5657C1E4} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EDB0BBB8-EA8-4A6C-803-B852D48F5AA9} deleted successfully
HKEY_USERS\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F12FAA94-DA9-4DA5-B1F1-DC57D12E7E89} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{DBC80044-A445-435B-BC74-9C25C1C588A9} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435B-BC74-9C25C1C588A9} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\DOMA\AppData\Roaming\Mozilla\Firefox\Profiles\osp022sh.default\prefs.js:
user_pref("browser.search.selectedEngine", "webssearches");
user_pref("keyword.URL", "https://de.search.yahoo.com/search?fr=g ... =227087&p=");

Added to C:\Users\DOMA\AppData\Roaming\Mozilla\Firefox\Profiles\osp022sh.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\DOMA\AppData\Roaming\Mozilla\Firefox\Profiles\osp022sh.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_201503.04._1849_.backup

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Opera\shell\open\command]
@="C:\\Program Files (x86)\\Opera\\Opera.exe"

==== Deleting Files \ Folders ======================

C:\Users\DOMA\AppData\Roaming\ProductData deleted
C:\PROGRA~3\Avg_Update_1014avt deleted
C:\PROGRA~3\ProductData deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\DOMA\AppData\Local\nst1BF4.tmp deleted
C:\Users\DOMA\AppData\Local\CrashRpt deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Liveistream deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\Users\Public\Documents\ShopperPro deleted
C:\WINDOWS\tasks\1014avtUpdateInfo.job deleted
C:\windows\SysNative\tasks\1014avtUpdateInfo deleted
C:\windows\SysNative\tasks\Microsoft\Windows\Maintenance\SMupdate2 deleted
C:\windows\SysNative\tasks\Microsoft\Windows\Multimedia\SMupdate3 deleted
C:\WINDOWS\SysNative\config\systemprofile\Searches deleted
C:\windows\SysNative\GroupPolicy\machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\gpt.ini deleted
C:\WINDOWS\Syswow64\GroupPolicy\gpt.ini deleted
"C:\Users\DOMA\AppData\Roaming\KWZBEJT" deleted
"C:\Users\DOMA\AppData\Roaming\MJNQWZAR" deleted
"C:\Users\DOMA\AppData\Roaming\VKKVC" deleted
"C:\Users\DOMA\AppData\Roaming\XASFULM" deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\DOMA\AppData\Roaming\Mozilla\Firefox\Profiles\osp022sh.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [29. 03. 2015 14:03]

==== Firefox Extensions ======================

ProfilePath: C:\Users\DOMA\AppData\Roaming\Mozilla\Firefox\Profiles\osp022sh.default
- Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\DOMA\AppData\Roaming\Mozilla\Firefox\Profiles\osp022sh.default
33E87713C7FE08C5F861E2819ED33A0E - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll - RealPlayer(tm) HTML5VideoShim Plug-In (32-bit)
43583AB4DFD406F4C188342F41B1F91C - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll - Shockwave Flash


==== Chromium Look ======================

Google Chrome Version: 40.0.2214.93 (Possible outdated, latest Stable version: 41.0.2272.118)

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[29. 03. 2015 14:02]
jfmjfhklogoienhpfnppmbcbjfjnkonk - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx[19. 08. 2014 19:45]

Avast Online Security - DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
RealPlayer HTML5Video Downloader Extension - DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk

==== Chromium Startpages ======================

C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Preferences
"startup_urls": [ "http://www.google.com/" ]


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.seznam.cz/"
"Default_Page_URL"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="https://www.seznam.cz/"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{332C4FAF-1621-4315-A966-0E9879EF5D84} Seznam Url="http://search.seznam.cz/?q={searchTerms ... chmodule_1"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... urceid=ie7"
{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IESR02"

==== Reset Google Chrome ======================

C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\DOMA\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\DOMA\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\DOMA\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\DOMA\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=33 folders=26 17538179 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\DOMA\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\DOMA\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on p  03. 04. 2015 at 19:01:09,13 ======================
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Rsit + chyba v dll

#4 Příspěvek od vyosek »

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Cizap
Návštěvník
Návštěvník
Příspěvky: 81
Registrován: 07 dub 2014 11:56

Re: Rsit + chyba v dll

#5 Příspěvek od Cizap »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by DOMA (administrator) on HP on 03-04-2015 19:46:53
Running from C:\Users\DOMA\Desktop
Loaded Profiles: DOMA (Available profiles: DOMA)
Platform: Windows 8.1 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser path: "C:\Program Files (x86)\Opera\Opera.exe" "%1")
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Validity Sensors, Inc.) C:\Windows\System32\valWBFPolicyService.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\InstallServices.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Opera Software) C:\Program Files (x86)\Opera\opera.exe
(forum.viry.cz) C:\Users\DOMA\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1702912 2014-08-19] (IDT, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766688 2014-07-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe [202256 2014-08-19] (RealNetworks, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912 2015-03-29] (Avast Software s.r.o.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1926774154-4221507170-2112547352-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-1926774154-4221507170-2112547352-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\PhotoScreensaver.scr [589312 2014-11-21] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (Avast Software s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1926774154-4221507170-2112547352-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1926774154-4221507170-2112547352-1001 -> {332C4FAF-1621-4315-A966-0E9879EF5D84} URL = http://search.seznam.cz/?q={searchTerms ... chmodule_1
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-29] (Avast Software s.r.o.)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2014-08-19] (RealPlayer)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-29] (Avast Software s.r.o.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\DOMA\AppData\Roaming\Mozilla\Firefox\Profiles\osp022sh.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-15] ()
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll [2014-08-19] (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-15] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.775 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll [2014-08-19] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=1.0.3.775 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll [2014-08-19] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=1.0.0.0 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2014-08-19] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.775 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll [2014-08-19] (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-03] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2014-08-19]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-27]

Chrome:
=======
CHR Profile: C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-27]
CHR Extension: (Google Docs) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-27]
CHR Extension: (Google Drive) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-27]
CHR Extension: (YouTube) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-27]
CHR Extension: (Google Search) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-27]
CHR Extension: (Google Sheets) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-27]
CHR Extension: (Avast Online Security) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-27]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2015-01-27]
CHR Extension: (Google Wallet) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-27]
CHR Extension: (Gmail) - C:\Users\DOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-27]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-29]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2014-08-19]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESTFilters; C:\Program Files\IDT\WDM\AESTSr64.exe [89600 2014-08-19] (Andrea Electronics Corporation) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-03-29] (Avast Software s.r.o.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2635552 2015-01-14] (IObit)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [332800 2014-08-19] (IDT, Inc.) [File not signed]
R2 StartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [1055008 2015-01-14] (IObit)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH)
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [35328 2013-10-30] (Validity Sensors, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-03-29] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-03-29] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-03-29] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-03-29] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-03-29] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-03-29] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-03-29] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [271200 2015-03-29] ()
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [9525936 2014-08-19] (Broadcom Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2014-08-19] (Intel Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-03 19:46 - 2015-04-03 19:47 - 00013457 _____ () C:\Users\DOMA\Desktop\FRST.txt
2015-04-03 19:46 - 2015-04-03 19:46 - 00000000 ____D () C:\FRST
2015-04-03 19:43 - 2015-04-03 19:43 - 02095616 _____ (Farbar) C:\Users\DOMA\Desktop\FRST64.exe
2015-04-03 19:43 - 2015-04-03 19:43 - 00112640 _____ (forum.viry.cz) C:\Users\DOMA\Desktop\FRSTLauncher.exe
2015-04-03 19:05 - 2015-04-03 19:10 - 00000966 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-03 19:05 - 2015-04-03 19:10 - 00000962 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-03 19:01 - 2015-04-03 19:01 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-04-03 19:01 - 2015-04-03 19:01 - 00000000 ____D () C:\Users\DOMA\AppData\Roaming\ProductData
2015-04-03 19:00 - 2015-04-03 19:10 - 00000000 ____D () C:\ProgramData\ProductData
2015-04-03 18:52 - 2015-04-03 18:30 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2015-04-03 18:31 - 2015-04-03 19:01 - 00015716 _____ () C:\zoek-results.log
2015-04-03 18:30 - 2015-04-03 18:49 - 00000000 ____D () C:\zoek_backup
2015-04-03 18:20 - 2015-04-03 19:00 - 00000154 _____ () C:\WINDOWS\setupact.log
2015-04-03 18:20 - 2015-04-03 18:20 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-04-03 18:19 - 2015-04-03 18:59 - 00012846 _____ () C:\WINDOWS\PFRO.log
2015-04-03 18:18 - 2015-04-03 18:18 - 00001083 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-04-03 18:18 - 2015-04-03 18:18 - 00000991 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-04-03 18:18 - 2015-04-03 18:18 - 00000979 _____ () C:\Users\Public\Desktop\Opera.lnk
2015-04-03 18:16 - 2015-04-03 18:18 - 00000000 ____D () C:\AdwCleaner
2015-04-03 15:46 - 2015-04-03 15:46 - 00000000 ____D () C:\rsit
2015-04-03 15:46 - 2015-04-03 15:46 - 00000000 ____D () C:\Program Files\trend micro
2015-04-03 15:08 - 2015-04-03 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-04-03 14:42 - 2015-04-03 19:43 - 00000000 ____D () C:\Users\DOMA\Desktop\av
2015-03-29 14:08 - 2015-04-01 18:40 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-03-29 14:04 - 2015-03-29 14:03 - 00442264 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-03-29 14:04 - 2015-03-29 14:03 - 00271200 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-03-29 14:04 - 2015-03-29 14:03 - 00136752 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-03-29 14:04 - 2015-03-29 14:03 - 00088408 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-03-29 14:04 - 2015-03-29 14:03 - 00065736 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-03-29 14:04 - 2015-03-29 14:03 - 00029168 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-03-29 14:03 - 2015-03-29 14:03 - 00364472 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe
2015-03-29 14:03 - 2015-03-29 14:03 - 00093528 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-03-29 14:03 - 2015-03-29 14:03 - 00043112 _____ (Avast Software s.r.o.) C:\WINDOWS\avastSS.scr
2015-03-29 14:03 - 2015-03-29 14:02 - 01047320 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-03-26 19:50 - 2015-03-26 19:50 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2015-03-26 19:50 - 2015-03-26 19:50 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2015-03-24 19:39 - 2015-03-11 04:38 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-03-24 19:39 - 2015-03-11 00:08 - 01107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-03-24 19:39 - 2015-03-11 00:08 - 00943104 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-03-24 19:39 - 2015-03-11 00:08 - 00760320 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-03-24 19:39 - 2015-03-11 00:08 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-03-24 19:39 - 2015-03-11 00:08 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-03-24 19:39 - 2015-03-11 00:08 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-03-17 05:50 - 2015-03-04 23:24 - 00792032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-03-17 05:50 - 2015-03-04 23:24 - 00178144 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-11 21:03 - 2015-04-03 15:13 - 00000000 ____D () C:\WINDOWS\Minidump
2015-03-10 21:04 - 2015-02-04 01:58 - 00264000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2015-03-10 21:04 - 2015-02-04 01:58 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2015-03-10 21:04 - 2015-02-04 01:58 - 00044024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2015-03-10 21:04 - 2015-01-27 05:44 - 00933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-03-10 21:04 - 2015-01-24 03:51 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-03-10 21:04 - 2015-01-23 09:17 - 00723072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2015-03-10 21:04 - 2015-01-23 07:02 - 00560392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2015-03-10 21:03 - 2015-02-20 05:03 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-03-10 21:03 - 2015-02-20 04:58 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-03-10 21:03 - 2015-02-20 04:20 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-03-10 21:03 - 2015-02-20 04:15 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-03-10 21:03 - 2015-02-07 01:09 - 00396419 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-03-10 21:03 - 2015-02-03 01:53 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2015-03-10 21:03 - 2015-02-03 01:53 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2015-03-10 21:03 - 2015-01-31 01:20 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2015-03-10 21:03 - 2015-01-29 03:58 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\photowiz.dll
2015-03-10 21:03 - 2015-01-29 03:29 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\photowiz.dll
2015-03-10 21:03 - 2015-01-27 06:22 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2015-03-10 21:03 - 2015-01-27 04:11 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2015-03-10 21:02 - 2015-03-06 04:53 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-03-10 21:02 - 2015-03-06 04:33 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-03-10 21:02 - 2015-02-26 01:26 - 04178944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-03-10 21:02 - 2015-01-31 01:42 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-03-10 21:02 - 2015-01-31 01:29 - 02484224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-03-10 21:02 - 2015-01-29 03:04 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-03-10 21:02 - 2015-01-29 03:04 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2015-03-10 21:02 - 2015-01-29 02:59 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-03-10 21:02 - 2015-01-29 02:49 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-03-10 21:02 - 2015-01-28 17:41 - 07472960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-03-10 21:02 - 2015-01-28 17:41 - 01733440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-03-10 21:02 - 2015-01-28 17:41 - 01498360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-03-10 21:02 - 2015-01-28 04:24 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll
2015-03-10 21:02 - 2015-01-28 03:47 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorageContextHandler.dll
2015-03-10 21:01 - 2015-02-21 03:16 - 25021440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-03-10 21:01 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-03-10 21:01 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-03-10 21:01 - 2015-02-21 02:27 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-03-10 21:01 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-03-10 21:01 - 2015-02-21 01:58 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-03-10 21:01 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-03-10 21:01 - 2015-02-20 04:49 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-03-10 21:01 - 2015-02-20 04:48 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-03-10 21:01 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-03-10 21:01 - 2015-02-20 04:35 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-03-10 21:01 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-03-10 21:01 - 2015-02-20 04:32 - 06035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-03-10 21:01 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-03-10 21:01 - 2015-02-20 04:07 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-03-10 21:01 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-03-10 21:01 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-03-10 21:01 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-03-10 21:01 - 2015-02-20 03:59 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-03-10 21:01 - 2015-02-20 03:56 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-03-10 21:01 - 2015-02-20 03:52 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-03-10 21:01 - 2015-02-20 03:49 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-03-10 21:01 - 2015-02-20 03:49 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-03-10 21:01 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-03-10 21:01 - 2015-02-20 03:43 - 14398976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-03-10 21:01 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-03-10 21:01 - 2015-02-20 03:30 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-03-10 21:01 - 2015-02-20 03:29 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-03-10 21:01 - 2015-02-20 03:28 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-03-10 21:01 - 2015-02-20 03:26 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-03-10 21:01 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-03-10 21:01 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-03-10 21:01 - 2015-02-20 03:16 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-03-10 21:01 - 2015-02-20 03:03 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-03-10 21:01 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-03-10 21:01 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-03-10 21:01 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-03-10 21:01 - 2015-02-06 03:28 - 02257408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-03-10 21:01 - 2015-02-06 03:08 - 01943040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-03-10 21:01 - 2015-02-05 22:24 - 01113920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-03-10 21:01 - 2015-02-03 02:03 - 03551744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2015-03-10 21:01 - 2015-02-03 02:02 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2015-03-10 21:01 - 2015-01-30 05:01 - 00097792 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2015-03-10 21:01 - 2015-01-30 04:03 - 01488896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2015-03-10 21:01 - 2015-01-30 04:03 - 01464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2015-03-10 21:01 - 2015-01-30 04:02 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2015-03-10 21:01 - 2015-01-30 03:44 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2015-03-10 21:01 - 2015-01-30 03:42 - 01204224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2015-03-10 21:01 - 2015-01-30 03:40 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2015-03-10 21:01 - 2015-01-30 03:37 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2015-03-10 21:01 - 2015-01-30 03:29 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2015-03-10 21:01 - 2015-01-30 03:24 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2015-03-10 21:01 - 2015-01-30 03:24 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2015-03-10 21:01 - 2015-01-30 03:16 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2015-03-10 21:01 - 2015-01-30 03:08 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2015-03-10 21:01 - 2015-01-30 03:06 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2015-03-10 21:01 - 2015-01-29 03:11 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-10 21:01 - 2015-01-29 03:00 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-10 21:01 - 2015-01-29 02:55 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-03-10 21:01 - 2015-01-29 02:50 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-03-10 21:01 - 2015-01-28 03:31 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2015-03-10 21:01 - 2015-01-28 03:11 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2015-03-10 21:01 - 2015-01-21 07:54 - 01384712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-03-10 21:01 - 2015-01-21 07:15 - 01123848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-03-10 21:00 - 2015-02-12 19:40 - 22291584 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-03-10 21:00 - 2015-02-12 19:34 - 19731824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-03-10 21:00 - 2015-02-08 01:57 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-03-10 21:00 - 2015-02-08 01:49 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-03-10 21:00 - 2015-01-29 20:45 - 01763352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-03-10 21:00 - 2015-01-29 20:34 - 01488040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-03-10 21:00 - 2015-01-28 01:47 - 02501368 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-03-10 21:00 - 2015-01-28 01:41 - 02207488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-03-10 21:00 - 2014-12-11 07:36 - 00046456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-03 19:22 - 2014-08-19 19:32 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1926774154-4221507170-2112547352-1001
2015-04-03 19:19 - 2015-01-19 20:27 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-04-03 19:13 - 2015-01-27 20:25 - 01709552 _____ () C:\WINDOWS\WindowsUpdate.log
2015-04-03 19:12 - 2014-09-12 12:14 - 00000000 ____D () C:\Users\DOMA\AppData\Roaming\Skype
2015-04-03 19:05 - 2014-11-21 06:54 - 01745984 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-03 19:05 - 2014-11-21 06:10 - 00739924 _____ () C:\WINDOWS\system32\perfh005.dat
2015-04-03 19:05 - 2014-11-21 06:10 - 00151610 _____ () C:\WINDOWS\system32\perfc005.dat
2015-04-03 19:05 - 2014-08-19 19:37 - 00003938 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-04-03 19:05 - 2014-08-19 19:37 - 00003702 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-04-03 19:01 - 2015-01-27 20:13 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-03 19:00 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-04-03 18:49 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\GroupPolicy
2015-04-03 18:49 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy
2015-04-03 18:19 - 2015-03-01 22:01 - 00000000 ____D () C:\Program Files (x86)\AVG
2015-04-03 18:19 - 2015-03-01 21:55 - 00000000 ____D () C:\ProgramData\MFAData
2015-04-03 18:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-04-03 15:36 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2015-04-03 15:08 - 2015-01-27 20:11 - 00000836 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-04-03 15:08 - 2015-01-27 20:11 - 00000000 ____D () C:\Program Files\CCleaner
2015-04-03 14:58 - 2015-01-18 20:48 - 00003942 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{D94D9F34-8911-45B4-8209-29F3F2370EA1}
2015-04-03 01:59 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-03-31 18:52 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-03-31 18:45 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-03-24 22:44 - 2015-01-16 22:48 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-03-24 22:44 - 2014-11-21 14:26 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-03-24 22:44 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-03-24 19:23 - 2014-08-19 19:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-23 19:44 - 2014-08-19 19:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-19 21:03 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-03-17 05:49 - 2013-08-22 16:44 - 00482872 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-03-16 21:28 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2015-03-16 21:28 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-16 21:28 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-16 21:28 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-16 21:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2015-03-16 21:28 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2015-03-16 21:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-03-16 21:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-03-16 20:48 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-03-16 20:19 - 2014-08-19 20:47 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-03-16 20:10 - 2014-08-19 20:47 - 122905848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-03-15 22:24 - 2015-01-18 14:45 - 00001086 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-03-15 22:17 - 2015-01-19 20:27 - 00003802 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-03-11 21:52 - 2015-01-18 20:21 - 00000000 ____D () C:\Users\DOMA
2015-03-08 10:52 - 2015-01-18 14:45 - 00000000 ____D () C:\Users\DOMA\AppData\Roaming\vlc

==================== Files in the root of some directories =======


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-03 19:22




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:465.42 GB) (Free:406.44 GB) NTFS

Available physical RAM: 2748.4 MB
Total physical RAM: 4043.86 MB
Percentage of memory in use: 32%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 860E8A30)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.4 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\TEMP:C5831B98

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\DOMA\Desktop" je 36 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Přílohy
Addition.rar
(5.88 KiB) Staženo 64 x
Nahoru
Cizap
Návštěvník
Návštěvník
Příspěvky: 81
Registrován: 07 dub 2014 11:56

Re: Rsit + chyba v dll

#6 Příspěvek od Cizap »

Jak prosím vypadá log teď? Nechci předbíhat, ale notebook je brachovo tchana a on jede zítra do německa :) děkuju
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Rsit + chyba v dll

#7 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe [202256 2014-08-19] (RealNetworks, Inc.)
HKU\S-1-5-21-1926774154-4221507170-2112547352-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

2015-04-03 19:46 - 2015-04-03 19:47 - 00013457 _____ () C:\Users\DOMA\Desktop\FRST.txt
2015-04-03 18:52 - 2015-04-03 18:30 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2015-04-03 18:31 - 2015-04-03 19:01 - 00015716 _____ () C:\zoek-results.log
2015-04-03 18:30 - 2015-04-03 18:49 - 00000000 ____D () C:\zoek_backup
2015-04-03 18:20 - 2015-04-03 19:00 - 00000154 _____ () C:\WINDOWS\setupact.log
2015-04-03 18:20 - 2015-04-03 18:20 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-04-03 18:19 - 2015-04-03 18:59 - 00012846 _____ () C:\WINDOWS\PFRO.log
2015-04-03 18:16 - 2015-04-03 18:18 - 00000000 ____D () C:\AdwCleaner
2015-04-03 15:46 - 2015-04-03 15:46 - 00000000 ____D () C:\rsit
2015-04-03 15:46 - 2015-04-03 15:46 - 00000000 ____D () C:\Program Files\trend micro

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

AlternateDataStreams: C:\ProgramData\TEMP:C5831B98

Hosts:
EmptyTemp:
Reboot:
End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Cizap
Návštěvník
Návštěvník
Příspěvky: 81
Registrován: 07 dub 2014 11:56

Re: Rsit + chyba v dll

#8 Příspěvek od Cizap »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by DOMA at 2015-04-04 18:37:09 Run:1
Running from C:\Users\DOMA\Desktop
Loaded Profiles: DOMA (Available profiles: DOMA)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe [202256 2014-08-19] (RealNetworks, Inc.)
HKU\S-1-5-21-1926774154-4221507170-2112547352-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

2015-04-03 19:46 - 2015-04-03 19:47 - 00013457 _____ () C:\Users\DOMA\Desktop\FRST.txt
2015-04-03 18:52 - 2015-04-03 18:30 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2015-04-03 18:31 - 2015-04-03 19:01 - 00015716 _____ () C:\zoek-results.log
2015-04-03 18:30 - 2015-04-03 18:49 - 00000000 ____D () C:\zoek_backup
2015-04-03 18:20 - 2015-04-03 19:00 - 00000154 _____ () C:\WINDOWS\setupact.log
2015-04-03 18:20 - 2015-04-03 18:20 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-04-03 18:19 - 2015-04-03 18:59 - 00012846 _____ () C:\WINDOWS\PFRO.log
2015-04-03 18:16 - 2015-04-03 18:18 - 00000000 ____D () C:\AdwCleaner
2015-04-03 15:46 - 2015-04-03 15:46 - 00000000 ____D () C:\rsit
2015-04-03 15:46 - 2015-04-03 15:46 - 00000000 ____D () C:\Program Files\trend micro

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

AlternateDataStreams: C:\ProgramData\TEMP:C5831B98

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\TkBellExe => value deleted successfully.
HKU\S-1-5-21-1926774154-4221507170-2112547352-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"C:\Users\DOMA\Desktop\FRST.txt" => File/Directory not found.
C:\WINDOWS\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\WINDOWS\setupact.log => Moved successfully.
C:\WINDOWS\setuperr.log => Moved successfully.
C:\WINDOWS\PFRO.log => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\ProgramData\TEMP => ":C5831B98" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 32.3 MB temporary data.


The system needed a reboot.

==== End of Fixlog 18:37:42 ====
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Rsit + chyba v dll

#9 Příspěvek od vyosek »

Jak se chova PC??
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Cizap
Návštěvník
Návštěvník
Příspěvky: 81
Registrován: 07 dub 2014 11:56

Re: Rsit + chyba v dll

#10 Příspěvek od Cizap »

Vše ok...žádný reklamy ani chyby už to neháže :)
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Rsit + chyba v dll

#11 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: DelFix https://toolslib.net/downloads/finish/2/
  • Stahnete a spustte
  • Ponechte zatrzitkou pouze u volby Remote disinfection tools
  • Kliknete na Run
:arrow: Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Cizap
Návštěvník
Návštěvník
Příspěvky: 81
Registrován: 07 dub 2014 11:56

Re: Rsit + chyba v dll

#12 Příspěvek od Cizap »

Supr provedeno. Velice děkuji a "naviděnou" :) hezký večer.
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Rsit + chyba v dll

#13 Příspěvek od vyosek »

Nemate zac, rad jsem pomohl :worship: Zase nekdy :)


A na zaklade Pravidla o zamykani temat :lock:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“