Nefunguje facebook + otevírají se nechtěné stránky.

Zpráva

Nexius · #1 Příspěvek od **Nexius** » 14 dub 2015 19:45

Dobrý den,
rád bych Vás poprosil o radu, co mám dělat s mým počítačem, jelikož si už nevím rady.
Mám dva problémy:
1) Nefunguje facebook. Občas se nechce načíst a jiné stránky v pohodě fungují, z jiného pc se můžu na můj facebook příhlasit. Občas pomůže restart notebooku, ale jen dočasně

2) Při surfování po internetu se mi nechtěně otvírají další stránky - pro vysvětlenou, otevřu si třeba nějaký článek na internetu a po chvíli se mi stránka přesměruje na nějakou reklamu nebo něco podobného. (např. [url]hxxp://ih3zz.super-promo.835.xyz/?sov=963069499&hid=dfdrdrhfdvft&redid=7931&gsid=47&id=XNSX.1354502722.339464.0dd9a4b3ee.8191.25704c17c0ad5851994f4b2c943968a7%3A%3Apc-r7931-t47[/url])
Děkuji za případnou pomoc a omlouvám se, jestli jsem omylem příspěvek vložil jinam než se má

#2 Příspěvek od **vyosek** » 14 dub 2015 19:46

Zdravim

Dejte prosim na zacatek log z FRST http://forum.viry.cz/viewtopic.php?f=24&t=132509 a mrknem na to

Nexius · #3 Příspěvek od **Nexius** » 14 dub 2015 19:51

Ahoj, když jsem chtěl přejít na http://vyosek.ic.cz/pro_usery/FRSTLauncher.exe - píše mi chrom :Web, na který se chystáte přejít, obsahuje škodlivé programy. Útočníci na webu vyosek.ic.cz by se mohli pokusit přimět vás k instalaci programů, které nepříznivě ovlivní procházení webu (například změní vaši domovskou stránku nebo na navštěvovaných stránkách budou zobrazovat další reklamy). .... Je tento web bezpečný?

#4 Příspěvek od **vyosek** » 14 dub 2015 20:35

Ano, je ten web bezpecny, je to muj web a je cisty, je to jen falesna detekce

Ale pripadne stahnete jen samostny FRST a ten spustte

Nexius · #5 Příspěvek od **Nexius** » 15 dub 2015 06:33

Dobré ráno, ikdyž vypnu antivirus, stejně se na stránku nedostanu, chrom mě nepustí - navíc když jsem se tam snažil dostat, našlo mi to trojského koně. Není prosím nějaká jiná stránka, z které by se to dalo stáhnout?

#6 Příspěvek od **vyosek** » 15 dub 2015 06:41

Stahnete odsud http://www.bleepingcomputer.com/downloa ... scan-tool/ jen FRST dle Vaseho systemu a ten spustte

Nexius · #7 Příspěvek od **Nexius** » 15 dub 2015 11:54

Tady to je:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-04-2015
Ran by matejlitovel (administrator) on PC-DOMA on 15-04-2015 12:52:02
Running from C:\Users\matejlitovel\Desktop
Loaded Profiles: matejlitovel (Available profiles: matejlitovel)
Platform: Windows 8.1 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Lavasoft Limited) C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.2.7\LavasoftTcpService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
() C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\matejlitovel\Desktop\FRST64 (1).exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BtPreLoad] => C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-08-20] ()
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-08-06] (IDT, Inc.)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [334240 2012-08-29] (Hewlett-Packard Company)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-24] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => c:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4411952 2014-11-04] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [USB Gamepad] => C:\WINDOWS\USB Vibration\7906\USB Gamepad.exe [704512 2007-05-23] ()
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2874048 2015-02-19] (Valve Corporation)
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [1298240 2015-02-18] (Lavasoft)
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\Run: [GoogleChromeAutoLaunch_0A7B8596254A7F90C46BFA1EEC2C2448] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [809288 2015-03-30] (Google Inc.)
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-26] (Disc Soft Ltd)
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\MountPoints2: {816e3e18-caf3-11e4-be95-20689d9657fc} - "G:\setup.exe"
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\MountPoints2: {816e3e35-caf3-11e4-be95-20689d9657fc} - "H:\autorun.exe"
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\MountPoints2: {844e3d06-a77c-11e4-be80-20689d9657fc} - "G:\SETUP.EXE"
Lsa: [Notification Packages] DPPassFilter scecli
BootExecute: autocheck autochk * sdnclean64.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3881529949-222424553-438274079-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMNTDFJS
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2015-02-18] (IObit)
BHO: No Name -> {1a9befb4-c121-4d11-9957-4933baf37ddd} -> No File
BHO: No Name -> {37756782-01ab-44f4-a91f-74f9ec1b85cc} -> No File
BHO: No Name -> {3afc3424-4c0f-454e-a5c7-a2f82b4e08eb} -> No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-02-07] (Oracle Corporation)
BHO: No Name -> {a3c3aa82-9641-4bfe-8fbc-d1f05c1167fb} -> No File
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: No Name -> {b8e5fb46-816f-4466-9253-0566004baace} -> No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-02-07] (Oracle Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2014-10-17] (IObit)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
Winsock: Catalog9 01 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [326240] (Lavasoft Limited)
Winsock: Catalog9 02 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [326240] (Lavasoft Limited)
Winsock: Catalog9 03 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [326240] (Lavasoft Limited)
Winsock: Catalog9 04 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [326240] (Lavasoft Limited)
Winsock: Catalog9 16 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [326240] (Lavasoft Limited)
Winsock: Catalog9-x64 01 C:\WINDOWS\system32\LavasoftTcpService64.dll [372264] (Lavasoft Limited)
Winsock: Catalog9-x64 02 C:\WINDOWS\system32\LavasoftTcpService64.dll [372264] (Lavasoft Limited)
Winsock: Catalog9-x64 03 C:\WINDOWS\system32\LavasoftTcpService64.dll [372264] (Lavasoft Limited)
Winsock: Catalog9-x64 04 C:\WINDOWS\system32\LavasoftTcpService64.dll [372264] (Lavasoft Limited)
Winsock: Catalog9-x64 16 C:\WINDOWS\system32\LavasoftTcpService64.dll [372264] (Lavasoft Limited)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-02-07] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-02-07] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: digitalpersona.com/ChromeDPAgent -> C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\components\npChromeDPAgent.dll [2012-10-26] (DigitalPersona, Inc.)
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt [2015-01-30]

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-24]
CHR Extension: (Google Docs) - C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-24]
CHR Extension: (Google Drive) - C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-24]
CHR Extension: (Brushed) - C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfjgbcjfpbbfepcccpaffkjofcmglifg [2015-01-25]
CHR Extension: (YouTube) - C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-24]
CHR Extension: (Google Search) - C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-24]
CHR Extension: (Google Sheets) - C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-24]
CHR Extension: (Top Eleven) - C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljphpjlafmmdmegmfbkacafhbegjfkkn [2015-03-11]
CHR Extension: (DigitalPersona Extension) - C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab [2015-01-30]
CHR Extension: (Google Wallet) - C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-24]
CHR Extension: (Gmail) - C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-24]
CHR HKLM-x32\...\Chrome\Extension: [ncffjdbbodifgldkcbhmiiljfcnbgjab] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\dpchrome.crx [2012-10-26]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-20] (Qualcomm Atheros Commnucations) [File not signed]
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4942384 2014-10-17] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-26] (Disc Soft Ltd)
R2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [488824 2012-10-26] (DigitalPersona, Inc.)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [523680 2012-08-29] (Hewlett-Packard Company)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-19] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation)
R2 LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.2.7\LavasoftTcpService.exe [1516104 2015-02-18] (Lavasoft Limited)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2630432 2014-11-04] (IObit)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2015-03-15] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 SearchProtectionService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [15208 2015-02-18] ()
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [321536 2012-08-06] (IDT, Inc.) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-20] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3858944 2013-10-17] (Qualcomm Atheros Communications, Inc.)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20912 2012-10-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [209720 2014-11-04] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311608 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [248632 2014-11-04] (AVG Technologies CZ, s.r.o.)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-11-21] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30352 2015-03-15] (Disc Soft Ltd)
S3 hid7906; C:\Windows\SysWOW64\drivers\hid7906.sys [34793 2007-05-23] (Compuware Corporation) [File not signed]
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-11-21] (Microsoft Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-15] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [43832 2012-08-15] (Synaptics Incorporated)
R3 SNP2UVC; C:\Windows\system32\DRIVERS\snp2uvc.sys [1862536 2012-07-28] ()
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)
S3 BTATH_LWFLT; \SystemRoot\system32\DRIVERS\btath_lwflt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-15 12:52 - 2015-04-15 12:53 - 00021335 _____ () C:\Users\matejlitovel\Desktop\FRST.txt
2015-04-15 12:51 - 2015-04-15 12:52 - 00000000 ____D () C:\FRST
2015-04-15 12:50 - 2015-04-15 12:50 - 02097152 _____ (Farbar) C:\Users\matejlitovel\Desktop\FRST64 (1).exe
2015-04-15 12:49 - 2015-04-15 12:49 - 00000000 ___RD () C:\Users\matejlitovel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-04-14 20:50 - 2015-04-14 20:50 - 02096640 _____ (Farbar) C:\Users\matejlitovel\Downloads\FRST64.exe
2015-04-11 22:39 - 2015-04-12 00:00 - 1475921176 _____ () C:\Users\matejlitovel\Downloads\Focus---tit---Komedie-krimi-drama-romantický---USA-2015-by-drlive.avi
2015-04-08 19:04 - 2015-04-08 22:13 - 00000000 ____D () C:\Users\matejlitovel\Desktop\zachránit telfon
2015-04-08 19:01 - 2015-04-08 22:11 - 00000000 ____D () C:\Users\matejlitovel\Desktop\Digital
2015-04-08 18:57 - 2015-04-08 18:59 - 00000000 ____D () C:\Users\matejlitovel\Desktop\Londýn-Paříž
2015-04-08 18:55 - 2015-04-08 19:04 - 00000000 ____D () C:\Users\matejlitovel\Desktop\Alča
2015-04-06 08:45 - 2015-04-06 08:47 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-04-06 08:45 - 2015-04-06 08:45 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-04-03 22:15 - 2015-04-03 22:15 - 00000000 ____D () C:\Users\matejlitovel\AppData\Roaming\LolClient
2015-04-03 09:53 - 2015-04-03 09:59 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-04-03 09:53 - 2015-04-03 09:53 - 00001405 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2015-04-03 09:53 - 2015-04-03 09:53 - 00001393 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2015-04-03 09:53 - 2015-04-03 09:53 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Safer-Networking
2015-04-03 09:53 - 2015-04-03 09:53 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-04-03 09:53 - 2015-04-03 09:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2015-04-03 09:53 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe
2015-04-03 09:51 - 2015-04-03 09:52 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\matejlitovel\Downloads\spybot-2.4.exe
2015-04-02 16:44 - 2014-12-26 03:03 - 00000000 ____D () C:\Users\matejlitovel\Desktop\Alibaba
2015-04-02 16:16 - 2015-04-02 16:38 - 398879946 _____ () C:\Users\matejlitovel\Downloads\Alibaba-a-40-loupežníků..HRA.rar
2015-04-01 17:59 - 2015-04-01 17:59 - 00042496 _____ () C:\Users\matejlitovel\Downloads\Grafická část (1).xls
2015-03-27 22:12 - 2015-03-27 22:12 - 00000000 ____D () C:\ProgramData\Riot Games
2015-03-27 22:07 - 2015-03-27 22:07 - 00000000 ____D () C:\Riot Games
2015-03-27 22:07 - 2008-07-12 09:18 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2015-03-27 22:07 - 2008-07-12 09:18 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2015-03-27 22:07 - 2008-07-12 09:18 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2015-03-27 22:06 - 2015-03-27 22:08 - 00000000 ____D () C:\Users\matejlitovel\AppData\Roaming\Riot Games
2015-03-27 22:05 - 2015-03-27 22:06 - 30993712 _____ (Riot Games) C:\Users\matejlitovel\Downloads\LeagueofLegends_EUNE_Installer_9_15_2014.exe
2015-03-25 21:24 - 2015-03-25 21:24 - 00001554 _____ () C:\Users\matejlitovel\Desktop\FarCry4 – zástupce.lnk
2015-03-25 20:33 - 2015-03-25 20:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Far Cry 4
2015-03-25 20:15 - 2015-03-27 22:21 - 00000000 ____D () C:\Program Files (x86)\Far Cry 4
2015-03-25 20:14 - 2015-03-25 20:14 - 00003548 _____ () C:\WINDOWS\System32\Tasks\Java Updater
2015-03-25 20:14 - 2015-03-25 20:14 - 00000000 __SHD () C:\Users\matejlitovel\AppData\Roaming\kernel
2015-03-25 19:54 - 2015-03-25 19:54 - 00000000 ____D () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ
2015-03-25 19:34 - 2015-03-25 19:51 - 302296056 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part16.rar
2015-03-25 17:13 - 2015-03-25 18:58 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part15.rar
2015-03-25 15:20 - 2015-03-25 17:05 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part14.rar
2015-03-25 15:19 - 2015-03-11 04:38 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-03-25 15:19 - 2015-03-11 00:08 - 01107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-03-25 15:19 - 2015-03-11 00:08 - 00943104 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-03-25 15:19 - 2015-03-11 00:08 - 00760320 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-03-25 15:19 - 2015-03-11 00:08 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-03-25 15:19 - 2015-03-11 00:08 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-03-25 15:19 - 2015-03-11 00:08 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-03-24 21:00 - 2015-03-24 22:45 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part13.rar
2015-03-24 21:00 - 2015-03-24 21:00 - 00042496 _____ () C:\Users\matejlitovel\Downloads\Grafická část.xls
2015-03-24 17:16 - 2015-03-24 19:02 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part12.rar
2015-03-24 15:12 - 2015-03-24 16:57 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part11.rar
2015-03-23 20:12 - 2015-03-23 21:58 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part10.rar
2015-03-23 18:44 - 2015-03-23 18:44 - 00000000 ____D () C:\Users\matejlitovel\Downloads\jazz-jackrabbit-2_1998
2015-03-23 18:43 - 2015-03-23 18:44 - 43430128 _____ () C:\Users\matejlitovel\Downloads\jazz-jackrabbit-2_1998.zip
2015-03-23 15:56 - 2015-03-23 17:43 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part09.rar
2015-03-22 18:29 - 2015-03-22 20:15 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part08.rar
2015-03-22 16:36 - 2015-03-22 18:23 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part07.rar
2015-03-21 19:44 - 2015-03-21 21:29 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part06.rar
2015-03-21 17:42 - 2015-03-21 19:28 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part05.rar
2015-03-21 15:20 - 2015-03-21 17:05 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part04.rar
2015-03-21 13:05 - 2015-03-21 14:50 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part03.rar
2015-03-21 11:11 - 2015-03-21 12:56 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part02.rar
2015-03-21 09:19 - 2015-03-21 11:05 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part01.rar
2015-03-20 20:06 - 2015-03-20 20:06 - 00060510 _____ () C:\Users\matejlitovel\Downloads\[SkT]Far_Cry_4_(2014)(CZ).torrent
2015-03-17 19:58 - 2015-03-17 19:58 - 01735888 _____ () C:\Users\matejlitovel\Downloads\Gamepad_TRACER_ShogunTRJ-208_www.INSTALKI.pl.zip
2015-03-17 19:19 - 2015-03-17 19:19 - 00000000 ____D () C:\WINDOWS\USB Vibration
2015-03-17 19:19 - 2007-05-23 18:18 - 00034793 _____ (Compuware Corporation) C:\WINDOWS\SysWOW64\Drivers\hid7906.sys
2015-03-17 19:15 - 2015-03-17 19:15 - 00000000 ____D () C:\Program Files (x86)\USB Vibration
2015-03-17 19:14 - 2015-03-17 19:15 - 01735888 _____ () C:\Users\matejlitovel\Downloads\ster_34010.zip
2015-03-16 17:47 - 2015-03-16 17:47 - 00000000 ____D () C:\ProgramData\PDFC
2015-03-16 17:46 - 2015-03-16 17:46 - 00000000 ____D () C:\Dokumenty

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-15 12:53 - 2015-01-28 17:13 - 00000000 ____D () C:\ProgramData\MFAData
2015-04-15 12:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-04-15 12:49 - 2015-02-18 21:59 - 01664099 _____ () C:\WINDOWS\WindowsUpdate.log
2015-04-15 12:48 - 2015-01-24 10:10 - 00000972 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-15 07:42 - 2015-03-11 16:06 - 00010229 _____ () C:\WINDOWS\setupact.log
2015-04-15 07:42 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-04-15 07:24 - 2015-02-01 13:35 - 00003994 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{1FF1181D-D7B2-43CA-B98D-1BC43FF32FBD}
2015-04-15 07:22 - 2015-01-24 10:10 - 00000976 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-15 07:20 - 2015-02-16 16:05 - 00000020 _____ () C:\Users\matejlitovel\AppData\Roaming\appdataFr3.bin
2015-04-14 15:30 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-04-14 07:17 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-04-13 20:55 - 2015-01-25 13:14 - 00000376 _____ () C:\WINDOWS\Tasks\HPCeeScheduleFormatejlitovel.job
2015-04-13 20:26 - 2015-01-25 13:14 - 00003204 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleFormatejlitovel
2015-04-13 20:26 - 2015-01-25 12:09 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log
2015-04-13 20:15 - 2014-11-21 06:54 - 01934988 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-13 20:15 - 2014-11-21 06:10 - 00802206 _____ () C:\WINDOWS\system32\perfh005.dat
2015-04-13 20:15 - 2014-11-21 06:10 - 00183700 _____ () C:\WINDOWS\system32\perfc005.dat
2015-04-13 20:08 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-04-13 15:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-04-12 10:45 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports
2015-04-11 21:33 - 2015-02-18 21:59 - 00000000 ____D () C:\ProgramData\ProductData
2015-04-09 21:08 - 2015-01-25 00:49 - 00115200 ___SH () C:\Users\matejlitovel\Downloads\Thumbs.db
2015-04-08 22:13 - 2015-01-31 22:26 - 00312320 ___SH () C:\Users\matejlitovel\Desktop\Thumbs.db
2015-04-08 21:07 - 2015-03-11 21:39 - 01659824 _____ () C:\WINDOWS\PFRO.log
2015-04-08 18:58 - 2015-01-30 12:33 - 00000000 ____D () C:\Users\matejlitovel\Desktop\Fotky
2015-04-06 23:18 - 2015-01-25 01:26 - 00000000 ____D () C:\Users\matejlitovel\AppData\Roaming\Skype
2015-04-06 08:44 - 2015-01-24 09:55 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3881529949-222424553-438274079-1002
2015-04-04 10:26 - 2015-01-30 09:06 - 00000000 ____D () C:\Users\matejlitovel\AppData\Local\Microsoft Help
2015-04-04 10:23 - 2015-01-24 10:11 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-01 14:39 - 2015-02-11 18:50 - 00000000 ____D () C:\Users\matejlitovel\AppData\Roaming\vlc
2015-03-30 15:05 - 2015-01-25 01:44 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-03-28 22:16 - 2015-02-09 10:46 - 00000000 ____D () C:\Users\matejlitovel\Desktop\ČTENÁŘÁK
2015-03-25 20:40 - 2015-03-15 18:17 - 00000000 ____D () C:\Users\matejlitovel\Documents\My Games
2015-03-25 16:05 - 2015-01-24 12:53 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-03-25 16:05 - 2014-11-21 14:26 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-03-24 16:32 - 2015-03-15 18:17 - 00281688 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2015-03-24 16:32 - 2015-03-15 18:17 - 00281688 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.exe
2015-03-23 23:09 - 2015-01-24 15:58 - 00000000 ____D () C:\Users\matejlitovel
2015-03-22 22:16 - 2015-03-15 18:17 - 00281688 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2015-03-20 22:25 - 2015-03-01 12:17 - 00000000 ____D () C:\Users\matejlitovel\AppData\Roaming\uTorrent
2015-03-17 19:19 - 2012-09-08 10:45 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-16 17:58 - 2015-02-18 22:07 - 00000308 _____ () C:\WINDOWS\Tasks\Uninstaller_SkipUac_matejlitovel.job
2015-03-16 17:47 - 2015-02-18 21:59 - 00000000 ____D () C:\ProgramData\IObit
2015-03-16 17:47 - 2012-09-08 10:44 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools

==================== Files in the root of some directories =======

2015-02-16 16:05 - 2015-04-15 07:20 - 0000020 _____ () C:\Users\matejlitovel\AppData\Roaming\appdataFr3.bin

Some content of TEMP:
====================
C:\Users\matejlitovel\AppData\Local\Temp\SkypeSetup.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-04-05 11:53

==================== End Of Log ============================

#8 Příspěvek od **vyosek** » 15 dub 2015 14:07

Odinstalujte

Spybot - Search & Destroy - zastaraly a neucinny
IObit LiveUpdate a IObit Uninstaller a vse od IOBit - cinske smejdy, jen skodi nez aby pomahali
Lavasoft SearchProtect - zastaraly a neucinny

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Po spusteni probehne stazeni databaze
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Nexius · #9 Příspěvek od **Nexius** » 15 dub 2015 20:50

Všechny programy jsem odinstaloval - tady je log z adwcleaneru:
# AdwCleaner v4.201 - Log vytvořen 15/04/2015 v 21:46:28
# Aktualizováno 08/04/2015 by Xplode
# Databáze : 2015-04-15.1 [Server]
# Operační system : Windows 8.1 Pro (x64)
# Uživatelské jméno : matejlitovel - PC-DOMA
# Spuštěno z : C:\Users\matejlitovel\Desktop\adwcleaner_4.201.exe
# Nastavení : Čištění

***** [ Služby ] *****

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab

***** [ Naplánované úlohy ] *****

***** [ Zástupci ] *****

***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab
Klíč Smazáno : HKLM\SOFTWARE\69142035-34a7-31b9-5fbf-dbc50aed6d4c
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Klíč Smazáno : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Klíč Smazáno : HKCU\Software\AppDataLow\Software\adawarebp
Klíč Smazáno : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Klíč Smazáno : HKLM\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Klíč Smazáno : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17416

-\\ Google Chrome v41.0.2272.118

[C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Extension] : ncffjdbbodifgldkcbhmiiljfcnbgjab

*************************

AdwCleaner[R0].txt - [2836 bytů] - [15/04/2015 21:44:44]
AdwCleaner[S0].txt - [2703 bytů] - [15/04/2015 21:46:28]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2761 bytů] ##########

Nexius · #10 Příspěvek od **Nexius** » 15 dub 2015 21:12

Zoek.exe v5.0.0.0 Updated 08-April-2015
Tool run by matejlitovel on st 15. 04. 2015 at 21:53:13,59.
Microsoft Windows 8.1 Pro 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\matejlitovel\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

15. 4. 2015 21:54:41 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\IndepthMonitor deleted successfully
C:\PROGRA~3\PDFC deleted successfully
C:\PROGRA~3\Riot Games deleted successfully
C:\PROGRA~3\Validity deleted successfully
C:\PROGRA~3\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} deleted successfully
C:\Users\matejlitovel\AppData\Roaming\kernel deleted successfully
C:\Users\matejlitovel\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-3881529949-222424553-438274079-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} deleted successfully

==== Deleting Services ======================

==== Batch Command(s) Run By Tool======================

Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.

==== Deleting Files \ Folders ======================

C:\PROGRA~2\IndepthMonitor not found
C:\PROGRA~3\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} not found
C:\PROGRA~3\cobnffhllpeboadpdiglepmnoogkegkn deleted
C:\PROGRA~3\icfonciaganpfmojbnogkpdccnhnkfdn deleted
C:\PROGRA~3\pnclhocgejpapmbgdakhchboecjegaod deleted
C:\PROGRA~3\{3de3ac28-271c-0a2f-3de3-3ac28271b0a0} deleted
C:\PROGRA~3\{e36c0afe-8e87-682a-e36c-c0afe8e82bfa} deleted
C:\PROGRA~3\15352919295039446147 deleted
C:\Users\matejlitovel\AppData\Roaming\appdataFr3.bin deleted
C:\Users\matejlitovel\AppData\Roaming\ProductData deleted
C:\PROGRA~3\ProductData deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\WINDOWS\wininit.ini deleted
C:\WINDOWS\SysNative\config\systemprofile\Searches deleted
C:\WINDOWS\SysWOW64\LavasoftTcpService.dll deleted
C:\WINDOWS\SysWOW64\LavasoftTcpServiceOff.ini deleted
C:\WINDOWS\SysWow64\AI_RecycleBin deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"otis@digitalpersona.com"="C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt" [30. 01. 2015 10:04]

==== Chromium Look ======================

Google Chrome Version: 41.0.2272.118 (Latest Stable version: 41.0.2272.118) [z-db]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.bing.com?pc=CMNTDFJS"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.bing.com?pc=CMNTDFJS"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"

==== Reset Google Chrome ======================

C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Web Data copy was reset successfully
C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Web Data.ReadOnly was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\matejlitovel\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\matejlitovel\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\matejlitovel\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\matejlitovel\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=37 folders=15 400007 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\matejlitovel\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\MATEJL~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on st 15. 04. 2015 at 22:08:48,55 ======================

Akorát se mi tomto kroku v chromu přidal Supreme AdBlocker.

#11 Příspěvek od **vyosek** » 16 dub 2015 07:08

Poprosim o novy log z FRST a mrknem na to

Nexius · #12 Příspěvek od **Nexius** » 16 dub 2015 11:28

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-04-2015 04
Ran by matejlitovel (administrator) on PC-DOMA on 16-04-2015 12:27:40
Running from C:\Users\matejlitovel\Desktop
Loaded Profiles: matejlitovel (Available profiles: matejlitovel)
Platform: Windows 8.1 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BtPreLoad] => C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-08-20] ()
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-08-06] (IDT, Inc.)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [334240 2012-08-29] (Hewlett-Packard Company)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-24] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => c:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4411952 2014-11-04] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [USB Gamepad] => C:\WINDOWS\USB Vibration\7906\USB Gamepad.exe [704512 2007-05-23] ()
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2874048 2015-02-19] (Valve Corporation)
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\Run: [GoogleChromeAutoLaunch_0A7B8596254A7F90C46BFA1EEC2C2448] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [809288 2015-03-30] (Google Inc.)
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-26] (Disc Soft Ltd)
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\MountPoints2: {816e3e18-caf3-11e4-be95-20689d9657fc} - "G:\setup.exe"
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\MountPoints2: {816e3e35-caf3-11e4-be95-20689d9657fc} - "H:\autorun.exe"
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\MountPoints2: {844e3d06-a77c-11e4-be80-20689d9657fc} - "G:\SETUP.EXE"
Lsa: [Notification Packages] DPPassFilter scecli
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3881529949-222424553-438274079-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMNTDFJS
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3881529949-222424553-438274079-1002 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File
BHO: No Name -> {1a9befb4-c121-4d11-9957-4933baf37ddd} -> No File
BHO: No Name -> {37756782-01ab-44f4-a91f-74f9ec1b85cc} -> No File
BHO: No Name -> {3afc3424-4c0f-454e-a5c7-a2f82b4e08eb} -> No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-02-07] (Oracle Corporation)
BHO: No Name -> {a3c3aa82-9641-4bfe-8fbc-d1f05c1167fb} -> No File
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: No Name -> {b8e5fb46-816f-4466-9253-0566004baace} -> No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-02-07] (Oracle Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-02-07] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-02-07] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: digitalpersona.com/ChromeDPAgent -> C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\components\npChromeDPAgent.dll [2012-10-26] (DigitalPersona, Inc.)
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt [2015-01-30]

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Wallet) - C:\Users\matejlitovel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-24]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-20] (Qualcomm Atheros Commnucations) [File not signed]
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4942384 2014-10-17] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-26] (Disc Soft Ltd)
R2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [488824 2012-10-26] (DigitalPersona, Inc.)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [523680 2012-08-29] (Hewlett-Packard Company)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-19] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2630432 2014-11-04] (IObit)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2015-03-15] ()
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [321536 2012-08-06] (IDT, Inc.) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-20] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3858944 2013-10-17] (Qualcomm Atheros Communications, Inc.)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20912 2012-10-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [209720 2014-11-04] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311608 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [248632 2014-11-04] (AVG Technologies CZ, s.r.o.)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-11-21] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30352 2015-03-15] (Disc Soft Ltd)
S3 hid7906; C:\Windows\SysWOW64\drivers\hid7906.sys [34793 2007-05-23] (Compuware Corporation) [File not signed]
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-11-21] (Microsoft Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-15] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [43832 2012-08-15] (Synaptics Incorporated)
R3 SNP2UVC; C:\Windows\system32\DRIVERS\snp2uvc.sys [1862536 2012-07-28] ()
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)
S3 BTATH_LWFLT; \SystemRoot\system32\DRIVERS\btath_lwflt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-16 12:27 - 2015-04-16 12:27 - 02097664 _____ (Farbar) C:\Users\matejlitovel\Desktop\FRST64.exe
2015-04-16 12:27 - 2015-04-16 12:27 - 00000000 ____D () C:\Users\matejlitovel\Desktop\FRST-OlderVersion
2015-04-16 12:24 - 2015-04-16 12:24 - 00000000 ___RD () C:\Users\matejlitovel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-04-15 22:09 - 2015-04-15 22:09 - 00000020 _____ () C:\Users\matejlitovel\AppData\Roaming\appdataFr3.bin
2015-04-15 22:09 - 2015-04-15 22:09 - 00000000 ____D () C:\Users\matejlitovel\AppData\Roaming\ProductData
2015-04-15 22:09 - 2015-04-15 22:09 - 00000000 ____D () C:\Users\matejlitovel\AppData\Local\VirtualStore
2015-04-15 22:08 - 2015-04-15 22:08 - 00000000 ____D () C:\ProgramData\Validity
2015-04-15 22:07 - 2015-04-15 21:53 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2015-04-15 21:54 - 2015-04-15 22:08 - 00007500 _____ () C:\zoek-results.log
2015-04-15 21:53 - 2015-04-15 22:04 - 00000000 ____D () C:\zoek_backup
2015-04-15 21:51 - 2015-04-15 21:52 - 01305600 _____ () C:\Users\matejlitovel\Downloads\zoek.exe
2015-04-15 21:40 - 2015-04-15 21:46 - 00000000 ____D () C:\AdwCleaner
2015-04-15 21:39 - 2015-04-15 21:39 - 02217984 _____ () C:\Users\matejlitovel\Desktop\adwcleaner_4.201.exe
2015-04-15 12:53 - 2015-04-15 12:54 - 00027799 _____ () C:\Users\matejlitovel\Desktop\Addition.txt
2015-04-15 12:52 - 2015-04-16 12:27 - 00017139 _____ () C:\Users\matejlitovel\Desktop\FRST.txt
2015-04-15 12:51 - 2015-04-16 12:27 - 00000000 ____D () C:\FRST
2015-04-14 20:50 - 2015-04-14 20:50 - 02096640 _____ (Farbar) C:\Users\matejlitovel\Downloads\FRST64.exe
2015-04-11 22:39 - 2015-04-12 00:00 - 1475921176 _____ () C:\Users\matejlitovel\Downloads\Focus---tit---Komedie-krimi-drama-romantický---USA-2015-by-drlive.avi
2015-04-08 19:04 - 2015-04-08 22:13 - 00000000 ____D () C:\Users\matejlitovel\Desktop\zachránit telfon
2015-04-08 19:01 - 2015-04-08 22:11 - 00000000 ____D () C:\Users\matejlitovel\Desktop\Digital
2015-04-08 18:57 - 2015-04-08 18:59 - 00000000 ____D () C:\Users\matejlitovel\Desktop\Londýn-Paříž
2015-04-08 18:55 - 2015-04-08 19:04 - 00000000 ____D () C:\Users\matejlitovel\Desktop\Alča
2015-04-06 08:45 - 2015-04-06 08:47 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-04-06 08:45 - 2015-04-06 08:45 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-04-03 22:15 - 2015-04-03 22:15 - 00000000 ____D () C:\Users\matejlitovel\AppData\Roaming\LolClient
2015-04-03 09:53 - 2015-04-15 21:31 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-04-03 09:53 - 2015-04-15 21:29 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-04-03 09:53 - 2015-04-03 09:53 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Safer-Networking
2015-04-03 09:51 - 2015-04-03 09:52 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\matejlitovel\Downloads\spybot-2.4.exe
2015-04-02 16:44 - 2014-12-26 03:03 - 00000000 ____D () C:\Users\matejlitovel\Desktop\Alibaba
2015-04-02 16:16 - 2015-04-02 16:38 - 398879946 _____ () C:\Users\matejlitovel\Downloads\Alibaba-a-40-loupežníků..HRA.rar
2015-04-01 17:59 - 2015-04-01 17:59 - 00042496 _____ () C:\Users\matejlitovel\Downloads\Grafická část (1).xls
2015-03-27 22:07 - 2015-03-27 22:07 - 00000000 ____D () C:\Riot Games
2015-03-27 22:07 - 2008-07-12 09:18 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2015-03-27 22:07 - 2008-07-12 09:18 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2015-03-27 22:07 - 2008-07-12 09:18 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2015-03-27 22:06 - 2015-03-27 22:08 - 00000000 ____D () C:\Users\matejlitovel\AppData\Roaming\Riot Games
2015-03-27 22:05 - 2015-03-27 22:06 - 30993712 _____ (Riot Games) C:\Users\matejlitovel\Downloads\LeagueofLegends_EUNE_Installer_9_15_2014.exe
2015-03-25 21:24 - 2015-03-25 21:24 - 00001554 _____ () C:\Users\matejlitovel\Desktop\FarCry4 – zástupce.lnk
2015-03-25 20:33 - 2015-03-25 20:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Far Cry 4
2015-03-25 20:15 - 2015-03-27 22:21 - 00000000 ____D () C:\Program Files (x86)\Far Cry 4
2015-03-25 20:14 - 2015-03-25 20:14 - 00003548 _____ () C:\WINDOWS\System32\Tasks\Java Updater
2015-03-25 19:54 - 2015-03-25 19:54 - 00000000 ____D () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ
2015-03-25 19:34 - 2015-03-25 19:51 - 302296056 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part16.rar
2015-03-25 17:13 - 2015-03-25 18:58 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part15.rar
2015-03-25 15:20 - 2015-03-25 17:05 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part14.rar
2015-03-25 15:19 - 2015-03-11 04:38 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-03-25 15:19 - 2015-03-11 00:08 - 01107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-03-25 15:19 - 2015-03-11 00:08 - 00943104 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-03-25 15:19 - 2015-03-11 00:08 - 00760320 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-03-25 15:19 - 2015-03-11 00:08 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-03-25 15:19 - 2015-03-11 00:08 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-03-25 15:19 - 2015-03-11 00:08 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-03-24 21:00 - 2015-03-24 22:45 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part13.rar
2015-03-24 21:00 - 2015-03-24 21:00 - 00042496 _____ () C:\Users\matejlitovel\Downloads\Grafická část.xls
2015-03-24 17:16 - 2015-03-24 19:02 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part12.rar
2015-03-24 15:12 - 2015-03-24 16:57 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part11.rar
2015-03-23 20:12 - 2015-03-23 21:58 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part10.rar
2015-03-23 18:44 - 2015-03-23 18:44 - 00000000 ____D () C:\Users\matejlitovel\Downloads\jazz-jackrabbit-2_1998
2015-03-23 18:43 - 2015-03-23 18:44 - 43430128 _____ () C:\Users\matejlitovel\Downloads\jazz-jackrabbit-2_1998.zip
2015-03-23 15:56 - 2015-03-23 17:43 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part09.rar
2015-03-22 18:29 - 2015-03-22 20:15 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part08.rar
2015-03-22 16:36 - 2015-03-22 18:23 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part07.rar
2015-03-21 19:44 - 2015-03-21 21:29 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part06.rar
2015-03-21 17:42 - 2015-03-21 19:28 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part05.rar
2015-03-21 15:20 - 2015-03-21 17:05 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part04.rar
2015-03-21 13:05 - 2015-03-21 14:50 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part03.rar
2015-03-21 11:11 - 2015-03-21 12:56 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part02.rar
2015-03-21 09:19 - 2015-03-21 11:05 - 1887436800 _____ () C:\Users\matejlitovel\Downloads\Far-Cry-4-CZ.part01.rar
2015-03-20 20:06 - 2015-03-20 20:06 - 00060510 _____ () C:\Users\matejlitovel\Downloads\[SkT]Far_Cry_4_(2014)(CZ).torrent
2015-03-17 19:58 - 2015-03-17 19:58 - 01735888 _____ () C:\Users\matejlitovel\Downloads\Gamepad_TRACER_ShogunTRJ-208_www.INSTALKI.pl.zip
2015-03-17 19:19 - 2015-03-17 19:19 - 00000000 ____D () C:\WINDOWS\USB Vibration
2015-03-17 19:19 - 2007-05-23 18:18 - 00034793 _____ (Compuware Corporation) C:\WINDOWS\SysWOW64\Drivers\hid7906.sys
2015-03-17 19:15 - 2015-03-17 19:15 - 00000000 ____D () C:\Program Files (x86)\USB Vibration
2015-03-17 19:14 - 2015-03-17 19:15 - 01735888 _____ () C:\Users\matejlitovel\Downloads\ster_34010.zip

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-16 12:27 - 2015-01-24 09:55 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3881529949-222424553-438274079-1002
2015-04-16 12:26 - 2015-01-28 17:13 - 00000000 ____D () C:\ProgramData\MFAData
2015-04-16 12:23 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-04-16 12:22 - 2015-01-24 10:10 - 00000976 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-16 12:22 - 2015-01-24 10:10 - 00000972 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-16 07:41 - 2015-02-18 21:59 - 01347721 _____ () C:\WINDOWS\WindowsUpdate.log
2015-04-16 07:24 - 2015-02-01 13:35 - 00003994 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{1FF1181D-D7B2-43CA-B98D-1BC43FF32FBD}
2015-04-15 22:08 - 2015-03-11 21:39 - 01663274 _____ () C:\WINDOWS\PFRO.log
2015-04-15 22:08 - 2015-03-11 16:06 - 00010614 _____ () C:\WINDOWS\setupact.log
2015-04-15 22:08 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-04-15 21:45 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-04-15 21:17 - 2014-11-21 06:54 - 01934988 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-15 21:17 - 2014-11-21 06:10 - 00802206 _____ () C:\WINDOWS\system32\perfh005.dat
2015-04-15 21:17 - 2014-11-21 06:10 - 00183700 _____ () C:\WINDOWS\system32\perfc005.dat
2015-04-15 17:53 - 2015-01-25 00:49 - 00118784 ___SH () C:\Users\matejlitovel\Downloads\Thumbs.db
2015-04-14 07:17 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-04-13 20:55 - 2015-01-25 13:14 - 00000376 _____ () C:\WINDOWS\Tasks\HPCeeScheduleFormatejlitovel.job
2015-04-13 20:26 - 2015-01-25 13:14 - 00003204 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleFormatejlitovel
2015-04-13 20:26 - 2015-01-25 12:09 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log
2015-04-13 20:08 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-04-13 15:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-04-12 10:45 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports
2015-04-08 22:13 - 2015-01-31 22:26 - 00312320 ___SH () C:\Users\matejlitovel\Desktop\Thumbs.db
2015-04-08 18:58 - 2015-01-30 12:33 - 00000000 ____D () C:\Users\matejlitovel\Desktop\Fotky
2015-04-06 23:18 - 2015-01-25 01:26 - 00000000 ____D () C:\Users\matejlitovel\AppData\Roaming\Skype
2015-04-04 10:26 - 2015-01-30 09:06 - 00000000 ____D () C:\Users\matejlitovel\AppData\Local\Microsoft Help
2015-04-04 10:23 - 2015-01-24 10:11 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-01 14:39 - 2015-02-11 18:50 - 00000000 ____D () C:\Users\matejlitovel\AppData\Roaming\vlc
2015-03-30 15:05 - 2015-01-25 01:44 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-03-28 22:16 - 2015-02-09 10:46 - 00000000 ____D () C:\Users\matejlitovel\Desktop\ČTENÁŘÁK
2015-03-25 20:40 - 2015-03-15 18:17 - 00000000 ____D () C:\Users\matejlitovel\Documents\My Games
2015-03-25 16:05 - 2015-01-24 12:53 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-03-25 16:05 - 2014-11-21 14:26 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-03-24 16:32 - 2015-03-15 18:17 - 00281688 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2015-03-24 16:32 - 2015-03-15 18:17 - 00281688 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.exe
2015-03-23 23:09 - 2015-01-24 15:58 - 00000000 ____D () C:\Users\matejlitovel
2015-03-22 22:16 - 2015-03-15 18:17 - 00281688 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2015-03-20 22:25 - 2015-03-01 12:17 - 00000000 ____D () C:\Users\matejlitovel\AppData\Roaming\uTorrent
2015-03-17 19:19 - 2012-09-08 10:45 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

==================== Files in the root of some directories =======

2015-04-15 22:09 - 2015-04-15 22:09 - 0000020 _____ () C:\Users\matejlitovel\AppData\Roaming\appdataFr3.bin

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-04-15 13:01

==================== End Of Log ============================

#13 Příspěvek od **vyosek** » 22 dub 2015 08:08

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-24] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => c:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [USB Gamepad] => C:\WINDOWS\USB Vibration\7906\USB Gamepad.exe [704512 2007-05-23] ()
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2874048 2015-02-19] (Valve Corporation)
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\Run: [GoogleChromeAutoLaunch_0A7B8596254A7F90C46BFA1EEC2C2448] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [809288 2015-03-30] (Google Inc.)
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-26] (Disc Soft Ltd)
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\MountPoints2: {816e3e18-caf3-11e4-be95-20689d9657fc} - "G:\setup.exe" 
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\MountPoints2: {816e3e35-caf3-11e4-be95-20689d9657fc} - "H:\autorun.exe" 
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\MountPoints2: {844e3d06-a77c-11e4-be80-20689d9657fc} - "G:\SETUP.EXE" 
BootExecute: autocheck autochk * sdnclean64.exe

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-3881529949-222424553-438274079-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMNTDFJS
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3881529949-222424553-438274079-1002 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File
BHO: No Name -> {1a9befb4-c121-4d11-9957-4933baf37ddd} -> No File
BHO: No Name -> {37756782-01ab-44f4-a91f-74f9ec1b85cc} -> No File
BHO: No Name -> {3afc3424-4c0f-454e-a5c7-a2f82b4e08eb} -> No File
BHO: No Name -> {a3c3aa82-9641-4bfe-8fbc-d1f05c1167fb} -> No File
BHO: No Name -> {b8e5fb46-816f-4466-9253-0566004baace} -> No File

S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2630432 2014-11-04] (IObit)

C:\Program Files (x86)\IObit
2015-04-16 12:27 - 2015-04-16 12:27 - 00000000 ____D () C:\Users\matejlitovel\Desktop\FRST-OlderVersion
2015-04-15 22:07 - 2015-04-15 21:53 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2015-04-15 21:54 - 2015-04-15 22:08 - 00007500 _____ () C:\zoek-results.log
2015-04-15 21:53 - 2015-04-15 22:04 - 00000000 ____D () C:\zoek_backup
2015-04-15 21:51 - 2015-04-15 21:52 - 01305600 _____ () C:\Users\matejlitovel\Downloads\zoek.exe
2015-04-15 21:40 - 2015-04-15 21:46 - 00000000 ____D () C:\AdwCleaner
2015-04-15 21:39 - 2015-04-15 21:39 - 02217984 _____ () C:\Users\matejlitovel\Desktop\adwcleaner_4.201.exe
2015-04-15 12:53 - 2015-04-15 12:54 - 00027799 _____ () C:\Users\matejlitovel\Desktop\Addition.txt
2015-04-15 12:52 - 2015-04-16 12:27 - 00017139 _____ () C:\Users\matejlitovel\Desktop\FRST.txt
2015-04-03 09:53 - 2015-04-15 21:31 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-04-03 09:53 - 2015-04-15 21:29 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-04-03 09:53 - 2015-04-03 09:53 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Safer-Networking
2015-04-03 09:51 - 2015-04-03 09:52 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\matejlitovel\Downloads\spybot-2.4.exe

Hosts:
EmptyTemp:
Reboot:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Nexius · #14 Příspěvek od **Nexius** » 22 dub 2015 09:01

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-04-2015
Ran by matejlitovel at 2015-04-22 09:55:25 Run:1
Running from C:\Users\matejlitovel\Desktop
Loaded Profiles: matejlitovel (Available profiles: matejlitovel)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-24] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => c:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [USB Gamepad] => C:\WINDOWS\USB Vibration\7906\USB Gamepad.exe [704512 2007-05-23] ()
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2874048 2015-02-19] (Valve Corporation)
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\Run: [GoogleChromeAutoLaunch_0A7B8596254A7F90C46BFA1EEC2C2448] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [809288 2015-03-30] (Google Inc.)
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-26] (Disc Soft Ltd)
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\MountPoints2: {816e3e18-caf3-11e4-be95-20689d9657fc} - "G:\setup.exe"
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\MountPoints2: {816e3e35-caf3-11e4-be95-20689d9657fc} - "H:\autorun.exe"
HKU\S-1-5-21-3881529949-222424553-438274079-1002\...\MountPoints2: {844e3d06-a77c-11e4-be80-20689d9657fc} - "G:\SETUP.EXE"
BootExecute: autocheck autochk * sdnclean64.exe

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3881529949-222424553-438274079-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMNTDFJS
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3881529949-222424553-438274079-1002 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File
BHO: No Name -> {1a9befb4-c121-4d11-9957-4933baf37ddd} -> No File
BHO: No Name -> {37756782-01ab-44f4-a91f-74f9ec1b85cc} -> No File
BHO: No Name -> {3afc3424-4c0f-454e-a5c7-a2f82b4e08eb} -> No File
BHO: No Name -> {a3c3aa82-9641-4bfe-8fbc-d1f05c1167fb} -> No File
BHO: No Name -> {b8e5fb46-816f-4466-9253-0566004baace} -> No File

S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2630432 2014-11-04] (IObit)

C:\Program Files (x86)\IObit
2015-04-16 12:27 - 2015-04-16 12:27 - 00000000 ____D () C:\Users\matejlitovel\Desktop\FRST-OlderVersion
2015-04-15 22:07 - 2015-04-15 21:53 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2015-04-15 21:54 - 2015-04-15 22:08 - 00007500 _____ () C:\zoek-results.log
2015-04-15 21:53 - 2015-04-15 22:04 - 00000000 ____D () C:\zoek_backup
2015-04-15 21:51 - 2015-04-15 21:52 - 01305600 _____ () C:\Users\matejlitovel\Downloads\zoek.exe
2015-04-15 21:40 - 2015-04-15 21:46 - 00000000 ____D () C:\AdwCleaner
2015-04-15 21:39 - 2015-04-15 21:39 - 02217984 _____ () C:\Users\matejlitovel\Desktop\adwcleaner_4.201.exe
2015-04-15 12:53 - 2015-04-15 12:54 - 00027799 _____ () C:\Users\matejlitovel\Desktop\Addition.txt
2015-04-15 12:52 - 2015-04-16 12:27 - 00017139 _____ () C:\Users\matejlitovel\Desktop\FRST.txt
2015-04-03 09:53 - 2015-04-15 21:31 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-04-03 09:53 - 2015-04-15 21:29 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-04-03 09:53 - 2015-04-03 09:53 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Safer-Networking
2015-04-03 09:51 - 2015-04-03 09:52 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\matejlitovel\Downloads\spybot-2.4.exe

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\CLMLServer_For_P2G8 => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\CLVirtualDrive => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\RemoteControl10 => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\USB Gamepad => value deleted successfully.
HKU\S-1-5-21-3881529949-222424553-438274079-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Steam => value deleted successfully.
HKU\S-1-5-21-3881529949-222424553-438274079-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Web Companion => value deleted successfully.
HKU\S-1-5-21-3881529949-222424553-438274079-1002\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_0A7B8596254A7F90C46BFA1EEC2C2448 => value deleted successfully.
HKU\S-1-5-21-3881529949-222424553-438274079-1002\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value deleted successfully.
"HKU\S-1-5-21-3881529949-222424553-438274079-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{816e3e18-caf3-11e4-be95-20689d9657fc}" => Key deleted successfully.
HKCR\CLSID\{816e3e18-caf3-11e4-be95-20689d9657fc} => Key not found.
"HKU\S-1-5-21-3881529949-222424553-438274079-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{816e3e35-caf3-11e4-be95-20689d9657fc}" => Key deleted successfully.
HKCR\CLSID\{816e3e35-caf3-11e4-be95-20689d9657fc} => Key not found.
"HKU\S-1-5-21-3881529949-222424553-438274079-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{844e3d06-a77c-11e4-be80-20689d9657fc}" => Key deleted successfully.
HKCR\CLSID\{844e3d06-a77c-11e4-be80-20689d9657fc} => Key not found.
HKLM\System\CurrentControlSet\Control\Session Manager\\BootExecute => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKU\S-1-5-21-3881529949-222424553-438274079-1002\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-3881529949-222424553-438274079-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}" => Key deleted successfully.
HKCR\CLSID\{012E1000-F331-11DB-8314-0800200C9A66} => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}" => Key deleted successfully.
"HKCR\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1a9befb4-c121-4d11-9957-4933baf37ddd}" => Key deleted successfully.
HKCR\CLSID\{1a9befb4-c121-4d11-9957-4933baf37ddd} => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{37756782-01ab-44f4-a91f-74f9ec1b85cc}" => Key deleted successfully.
HKCR\CLSID\{37756782-01ab-44f4-a91f-74f9ec1b85cc} => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3afc3424-4c0f-454e-a5c7-a2f82b4e08eb}" => Key deleted successfully.
HKCR\CLSID\{3afc3424-4c0f-454e-a5c7-a2f82b4e08eb} => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a3c3aa82-9641-4bfe-8fbc-d1f05c1167fb}" => Key deleted successfully.
HKCR\CLSID\{a3c3aa82-9641-4bfe-8fbc-d1f05c1167fb} => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b8e5fb46-816f-4466-9253-0566004baace}" => Key deleted successfully.
HKCR\CLSID\{b8e5fb46-816f-4466-9253-0566004baace} => Key not found.
LiveUpdateSvc => Service deleted successfully.
C:\Program Files (x86)\IObit => Moved successfully.
C:\Users\matejlitovel\Desktop\FRST-OlderVersion => Moved successfully.
C:\WINDOWS\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
"C:\Users\matejlitovel\Downloads\zoek.exe" => File/Directory not found.
C:\AdwCleaner => Moved successfully.
C:\Users\matejlitovel\Desktop\adwcleaner_4.201.exe => Moved successfully.
C:\Users\matejlitovel\Desktop\Addition.txt => Moved successfully.
C:\Users\matejlitovel\Desktop\FRST.txt => Moved successfully.
C:\Program Files (x86)\Spybot - Search & Destroy 2 => Moved successfully.
C:\ProgramData\Spybot - Search & Destroy => Moved successfully.
C:\WINDOWS\System32\Tasks\Safer-Networking => Moved successfully.
"C:\Users\matejlitovel\Downloads\spybot-2.4.exe" => File/Directory not found.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 1.4 GB temporary data.

The system needed a reboot.

==== End of Fixlog 09:56:33 ====

#15 Příspěvek od **vyosek** » 22 dub 2015 09:08

Nedavejte logy do code

Jak se chova PC??

VIRY.CZ

Nefunguje facebook + otevírají se nechtěné stránky.

Nefunguje facebook + otevírají se nechtěné stránky.

Re: Nefunguje facebook + otevírají se nechtěné stránky.

Re: Nefunguje facebook + otevírají se nechtěné stránky.

Re: Nefunguje facebook + otevírají se nechtěné stránky.

Re: Nefunguje facebook + otevírají se nechtěné stránky.

Re: Nefunguje facebook + otevírají se nechtěné stránky.

Re: Nefunguje facebook + otevírají se nechtěné stránky.

Re: Nefunguje facebook + otevírají se nechtěné stránky.

Re: Nefunguje facebook + otevírají se nechtěné stránky.

Re: Nefunguje facebook + otevírají se nechtěné stránky.

Re: Nefunguje facebook + otevírají se nechtěné stránky.

Re: Nefunguje facebook + otevírají se nechtěné stránky.

Re: Nefunguje facebook + otevírají se nechtěné stránky.

Re: Nefunguje facebook + otevírají se nechtěné stránky.

Re: Nefunguje facebook + otevírají se nechtěné stránky.