Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prohlížeč a reklamy

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
kosak
Návštěvník
Návštěvník
Příspěvky: 14
Registrován: 15 říj 2015 19:47

Prohlížeč a reklamy

#1 Příspěvek od kosak »

Dobrý večer,

ve všech prohlížečích mi vyskakujou všelijaké reklamy, jak přes stránky, které navštívím, tak se zároveň otevírají nová okna s reklamamy typu: "Vyhrál jste milion, klikněte sem a sem" nebo pozvánky k různým hrám.

Níže zasílám Logy dle návodů.
Děkuji za případnou pomoc.

FRST:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:15-10-2015
Ran by Adéla (administrator) on ADA (15-10-2015 20:56:34)
Running from C:\Users\Adéla\Desktop
Loaded Profiles: Adéla (Available Profiles: Adéla)
Platform: Windows 8.1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Users\Adéla\AppData\Roaming\SettingsGuard\updater.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
() C:\Users\Adéla\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
() C:\Users\Adéla\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Toshiba) C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngtool.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\mftutil.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe
(Microsoft Corporation) C:\Windows\Camera\Camera.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
() C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugincontainer.exe
() C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\5\Plugin.exe
() C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\10\Plugin.exe
() C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\3\Plugin.exe
() C:\Program Files (x86)\Common Files\87737dd0-ad90-4193-bd48-336966b8d777\updater.exe
() C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\6\Plugin.exe
() C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\12\Plugin.exe
() C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\8\Plugin.exe
() C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\7\Plugin.exe
() C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\7\Plugin.exe
() C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\2\Plugin.exe
() C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\3\Plugin.exe
() C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugins\12\Plugin.exe
(Google Inc.) C:\Users\Adéla\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Adéla\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Adéla\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Adéla\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Adéla\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Adéla\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Adéla\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2012-07-13] (Realtek Semiconductor)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2608040 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-05] ()
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-14] (Synaptics Incorporated)
HKLM-x32\...\Run: [ToshibaDynamicIconUtility] => C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe [1498624 2012-08-09] (Toshiba)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [TPUReg(x86)] => "C:\Program Files\TOSHIBA\Password Utility\TosPU.exe" /Retimes
HKLM-x32\...\Run: [TPUReg] => C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe [6884352 2012-08-23] (Pegatron Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-10-14] (AVAST Software)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [Google Update] => C:\Users\Adéla\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc.)
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Adéla\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Adéla\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53655680 2015-07-28] (Skype Technologies S.A.)
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [icq] => C:\Users\Adéla\AppData\Roaming\ICQM\icq.exe [35239432 2014-11-26] (ICQ)
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE [458456 2014-12-19] (ZONER software)
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-07-24] (Sony)
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [EA Core] => C:\Program Files (x86)\Electronic Arts\EADM\Core.exe [3325952 2009-03-28] (Electronic Arts)
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\MountPoints2: {83635113-3c53-11e5-bebe-2016d86b26dc} - "G:\Startme.exe"
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\MountPoints2: {a7ab00be-94fd-11e4-be9a-2016d86b26dc} - "D:\LGAutoRun.exe"
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\MountPoints2: {fae4cfd5-24af-11e3-be74-2016d86b26dc} - "F:\autorun.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-14] (AVAST Software)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.73.254
Tcpip\..\Interfaces\{86148561-176F-4F5F-B848-EBF823AF68BD}: [DhcpNameServer] 192.168.73.254

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggbeFoJBwgXFRgSIlpeTA1GFgQOeVwPUhQVQw0SdA0PAw9DEgYFIk0FA1ADB0VXfVBdFElXTwhxJVpXE10hQFJG
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/?clid=22668
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggbeFoJBwgXFRgSIlpeTA1GFgQOeVwPUhQVQw0SdA0PAw9DEgYFIk0FA1ADB0VXfVBdFElXTwhxJVpXE10hQFJG
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.seznam.cz/?clid=22668
SearchScopes: HKLM -> DefaultScope {BECAC2E5-6FF5-4540-8779-26408F875C99} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQEAAggXEFMXbQhaAl9cFQIUcRQBBA5CDFFBeAgMVQ4TFwcQcx9aFQQTSEcFME0FCFwEURNNfWtdAlYDRWVCJ1w=&q={searchTerms}
SearchScopes: HKLM -> {BECAC2E5-6FF5-4540-8779-26408F875C99} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQEAAggXEFMXbQhaAl9cFQIUcRQBBA5CDFFBeAgMVQ4TFwcQcx9aFQQTSEcFME0FCFwEURNNfWtdAlYDRWVCJ1w=&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKLM-x32 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQEAAggXEFMXbQhaAl9cFQIUcRQBBA5CDFFBeAgMVQ4TFwcQcx9aFQQTSEcFME0FCFwEURNNfWtdAlYDRWVCJ1w=&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> OldSearch URL = hxxp://search.eshield.com/serp?guid={F903C6DD-113A-4EC0-A74B-04256B408661}&action=default_search&k={searchTerms}
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {1376ED26-7DB0-45DB-9190-A1BAABB9F3C6} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_13014
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQEAAggXEFMXbQhaAl9cFQIUcRQBBA5CDFFBeAgMVQ4TFwcQcx9aFQQTSEcFME0FCFwEURNNfWtdAlYDRWVCJ1w=&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {27393244-20DB-4BD2-9531-409A6AE09AED} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_13014
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {2EA308AF-4D81-4E48-8AF4-0FD805D4F454} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_13014
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {39E3F7AF-EB0F-4AAD-A5D9-815F467C3A0A} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_13014
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {9491BCF1-8DF6-43C5-AC2E-BBE891189A5A} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_13014
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {9ABE1C1D-A47B-4915-A130-E2C20ABFA343} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_13014
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {9C7415E3-7C0F-4D49-B08B-168B13BDE9B5} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=11467
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {9ecb803f-748d-431e-8200-a3120188e8c3} URL = hxxp://www.searchalgo.com/search.html?q={searchTerms}&cid=11
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {A5E8F007-F327-430D-848E-3B5994497B81} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_13014
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {a8177b71-ee19-4e0f-b2f9-02d533eb946D} URL = hxxp://www.searchalgo.com/search.html?q={searchTerms}&cid=11
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {AC03B41F-C138-4919-A226-69675108C657} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_13014
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {BCE60771-23DD-47A6-8AB0-EDC8D7810F09} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQEAAggXEFMXbQhaAl9cFQIUcRQBBA5CDFFBeAgMVQ4TFwcQcx9aFQQTSEcFME0FCFwEURNNfWtdAlYDRWVCJ1w=&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {C91BA288-2822-4223-B46B-D8CDB91B38FD} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=PTV&o=15184&src=kw&q={searchTerms}&locale=en_EU&apn_ptnrs=^RY&apn_dtid=^YYYYYY^V2^CZ&apn_uid=98EAA4FA-1FF1-43CC-9D82-947EFA7DCE8E&apn_sauid=67B2BE16-E000-425D-9E76-4C985E7FCA2A
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {E7B9FB39-AD58-46E8-8160-00336E52DC26} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_13014
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-10-14] (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-20] (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-14] (AVAST Software)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-20] (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-20] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-20] (Google Inc.)
Toolbar: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-07-24] (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2011-09-28] ()
FF Plugin HKU\S-1-5-21-2620750530-3227779391-1858522390-1001: @tnt2npapi.com/Plugin -> C:\Users\Adéla\AppData\Local\TNT2\2.0.0.1995\npTNT2.dll [2015-08-04] (Eshield)
FF Plugin HKU\S-1-5-21-2620750530-3227779391-1858522390-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin HKU\S-1-5-21-2620750530-3227779391-1858522390-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin HKU\S-1-5-21-2620750530-3227779391-1858522390-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Adéla\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-05-11] (Unity Technologies ApS)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-10-14]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found

Chrome:
=======
CHR HomePage: Default -> hxxp://www.msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
CHR RestoreOnStartup: Default -> "hxxps://www.seznam.cz/?clid=22668"
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC ... earchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR Profile: C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (EFF Tracker Blocking Laboratory) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\adoehefoodmhmcjkeppdlnknjgnajgmi [2015-10-14]
CHR Extension: (Dokumenty Google) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-14]
CHR Extension: (Disk Google) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-14]
CHR Extension: (Seznam Lištička - Email) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2013-10-14]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2013-10-14]
CHR Extension: (YouTube) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-14]
CHR Extension: (Vyhledávání Google) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-14]
CHR Extension: (eShield) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp [2015-08-05]
CHR Extension: (Bing) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2014-11-05]
CHR Extension: (Dokumenty Google offline) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-03]
CHR Extension: (Facebook blokování reklamy) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\giafdilhppdpjibbcmkjedohlgkoepnh [2015-10-14]
CHR Extension: (Avast Online Security) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-10-15]
CHR Extension: (Skype Click to Call) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-01-15]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-14]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2013-10-14]
CHR Extension: (Gmail) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-14]
CHR HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [dkmjljdbbgogihjcapfhgkonfmccbffp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-14]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

Opera:
=======
OPR Extension: (Record Page) - C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\Extensions\njoojinliliaebnlahckbhlladnmpigi [2015-08-04]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-14] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4048280 2015-10-14] (Avast Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe [156672 2011-10-14] () [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 Service Mgr RecordPage; C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777\plugincontainer.exe [1046752 2015-10-15] ()
R2 SettingsGuard; C:\Users\Adéla\AppData\Roaming\SettingsGuard\updater.exe [868352 2015-03-31] () [File not signed]
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [114656 2012-08-14] (Toshiba Europe GmbH)
R2 Update Mgr RecordPage; C:\Program Files (x86)\Common Files\87737dd0-ad90-4193-bd48-336966b8d777\updater.exe [611040 2015-10-15] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AndNetDiag; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [29184 2011-09-06] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [35840 2011-09-06] (LG Electronics Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-14] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-14] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-14] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-10-14] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-10-14] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-14] (AVAST Software)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-09-29] (DT Soft Ltd)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [132656 2015-10-14] (AVAST Software)
R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\Password Utility\PEGAGFN.sys [14344 2009-09-12] (PEGATRON)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [24208 2012-07-11] (Realtek Microelectronics)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-14] (Synaptics Incorporated)
S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(http://www.devguru.co.kr))
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [274336 2015-10-14] (Avast Software)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-15 20:56 - 2015-10-15 20:57 - 00028786 _____ C:\Users\Adéla\Desktop\FRST.txt
2015-10-15 20:56 - 2015-10-15 20:56 - 00000000 ____D C:\FRST
2015-10-15 20:52 - 2015-10-15 20:52 - 02196992 _____ (Farbar) C:\Users\Adéla\Downloads\FRST64.exe
2015-10-15 20:52 - 2015-10-15 20:52 - 02196992 _____ (Farbar) C:\Users\Adéla\Desktop\FRST64.exe
2015-10-15 18:57 - 2015-10-15 18:57 - 00000000 ____D C:\Program Files\Common Files\AV
2015-10-15 18:57 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
2015-10-15 18:52 - 2015-10-15 18:52 - 00001418 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2015-10-15 18:52 - 2015-10-15 18:52 - 00001406 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2015-10-15 18:52 - 2015-10-15 18:52 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2015-10-15 18:51 - 2015-10-15 20:31 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2015-10-15 18:51 - 2015-10-15 18:57 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-10-15 18:51 - 2015-10-15 18:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2015-10-15 18:51 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe
2015-10-15 18:49 - 2015-10-15 18:50 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Adéla\Downloads\spybot-2.4.exe
2015-10-14 21:29 - 2015-09-19 05:18 - 00035384 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-10-14 21:29 - 2015-09-18 15:42 - 01290752 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-10-14 21:29 - 2015-09-18 15:42 - 01163776 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-10-14 21:29 - 2015-09-18 15:42 - 00766464 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-10-14 21:29 - 2015-09-18 15:42 - 00699904 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-10-14 21:29 - 2015-09-18 15:42 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-10-14 21:29 - 2015-09-18 15:42 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-10-14 11:30 - 2015-10-14 11:30 - 00000000 ____D C:\WINDOWS\SysWOW64\vbox
2015-10-14 11:30 - 2015-10-14 11:30 - 00000000 ____D C:\WINDOWS\system32\vbox
2015-10-14 08:35 - 2015-10-14 08:35 - 00001949 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-10-14 08:35 - 2015-10-14 08:31 - 00378880 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-10-14 08:33 - 2015-10-14 08:33 - 00000000 ____D C:\Users\Adéla\AppData\Roaming\AVAST Software
2015-10-14 08:32 - 2015-10-14 12:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-10-14 08:32 - 2015-10-14 08:35 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-10-14 08:32 - 2015-10-14 08:31 - 01049880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-10-14 08:32 - 2015-10-14 08:31 - 00448968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-10-14 08:32 - 2015-10-14 08:31 - 00274808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-10-14 08:32 - 2015-10-14 08:31 - 00153744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-10-14 08:32 - 2015-10-14 08:31 - 00132656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\ngvss.sys
2015-10-14 08:32 - 2015-10-14 08:31 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-10-14 08:32 - 2015-10-14 08:31 - 00090968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-10-14 08:32 - 2015-10-14 08:31 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-10-14 08:32 - 2015-10-14 08:31 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-10-14 08:31 - 2015-10-14 08:31 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-10-14 08:26 - 2015-10-14 08:26 - 05664680 _____ (AVAST Software) C:\Users\Adéla\Downloads\avast_pro_antivirus_setup_online.exe
2015-10-14 08:21 - 2015-10-14 08:21 - 00000264 _____ C:\Users\Adéla\Downloads\debug.log
2015-10-14 08:17 - 2015-08-22 15:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 08:17 - 2015-08-22 15:42 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 08:17 - 2015-08-22 15:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 08:17 - 2015-08-22 15:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 08:17 - 2015-08-22 15:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 08:17 - 2015-08-22 15:35 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 08:17 - 2015-08-22 15:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 08:17 - 2015-08-22 15:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 08:17 - 2015-08-22 15:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 08:17 - 2015-08-06 18:47 - 04710400 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2015-10-14 08:17 - 2015-08-06 18:18 - 04068352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2015-10-14 08:17 - 2015-07-16 20:58 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcdAutoSetup.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00901264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00066400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00022368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00984448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00063840 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 08:16 - 2015-08-07 23:40 - 01134752 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2015-10-14 08:16 - 2015-08-07 23:40 - 00686960 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2015-10-14 08:16 - 2015-08-07 23:40 - 00507176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2015-10-14 08:16 - 2015-08-07 16:13 - 00862720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2015-10-14 08:13 - 2015-08-06 19:05 - 00669184 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2015-10-14 08:13 - 2015-08-06 18:37 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2015-10-13 22:24 - 2015-09-29 14:31 - 07457624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-10-13 22:24 - 2015-09-29 14:31 - 01658536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-10-13 22:24 - 2015-09-29 14:31 - 01519592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-10-13 22:24 - 2015-09-29 14:31 - 01487008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-10-13 22:24 - 2015-09-29 14:31 - 01355848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-10-13 22:24 - 2015-09-24 18:42 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2015-10-13 22:24 - 2015-09-24 18:40 - 00737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-10-13 22:24 - 2015-08-27 04:43 - 22372152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-10-13 22:24 - 2015-08-27 04:42 - 19795904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-10-13 22:24 - 2015-08-07 23:40 - 01736520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-10-13 22:24 - 2015-08-07 23:40 - 01499920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-10-13 22:20 - 2015-09-10 20:02 - 25851392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-10-13 22:20 - 2015-09-10 19:19 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-10-13 22:20 - 2015-09-10 19:18 - 02886656 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-10-13 22:20 - 2015-09-10 19:18 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-10-13 22:20 - 2015-09-10 19:14 - 05990400 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-10-13 22:20 - 2015-09-10 19:09 - 20358144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-10-13 22:20 - 2015-09-10 19:06 - 00616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-10-13 22:20 - 2015-09-10 19:04 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-10-13 22:20 - 2015-09-10 18:51 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-10-13 22:20 - 2015-09-10 18:39 - 00504832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-10-13 22:20 - 2015-09-10 18:37 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-10-13 22:20 - 2015-09-10 18:37 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-10-13 22:20 - 2015-09-10 18:35 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-10-13 22:20 - 2015-09-10 18:33 - 02279936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-10-13 22:20 - 2015-09-10 18:28 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-10-13 22:20 - 2015-09-10 18:28 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-10-13 22:20 - 2015-09-10 18:27 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-10-13 22:20 - 2015-09-10 18:24 - 14456832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-10-13 22:20 - 2015-09-10 18:21 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-10-13 22:20 - 2015-09-10 18:19 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-10-13 22:20 - 2015-09-10 18:19 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-10-13 22:20 - 2015-09-10 18:19 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-10-13 22:20 - 2015-09-10 18:17 - 02126336 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-10-13 22:20 - 2015-09-10 18:17 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-10-13 22:20 - 2015-09-10 18:07 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-10-13 22:20 - 2015-09-10 18:05 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-10-13 22:20 - 2015-09-10 18:02 - 04527616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-10-13 22:20 - 2015-09-10 18:01 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-10-13 22:20 - 2015-09-10 18:00 - 12853760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-10-13 22:20 - 2015-09-10 17:57 - 02487808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-10-13 22:20 - 2015-09-10 17:57 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-10-13 22:20 - 2015-09-10 17:55 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-10-13 22:20 - 2015-09-10 17:55 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-10-13 22:20 - 2015-09-10 17:55 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-10-13 22:20 - 2015-09-10 17:45 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-10-13 22:20 - 2015-09-10 17:34 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-10-13 22:20 - 2015-09-10 17:31 - 02011136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-10-13 22:20 - 2015-09-10 17:27 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-10-13 22:20 - 2015-09-10 17:26 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-10-13 21:33 - 2015-09-29 14:29 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-10-13 21:33 - 2015-09-28 20:45 - 03705344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-10-13 21:33 - 2015-09-28 20:26 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-10-13 21:33 - 2015-09-28 20:25 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-10-13 21:33 - 2015-09-28 20:25 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-10-13 21:33 - 2015-09-28 20:25 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-10-13 21:33 - 2015-09-28 20:22 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-10-13 21:33 - 2015-09-28 20:22 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-10-13 21:33 - 2015-09-28 20:22 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-10-13 21:33 - 2015-09-28 20:15 - 02243072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-10-13 21:33 - 2015-09-28 20:13 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-10-13 21:33 - 2015-09-28 20:12 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-10-05 22:57 - 2015-10-05 23:00 - 00399360 _____ (Trend Micro Inc.) C:\WINDOWS\RegBootClean64.exe
2015-10-05 22:34 - 2015-10-05 22:34 - 03617312 _____ (Facebook Inc.) C:\Users\Adéla\Downloads\Trendmicro_T761029780689576T_ (1).exe
2015-10-05 22:34 - 2015-10-05 22:34 - 00000036 _____ C:\Users\Adéla\AppData\Local\housecall.guid.cache
2015-10-05 22:33 - 2015-10-05 22:33 - 00305832 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmcomm.sys
2015-10-05 22:32 - 2015-10-05 22:32 - 03617312 _____ (Facebook Inc.) C:\Users\Adéla\Downloads\Trendmicro_T761029780689576T_.exe
2015-09-28 21:47 - 2015-09-28 21:47 - 00000000 ____D C:\ProgramData\Electronic Arts
2015-09-28 21:46 - 2015-09-28 21:46 - 00001174 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Download Manager.lnk
2015-09-28 21:46 - 2015-09-28 21:46 - 00000060 _____ C:\WINDOWS\wininit.ini
2015-09-28 21:42 - 2015-09-28 21:42 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE
2015-09-28 21:42 - 2008-09-04 20:17 - 00447752 ____R (On2.com) C:\WINDOWS\SysWOW64\vp6vfw.dll
2015-09-23 19:47 - 2015-09-23 20:33 - 825309646 _____ C:\Users\Adéla\Downloads\Herkules-2014-cz-[natu3].avi

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-15 20:51 - 2015-08-20 19:49 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-10-15 20:47 - 2014-11-08 16:07 - 01626882 _____ C:\WINDOWS\WindowsUpdate.log
2015-10-15 20:03 - 2013-10-14 00:27 - 00000970 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001UA.job
2015-10-15 20:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-10-15 19:37 - 2015-08-04 22:29 - 00000000 ____D C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777
2015-10-15 18:46 - 2014-11-11 17:39 - 00003950 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{DAF410C1-F6D5-425A-9631-C935F93916DB}
2015-10-15 18:44 - 2015-08-05 17:44 - 00002471 _____ C:\Users\Adéla\Desktop\Google Chrome.lnk
2015-10-15 04:53 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-10-14 22:53 - 2015-04-18 14:34 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-10-14 22:53 - 2014-09-24 21:02 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-10-14 21:51 - 2015-08-20 19:49 - 00003912 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-10-14 21:51 - 2015-08-20 19:49 - 00003802 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-10-14 21:51 - 2015-08-20 19:49 - 00000958 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-10-14 21:21 - 2014-09-24 18:23 - 01745984 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-14 21:21 - 2014-09-24 17:39 - 00739924 _____ C:\WINDOWS\system32\perfh005.dat
2015-10-14 21:21 - 2014-09-24 17:39 - 00151610 _____ C:\WINDOWS\system32\perfc005.dat
2015-10-14 13:38 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache
2015-10-14 12:20 - 2013-09-19 02:26 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2620750530-3227779391-1858522390-1001
2015-10-14 12:09 - 2013-08-22 16:46 - 00371135 _____ C:\WINDOWS\setupact.log
2015-10-14 12:09 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-10-14 12:07 - 2014-09-24 09:10 - 00057298 _____ C:\WINDOWS\PFRO.log
2015-10-14 12:07 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-10-14 12:06 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-10-14 11:42 - 2015-08-04 22:29 - 00000000 ____D C:\Program Files (x86)\Record Page
2015-10-14 08:15 - 2013-10-14 01:17 - 00000000 ____D C:\Users\Adéla\AppData\Roaming\Seznam.cz
2015-10-14 08:06 - 2013-12-03 20:25 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-10-14 07:51 - 2013-12-03 20:25 - 143481208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-10-12 16:24 - 2015-03-16 05:05 - 00000000 ____D C:\Users\Adéla\AppData\Local\CrashDumps
2015-10-09 13:34 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-10-07 13:37 - 2015-04-05 13:31 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-10-07 12:55 - 2015-04-05 13:31 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-10-05 23:03 - 2014-01-15 20:06 - 00000000 ____D C:\Users\Adéla\AppData\Roaming\Skype
2015-10-05 19:05 - 2014-01-15 20:06 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-10-05 19:05 - 2014-01-15 20:06 - 00000000 ____D C:\ProgramData\Skype
2015-10-04 19:53 - 2014-01-05 12:23 - 00000000 ____D C:\Users\Adéla\Desktop\adíla
2015-10-04 19:52 - 2013-10-20 17:35 - 00000000 ___RD C:\Users\Adéla\Desktop\hry
2015-10-02 16:24 - 2014-09-24 21:08 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-10-02 16:24 - 2014-09-24 21:08 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-02 12:33 - 2015-08-04 22:29 - 00000000 ____D C:\Program Files (x86)\Opera
2015-10-02 12:32 - 2015-08-04 22:30 - 00003820 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1438720219
2015-10-02 12:32 - 2015-08-04 22:30 - 00001074 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-09-28 21:46 - 2013-09-30 01:59 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2015-09-28 21:23 - 2012-08-28 20:46 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-09-27 22:46 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-09-17 04:38 - 2015-03-31 10:27 - 00003940 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-17 04:38 - 2015-03-31 10:27 - 00003704 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-17 04:38 - 2015-03-31 10:27 - 00000968 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-17 04:38 - 2015-03-31 10:27 - 00000964 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-17 03:58 - 2013-10-14 00:27 - 00003916 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001UA
2015-09-17 03:58 - 2013-10-14 00:27 - 00003536 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001Core
2015-09-17 03:58 - 2013-10-14 00:27 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001Core.job

==================== Files in the root of some directories =======

2015-10-05 22:34 - 2015-10-05 22:34 - 0000036 _____ () C:\Users\Adéla\AppData\Local\housecall.guid.cache
2015-01-05 13:39 - 2015-01-05 13:39 - 0001056 _____ () C:\Users\Adéla\AppData\Local\MRDownloader (1).nast
2015-01-05 13:36 - 2015-01-05 13:36 - 0001056 _____ () C:\Users\Adéla\AppData\Local\MRDownloader.nast

Some files in TEMP:
====================
C:\Users\Adéla\AppData\Local\Temp\EAD631.exe
C:\Users\Adéla\AppData\Local\Temp\EAD914E.exe
C:\Users\Adéla\AppData\Local\Temp\EADD0EB.exe
C:\Users\Adéla\AppData\Local\Temp\EADEC49.exe
C:\Users\Adéla\AppData\Local\Temp\KMP_3.2.0.0.exe
C:\Users\Adéla\AppData\Local\Temp\mpegc.dll
C:\Users\Adéla\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Adéla\AppData\Local\Temp\{03218396-B841-4DEB-88C7-7AB2DF79C26D}.dll
C:\Users\Adéla\AppData\Local\Temp\{1DBF6375-BFCF-4173-84F7-20276AA2F763}.dll
C:\Users\Adéla\AppData\Local\Temp\{1E67B027-D29A-4FA3-BF23-66885E4058F2}.dll
C:\Users\Adéla\AppData\Local\Temp\{2CBEA4CE-062B-457C-888E-7735A445DE77}.dll
C:\Users\Adéla\AppData\Local\Temp\{2D914816-674D-4F29-B012-1B891C20FCE6}.dll
C:\Users\Adéla\AppData\Local\Temp\{2FCDD434-66EA-4414-918A-58A560CCB70D}.dll
C:\Users\Adéla\AppData\Local\Temp\{311E823F-CFC5-45D1-A8E6-32025F1AE674}.dll
C:\Users\Adéla\AppData\Local\Temp\{42E2E0B7-B8DB-4661-8393-882A55926271}.dll
C:\Users\Adéla\AppData\Local\Temp\{46BC754A-6E3F-48CE-99FD-BFB172DC182C}.dll
C:\Users\Adéla\AppData\Local\Temp\{48EA649B-7208-41D4-85FA-4C9E557C731D}.dll
C:\Users\Adéla\AppData\Local\Temp\{4B863509-E9AD-4C39-9BB2-0A415260664A}.dll
C:\Users\Adéla\AppData\Local\Temp\{4B9B2ACE-37D0-4D98-B0C9-7D0AB9F16AE0}.dll
C:\Users\Adéla\AppData\Local\Temp\{4C8C831D-0413-43BC-AFD6-63491B372E36}.dll
C:\Users\Adéla\AppData\Local\Temp\{4EF984BA-6E88-41A5-9E26-103E6943F7FD}.dll
C:\Users\Adéla\AppData\Local\Temp\{54B922DD-1D3C-4DB5-A5A7-7C3A9431411A}.dll
C:\Users\Adéla\AppData\Local\Temp\{56E50650-EE8C-49EE-90BD-BFFBD3B94BC3}.dll
C:\Users\Adéla\AppData\Local\Temp\{57AA62C1-CAEB-46F5-BD24-3C2D72186387}.dll
C:\Users\Adéla\AppData\Local\Temp\{5C151215-957B-4095-B3EE-28DE3F5C38C5}.dll
C:\Users\Adéla\AppData\Local\Temp\{5C4879AC-6740-4E18-AC63-EA213F5B0D2B}.dll
C:\Users\Adéla\AppData\Local\Temp\{5E79E326-C9C2-465A-8D2E-FC85DDC54ED9}.dll
C:\Users\Adéla\AppData\Local\Temp\{604FBC72-EF16-4543-B5E8-B33F2B32953D}.dll
C:\Users\Adéla\AppData\Local\Temp\{61D80CDC-D8AD-4C99-928B-136DDC7D2EE1}.dll
C:\Users\Adéla\AppData\Local\Temp\{64CEBE5E-F366-4B05-A068-3C2C66115E4D}.dll
C:\Users\Adéla\AppData\Local\Temp\{64F4CFAB-FCB6-4EE6-B1E5-8726611819DC}.dll
C:\Users\Adéla\AppData\Local\Temp\{688858D0-803B-41D8-8723-FF6041FC8F28}.dll
C:\Users\Adéla\AppData\Local\Temp\{6EC3C78D-35AD-4D1B-ACF3-E0DE6CBCF037}.dll
C:\Users\Adéla\AppData\Local\Temp\{6EC48738-F931-4FD4-8B34-913B90A6FC04}.dll
C:\Users\Adéla\AppData\Local\Temp\{6FC38E17-E07D-4970-B515-10611E9F1B6A}.dll
C:\Users\Adéla\AppData\Local\Temp\{733A39DC-5A20-4DE4-9E96-B05BCB204FCA}.dll
C:\Users\Adéla\AppData\Local\Temp\{7A2F73AF-4AF9-42C8-A1A0-11A7D662E40E}.dll
C:\Users\Adéla\AppData\Local\Temp\{7CA6E074-7C4E-4CA7-997D-43CAABF454A7}.dll
C:\Users\Adéla\AppData\Local\Temp\{7DC9B3E5-DE97-4DDE-A109-89834765711C}.dll
C:\Users\Adéla\AppData\Local\Temp\{83D95594-F8D0-4E6E-8C76-BF6ECB806B26}.dll
C:\Users\Adéla\AppData\Local\Temp\{9055F47C-E1BB-461D-8895-B339815F946C}.dll
C:\Users\Adéla\AppData\Local\Temp\{90B35BDA-95C0-43CA-9ED5-918AF37BAE66}.dll
C:\Users\Adéla\AppData\Local\Temp\{991A61C1-C2A5-440C-AF7E-D08E963B411A}.dll
C:\Users\Adéla\AppData\Local\Temp\{997C5B2E-FA7B-4EA4-AC65-6920B919B2EA}.dll
C:\Users\Adéla\AppData\Local\Temp\{99DF6FBC-7F8C-4D29-9EDD-CBEE87113716}.dll
C:\Users\Adéla\AppData\Local\Temp\{9B142E00-3746-4EF6-B261-E3D296AF22D5}.dll
C:\Users\Adéla\AppData\Local\Temp\{9D46391A-7DF5-412E-8F62-541DAA399C66}.dll
C:\Users\Adéla\AppData\Local\Temp\{A3645CCE-BCE2-4DDF-90A8-6D99F64B381E}.dll
C:\Users\Adéla\AppData\Local\Temp\{A4F50B7A-2256-4590-8FD3-3657DB01283D}.dll
C:\Users\Adéla\AppData\Local\Temp\{A7326BF3-3F3B-42ED-A481-D2B58B723950}.dll
C:\Users\Adéla\AppData\Local\Temp\{A73574B4-40EA-47DA-B0A8-7F37544A5387}.dll
C:\Users\Adéla\AppData\Local\Temp\{A7D24914-D0F7-4F5E-903D-6CCD1FFFBD96}.dll
C:\Users\Adéla\AppData\Local\Temp\{A9E4FEBF-D84A-4C78-BB59-939E9C4B90D4}.dll
C:\Users\Adéla\AppData\Local\Temp\{B0D78441-8BC3-4D5B-AD1F-50BE7D1CA072}.dll
C:\Users\Adéla\AppData\Local\Temp\{B4CA3ADB-D8A4-4D6E-9715-35D00B6E6E02}.dll
C:\Users\Adéla\AppData\Local\Temp\{B7F2D677-84C7-4B21-BFBD-E22B596F8EA5}.dll
C:\Users\Adéla\AppData\Local\Temp\{BA3E77AA-83E1-4952-A543-4905CD30C043}.dll
C:\Users\Adéla\AppData\Local\Temp\{BC45DE86-9A4B-4FBD-BA24-4B4A9E9BCBE1}.dll
C:\Users\Adéla\AppData\Local\Temp\{BCDCF1EE-BD4A-4FBF-B7E6-B888F0C9173F}.dll
C:\Users\Adéla\AppData\Local\Temp\{C7A2DF7E-36A8-4ACE-A23A-2D26A0C10FD4}.dll
C:\Users\Adéla\AppData\Local\Temp\{C9994ABF-3B88-4C0C-8264-C45E799714FA}.dll
C:\Users\Adéla\AppData\Local\Temp\{CEB8E3E7-0256-4138-8E34-BA3ECACFCF84}.dll
C:\Users\Adéla\AppData\Local\Temp\{CEDCE964-15D6-4891-86E3-CBC6BDF2B329}.dll
C:\Users\Adéla\AppData\Local\Temp\{D1243460-D8E1-44A0-961E-FB2F26174A48}.dll
C:\Users\Adéla\AppData\Local\Temp\{D6187603-40FE-4621-BF63-2FC357CBB53C}.dll
C:\Users\Adéla\AppData\Local\Temp\{D69FC951-C690-47E0-92B1-B4B479D118FA}.dll
C:\Users\Adéla\AppData\Local\Temp\{D73C58B1-9DC8-4EA2-ACDC-9C004D64C65E}.dll
C:\Users\Adéla\AppData\Local\Temp\{DC811AB0-A75F-416A-BA4A-3C5F126C89A1}.dll
C:\Users\Adéla\AppData\Local\Temp\{DE898B91-6B19-42DA-91F1-F51CB7AAD7B6}.dll
C:\Users\Adéla\AppData\Local\Temp\{E135C94C-118E-4A02-9875-99E0D8540582}.dll
C:\Users\Adéla\AppData\Local\Temp\{E1B4B53C-0221-45AA-AFE1-A88F9844CC2D}.dll
C:\Users\Adéla\AppData\Local\Temp\{E2B9289A-B24B-4A11-8308-75485694AFFF}.dll
C:\Users\Adéla\AppData\Local\Temp\{E3AF7222-71FB-49F6-AC17-439908D08FE4}.dll
C:\Users\Adéla\AppData\Local\Temp\{E4E32B7D-7185-41CD-951B-E3D4EDF81429}.dll
C:\Users\Adéla\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
C:\Users\Adéla\AppData\Local\Temp\{EB20E1EA-5EA0-49A4-886A-81092EE9B5D1}.dll
C:\Users\Adéla\AppData\Local\Temp\{ECEFCF74-0600-4F1F-99E2-C543077A2BAC}.dll
C:\Users\Adéla\AppData\Local\Temp\{F575C9E4-3635-4008-9DA1-3AB649D7C00E}.dll
C:\Users\Adéla\AppData\Local\Temp\{F745860A-8427-4EE1-AE67-522ED4F4535E}.dll
C:\Users\Adéla\AppData\Local\Temp\{FB204DA1-C003-4AD7-B2A1-2B717BB9E77B}.dll
C:\Users\Adéla\AppData\Local\Temp\{FDFCB77D-5162-4DA9-8FDC-C3238082C550}.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-10-14 12:20

==================== End of FRST.txt ============================
Přílohy
Addition.rar
(11.1 KiB) Staženo 61 x
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prohlížeč a reklamy

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
kosak
Návštěvník
Návštěvník
Příspěvky: 14
Registrován: 15 říj 2015 19:47

Re: Prohlížeč a reklamy

#3 Příspěvek od kosak »

# AdwCleaner v5.013 - Logfile created 15/10/2015 at 21:50:09
# Updated 09/10/2015 by Xplode
# Database : 2015-10-13.2 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Adéla - ADA
# Running from : C:\Users\Adéla\Desktop\adwcleaner_5.013.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : SettingsGuard
[-] Service Deleted : Service Mgr RecordPage
[!] Service Not Deleted : Service Mgr RecordPage
[-] Service Deleted : Update Mgr RecordPage

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\TNT2
[-] Folder Deleted : C:\Program Files (x86)\Record Page
[!] Folder Not Deleted : C:\Program Files (x86)\Record Page
[-] Folder Deleted : C:\Program Files (x86)\Common Files\87737dd0-ad90-4193-bd48-336966b8d777
[!] Folder Not Deleted : C:\Program Files (x86)\Common Files\87737dd0-ad90-4193-bd48-336966b8d777
[!] Folder Not Deleted : C:\Program Files (x86)\Common Files\87737dd0-ad90-4193-bd48-336966b8d777
[-] Folder Deleted : C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777
[!] Folder Not Deleted : C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777
[!] Folder Not Deleted : C:\ProgramData\87737dd0-ad90-4193-bd48-336966b8d777
[-] Folder Deleted : C:\Users\Adéla\AppData\Local\TNT2
[-] Folder Deleted : C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd
[-] Folder Deleted : C:\Users\Adéla\AppData\Roaming\SettingsGuard

***** [ Files ] *****

[-] File Deleted : C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_recordpage-a.akamaihd.net_0.localstorage
[-] File Deleted : C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_recordpage-a.akamaihd.net_0.localstorage-journal
[-] File Deleted : C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.kingtopdeals.com_0.localstorage
[-] File Deleted : C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.kingtopdeals.com_0.localstorage-journal
[-] File Deleted : C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.tradeadexchange.com_0.localstorage
[-] File Deleted : C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.tradeadexchange.com_0.localstorage-journal

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
[-] Key Deleted : HKCU\SOFTWARE\MOZILLAPLUGINS\@tnt2npapi.com/Plugin
[-] Key Deleted : HKCU\Software\Classes\CLSID\{554EBE31-AEC1-4E34-BCE3-606467760D88}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B853E835-9F24-4F4B-B55C-E554D15CCCD2}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0FEB2313-F89B-4AC6-8153-84025604A06A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{02F878DF-E2BE-4B85-8CB4-A0D2D4E2ED7F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2AF343DD-3102-4F9D-AC95-DCA4C95382C7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3137BC14-D8D7-4B67-8FFA-2E0B2E9D541B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4CA2AC92-971B-47B1-ACB6-357B552155AC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{52C5395B-1FCD-47FA-A834-FD830701C2D5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5D3DCC39-9233-4330-94E9-DA92BE49CA1A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{615FACDF-DADB-440D-AC91-8AAB0AE9E3AD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{762D463B-C45A-456D-A80D-8689C297C91E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7A6BE473-7960-44D0-BD54-D23DA76353DF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{803F550E-BAAE-42BB-8917-64BA0006AB17}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8D5BC51D-C9D3-43B9-B728-B30677B7C7E8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{991C9D8D-A789-4DB9-BDFC-5F33398B04BF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A5ACC874-D943-483F-A2D1-14598D51F872}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0474212-0D9D-4361-90B3-B89D1A44275D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BFDE183A-C6FE-41D2-80F9-586C29210AC2}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D83C83BF-3EDD-4410-ADAB-5295116DD8C7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DD260902-9420-4055-A956-9152EB4F3E6A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EB1F9F3C-5526-4DAE-BD4B-3EAA7715DA9F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F1912128-469A-4138-AA26-9699C15BB13E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F68DC16C-9C2B-455B-8853-7E4D34BAA3F4}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FBA8498F-B3A0-4942-A2BF-E0CB7BC7E000}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D1611ACC-4B10-4B34-8CDE-0AE7B2A270A6}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DEDAF650-12B8-48F5-A843-BBA100716106}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2335267C-DBBA-4DD5-A9D0-C4DB8E6A75A4}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2335267C-DBBA-4DD5-A9D0-C4DB8E6A75A4}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72A6AB0F-2FA8-4C73-9FCB-1E62A608F001}
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0FEB2313-F89B-4AC6-8153-84025604A06A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{02F878DF-E2BE-4B85-8CB4-A0D2D4E2ED7F}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2AF343DD-3102-4F9D-AC95-DCA4C95382C7}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3137BC14-D8D7-4B67-8FFA-2E0B2E9D541B}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4CA2AC92-971B-47B1-ACB6-357B552155AC}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{52C5395B-1FCD-47FA-A834-FD830701C2D5}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{5D3DCC39-9233-4330-94E9-DA92BE49CA1A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{615FACDF-DADB-440D-AC91-8AAB0AE9E3AD}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{762D463B-C45A-456D-A80D-8689C297C91E}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7A6BE473-7960-44D0-BD54-D23DA76353DF}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{803F550E-BAAE-42BB-8917-64BA0006AB17}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8D5BC51D-C9D3-43B9-B728-B30677B7C7E8}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{991C9D8D-A789-4DB9-BDFC-5F33398B04BF}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A5ACC874-D943-483F-A2D1-14598D51F872}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B0474212-0D9D-4361-90B3-B89D1A44275D}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BFDE183A-C6FE-41D2-80F9-586C29210AC2}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D83C83BF-3EDD-4410-ADAB-5295116DD8C7}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DD260902-9420-4055-A956-9152EB4F3E6A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EB1F9F3C-5526-4DAE-BD4B-3EAA7715DA9F}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F1912128-469A-4138-AA26-9699C15BB13E}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F68DC16C-9C2B-455B-8853-7E4D34BAA3F4}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FBA8498F-B3A0-4942-A2BF-E0CB7BC7E000}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D1611ACC-4B10-4B34-8CDE-0AE7B2A270A6}
[-] Key Deleted : HKCU\Software\Conduit
[-] Key Deleted : HKCU\Software\TNT2
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Record Page
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Record Page
[!] Key Not Deleted : [x64] HKCU\Software\Conduit
[!] Key Not Deleted : [x64] HKCU\Software\TNT2
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\OldSearch
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9ecb803f-748d-431e-8200-a3120188e8c3}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{a8177b71-ee19-4e0f-b2f9-02d533eb946D}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BCE60771-23DD-47A6-8AB0-EDC8D7810F09}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C91BA288-2822-4223-B46B-D8CDB91B38FD}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\OldSearch
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
[-] Data Restored : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9ecb803f-748d-431e-8200-a3120188e8c3}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{a8177b71-ee19-4e0f-b2f9-02d533eb946D}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BCE60771-23DD-47A6-8AB0-EDC8D7810F09}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C91BA288-2822-4223-B46B-D8CDB91B38FD}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BECAC2E5-6FF5-4540-8779-26408F875C99}
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\Software\Microsoft\Internet Explorer\SearchScopes\OldSearch
[!] Key Not Deleted : HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
[-] Data Restored : HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\Software\Microsoft\Internet Explorer\SearchScopes\{9ecb803f-748d-431e-8200-a3120188e8c3}
[!] Key Not Deleted : HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\Software\Microsoft\Internet Explorer\SearchScopes\{a8177b71-ee19-4e0f-b2f9-02d533eb946D}
[!] Key Not Deleted : HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\Software\Microsoft\Internet Explorer\SearchScopes\{BCE60771-23DD-47A6-8AB0-EDC8D7810F09}
[!] Key Not Deleted : HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\Software\Microsoft\Internet Explorer\SearchScopes\{C91BA288-2822-4223-B46B-D8CDB91B38FD}

***** [ Web browsers ] *****

[-] [C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : fcfenmboojpjinhpgggodefccipikbpd

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [11713 bytes] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prohlížeč a reklamy

#4 Příspěvek od Rudy »

Dejte nový log FRST.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
kosak
Návštěvník
Návštěvník
Příspěvky: 14
Registrován: 15 říj 2015 19:47

Re: Prohlížeč a reklamy

#5 Příspěvek od kosak »

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:15-10-2015
Ran by Adéla (administrator) on ADA (15-10-2015 22:36:33)
Running from C:\Users\Adéla\Desktop
Loaded Profiles: Adéla (Available Profiles: Adéla)
Platform: Windows 8.1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
() C:\Users\Adéla\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\Adéla\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Toshiba) C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(Google Inc.) C:\Users\Adéla\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Adéla\AppData\Local\Google\Chrome\Application\chrome.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Google Inc.) C:\Users\Adéla\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Adéla\AppData\Local\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2012-07-13] (Realtek Semiconductor)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2608040 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-05] ()
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-14] (Synaptics Incorporated)
HKLM-x32\...\Run: [ToshibaDynamicIconUtility] => C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe [1498624 2012-08-09] (Toshiba)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [TPUReg(x86)] => "C:\Program Files\TOSHIBA\Password Utility\TosPU.exe" /Retimes
HKLM-x32\...\Run: [TPUReg] => C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe [6884352 2012-08-23] (Pegatron Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-10-14] (AVAST Software)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [Google Update] => C:\Users\Adéla\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc.)
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Adéla\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Adéla\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53655680 2015-07-28] (Skype Technologies S.A.)
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [icq] => C:\Users\Adéla\AppData\Roaming\ICQM\icq.exe [35239432 2014-11-26] (ICQ)
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE [458456 2014-12-19] (ZONER software)
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [EA Core] => C:\Program Files (x86)\Electronic Arts\EADM\Core.exe [3325952 2009-03-28] (Electronic Arts)
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\MountPoints2: {83635113-3c53-11e5-bebe-2016d86b26dc} - "G:\Startme.exe"
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\MountPoints2: {a7ab00be-94fd-11e4-be9a-2016d86b26dc} - "D:\LGAutoRun.exe"
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\MountPoints2: {fae4cfd5-24af-11e3-be74-2016d86b26dc} - "F:\autorun.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-14] (AVAST Software)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.73.254
Tcpip\..\Interfaces\{86148561-176F-4F5F-B848-EBF823AF68BD}: [DhcpNameServer] 192.168.73.254

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/?clid=22668
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.seznam.cz/?clid=22668
SearchScopes: HKLM-x32 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKLM-x32 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {1376ED26-7DB0-45DB-9190-A1BAABB9F3C6} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_13014
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {27393244-20DB-4BD2-9531-409A6AE09AED} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_13014
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {2EA308AF-4D81-4E48-8AF4-0FD805D4F454} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_13014
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {39E3F7AF-EB0F-4AAD-A5D9-815F467C3A0A} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_13014
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {9491BCF1-8DF6-43C5-AC2E-BBE891189A5A} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_13014
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {9ABE1C1D-A47B-4915-A130-E2C20ABFA343} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_13014
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {9C7415E3-7C0F-4D49-B08B-168B13BDE9B5} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=11467
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {A5E8F007-F327-430D-848E-3B5994497B81} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_13014
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {AC03B41F-C138-4919-A226-69675108C657} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_13014
SearchScopes: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001 -> {E7B9FB39-AD58-46E8-8160-00336E52DC26} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_13014
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-10-14] (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-20] (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-14] (AVAST Software)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-20] (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-20] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-20] (Google Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-07-24] (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2011-09-28] ()
FF Plugin HKU\S-1-5-21-2620750530-3227779391-1858522390-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin HKU\S-1-5-21-2620750530-3227779391-1858522390-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin HKU\S-1-5-21-2620750530-3227779391-1858522390-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Adéla\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-05-11] (Unity Technologies ApS)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-10-14]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found

Chrome:
=======
CHR HomePage: Default -> hxxp://www.msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
CHR RestoreOnStartup: Default -> "hxxps://www.seznam.cz/?clid=22668"
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC ... earchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR Profile: C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (EFF Tracker Blocking Laboratory) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\adoehefoodmhmcjkeppdlnknjgnajgmi [2015-10-14]
CHR Extension: (Dokumenty Google) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-14]
CHR Extension: (Disk Google) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-14]
CHR Extension: (Seznam Lištička - Email) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2013-10-14]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2013-10-14]
CHR Extension: (YouTube) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-14]
CHR Extension: (Vyhledávání Google) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-14]
CHR Extension: (eShield) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp [2015-08-05]
CHR Extension: (Bing) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2015-10-15]
CHR Extension: (Dokumenty Google offline) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-03]
CHR Extension: (Facebook blokování reklamy) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\giafdilhppdpjibbcmkjedohlgkoepnh [2015-10-14]
CHR Extension: (Avast Online Security) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-10-15]
CHR Extension: (Skype Click to Call) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-01-15]
CHR Extension: (No Name) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\njoojinliliaebnlahckbhlladnmpigi [2015-10-15]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-14]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2013-10-14]
CHR Extension: (Gmail) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-14]
CHR HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [dkmjljdbbgogihjcapfhgkonfmccbffp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-14]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]

Opera:
=======
OPR Extension: (Record Page) - C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\Extensions\njoojinliliaebnlahckbhlladnmpigi [2015-08-04]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-14] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4048280 2015-10-14] (Avast Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe [156672 2011-10-14] () [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [114656 2012-08-14] (Toshiba Europe GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AndNetDiag; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [29184 2011-09-06] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [35840 2011-09-06] (LG Electronics Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-14] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-14] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-14] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-10-14] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-10-14] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-14] (AVAST Software)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-09-29] (DT Soft Ltd)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [132656 2015-10-14] (AVAST Software)
R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\Password Utility\PEGAGFN.sys [14344 2009-09-12] (PEGATRON)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [24208 2012-07-11] (Realtek Microelectronics)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-14] (Synaptics Incorporated)
S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [274336 2015-10-14] (Avast Software)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-15 21:47 - 2015-10-15 21:50 - 00000000 ____D C:\AdwCleaner
2015-10-15 21:47 - 2015-10-15 21:47 - 01682432 _____ C:\Users\Adéla\Desktop\adwcleaner_5.013.exe
2015-10-15 21:46 - 2015-10-15 21:47 - 01682432 _____ C:\Users\Adéla\Downloads\adwcleaner_5.013.exe
2015-10-15 21:19 - 2015-10-15 21:19 - 00002053 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2015-10-15 20:59 - 2015-10-15 21:00 - 00042301 _____ C:\Users\Adéla\Desktop\Addition2.txt
2015-10-15 20:56 - 2015-10-15 22:37 - 00023975 _____ C:\Users\Adéla\Desktop\FRST.txt
2015-10-15 20:56 - 2015-10-15 22:36 - 00000000 ____D C:\FRST
2015-10-15 20:56 - 2015-10-15 21:00 - 00059339 _____ C:\Users\Adéla\Desktop\FRST2.txt
2015-10-15 20:52 - 2015-10-15 20:52 - 02196992 _____ (Farbar) C:\Users\Adéla\Downloads\FRST64.exe
2015-10-15 20:52 - 2015-10-15 20:52 - 02196992 _____ (Farbar) C:\Users\Adéla\Desktop\FRST64.exe
2015-10-15 18:57 - 2015-10-15 18:57 - 00000000 ____D C:\Program Files\Common Files\AV
2015-10-15 18:57 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
2015-10-15 18:52 - 2015-10-15 18:52 - 00001418 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2015-10-15 18:52 - 2015-10-15 18:52 - 00001406 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2015-10-15 18:52 - 2015-10-15 18:52 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2015-10-15 18:51 - 2015-10-15 20:31 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2015-10-15 18:51 - 2015-10-15 18:57 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-10-15 18:51 - 2015-10-15 18:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2015-10-15 18:51 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe
2015-10-15 18:49 - 2015-10-15 18:50 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Adéla\Downloads\spybot-2.4.exe
2015-10-14 21:29 - 2015-09-19 05:18 - 00035384 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-10-14 21:29 - 2015-09-18 15:42 - 01290752 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-10-14 21:29 - 2015-09-18 15:42 - 01163776 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-10-14 21:29 - 2015-09-18 15:42 - 00766464 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-10-14 21:29 - 2015-09-18 15:42 - 00699904 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-10-14 21:29 - 2015-09-18 15:42 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-10-14 21:29 - 2015-09-18 15:42 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-10-14 11:30 - 2015-10-14 11:30 - 00000000 ____D C:\WINDOWS\SysWOW64\vbox
2015-10-14 11:30 - 2015-10-14 11:30 - 00000000 ____D C:\WINDOWS\system32\vbox
2015-10-14 08:35 - 2015-10-14 08:35 - 00001949 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-10-14 08:35 - 2015-10-14 08:31 - 00378880 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-10-14 08:33 - 2015-10-14 08:33 - 00000000 ____D C:\Users\Adéla\AppData\Roaming\AVAST Software
2015-10-14 08:32 - 2015-10-14 12:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-10-14 08:32 - 2015-10-14 08:35 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-10-14 08:32 - 2015-10-14 08:31 - 01049880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-10-14 08:32 - 2015-10-14 08:31 - 00448968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-10-14 08:32 - 2015-10-14 08:31 - 00274808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-10-14 08:32 - 2015-10-14 08:31 - 00153744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-10-14 08:32 - 2015-10-14 08:31 - 00132656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\ngvss.sys
2015-10-14 08:32 - 2015-10-14 08:31 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-10-14 08:32 - 2015-10-14 08:31 - 00090968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-10-14 08:32 - 2015-10-14 08:31 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-10-14 08:32 - 2015-10-14 08:31 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-10-14 08:31 - 2015-10-14 08:31 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-10-14 08:26 - 2015-10-14 08:26 - 05664680 _____ (AVAST Software) C:\Users\Adéla\Downloads\avast_pro_antivirus_setup_online.exe
2015-10-14 08:21 - 2015-10-14 08:21 - 00000264 _____ C:\Users\Adéla\Downloads\debug.log
2015-10-14 08:17 - 2015-08-22 15:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 08:17 - 2015-08-22 15:42 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 08:17 - 2015-08-22 15:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 08:17 - 2015-08-22 15:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 08:17 - 2015-08-22 15:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 08:17 - 2015-08-22 15:35 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 08:17 - 2015-08-22 15:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 08:17 - 2015-08-22 15:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 08:17 - 2015-08-22 15:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 08:17 - 2015-08-06 18:47 - 04710400 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2015-10-14 08:17 - 2015-08-06 18:18 - 04068352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2015-10-14 08:17 - 2015-07-16 20:58 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcdAutoSetup.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00901264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00066400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00022368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00984448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00063840 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 08:16 - 2015-08-22 15:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 08:16 - 2015-08-07 23:40 - 01134752 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2015-10-14 08:16 - 2015-08-07 23:40 - 00686960 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2015-10-14 08:16 - 2015-08-07 23:40 - 00507176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2015-10-14 08:16 - 2015-08-07 16:13 - 00862720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2015-10-14 08:13 - 2015-08-06 19:05 - 00669184 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2015-10-14 08:13 - 2015-08-06 18:37 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2015-10-13 22:24 - 2015-09-29 14:31 - 07457624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-10-13 22:24 - 2015-09-29 14:31 - 01658536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-10-13 22:24 - 2015-09-29 14:31 - 01519592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-10-13 22:24 - 2015-09-29 14:31 - 01487008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-10-13 22:24 - 2015-09-29 14:31 - 01355848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-10-13 22:24 - 2015-09-24 18:42 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2015-10-13 22:24 - 2015-09-24 18:40 - 00737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-10-13 22:24 - 2015-08-27 04:43 - 22372152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-10-13 22:24 - 2015-08-27 04:42 - 19795904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-10-13 22:24 - 2015-08-07 23:40 - 01736520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-10-13 22:24 - 2015-08-07 23:40 - 01499920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-10-13 22:20 - 2015-09-10 20:02 - 25851392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-10-13 22:20 - 2015-09-10 19:19 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-10-13 22:20 - 2015-09-10 19:18 - 02886656 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-10-13 22:20 - 2015-09-10 19:18 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-10-13 22:20 - 2015-09-10 19:14 - 05990400 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-10-13 22:20 - 2015-09-10 19:09 - 20358144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-10-13 22:20 - 2015-09-10 19:06 - 00616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-10-13 22:20 - 2015-09-10 19:04 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-10-13 22:20 - 2015-09-10 18:51 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-10-13 22:20 - 2015-09-10 18:39 - 00504832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-10-13 22:20 - 2015-09-10 18:37 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-10-13 22:20 - 2015-09-10 18:37 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-10-13 22:20 - 2015-09-10 18:35 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-10-13 22:20 - 2015-09-10 18:33 - 02279936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-10-13 22:20 - 2015-09-10 18:28 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-10-13 22:20 - 2015-09-10 18:28 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-10-13 22:20 - 2015-09-10 18:27 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-10-13 22:20 - 2015-09-10 18:24 - 14456832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-10-13 22:20 - 2015-09-10 18:21 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-10-13 22:20 - 2015-09-10 18:19 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-10-13 22:20 - 2015-09-10 18:19 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-10-13 22:20 - 2015-09-10 18:19 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-10-13 22:20 - 2015-09-10 18:17 - 02126336 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-10-13 22:20 - 2015-09-10 18:17 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-10-13 22:20 - 2015-09-10 18:07 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-10-13 22:20 - 2015-09-10 18:05 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-10-13 22:20 - 2015-09-10 18:02 - 04527616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-10-13 22:20 - 2015-09-10 18:01 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-10-13 22:20 - 2015-09-10 18:00 - 12853760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-10-13 22:20 - 2015-09-10 17:57 - 02487808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-10-13 22:20 - 2015-09-10 17:57 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-10-13 22:20 - 2015-09-10 17:55 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-10-13 22:20 - 2015-09-10 17:55 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-10-13 22:20 - 2015-09-10 17:55 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-10-13 22:20 - 2015-09-10 17:45 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-10-13 22:20 - 2015-09-10 17:34 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-10-13 22:20 - 2015-09-10 17:31 - 02011136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-10-13 22:20 - 2015-09-10 17:27 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-10-13 22:20 - 2015-09-10 17:26 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-10-13 21:33 - 2015-09-29 14:29 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-10-13 21:33 - 2015-09-28 20:45 - 03705344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-10-13 21:33 - 2015-09-28 20:26 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-10-13 21:33 - 2015-09-28 20:25 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-10-13 21:33 - 2015-09-28 20:25 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-10-13 21:33 - 2015-09-28 20:25 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-10-13 21:33 - 2015-09-28 20:22 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-10-13 21:33 - 2015-09-28 20:22 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-10-13 21:33 - 2015-09-28 20:22 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-10-13 21:33 - 2015-09-28 20:15 - 02243072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-10-13 21:33 - 2015-09-28 20:13 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-10-13 21:33 - 2015-09-28 20:12 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-10-05 22:57 - 2015-10-05 23:00 - 00399360 _____ (Trend Micro Inc.) C:\WINDOWS\RegBootClean64.exe
2015-10-05 22:34 - 2015-10-05 22:34 - 03617312 _____ (Facebook Inc.) C:\Users\Adéla\Downloads\Trendmicro_T761029780689576T_ (1).exe
2015-10-05 22:34 - 2015-10-05 22:34 - 00000036 _____ C:\Users\Adéla\AppData\Local\housecall.guid.cache
2015-10-05 22:33 - 2015-10-05 22:33 - 00305832 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmcomm.sys
2015-10-05 22:32 - 2015-10-05 22:32 - 03617312 _____ (Facebook Inc.) C:\Users\Adéla\Downloads\Trendmicro_T761029780689576T_.exe
2015-09-28 21:47 - 2015-09-28 21:47 - 00000000 ____D C:\ProgramData\Electronic Arts
2015-09-28 21:46 - 2015-09-28 21:46 - 00001174 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Download Manager.lnk
2015-09-28 21:46 - 2015-09-28 21:46 - 00000060 _____ C:\WINDOWS\wininit.ini
2015-09-28 21:42 - 2015-09-28 21:42 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE
2015-09-28 21:42 - 2008-09-04 20:17 - 00447752 ____R (On2.com) C:\WINDOWS\SysWOW64\vp6vfw.dll
2015-09-23 19:47 - 2015-09-23 20:33 - 825309646 _____ C:\Users\Adéla\Downloads\Herkules-2014-cz-[natu3].avi

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-15 22:14 - 2014-11-08 16:07 - 01666214 _____ C:\WINDOWS\WindowsUpdate.log
2015-10-15 22:04 - 2014-09-24 18:23 - 01745984 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-15 22:04 - 2014-09-24 17:39 - 00739924 _____ C:\WINDOWS\system32\perfh005.dat
2015-10-15 22:04 - 2014-09-24 17:39 - 00151610 _____ C:\WINDOWS\system32\perfc005.dat
2015-10-15 22:03 - 2013-10-14 00:27 - 00000970 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001UA.job
2015-10-15 22:02 - 2013-09-19 02:26 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2620750530-3227779391-1858522390-1001
2015-10-15 22:00 - 2014-01-15 20:06 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-10-15 21:57 - 2015-08-20 19:49 - 00000958 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-10-15 21:57 - 2013-08-22 16:46 - 00371212 _____ C:\WINDOWS\setupact.log
2015-10-15 21:57 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-10-15 21:51 - 2015-08-20 19:49 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-10-15 21:19 - 2015-08-10 20:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-10-15 21:19 - 2012-12-15 04:11 - 00189012 _____ C:\WINDOWS\DPINST.LOG
2015-10-15 21:18 - 2012-08-28 20:46 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-10-15 21:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-10-15 18:46 - 2014-11-11 17:39 - 00003950 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{DAF410C1-F6D5-425A-9631-C935F93916DB}
2015-10-15 18:44 - 2015-08-05 17:44 - 00002471 _____ C:\Users\Adéla\Desktop\Google Chrome.lnk
2015-10-15 04:53 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-10-14 22:53 - 2015-04-18 14:34 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-10-14 22:53 - 2014-09-24 21:02 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-10-14 21:51 - 2015-08-20 19:49 - 00003912 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-10-14 21:51 - 2015-08-20 19:49 - 00003802 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-10-14 13:38 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache
2015-10-14 12:07 - 2014-09-24 09:10 - 00057298 _____ C:\WINDOWS\PFRO.log
2015-10-14 12:07 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-10-14 12:06 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-10-14 08:15 - 2013-10-14 01:17 - 00000000 ____D C:\Users\Adéla\AppData\Roaming\Seznam.cz
2015-10-14 08:06 - 2013-12-03 20:25 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-10-14 07:51 - 2013-12-03 20:25 - 143481208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-10-12 16:24 - 2015-03-16 05:05 - 00000000 ____D C:\Users\Adéla\AppData\Local\CrashDumps
2015-10-09 13:34 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-10-07 13:37 - 2015-04-05 13:31 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-10-07 12:55 - 2015-04-05 13:31 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-10-05 23:03 - 2014-01-15 20:06 - 00000000 ____D C:\Users\Adéla\AppData\Roaming\Skype
2015-10-05 19:05 - 2014-01-15 20:06 - 00000000 ____D C:\ProgramData\Skype
2015-10-04 19:53 - 2014-01-05 12:23 - 00000000 ____D C:\Users\Adéla\Desktop\adíla
2015-10-04 19:52 - 2013-10-20 17:35 - 00000000 ___RD C:\Users\Adéla\Desktop\hry
2015-10-02 16:24 - 2014-09-24 21:08 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-10-02 16:24 - 2014-09-24 21:08 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-02 12:33 - 2015-08-04 22:29 - 00000000 ____D C:\Program Files (x86)\Opera
2015-10-02 12:32 - 2015-08-04 22:30 - 00003820 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1438720219
2015-10-02 12:32 - 2015-08-04 22:30 - 00001074 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-09-28 21:46 - 2013-09-30 01:59 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2015-09-27 22:46 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-09-17 04:38 - 2015-03-31 10:27 - 00003940 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-17 04:38 - 2015-03-31 10:27 - 00003704 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-17 04:38 - 2015-03-31 10:27 - 00000968 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-17 04:38 - 2015-03-31 10:27 - 00000964 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-17 03:58 - 2013-10-14 00:27 - 00003916 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001UA
2015-09-17 03:58 - 2013-10-14 00:27 - 00003536 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001Core
2015-09-17 03:58 - 2013-10-14 00:27 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001Core.job

==================== Files in the root of some directories =======

2015-10-05 22:34 - 2015-10-05 22:34 - 0000036 _____ () C:\Users\Adéla\AppData\Local\housecall.guid.cache
2015-01-05 13:39 - 2015-01-05 13:39 - 0001056 _____ () C:\Users\Adéla\AppData\Local\MRDownloader (1).nast
2015-01-05 13:36 - 2015-01-05 13:36 - 0001056 _____ () C:\Users\Adéla\AppData\Local\MRDownloader.nast

Some files in TEMP:
====================
C:\Users\Adéla\AppData\Local\Temp\EAD631.exe
C:\Users\Adéla\AppData\Local\Temp\EAD914E.exe
C:\Users\Adéla\AppData\Local\Temp\EADD0EB.exe
C:\Users\Adéla\AppData\Local\Temp\EADEC49.exe
C:\Users\Adéla\AppData\Local\Temp\KMP_3.2.0.0.exe
C:\Users\Adéla\AppData\Local\Temp\mpegc.dll
C:\Users\Adéla\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Adéla\AppData\Local\Temp\{03218396-B841-4DEB-88C7-7AB2DF79C26D}.dll
C:\Users\Adéla\AppData\Local\Temp\{1DBF6375-BFCF-4173-84F7-20276AA2F763}.dll
C:\Users\Adéla\AppData\Local\Temp\{1E67B027-D29A-4FA3-BF23-66885E4058F2}.dll
C:\Users\Adéla\AppData\Local\Temp\{2CBEA4CE-062B-457C-888E-7735A445DE77}.dll
C:\Users\Adéla\AppData\Local\Temp\{2D914816-674D-4F29-B012-1B891C20FCE6}.dll
C:\Users\Adéla\AppData\Local\Temp\{2FCDD434-66EA-4414-918A-58A560CCB70D}.dll
C:\Users\Adéla\AppData\Local\Temp\{311E823F-CFC5-45D1-A8E6-32025F1AE674}.dll
C:\Users\Adéla\AppData\Local\Temp\{42E2E0B7-B8DB-4661-8393-882A55926271}.dll
C:\Users\Adéla\AppData\Local\Temp\{46BC754A-6E3F-48CE-99FD-BFB172DC182C}.dll
C:\Users\Adéla\AppData\Local\Temp\{48EA649B-7208-41D4-85FA-4C9E557C731D}.dll
C:\Users\Adéla\AppData\Local\Temp\{4B863509-E9AD-4C39-9BB2-0A415260664A}.dll
C:\Users\Adéla\AppData\Local\Temp\{4B9B2ACE-37D0-4D98-B0C9-7D0AB9F16AE0}.dll
C:\Users\Adéla\AppData\Local\Temp\{4C8C831D-0413-43BC-AFD6-63491B372E36}.dll
C:\Users\Adéla\AppData\Local\Temp\{4EF984BA-6E88-41A5-9E26-103E6943F7FD}.dll
C:\Users\Adéla\AppData\Local\Temp\{54B922DD-1D3C-4DB5-A5A7-7C3A9431411A}.dll
C:\Users\Adéla\AppData\Local\Temp\{56E50650-EE8C-49EE-90BD-BFFBD3B94BC3}.dll
C:\Users\Adéla\AppData\Local\Temp\{57AA62C1-CAEB-46F5-BD24-3C2D72186387}.dll
C:\Users\Adéla\AppData\Local\Temp\{5C151215-957B-4095-B3EE-28DE3F5C38C5}.dll
C:\Users\Adéla\AppData\Local\Temp\{5C4879AC-6740-4E18-AC63-EA213F5B0D2B}.dll
C:\Users\Adéla\AppData\Local\Temp\{5E79E326-C9C2-465A-8D2E-FC85DDC54ED9}.dll
C:\Users\Adéla\AppData\Local\Temp\{604FBC72-EF16-4543-B5E8-B33F2B32953D}.dll
C:\Users\Adéla\AppData\Local\Temp\{61D80CDC-D8AD-4C99-928B-136DDC7D2EE1}.dll
C:\Users\Adéla\AppData\Local\Temp\{64CEBE5E-F366-4B05-A068-3C2C66115E4D}.dll
C:\Users\Adéla\AppData\Local\Temp\{64F4CFAB-FCB6-4EE6-B1E5-8726611819DC}.dll
C:\Users\Adéla\AppData\Local\Temp\{688858D0-803B-41D8-8723-FF6041FC8F28}.dll
C:\Users\Adéla\AppData\Local\Temp\{6EC3C78D-35AD-4D1B-ACF3-E0DE6CBCF037}.dll
C:\Users\Adéla\AppData\Local\Temp\{6EC48738-F931-4FD4-8B34-913B90A6FC04}.dll
C:\Users\Adéla\AppData\Local\Temp\{6FC38E17-E07D-4970-B515-10611E9F1B6A}.dll
C:\Users\Adéla\AppData\Local\Temp\{733A39DC-5A20-4DE4-9E96-B05BCB204FCA}.dll
C:\Users\Adéla\AppData\Local\Temp\{7A2F73AF-4AF9-42C8-A1A0-11A7D662E40E}.dll
C:\Users\Adéla\AppData\Local\Temp\{7CA6E074-7C4E-4CA7-997D-43CAABF454A7}.dll
C:\Users\Adéla\AppData\Local\Temp\{7DC9B3E5-DE97-4DDE-A109-89834765711C}.dll
C:\Users\Adéla\AppData\Local\Temp\{83D95594-F8D0-4E6E-8C76-BF6ECB806B26}.dll
C:\Users\Adéla\AppData\Local\Temp\{9055F47C-E1BB-461D-8895-B339815F946C}.dll
C:\Users\Adéla\AppData\Local\Temp\{90B35BDA-95C0-43CA-9ED5-918AF37BAE66}.dll
C:\Users\Adéla\AppData\Local\Temp\{991A61C1-C2A5-440C-AF7E-D08E963B411A}.dll
C:\Users\Adéla\AppData\Local\Temp\{997C5B2E-FA7B-4EA4-AC65-6920B919B2EA}.dll
C:\Users\Adéla\AppData\Local\Temp\{99DF6FBC-7F8C-4D29-9EDD-CBEE87113716}.dll
C:\Users\Adéla\AppData\Local\Temp\{9B142E00-3746-4EF6-B261-E3D296AF22D5}.dll
C:\Users\Adéla\AppData\Local\Temp\{9D46391A-7DF5-412E-8F62-541DAA399C66}.dll
C:\Users\Adéla\AppData\Local\Temp\{A3645CCE-BCE2-4DDF-90A8-6D99F64B381E}.dll
C:\Users\Adéla\AppData\Local\Temp\{A4F50B7A-2256-4590-8FD3-3657DB01283D}.dll
C:\Users\Adéla\AppData\Local\Temp\{A7326BF3-3F3B-42ED-A481-D2B58B723950}.dll
C:\Users\Adéla\AppData\Local\Temp\{A73574B4-40EA-47DA-B0A8-7F37544A5387}.dll
C:\Users\Adéla\AppData\Local\Temp\{A7D24914-D0F7-4F5E-903D-6CCD1FFFBD96}.dll
C:\Users\Adéla\AppData\Local\Temp\{A9E4FEBF-D84A-4C78-BB59-939E9C4B90D4}.dll
C:\Users\Adéla\AppData\Local\Temp\{B0D78441-8BC3-4D5B-AD1F-50BE7D1CA072}.dll
C:\Users\Adéla\AppData\Local\Temp\{B4CA3ADB-D8A4-4D6E-9715-35D00B6E6E02}.dll
C:\Users\Adéla\AppData\Local\Temp\{B7F2D677-84C7-4B21-BFBD-E22B596F8EA5}.dll
C:\Users\Adéla\AppData\Local\Temp\{BA3E77AA-83E1-4952-A543-4905CD30C043}.dll
C:\Users\Adéla\AppData\Local\Temp\{BC45DE86-9A4B-4FBD-BA24-4B4A9E9BCBE1}.dll
C:\Users\Adéla\AppData\Local\Temp\{BCDCF1EE-BD4A-4FBF-B7E6-B888F0C9173F}.dll
C:\Users\Adéla\AppData\Local\Temp\{C7A2DF7E-36A8-4ACE-A23A-2D26A0C10FD4}.dll
C:\Users\Adéla\AppData\Local\Temp\{C9994ABF-3B88-4C0C-8264-C45E799714FA}.dll
C:\Users\Adéla\AppData\Local\Temp\{CEB8E3E7-0256-4138-8E34-BA3ECACFCF84}.dll
C:\Users\Adéla\AppData\Local\Temp\{CEDCE964-15D6-4891-86E3-CBC6BDF2B329}.dll
C:\Users\Adéla\AppData\Local\Temp\{D1243460-D8E1-44A0-961E-FB2F26174A48}.dll
C:\Users\Adéla\AppData\Local\Temp\{D6187603-40FE-4621-BF63-2FC357CBB53C}.dll
C:\Users\Adéla\AppData\Local\Temp\{D69FC951-C690-47E0-92B1-B4B479D118FA}.dll
C:\Users\Adéla\AppData\Local\Temp\{D73C58B1-9DC8-4EA2-ACDC-9C004D64C65E}.dll
C:\Users\Adéla\AppData\Local\Temp\{DC811AB0-A75F-416A-BA4A-3C5F126C89A1}.dll
C:\Users\Adéla\AppData\Local\Temp\{DE898B91-6B19-42DA-91F1-F51CB7AAD7B6}.dll
C:\Users\Adéla\AppData\Local\Temp\{E135C94C-118E-4A02-9875-99E0D8540582}.dll
C:\Users\Adéla\AppData\Local\Temp\{E1B4B53C-0221-45AA-AFE1-A88F9844CC2D}.dll
C:\Users\Adéla\AppData\Local\Temp\{E2B9289A-B24B-4A11-8308-75485694AFFF}.dll
C:\Users\Adéla\AppData\Local\Temp\{E3AF7222-71FB-49F6-AC17-439908D08FE4}.dll
C:\Users\Adéla\AppData\Local\Temp\{E4E32B7D-7185-41CD-951B-E3D4EDF81429}.dll
C:\Users\Adéla\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
C:\Users\Adéla\AppData\Local\Temp\{EB20E1EA-5EA0-49A4-886A-81092EE9B5D1}.dll
C:\Users\Adéla\AppData\Local\Temp\{ECEFCF74-0600-4F1F-99E2-C543077A2BAC}.dll
C:\Users\Adéla\AppData\Local\Temp\{F575C9E4-3635-4008-9DA1-3AB649D7C00E}.dll
C:\Users\Adéla\AppData\Local\Temp\{F745860A-8427-4EE1-AE67-522ED4F4535E}.dll
C:\Users\Adéla\AppData\Local\Temp\{FB204DA1-C003-4AD7-B2A1-2B717BB9E77B}.dll
C:\Users\Adéla\AppData\Local\Temp\{FDFCB77D-5162-4DA9-8FDC-C3238082C550}.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-10-14 12:20

==================== End of FRST.txt ============================
Přílohy
Addition.rar
(10.81 KiB) Staženo 75 x
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prohlížeč a reklamy

#6 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
Start
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\MountPoints2: {83635113-3c53-11e5-bebe-2016d86b26dc} - "G:\Startme.exe"
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\MountPoints2: {a7ab00be-94fd-11e4-be9a-2016d86b26dc} - "D:\LGAutoRun.exe"
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\MountPoints2: {fae4cfd5-24af-11e3-be74-2016d86b26dc} - "F:\autorun.exe"
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-20] (Google Inc.)
c:\Program Files (x86)\Google\Google Toolbar
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-20] (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-20] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-20] (Google Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM ... PARAM__&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR Extension: (Bing) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2015-10-15]
CHR Extension: (No Name) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\njoojinliliaebnlahckbhlladnmpigi [2015-10-15]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001UA.job
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001UA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001Core
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001Core.job
C:\Users\Adéla\AppData\Local\Temp
CustomCLSID: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
kosak
Návštěvník
Návštěvník
Příspěvky: 14
Registrován: 15 říj 2015 19:47

Re: Prohlížeč a reklamy

#7 Příspěvek od kosak »

Fix result of Farbar Recovery Scan Tool (x64) Version:15-10-2015 01
Ran by Adéla (2015-10-15 22:54:51) Run:1
Running from C:\Users\Adéla\Desktop
Loaded Profiles: Adéla (Available Profiles: Adéla)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\MountPoints2: {83635113-3c53-11e5-bebe-2016d86b26dc} - "G:\Startme.exe"
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\MountPoints2: {a7ab00be-94fd-11e4-be9a-2016d86b26dc} - "D:\LGAutoRun.exe"
HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\...\MountPoints2: {fae4cfd5-24af-11e3-be74-2016d86b26dc} - "F:\autorun.exe"
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-20] (Google Inc.)
c:\Program Files (x86)\Google\Google Toolbar
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-20] (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-20] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-20] (Google Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM ... PARAM__&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR Extension: (Bing) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2015-10-15]
CHR Extension: (No Name) - C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\njoojinliliaebnlahckbhlladnmpigi [2015-10-15]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001UA.job
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001UA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001Core
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001Core.job
C:\Users\Adéla\AppData\Local\Temp
CustomCLSID: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Adéla\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File
End
*****************

"HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{83635113-3c53-11e5-bebe-2016d86b26dc}" => key removed successfully
HKCR\CLSID\{83635113-3c53-11e5-bebe-2016d86b26dc} => key not found.
"HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a7ab00be-94fd-11e4-be9a-2016d86b26dc}" => key removed successfully
HKCR\CLSID\{a7ab00be-94fd-11e4-be9a-2016d86b26dc} => key not found.
"HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fae4cfd5-24af-11e3-be74-2016d86b26dc}" => key removed successfully
HKCR\CLSID\{fae4cfd5-24af-11e3-be74-2016d86b26dc} => key not found.
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
"HKLM\SOFTWARE\Policies\Google" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => key removed successfully
"HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => key removed successfully
c:\Program Files (x86)\Google\Google Toolbar => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
C:\Program Files (x86)\Skype\Toolbars => moved successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => value removed successfully
"HKCR\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}" => key removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => value removed successfully
"HKCR\Wow6432Node\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}" => key removed successfully
"HKCR\PROTOCOLS\Handler\skypec2c" => key removed successfully
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => key removed successfully
HKCR\Wow6432Node\PROTOCOLS\Handler\skypec2c => key not found.
"HKCR\Wow6432Node\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => key removed successfully
HKLM\Software\Wow6432Node\Mozilla\Thunderbird\Extensions\\msktbird@mcafee.com => value removed successfully
Chrome DefaultSearchURL => removed successfully
Chrome DefaultSearchKeyword => removed successfully
C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd => moved successfully
C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\njoojinliliaebnlahckbhlladnmpigi => moved successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl" => key removed successfully
"C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx" => not found.
c2cautoupdatesvc => Unable to stop service.
c2cautoupdatesvc => service removed successfully
c2cpnrsvc => Unable to stop service.
c2cpnrsvc => service removed successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001UA.job => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001UA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001Core => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2620750530-3227779391-1858522390-1001Core.job => moved successfully

"C:\Users\Adéla\AppData\Local\Temp" folder move:

Could not move "C:\Users\Adéla\AppData\Local\Temp" => Scheduled to move on reboot.

"HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}" => key removed successfully
"HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}" => key removed successfully
"HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}" => key removed successfully
"HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}" => key removed successfully
"HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}" => key removed successfully
"HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}" => key removed successfully
"HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}" => key removed successfully
"HKU\S-1-5-21-2620750530-3227779391-1858522390-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}" => key removed successfully

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-10-15 22:57:36)

C:\Users\Adéla\AppData\Local\Temp => moved successfully

==== End of Fixlog 22:57:37 ====
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prohlížeč a reklamy

#8 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
kosak
Návštěvník
Návštěvník
Příspěvky: 14
Registrován: 15 říj 2015 19:47

Re: Prohlížeč a reklamy

#9 Příspěvek od kosak »

Bohužel, problém přetrvává.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prohlížeč a reklamy

#10 Příspěvek od Rudy »

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
kosak
Návštěvník
Návštěvník
Příspěvky: 14
Registrován: 15 říj 2015 19:47

Re: Prohlížeč a reklamy

#11 Příspěvek od kosak »

Po restartu PC problém zmizel, což mi teda příjde divné, nicméně níže zasílám i log z MBAM.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 17. 10. 2015
Čas skenování: 13:31
Protokol: mbam.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2015.10.17.03
Databáze rootkitů: v2015.10.16.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: Adéla

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 323519
Uplynulý čas: 24 min, 34 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 5
PUP.Optional.eShield, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dkmjljdbbgogihjcapfhgkonfmccbffp, , [996e76e23a51979f458d1160b1522cd4],
PUP.Optional.TidyNetwork, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\DRAGDROP\{70BC1CDB-0744-4172-BDA0-B5A487D00C3A}, , [61a6b99fc7c481b5429024767291fb05],
PUP.Optional.TidyNetwork, HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\DRAGDROP\{70BC1CDB-0744-4172-BDA0-B5A487D00C3A}, , [6e990058f19a43f34e7a1288ae55f709],
PUP.Optional.TNT, HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72A6AB0F-2FA8-4C73-9FCB-1E62A608F001}, , [9671f6623358bb7bdc16faa0f31034cc],
PUP.Optional.TNT, HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9C7415E3-7C0F-4D49-B08B-168B13BDE9B5}, , [986fdb7ded9e93a3be35ff9b80834fb1],

Hodnoty registru: 4
PUP.Optional.Yontoo.ChrPRST, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DoNotAskAgain, searchinterneat-a.akamaihd.net, , [c2457cdc1e6dde582e8703aa7b8809f7]
PUP.Optional.TNT, HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72A6AB0F-2FA8-4C73-9FCB-1E62A608F001}|AppName, TNT2User.exe, , [9671f6623358bb7bdc16faa0f31034cc]
PUP.Optional.Yontoo.ChrPRST, HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DoNotAskAgain, searchinterneat-a.akamaihd.net, , [36d1193fc4c752e449969f0d7f84837d]
PUP.Optional.TNT, HKU\S-1-5-21-2620750530-3227779391-1858522390-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9C7415E3-7C0F-4D49-B08B-168B13BDE9B5}|OSDFileURL, file:///C:/Users/Adéla/AppData/Local/TNT2/Profiles/11467/yah11467.xml, , [986fdb7ded9e93a3be35ff9b80834fb1]

Data registru: 1
PUP.Optional.eShield, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, http://services.eshield.com/general/new ... 408661}&i=, Dobré: (www.google.com), Špatné: (http://services.eshield.com/general/new ... 408661}&i=),,[d136e4745d2ea4920462f351ce3617e9]

Složky: 9
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\databases\http_charmsavings.com_0, , [a16692c6ddaeb97d4fcf3b3dbf43639d],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\IndexedDB\http_charmsavings.com_0.indexeddb.leveldb, , [8384b5a3b2d9fa3cff207dfb60a219e7],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\databases\http_charmsavings.com_0, , [2add5107e0ab7cbaec4eb6c2b54d5fa1],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\http_charmsavings.com_0.indexeddb.leveldb, , [3bcc6deb1774a88eb388d0a8c939c13f],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\_metadata, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.RecordPage, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\Extensions\njoojinliliaebnlahckbhlladnmpigi\1.0.5693.33119_0, , [fd0a0454c9c21521c15c2c42768e8779],
PUP.Optional.RecordPage, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\Extensions\njoojinliliaebnlahckbhlladnmpigi, , [fd0a0454c9c21521c15c2c42768e8779],

Soubory: 45
PUP.Optional.OpenCandy, C:\Program Files (x86)\Daemon Tools Lite 4.47 CZ\Daemon Tools Lite 4.47 CZ.exe, , [67a0aaae2962053107f14c0f57ad48b8],
PUP.Optional.SettingsGuard, C:\Windows\Temp\update.exe, , [957225333c4f7eb8332884d806fbaf51],
PUP.Optional.DomaIQ, C:\Users\Adéla\Downloads\Setup (1).zip, , [1ee9eb6de1aa4fe7efb9034ad130867a],
PUP.Optional.DomaIQ, C:\Users\Adéla\Downloads\Setup.zip, , [759259ff90fb5adca206ee5f6c956e92],
PUP.Optional.RecordPage, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_recordpage-a.akamaihd.net_0.localstorage, , [967185d30685a591e40aa3eaf80b20e0],
PUP.Optional.RecordPage, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_recordpage-a.akamaihd.net_0.localstorage-journal, , [b94e25335d2e76c0915d424b6c97b14f],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\Local Storage\http_charmsavings.com_0.localstorage, , [fd0a1147adde95a1a19d1b9490738f71],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\Local Storage\http_charmsavings.com_0.localstorage-journal, , [3ec9e0785833b581cc72515e699ae41c],
PUP.Optional.KingTopDeals, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\Local Storage\http_pstatic.kingtopdeals.com_0.localstorage, , [13f4a6b26526c86ec08876390bf85ba5],
PUP.Optional.KingTopDeals, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\Local Storage\http_pstatic.kingtopdeals.com_0.localstorage-journal, , [070073e57813290dc385eac5da29b749],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_charmsavings.com_0.localstorage, , [a067e375e2a9f73f6b21dde11fe406fa],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_charmsavings.com_0.localstorage-journal, , [29de0a4ed2b990a6c8c4c8f6e221b34d],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\databases\http_charmsavings.com_0\1, , [a16692c6ddaeb97d4fcf3b3dbf43639d],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\IndexedDB\http_charmsavings.com_0.indexeddb.leveldb\000003.log, , [8384b5a3b2d9fa3cff207dfb60a219e7],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\IndexedDB\http_charmsavings.com_0.indexeddb.leveldb\CURRENT, , [8384b5a3b2d9fa3cff207dfb60a219e7],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\IndexedDB\http_charmsavings.com_0.indexeddb.leveldb\LOCK, , [8384b5a3b2d9fa3cff207dfb60a219e7],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\IndexedDB\http_charmsavings.com_0.indexeddb.leveldb\LOG, , [8384b5a3b2d9fa3cff207dfb60a219e7],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\IndexedDB\http_charmsavings.com_0.indexeddb.leveldb\LOG.old, , [8384b5a3b2d9fa3cff207dfb60a219e7],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\IndexedDB\http_charmsavings.com_0.indexeddb.leveldb\MANIFEST-000001, , [8384b5a3b2d9fa3cff207dfb60a219e7],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\databases\http_charmsavings.com_0\162, , [2add5107e0ab7cbaec4eb6c2b54d5fa1],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\http_charmsavings.com_0.indexeddb.leveldb\000003.log, , [3bcc6deb1774a88eb388d0a8c939c13f],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\http_charmsavings.com_0.indexeddb.leveldb\CURRENT, , [3bcc6deb1774a88eb388d0a8c939c13f],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\http_charmsavings.com_0.indexeddb.leveldb\LOCK, , [3bcc6deb1774a88eb388d0a8c939c13f],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\http_charmsavings.com_0.indexeddb.leveldb\LOG, , [3bcc6deb1774a88eb388d0a8c939c13f],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\http_charmsavings.com_0.indexeddb.leveldb\LOG.old, , [3bcc6deb1774a88eb388d0a8c939c13f],
PUP.Optional.CharmSavings, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\http_charmsavings.com_0.indexeddb.leveldb\MANIFEST-000001, , [3bcc6deb1774a88eb388d0a8c939c13f],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\background.js, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\background.html, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eshield.nmf, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eShield_128.png, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eShield_16.png, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eShield_48.png, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eshield_arm.nexe, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eshield_x86_32.nexe, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eshield_x86_64.nexe, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\manifest.json, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\newtab.html, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\newtab.js, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\off.png, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\on.png, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.eShield, C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\_metadata\verified_contents.json, , [02054b0d206ba2947b4dbeae59abcc34],
PUP.Optional.RecordPage, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\Extensions\njoojinliliaebnlahckbhlladnmpigi\1.0.5693.33119_0\manifest.json, , [fd0a0454c9c21521c15c2c42768e8779],
PUP.Optional.RecordPage, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\Extensions\njoojinliliaebnlahckbhlladnmpigi\1.0.5693.33119_0\background.js, , [fd0a0454c9c21521c15c2c42768e8779],
PUP.Optional.RecordPage, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\Extensions\njoojinliliaebnlahckbhlladnmpigi\1.0.5693.33119_0\content.js, , [fd0a0454c9c21521c15c2c42768e8779],
PUP.Optional.RecordPage, C:\Users\Adéla\AppData\Roaming\Opera Software\Opera Stable\Extensions\njoojinliliaebnlahckbhlladnmpigi\1.0.5693.33119_0\icon.png, , [fd0a0454c9c21521c15c2c42768e8779],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prohlížeč a reklamy

#12 Příspěvek od Rudy »

Všechny nálezy smažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“