zpomalení, sekání PC

[strojmir]

Dobrý den, PC mě hodně zpomalil, zejména v kombinaci se spuštěným chrome. MBAM našel 55 objektů. Nevím co z toho mohu smazat a zda to také bude stačit. Děkuji za pomoc.
Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 5. 12. 2015
Čas skenování: 12:39
Protokol: MBAM log.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2015.12.05.03
Databáze rootkitů: v2015.11.26.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 8.1
CPU: x86
Souborový systém: NTFS
Uživatel: martas

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 287471
Uplynulý čas: 28 min, 27 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 11
PUP.Optional.ModGoog, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, , [a2d5554c2962c571abcd0de7b44c9769],
PUP.Optional.CrossRider, HKLM\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [195e554c028921156401097cc43fee12],
PUP.Optional.PCSpeedUp, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PCSUUCDRV, , [cbace9b84942c373a6554b546d96718f],
PUP.Optional.InternetSpeedChecker.PrxySvrRST, HKU\S-1-5-18\SOFTWARE\Internet Speed Checker-nv, , [da9de9b86427c96d3844a0052cd6b64a],
PUP.Optional.InternetSpeedChecker.PrxySvrRST, HKU\S-1-5-18\SOFTWARE\Internet Speed Checker-nv-ie, , [5621623f2d5e67cf55276540e61c6997],
PUP.Optional.SavePass, HKU\S-1-5-18\SOFTWARE\SavePass 1.1-nv, , [babd257ca2e9a98da06f1a8c42c1ce32],
PUP.Optional.CrossRider, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_, , [e88f6d34b3d839fd0b35b8cccb3853ad],
PUP.Optional.Cinema, HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\SOFTWARE\CinemaP-1.9cV05.03-nv-ie, , [df98851cef9ced49db628fef0bf8768a],
PUP.Optional.InternetSpeedChecker.PrxySvrRST, HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\SOFTWARE\Internet Speed Checker-nv-ie, , [c0b77c25f79441f57efe9d08a55dd030],
PUP.Optional.SavePass, HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\SOFTWARE\SavePass1.1, , [accbd7ca24671a1c4dc1cfd760a307f9],
PUP.Optional.OutBrowse, HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\SOFTWARE\OB, , [ec8bb8e9aae12a0cc73dcbd4768d3bc5],

Hodnoty registru: 1
PUP.Optional.OutBrowse, HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\SOFTWARE\OB|monitype6, 3/18/15 0:24:14, , [ec8bb8e9aae12a0cc73dcbd4768d3bc5]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 3
PUP.Optional.GlobalUpdate, C:\Users\martas\AppData\Local\Temp\comh.182922, , [27505a47d9b245f1f5637908b2509b65],
PUP.Optional.GlobalUpdate, C:\Users\martas\AppData\Local\Temp\comh.17420, , [e097bde40e7d43f389cf4b36837f0ef2],
PUP.Optional.GlobalUpdate, C:\Users\martas\AppData\Local\Temp\comh.162697, , [4136d9c87615d363aeaaf0914ab835cb],

Soubory: 40
PUP.Optional.OutBrowse, C:\Users\martas\AppData\Local\Temp\dbhcabfbbg.exe, , [abccc9d88209bc7a8624c05dc1408080],
PUP.Optional.OutBrowse, C:\Users\martas\AppData\Local\Temp\dbhcabfbbgi.exe, , [3443376a92f9d95d2f7bc15c44bddb25],
PUP.Optional.OutBrowse, C:\Users\martas\AppData\Local\Temp\mytmpinstaller.exe, , [6017821f117a270f8c386b8125dba858],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\GoogleCrashHandler.exe, , [77003968a0eb71c56711af452bd542be],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\GoogleUpdate.exe, , [a2d5554c2962c571abcd0de7b44c9769],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\GoogleUpdateBroker.exe, , [a0d7f0b128639c9af7815e96936dd32d],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\GoogleUpdateOnDemand.exe, , [93e4623f3c4f3006fb7db440c838a65a],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\goopdate.dll, , [423590113a51e3532c4cb4400ff1df21],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\goopdateres_en.dll, , [d6a1ecb557345dd97afed22247b9dc24],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\npGoogleUpdate4.dll, , [d6a139683d4eb28481f7e50f669a7987],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\psmachine.dll, , [1a5de8b92566f2446c0c886c24dcc43c],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\psuser.dll, , [6611336e69222e08384005efce325ca4],
PUP.Optional.CrossRider, C:\Users\martas\AppData\Local\Temp\nsgB306.tmp\InstallerUtils2.dll, , [87f0adf4c1cad95d8ece951bea17d42c],
PUP.Optional.CrossRider, C:\Users\martas\AppData\Local\Temp\nskA191.tmp\Czbic.exe, , [4e293b669deed0660f0a3fece41d08f8],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\GoogleCrashHandler.exe, , [ed8aa0013d4e7db9502814e07d831ae6],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\GoogleUpdate.exe, , [cfa8f8a9513a5fd73741e11356aa3cc4],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\GoogleUpdateBroker.exe, , [beb96e33eba056e0fa7ef6fe1ee26c94],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\GoogleUpdateOnDemand.exe, , [f87f821f632861d5d1a737bdd927f709],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\goopdate.dll, , [99de3e6398f30a2ca1d78e6658a8eb15],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\goopdateres_en.dll, , [caad138e3c4f77bf1167fef635cb2ed2],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\npGoogleUpdate4.dll, , [1c5bd9c8e6a52b0bc6b26193f808f907],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\psmachine.dll, , [e097b0f1f29983b3a9cf8a6a59a76e92],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\psuser.dll, , [abcc0e937a1181b5f2868c6822ded32d],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\GoogleCrashHandler.exe, , [7cfbd9c82d5ea6908fe9bf35a858f40c],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\GoogleUpdate.exe, , [b9be059cd5b6b3835523f8fc4cb49d63],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\GoogleUpdateBroker.exe, , [a1d6d4cd3259d561a7d114e0817f39c7],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\GoogleUpdateOnDemand.exe, , [87f09110ed9e290de692599b42beba46],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\goopdate.dll, , [05723170880363d3d8a047adda2656aa],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\goopdateres_en.dll, , [bbbc920f49422313ff79886cd22e827e],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\npGoogleUpdate4.dll, , [92e5c7dacac1d0662256995b00008b75],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\psmachine.dll, , [383fd2cf8a017fb779ffc62ead53639d],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\psuser.dll, , [4136960b7714261091e7c232d030d828],
PUP.Optional.ChinAd, C:\Users\martas\AppData\Local\Temp\81426634592\0AB64RN1.exe, , [bdba049dbfcce056dbe97daa2bd660a0],
PUP.Optional.CrossRider, C:\Users\martas\AppData\Local\Temp\81426634592\1AB64RN1.exe, , [ccab713091fae35346d472b907faa55b],
PUP.Optional.Yontoo, C:\Users\martas\AppData\Local\Temp\81426634592\1AB64RN3.exe, , [4b2c2e739bf00b2b3550cee579882fd1],
PUP.Optional.CrossBrowse, C:\Users\martas\AppData\Local\Temp\81426634592\1AB64RN4.exe, , [1364faa71e6df6408d61032718e9f40c],
PUP.Optional.BundleInstaller, C:\Users\martas\Downloads\FUJIFILM FINEPIX F660EXR user guide provided through pdfretriever.com.exe, , [5a1dd9c80f7c1c1af942a9815da420e0],
PUP.Optional.GlobalUpdate, C:\Users\martas\AppData\Local\Temp\comh.182922\GoogleUpdateHelper.msi, , [27505a47d9b245f1f5637908b2509b65],
PUP.Optional.GlobalUpdate, C:\Users\martas\AppData\Local\Temp\comh.17420\GoogleUpdateHelper.msi, , [e097bde40e7d43f389cf4b36837f0ef2],
PUP.Optional.GlobalUpdate, C:\Users\martas\AppData\Local\Temp\comh.162697\GoogleUpdateHelper.msi, , [4136d9c87615d363aeaaf0914ab835cb],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)

[altrok]

Krasny den Vam preju



Vsechny polozky jsou malware (nebo alespon PUPs), takze je vsechny odstrante. Tento druh malwaru se casto hodne rozleza, takze se na to mrkneme dukladneji.


V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

• ukoncete vsechny programy
• kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
• kliknete na Scan, pote na Cleaning
• po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner[Cx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

[strojmir]

Děkuji vřele, tady je ten log.
# AdwCleaner v5.023 - Logfile created 05/12/2015 at 14:14:22
# Updated 30/11/2015 by Xplode
# Database : 2015-12-03.1 [Server]
# Operating system : Windows 8.1 Pro (x86)
# Username : martas - MARTASOSTROJ
# Running from : C:\Users\martas\Desktop\adwcleaner_5.023.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\myfree codec
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec

***** [ Files ] *****

[-] File Deleted : C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[-] File Deleted : C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
[-] File Deleted : C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage
[-] File Deleted : C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{444785F1-DE89-4295-863A-D46C3A781394}
[-] Key Deleted : HKCU\Software\Myfree Codec
[-] Key Deleted : HKLM\SOFTWARE\Myfree Codec
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[-] Key Deleted : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Installer
[-] Key Deleted : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\_CrossriderRegNamePlaceHolder_

***** [ Web browsers ] *****

[-] [C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://istart.webssearches.com/?type=hp&ts=1420375680&from=exp&uid=ST3808110AS_4LR0EYJPXXXX4LR0EYJP

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [2726 bytes] ##########

[altrok]

Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101


U PC budu az vecer.

[strojmir]

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-12-2015
Ran by martas (administrator) on MARTASOSTROJ (05-12-2015 14:56:16)
Running from C:\Users\martas\Desktop
Loaded Profiles: martas (Available Profiles: martas)
Platform: Microsoft Windows 8.1 Pro (X86) Language: Angličtina (Spojené státy)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cnext.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9600.16422_x86__8wekyb3d8bbwe\glcnd.exe
(Opera Software) C:\Program Files\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files\Opera\33.0.1990.115\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files\Opera\33.0.1990.115\opera.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [6743920 2014-12-14] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM\...\Run: [seznam-listicka-distribuce] => C:\Program Files\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6133520 2015-11-06] (AVAST Software)
HKLM\...\Run: [Raptr] => C:\Program Files\Raptr\raptrstub.exe [56080 2015-12-02] (Raptr, Inc)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616 2015-07-27] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\cnext.exe [4294856 2015-11-18] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\...\Run: [AdobeBridge] => [X]
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-10-16] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6917C112-9AD9-49DC-AEBE-430308E5579E}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-09-09] (AVAST Software)
IE Session Restore: HKU\S-1-5-21-2878440334-3389864573-2966859060-1001 -> is enabled.

FireFox:
========
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-08-08] (Intel Corporation)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-08-08] (Intel Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin HKU\S-1-5-21-2878440334-3389864573-2966859060-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\martas\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-30] (Unity Technologies ApS)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: No Name - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-11-30]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2015-11-30]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-04]
CHR Extension: (Dokumenty Google) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Disk Google) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock Plus) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-11-24]
CHR Extension: (Vyhledávání Google) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Tabulky Google) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-04]
CHR Extension: (Dokumenty Google offline) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18]
CHR Extension: (Avast Online Security) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-04]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-03]
CHR Extension: (Gmail) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-30]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-16] (AVAST Software)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [586240 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [637912 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-08] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.)
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [279784 2014-10-25] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22224 2014-10-25] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [15528 2012-09-23] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24016 2015-11-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [81168 2015-11-30] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-11-30] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49776 2015-11-30] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [794952 2015-11-30] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [435464 2015-11-30] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [117200 2015-11-30] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209432 2015-11-30] (AVAST Software)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB3.sys [82944 2015-09-18] (Advanced Micro Devices)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2015-12-05] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-10-05] (Malwarebytes Corporation)
R3 MEI; C:\Windows\system32\DRIVERS\TeeDriver.sys [84952 2013-08-08] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [30224 2014-10-25] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [219992 2014-10-25] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [92504 2014-10-25] (Microsoft Corporation)
S3 WUDFSensorLP; C:\Windows\system32\DRIVERS\WUDFRd.sys [188416 2014-10-25] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [188416 2014-10-25] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-05 14:49 - 2015-12-05 14:49 - 00027219 _____ C:\Users\martas\Desktop\Addition.txt
2015-12-05 14:48 - 2015-12-05 14:48 - 00015327 _____ C:\Users\martas\Desktop\LM.bat
2015-12-05 14:47 - 2015-12-05 14:47 - 01719808 _____ (Farbar) C:\Users\martas\Desktop\FRST.exe
2015-12-05 14:47 - 2015-12-05 14:47 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Desktop\FRSTLauncher (4).exe
2015-12-05 14:04 - 2015-12-05 14:04 - 01736704 _____ C:\Users\martas\Desktop\adwcleaner_5.023.exe
2015-12-05 13:57 - 2015-12-05 13:57 - 00008122 _____ C:\MBAM log2.txt
2015-12-05 13:54 - 2015-12-05 14:56 - 00012140 _____ C:\Users\martas\Desktop\FRST.txt
2015-12-05 13:51 - 2015-12-05 14:56 - 00000000 ____D C:\FRST
2015-12-05 13:49 - 2015-12-05 13:49 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher (3).exe
2015-12-05 13:49 - 2015-12-05 13:49 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher (2).exe
2015-12-05 13:47 - 2015-12-05 13:47 - 00086876 _____ C:\Users\martas\Downloads\3BF0.tmp
2015-12-05 13:46 - 2015-12-05 13:47 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher (1).exe
2015-12-05 13:46 - 2015-12-05 13:46 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher.exe
2015-12-05 13:11 - 2015-12-05 13:11 - 00008121 _____ C:\MBAM log.txt
2015-12-05 12:58 - 2015-12-05 12:58 - 00002225 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-05 12:58 - 2015-12-05 12:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-05 12:56 - 2015-12-05 12:56 - 00927824 _____ (Google Inc.) C:\Users\martas\Downloads\ChromeSetup.exe
2015-12-05 12:56 - 2015-12-05 12:56 - 00927824 _____ (Google Inc.) C:\Users\martas\Downloads\ChromeSetup (1).exe
2015-12-05 12:38 - 2015-12-05 14:15 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-12-05 12:37 - 2015-12-05 12:37 - 00001076 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-12-05 12:37 - 2015-12-05 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-12-05 12:37 - 2015-12-05 12:37 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-05 12:37 - 2015-12-05 12:37 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2015-12-05 12:37 - 2015-10-05 09:50 - 00094936 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-12-05 12:37 - 2015-10-05 09:50 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-12-05 12:37 - 2015-10-05 09:50 - 00023256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-12-05 12:36 - 2015-12-05 12:36 - 22908888 _____ (Malwarebytes ) C:\Users\martas\Downloads\mbam-setup-2.2.0.1024.exe
2015-12-03 19:51 - 2015-12-03 19:55 - 77735536 _____ C:\Users\martas\Downloads\Haj---Skolak-Kaja-Marik-CETBA-PRO-DETI-MLUVENE-SLOVO-pahaajika.rar
2015-12-03 14:44 - 2015-12-03 14:44 - 00000000 ____D C:\Program Files\Common Files\AV
2015-12-02 22:43 - 2015-12-02 22:43 - 00000000 ____D C:\Users\martas\AppData\Local\AMD
2015-12-02 22:43 - 2015-12-02 22:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2015-12-02 22:28 - 2015-12-02 22:28 - 04947168 _____ (Advanced Micro Devices, Inc.) C:\Users\martas\Downloads\autodetectutility.exe
2015-12-02 19:29 - 2015-12-02 19:43 - 236261066 _____ C:\Users\martas\Downloads\Dahl---Karlik-a-tovarna-na-cokoladu-CETBA-PRO-DETI-MLUVENE-SLOVO-pahaajika.rar
2015-11-30 22:31 - 2015-11-30 22:31 - 00001041 _____ C:\Users\martas\Desktop\Format Factory.lnk
2015-11-30 22:31 - 2015-11-30 22:31 - 00000000 ____D C:\Users\martas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2015-11-30 22:31 - 2015-11-30 22:31 - 00000000 ____D C:\Program Files\FormatFactory
2015-11-30 22:30 - 2015-11-30 22:30 - 54458464 _____ (Free Time) C:\Users\martas\Downloads\FFSetup3.7.0.0.exe
2015-11-30 22:25 - 2015-11-30 22:25 - 00000000 ____D C:\Users\martas\Documents\SelfMV
2015-11-30 22:09 - 2015-05-21 07:02 - 00184192 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2015-11-30 22:09 - 2015-05-21 07:02 - 00089984 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2015-11-30 22:07 - 2015-11-30 22:07 - 00001968 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2015-11-30 22:07 - 2015-11-30 22:07 - 00001958 _____ C:\Users\Public\Desktop\Samsung Kies.lnk
2015-11-30 22:07 - 2015-11-30 22:07 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2015-11-30 22:07 - 2015-11-30 22:07 - 00000000 ____D C:\Users\martas\Documents\samsung
2015-11-30 22:07 - 2015-11-30 22:07 - 00000000 ____D C:\Users\martas\AppData\Roaming\Samsung
2015-11-30 22:07 - 2015-11-30 22:07 - 00000000 ____D C:\Users\martas\AppData\Local\Samsung
2015-11-30 22:06 - 2015-11-30 22:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2015-11-30 22:06 - 2013-12-30 10:53 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\system32\Redemption.dll
2015-11-30 22:06 - 2013-12-30 10:53 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\system32\secman.dll
2015-11-30 22:06 - 2013-12-30 10:52 - 00821824 _____ (Devguru Co., Ltd.) C:\Windows\system32\dgderapi.dll
2015-11-30 22:05 - 2015-11-30 22:07 - 00000000 ____D C:\Program Files\Samsung
2015-11-30 22:05 - 2015-11-30 22:06 - 00000000 ____D C:\ProgramData\Samsung
2015-11-30 22:04 - 2015-11-30 22:04 - 78749536 _____ (Samsung Electronics Co., Ltd.) C:\Users\martas\Downloads\KiesSetup.exe
2015-11-30 22:04 - 2015-11-30 22:04 - 00000000 ____D C:\Users\martas\AppData\Local\Downloaded Installations
2015-11-30 21:59 - 2015-11-30 21:58 - 00322760 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-11-30 21:59 - 2015-11-06 16:56 - 00794952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswC83C.tmp
2015-11-30 21:59 - 2015-11-06 16:56 - 00435464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswC851.tmp
2015-11-30 21:59 - 2015-10-16 07:42 - 00208664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswC852.tmp
2015-11-30 21:59 - 2015-10-16 07:42 - 00115640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswC853.tmp
2015-11-30 21:59 - 2015-10-16 07:42 - 00081728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswC83D.tmp
2015-11-30 21:59 - 2015-10-16 07:42 - 00076000 _____ (AVAST Software) C:\Windows\system32\Drivers\aswC84F.tmp
2015-11-30 21:59 - 2015-10-16 07:42 - 00049776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswC850.tmp
2015-11-30 21:59 - 2015-10-16 07:42 - 00024016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswC83E.tmp
2015-11-30 21:58 - 2015-11-30 21:58 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-11-26 09:22 - 2015-11-26 09:22 - 05577425 _____ C:\Users\martas\Downloads\prilohy_1950.zip
2015-11-26 09:20 - 2015-11-26 09:20 - 08182814 _____ C:\Users\martas\Downloads\message_1950.eml
2015-11-26 01:48 - 2015-11-26 01:48 - 00188307 _____ C:\Users\martas\Downloads\2012.pdf
2015-11-18 09:20 - 2015-11-18 09:20 - 00378144 _____ C:\Windows\system32\amdmiracast.dll
2015-11-18 09:20 - 2015-11-18 09:20 - 00128384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp32.dll
2015-11-18 09:20 - 2015-11-18 09:20 - 00110344 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave32.dll
2015-11-18 09:20 - 2015-11-18 09:20 - 00102616 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9pag.dll
2015-11-18 09:20 - 2015-11-18 09:20 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc32.dll
2015-11-18 09:20 - 2015-11-18 09:20 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom32.dll
2015-11-18 09:19 - 2015-11-18 09:19 - 09070320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumdag.dll
2015-11-18 09:17 - 2015-11-18 09:17 - 00267464 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2015-11-18 09:11 - 2015-11-18 09:11 - 21742080 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2015-11-18 09:08 - 2015-11-18 09:08 - 00203776 _____ C:\Windows\system32\clinfo.exe
2015-11-18 09:02 - 2015-11-18 09:02 - 41510912 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl.dll
2015-11-18 08:57 - 2015-11-18 08:57 - 00059392 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-11-18 08:49 - 2015-11-18 08:49 - 22348288 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl.dll
2015-11-18 06:48 - 2015-11-18 06:48 - 00562688 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr32.dll
2015-11-18 06:46 - 2015-11-18 06:46 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle32.dll
2015-11-18 06:14 - 2015-11-18 06:14 - 05223936 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle32.dll
2015-11-18 05:48 - 2015-11-18 05:48 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl32.dll
2015-11-18 05:08 - 2015-11-18 05:08 - 00683960 _____ C:\Windows\system32\atiapfxx.blb
2015-11-18 05:06 - 2015-11-18 05:06 - 00123392 _____ C:\Windows\system32\amdhdl32.dll
2015-11-18 04:43 - 2015-11-18 04:43 - 00367104 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2015-11-18 04:43 - 2015-11-18 04:43 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt.dll
2015-11-18 04:43 - 2015-11-18 04:43 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl.dll
2015-11-18 04:40 - 2015-11-18 04:40 - 25840128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atioglxx.dll
2015-11-18 04:40 - 2015-11-18 04:40 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd.dll
2015-11-18 04:40 - 2015-11-18 04:40 - 00670720 _____ (AMD) C:\Windows\system32\coinst_15.30.dll
2015-11-18 04:32 - 2015-11-18 04:32 - 00039424 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl.dll
2015-11-18 04:26 - 2015-11-18 04:26 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2015-11-18 04:26 - 2015-11-18 04:26 - 00198144 _____ C:\Windows\system32\dgtrayicon.exe
2015-11-18 04:25 - 2015-11-18 04:25 - 00449024 _____ (AMD) C:\Windows\system32\atieclxx.exe
2015-11-18 04:25 - 2015-11-18 04:25 - 00189952 _____ C:\Windows\system32\amdgfxinfo32.dll
2015-11-18 04:25 - 2015-11-18 04:25 - 00145408 _____ C:\Windows\system32\atieah32.exe
2015-11-18 04:25 - 2015-11-18 04:25 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2015-11-18 04:24 - 2015-11-18 04:24 - 00213504 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2015-11-18 04:22 - 2015-11-18 04:22 - 00164352 _____ (AMD) C:\Windows\system32\atitmmxx.dll
2015-11-18 04:10 - 2015-11-18 04:10 - 03471376 _____ C:\Windows\system32\atiumdva.cap
2015-11-18 03:58 - 2015-11-18 03:58 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu32.dll
2015-11-18 03:54 - 2015-11-18 03:54 - 00941568 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2015-11-18 03:54 - 2015-11-18 03:54 - 00070144 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2015-11-18 03:53 - 2015-11-18 03:53 - 00142336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atigktxx.dll
2015-11-18 03:52 - 2015-11-18 03:52 - 00538624 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2015-11-18 03:45 - 2015-11-18 03:45 - 00174592 _____ C:\Windows\system32\hsa-thunk.dll
2015-11-18 03:43 - 2015-11-18 03:43 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2015-11-15 18:46 - 2015-11-15 18:48 - 33103872 _____ C:\Users\martas\Downloads\Clovicek-05---Jak-si-nasbiral-boruvky.avi
2015-11-15 18:24 - 2015-11-15 18:26 - 32929792 _____ C:\Users\martas\Downloads\Clovicek-01---Jak-vykresal-prvni-jiskricku.avi
2015-11-15 17:34 - 2015-11-15 17:35 - 33103872 _____ C:\Users\martas\Downloads\Clovicek-02---Jak-mel-pro-strach-udelano.avi
2015-11-15 14:58 - 2015-11-15 14:58 - 00235490 _____ C:\Users\martas\Downloads\bonusove_akce-partneru_iBODU.pdf
2015-11-13 13:11 - 2015-11-13 13:11 - 02359350 _____ C:\Users\martas\Downloads\Zad.brzdy.bmp
2015-11-13 11:52 - 2015-11-13 11:53 - 306107698 _____ C:\Users\martas\Downloads\2004_05_13_FC_Burival-Fyzika_iontovych_poli-lq.avi
2015-11-13 09:25 - 2015-11-13 09:25 - 01829410 _____ C:\Users\martas\Desktop\2179855.PDF
2015-11-08 21:40 - 2015-11-08 21:40 - 00141123 _____ C:\Users\martas\Downloads\ekomat_technicky_list_pasy_ekoflex_s_petz_r2015-02-16.pdf
2015-11-07 16:11 - 2015-11-07 17:02 - 903036812 _____ C:\Users\martas\Downloads\Ptaci-ulet-cz-dabing.csfd-59-animovany.avi

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-05 14:53 - 2015-02-04 17:13 - 00000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-12-05 14:39 - 2014-12-29 21:58 - 00000964 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-05 14:15 - 2014-12-29 21:58 - 00000960 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-05 14:15 - 2013-08-22 08:23 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-05 14:14 - 2015-03-23 21:39 - 00000000 ____D C:\AdwCleaner
2015-12-05 14:01 - 2013-08-22 09:17 - 00000000 ____D C:\Windows\Camera
2015-12-05 13:54 - 2013-08-22 07:21 - 00000000 ____D C:\Windows
2015-12-05 13:15 - 2015-10-25 09:18 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-12-05 02:49 - 2013-08-22 09:05 - 00000000 ____D C:\Windows\CbsTemp
2015-12-05 02:48 - 2015-04-19 13:15 - 00000000 ____D C:\Users\martas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-12-05 02:48 - 2015-04-19 13:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-12-05 02:48 - 2015-04-19 13:15 - 00000000 ____D C:\Program Files\WinRAR
2015-12-05 02:48 - 2015-01-10 18:32 - 00001044 _____ C:\Users\Public\Desktop\VLC media player.lnk
2015-12-05 02:47 - 2015-01-02 15:06 - 00000000 ____D C:\Program Files\Opera
2015-12-05 02:01 - 2014-12-29 23:35 - 00000000 ____D C:\Users\martas\AppData\Local\Adobe
2015-12-04 22:24 - 2014-12-30 02:03 - 00000000 ____D C:\Users\martas\AppData\Roaming\Audacity
2015-12-04 09:59 - 2013-08-22 07:21 - 00000000 ____D C:\Windows\inf
2015-12-03 15:53 - 2013-08-22 07:13 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-12-02 22:45 - 2015-08-26 10:07 - 00000000 ____D C:\Users\martas\AppData\Roaming\Raptr
2015-12-02 22:43 - 2014-12-13 22:34 - 00000000 ____D C:\Program Files\Raptr
2015-12-02 22:42 - 2014-12-13 22:33 - 00000000 ____D C:\Program Files\AMD
2015-12-02 22:33 - 2014-12-13 22:33 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-02 22:31 - 2014-12-13 22:32 - 00000000 ____D C:\AMD
2015-12-02 19:48 - 2014-12-13 23:36 - 00738666 _____ C:\Windows\system32\perfh005.dat
2015-12-02 19:48 - 2014-12-13 23:36 - 00151408 _____ C:\Windows\system32\perfc005.dat
2015-12-02 19:48 - 2014-03-18 08:59 - 01745984 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-30 22:42 - 2015-03-08 23:06 - 00847360 ___SH C:\Users\martas\Downloads\Thumbs.db
2015-11-30 22:06 - 2014-12-14 00:48 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2015-11-30 21:59 - 2015-03-22 17:54 - 00435464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-11-30 21:59 - 2015-03-22 17:54 - 00209432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-11-30 21:59 - 2015-03-22 17:54 - 00117200 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-11-30 21:58 - 2015-03-22 17:54 - 00081728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-11-30 21:58 - 2015-03-22 17:54 - 00081168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-11-30 21:58 - 2015-03-22 17:54 - 00049776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-11-30 21:58 - 2015-03-22 17:54 - 00024016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-11-30 21:56 - 2015-03-22 17:54 - 00794952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-11-28 08:18 - 2015-03-08 12:51 - 00101376 ___SH C:\Users\martas\Desktop\Thumbs.db
2015-11-21 19:16 - 2015-01-10 18:32 - 00000000 ____D C:\Users\martas\AppData\Roaming\vlc
2015-11-18 09:20 - 2014-11-21 03:44 - 10907328 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx32.dll
2015-11-18 09:20 - 2014-11-21 03:44 - 01229984 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx32.dll
2015-11-18 09:20 - 2014-11-21 03:44 - 00133016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxpag.dll
2015-11-18 09:19 - 2014-11-21 03:43 - 08089248 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumdva.dll
2015-11-11 18:40 - 2015-11-03 11:56 - 00000000 ____D C:\Users\martas\Desktop\písničky
2015-11-09 16:59 - 2015-04-19 13:20 - 00000000 ____D C:\Users\martas\AppData\Roaming\SpinTires

==================== Files in the root of some directories =======

2014-12-14 00:52 - 2014-12-14 00:52 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\martas\AppData\Local\Temp\AutoRun.exe
C:\Users\martas\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\martas\AppData\Local\Temp\EAInstall.dll
C:\Users\martas\AppData\Local\Temp\FFSetup3.8.0.0.exe
C:\Users\martas\AppData\Local\Temp\Quarantine.exe
C:\Users\martas\AppData\Local\Temp\radeon-crimson-15.11-minimalsetup.exe
C:\Users\martas\AppData\Local\Temp\raptrpatch.exe
C:\Users\martas\AppData\Local\Temp\raptr_stub.exe
C:\Users\martas\AppData\Local\Temp\sqlite3.dll
C:\Users\martas\AppData\Local\Temp\tmp5F3A.exe
C:\Users\martas\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-12-02 19:13

==================== End of FRST.txt ============================

[altrok]

• Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
• ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
• znovu spustte FRST a kliknete na Fix
• po restartu bude na plose ulozen fixlog, jehoz obsah mi vlozte do pristi odpovedi

  Kód: Vybrat vše

  Start
  CloseProcesses:
  HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
  HKLM\...\Run: [seznam-listicka-distribuce] => C:\Program Files\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
  HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\...\Run: [AdobeBridge] => [X]
  SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  2015-12-05 14:04 - 2015-12-05 14:04 - 01736704 _____ C:\Users\martas\Desktop\adwcleaner_5.023.exe
  2015-12-05 13:57 - 2015-12-05 13:57 - 00008122 _____ C:\MBAM log2.txt
  2015-12-05 13:54 - 2015-12-05 14:56 - 00012140 _____ C:\Users\martas\Desktop\FRST.txt
  2015-12-05 14:49 - 2015-12-05 14:49 - 00027219 _____ C:\Users\martas\Desktop\Addition.txt
  2015-12-05 14:48 - 2015-12-05 14:48 - 00015327 _____ C:\Users\martas\Desktop\LM.bat
  2015-12-05 13:49 - 2015-12-05 13:49 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher (3).exe
  2015-12-05 13:49 - 2015-12-05 13:49 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher (2).exe
  2015-12-05 13:47 - 2015-12-05 13:47 - 00086876 _____ C:\Users\martas\Downloads\3BF0.tmp
  2015-12-05 13:46 - 2015-12-05 13:47 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher (1).exe
  2015-12-05 13:11 - 2015-12-05 13:11 - 00008121 _____ C:\MBAM log.txt
  2015-12-05 12:56 - 2015-12-05 12:56 - 00927824 _____ (Google Inc.) C:\Users\martas\Downloads\ChromeSetup (1).exe
  2015-12-05 14:14 - 2015-03-23 21:39 - 00000000 ____D C:\AdwCleaner
  Task: {5CCBEDEC-7C42-40DF-87A1-2F35819964B6} - System32\Tasks\AutoPico Daily Restart => C:\!!\wpi\install\Activators\KMS\AutoPico.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
  FirewallRules: [{632E6896-EC3A-43E2-9708-968A7CE08658}] => (Allow) C:\!!\wpi\install\Activators\KMS\AutoPico.exe
  FirewallRules: [{2FF32CB3-B53F-4B5A-83F8-DCD31CE73AD6}] => (Allow) C:\!!\wpi\install\Activators\KMS\AutoPico.exe
  Hosts:
  EmptyTemp:
  End

[strojmir]

Fix result of Farbar Recovery Scan Tool (x86) Version:05-12-2015
Ran by martas (2015-12-06 08:02:39) Run:2
Running from C:\Users\martas\Desktop
Loaded Profiles: martas & (Available Profiles: martas)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CloseProcesses:
HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM\...\Run: [seznam-listicka-distribuce] => C:\Program Files\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\...\Run: [AdobeBridge] => [X]
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
2015-12-05 14:04 - 2015-12-05 14:04 - 01736704 _____ C:\Users\martas\Desktop\adwcleaner_5.023.exe
2015-12-05 13:57 - 2015-12-05 13:57 - 00008122 _____ C:\MBAM log2.txt
2015-12-05 13:54 - 2015-12-05 14:56 - 00012140 _____ C:\Users\martas\Desktop\FRST.txt
2015-12-05 14:49 - 2015-12-05 14:49 - 00027219 _____ C:\Users\martas\Desktop\Addition.txt
2015-12-05 14:48 - 2015-12-05 14:48 - 00015327 _____ C:\Users\martas\Desktop\LM.bat
2015-12-05 13:49 - 2015-12-05 13:49 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher (3).exe
2015-12-05 13:49 - 2015-12-05 13:49 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher (2).exe
2015-12-05 13:47 - 2015-12-05 13:47 - 00086876 _____ C:\Users\martas\Downloads\3BF0.tmp
2015-12-05 13:46 - 2015-12-05 13:47 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher (1).exe
2015-12-05 13:11 - 2015-12-05 13:11 - 00008121 _____ C:\MBAM log.txt
2015-12-05 12:56 - 2015-12-05 12:56 - 00927824 _____ (Google Inc.) C:\Users\martas\Downloads\ChromeSetup (1).exe
2015-12-05 14:14 - 2015-03-23 21:39 - 00000000 ____D C:\AdwCleaner
Task: {5CCBEDEC-7C42-40DF-87A1-2F35819964B6} - System32\Tasks\AutoPico Daily Restart => C:\!!\wpi\install\Activators\KMS\AutoPico.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
FirewallRules: [{632E6896-EC3A-43E2-9708-968A7CE08658}] => (Allow) C:\!!\wpi\install\Activators\KMS\AutoPico.exe
FirewallRules: [{2FF32CB3-B53F-4B5A-83F8-DCD31CE73AD6}] => (Allow) C:\!!\wpi\install\Activators\KMS\AutoPico.exe
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => value not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce => value not found.
HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
"C:\Users\martas\Desktop\adwcleaner_5.023.exe" => not found.
"C:\MBAM log2.txt" => not found.
"C:\Users\martas\Desktop\FRST.txt" => not found.
"C:\Users\martas\Desktop\Addition.txt" => not found.
"C:\Users\martas\Desktop\LM.bat" => not found.
"C:\Users\martas\Downloads\FRSTLauncher (3).exe" => not found.
"C:\Users\martas\Downloads\FRSTLauncher (2).exe" => not found.
"C:\Users\martas\Downloads\3BF0.tmp" => not found.
"C:\Users\martas\Downloads\FRSTLauncher (1).exe" => not found.
"C:\MBAM log.txt" => not found.
"C:\Users\martas\Downloads\ChromeSetup (1).exe" => not found.
"C:\AdwCleaner" => not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5CCBEDEC-7C42-40DF-87A1-2F35819964B6}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5CCBEDEC-7C42-40DF-87A1-2F35819964B6}" => key removed successfully.
C:\Windows\System32\Tasks\AutoPico Daily Restart => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoPico Daily Restart" => key removed successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{632E6896-EC3A-43E2-9708-968A7CE08658} => value removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2FF32CB3-B53F-4B5A-83F8-DCD31CE73AD6} => value removed successfully.
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
EmptyTemp: => 1.8 GB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 08:03:37 ====

[altrok]

Takze jeste uklidime.

• Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
• Oznacte jen moznost "Remove disinfection tools"
• kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

[strojmir]

Vřelé díky a pěkné s předstihem pěkné svátky přeji, klid a pohodu hlavně.

[altrok]

Pred zapoctovym tydnem je klidu a pohody nedostatek, ale na Vanoce si to vynahradime. Pohodove svatky i Vam.

Nemate zac, rad jsem pomohl


Mejte se krasne a treba zase nekdy