Firefox sám otvára stránky "only2date.com"

Zpráva

Jomko · #1 Příspěvek od **Jomko** » 14 bře 2017 13:20

Prosím o pomoc
Firefox pravidelne asi každých 10min otvorí novú sexi stránku only2date.com z nejakým quízom či čo to je, neviem na nič som radšej neklikal.
použil som Malwarebytes, adwcleaner, ccleaner. Každý program niečo našiel,zmazal ale okná sa otvárajú stále.

Prosím o radu

Tu je RSIT log

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jomko at 2017-03-14 13:05:01
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 3 GB (1%) free of 237 GB
Total RAM: 8104 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:05:04, on 14. 3. 2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files\trend micro\Jomko.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll
O4 - HKLM\..\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
O4 - HKLM\..\Run: [ToshibaServiceStation] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: CAM Service (CAMService) - Intel® Corporation - C:\Program Files\Intel\CAM\bin\CAMService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: GFNEX Service (GFNEXSrv) - Unknown owner - C:\Windows\System32\GFNEXSrv.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Corel License Validation Service V2 x64, Powered by arvato (PSI_SVC_2_x64) - arvato digital services llc - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10129 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: TMachInfo - TOSHIBA Corporation - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\Windows\system32\TODDSrv.exe (file missing)
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: wampapache64 - Apache Software Foundation - c:\wamp64\bin\apache\apache2.4.18\bin\httpd.exe
O23 - Service: wampmysqld64 - Unknown owner - c:\wamp64\bin\mysql\mysql5.7.11\bin\mysqld.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 10586 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
winlogon.exe
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\WLANExt.exe 24807360
\??\C:\Windows\system32\conhost.exe
C:\Windows\System32\GFNEXSrv.exe
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"taskhost.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\TODDSrv.exe
"C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe"
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 60ee269b-bdb6-476c-8622-0c71ea504408 1
\??\C:\Windows\system32\conhost.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\TOSHIBA\Power Saver\TBatmgrTrayicon.exe"
"C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe"
"C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files\TOSHIBA\FlashCards\Hotkey\TcrdKBB.exe"
"C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\totalcmd\TOTALCMD.EXE"
"C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe"
"C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe"
"C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"

"C:\Users\Jomko\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
taskhost.exe $(Arg0)

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Jomko\AppData\Roaming\Mozilla\Firefox\Profiles\qe0gt7rq.default-1489488823851

"sp@avast.com"=C:\Program Files\AVAST Software\Avast\SafePrice\FF
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 24.0.0.221 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_221.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.121.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.121.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 24.0.0.221 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_221.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-02-01 790552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-01-19 473152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-02-01 664848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-19 186944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TosVolRegulator"=C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [2009-11-11 24376]
"BatteryManager"=C:\Program Files\TOSHIBA\Power Saver\TBatmgrTrayIcon.EXE [2013-02-20 293760]
"TCrdMain"=C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2013-05-20 996192]
"TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2012-03-02 595840]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2013-05-11 165872]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2013-05-11 407536]
"Persistence"=C:\Windows\system32\igfxpers.exe [2013-05-11 444400]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-01-16 2585744]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-01-16 1514528]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-05-02 3049712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-04-15 8698584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2016-04-15 8698584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Pro Agent]
C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [2014-02-24 3129560]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotkeyP]
C:\Users\Jomko\AppData\Local\Temp\Temp1_hotkeyp.zip\HotkeyP.exe 0 []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2013-01-16 374784]
"ToshibaServiceStation"=C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [2011-07-11 1298816]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2013-04-11 292848]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-12-12 587288]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2017-02-01 9080768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2013-05-08 440320]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-03-14 11:35:05 ----D---- C:\AdwCleaner
2017-03-14 11:27:54 ----D---- C:\rsit
2017-03-14 11:27:54 ----D---- C:\Program Files\trend micro
2017-03-13 22:22:39 ----D---- C:\Program Files (x86)\Mozilla Firefox
2017-03-12 23:44:16 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2017-03-12 23:44:00 ----D---- C:\ProgramData\Malwarebytes
2017-03-12 23:44:00 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2017-03-12 23:44:00 ----A---- C:\Windows\system32\drivers\mwac.sys
2017-03-12 23:44:00 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2017-03-12 23:44:00 ----A---- C:\Windows\system32\drivers\mbam.sys
2017-03-12 23:39:24 ----D---- C:\_OTM
2017-03-03 11:37:22 ----D---- C:\Program Files (x86)\MSECache
2017-03-01 11:54:06 ----D---- C:\Users\Jomko\AppData\Roaming\Thunderbird
2017-03-01 11:54:01 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-03-01 11:53:59 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2017-02-21 21:56:04 ----D---- C:\Users\Jomko\AppData\Roaming\LibreOffice
2017-02-21 21:53:06 ----D---- C:\Program Files\LibreOffice 5

======List of files/folders modified in the last 1 month======

2017-03-14 12:50:50 ----D---- C:\Windows\Temp
2017-03-14 12:41:39 ----D---- C:\Windows\system32\config
2017-03-14 12:31:07 ----SHD---- C:\System Volume Information
2017-03-14 11:51:30 ----D---- C:\Windows\System32
2017-03-14 11:51:30 ----D---- C:\Windows\inf
2017-03-14 11:51:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-03-14 11:50:30 ----D---- C:\Windows
2017-03-14 11:43:11 ----D---- C:\Windows\SysWOW64
2017-03-14 11:42:16 ----RD---- C:\Program Files (x86)
2017-03-14 11:42:15 ----HD---- C:\ProgramData
2017-03-14 11:42:15 ----D---- C:\Program Files
2017-03-13 22:52:30 ----D---- C:\Windows\system32\drivers
2017-03-13 00:28:39 ----D---- C:\Users\Jomko\AppData\Roaming\MPC-HC
2017-03-12 23:51:55 ----SHD---- C:\Windows\Installer
2017-03-12 23:51:01 ----D---- C:\Windows\system32\Tasks
2017-03-12 12:37:24 ----HD---- C:\Windows\system32\GroupPolicy
2017-03-12 12:37:21 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2017-03-12 01:47:50 ----D---- C:\Users\Jomko\AppData\Roaming\FileZilla
2017-03-10 16:09:55 ----D---- C:\www.foto-tapety.sk
2017-03-10 14:02:10 ----D---- C:\Windows\system32\catroot2
2017-03-10 00:32:11 ----D---- C:\Users\Jomko\AppData\Roaming\XnView
2017-03-07 21:12:44 ----D---- C:\OBS video
2017-03-05 23:04:39 ----D---- C:\Users\Jomko\AppData\Roaming\Audacity
2017-03-05 21:12:41 ----D---- C:\Users\Jomko\AppData\Roaming\uTorrent
2017-03-03 10:01:30 ----D---- C:\Program Files\FileZilla FTP Client
2017-02-25 02:11:35 ----AD---- C:\ProgramData\TEMP
2017-02-24 15:13:44 ----D---- C:\Users\Jomko\AppData\Roaming\tox
2017-02-21 21:53:26 ----RSD---- C:\Windows\assembly
2017-02-21 21:53:15 ----RSD---- C:\Windows\Fonts
2017-02-18 22:38:46 ----D---- C:\consalnet fototapety VŠETKO FOTOTAPETY

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2017-02-01 74544]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2017-02-01 293352]
R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2015-11-13 1467912]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2015-11-13 31728]
R0 iusb3hcs;Ovládač prepínača hostiteľského radiča Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2013-04-11 20464]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2015-07-23 31376]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver; C:\Windows\system32\DRIVERS\Thpevm.SYS [2009-06-29 14784]
R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS [2009-07-14 26840]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2017-02-01 37144]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2017-02-01 103064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2017-02-01 969184]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2017-02-01 513632]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2016-04-19 283064]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2017-02-01 108816]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2017-02-01 163416]
R2 config;config; C:\Windows\system32\DRIVERS\ibtfudrv.sys [2015-06-03 184560]
R2 speedfan;speedfan; \??\C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R3 AMPPAL;Intel(r) Centrino(r) Wireless Bluetooth(r) + High Speed Virtual Adapter; C:\Windows\system32\DRIVERS\AMPPAL.sys [2013-07-29 164832]
R3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2012-11-09 104280]
R3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2010-11-20 80384]
R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\Windows\system32\DRIVERS\ICCWDT.sys [2011-06-29 26136]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2013-05-08 4431840]
R3 int0800;Intel 28F320C3 Flash Update Device Driver v6.4; C:\Windows\system32\DRIVERS\flashud.sys [2009-03-06 51712]
R3 IntcDAud;Intel(R) Zvuk pre obrazovky; C:\Windows\system32\DRIVERS\IntcDAud.sys [2016-01-19 480520]
R3 iusb3hub;Ovládač rozbočovača Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2013-04-11 366576]
R3 iusb3xhc;Ovládač hostiteľského radiča Intel(R) USB 3.0 eXtensible; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2013-04-11 785904]
R3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2012-12-19 118504]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2016-03-10 27008]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2017-03-14 192216]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2016-03-10 64896]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2015-10-09 180480]
R3 NETwNs64;___ Intel(R) Wireless Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\Netwsw02.sys [2016-01-28 3422992]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-01-16 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-12-18 47760]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2015-07-02 33960]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10329; C:\Windows\system32\DRIVERS\stwrt64.sys [2013-08-16 551936]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2013-05-02 474864]
R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\Windows\system32\DRIVERS\tdcmdpst.sys [2009-07-30 27784]
R3 tosrfec;Bluetooth ACPI; C:\Windows\system32\DRIVERS\tosrfec.sys [2011-07-13 19904]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AMPPALP;Intel(r) Centrino(r) Wireless Bluetooth(r) + High Speed Protocol; C:\Windows\system32\DRIVERS\amppal.sys [2013-07-29 164832]
S3 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2017-02-01 37656]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2010-11-20 552448]
S3 Cam5607;Lenovo EasyCamera ; C:\Windows\System32\Drivers\BisonC07.sys [2009-08-21 1178352]
S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI; C:\Windows\system32\drivers\IntcHdmi.sys [2000-01-01 145408]
S3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys []
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2014-02-05 772064]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2017-02-01 197128]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-09-12 135984]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2015-03-19 638368]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-01-16 1148560]
R2 GFNEXSrv;GFNEX Service; C:\Windows\System32\GFNEXSrv.exe [2010-09-09 162824]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-02-13 731648]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-03-12 169432]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2016-03-10 1136608]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2016-03-10 1514464]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-01-16 1706128]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-01-16 21833360]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-07-23 937616]
R2 PSI_SVC_2_x64;Corel License Validation Service V2 x64, Powered by arvato; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2013-09-13 337776]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2015-03-19 157088]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10129; C:\Program Files\IDT\WDM\STacSV64.exe [2013-08-16 339456]
R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\Windows\system32\TODDSrv.exe [2010-10-20 138656]
R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe [2012-09-24 589224]
R3 TMachInfo;TMachInfo; C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2015-12-09 55144]
S2 CAMService;CAM Service; C:\Program Files\Intel\CAM\bin\CAMService.exe [2014-09-03 1243344]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-06-19 104120]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-06-19 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-01 154440]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-03-12 366552]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-02-14 270936]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2013-05-11 279024]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-01 154440]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-02-13 820184]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-03-13 146888]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2015-03-19 268192]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 wampapache64;wampapache64; c:\wamp64\bin\apache\apache2.4.18\bin\httpd.exe [2015-12-09 29696]
S3 wampmysqld64;wampmysqld64; c:\wamp64\bin\mysql\mysql5.7.11\bin\mysqld.exe [2016-02-02 39622144]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-06-19 50352]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-06-19 135848]

-----------------EOF-----------------

#2 Příspěvek od **altrok** » 14 bře 2017 17:51

Krasny den Vam preju

V ramci cisteni Vam budou vyprazdneny docasne adresare (vysypani Kose a tempu, vyprazdneni cache prohlizecu apod.).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

ukoncete vsechny programy
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Scan (Skenovani), pote na Clean (Cisteni)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner[Cx].txt), jehoz obsah zkopirujte do pristi odpovedi

Jomko · #3 Příspěvek od **Jomko** » 14 bře 2017 19:26

Adwcleaner som použil ešte pred tým kým som napísal tento príspevok tak neviem dám sem predošlí log?

To to je ten aktuálny

# AdwCleaner v6.044 - *Logfile created 14/03/2017 *at 19:22:22
# *Updated on 28/02/2017 by Malwarebytes
# *Database : 2017-03-14.1 [*Server]
# *Operating System : Windows 7 Professional Service Pack 1 (X64)
# *Username : Jomko - OOO_JOMKO_OOO
# *Running from : C:\Users\Jomko\Downloads\adwcleaner_6.044.exe
# *Mode: Clean
# *Support : https://www.malwarebytes.com/support

***** [ *Services ] *****

***** [ *Folders ] *****

***** [ *Files ] *****

***** [ DLL ] *****

***** [ WMI ] *****

***** [ *Shortcuts ] *****

***** [ *Scheduled Tasks ] *****

***** [ *Registry ] *****

***** [ *Browsers ] *****

*************************

:: *"Tracing" keys deleted
:: *Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [6822 *Bytes] - [14/03/2017 11:43:22]
C:\AdwCleaner\AdwCleaner[C2].txt - [867 *Bytes] - [14/03/2017 19:22:22]
C:\AdwCleaner\AdwCleaner[S0].txt - [6364 *Bytes] - [14/03/2017 11:36:35]
C:\AdwCleaner\AdwCleaner[S1].txt - [1346 *Bytes] - [14/03/2017 11:47:00]
C:\AdwCleaner\AdwCleaner[S2].txt - [1420 *Bytes] - [14/03/2017 12:50:16]
C:\AdwCleaner\AdwCleaner[S3].txt - [1495 *Bytes] - [14/03/2017 19:22:09]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1236 *Bytes] ##########

#4 Příspěvek od **altrok** » 14 bře 2017 19:30

Netreba. Dejte logy FRST.txt a Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101
Pokud budete mit problemy se stazenim FRSTLauncheru, staci kdyz pouzijete samotny FRST.exe/FRST64.exe.

Jomko · #5 Příspěvek od **Jomko** » 14 bře 2017 20:04

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-03-2017
Ran by Jomko (administrator) on OOO_JOMKO_OOO (14-03-2017 20:01:25)
Running from C:\Users\Jomko\Desktop
Loaded Profiles: Jomko (Available Profiles: Jomko)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Windows\System32\GFNEXSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel® Corporation) C:\Program Files\Intel\CAM\bin\CAMService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(TOSHIBA Corporation ) C:\Program Files\TOSHIBA\Power Saver\TBatmgrTrayicon.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
() C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
() C:\Program Files\TOSHIBA\FlashCards\Hotkey\TCrdKBB.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_24_0_0_221.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_24_0_0_221.exe
(forum.viry.cz) C:\Users\Jomko\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [BatteryManager] => C:\Program Files\TOSHIBA\Power Saver\TBatmgrTrayIcon.EXE [293760 2013-02-20] (TOSHIBA Corporation )
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [996192 2013-05-20] (TOSHIBA Corporation)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [595840 2012-03-02] ()
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585744 2015-01-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3049712 2013-05-02] (Synaptics Incorporated)
HKLM-x32\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [374784 2013-01-16] (Alcor Micro Corp.)
HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1298816 2011-07-11] (TOSHIBA Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-11] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2017-02-01] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1719862456-1567695306-1986888435-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8698584 2016-04-15] (Piriform Ltd)
HKU\S-1-5-21-1719862456-1567695306-1986888435-1000\...\MountPoints2: {99ca108a-01cf-11e7-af1f-0c8bfd901919} - F:\Lenovo_Suite.exe
HKU\S-1-5-21-1719862456-1567695306-1986888435-1000\...\MountPoints2: {b1e11f79-064d-11e6-81cd-002269f5b9c1} - H:\setup.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-03-27] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [176904 2015-07-23] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [155280 2015-07-23] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-02-01] (AVAST Software)
GroupPolicy: Restriction <======= ATTENTION
GroupPolicy\User: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{8AB77511-C617-4160-A4ED-6DE44CD13903}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{A795EFD8-1D5D-4511-BBAF-4A34B227FD54}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-1719862456-1567695306-1986888435-1000\Software\Microsoft\Internet Explorer\Main,Start Page =
HKU\S-1-5-21-1719862456-1567695306-1986888435-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
SearchScopes: HKU\S-1-5-21-1719862456-1567695306-1986888435-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-02-01] (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-01-19] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-02-01] (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-19] (Oracle Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Jomko\AppData\Roaming\Mozilla\Firefox\Profiles\qe0gt7rq.default-1489488823851 [2017-03-14]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2017-02-01]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2017-02-01]
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_221.dll [2017-02-14] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_221.dll [2017-02-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-01-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-19] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)

Chrome:
=======
CHR Profile: C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch [2017-03-14] <==== ATTENTION
CHR Extension: (Prezentácie Google) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-07-01]
CHR Extension: (Dokumenty Google) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\aohghmighlieiainnegkcijnfilokake [2016-07-01]
CHR Extension: (Zend Debugger Extension) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\aonajadpeeaijblinaeohfdmbgdpibba [2016-09-19]
CHR Extension: (Disk Google) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-01]
CHR Extension: (YouTube) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-01]
CHR Extension: (Домашняя страница Mail.Ru) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\ccfifbojenkenpkmnbnndeadpfdiffof [2017-03-12]
CHR Extension: (Avast SafePrice) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-02-02]
CHR Extension: (Tabuľky Google) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-07-01]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-07-01]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-22]
CHR Extension: (Визуальные Закладки Mail.Ru) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\oelpkepjlgmehajehfeicfbjdiobdkfj [2017-03-12]
CHR Extension: (Mail.Ru) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\ojlcebdkbpjdpiligkdbbkdkfjmchbfd [2017-03-12]
CHR Extension: (Gmail) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-07-01]
CHR Extension: (Chrome Media Router) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-15]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2017-02-01] (AVAST Software)
R2 CAMService; C:\Program Files\Intel\CAM\bin\CAMService.exe [1243344 2014-09-03] (Intel® Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2015-01-16] (NVIDIA Corporation)
R2 GFNEXSrv; C:\Windows\System32\GFNEXSrv.exe [162824 2010-09-09] ()
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-03-19] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2015-01-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833360 2015-01-16] (NVIDIA Corporation)
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2013-09-13] (arvato digital services llc)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [339456 2013-08-16] (IDT, Inc.) [File not signed]
S3 wampapache64; c:\wamp64\bin\apache\apache2.4.18\bin\httpd.exe [29696 2015-12-09] (Apache Software Foundation) [File not signed]
S3 wampmysqld64; c:\wamp64\bin\mysql\mysql5.7.11\bin\mysqld.exe [39622144 2016-02-02] () [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3820960 2015-03-19] (Intel® Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2017-02-01] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2017-02-01] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2017-02-01] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2017-02-01] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2017-02-01] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2017-02-01] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2017-02-01] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2017-02-01] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2017-02-01] (AVAST Software)
R2 config; C:\Windows\System32\DRIVERS\ibtfudrv.sys [184560 2015-06-03] (Intel Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2016-04-19] (Disc Soft Ltd)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [31728 2015-11-13] (Intel Corporation)
R3 int0800; C:\Windows\System32\DRIVERS\flashud.sys [51712 2009-03-06] (Intel Corporation)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [118504 2012-12-19] (Qualcomm Atheros Co., Ltd.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [180480 2015-10-09] (Intel Corporation)
R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw02.sys [3422992 2016-01-28] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-01-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33960 2015-07-02] (Synaptics Incorporated)
S3 JMCR; system32\DRIVERS\jmcr.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-03-14 19:57 - 2017-03-14 20:01 - 00019079 _____ C:\Users\Jomko\Desktop\FRST.txt
2017-03-14 19:57 - 2017-03-14 20:01 - 00000000 ____D C:\FRST
2017-03-14 19:53 - 2017-03-14 19:56 - 00112640 _____ (forum.viry.cz) C:\Users\Jomko\Desktop\FRSTLauncher.exe
2017-03-14 19:51 - 2017-03-14 19:51 - 02424832 _____ (Farbar) C:\Users\Jomko\Desktop\FRST64.exe
2017-03-14 19:49 - 2017-03-14 19:49 - 02424832 _____ (Farbar) C:\Users\Jomko\Downloads\FRST64.exe
2017-03-14 19:23 - 2017-03-14 19:58 - 00000000 ____D C:\Users\Jomko\AppData\LocalLow\Mozilla
2017-03-14 15:00 - 2017-03-14 19:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-03-14 11:53 - 2017-03-14 11:53 - 00000000 ____D C:\Users\Jomko\Desktop\Staré údaje Firefoxu
2017-03-14 11:35 - 2017-03-14 19:31 - 00000000 ____D C:\AdwCleaner
2017-03-14 11:34 - 2017-03-14 11:35 - 04031440 _____ C:\Users\Jomko\Desktop\adwcleaner_6.044.exe
2017-03-14 11:27 - 2017-03-14 13:05 - 00000000 ____D C:\Program Files\trend micro
2017-03-14 11:27 - 2017-03-14 11:28 - 00000000 ____D C:\rsit
2017-03-14 11:26 - 2017-03-14 11:27 - 01222144 _____ C:\Users\Jomko\Downloads\RSITx64.exe
2017-03-13 11:56 - 2017-03-13 11:56 - 00027666 _____ C:\Users\Jomko\Desktop\Kópia - Zoznam Vad a Nedorobkov GHP izby 2 3 4 etapa (Jano).xlsx
2017-03-12 23:44 - 2017-03-14 19:31 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-03-12 23:44 - 2017-03-12 23:44 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2017-03-12 23:44 - 2017-03-12 23:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2017-03-12 23:44 - 2017-03-12 23:44 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-03-12 23:44 - 2017-03-12 23:44 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2017-03-12 23:44 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2017-03-12 23:44 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2017-03-12 23:44 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-03-12 23:39 - 2017-03-12 23:39 - 00000000 ____D C:\_OTM
2017-03-12 23:38 - 2017-03-12 23:38 - 00522240 _____ (OldTimer Tools) C:\Users\Jomko\Downloads\OTM.exe
2017-03-12 23:37 - 2017-03-12 23:37 - 22851472 _____ (Malwarebytes ) C:\Users\Jomko\Downloads\mbam-setup-bc.1878-2.2.1.1043.exe
2017-03-12 12:38 - 2017-03-12 21:34 - 00000000 ____D C:\Users\Jomko\AppData\LocalLow\Unity
2017-03-12 12:38 - 2017-03-12 21:34 - 00000000 ____D C:\Users\Jomko\AppData\Local\Unity
2017-03-12 12:36 - 2017-03-12 12:36 - 00003606 _____ C:\Windows\System32\Tasks\blogcreativeorglropsm
2017-03-03 11:37 - 2017-03-03 11:37 - 00000000 ____D C:\Program Files (x86)\MSECache
2017-03-01 11:54 - 2017-03-14 19:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-03-01 11:54 - 2017-03-01 12:02 - 00000000 ____D C:\Users\Jomko\AppData\Local\Thunderbird
2017-03-01 11:54 - 2017-03-01 11:54 - 00001213 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2017-03-01 11:54 - 2017-03-01 11:54 - 00001201 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2017-03-01 11:54 - 2017-03-01 11:54 - 00000000 ____D C:\Users\Jomko\AppData\Roaming\Thunderbird
2017-03-01 11:53 - 2017-03-01 11:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2017-02-28 15:26 - 2017-02-28 15:26 - 06971584 _____ (Tim Kosse) C:\Users\Jomko\Downloads\FileZilla_3.24.1_win64-setup.exe
2017-02-24 16:19 - 2017-02-24 16:19 - 00470592 _____ C:\Users\Jomko\Desktop\garstka.cam
2017-02-24 10:18 - 2017-02-24 10:18 - 00445866 _____ C:\Users\Jomko\Desktop\EUBP_business_request_template.odg
2017-02-24 08:57 - 2017-02-24 08:57 - 00334918 _____ C:\Users\Jomko\Desktop\EUBP_business_request.pdf
2017-02-21 21:56 - 2017-02-21 21:56 - 00000000 ____D C:\Users\Jomko\AppData\Roaming\LibreOffice
2017-02-21 21:53 - 2017-02-21 21:53 - 00001512 _____ C:\Users\Public\Desktop\LibreOffice 5.3.lnk
2017-02-21 21:53 - 2017-02-21 21:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.3
2017-02-21 21:53 - 2017-02-21 21:53 - 00000000 ____D C:\Program Files\LibreOffice 5
2017-02-17 21:39 - 2017-02-17 21:39 - 00759090 _____ C:\Users\Jomko\Desktop\EUBP_business_request_template.pdf
2017-02-13 11:34 - 2017-03-05 23:04 - 00000000 ____D C:\Users\Jomko\AppData\Roaming\Audacity
2017-02-13 11:34 - 2017-02-13 11:34 - 00001023 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2017-02-13 11:34 - 2017-02-13 11:34 - 00001011 _____ C:\Users\Public\Desktop\Audacity.lnk
2017-02-13 11:34 - 2017-02-13 11:34 - 00000000 ____D C:\Users\Jomko\AppData\Local\Audacity
2017-02-13 11:34 - 2017-02-13 11:34 - 00000000 ____D C:\Program Files (x86)\Audacity
2017-02-13 00:13 - 2017-02-13 00:13 - 00100926 _____ C:\Users\Jomko\Desktop\roztrasené okno.txt

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-03-14 19:30 - 2009-07-14 05:45 - 00014560 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-03-14 19:30 - 2009-07-14 05:45 - 00014560 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-03-14 19:29 - 2009-07-14 06:13 - 00781298 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-14 19:29 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-03-14 19:23 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-14 19:06 - 2016-03-27 00:41 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-03-13 00:28 - 2016-08-03 00:14 - 00000000 ____D C:\Users\Jomko\AppData\Local\CrashDumps
2017-03-13 00:28 - 2016-03-31 19:48 - 00000000 ____D C:\Users\Jomko\AppData\Roaming\MPC-HC
2017-03-12 12:37 - 2009-07-14 04:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2017-03-12 12:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2017-03-12 01:47 - 2016-06-17 08:02 - 00000000 ____D C:\Users\Jomko\AppData\Roaming\FileZilla
2017-03-11 10:03 - 2017-02-01 18:51 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2017-03-10 16:09 - 2016-11-09 22:21 - 00000000 ____D C:\www.foto-tapety.sk
2017-03-10 00:32 - 2016-06-19 09:54 - 00000000 ____D C:\Users\Jomko\AppData\Roaming\XnView
2017-03-07 21:12 - 2016-08-09 23:05 - 00000000 ____D C:\OBS video
2017-03-05 21:12 - 2016-03-31 19:52 - 00000000 ____D C:\Users\Jomko\AppData\Roaming\uTorrent
2017-03-03 10:01 - 2016-06-17 08:02 - 00001818 _____ C:\Users\Public\Desktop\FileZilla Client.lnk
2017-03-03 10:01 - 2016-06-17 08:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2017-03-03 10:01 - 2016-06-17 08:02 - 00000000 ____D C:\Program Files\FileZilla FTP Client
2017-02-25 02:11 - 2016-08-17 09:17 - 00000000 ____D C:\ProgramData\TEMP
2017-02-24 15:13 - 2016-08-22 13:37 - 00000000 ____D C:\Users\Jomko\AppData\Roaming\tox
2017-02-22 07:40 - 2016-03-27 00:29 - 00125832 _____ C:\Users\Jomko\AppData\Local\GDIPFONTCACHEV1.DAT
2017-02-22 07:39 - 2009-07-14 05:45 - 00477816 _____ C:\Windows\system32\FNTCACHE.DAT
2017-02-18 22:38 - 2016-07-19 17:24 - 00000000 ____D C:\consalnet fototapety VŠETKO FOTOTAPETY
2017-02-14 21:06 - 2016-03-27 00:41 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-02-14 21:06 - 2016-03-27 00:41 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-02-14 21:06 - 2016-03-27 00:41 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-02-14 21:06 - 2016-03-27 00:41 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-02-14 21:06 - 2016-03-27 00:41 - 00000000 ____D C:\Windows\system32\Macromed

==================== Files in the root of some directories =======

2016-08-11 14:09 - 2016-08-11 14:09 - 0001816 _____ () C:\Users\Jomko\AppData\Local\recently-used.xbel
2016-04-29 21:04 - 2016-04-29 21:04 - 0007608 _____ () C:\Users\Jomko\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-03-14 11:08

==================== End of FRST.txt ============================

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:231.92 GB) (Free:3.12 GB) NTFS
Drive e: (prenosny disk) (Fixed) (Total:55.89 GB) (Free:3.05 GB) NTFS

Available physical RAM: 5751.03 MB
Total physical RAM: 8103.89 MB
Percentage of memory in use: 29%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: C3F959E1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=231.9 GB) - (Type=07 NTFS)
Disk: 1 (Size: 55.9 GB) (Disk ID: 07971F2D)
Partition 1: (Not Active) - (Size=55.9 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\TEMP:1AAB2E68 [127]

==================== Security Center ==================

AV: Avast Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Jomko\Desktop" je 40 MB.

***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Pro Agent
"C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotkeyP
C:\Users\Jomko\AppData\Local\Temp\Temp1_hotkeyp.zip\HotkeyP.exe 0 [x]

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000

==================== End Of Log ==============================

Jomko · #6 Příspěvek od **Jomko** » 14 bře 2017 20:05

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-03-2017
Ran by Jomko (14-03-2017 20:01:43)
Running from C:\Users\Jomko\Desktop
Windows 7 Professional Service Pack 1 (X64) (2016-03-26 22:58:26)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-1719862456-1567695306-1986888435-500 - Administrator - Disabled)
Guest (S-1-5-21-1719862456-1567695306-1986888435-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1719862456-1567695306-1986888435-1002 - Limited - Enabled)
Jomko (S-1-5-21-1719862456-1567695306-1986888435-1000 - Administrator - Enabled) => C:\Users\Jomko

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 2 (SP2) (x32 Version: - Microsoft) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 22.0.0.153 - Adobe Systems Incorporated)
Adobe Flash Player 24 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 24.0.0.221 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.221 - Adobe Systems Incorporated)
Aktualizácie NVIDIA 17.12.8 (Version: 17.12.8 - NVIDIA Corporation) Hidden
Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 4.4.1245.72462 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 4.4.1245.72462 - Alcor Micro Corp.) Hidden
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
Audiograbber 1.83 SE (HKLM-x32\...\Audiograbber) (Version: 1.83 SE - Audiograbber)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 5.17 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.7.6389 - CDBurnerXP)
Cervii, DOSBox emulation: Floppy disk (PC DOS, © 1993 V. Chvatil) (HKLM-x32\...\{19A75319-DDA6-42DC-A28C-AA77480D6655}_is1) (Version: 2.06 - DJ OldGames)
CGS17_Setup_x64 (Version: 17.0 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension (HKLM\...\_{4AB916EE-ABA8-4079-9889-745798B6D809}) (Version: 17.0.0.491 - Corel Corporation)
Corel Graphics - Windows Shell Extension (Version: 17.0.491 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit (Version: 17.0.491 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Capture (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Common (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Connect (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Custom Data (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - CZ (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Draw (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Filters (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - FontNav (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - IPM Content (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - IPM T (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - PHOTO-PAINT (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Photozoom Plugin (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Redist (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Setup Files (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - VBA (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - VideoBrowser (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Writing Tools (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 (64-Bit) (HKLM\...\_{5CB73140-806C-42C6-A05A-1AFD0E92DEB5}) (Version: 17.0.0.491 - Corel Corporation)
DAEMON Tools Pro (HKLM-x32\...\DAEMON Tools Pro) (Version: 5.5.0.0388 - Disc Soft Ltd)
DaVinci Resolve (HKLM\...\{665B7560-DC5F-4F3F-BDB7-ECDC9191F4A1}) (Version: 12.5.1034 - Blackmagic Design)
FileZilla Client 3.24.1 (HKLM-x32\...\FileZilla Client) (Version: 3.24.1 - Tim Kosse)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Spoločnosť Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
HandBrake 0.10.5 (HKLM-x32\...\HandBrake) (Version: 0.10.5 - )
HDD Regenerator (HKLM-x32\...\{2445981B-A23B-4A0E-AD15-3D391BDAEC3E}) (Version: 1.71.0012 - Abstradrome)
Host Service (HKU\S-1-5-21-1719862456-1567695306-1986888435-1000\...\Host Service) (Version: - ) <==== ATTENTION
IDT Audio Driver (HKLM\...\{11424B27-C16B-4505-9667-82A10AD1B1DC}) (Version: 6.10.6472.0 - IDT)
Inkscape 0.91 (HKLM\...\{81922150-317E-4BB0-A31D-FF1C14F707C5}) (Version: 0.91 - inkscape.org)
Inkscape Multiple Pages Support (HKLM-x32\...\inkscape-pages) (Version: - )
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.18.10.3165 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.4.1001 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.0.0.102 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) 4.0 (HKLM-x32\...\{6D2580AE-0284-4CE0-9A39-A0E5E3A5C28C}) (Version: 17.0.1416.01 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{6535d76a-59fb-4935-b2c5-cd61917c4a4b}) (Version: 17.16.0 - Intel Corporation)
IrfanView 64 (remove only) (HKLM\...\IrfanView64) (Version: 4.42 - Irfan Skiljan)
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
LibreOffice 5.3.0.3 (HKLM\...\{769A4A4C-3EBD-4469-B13B-5083F1C7717F}) (Version: 5.3.0.3 - The Document Foundation)
Malwarebytes Anti-Malware verzia 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.6 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6425.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2012 (HKLM-x32\...\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}) (Version: 11.0.51108 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Mozilla Firefox 52.0 (x86 sk) (HKLM-x32\...\Mozilla Firefox 52.0 (x86 sk)) (Version: 52.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.0.6270 - Mozilla)
Mozilla Thunderbird 45.7.1 (x86 sk) (HKLM-x32\...\Mozilla Thunderbird 45.7.1 (x86 sk)) (Version: 45.7.1 - Mozilla)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
NeoDownloader 2.9.5 (HKLM-x32\...\NeoDownloader_is1) (Version: 2.9.5 - Neowise Software)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9.2 - Notepad++ Team)
NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)
NVIDIA Softvér systému s podporou technológie PhysX 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
OpenOffice 4.1.2 (HKLM-x32\...\{EF194FA4-99F4-4C36-AC30-B2C2DE1C170D}) (Version: 4.12.9782 - Apache Software Foundation)
Ovládací panel NVIDIA 353.62 (Version: 353.62 - NVIDIA Corporation) Hidden
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - PTB (Version: 11.0.51108 - Microsoft Corporation) Hidden
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB (x32 Version: 11.0.51108 - Microsoft Corporation) Hidden
qTox (HKLM-x32\...\qTox) (Version: 1.0 - The qTox Project)
Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.13 - Qualcomm Atheros Communications Inc.)
SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden
SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.4.2.8 - Synaptics Incorporated)
TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.12 for x64 - TOSHIBA Corporation)
TOSHIBA Nastavenie hardvéru (HKLM-x32\...\{2FD5D2C5-A7A1-4065-89BA-90542BF7CCD3}) (Version: 2.00.0028 - TOSHIBA)
TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.2.15.0 - TOSHIBA)
TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.6.0037.6400 - TOSHIBA Corporation)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: - )
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Web Ripper (HKLM-x32\...\{9F691A52-90AC-4223-AB9B-615F22214DB3}_is1) (Version: 3 - Sequentum Pty Ltd)
Wampserver64 3.0.4 (HKLM\...\{wampserver64}_is1) (Version: 3.0.4 - Dominique Ottello aka Otomatic)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Worms Reloaded - Game of the Year Edition (HKLM-x32\...\Worms Reloaded - Game of the Year Edition_is1) (Version: - )
Xenu's Link Sleuth (HKLM-x32\...\Xenu's Link Sleuth) (Version: 1.3.8 - Tilman Hausherr)
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x64) - RUS (Version: 11.0.51108 - Microsoft Corporation) Hidden
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS (x32 Version: 11.0.51108 - Microsoft Corporation) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {05A39557-0E29-42FE-9DF8-7E5650227023} - System32\Tasks\SafeZone scheduled Autoupdate 1485971552 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software)
Task: {05A73112-55B2-4214-80E2-8B2CA96727B3} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2017-02-01] (AVAST Software)
Task: {16BD9220-44A5-4316-A2E7-22C1FB04A7A8} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => %ProgramFiles(x86)%\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe
Task: {2AD4A6E6-0902-421B-80D0-ADF5F11D04CE} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-02-01] (AVAST Software)
Task: {423AA402-B8EE-4C38-86D7-88182B09D972} - System32\Tasks\blogcreativeorglropsm => Firefox.exe blogcreative.org/lropsm <==== ATTENTION
Task: {47173412-32D4-4088-A43A-ED69C23CDCA6} - System32\Tasks\{438A268B-1252-4CB4-B467-A33FF495C65F} => pcalua.exe -a C:\Users\Jomko\Downloads\LeagueofLegends_EUNE_Installer_9_15_2014.exe -d C:\Windows\SysWOW64 -c /groupsextract:100;101;102; /out:"C:\Users\Jomko\AppData\Roaming\Riot Games\League of Legends\prerequisites" /callbackid:2908
Task: {4B5CA767-267A-40D5-A6AE-59DD10F7EA63} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => Rundll32.exe C:\Windows\system32\pla.dll,PlaHost "LSC Memory" "$(Arg0)"
Task: {A20B9C73-C646-4B5B-A127-956C9D543822} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-01] (Google Inc.)
Task: {D109B4D3-C6E5-43ED-8C53-4477C64E4861} - System32\Tasks\CheckControllerUpdatesUA => %PROGRAMFILES(X86)%\Smart Application Controller\smappscontroller.exe
Task: {D745AFFC-FC07-4D78-AF09-6397B5209163} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-02-14] (Adobe Systems Incorporated)
Task: {DAE8DDE9-60AC-4BC9-AE84-0D4D839A8CE9} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
Task: {DDCBBF4E-1BF9-4745-AEA5-C7B2127953EB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-01] (Google Inc.)
Task: {E3A5DF24-627B-47E4-A41A-5402279E398E} - System32\Tasks\{143D4ADA-4C2E-4676-BE9E-73434D39DC0A} => pcalua.exe -a C:\Users\Jomko\Downloads\drivers\66ux03ww.exe -d C:\Users\Jomko\Downloads\drivers
Task: {FB09045B-28B4-4039-91BB-BBF2BD668DB0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-04-15] (Piriform Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2016-07-18 08:16 - 2010-09-09 16:26 - 00162824 _____ () C:\Windows\System32\GFNEXSrv.exe
2016-07-18 09:01 - 2015-07-23 05:06 - 00011920 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2016-07-18 09:01 - 2015-07-23 02:31 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-08-22 13:19 - 2011-08-22 13:19 - 11204992 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll
2012-03-02 14:08 - 2012-03-02 14:08 - 00595840 _____ () C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
2016-04-15 19:07 - 2016-04-15 19:07 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1051.dll
2013-04-24 08:43 - 2013-04-24 08:43 - 00473440 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\TcrdKBB.exe
2017-02-01 18:51 - 2017-02-01 18:51 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-02-01 18:51 - 2017-02-01 18:51 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-03-14 19:24 - 2017-03-14 19:24 - 05883392 _____ () C:\Program Files\AVAST Software\Avast\defs\17031402\algo.dll
2016-07-18 09:01 - 2015-07-23 05:06 - 00012104 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2017-02-01 18:51 - 2017-02-01 18:51 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-02-14 21:06 - 2017-02-14 21:06 - 19770456 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_221.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:1AAB2E68 [127]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-1719862456-1567695306-1986888435-1000\...\blank -> blank
IE trusted site: HKU\S-1-5-21-1719862456-1567695306-1986888435-1000\...\localhost -> localhost

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2016-09-14 10:53 - 00001006 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1719862456-1567695306-1986888435-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Jomko\AppData\Roaming\Mozilla\Firefox\Pozadie plochy.bmp
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: DAEMON Tools Pro Agent => "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
MSCONFIG\startupreg: HotkeyP => C:\Users\Jomko\AppData\Local\Temp\Temp1_hotkeyp.zip\HotkeyP.exe 0

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{7DCB14C9-86ED-4F30-B00E-99ECB5BDA5CB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D155E225-8661-4E12-82E5-F56016F5E44E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0E23F7C2-A7DB-4AA4-9C59-B7C96C7D979C}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{24BB7460-270D-4C25-B820-58550ACD9E47}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{C0FFDAD5-AC11-4459-9E95-ED8BC0028B7D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{ABBF8C84-29A6-4BC5-B766-909AC9B459E3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{2C434623-B2EA-4BAD-BC0A-112039DF6EB1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{0B2F3094-C698-4812-964D-B82E949A7C50}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{82538131-0BD4-4FD4-A110-9C18DB3858CD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{A1141BB7-4810-4607-94AB-E63F703D56DA}C:\wamp64\bin\apache\apache2.4.18\bin\httpd.exe] => (Allow) C:\wamp64\bin\apache\apache2.4.18\bin\httpd.exe
FirewallRules: [UDP Query User{EB1E46D8-16D8-40C6-9868-3F8B38BDB611}C:\wamp64\bin\apache\apache2.4.18\bin\httpd.exe] => (Allow) C:\wamp64\bin\apache\apache2.4.18\bin\httpd.exe
FirewallRules: [TCP Query User{FA05C2CA-348E-458F-ADD7-6E96D7783896}C:\program files\totalcmd\totalcmd.exe] => (Allow) C:\program files\totalcmd\totalcmd.exe
FirewallRules: [UDP Query User{A7EBD764-52AD-4DDB-873F-F024945859C9}C:\program files\totalcmd\totalcmd.exe] => (Allow) C:\program files\totalcmd\totalcmd.exe
FirewallRules: [{375F70B7-AF70-4A34-B0A6-C692BDD38184}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe
FirewallRules: [{7A2D18D3-A891-4410-813A-64A55ABC47FC}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe
FirewallRules: [{6190AFB2-1ADC-4AF8-AD89-E7F920D1FBE4}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe
FirewallRules: [{53F13D21-23E2-41D2-8942-2B8F25E66F84}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe
FirewallRules: [{2BE8E510-85B8-4BFF-BC60-FADE428A3C38}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe
FirewallRules: [{74D433A9-730A-4D97-AAA4-4FAF5DD171D4}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe
FirewallRules: [{515B2194-8574-41D4-A855-9FA3E1707ED4}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DPDecoder.exe
FirewallRules: [TCP Query User{35E1BEAF-E451-490E-9C73-2ECFF6D48481}C:\users\jomko\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\jomko\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{94A12787-B807-446E-BF1A-FB9C653B4D58}C:\users\jomko\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\jomko\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{0686E141-7DC1-4851-9F80-8F5737292168}C:\program files\qtox\bin\qtox.exe] => (Allow) C:\program files\qtox\bin\qtox.exe
FirewallRules: [UDP Query User{F5B77B3D-2447-40C7-9938-18207F624AE8}C:\program files\qtox\bin\qtox.exe] => (Allow) C:\program files\qtox\bin\qtox.exe
FirewallRules: [TCP Query User{5942ED09-3528-4D04-9363-2E491F1999F8}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{D7A606C5-353D-4EE8-BA40-375BE14998F4}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{2B954BBE-D773-4F71-8256-2B8C93E2A08F}I:\install\sdi_r496\sdi_x64_r496.exe] => (Allow) I:\install\sdi_r496\sdi_x64_r496.exe
FirewallRules: [UDP Query User{091FE761-8BB8-49C1-83D1-32F3419FD47A}I:\install\sdi_r496\sdi_x64_r496.exe] => (Allow) I:\install\sdi_r496\sdi_x64_r496.exe
FirewallRules: [TCP Query User{00C85703-2B9F-4BDA-8316-5E51567B96F8}C:\program files (x86)\starcraft ii\versions\base48258\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base48258\sc2_x64.exe
FirewallRules: [UDP Query User{E068F94A-5965-4042-8DB6-665267AA67B1}C:\program files (x86)\starcraft ii\versions\base48258\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base48258\sc2_x64.exe
FirewallRules: [{75E410B4-311C-4A90-BB6E-FD077E8C2617}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X7\Programs64\CorelDrw.exe
FirewallRules: [{651C7C53-7650-45E6-A174-710338C9F850}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X7\Programs64\CorelPP.exe
FirewallRules: [{C430FADB-6FA0-41AC-8688-38015B631510}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (03/14/2017 07:29:21 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (03/14/2017 07:29:21 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (03/14/2017 07:22:26 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: Nasledujúci modul sa nepodarilo zastaviť: Aktualizácie softvéru. Chyba: Operácia zlyhala.

Error: (03/14/2017 11:51:30 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (03/14/2017 11:51:30 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (03/14/2017 11:44:19 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybovej aplikácie: CAMService.exe, verzia: 1.0.0.1, časová značka: 0x54077d08
Názov chybového modulu: ntdll.dll, verzia: 6.1.7601.17514, časová značka: 0x4ce7c8f9
Kód výnimky: 0xc0000005
Odstup chyby: 0x000000000004e4b4
Identifikácia chybného procesu: 0x7c0
Čas spustenia chybnej aplikácie: 0x01d29cafee2ab62b
Cesta chybnej aplikácie: C:\Program Files\Intel\CAM\bin\CAMService.exe
Cesta chybného modulu: C:\Windows\SYSTEM32\ntdll.dll
Identifikácia hlásenia: 2cedc20c-08a3-11e7-b212-54bef7723375

Error: (03/14/2017 11:43:31 AM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: Nasledujúci modul sa nepodarilo zastaviť: Aktualizácie softvéru. Chyba: Operácia zlyhala.

Error: (03/14/2017 10:52:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (03/14/2017 10:52:59 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

Error: (03/14/2017 09:09:29 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.

System errors:
=============
Error: (03/14/2017 07:22:31 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Modul WLAN Extensibility Module sa neočakávane zastavil.

Cesta k modulu: C:\Windows\System32\IWMSSvc.dll

Error: (03/14/2017 07:22:31 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Modul WLAN Extensibility Module sa neočakávane zastavil.

Cesta k modulu: C:\Windows\System32\IWMSSvc.dll

Error: (03/14/2017 07:22:31 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Modul WLAN Extensibility Module sa neočakávane zastavil.

Cesta k modulu: C:\Windows\System32\IWMSSvc.dll

Error: (03/14/2017 07:22:30 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Modul WLAN Extensibility Module sa neočakávane zastavil.

Cesta k modulu: C:\Windows\System32\IWMSSvc.dll

Error: (03/14/2017 07:22:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba MBAMScheduler sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (03/14/2017 07:22:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba MBAMService sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (03/14/2017 07:22:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Dynamic Application Loader Host Interface Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (03/14/2017 07:22:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 5000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (03/14/2017 07:22:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Intel® Centrino® Wireless Bluetooth® + High Speed Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 60000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (03/14/2017 07:22:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba TMachInfo sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

CodeIntegrity:
===================================
Date: 2016-07-24 18:48:36.324
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\Drivers\eelam\eelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-24 18:48:36.323
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\Drivers\eelam\eelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-24 18:48:36.321
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\Drivers\eelam\eelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-23 00:34:49.202
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\Drivers\eelam\eelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-23 00:34:49.201
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\Drivers\eelam\eelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-23 00:34:49.200
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\Drivers\eelam\eelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-22 22:29:57.299
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\Drivers\eelam\eelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-22 22:29:57.299
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\Drivers\eelam\eelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-22 22:29:57.283
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\Drivers\eelam\eelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-07-21 17:47:32.338
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\Drivers\eelam\eelam.sys because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-4700MQ CPU @ 2.40GHz
Percentage of memory in use: 29%
Total physical RAM: 8103.89 MB
Available physical RAM: 5751.03 MB
Total Virtual: 14186.09 MB
Available Virtual: 11666.07 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:231.92 GB) (Free:3.12 GB) NTFS
Drive e: (prenosny disk) (Fixed) (Total:55.89 GB) (Free:3.05 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: C3F959E1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=231.9 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 55.9 GB) (Disk ID: 07971F2D)
Partition 1: (Not Active) - (Size=55.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

#7 Příspěvek od **altrok** » 14 bře 2017 20:28

Po restartu dejte vedet, jak se PC chova.

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu bude na plose ulozen fixlog, jehoz obsah vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-1719862456-1567695306-1986888435-1000\...\MountPoints2: {99ca108a-01cf-11e7-af1f-0c8bfd901919} - F:\Lenovo_Suite.exe
HKU\S-1-5-21-1719862456-1567695306-1986888435-1000\...\MountPoints2: {b1e11f79-064d-11e6-81cd-002269f5b9c1} - H:\setup.exe
GroupPolicy: Restriction <======= ATTENTION
GroupPolicy\User: Restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-1719862456-1567695306-1986888435-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
CHR Extension: (Домашняя страница Mail.Ru) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\ccfifbojenkenpkmnbnndeadpfdiffof [2017-03-12]
CHR Extension: (Визуальные Закладки Mail.Ru) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\oelpkepjlgmehajehfeicfbjdiobdkfj [2017-03-12]
CHR Extension: (Mail.Ru) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\ojlcebdkbpjdpiligkdbbkdkfjmchbfd [2017-03-12]
S3 JMCR; system32\DRIVERS\jmcr.sys [X]
2017-03-14 11:35 - 2017-03-14 19:31 - 00000000 ____D C:\AdwCleaner
2017-03-14 11:34 - 2017-03-14 11:35 - 04031440 _____ C:\Users\Jomko\Desktop\adwcleaner_6.044.exe
2017-03-14 11:27 - 2017-03-14 13:05 - 00000000 ____D C:\Program Files\trend micro
2017-03-14 11:27 - 2017-03-14 11:28 - 00000000 ____D C:\rsit
2017-03-14 11:26 - 2017-03-14 11:27 - 01222144 _____ C:\Users\Jomko\Downloads\RSITx64.exe
Task: {423AA402-B8EE-4C38-86D7-88182B09D972} - System32\Tasks\blogcreativeorglropsm => Firefox.exe blogcreative.org/lropsm <==== ATTENTION
Task: {DAE8DDE9-60AC-4BC9-AE84-0D4D839A8CE9} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe 
Task: {E3A5DF24-627B-47E4-A41A-5402279E398E} - System32\Tasks\{143D4ADA-4C2E-4676-BE9E-73434D39DC0A} => pcalua.exe -a C:\Users\Jomko\Downloads\drivers\66ux03ww.exe -d C:\Users\Jomko\Downloads\drivers
AlternateDataStreams: C:\ProgramData\TEMP:1AAB2E68 [127]
CMD: dir "C:\Windows\Inf" /AD
CMD: dir "C:\PROGRA~1"
CMD: dir "C:\PROGRA~2"
CMD: dir "C:\PROGRA~3"
CMD: dir "%localappdata%"
CMD: dir "%appdata%"
Hosts:
EmptyTemp:
End

Jomko · #8 Příspěvek od **Jomko** » 14 bře 2017 20:58

Fix result of Farbar Recovery Scan Tool (x64) Version: 14-03-2017
Ran by Jomko (14-03-2017 20:51:51) Run:1
Running from C:\Users\Jomko\Desktop
Loaded Profiles: Jomko (Available Profiles: Jomko)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-1719862456-1567695306-1986888435-1000\...\MountPoints2: {99ca108a-01cf-11e7-af1f-0c8bfd901919} - F:\Lenovo_Suite.exe
HKU\S-1-5-21-1719862456-1567695306-1986888435-1000\...\MountPoints2: {b1e11f79-064d-11e6-81cd-002269f5b9c1} - H:\setup.exe
GroupPolicy: Restriction <======= ATTENTION
GroupPolicy\User: Restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-1719862456-1567695306-1986888435-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR Extension: (Домашняя страница Mail.Ru) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\ccfifbojenkenpkmnbnndeadpfdiffof [2017-03-12]
CHR Extension: (Визуальные Закладки Mail.Ru) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\oelpkepjlgmehajehfeicfbjdiobdkfj [2017-03-12]
CHR Extension: (Mail.Ru) - C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\ojlcebdkbpjdpiligkdbbkdkfjmchbfd [2017-03-12]
S3 JMCR; system32\DRIVERS\jmcr.sys [X]
2017-03-14 11:35 - 2017-03-14 19:31 - 00000000 ____D C:\AdwCleaner
2017-03-14 11:34 - 2017-03-14 11:35 - 04031440 _____ C:\Users\Jomko\Desktop\adwcleaner_6.044.exe
2017-03-14 11:27 - 2017-03-14 13:05 - 00000000 ____D C:\Program Files\trend micro
2017-03-14 11:27 - 2017-03-14 11:28 - 00000000 ____D C:\rsit
2017-03-14 11:26 - 2017-03-14 11:27 - 01222144 _____ C:\Users\Jomko\Downloads\RSITx64.exe
Task: {423AA402-B8EE-4C38-86D7-88182B09D972} - System32\Tasks\blogcreativeorglropsm => Firefox.exe blogcreative.org/lropsm <==== ATTENTION
Task: {DAE8DDE9-60AC-4BC9-AE84-0D4D839A8CE9} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
Task: {E3A5DF24-627B-47E4-A41A-5402279E398E} - System32\Tasks\{143D4ADA-4C2E-4676-BE9E-73434D39DC0A} => pcalua.exe -a C:\Users\Jomko\Downloads\drivers\66ux03ww.exe -d C:\Users\Jomko\Downloads\drivers
AlternateDataStreams: C:\ProgramData\TEMP:1AAB2E68 [127]
CMD: dir "C:\Windows\Inf" /AD
CMD: dir "C:\PROGRA~1"
CMD: dir "C:\PROGRA~2"
CMD: dir "C:\PROGRA~3"
CMD: dir "%localappdata%"
CMD: dir "%appdata%"
Hosts:
EmptyTemp:
End
*****************

Restore point was successfully created.
Processes closed successfully.
HKU\S-1-5-21-1719862456-1567695306-1986888435-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{99ca108a-01cf-11e7-af1f-0c8bfd901919} => key removed successfully
HKCR\CLSID\{99ca108a-01cf-11e7-af1f-0c8bfd901919} => key not found.
HKU\S-1-5-21-1719862456-1567695306-1986888435-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b1e11f79-064d-11e6-81cd-002269f5b9c1} => key removed successfully
HKCR\CLSID\{b1e11f79-064d-11e6-81cd-002269f5b9c1} => key not found.
C:\Windows\system32\GroupPolicy\Machine => moved successfully
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully
C:\Windows\system32\GroupPolicy\User => moved successfully
HKU\S-1-5-21-1719862456-1567695306-1986888435-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\ccfifbojenkenpkmnbnndeadpfdiffof => moved successfully
C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\oelpkepjlgmehajehfeicfbjdiobdkfj => moved successfully
C:\Users\Jomko\AppData\Local\Google\Chrome\User Data\ghiqerghtquqoleatuzuch\Extensions\ojlcebdkbpjdpiligkdbbkdkfjmchbfd => moved successfully
HKLM\System\CurrentControlSet\Services\JMCR => key removed successfully
JMCR => service removed successfully
C:\AdwCleaner => moved successfully
C:\Users\Jomko\Desktop\adwcleaner_6.044.exe => moved successfully
C:\Program Files\trend micro => moved successfully
C:\rsit => moved successfully
C:\Users\Jomko\Downloads\RSITx64.exe => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{423AA402-B8EE-4C38-86D7-88182B09D972} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{423AA402-B8EE-4C38-86D7-88182B09D972} => key removed successfully
C:\Windows\System32\Tasks\blogcreativeorglropsm => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\blogcreativeorglropsm => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DAE8DDE9-60AC-4BC9-AE84-0D4D839A8CE9} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DAE8DDE9-60AC-4BC9-AE84-0D4D839A8CE9} => key removed successfully
C:\Windows\System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVGPCTuneUp_Task_BkGndMaintenance => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E3A5DF24-627B-47E4-A41A-5402279E398E} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E3A5DF24-627B-47E4-A41A-5402279E398E} => key removed successfully
C:\Windows\System32\Tasks\{143D4ADA-4C2E-4676-BE9E-73434D39DC0A} => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{143D4ADA-4C2E-4676-BE9E-73434D39DC0A} => key removed successfully
C:\ProgramData\TEMP => ":1AAB2E68" ADS removed successfully.

========= dir "C:\Windows\Inf" /AD =========

Volume in drive C has no label.
Volume Serial Number is DE7D-B4D2

Directory of C:\Windows\Inf

14. 03. 2017 19:29 <DIR> .
14. 03. 2017 19:29 <DIR> ..
14. 07. 2009 08:44 <DIR> .NET CLR Data
14. 07. 2009 08:44 <DIR> .NET CLR Networking
19. 06. 2016 12:06 <DIR> .NET CLR Networking 4.0.0.0
14. 07. 2009 08:44 <DIR> .NET Data Provider for Oracle
14. 07. 2009 08:44 <DIR> .NET Data Provider for SqlServer
19. 06. 2016 12:05 <DIR> .NET Memory Cache 4.0
14. 07. 2009 08:44 <DIR> .NETFramework
19. 06. 2016 12:06 <DIR> ASP.NET
19. 06. 2016 12:05 <DIR> ASP.NET_4.0.30319
19. 06. 2016 12:05 <DIR> aspnet_state
14. 07. 2009 08:44 <DIR> BITS
14. 07. 2009 08:44 <DIR> en-US
14. 07. 2009 08:44 <DIR> ESENT
14. 07. 2009 08:44 <DIR> IEM
14. 07. 2009 08:44 <DIR> MSDTC
14. 07. 2009 08:44 <DIR> MSDTC Bridge 3.0.0.0
19. 06. 2016 12:06 <DIR> MSDTC Bridge 4.0.0.0
14. 07. 2009 08:44 <DIR> PERFLIB
14. 07. 2009 06:37 <DIR> PNRPSvc
14. 07. 2009 08:44 <DIR> rdyboost
14. 07. 2009 06:37 <DIR> RemoteAccess
14. 07. 2009 08:44 <DIR> ServiceModelEndpoint 3.0.0.0
14. 07. 2009 08:44 <DIR> ServiceModelOperation 3.0.0.0
14. 07. 2009 08:44 <DIR> ServiceModelService 3.0.0.0
14. 07. 2009 08:44 <DIR> SMSvcHost 3.0.0.0
19. 06. 2016 12:06 <DIR> SMSvcHost 4.0.0.0
14. 07. 2009 08:44 <DIR> TAPISRV
14. 07. 2009 08:44 <DIR> TermService
14. 07. 2009 08:44 <DIR> UGatherer
14. 07. 2009 08:44 <DIR> UGTHRSVC
14. 07. 2009 06:37 <DIR> usbhub
14. 07. 2009 08:44 <DIR> Windows Workflow Foundation 3.0.0.0
19. 06. 2016 12:06 <DIR> Windows Workflow Foundation 4.0.0.0
14. 03. 2017 19:29 <DIR> WmiApRpl
14. 07. 2009 08:44 <DIR> wsearchidxpi
0 File(s) 0 bytes
37 Dir(s) 3˙156˙660˙224 bytes free

========= End of CMD: =========

========= dir "C:\PROGRA~1" =========

Volume in drive C has no label.
Volume Serial Number is DE7D-B4D2

Directory of C:\PROGRA~1

14. 03. 2017 20:51 <DIR> .
14. 03. 2017 20:51 <DIR> ..
18. 07. 2016 19:21 <DIR> active-links
01. 02. 2017 18:52 <DIR> AVAST Software
15. 08. 2016 01:00 <DIR> Blackmagic Design
26. 04. 2016 20:00 <DIR> CCleaner
02. 02. 2017 11:19 <DIR> Common Files
01. 02. 2017 19:26 <DIR> Corel
27. 03. 2016 20:28 <DIR> DVD Maker
03. 03. 2017 10:01 <DIR> FileZilla FTP Client
01. 04. 2016 22:04 <DIR> GIMP 2
16. 08. 2016 00:29 <DIR> Handbrake
18. 07. 2016 13:51 <DIR> IDT
11. 08. 2016 13:43 <DIR> Inkscape
18. 07. 2016 08:56 <DIR> Intel
27. 03. 2016 20:28 <DIR> Internet Explorer
12. 06. 2016 19:29 <DIR> IrfanView
21. 02. 2017 21:53 <DIR> LibreOffice 5
26. 07. 2016 23:22 <DIR> Lightworks
26. 04. 2016 21:59 <DIR> Microsoft Office
19. 07. 2016 10:19 <DIR> MPC-HC
14. 07. 2009 06:32 <DIR> MSBuild
18. 07. 2016 13:50 <DIR> NVIDIA Corporation
04. 04. 2016 18:57 <DIR> Nvu portable
25. 07. 2016 23:03 <DIR> OBS
22. 08. 2016 13:37 <DIR> qTox
14. 07. 2009 06:32 <DIR> Reference Assemblies
18. 07. 2016 08:03 <DIR> Synaptics
18. 07. 2016 19:13 <DIR> TOSHIBA
30. 03. 2016 19:19 <DIR> totalcmd
27. 03. 2016 21:50 <DIR> Unknown Device Identifier
27. 03. 2016 20:28 <DIR> Windows Defender
27. 03. 2016 20:28 <DIR> Windows Journal
27. 03. 2016 20:28 <DIR> Windows Mail
27. 03. 2016 20:28 <DIR> Windows Media Player
14. 07. 2009 06:32 <DIR> Windows NT
27. 03. 2016 20:28 <DIR> Windows Photo Viewer
27. 03. 2016 20:28 <DIR> Windows Portable Devices
27. 03. 2016 20:28 <DIR> Windows Sidebar
06. 11. 2016 14:23 <DIR> WinRAR
18. 07. 2016 19:06 <DIR> XnView
0 File(s) 0 bytes
41 Dir(s) 3˙156˙656˙128 bytes free

========= End of CMD: =========

========= dir "C:\PROGRA~2" =========

Volume in drive C has no label.
Volume Serial Number is DE7D-B4D2

Directory of C:\PROGRA~2

14. 03. 2017 19:23 <DIR> .
14. 03. 2017 19:23 <DIR> ..
27. 03. 2016 16:19 <DIR> Adobe
18. 07. 2016 09:01 <DIR> AGEIA Technologies
18. 07. 2016 07:30 <DIR> AmIcoSingLun
13. 02. 2017 11:34 <DIR> Audacity
03. 09. 2016 17:10 <DIR> Audiograbber
01. 02. 2017 18:47 <DIR> AVG
10. 12. 2016 20:20 <DIR> Battle.net
26. 10. 2016 19:17 <DIR> CDBurnerXP
18. 07. 2016 08:35 <DIR> Cisco
02. 02. 2017 11:19 <DIR> Common Files
19. 04. 2016 19:32 <DIR> DAEMON Tools Pro
27. 11. 2016 23:17 <DIR> freac
01. 07. 2016 19:13 <DIR> Google
17. 08. 2016 09:17 <DIR> HDD Regenerator
18. 07. 2016 15:10 <DIR> Intel
27. 03. 2016 20:28 <DIR> Internet Explorer
19. 01. 2017 20:10 <DIR> Java
18. 07. 2016 09:23 <DIR> Lenovo
12. 03. 2017 23:44 <DIR> Malwarebytes Anti-Malware
29. 03. 2016 21:19 <DIR> Microsoft
26. 04. 2016 21:59 <DIR> Microsoft Office
19. 06. 2016 12:04 <DIR> Microsoft.NET
25. 08. 2016 17:30 <DIR> Minecraft
14. 03. 2017 19:23 <DIR> Mozilla Firefox
14. 03. 2017 19:23 <DIR> Mozilla Maintenance Service
01. 03. 2017 11:54 <DIR> Mozilla Thunderbird
14. 07. 2009 06:32 <DIR> MSBuild
03. 03. 2017 11:37 <DIR> MSECache
01. 07. 2016 23:13 <DIR> NeoDownloader
17. 06. 2016 09:40 <DIR> Notepad++
18. 07. 2016 09:01 <DIR> NVIDIA Corporation
04. 09. 2016 22:49 <DIR> OBS
01. 04. 2016 18:37 <DIR> OpenOffice 4
14. 07. 2009 06:32 <DIR> Reference Assemblies
17. 08. 2016 08:47 <DIR> Smart Application Controller
05. 11. 2016 23:13 <DIR> SpeedFan
10. 12. 2016 21:43 <DIR> StarCraft II
08. 05. 2016 11:33 <DIR> Team 17
18. 07. 2016 14:14 <DIR> TOSHIBA
12. 07. 2016 14:49 <DIR> Visual Web Ripper
14. 07. 2009 08:44 <DIR> Windows Defender
27. 03. 2016 20:28 <DIR> Windows Mail
27. 03. 2016 20:28 <DIR> Windows Media Player
14. 07. 2009 06:32 <DIR> Windows NT
27. 03. 2016 20:28 <DIR> Windows Photo Viewer
27. 03. 2016 20:28 <DIR> Windows Portable Devices
27. 03. 2016 20:28 <DIR> Windows Sidebar
17. 06. 2016 15:56 <DIR> Xenu
0 File(s) 0 bytes
50 Dir(s) 3˙156˙656˙128 bytes free

========= End of CMD: =========

========= dir "C:\PROGRA~3" =========

Volume in drive C has no label.
Volume Serial Number is DE7D-B4D2

Directory of C:\PROGRA~3

27. 03. 2016 16:19 <DIR> Adobe
18. 07. 2016 07:30 <DIR> AmUStor
01. 02. 2017 18:52 <DIR> AVAST Software
01. 02. 2017 18:47 <DIR> Avg
31. 07. 2016 17:32 <DIR> Battle.net
15. 08. 2016 01:00 <DIR> Blackmagic Design
01. 08. 2016 21:00 <DIR> Blizzard Entertainment
14. 09. 2016 10:27 <DIR> Canneverbe Limited
01. 02. 2017 19:52 <DIR> Corel
01. 02. 2017 19:28 <DIR> CorelDRAW Graphics Suite X7 x64
19. 04. 2016 19:34 <DIR> DAEMON Tools Pro
26. 07. 2016 08:20 <DIR> Geevs
18. 07. 2016 08:36 <DIR> Intel
18. 07. 2016 12:30 <DIR> IsolatedStorage
27. 03. 2016 19:25 <DIR> Lenovo
12. 03. 2017 23:44 <DIR> Malwarebytes
01. 02. 2017 18:46 <DIR> MFAData
07. 07. 2016 16:56 <DIR> Microsoft Help
18. 07. 2016 10:46 262˙144 Ntuser.dat
18. 07. 2016 13:50 <DIR> NVIDIA
18. 07. 2016 09:03 <DIR> NVIDIA Corporation
19. 01. 2017 20:10 <DIR> Oracle
01. 02. 2017 19:28 <DIR> Package Cache
01. 02. 2017 19:29 <DIR> Protexis64
27. 03. 2016 10:07 <DIR> Riot Games
27. 03. 2016 22:48 <DIR> Roaming
12. 07. 2016 14:51 <DIR> Sequentum
12. 07. 2016 16:27 <DIR> Softomotive
19. 04. 2016 21:10 <DIR> Steam
25. 02. 2017 02:11 <DIR> TEMP
18. 07. 2016 08:18 <DIR> Toshiba
18. 07. 2016 12:30 <DIR> TOSHIBA Tempro
1 File(s) 262˙144 bytes
31 Dir(s) 3˙156˙652˙032 bytes free

========= End of CMD: =========

========= dir "%localappdata%" =========

Volume in drive C has no label.
Volume Serial Number is DE7D-B4D2

Directory of C:\Users\Jomko\AppData\Local

14. 03. 2017 20:02 <DIR> .
14. 03. 2017 20:02 <DIR> ..
11. 08. 2016 10:33 <DIR> AbleWord
28. 03. 2016 00:50 <DIR> Adobe
12. 08. 2016 13:34 <DIR> Apps
25. 07. 2016 23:03 <DIR> assembly
13. 02. 2017 11:34 <DIR> Audacity
01. 02. 2017 18:46 <DIR> Avg
01. 02. 2017 18:47 <DIR> AvgSetupLog
10. 12. 2016 21:43 <DIR> Battle.net
01. 08. 2016 21:00 <DIR> Blizzard Entertainment
29. 07. 2016 22:59 <DIR> CEF
13. 03. 2017 00:28 <DIR> CrashDumps
12. 08. 2016 14:53 <DIR> Deployment
28. 08. 2016 00:38 <DIR> Diagnostics
17. 08. 2016 09:16 <DIR> Downloaded Installations
10. 11. 2016 21:15 <DIR> ESET
15. 12. 2016 20:50 <DIR> FileZilla
19. 05. 2016 19:55 <DIR> fontconfig
22. 02. 2017 07:40 125˙832 GDIPFONTCACHEV1.DAT
19. 05. 2016 19:55 <DIR> gegl-0.2
14. 06. 2016 17:47 <DIR> GHISLER
04. 11. 2016 23:07 <DIR> Google
19. 05. 2016 20:10 <DIR> gtk-2.0
12. 07. 2016 16:27 <DIR> IIIQ
18. 07. 2016 14:15 <DIR> Intel_Corporation
28. 03. 2016 00:50 <DIR> Macromedia
30. 07. 2016 09:46 <DIR> MFAData
18. 09. 2016 22:03 <DIR> Microsoft
12. 08. 2016 13:45 <DIR> Microsoft Help
27. 03. 2016 00:49 <DIR> Mozilla
12. 08. 2016 14:52 <DIR> My ClickOnce Applications
18. 07. 2016 09:01 <DIR> NVIDIA
18. 07. 2016 14:21 <DIR> NVIDIA Corporation
18. 08. 2016 14:48 <DIR> Profiles
27. 03. 2016 19:21 <DIR> Programs
11. 08. 2016 14:09 1˙816 recently-used.xbel
29. 04. 2016 21:04 7˙608 Resmon.ResmonCfg
12. 07. 2016 16:30 <DIR> Softomotive
18. 08. 2016 15:14 <DIR> TagCraftMC
14. 03. 2017 20:48 <DIR> Temp
01. 03. 2017 12:02 <DIR> Thunderbird
18. 07. 2016 07:57 <DIR> TOSHIBA
12. 03. 2017 21:34 <DIR> Unity
12. 09. 2016 17:44 <DIR> VirtualStore
12. 07. 2016 16:32 <DIR> Visual Web Ripper
3 File(s) 135˙256 bytes
43 Dir(s) 3˙156˙652˙032 bytes free

========= End of CMD: =========

========= dir "%appdata%" =========

Volume in drive C has no label.
Volume Serial Number is DE7D-B4D2

Directory of C:\Users\Jomko\AppData\Roaming

14. 03. 2017 11:42 <DIR> .
14. 03. 2017 11:42 <DIR> ..
25. 10. 2016 19:42 <DIR> .minecraft
11. 08. 2016 10:21 <DIR> AbleWord
27. 03. 2016 16:19 <DIR> Adobe
05. 03. 2017 23:04 <DIR> Audacity
01. 02. 2017 18:51 <DIR> AVAST Software
30. 07. 2016 09:48 <DIR> AVG
31. 07. 2016 18:55 <DIR> Battle.net
26. 07. 2016 08:03 <DIR> Blender Foundation
14. 09. 2016 10:26 <DIR> Canneverbe Limited
26. 05. 2016 20:51 <DIR> ConsalnetViewer
01. 02. 2017 19:29 <DIR> Corel
03. 04. 2016 19:28 <DIR> CrystalIdea Software
08. 05. 2016 21:33 <DIR> DAEMON Tools Pro
12. 03. 2017 01:47 <DIR> FileZilla
27. 11. 2016 23:21 <DIR> freac
24. 05. 2016 21:55 <DIR> GHISLER
16. 08. 2016 22:55 <DIR> HandBrake
16. 08. 2016 00:29 <DIR> HandBrake Team
26. 03. 2016 23:59 <DIR> Identities
11. 08. 2016 10:00 <DIR> inkscape
18. 07. 2016 12:26 <DIR> InstallShield
27. 03. 2016 22:48 <DIR> Intel
12. 06. 2016 19:29 <DIR> IrfanView
25. 08. 2016 17:30 <DIR> java
21. 02. 2017 21:56 <DIR> LibreOffice
28. 03. 2016 01:17 <DIR> LolClient
27. 03. 2016 16:28 <DIR> LSC
27. 03. 2016 16:28 <DIR> Macromedia
14. 07. 2009 08:54 <DIR> Media Center Programs
28. 03. 2016 23:19 <DIR> Mozilla
13. 03. 2017 00:28 <DIR> MPC-HC
01. 07. 2016 23:13 <DIR> NeoDownloader
08. 07. 2016 12:13 <DIR> Notepad++
15. 08. 2016 01:06 <DIR> NVIDIA
17. 01. 2017 01:29 <DIR> OBS
01. 04. 2016 18:38 <DIR> OpenOffice
17. 08. 2016 08:47 <DIR> Profiles
28. 03. 2016 00:03 <DIR> Riot Games
17. 08. 2016 08:47 <DIR> Smart Application Controller
18. 08. 2016 14:59 <DIR> Sun
01. 03. 2017 11:54 <DIR> Thunderbird
18. 07. 2016 08:27 <DIR> toshiba
24. 02. 2017 15:13 <DIR> tox
30. 07. 2016 09:48 <DIR> TuneUp Software
05. 03. 2017 21:12 <DIR> uTorrent
18. 07. 2016 07:26 <DIR> WinBatch
06. 11. 2016 14:25 <DIR> WinRAR
10. 03. 2017 00:32 <DIR> XnView
0 File(s) 0 bytes
50 Dir(s) 3˙156˙647˙936 bytes free

========= End of CMD: =========

C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 9913468 B
Java, Flash, Steam htmlcache => 506 B
Windows/system/drivers => 322738 B
Edge => 0 B
Chrome => 1736704 B
Firefox => 152048455 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 100249 B
systemprofile32 => 692 B
LocalService => 132244 B
NetworkService => 66228 B
Jomko => 936773 B

RecycleBin => 0 B
EmptyTemp: => 165.6 MB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 20:52:06 ====

#9 Příspěvek od **altrok** » 14 bře 2017 21:10

Mate malo volneho mista na disku. Doporucuji hodne uvolnit

System drive C: has 3 GB (1%) free of 237 GB

Velice doporucuji doinstalovat Internet Explorer 11.

Nakonec jeste uklidime.

Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
Oznacte jen moznost "Remove disinfection tools"
kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

Jomko · #10 Příspěvek od **Jomko** » 14 bře 2017 21:22

Miesto uvolním,
IE 11 doinstalujem aj keď ho používam asi raz za rok

Zatiaľ sa žiadna stránka samovoľne neotvorila

Zatiaľ ďakujem STE SUPER

#11 Příspěvek od **altrok** » 14 bře 2017 21:38

Nejde o jeho pouzivani, ale o jeho provazanost s jadrem operacniho systemu.

Nemate zac, rad jsem pomohl

Mejte se krasne a treba zase nekdy

VIRY.CZ

Firefox sám otvára stránky "only2date.com"

Firefox sám otvára stránky "only2date.com"

Re: Firefox sám otvára stránky "only2date.com"

Re: Firefox sám otvára stránky "only2date.com"

Re: Firefox sám otvára stránky "only2date.com"

Re: Firefox sám otvára stránky "only2date.com"

Re: Firefox sám otvára stránky "only2date.com"

Re: Firefox sám otvára stránky "only2date.com"

Re: Firefox sám otvára stránky "only2date.com"

Re: Firefox sám otvára stránky "only2date.com"

Re: Firefox sám otvára stránky "only2date.com"

Re: Firefox sám otvára stránky "only2date.com"