Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
Filis
Návštěvník
Návštěvník
Příspěvky: 212
Registrován: 21 čer 2005 11:18

Prosím o kontrolu

#1 Příspěvek od Filis »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Uživatel at 2019-01-09 11:24:02
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 122 GB (80%) free of 153 GB
Total RAM: 2013 MB (35% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:24:21, on 9.1.2019
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16737)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\System32\ico.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Microsoft\Skype for Desktop\Skype.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Microsoft\Skype for Desktop\Skype.exe
C:\Program Files\Microsoft\Skype for Desktop\Skype.exe
C:\Program Files\Microsoft\Skype for Desktop\Skype.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Uživatel\Downloads\RSIT.exe
C:\Program Files\trend micro\Uživatel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
O4 - HKLM\..\Run: [AVGUI.exe] "C:\Program Files\AVG\Antivirus\AvLaunch.exe" /gui
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKCU\..\Run: [Skype for Desktop] C:\Program Files\Microsoft\Skype for Desktop\Skype.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{AC74E8F2-6223-4CBD-AC4F-B29A82697137}: NameServer = 10.72.250.10,81.90.168.3
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\aswidsagent.exe
O23 - Service: Služba %1!s! Update (avast) (avast) - AVAST Software - C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba %1!s! Update (avastm) (avastm) - AVAST Software - C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
O23 - Service: AVG Antivirus - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\Antivirus\AVGSvc.exe
O23 - Service: avgbIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\Antivirus\aswidsagent.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google Inc. - C:\Program Files\Google\Chrome\Application\71.0.3578.98\elevation_service.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

--
End of file - 5138 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-02-11 137752]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-02-11 171032]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-02-11 172568]
"Mouse Suite 98 Daemon"=C:\Windows\system32\ICO.EXE [2004-07-14 57344]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2018-11-21 242392]
"AVGUI.exe"=C:\Program Files\AVG\Antivirus\AvLaunch.exe [2019-01-05 270256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Smart Cleaning"=C:\Program Files\CCleaner\CCleaner.exe [2018-12-10 14636224]
"Skype for Desktop"=C:\Program Files\Microsoft\Skype for Desktop\Skype.exe [2018-11-09 49805160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-02-11 228864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221
"NoSimpleNetIDList"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2019-01-08 23:26:24 ----A---- C:\Windows\system32\avgBoot.exe
2019-01-06 16:54:03 ----D---- C:\Program Files\Microsoft

======List of files/folders modified in the last 1 month======

2019-01-09 11:24:04 ----D---- C:\Program Files\trend micro
2019-01-09 10:20:49 ----D---- C:\Windows\Temp
2019-01-09 10:02:09 ----D---- C:\Windows\System32
2019-01-09 10:02:05 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2019-01-09 10:02:03 ----D---- C:\Windows\system32\Macromed
2019-01-08 18:28:31 ----D---- C:\temp
2019-01-06 17:08:28 ----SHD---- C:\System Volume Information
2019-01-06 17:02:58 ----D---- C:\Windows
2019-01-06 17:00:45 ----D---- C:\Windows\system32\config
2019-01-06 16:56:31 ----D---- C:\Windows\inf
2019-01-06 16:55:52 ----D---- C:\Windows\system32\Tasks
2019-01-06 16:54:21 ----D---- C:\Users\Uživatel\AppData\Roaming\Skype
2019-01-06 16:54:19 ----SD---- C:\Users\Uživatel\AppData\Roaming\Microsoft
2019-01-06 16:54:03 ----SHD---- C:\Windows\Installer
2019-01-06 16:54:03 ----RD---- C:\Program Files\Skype
2019-01-06 16:54:03 ----RD---- C:\Program Files
2019-01-06 16:54:03 ----D---- C:\ProgramData\Skype
2019-01-06 16:54:03 ----D---- C:\Program Files\Common Files
2019-01-06 16:53:13 ----D---- C:\Windows\Prefetch
2019-01-06 16:15:24 ----D---- C:\Windows\winsxs
2019-01-06 16:13:24 ----D---- C:\Windows\system32\catroot2
2019-01-06 16:00:49 ----D---- C:\Windows\Minidump
2019-01-06 16:00:49 ----D---- C:\Windows\Logs
2019-01-06 16:00:49 ----D---- C:\Windows\debug
2019-01-06 16:00:02 ----D---- C:\Program Files\CCleaner
2019-01-05 11:23:00 ----D---- C:\Windows\system32\drivers

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswbidsh;aswbidsh; C:\Windows\system32\drivers\aswbidshx.sys [2018-11-21 165384]
R0 aswblog;aswblog; C:\Windows\system32\drivers\aswblogx.sys [2018-11-21 284256]
R0 aswbuniv;aswbuniv; C:\Windows\system32\drivers\aswbunivx.sys [2018-11-21 57904]
R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2018-11-21 72800]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2018-11-21 310200]
R0 avgRvrt;avgRvrt; C:\Windows\system32\drivers\avgRvrt.sys [2018-11-19 73040]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswArPot;aswArPot; C:\Windows\system32\drivers\aswArPot.sys [2018-11-21 167480]
R1 aswbidsdriver;aswbidsdriver; C:\Windows\system32\drivers\aswbidsdriverx.sys [2018-11-21 188976]
R1 aswHdsKe;aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [2018-11-26 183176]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2018-11-21 40688]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2018-11-21 100984]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2018-11-21 784560]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2018-11-21 397992]
R1 avgKbd;avgKbd; C:\Windows\system32\drivers\avgKbd.sys [2018-11-19 40936]
R1 avgSP;avgSP; C:\Windows\system32\drivers\avgSP.sys [2018-11-19 398232]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2018-11-21 135200]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2018-11-21 156936]
R2 avgMonFlt;avgMonFlt; C:\Windows\system32\drivers\avgMonFlt.sys [2018-11-19 135440]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2011-02-11 9036800]
S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 aswHwid;aswHwid; C:\Windows\system32\drivers\aswHwid.sys [2018-11-21 42736]
S3 avgArPot;avgArPot; C:\Windows\system32\drivers\avgArPot.sys [2018-11-19 167728]
S3 avgbidsdriver;avgbidsdriver; C:\Windows\system32\drivers\avgbidsdriverx.sys []
S3 avgbidsh;avgbidsh; C:\Windows\system32\drivers\avgbidshx.sys []
S3 avgblog;avgblog; C:\Windows\system32\drivers\avgblogx.sys []
S3 avgbuniv;avgbuniv; C:\Windows\system32\drivers\avgbunivx.sys []
S3 avgHwid;avgHwid; C:\Windows\system32\drivers\avgHwid.sys [2018-11-19 42984]
S3 avgRdr;avgRdr; C:\Windows\system32\drivers\avgRdr2.sys [2018-11-19 101232]
S3 avgSnx;avgSnx; C:\Windows\system32\drivers\avgSnx.sys [2018-11-19 784800]
S3 avgStm;avgStm; C:\Windows\system32\drivers\avgStm.sys [2018-11-19 157184]
S3 avgVmm;avgVmm; C:\Windows\system32\drivers\avgVmm.sys [2018-11-19 310248]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 usbcamcl;Driver for usbcamcl Device; C:\Windows\system32\DRIVERS\usbcamcl.sys [2011-08-18 28416]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2018-11-21 324000]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [2018-11-21 6799632]
S2 avast;Služba %1!s! Update (avast); C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-04-05 164984]
S2 AVG Antivirus;AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [2019-01-05 309536]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2016-11-06 107848]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2019-01-09 335872]
S3 avastm;Služba %1!s! Update (avastm); C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-04-05 164984]
S3 avgbIDSAgent;avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [2019-01-05 6348656]
S3 GoogleChromeElevationService;Google Chrome Elevation Service; C:\Program Files\Google\Chrome\Application\71.0.3578.98\elevation_service.exe [2018-12-12 375776]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2016-11-06 107848]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service; C:\Windows\system32\IEEtwCollector.exe [2016-03-31 102912]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2017-04-21 47224]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15382
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Prosím o kontrolu

#2 Příspěvek od JaRon »

ahoj,
jeden z dvojice AVG/Avast odinstaluj
+
doinstaluj MSIE11
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Filis
Návštěvník
Návštěvník
Příspěvky: 212
Registrován: 21 čer 2005 11:18

Re: Prosím o kontrolu

#3 Příspěvek od Filis »

AVG odinstalován. Na konci instalace toho doplňku to píše, že se něco nepodařilo.
Mám udělat nějaký log?
Nahoru
Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15382
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Prosím o kontrolu

#4 Příspěvek od JaRon »

vycisti registre CCleanerom, restart a vloz logy FRST
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Filis
Návštěvník
Návštěvník
Příspěvky: 212
Registrován: 21 čer 2005 11:18

Re: Prosím o kontrolu

#5 Příspěvek od Filis »

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 09-01-2019
Ran by Uživatel (09-01-2019 16:18:46)
Running from C:\Users\Uživatel\Downloads
Microsoft Windows 7 Home Premium Service Pack 1 (X86) (2016-04-18 17:02:32)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3484434093-1762594279-2416588269-500 - Administrator - Disabled)
Guest (S-1-5-21-3484434093-1762594279-2416588269-501 - Limited - Disabled)
Uživatel (S-1-5-21-3484434093-1762594279-2416588269-1000 - Administrator - Enabled) => C:\Users\Uživatel

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 32 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 32.0.0.114 - Adobe Systems Incorporated)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 18.8.2356 - AVAST Software)
Avast Secure Browser (HKLM\...\Avast Secure Browser) (Version: 70.1.973.110 - AVAST Software)
Avast Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.4.136.333 - AVAST Software) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.51 - Piriform)
Google Chrome (HKLM\...\Google Chrome) (Version: 71.0.3578.98 - Google Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mouse Suite (HKLM\...\MouseSuite98) (Version: - )
Skype Click to Call (HKLM\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype verze 8.34 (HKLM\...\Skype_is1) (Version: 8.34 - Skype Technologies S.A.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-11-21] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-11-21] (AVAST Software)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-11-21] (AVAST Software)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2011-02-11] (Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-11-21] (AVAST Software)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1D1ACFD2-C492-488B-BDF6-B8D0362FBB9B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2019-01-09] (Adobe Systems Incorporated)
Task: {21191D9C-2B7F-4F4C-9E37-1A8EC7476EBB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-12-10] (Piriform Software Ltd)
Task: {2F7EBCF0-3DEC-4C38-AE58-D3AAAE828B93} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-11-06] (Google Inc.)
Task: {3F85747A-2D2E-4164-9BBE-5C66BCDE763A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-11-06] (Google Inc.)
Task: {4003B08B-A0DD-4A74-B626-0383591DD450} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-04-05] (AVAST Software)
Task: {7CA0B242-002B-4BB3-A9C0-362737943ABB} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-12-10] (Piriform Ltd)
Task: {874CCC1F-5E51-4560-ACC0-AC564B1D74D2} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-11-21] (AVAST Software)
Task: {875357CD-9507-4855-9DD8-D6350D35DFA7} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-04-05] (AVAST Software)
Task: {ABAD304D-8515-4712-99CE-036F6EDE9DF2} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {B2A83C5C-6820-4B29-B87D-FE7A85BF7AA0} - System32\Tasks\{A95AC2B5-3469-473A-9186-125DF609FD0D} => C:\Windows\system32\pcalua.exe -a C:\Users\Uživatel\Downloads\outlook-express-ms-windows-mail.exe -d C:\Users\Uživatel\Downloads
Task: {B67A392B-41D4-454F-9183-95B26CD9DCF8} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [2019-01-09] (AVG Technologies CZ, s.r.o.)
Task: {CB434A15-5AC2-43CD-B625-EA639896F53F} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2019-01-09] (AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\":
WMI:subscription\__EventFilter->BVTFilter:
WMI:subscription\CommandLineEventConsumer->BVTConsumer:

==================== Loaded Modules (Whitelisted) ==============

2018-11-21 12:36 - 2018-11-21 12:36 - 000919256 _____ () C:\Program Files\AVAST Software\Avast\anen.dll
2018-11-21 12:36 - 2018-11-21 12:36 - 000596696 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2019-01-09 14:47 - 2019-01-09 14:47 - 005735056 _____ () C:\Program Files\AVAST Software\Avast\defs\19010902\algo.dll
2018-11-21 12:36 - 2018-11-21 12:36 - 000496344 _____ () C:\Program Files\AVAST Software\Avast\gui_cache.dll
2018-11-21 12:35 - 2018-11-21 12:35 - 000150744 _____ () C:\Program Files\AVAST Software\Avast\hns_tools.dll
2018-11-21 12:36 - 2018-11-21 12:36 - 001112280 _____ () C:\Program Files\AVAST Software\Avast\shepherdsync.dll
2018-03-12 21:01 - 2018-03-12 21:01 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2019-01-06 16:54 - 2018-11-09 19:57 - 001790592 _____ () C:\Program Files\Microsoft\Skype for Desktop\ffmpeg.dll
2019-01-06 16:54 - 2018-11-09 19:57 - 002381152 _____ () \\?\C:\Program Files\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\slimcore\bin\skypert.dll
2019-01-06 16:54 - 2018-11-09 19:57 - 000097224 _____ () \\?\C:\Program Files\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\keytar\build\Release\keytar.node
2019-01-06 16:54 - 2018-11-09 19:57 - 000081864 _____ () \\?\C:\Program Files\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\desktop-idle\build\Release\desktopIdle.node
2019-01-06 16:54 - 2018-11-09 19:57 - 002723872 _____ () C:\Program Files\Microsoft\Skype for Desktop\libglesv2.dll
2019-01-06 16:54 - 2018-11-09 19:57 - 000031776 _____ () C:\Program Files\Microsoft\Skype for Desktop\libegl.dll
2019-01-06 16:54 - 2018-11-09 19:57 - 000409544 _____ () \\?\C:\Program Files\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\@paulcbetts\spellchecker\build\Release\spellchecker.node
2019-01-06 16:54 - 2018-11-09 19:57 - 000138696 _____ () \\?\C:\Program Files\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\keyboard-layout\build\Release\keyboard-layout-manager.node
2018-12-18 10:39 - 2018-12-12 05:58 - 004430304 _____ () C:\Program Files\Google\Chrome\Application\71.0.3578.98\libglesv2.dll
2018-12-18 10:39 - 2018-12-12 05:58 - 000097248 _____ () C:\Program Files\Google\Chrome\Application\71.0.3578.98\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2019-01-05 11:09 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3484434093-1762594279-2416588269-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 10.72.250.10 - 81.90.168.3
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{1E67A092-24DF-462C-999D-74734398EB54}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation)
FirewallRules: [{A338E9A3-8E0B-4C41-A3D5-C22464A54736}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software)
FirewallRules: [{F26C55E6-2A76-4BE6-ADFA-E491B91D9C8C}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software)
FirewallRules: [{70E2D10C-2B14-4F6C-9487-D3305668B2BB}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
FirewallRules: [{5D76BF1E-06FD-4160-891E-515120ADF6D1}] => (Allow) C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe (AVAST Software)
FirewallRules: [{C5754423-32CA-4570-9F38-36B296962350}] => (Allow) C:\Program Files\Microsoft\Skype for Desktop\Skype.exe (Skype Technologies S.A.)
FirewallRules: [{405D8417-D2F1-42A5-A43B-078A8FD48352}] => (Allow) C:\Program Files\Microsoft\Skype for Desktop\Skype.exe (Skype Technologies S.A.)
FirewallRules: [{DEF0B9D8-6B62-4E5D-84B7-37FE6932AB6F}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd)
FirewallRules: [{B0CC4B0C-1193-4FE8-82B8-4328C10805E1}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd)

==================== Restore Points =========================

29-12-2018 12:02:36 Naplánovaný kontrolní bod
06-01-2019 16:42:36 Naplánovaný kontrolní bod
06-01-2019 16:59:52 Operace obnovení
09-01-2019 13:43:46 Instalační služba modulů systému Windows
09-01-2019 13:44:21 Instalační služba modulů systému Windows
09-01-2019 13:45:07 Instalační služba modulů systému Windows
09-01-2019 13:47:02 Instalační služba modulů systému Windows
09-01-2019 13:47:19 Instalační služba modulů systému Windows

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/09/2019 04:10:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/09/2019 02:53:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/09/2019 02:45:50 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/09/2019 01:55:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/09/2019 01:41:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/09/2019 01:38:16 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVG\Antivirus\AavmRpch.dll se nezdařilo.
Závislé sestavení AVG.VC140.CRT,processorArchitecture="x86",publicKeyToken="f92d94485545da78",type="win32",version="14.0.26706.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (01/09/2019 01:37:54 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVG\Antivirus\ashMaiSv.dll se nezdařilo.
Závislé sestavení AVG.VC140.CRT,processorArchitecture="x86",publicKeyToken="f92d94485545da78",type="win32",version="14.0.26706.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (01/09/2019 01:37:54 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\AVG\Antivirus\ashBase.dll se nezdařilo.
Závislé sestavení AVG.VC140.CRT,processorArchitecture="x86",publicKeyToken="f92d94485545da78",type="win32",version="14.0.26706.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.


System errors:
=============
Error: (01/09/2019 01:57:26 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Windows Update byla ukončena s následující chybou:
Třída je zkonfigurována ke spuštění tak, aby bylo ID zabezpečení odlišné od volajícího.

Error: (01/09/2019 01:38:46 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (01/09/2019 01:29:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AVG Antivirus neuspěla při spuštění v důsledku následující chyby:
Spuštění této aplikace se nezdařilo, protože její souběžná konfigurace není správná. Podrobnosti naleznete v protokolu událostí aplikace nebo použijte nástroj příkazového řádku sxstrace.exe.

Error: (01/09/2019 11:54:15 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AVG Antivirus neuspěla při spuštění v důsledku následující chyby:
Spuštění této aplikace se nezdařilo, protože její souběžná konfigurace není správná. Podrobnosti naleznete v protokolu událostí aplikace nebo použijte nástroj příkazového řádku sxstrace.exe.

Error: (01/09/2019 11:17:03 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AVG Antivirus neuspěla při spuštění v důsledku následující chyby:
Spuštění této aplikace se nezdařilo, protože její souběžná konfigurace není správná. Podrobnosti naleznete v protokolu událostí aplikace nebo použijte nástroj příkazového řádku sxstrace.exe.

Error: (01/09/2019 09:53:05 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AVG Antivirus neuspěla při spuštění v důsledku následující chyby:
Spuštění této aplikace se nezdařilo, protože její souběžná konfigurace není správná. Podrobnosti naleznete v protokolu událostí aplikace nebo použijte nástroj příkazového řádku sxstrace.exe.

Error: (01/08/2019 11:36:35 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Windows Update byla ukončena s následující chybou:
Třída je zkonfigurována ke spuštění tak, aby bylo ID zabezpečení odlišné od volajícího.

Error: (01/08/2019 11:34:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AVG Antivirus neuspěla při spuštění v důsledku následující chyby:
Spuštění této aplikace se nezdařilo, protože její souběžná konfigurace není správná. Podrobnosti naleznete v protokolu událostí aplikace nebo použijte nástroj příkazového řádku sxstrace.exe.


==================== Memory info ===========================

Processor: Intel(R) Celeron(R) CPU E3300 @ 2.50GHz
Percentage of memory in use: 87%
Total physical RAM: 2013.24 MB
Available physical RAM: 259.53 MB
Total Virtual: 4026.48 MB
Available Virtual: 1811.95 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:148.95 GB) (Free:121.56 GB) NTFS

\\?\Volume{62a56c7a-119c-11e4-9e5c-806e6f6e6963}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 149.1 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=149 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 09-01-2019
Ran by Uživatel (administrator) on LENOVO_M70E (09-01-2019 16:17:25)
Running from C:\Users\Uživatel\Downloads
Loaded Profiles: Uživatel (Available Profiles: Uživatel)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Primax Electronics Ltd.) C:\Windows\System32\ico.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Skype Technologies S.A.) C:\Program Files\Microsoft\Skype for Desktop\Skype.exe
(Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Skype Technologies S.A.) C:\Program Files\Microsoft\Skype for Desktop\Skype.exe
(Skype Technologies S.A.) C:\Program Files\Microsoft\Skype for Desktop\Skype.exe
(Skype Technologies S.A.) C:\Program Files\Microsoft\Skype for Desktop\Skype.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Mouse Suite 98 Daemon] => C:\Windows\system32\ICO.EXE [57344 2004-07-14] (Primax Electronics Ltd.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242392 2018-11-21] (AVAST Software)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-3484434093-1762594279-2416588269-1000\...\Run: [Skype for Desktop] => C:\Program Files\Microsoft\Skype for Desktop\Skype.exe [49805160 2018-11-09] (Skype Technologies S.A.)
HKU\S-1-5-21-3484434093-1762594279-2416588269-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner.exe [14636224 2018-12-10] (Piriform Software Ltd)
HKU\S-1-5-21-3484434093-1762594279-2416588269-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKLM\Software\Microsoft\Active Setup\Installed Components: [>{D23BF655-7113-446E-9DEA-7928909D9A23}] -> C:\Windows\system32\IEDKCS32.DLL [2016-04-21] (Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> C:\Program Files\AVAST Software\Browser\Application\70.1.973.110\Installer\chrmstp.exe [2019-01-04] (AVAST Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\71.0.3578.98\Installer\chrmstp.exe [2018-12-18] (Google Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\..\Interfaces\{AC74E8F2-6223-4CBD-AC4F-B29A82697137}: [NameServer] 10.72.250.10,81.90.168.3
HKLM\System\...\Parameters\PersistentRoutes: [0.0.0.0,0.0.0.0,10.72.10.1,-1]

Internet Explorer:
==================
HKU\S-1-5-21-3484434093-1762594279-2416588269-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
SearchScopes: HKU\S-1-5-21-3484434093-1762594279-2416588269-1000 -> DefaultScope {4D1F41B3-9AED-4355-867F-86620D2B52A2} URL = hxxp://www.bing.com/search?FORM=U453DF&PC=U453 ... -SearchBox
SearchScopes: HKU\S-1-5-21-3484434093-1762594279-2416588269-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3484434093-1762594279-2416588269-1000 -> {1FBBDBBE-88D0-4E64-B21E-4C22BD671AC6} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3484434093-1762594279-2416588269-1000 -> {4D1F41B3-9AED-4355-867F-86620D2B52A2} URL = hxxp://www.bing.com/search?FORM=U453DF&PC=U453 ... -SearchBox
SearchScopes: HKU\S-1-5-21-3484434093-1762594279-2416588269-1000 -> {62E6DAB6-58BC-4F4C-B79A-7CD9772AB23F} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=Searchmodule_1
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF DefaultProfile: ib2ee7y5.default
FF ProfilePath: C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ib2ee7y5.default [2019-01-09]
FF Homepage: Mozilla\Firefox\Profiles\ib2ee7y5.default -> hxxps://www.seznam.cz/
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-20] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-20] (Google Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR NewTab: Default -> Not-active:"chrome-extension://ejcieceajmcidhcdkgpoihiieceambch/tab/index.html", Not-active:"chrome-extension://ceopoaldcnmhechacafgagdkklcogkgd/product.html"
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default [2019-01-09]
CHR Extension: (Prezentace) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Dokumenty) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Disk Google) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-17]
CHR Extension: (YouTube) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-20]
CHR Extension: (OnlineMapFinder) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ceopoaldcnmhechacafgagdkklcogkgd [2018-04-26]
CHR Extension: (Recepty) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejcieceajmcidhcdkgpoihiieceambch [2018-01-11]
CHR Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2018-12-19]
CHR Extension: (Tabulky) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Dokumenty Google offline) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-15]
CHR Extension: (AVG SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbckjcfnjmoiinpgddefodcighgikkgn [2018-12-18]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (Gmail) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-20]
CHR Extension: (Chrome Media Router) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-12-18]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <not found>
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6799632 2018-11-21] (AVAST Software)
S2 avast; C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-05] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [324000 2018-11-21] (AVAST Software)
S3 avastm; C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-05] (AVAST Software)
S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [102912 2016-03-31] (Microsoft Corporation) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [167480 2018-11-21] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriverx.sys [188976 2018-11-21] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidshx.sys [165384 2018-11-21] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswblogx.sys [284256 2018-11-21] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbunivx.sys [57904 2018-11-21] (AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [183176 2018-11-26] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [42736 2018-11-21] (AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [40688 2018-11-21] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [135200 2018-11-21] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [100984 2018-11-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [72800 2018-11-21] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [784560 2018-11-21] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [397992 2018-11-21] (AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [156936 2018-11-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [310200 2018-11-21] (AVAST Software)
S3 RdpVideoMiniport; C:\Windows\System32\drivers\rdpvideominiport.sys [14848 2012-08-23] (Microsoft Corporation) [File not signed]
S3 usbcamcl; C:\Windows\System32\DRIVERS\usbcamcl.sys [28416 2011-08-18] (usb camera)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()
U3 avgbdisk; no ImagePath
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-01-09 16:17 - 2019-01-09 16:18 - 000013406 _____ C:\Users\Uživatel\Downloads\FRST.txt
2019-01-09 16:17 - 2019-01-09 16:17 - 000000000 ____D C:\FRST
2019-01-09 16:16 - 2019-01-09 16:16 - 001784832 _____ (Farbar) C:\Users\Uživatel\Downloads\FRST.exe
2019-01-09 13:46 - 2019-01-09 13:46 - 032528592 _____ (Microsoft Corporation) C:\Users\Uživatel\Downloads\IE11-Windows6.1-x86-cs-cz (4).exe
2019-01-09 13:45 - 2019-01-09 13:48 - 000000134 _____ C:\Users\Uživatel\Desktop\Poradce při potížích s aplikací Internet Explorer.url
2019-01-09 13:41 - 2019-01-09 13:41 - 032528592 _____ (Microsoft Corporation) C:\Users\Uživatel\Downloads\IE11-Windows6.1-x86-cs-cz (3).exe
2019-01-09 13:40 - 2019-01-09 13:40 - 019299120 _____ (Piriform Software Ltd) C:\Users\Uživatel\Downloads\ccsetup551 (3).exe
2019-01-09 13:37 - 2019-01-09 13:37 - 000000969 _____ C:\Users\Public\Desktop\CCleaner.lnk
2019-01-09 13:37 - 2019-01-09 13:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2019-01-09 13:37 - 2019-01-09 13:37 - 000000000 ____D C:\Program Files\CCleaner
2019-01-09 13:36 - 2019-01-09 13:37 - 019299120 _____ (Piriform Software Ltd) C:\Users\Uživatel\Downloads\ccsetup551 (2).exe
2019-01-09 11:23 - 2019-01-09 11:23 - 001107968 _____ C:\Users\Uživatel\Downloads\RSIT.exe
2019-01-06 16:54 - 2019-01-06 16:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2019-01-06 16:04 - 2019-01-06 16:04 - 019299120 _____ (Piriform Software Ltd) C:\Users\Uživatel\Downloads\ccsetup551 (1).exe
2019-01-06 16:03 - 2019-01-06 16:03 - 000046278 _____ C:\Users\Uživatel\Documents\cc_20190106_160316.reg
2019-01-06 15:59 - 2019-01-06 15:59 - 019299120 _____ (Piriform Software Ltd) C:\Users\Uživatel\Downloads\ccsetup551.exe
2018-12-10 13:08 - 2018-12-10 13:08 - 000274916 _____ C:\Users\Uživatel\Downloads\8057_doplnovani iy.mmatch

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-01-09 16:12 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\inf
2019-01-09 16:11 - 2018-04-05 11:45 - 000000000 ____D C:\Users\Uživatel\AppData\Local\AVAST Software
2019-01-09 16:10 - 2009-07-14 05:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-01-09 15:01 - 2009-07-14 05:34 - 000021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2019-01-09 15:01 - 2009-07-14 05:34 - 000021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2019-01-09 13:39 - 2018-08-05 13:52 - 000000000 ____D C:\Users\Uživatel\AppData\Local\Avg
2019-01-09 13:39 - 2018-08-05 13:49 - 000000000 ____D C:\ProgramData\AVG
2019-01-09 11:24 - 2016-10-02 15:12 - 000000000 ____D C:\Program Files\trend micro
2019-01-09 10:02 - 2016-04-20 17:37 - 000842240 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2019-01-09 10:02 - 2016-04-20 17:37 - 000175104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2019-01-09 10:02 - 2016-04-20 17:37 - 000000000 ____D C:\Windows\system32\Macromed
2019-01-08 18:28 - 2018-02-11 22:34 - 000000000 ____D C:\temp
2019-01-06 16:54 - 2017-03-15 19:53 - 000001268 _____ C:\Users\Public\Desktop\Skype.lnk
2019-01-06 16:54 - 2017-03-15 19:53 - 000000000 ___RD C:\Program Files\Skype
2019-01-06 16:54 - 2016-04-20 15:51 - 000000000 ____D C:\Users\Uživatel\AppData\Roaming\Skype
2019-01-06 16:54 - 2016-04-20 15:50 - 000000000 ____D C:\ProgramData\Skype
2019-01-06 16:00 - 2017-03-20 09:17 - 000000000 ____D C:\Windows\Minidump
2019-01-04 12:31 - 2018-04-05 11:48 - 000002375 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2019-01-04 12:31 - 2018-04-05 11:48 - 000002332 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2018-12-31 14:03 - 2017-09-08 18:13 - 000000000 _____ C:\Windows\system32\last.dump
2018-12-30 23:43 - 2009-07-14 05:53 - 000032600 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-12-18 10:39 - 2016-11-06 18:51 - 000002170 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

==================== Files in the root of some directories =======

2017-10-31 17:05 - 2017-10-31 17:05 - 000000036 _____ () C:\Users\Uživatel\AppData\Local\housecall.guid.cache

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2019-01-03 16:29

==================== End of FRST.txt ============================
Nahoru
Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15382
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Prosím o kontrolu

#6 Příspěvek od JaRon »

citat:
Tvorba fixlistu pro FRST
•Spustte poznamkovy blok (Start-spustit-notepad)
•Zkopirujte skript >>

Kód: Vybrat vše

Start
Task: {B67A392B-41D4-454F-9183-95B26CD9DCF8} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [2019-01-09] (AVG Technologies CZ, s.r.o.)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()
U3 avgbdisk; no ImagePath
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
2019-01-09 13:39 - 2018-08-05 13:52 - 000000000 ____D C:\Users\Uživatel\AppData\Local\Avg
2019-01-09 13:39 - 2018-08-05 13:49 - 000000000 ____D C:\ProgramData\AVG



EmptyTemp:
Reboot:
End
•Ulozte vytvoreny TXT jako fixlist.txt
•Presunte vytvoreny fixlist vedle FRST

:arrow: Spustte znovu FRST.exe
•Kliknete na Fix
•Probehne oprava a vytvori log Fixlog.txt

:arrow: Restart PC a dejte mi sem fixlog.txt
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Filis
Návštěvník
Návštěvník
Příspěvky: 212
Registrován: 21 čer 2005 11:18

Re: Prosím o kontrolu

#7 Příspěvek od Filis »

Udělal jsem a po restartu jsem se nedostal na internet. Nevěda, co jiného udělat, jsem udělal bod obnovy z 9.1.2018 asi 15hod...
Nahoru
Filis
Návštěvník
Návštěvník
Příspěvky: 212
Registrován: 21 čer 2005 11:18

Re: Prosím o kontrolu

#8 Příspěvek od Filis »

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 09-01-2019 01
Ran by Uživatel (administrator) on LENOVO_M70E (10-01-2019 16:55:11)
Running from C:\Users\Uživatel\Downloads
Loaded Profiles: Uživatel (Available Profiles: Uživatel)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Primax Electronics Ltd.) C:\Windows\System32\ico.exe
(Skype Technologies S.A.) C:\Program Files\Microsoft\Skype for Desktop\Skype.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner.exe
(AVAST Software) C:\Program Files\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler.exe
(Skype Technologies S.A.) C:\Program Files\Microsoft\Skype for Desktop\Skype.exe
(Skype Technologies S.A.) C:\Program Files\Microsoft\Skype for Desktop\Skype.exe
(Skype Technologies S.A.) C:\Program Files\Microsoft\Skype for Desktop\Skype.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Mouse Suite 98 Daemon] => C:\Windows\system32\ICO.EXE [57344 2004-07-14] (Primax Electronics Ltd.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242392 2018-11-21] (AVAST Software)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-3484434093-1762594279-2416588269-1000\...\Run: [Skype for Desktop] => C:\Program Files\Microsoft\Skype for Desktop\Skype.exe [49805160 2018-11-09] (Skype Technologies S.A.)
HKU\S-1-5-21-3484434093-1762594279-2416588269-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner.exe [14636224 2018-12-10] (Piriform Software Ltd)
HKU\S-1-5-21-3484434093-1762594279-2416588269-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKLM\Software\Microsoft\Active Setup\Installed Components: [>{D23BF655-7113-446E-9DEA-7928909D9A23}] -> C:\Windows\system32\IEDKCS32.DLL [2016-04-21] (Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> C:\Program Files\AVAST Software\Browser\Application\70.1.973.110\Installer\chrmstp.exe [2019-01-04] (AVAST Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\71.0.3578.98\Installer\chrmstp.exe [2018-12-18] (Google Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\..\Interfaces\{AC74E8F2-6223-4CBD-AC4F-B29A82697137}: [NameServer] 10.72.250.10,81.90.168.3
HKLM\System\...\Parameters\PersistentRoutes: [0.0.0.0,0.0.0.0,10.72.10.1,-1]

Internet Explorer:
==================
HKU\S-1-5-21-3484434093-1762594279-2416588269-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
SearchScopes: HKU\S-1-5-21-3484434093-1762594279-2416588269-1000 -> DefaultScope {4D1F41B3-9AED-4355-867F-86620D2B52A2} URL = hxxp://www.bing.com/search?FORM=U453DF&PC=U453 ... -SearchBox
SearchScopes: HKU\S-1-5-21-3484434093-1762594279-2416588269-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3484434093-1762594279-2416588269-1000 -> {1FBBDBBE-88D0-4E64-B21E-4C22BD671AC6} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3484434093-1762594279-2416588269-1000 -> {4D1F41B3-9AED-4355-867F-86620D2B52A2} URL = hxxp://www.bing.com/search?FORM=U453DF&PC=U453 ... -SearchBox
SearchScopes: HKU\S-1-5-21-3484434093-1762594279-2416588269-1000 -> {62E6DAB6-58BC-4F4C-B79A-7CD9772AB23F} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=Searchmodule_1
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF DefaultProfile: ib2ee7y5.default
FF ProfilePath: C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ib2ee7y5.default [2019-01-10]
FF Homepage: Mozilla\Firefox\Profiles\ib2ee7y5.default -> hxxps://www.seznam.cz/
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-20] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-20] (Google Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR NewTab: Default -> Not-active:"chrome-extension://ejcieceajmcidhcdkgpoihiieceambch/tab/index.html", Not-active:"chrome-extension://ceopoaldcnmhechacafgagdkklcogkgd/product.html"
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default [2019-01-10]
CHR Extension: (Prezentace) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Dokumenty) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Disk Google) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-17]
CHR Extension: (YouTube) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-20]
CHR Extension: (OnlineMapFinder) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ceopoaldcnmhechacafgagdkklcogkgd [2018-04-26]
CHR Extension: (Recepty) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejcieceajmcidhcdkgpoihiieceambch [2018-01-11]
CHR Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2018-12-19]
CHR Extension: (Tabulky) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Dokumenty Google offline) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-15]
CHR Extension: (AVG SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbckjcfnjmoiinpgddefodcighgikkgn [2018-12-18]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (Gmail) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-20]
CHR Extension: (Chrome Media Router) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-12-18]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <not found>
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6799632 2018-11-21] (AVAST Software)
S2 avast; C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-05] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [324000 2018-11-21] (AVAST Software)
S3 avastm; C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-05] (AVAST Software)
S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [102912 2016-03-31] (Microsoft Corporation) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [167480 2018-11-21] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriverx.sys [188976 2018-11-21] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidshx.sys [165384 2018-11-21] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswblogx.sys [284256 2018-11-21] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbunivx.sys [57904 2018-11-21] (AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [183176 2018-11-26] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [42736 2018-11-21] (AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [40688 2018-11-21] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [135200 2018-11-21] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [100984 2018-11-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [72800 2018-11-21] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [784560 2018-11-21] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [397992 2018-11-21] (AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [156936 2018-11-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [310200 2018-11-21] (AVAST Software)
S3 RdpVideoMiniport; C:\Windows\System32\drivers\rdpvideominiport.sys [14848 2012-08-23] (Microsoft Corporation) [File not signed]
S3 usbcamcl; C:\Windows\System32\DRIVERS\usbcamcl.sys [28416 2011-08-18] (usb camera)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()
U3 avgbdisk; no ImagePath
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-01-10 16:54 - 2019-01-10 16:54 - 001785344 _____ (Farbar) C:\Users\Uživatel\Downloads\FRST.exe
2019-01-10 16:20 - 2018-11-21 12:36 - 000323288 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2019-01-10 15:49 - 2019-01-10 15:49 - 000002543 _____ C:\Users\Uživatel\Desktop\Fixlog.txt
2019-01-09 16:18 - 2019-01-09 16:19 - 000019551 _____ C:\Users\Uživatel\Downloads\Addition.txt
2019-01-09 16:17 - 2019-01-10 16:56 - 000012984 _____ C:\Users\Uživatel\Downloads\FRST.txt
2019-01-09 16:17 - 2019-01-10 16:55 - 000000000 ____D C:\FRST
2019-01-09 13:46 - 2019-01-09 13:46 - 032528592 _____ (Microsoft Corporation) C:\Users\Uživatel\Downloads\IE11-Windows6.1-x86-cs-cz (4).exe
2019-01-09 13:45 - 2019-01-09 13:48 - 000000134 _____ C:\Users\Uživatel\Desktop\Poradce při potížích s aplikací Internet Explorer.url
2019-01-09 13:41 - 2019-01-09 13:41 - 032528592 _____ (Microsoft Corporation) C:\Users\Uživatel\Downloads\IE11-Windows6.1-x86-cs-cz (3).exe
2019-01-09 13:40 - 2019-01-09 13:40 - 019299120 _____ (Piriform Software Ltd) C:\Users\Uživatel\Downloads\ccsetup551 (3).exe
2019-01-09 13:37 - 2019-01-09 13:37 - 000000969 _____ C:\Users\Public\Desktop\CCleaner.lnk
2019-01-09 13:37 - 2019-01-09 13:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2019-01-09 13:37 - 2019-01-09 13:37 - 000000000 ____D C:\Program Files\CCleaner
2019-01-09 13:36 - 2019-01-09 13:37 - 019299120 _____ (Piriform Software Ltd) C:\Users\Uživatel\Downloads\ccsetup551 (2).exe
2019-01-09 11:23 - 2019-01-09 11:23 - 001107968 _____ C:\Users\Uživatel\Downloads\RSIT.exe
2019-01-06 16:54 - 2019-01-06 16:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2019-01-06 16:04 - 2019-01-06 16:04 - 019299120 _____ (Piriform Software Ltd) C:\Users\Uživatel\Downloads\ccsetup551 (1).exe
2019-01-06 16:03 - 2019-01-06 16:03 - 000046278 _____ C:\Users\Uživatel\Documents\cc_20190106_160316.reg
2019-01-06 15:59 - 2019-01-06 15:59 - 019299120 _____ (Piriform Software Ltd) C:\Users\Uživatel\Downloads\ccsetup551.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-01-10 16:52 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\inf
2019-01-10 16:25 - 2009-07-14 05:34 - 000021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2019-01-10 16:25 - 2009-07-14 05:34 - 000021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2019-01-10 16:21 - 2016-04-21 14:11 - 000002003 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2019-01-10 16:19 - 2018-04-05 11:45 - 000000000 ____D C:\Users\Uživatel\AppData\Local\AVAST Software
2019-01-10 16:16 - 2016-04-18 17:38 - 000000000 ____D C:\Users\Uživatel
2019-01-10 16:16 - 2009-07-14 05:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-01-10 16:15 - 2018-08-05 13:50 - 000000000 ____D C:\Program Files\Common Files\AVG
2019-01-10 16:15 - 2018-08-05 13:49 - 000000000 ____D C:\ProgramData\AVG
2019-01-10 16:15 - 2017-12-06 15:50 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2019-01-10 16:15 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\system32\NDF
2019-01-10 16:15 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\registration
2019-01-09 19:22 - 2018-02-11 22:34 - 000000000 ____D C:\temp
2019-01-09 13:39 - 2018-08-05 13:52 - 000000000 ____D C:\Users\Uživatel\AppData\Local\Avg
2019-01-09 11:24 - 2016-10-02 15:12 - 000000000 ____D C:\Program Files\trend micro
2019-01-09 10:02 - 2016-04-20 17:37 - 000842240 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2019-01-09 10:02 - 2016-04-20 17:37 - 000175104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2019-01-09 10:02 - 2016-04-20 17:37 - 000000000 ____D C:\Windows\system32\Macromed
2019-01-06 16:54 - 2017-03-15 19:53 - 000001268 _____ C:\Users\Public\Desktop\Skype.lnk
2019-01-06 16:54 - 2017-03-15 19:53 - 000000000 ___RD C:\Program Files\Skype
2019-01-06 16:54 - 2016-04-20 15:51 - 000000000 ____D C:\Users\Uživatel\AppData\Roaming\Skype
2019-01-06 16:54 - 2016-04-20 15:50 - 000000000 ____D C:\ProgramData\Skype
2019-01-06 16:00 - 2017-03-20 09:17 - 000000000 ____D C:\Windows\Minidump
2019-01-04 12:31 - 2018-04-05 11:48 - 000002375 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2019-01-04 12:31 - 2018-04-05 11:48 - 000002332 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2018-12-31 14:03 - 2017-09-08 18:13 - 000000000 _____ C:\Windows\system32\last.dump
2018-12-30 23:43 - 2009-07-14 05:53 - 000032600 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-12-18 10:39 - 2016-11-06 18:51 - 000002170 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

==================== Files in the root of some directories =======

2017-10-31 17:05 - 2017-10-31 17:05 - 000000036 _____ () C:\Users\Uživatel\AppData\Local\housecall.guid.cache

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2019-01-03 16:29

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 09-01-2019 01
Ran by Uživatel (10-01-2019 16:56:26)
Running from C:\Users\Uživatel\Downloads
Microsoft Windows 7 Home Premium Service Pack 1 (X86) (2016-04-18 17:02:32)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3484434093-1762594279-2416588269-500 - Administrator - Disabled)
Guest (S-1-5-21-3484434093-1762594279-2416588269-501 - Limited - Disabled)
Uživatel (S-1-5-21-3484434093-1762594279-2416588269-1000 - Administrator - Enabled) => C:\Users\Uživatel

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 32 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 32.0.0.114 - Adobe Systems Incorporated)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 18.8.2356 - AVAST Software)
Avast Secure Browser (HKLM\...\Avast Secure Browser) (Version: 70.1.973.110 - AVAST Software)
Avast Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.4.136.333 - AVAST Software) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.51 - Piriform)
Google Chrome (HKLM\...\Google Chrome) (Version: 71.0.3578.98 - Google Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mouse Suite (HKLM\...\MouseSuite98) (Version: - )
Skype Click to Call (HKLM\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype verze 8.34 (HKLM\...\Skype_is1) (Version: 8.34 - Skype Technologies S.A.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-11-21] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-11-21] (AVAST Software)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-11-21] (AVAST Software)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2011-02-11] (Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2018-11-21] (AVAST Software)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1D1ACFD2-C492-488B-BDF6-B8D0362FBB9B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2019-01-09] (Adobe Systems Incorporated)
Task: {21191D9C-2B7F-4F4C-9E37-1A8EC7476EBB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-12-10] (Piriform Software Ltd)
Task: {2F7EBCF0-3DEC-4C38-AE58-D3AAAE828B93} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-11-06] (Google Inc.)
Task: {3F85747A-2D2E-4164-9BBE-5C66BCDE763A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-11-06] (Google Inc.)
Task: {4003B08B-A0DD-4A74-B626-0383591DD450} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-04-05] (AVAST Software)
Task: {427B1313-D40E-4181-8602-38C57E4B2633} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-11-21] (AVAST Software)
Task: {7CA0B242-002B-4BB3-A9C0-362737943ABB} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-12-10] (Piriform Ltd)
Task: {875357CD-9507-4855-9DD8-D6350D35DFA7} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-04-05] (AVAST Software)
Task: {ABAD304D-8515-4712-99CE-036F6EDE9DF2} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {B2A83C5C-6820-4B29-B87D-FE7A85BF7AA0} - System32\Tasks\{A95AC2B5-3469-473A-9186-125DF609FD0D} => C:\Windows\system32\pcalua.exe -a C:\Users\Uživatel\Downloads\outlook-express-ms-windows-mail.exe -d C:\Users\Uživatel\Downloads
Task: {B67A392B-41D4-454F-9183-95B26CD9DCF8} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [2019-01-09] (AVG Technologies CZ, s.r.o.)
Task: {CB434A15-5AC2-43CD-B625-EA639896F53F} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2019-01-09] (AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\":
WMI:subscription\__EventFilter->BVTFilter:
WMI:subscription\CommandLineEventConsumer->BVTConsumer:

==================== Loaded Modules (Whitelisted) ==============

2018-11-21 12:36 - 2018-11-21 12:36 - 000919256 _____ () C:\Program Files\AVAST Software\Avast\anen.dll
2018-11-21 12:36 - 2018-11-21 12:36 - 000596696 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2018-11-21 12:36 - 2018-11-21 12:36 - 001112280 _____ () C:\Program Files\AVAST Software\Avast\shepherdsync.dll
2018-11-21 12:36 - 2018-11-21 12:36 - 000496344 _____ () C:\Program Files\AVAST Software\Avast\gui_cache.dll
2018-11-21 12:35 - 2018-11-21 12:35 - 000150744 _____ () C:\Program Files\AVAST Software\Avast\hns_tools.dll
2019-01-10 16:22 - 2019-01-10 16:22 - 005735056 _____ () C:\Program Files\AVAST Software\Avast\defs\19011002\algo.dll
2019-01-06 16:54 - 2018-11-09 19:57 - 001790592 _____ () C:\Program Files\Microsoft\Skype for Desktop\ffmpeg.dll
2019-01-06 16:54 - 2018-11-09 19:57 - 002381152 _____ () \\?\C:\Program Files\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\slimcore\bin\skypert.dll
2019-01-06 16:54 - 2018-11-09 19:57 - 000097224 _____ () \\?\C:\Program Files\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\keytar\build\Release\keytar.node
2019-01-06 16:54 - 2018-11-09 19:57 - 000081864 _____ () \\?\C:\Program Files\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\desktop-idle\build\Release\desktopIdle.node
2018-03-12 21:01 - 2018-03-12 21:01 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2019-01-06 16:54 - 2018-11-09 19:57 - 002723872 _____ () C:\Program Files\Microsoft\Skype for Desktop\libglesv2.dll
2019-01-06 16:54 - 2018-11-09 19:57 - 000031776 _____ () C:\Program Files\Microsoft\Skype for Desktop\libegl.dll
2019-01-06 16:54 - 2018-11-09 19:57 - 000409544 _____ () \\?\C:\Program Files\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\@paulcbetts\spellchecker\build\Release\spellchecker.node
2019-01-06 16:54 - 2018-11-09 19:57 - 000138696 _____ () \\?\C:\Program Files\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\keyboard-layout\build\Release\keyboard-layout-manager.node
2018-12-18 10:39 - 2018-12-12 05:58 - 004430304 _____ () C:\Program Files\Google\Chrome\Application\71.0.3578.98\libglesv2.dll
2018-12-18 10:39 - 2018-12-12 05:58 - 000097248 _____ () C:\Program Files\Google\Chrome\Application\71.0.3578.98\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2019-01-05 11:09 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3484434093-1762594279-2416588269-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 10.72.250.10 - 81.90.168.3
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{1E67A092-24DF-462C-999D-74734398EB54}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation)
FirewallRules: [{70E2D10C-2B14-4F6C-9487-D3305668B2BB}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
FirewallRules: [{5D76BF1E-06FD-4160-891E-515120ADF6D1}] => (Allow) C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe (AVAST Software)
FirewallRules: [{C5754423-32CA-4570-9F38-36B296962350}] => (Allow) C:\Program Files\Microsoft\Skype for Desktop\Skype.exe (Skype Technologies S.A.)
FirewallRules: [{405D8417-D2F1-42A5-A43B-078A8FD48352}] => (Allow) C:\Program Files\Microsoft\Skype for Desktop\Skype.exe (Skype Technologies S.A.)
FirewallRules: [{DEF0B9D8-6B62-4E5D-84B7-37FE6932AB6F}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd)
FirewallRules: [{B0CC4B0C-1193-4FE8-82B8-4328C10805E1}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd)
FirewallRules: [{A338E9A3-8E0B-4C41-A3D5-C22464A54736}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software)
FirewallRules: [{F26C55E6-2A76-4BE6-ADFA-E491B91D9C8C}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software)

==================== Restore Points =========================

29-12-2018 12:02:36 Naplánovaný kontrolní bod
06-01-2019 16:42:36 Naplánovaný kontrolní bod
06-01-2019 16:59:52 Operace obnovení
09-01-2019 13:43:46 Instalační služba modulů systému Windows
09-01-2019 13:44:21 Instalační služba modulů systému Windows
09-01-2019 13:45:07 Instalační služba modulů systému Windows
09-01-2019 13:47:02 Instalační služba modulů systému Windows
09-01-2019 13:47:19 Instalační služba modulů systému Windows
10-01-2019 16:13:23 Operace obnovení

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/10/2019 04:18:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/10/2019 04:12:45 PM) (Source: RasClient) (EventID: 20227) (User: )
Description: CoID={EC9C0693-4DE6-4F1A-9CB3-9399E2C54561}: Uživatel Lenovo_M70e\Uživatel vytočil připojení s názvem Širokopásmové připojení, které se nezdařilo. Kód chyby vrácený při selhání je 651.

Error: (01/10/2019 04:08:30 PM) (Source: RasClient) (EventID: 20227) (User: )
Description: CoID={24DBB02C-F85E-46E4-866E-2DCB9032ED2B}: Uživatel Lenovo_M70e\Uživatel vytočil připojení s názvem Širokopásmové připojení, které se nezdařilo. Kód chyby vrácený při selhání je 651.

Error: (01/10/2019 04:08:27 PM) (Source: RasClient) (EventID: 20227) (User: )
Description: CoID={E07FAD11-6564-4FE9-9DA6-9FC5F0F2E45E}: Uživatel Lenovo_M70e\Uživatel vytočil připojení s názvem Širokopásmové připojení, které se nezdařilo. Kód chyby vrácený při selhání je 651.

Error: (01/10/2019 04:07:25 PM) (Source: RasClient) (EventID: 20227) (User: )
Description: CoID={023458EA-2AD1-484F-9C60-61EECA5AEED7}: Uživatel Lenovo_M70e\Uživatel vytočil připojení s názvem Širokopásmové připojení, které se nezdařilo. Kód chyby vrácený při selhání je 651.

Error: (01/10/2019 04:04:12 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/10/2019 04:01:36 PM) (Source: RasClient) (EventID: 20227) (User: )
Description: CoID={C3835824-B402-4152-AEC4-8028C2BCA3A1}: Uživatel Lenovo_M70e\Uživatel vytočil připojení s názvem Širokopásmové připojení, které se nezdařilo. Kód chyby vrácený při selhání je 651.

Error: (01/10/2019 04:01:12 PM) (Source: RasClient) (EventID: 20227) (User: )
Description: CoID={EE4C752D-1C79-4F69-86DF-2FF6B7297386}: Uživatel Lenovo_M70e\Uživatel vytočil připojení s názvem Širokopásmové připojení, které se nezdařilo. Kód chyby vrácený při selhání je 651.


System errors:
=============
Error: (01/10/2019 10:42:04 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Windows Update přestala během spouštění reagovat.

Error: (01/09/2019 01:57:26 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Windows Update byla ukončena s následující chybou:
Třída je zkonfigurována ke spuštění tak, aby bylo ID zabezpečení odlišné od volajícího.

Error: (01/09/2019 01:38:46 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (01/09/2019 01:29:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AVG Antivirus neuspěla při spuštění v důsledku následující chyby:
Spuštění této aplikace se nezdařilo, protože její souběžná konfigurace není správná. Podrobnosti naleznete v protokolu událostí aplikace nebo použijte nástroj příkazového řádku sxstrace.exe.

Error: (01/09/2019 11:54:15 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AVG Antivirus neuspěla při spuštění v důsledku následující chyby:
Spuštění této aplikace se nezdařilo, protože její souběžná konfigurace není správná. Podrobnosti naleznete v protokolu událostí aplikace nebo použijte nástroj příkazového řádku sxstrace.exe.

Error: (01/09/2019 11:17:03 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AVG Antivirus neuspěla při spuštění v důsledku následující chyby:
Spuštění této aplikace se nezdařilo, protože její souběžná konfigurace není správná. Podrobnosti naleznete v protokolu událostí aplikace nebo použijte nástroj příkazového řádku sxstrace.exe.

Error: (01/09/2019 09:53:05 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AVG Antivirus neuspěla při spuštění v důsledku následující chyby:
Spuštění této aplikace se nezdařilo, protože její souběžná konfigurace není správná. Podrobnosti naleznete v protokolu událostí aplikace nebo použijte nástroj příkazového řádku sxstrace.exe.

Error: (01/08/2019 11:36:35 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Windows Update byla ukončena s následující chybou:
Třída je zkonfigurována ke spuštění tak, aby bylo ID zabezpečení odlišné od volajícího.


==================== Memory info ===========================

Processor: Intel(R) Celeron(R) CPU E3300 @ 2.50GHz
Percentage of memory in use: 67%
Total physical RAM: 2013.24 MB
Available physical RAM: 652.24 MB
Total Virtual: 4026.48 MB
Available Virtual: 2348.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:148.95 GB) (Free:120.25 GB) NTFS

\\?\Volume{62a56c7a-119c-11e4-9e5c-806e6f6e6963}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 149.1 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=149 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================
Nahoru
Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15382
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Prosím o kontrolu

#9 Příspěvek od JaRon »

Ak sa nepodari nainstalovat msie 11, tak to mozme ukoncit, nie je tam ziadna skodna
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Filis
Návštěvník
Návštěvník
Příspěvky: 212
Registrován: 21 čer 2005 11:18

Re: Prosím o kontrolu

#10 Příspěvek od Filis »

Jenže ten log je po bodu obnovy, viz výše...
Nahoru
Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15382
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Prosím o kontrolu

#11 Příspěvek od JaRon »

Mozes zopakovat fixlist, okrem riadku s yukonw7 - ten sa mi tam dostal omylom ,,,
Ale v podstate ide o cistenie kozmeticke, nic zavazne ☺
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Filis
Návštěvník
Návštěvník
Příspěvky: 212
Registrován: 21 čer 2005 11:18

Re: Prosím o kontrolu

#12 Příspěvek od Filis »

Fix result of Farbar Recovery Scan Tool (x86) Version: 12-01-2019
Ran by Uživatel (12-01-2019 20:33:14) Run:1
Running from C:\Users\Uživatel\Desktop
Loaded Profiles: Uživatel (Available Profiles: Uživatel)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
Task: {B67A392B-41D4-454F-9183-95B26CD9DCF8} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [2019-01-09] (AVG Technologies CZ, s.r.o.)
U3 avgbdisk; no ImagePath
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
2019-01-09 13:39 - 2018-08-05 13:52 - 000000000 ____D C:\Users\U�ivatel\AppData\Local\Avg
2019-01-09 13:39 - 2018-08-05 13:49 - 000000000 ____D C:\ProgramData\AVG



EmptyTemp:
Reboot:
End
*****************

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{B67A392B-41D4-454F-9183-95B26CD9DCF8}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B67A392B-41D4-454F-9183-95B26CD9DCF8}" => removed successfully.
C:\Windows\System32\Tasks\AVG\Overseer => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVG\Overseer" => removed successfully.
HKLM\System\CurrentControlSet\Services\avgbdisk => removed successfully.
avgbdisk => service removed successfully.
HKLM\System\CurrentControlSet\Services\MBAMSwissArmy => removed successfully.
MBAMSwissArmy => service removed successfully.
"C:\Users\U�ivatel\AppData\Local\Avg" => not found
C:\ProgramData\AVG => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 2325682 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 0 B
Edge => 0 B
Chrome => 35630729 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 692 B
LocalService => 0 B
NetworkService => 0 B
Uživatel => 22279030 B

RecycleBin => 0 B
EmptyTemp: => 65.4 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 20:33:28 ====
Nahoru
Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15382
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Prosím o kontrolu

#13 Příspěvek od JaRon »

Parada, hotovo
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Filis
Návštěvník
Návštěvník
Příspěvky: 212
Registrován: 21 čer 2005 11:18

Re: Prosím o kontrolu

#14 Příspěvek od Filis »

Super. Díky moc!
Nahoru
Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15382
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Prosím o kontrolu

#15 Příspěvek od JaRon »

Rado sa stalo
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Zamčeno

Zpět na „Preventivní kontroly logů“