VIRY.CZ

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 11-01-2015
Ran by Admin at 2015-01-11 12:30:16 Run:1
Running from C:\Documents and Settings\Admin\Plocha
Loaded Profile: Admin (Available profiles: Admin)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [seznam-listicka-distribuce] => C:\Program Files\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKU\S-1-5-21-1417001333-2146877963-1801674531-1004\...\Run: [Facebook Update] => C:\Documents and Settings\Admin\Local Settings\Data aplikací\Facebook\Update\FacebookUpdate.exe [138096 2014-03-31] (Facebook Inc.)
HKU\S-1-5-21-1417001333-2146877963-1801674531-1004\...\Run: [cz.seznam.software.autoupdate] => C:\Documents and Settings\Admin\Data aplikací\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-1417001333-2146877963-1801674531-1004\...\Run: [cz.seznam.software.szndesktop] => C:\Documents and Settings\Admin\Data aplikací\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-1417001333-2146877963-1801674531-1004\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-1417001333-2146877963-1801674531-1004\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5282584 2014-11-21] (Piriform Ltd)
Startup: C:\Documents and Settings\Admin\Nabídka Start\Programy\Po spuštění\Adobe Gamma.lnk
ShellIconOverlayIdentifiers: [{6238B220-1311-4627-B3DC-55736E5BA95F}] -> {6238B220-1311-4627-B3DC-55736E5BA95F} => C:\WINDOWS\system32\iMobileDisk.dll ()

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1417001333-2146877963-1801674531-1004\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

FF SearchPlugin: C:\Documents and Settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\5a8crgut.default-1402080547765\searchplugins\avira-safesearch.xml
FF Extension: No Name - C:\Documents and Settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\5a8crgut.default-1402080547765\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com [2014-06-06]
FF Extension: Avira Browser Safety - C:\Documents and Settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\5a8crgut.default-1402080547765\Extensions\abs@avira.com [2014-12-11]
FF Extension: Hola Better Internet - C:\Documents and Settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\5a8crgut.default-1402080547765\Extensions\jid1-4P0kohSJxU1qGg@jetpack [2015-01-07]
FF Extension: Avira SafeSearch - C:\Documents and Settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\5a8crgut.default-1402080547765\Extensions\safesearch@avira.com [2014-12-04]
FF Extension: "Manage search engines" button - C:\Documents and Settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\5a8crgut.default-1402080547765\Extensions\jid1-XGhxOf1M8UPpsQ@jetpack.xpi [2015-01-09]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

S3 EverestDriver; \??\C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [X]
S4 IntelIde; No ImagePath
S3 taphss; system32\DRIVERS\taphss.sys [X]
U3 TlntSvr; No ImagePath

C:\WINDOWS\AutoKMS
2015-01-10 13:08 - 2015-01-10 13:08 - 00015356 _____ () C:\Documents and Settings\Admin\Plocha\FRST.txt
2015-01-10 12:54 - 2015-01-10 12:56 - 00029696 _____ () C:\Documents and Settings\Admin\Local Settings\Data aplikací\MSGBOX.EXE
2015-01-10 12:52 - 2015-01-10 12:52 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Admin\Plocha\FRSTLauncher.exe
2015-01-10 12:30 - 2015-01-10 11:28 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2015-01-10 11:32 - 2015-01-10 12:32 - 00124742 _____ () C:\zoek-results.log
2015-01-10 11:28 - 2015-01-10 12:25 - 00000000 ____D () C:\zoek_backup
2015-01-10 10:42 - 2015-01-10 10:44 - 00000000 ____D () C:\rsit
2015-01-09 22:37 - 2015-01-09 22:37 - 00000000 ____D () C:\Program Files\Enigma Software Group
2015-01-09 22:01 - 2015-01-09 22:01 - 00000000 ____D () C:\Program Files\Adware-Removal-Tool
2015-01-09 20:55 - 2015-01-09 23:05 - 00000000 ____D () C:\Documents and Settings\Admin\Data aplikací\26096
2015-01-09 20:55 - 2015-01-09 20:55 - 00000000 ____D () C:\Documents and Settings\Admin\Data aplikací\tricomfi
2015-01-09 20:54 - 2015-01-10 13:06 - 00001712 _____ () C:\WINDOWS\Tasks\RFVEAQN.job
2015-01-09 20:54 - 2015-01-10 12:32 - 00001360 _____ () C:\WINDOWS\Tasks\FCO.job
2015-01-09 20:54 - 2015-01-09 20:54 - 01837024 _____ (HDQ-1.2cV09.01) C:\Documents and Settings\Admin\Data aplikací\RFVEAQN.exe
2015-01-09 20:54 - 2015-01-09 20:54 - 01514976 _____ (HDQ-1.2cV09.01) C:\Documents and Settings\Admin\Data aplikací\FCO.exe

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\AutoKMS.job
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1417001333-2146877963-1801674531-1004Core.job
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1417001333-2146877963-1801674531-1004UA.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job

EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKU\S-1-5-21-1417001333-2146877963-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Run\\Facebook Update => value deleted successfully.
HKU\S-1-5-21-1417001333-2146877963-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.autoupdate => value deleted successfully.
HKU\S-1-5-21-1417001333-2146877963-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.szndesktop => value deleted successfully.
HKU\S-1-5-21-1417001333-2146877963-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value deleted successfully.
HKU\S-1-5-21-1417001333-2146877963-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value deleted successfully.
C:\Documents and Settings\Admin\Nabídka Start\Programy\Po spuštění\Adobe Gamma.lnk => Moved successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\{6238B220-1311-4627-B3DC-55736E5BA95F}" => Key deleted successfully.
"HKCR\CLSID\{6238B220-1311-4627-B3DC-55736E5BA95F}" => Key deleted successfully.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-1417001333-2146877963-1801674531-1004\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
C:\Documents and Settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\5a8crgut.default-1402080547765\searchplugins\avira-safesearch.xml => Moved successfully.
C:\Documents and Settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\5a8crgut.default-1402080547765\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com => Moved successfully.
C:\Documents and Settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\5a8crgut.default-1402080547765\Extensions\abs@avira.com => Moved successfully.
C:\Documents and Settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\5a8crgut.default-1402080547765\Extensions\jid1-4P0kohSJxU1qGg@jetpack => Moved successfully.
C:\Documents and Settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\5a8crgut.default-1402080547765\Extensions\safesearch@avira.com => Moved successfully.
C:\Documents and Settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\5a8crgut.default-1402080547765\Extensions\jid1-XGhxOf1M8UPpsQ@jetpack.xpi => Moved successfully.
"HKLM\SOFTWARE\Google\Chrome\Extensions\flliilndjeohchalpbbcdekjklbdgfkk" => Key deleted successfully.
EverestDriver => Service deleted successfully.
IntelIde => Service deleted successfully.
taphss => Service deleted successfully.
TlntSvr => Service deleted successfully.
C:\WINDOWS\AutoKMS => Moved successfully.
C:\Documents and Settings\Admin\Plocha\FRST.txt => Moved successfully.
C:\Documents and Settings\Admin\Local Settings\Data aplikací\MSGBOX.EXE => Moved successfully.
C:\Documents and Settings\Admin\Plocha\FRSTLauncher.exe => Moved successfully.
C:\WINDOWS\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files\Enigma Software Group => Moved successfully.
C:\Program Files\Adware-Removal-Tool => Moved successfully.
C:\Documents and Settings\Admin\Data aplikací\26096 => Moved successfully.
C:\Documents and Settings\Admin\Data aplikací\tricomfi => Moved successfully.
C:\WINDOWS\Tasks\RFVEAQN.job => Moved successfully.
C:\WINDOWS\Tasks\FCO.job => Moved successfully.
C:\Documents and Settings\Admin\Data aplikací\RFVEAQN.exe => Moved successfully.
C:\Documents and Settings\Admin\Data aplikací\FCO.exe => Moved successfully.
C:\WINDOWS\tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\WINDOWS\tasks\AutoKMS.job => Moved successfully.
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1417001333-2146877963-1801674531-1004Core.job => Moved successfully.
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1417001333-2146877963-1801674531-1004UA.job => Moved successfully.
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job => Moved successfully.
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job => Moved successfully.
EmptyTemp: => Removed 292.5 MB temporary data.


The system needed a reboot.

==== End of Fixlog 12:31:48 ====

Jak se chova PC???

Pracuje o něco rychleji, záseky jsou minimální.

Tak jeste uklidime

DelFix https://toolslib.net/downloads/finish/2/

• Stahnete a spustte
• Ponechte zatrzitkou pouze u volby Remote disinfection tools
• Kliknete na Run

Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

Děkuju za pomoc Zlepšení je znát, doufám, že to chvíli vydrží.
Ještě bych se chtěla zeptat, co všechno by bylo dobré zaškrtnout v CCleaneru?

CCleaner nechte nastaveny jak je, je to proverene a vyzkousene standardni nastaveni

Měla jsem starší verzi a po aktualizaci se to všechno vymazalo, tak teď netuším, co mám zaškrtnout.

Spustte CCleaner --> Možnosti --> Pokročilé --> Obnovit výchozí nastavení