Pomalý notebook, spousta mallware

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
anyb0dy
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 24 Pro 2013 07:51

Pomalý notebook, spousta mallware

#1 Příspěvek od anyb0dy »

Zdravím vespolek :) Přitelkyně mi dala do ruky její notebook s tím že se seká a má tam pořád reklamy. Po odstranění všech programů které neměly počítači a prohlížeči co dělat zmizely reklamy a počítač se o něco zrychlil ale pořád to není ono. Přepínání mezi okny trvá dlouho, stejně tak zapínání filmů apod.. snad mi poradíte :thumbsup:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-11-2014 01
Ran by Morrisek (administrator) on NELLA on 24-11-2014 10:32:54
Running from C:\Users\Morrisek\Desktop
Loaded Profile: Morrisek (Available profiles: Morrisek)
Platform: Windows 8 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\ProgramData\86998342-aefb-4bdb-96ce-74be1e808b51\maintainer.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Morrisek\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [90832 2012-06-07] (ASUS)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5264016 2012-08-16] (VIA)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [363520 2012-08-02] (IVT Corporation)
HKLM-x32\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [366720 2012-08-23] (Alcor Micro Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-09-01] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1895966996-3979838608-3387707149-1001\...\Run: [Price-Horse] => C:\Users\Morrisek\AppData\Local\pricehorse\pricehorse\1.3.13.12\pricehorse.exe
HKU\S-1-5-21-1895966996-3979838608-3387707149-1001\...\Run: [GoogleChromeAutoLaunch_E29A8AEC387363EEEEE1D3C88A3E5333] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [854344 2014-10-22] (Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe (ASUSTeK Computer Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Morrisek\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Morrisek\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Morrisek\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Morrisek\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Morrisek\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Morrisek\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Morrisek\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1895966996-3979838608-3387707149-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
HKU\S-1-5-21-1895966996-3979838608-3387707149-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
HKU\S-1-5-21-1895966996-3979838608-3387707149-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?typ ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp ... XXW04871WV
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.gboxapp.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?typ ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?typ ... earchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTer ... &pc=ASU2JS
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?typ ... earchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTer ... &pc=ASU2JS
SearchScopes: HKLM-x32 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?typ ... earchTerms}
SearchScopes: HKU\S-1-5-21-1895966996-3979838608-3387707149-1001 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?q={searchTerms ... arch_13415
SearchScopes: HKU\S-1-5-21-1895966996-3979838608-3387707149-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://www.trovi.com/Results.aspx?gd=&c ... rms}&SSPV=
SearchScopes: HKU\S-1-5-21-1895966996-3979838608-3387707149-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1895966996-3979838608-3387707149-1001 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?q={searchTerms ... arch_13415
SearchScopes: HKU\S-1-5-21-1895966996-3979838608-3387707149-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?typ ... earchTerms}
SearchScopes: HKU\S-1-5-21-1895966996-3979838608-3387707149-1001 -> {57164449-C9A2-44D3-81E8-41A016E1778B} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
BHO: No Name -> {2bcc0558-ed56-42af-b2b0-e8d95ac4cbff} -> No File
BHO: No Name -> {44427915-1682-4967-b978-f36660d2757f} -> No File
BHO: No Name -> {5d55d8a8-9142-437a-bb8a-fbbd2edcd96c} -> No File
BHO: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> No File
BHO: No Name -> {c111e45e-31ee-467f-8a16-1033e69f4bbc} -> No File
BHO: No Name -> {e8740fd2-0cf0-46d5-bfec-0f3bef1631c0} -> No File
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: No Name -> {2bcc0558-ed56-42af-b2b0-e8d95ac4cbff} -> No File
BHO-x32: No Name -> {44427915-1682-4967-b978-f36660d2757f} -> No File
BHO-x32: No Name -> {5d55d8a8-9142-437a-bb8a-fbbd2edcd96c} -> No File
BHO-x32: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> No File
BHO-x32: No Name -> {c111e45e-31ee-467f-8a16-1033e69f4bbc} -> No File
BHO-x32: No Name -> {e8740fd2-0cf0-46d5-bfec-0f3bef1631c0} -> No File
BHO-x32: No Name -> {FCE3FA8B-BA81-467C-81D8-E43C00D1BC71} -> No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\skype4com.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Morrisek\AppData\Roaming\Mozilla\Firefox\Profiles\qv7havmn.default
FF DefaultSearchEngine: Centrum.cz
FF DefaultSearchEngine: Seznam
FF DefaultSearchUrl: hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}&
FF SearchEngineOrder.1: Seznam
FF Keyword.URL: user_pref("keyword.URL","");
FF NewTab: user_pref("browser.newtab.url","");
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF user.js: detected! => C:\Users\Morrisek\AppData\Roaming\Mozilla\Firefox\Profiles\qv7havmn.default\user.js
FF SearchPlugin: C:\Users\Morrisek\AppData\Roaming\Mozilla\Firefox\Profiles\qv7havmn.default\searchplugins\seznam-avast.xml
FF Extension: amcontextmenuloucypher - C:\Users\Morrisek\AppData\Roaming\Mozilla\Firefox\Profiles\qv7havmn.default\Extensions\amcontextmenu@loucypher [2014-11-19]
FF Extension: App Lid - C:\Users\Morrisek\AppData\Roaming\Mozilla\Firefox\Profiles\qv7havmn.default\Extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com [2014-11-15]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: No Name - C:\Users\Morrisek\AppData\Roaming\Mozilla\Firefox\Profiles\qv7havmn.default\extensions\warnerroberts@hotmail.com [Not Found]
FF Extension: No Name - C:\Users\Morrisek\AppData\Roaming\Mozilla\Firefox\Profiles\qv7havmn.default\extensions\ROUAILDE73397174@UXGZI17268980.com [Not Found]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]

Chrome:
=======
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxp://klient.ppl.cz/", "hxxp://google.com/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Morrisek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Color Dripping) - C:\Users\Morrisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\afdjgcfonmljobnnhbhiacipngbhblgi [2014-08-02]
CHR Extension: (Angry Birds) - C:\Users\Morrisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-08-02]
CHR Extension: (Tlumočník pro všechny jazyky) - C:\Users\Morrisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\amdeidgbmcliegnpcbbkhlflkbdpomhk [2014-08-02]
CHR Extension: (Adblock Plus) - C:\Users\Morrisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-08-02]
CHR Extension: (TV program) - C:\Users\Morrisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\eggkgjblbjpigonjpmblphnackhfigbo [2014-08-02]
CHR Extension: (Peněženka Google) - C:\Users\Morrisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-02]
CHR Extension: (Bloxorz) - C:\Users\Morrisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\phiaicokjaoaobiobphcfkmbeiejdang [2014-08-02]
CHR Extension: (GoSSave) - C:\Users\Morrisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\poagobgefmnjnabhbllabkccmjjndlkp [2014-09-20]
CHR Extension: (GCH Předpověď počasí.) - C:\Users\Morrisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pobcbokjdifiefbdkmnhfbjnmbleiofa [2014-08-02]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1544192 2012-08-02] (IVT Corporation) [File not signed]
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2012-07-10] (IVT Corporation) [File not signed]
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-11-15] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-11-15] (globalUpdate) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MaintainerSvc2.48.1114611; C:\ProgramData\86998342-aefb-4bdb-96ce-74be1e808b51\maintainer.exe [123632 2014-11-24] ()
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27792 2012-08-14] (VIA Technologies, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16032 2014-09-22] (Microsoft Corporation)
S2 d0e87c27; "C:\Windows\system32\rundll32.exe" "c:\progra~2\sw-boo~1\AssistantSvc.dll",service

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 athur; C:\Windows\system32\DRIVERS\athuw8x.sys [2919936 2013-06-02] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [65784 2013-04-16] (ASUS Corporation)
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
U4 BthAvrcpTg; No ImagePath
U4 BthHFEnum; No ImagePath
U4 bthhfhid; No ImagePath
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48352 2012-07-11] (Ralink Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [695392 2012-08-05] (Ralink Technology, Corp.)
R1 {2169981c-4403-4a8d-a144-e936eff23fce}Gw64; C:\Windows\System32\drivers\{2169981c-4403-4a8d-a144-e936eff23fce}Gw64.sys [48784 2014-10-30] (StdLib)
R1 {e0c89f91-0178-4464-8daf-bec566dd2d9a}Gw64; C:\Windows\System32\drivers\{e0c89f91-0178-4464-8daf-bec566dd2d9a}Gw64.sys [48784 2014-11-01] (StdLib)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)
U0 msahci; No ImagePath
R4 SPDRIVER_1.37.0.1404; \??\C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.1404\jsdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-24 10:32 - 2014-11-24 10:33 - 00021443 _____ () C:\Users\Morrisek\Desktop\FRST.txt
2014-11-24 10:28 - 2014-11-24 10:28 - 00112640 _____ (forum.viry.cz) C:\Users\Morrisek\Desktop\FRSTLauncher.exe
2014-11-24 10:23 - 2014-11-24 10:33 - 00000000 ____D () C:\FRST
2014-11-24 10:22 - 2014-11-24 10:23 - 02118144 _____ (Farbar) C:\Users\Morrisek\Desktop\FRST64.exe
2014-11-23 09:28 - 2014-11-23 09:28 - 00003098 _____ () C:\Windows\System32\Tasks\{DF56E8BA-F06C-4190-B796-4AAC4FD839C8}
2014-11-23 09:25 - 2014-11-23 09:25 - 312019809 _____ () C:\Windows\MEMORY.DMP
2014-11-23 09:25 - 2014-11-23 09:25 - 00283800 _____ () C:\Windows\Minidump\112314-23921-01.dmp
2014-11-23 09:25 - 2014-11-23 09:25 - 00000000 ____D () C:\Windows\Minidump
2014-11-23 09:19 - 2014-11-23 09:19 - 00000000 ____D () C:\Windows\system32\log
2014-11-19 18:58 - 2014-11-08 12:22 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-19 18:58 - 2014-11-08 12:21 - 00827904 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 18:58 - 2014-11-08 07:57 - 00187904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-19 18:58 - 2014-11-08 07:56 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-16 14:03 - 2014-10-30 01:53 - 00713672 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-16 14:03 - 2014-10-30 01:53 - 00106432 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-15 15:45 - 2014-11-15 15:46 - 00000000 ____D () C:\Users\Morrisek\Desktop\Nová složka
2014-11-15 14:29 - 2014-11-15 14:29 - 01499040 _____ (Object Browser) C:\Users\Morrisek\AppData\Roaming\ZDBEDRP.exe
2014-11-15 14:28 - 2014-11-15 14:28 - 01981344 _____ (Object Browser) C:\Users\Morrisek\AppData\Roaming\OZWDNTC.exe
2014-11-15 14:23 - 2014-11-24 10:17 - 00000000 ____D () C:\Users\Morrisek\AppData\Local\WebPlayer
2014-11-15 14:20 - 2014-11-22 14:52 - 00000926 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-11-15 14:20 - 2014-11-15 14:47 - 00003898 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-11-15 14:19 - 2014-11-24 10:15 - 00000922 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-11-15 14:19 - 2014-11-15 14:47 - 00003662 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-11-15 14:19 - 2014-11-15 14:19 - 00000000 ____D () C:\Users\Morrisek\AppData\Local\globalUpdate
2014-11-15 14:19 - 2014-11-15 14:19 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-11-15 14:18 - 2014-11-20 06:57 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-11-15 14:18 - 2014-11-15 14:18 - 00000000 ____D () C:\Users\Morrisek\AppData\Roaming\Ashampoo
2014-11-15 14:18 - 2014-11-15 14:18 - 00000000 ____D () C:\Users\Morrisek\AppData\Local\ashampoo
2014-11-15 14:17 - 2014-11-24 10:13 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
2014-11-15 14:17 - 2014-11-15 14:17 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper
2014-11-15 14:16 - 2014-11-24 10:16 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
2014-11-15 14:16 - 2014-11-15 14:16 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2014-11-15 14:14 - 2014-11-15 14:14 - 00000000 ____D () C:\Users\Morrisek\AppData\Local\CrashRpt
2014-11-15 14:13 - 2014-11-20 06:58 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-11-15 14:11 - 2014-11-20 06:58 - 00000000 ____D () C:\Users\Morrisek\AppData\Roaming\Seznam.cz
2014-11-15 14:10 - 2014-11-15 14:12 - 00000000 ____D () C:\Users\Morrisek\AppData\Roaming\DeepBurner
2014-11-15 14:04 - 2014-11-15 14:05 - 02849488 _____ (Astonsoft Ltd. ) C:\Users\Morrisek\Desktop\DeepBurner1.exe
2014-11-15 12:42 - 2014-10-11 08:45 - 10115072 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-11-15 12:42 - 2014-10-11 08:44 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-15 12:42 - 2014-10-11 08:44 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-11-15 12:42 - 2014-10-11 08:43 - 02307072 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-11-15 12:42 - 2014-10-11 06:58 - 08858624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-11-15 12:42 - 2014-10-11 06:57 - 02416640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-11-15 12:42 - 2014-10-11 06:57 - 00295424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-11-15 12:42 - 2014-10-11 06:56 - 02037760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-11-15 12:41 - 2014-09-22 06:53 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-11-15 12:41 - 2014-08-26 23:08 - 00270024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-11-15 00:06 - 2014-09-25 00:29 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-15 00:06 - 2014-09-25 00:29 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2014-11-15 00:06 - 2014-09-25 00:01 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-15 00:06 - 2014-09-25 00:01 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2014-11-15 00:06 - 2014-08-22 00:56 - 01418752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-15 00:06 - 2014-08-22 00:27 - 01845760 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-15 00:05 - 2014-10-11 09:35 - 00171840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-15 00:05 - 2014-10-11 08:44 - 03248640 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-11-15 00:05 - 2014-10-11 08:44 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-11-15 00:05 - 2014-10-11 08:43 - 01281536 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-15 00:05 - 2014-10-11 06:57 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2014-11-15 00:05 - 2014-10-11 06:41 - 00713728 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-15 00:05 - 2014-10-11 06:41 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-15 00:05 - 2014-10-11 06:05 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-15 00:05 - 2014-10-11 06:04 - 00713728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-15 00:05 - 2014-10-02 00:05 - 04068864 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-15 00:04 - 2014-10-23 13:47 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-15 00:04 - 2014-10-23 12:04 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-15 00:04 - 2014-10-18 09:44 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-15 00:04 - 2014-10-18 08:05 - 00567808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-11-15 00:04 - 2014-10-03 02:21 - 00522728 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-15 00:04 - 2014-10-02 23:29 - 00783872 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-15 00:04 - 2014-10-02 23:29 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-15 00:04 - 2014-10-02 23:29 - 00169472 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-11-15 00:03 - 2014-09-13 07:24 - 02233152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-11-15 00:03 - 2014-09-06 01:46 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml
2014-11-15 00:03 - 2014-09-03 03:48 - 00457728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-11-15 00:03 - 2014-09-03 03:48 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2014-11-15 00:03 - 2014-09-03 03:22 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-11-15 00:03 - 2014-09-03 03:21 - 00623104 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-11-15 00:03 - 2014-09-03 03:21 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-11-15 00:03 - 2014-08-29 05:17 - 02043392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-11-15 00:03 - 2014-08-29 05:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-11-15 00:03 - 2014-08-29 05:04 - 02837504 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-11-15 00:03 - 2014-08-29 05:04 - 00309248 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-11-15 00:03 - 2014-08-28 07:04 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSCOMEX.dll
2014-11-15 00:03 - 2014-08-28 07:04 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll
2014-11-15 00:03 - 2014-08-28 06:59 - 00616448 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
2014-11-15 00:03 - 2014-08-28 06:59 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
2014-11-15 00:03 - 2014-08-28 06:59 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll
2014-11-15 00:03 - 2014-08-28 06:59 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\FXST30.dll
2014-11-15 00:03 - 2014-07-24 14:12 - 00328512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-11-15 00:02 - 2014-10-26 02:56 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-15 00:02 - 2014-10-26 02:56 - 01409536 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-15 00:02 - 2014-10-26 02:55 - 19284480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-15 00:02 - 2014-10-26 02:54 - 15399424 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-15 00:02 - 2014-10-26 02:54 - 02655232 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-15 00:02 - 2014-10-26 01:36 - 01762816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-15 00:02 - 2014-10-26 01:35 - 14368768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-15 00:02 - 2014-10-26 01:34 - 13758464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-15 00:02 - 2014-10-26 01:34 - 02055168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-15 00:01 - 2014-10-26 02:56 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-11-15 00:01 - 2014-10-26 02:56 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-11-15 00:01 - 2014-10-26 02:56 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-15 00:01 - 2014-10-26 02:55 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-15 00:01 - 2014-10-26 02:55 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-15 00:01 - 2014-10-26 02:55 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-15 00:01 - 2014-10-26 02:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-15 00:01 - 2014-10-26 02:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-11-15 00:01 - 2014-10-26 02:54 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-15 00:01 - 2014-10-26 02:54 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-15 00:01 - 2014-10-26 02:54 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-15 00:01 - 2014-10-26 02:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-11-15 00:01 - 2014-10-26 02:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-15 00:01 - 2014-10-26 02:54 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-15 00:01 - 2014-10-26 02:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-15 00:01 - 2014-10-26 02:53 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-15 00:01 - 2014-10-26 01:35 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-15 00:01 - 2014-10-26 01:35 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-15 00:01 - 2014-10-26 01:35 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-15 00:01 - 2014-10-26 01:35 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-15 00:01 - 2014-10-26 01:35 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-11-15 00:01 - 2014-10-26 01:34 - 02861568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-15 00:01 - 2014-10-26 01:34 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-15 00:01 - 2014-10-26 01:34 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-11-15 00:01 - 2014-10-26 01:34 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-15 00:01 - 2014-10-26 01:34 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-15 00:01 - 2014-10-26 01:34 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-15 00:01 - 2014-10-26 01:34 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-11-15 00:01 - 2014-10-26 01:34 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-15 00:01 - 2014-10-26 01:34 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-15 00:01 - 2014-10-26 01:34 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-15 00:01 - 2014-10-26 01:19 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-15 00:01 - 2014-10-26 01:13 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-15 00:01 - 2014-10-25 22:48 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2014-11-08 14:38 - 2014-11-08 14:39 - 00001566 _____ () C:\Windows\comsetup.log
2014-11-08 14:30 - 2014-11-08 14:47 - 00020958 _____ () C:\Windows\diagwrn.xml
2014-11-08 14:30 - 2014-11-08 14:47 - 00020958 _____ () C:\Windows\diagerr.xml
2014-11-06 19:57 - 2014-11-08 14:47 - 00382993 _____ () C:\Windows\setupact.log
2014-11-06 19:57 - 2014-11-06 19:57 - 00000000 _____ () C:\Windows\setuperr.log
2014-11-05 14:15 - 2014-11-05 14:15 - 00000000 ____D () C:\ProgramData\374311380
2014-11-03 19:34 - 2014-11-03 19:38 - 00000000 ____D () C:\Users\Morrisek\Desktop\hudba
2014-11-03 15:33 - 2014-11-03 15:34 - 00000000 ____D () C:\Users\Morrisek\AppData\Roaming\DropboxMaster
2014-11-03 15:32 - 2014-11-03 15:32 - 00000000 ____D () C:\Users\Morrisek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-11-03 15:27 - 2014-11-03 15:34 - 00000000 ____D () C:\Users\Morrisek\AppData\Roaming\Dropbox
2014-11-03 15:00 - 2014-11-16 13:55 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-11-02 11:31 - 2014-11-23 13:43 - 00002319 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-02 11:31 - 2014-11-02 11:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-02 11:28 - 2014-11-02 11:28 - 00880272 _____ (Google Inc.) C:\Users\Morrisek\Downloads\ChromeSetup.exe
2014-11-01 11:16 - 2014-11-01 00:49 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{e0c89f91-0178-4464-8daf-bec566dd2d9a}Gw64.sys
2014-11-01 09:25 - 2013-06-27 10:59 - 00000000 ____D () C:\Users\Morrisek\Downloads\firefox
2014-11-01 09:24 - 2014-11-01 09:24 - 17328816 _____ (Adobe Systems Incorporated) C:\Users\Morrisek\Downloads\install_flash_player_ax.exe
2014-11-01 09:24 - 2014-11-01 09:24 - 00384529 _____ () C:\Users\Morrisek\Downloads\Lista_centrum.exe
2014-11-01 09:22 - 2014-11-01 09:23 - 00733344 _____ () C:\Users\Morrisek\Downloads\flashplayer-lista-centrumcz.exe
2014-11-01 09:22 - 2014-11-01 09:22 - 00000000 ____D () C:\Users\Morrisek\AppData\Local\Macromedia
2014-11-01 09:20 - 2014-11-24 01:47 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-01 09:20 - 2014-11-11 21:47 - 00003802 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-01 09:20 - 2014-11-01 09:20 - 00000000 ____D () C:\ProgramData\McAfee
2014-11-01 09:19 - 2014-11-01 09:20 - 00000000 ____D () C:\Users\Morrisek\AppData\Local\Adobe
2014-11-01 09:03 - 2014-11-03 16:15 - 00000000 ____D () C:\ProgramData\dealster
2014-11-01 07:20 - 2014-11-01 07:20 - 00000000 ____D () C:\Users\Morrisek\AppData\Roaming\Mozilla
2014-11-01 07:20 - 2014-11-01 07:20 - 00000000 ____D () C:\Users\Morrisek\AppData\Local\Mozilla
2014-11-01 07:20 - 2014-11-01 07:20 - 00000000 ____D () C:\ProgramData\Mozilla
2014-10-31 19:46 - 2014-11-24 10:16 - 00000000 ____D () C:\ProgramData\86998342-aefb-4bdb-96ce-74be1e808b51
2014-10-31 19:19 - 2014-10-31 19:19 - 00000000 ____D () C:\ProgramData\WorldWideCoupon
2014-10-31 18:41 - 2014-10-30 22:52 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{2169981c-4403-4a8d-a144-e936eff23fce}Gw64.sys
2014-10-31 17:41 - 2014-10-31 17:41 - 00000000 ____D () C:\Users\Morrisek\Documents\Optimizer Pro
2014-10-31 17:40 - 2014-10-31 17:40 - 00004026 _____ () C:\Windows\System32\Tasks\LaunchSignup
2014-10-31 17:40 - 2014-10-31 17:40 - 00000000 ____D () C:\Users\Morrisek\AppData\Local\pricehorse
2014-10-31 17:12 - 2014-11-03 16:15 - 00000000 ____D () C:\ProgramData\SaveNewaAppz
2014-10-30 15:31 - 2014-10-30 15:33 - 00000000 ____D () C:\Users\Morrisek\Desktop\fotky iphone
2014-10-30 15:20 - 2014-10-31 16:53 - 00000000 ____D () C:\Windows\system32\AutoUpdateLicense
2014-10-29 22:26 - 2014-10-22 04:34 - 00010777 _____ () C:\Windows\system32\AutoconfigV2.cab
2014-10-29 22:26 - 2014-10-22 04:33 - 00581016 _____ (Microsoft Corporation) C:\Windows\system32\AutoUpdate.exe
2014-10-29 22:26 - 2014-10-22 04:33 - 00462760 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe
2014-10-29 22:26 - 2014-10-22 02:08 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-10-29 22:26 - 2014-10-22 02:08 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-29 22:26 - 2014-10-22 02:01 - 00695808 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-10-29 22:26 - 2014-10-22 02:01 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2014-10-29 22:26 - 2014-10-22 02:01 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-29 22:26 - 2014-10-22 02:00 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2014-10-28 12:17 - 2014-11-15 13:51 - 00000000 ____D () C:\Users\Morrisek\AppData\Local\Nero
2014-10-28 12:17 - 2014-10-28 12:23 - 00000000 ____D () C:\Users\Morrisek\AppData\Local\Nero_AG
2014-10-28 12:16 - 2014-10-28 12:44 - 00000000 ____D () C:\Users\Morrisek\AppData\Roaming\Nero
2014-10-28 12:05 - 2014-11-15 14:04 - 00000000 ____D () C:\ProgramData\Nero
2014-10-28 12:04 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-10-28 12:03 - 2014-10-28 12:03 - 00000000 ____D () C:\ProgramData\Package Cache
2014-10-28 12:03 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-10-28 12:03 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-10-28 12:03 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-10-28 12:03 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-10-26 17:25 - 2014-11-16 14:02 - 00281440 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-25 22:05 - 2014-11-03 16:15 - 00000000 ____D () C:\ProgramData\GOOSavE
2014-10-25 21:45 - 2014-10-25 21:45 - 00000000 ____D () C:\ProgramData\dokhgceaeonpboflihdlgpofhbbannci
2014-10-25 08:40 - 2014-10-25 08:40 - 00000000 ____D () C:\ProgramData\Ads Remover

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-24 10:34 - 2014-08-02 09:48 - 00000914 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-24 10:22 - 2012-08-02 19:06 - 00727488 _____ () C:\Windows\system32\perfh005.dat
2014-11-24 10:22 - 2012-08-02 19:06 - 00148006 _____ () C:\Windows\system32\perfc005.dat
2014-11-24 10:22 - 2012-07-26 08:28 - 01714430 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-24 10:20 - 2014-07-31 16:56 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1895966996-3979838608-3387707149-1001
2014-11-24 10:18 - 2012-08-10 10:49 - 00000739 _____ () C:\Windows\SysWOW64\bscs.ini
2014-11-24 10:15 - 2014-08-02 09:48 - 00000910 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-24 10:15 - 2014-07-31 16:51 - 00000380 _____ () C:\Users\Morrisek\AppData\Roaming\sp_data.sys
2014-11-24 10:15 - 2012-09-16 10:21 - 00004268 _____ () C:\Windows\SysWOW64\LOCALSERVICE.INI
2014-11-24 10:15 - 2012-09-16 10:21 - 00000043 _____ () C:\Windows\SysWOW64\LOCALDEVICE.INI
2014-11-24 10:14 - 2012-08-02 14:24 - 00337938 _____ () C:\Windows\PFRO.log
2014-11-24 10:14 - 2012-07-26 08:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-24 10:13 - 2014-07-31 16:48 - 00000000 ____D () C:\Users\Morrisek
2014-11-24 10:13 - 2014-07-31 16:46 - 01355615 _____ () C:\Windows\WindowsUpdate.log
2014-11-24 10:13 - 2012-09-16 10:26 - 00000000 ____D () C:\ProgramData\Temp
2014-11-24 10:10 - 2012-09-16 10:18 - 00000000 ____D () C:\Program Files (x86)\AmIcoSingLun
2014-11-24 10:09 - 2012-08-04 18:37 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-11-24 10:07 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\sru
2014-11-24 10:05 - 2014-08-03 16:05 - 00000000 ____D () C:\Users\Morrisek\AppData\Roaming\vlc
2014-11-23 09:20 - 2014-07-31 16:50 - 00001640 _____ () C:\Users\Morrisek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-22 12:19 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-19 19:10 - 2012-07-26 08:59 - 00000000 ____D () C:\Windows\CbsTemp
2014-11-16 15:25 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\rescache
2014-11-16 14:00 - 2012-07-26 06:26 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-11-16 13:58 - 2012-07-26 09:12 - 00000000 ___RD () C:\Windows\ToastData
2014-11-16 13:58 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-16 13:58 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-16 13:58 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-16 13:58 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-15 16:46 - 2014-08-03 20:33 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-15 16:37 - 2014-08-03 20:33 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-12 17:40 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-11-08 14:47 - 2012-07-26 06:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-11-08 14:45 - 2012-07-26 09:13 - 00004555 _____ () C:\Windows\DtcInstall.log
2014-11-08 14:38 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\Registration
2014-11-08 14:33 - 2014-09-24 21:41 - 00000000 ___HD () C:\$Windows.~BT
2014-11-05 14:38 - 2012-08-04 18:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2014-11-05 14:38 - 2012-08-04 18:37 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-11-05 14:24 - 2014-09-20 21:16 - 00000000 ____D () C:\ProgramData\YeoutubEAAddBloocke
2014-11-05 14:24 - 2014-09-20 21:14 - 00000000 ____D () C:\ProgramData\72b4b172461872fe
2014-11-05 14:20 - 2014-09-20 21:15 - 00000000 ____D () C:\ProgramData\GoSAve
2014-11-03 19:12 - 2012-07-26 06:26 - 00000226 _____ () C:\Windows\win.ini
2014-11-03 16:15 - 2014-10-14 16:48 - 00000000 ____D () C:\ProgramData\RoboSavver
2014-11-03 16:15 - 2014-10-05 09:53 - 00000000 ____D () C:\ProgramData\Fun2Suaavee
2014-11-03 16:15 - 2014-09-27 10:35 - 00000000 ____D () C:\ProgramData\ReeGularoDeals
2014-11-02 11:30 - 2014-08-02 09:48 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-02 11:29 - 2014-08-02 09:48 - 00003886 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-02 11:29 - 2014-08-02 09:48 - 00003650 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-10-30 15:20 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\WinStore
2014-10-30 12:25 - 2014-08-08 20:21 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-28 12:14 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\Cursors

Files to move or delete:
====================
C:\ProgramData\SetStretch.exe


Some content of TEMP:
====================
C:\Users\Morrisek\AppData\Local\Temp\appshat_generic.exe
C:\Users\Morrisek\AppData\Local\Temp\cabex.dll
C:\Users\Morrisek\AppData\Local\Temp\CloudBackup1366.exe
C:\Users\Morrisek\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpjkdah5.dll
C:\Users\Morrisek\AppData\Local\Temp\listicka-partner-13415-1.1.2-offline.exe
C:\Users\Morrisek\AppData\Local\Temp\playsetup.exe
C:\Users\Morrisek\AppData\Local\Temp\res.dll
C:\Users\Morrisek\AppData\Local\Temp\tu17p84.exe
C:\Users\Morrisek\AppData\Local\Temp\unelevate.exe
C:\Users\Morrisek\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Morrisek\AppData\Local\Temp\ytaiesmt.exe
C:\Users\Morrisek\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
C:\Users\Morrisek\AppData\Local\Temp\~1AF.exe
C:\Users\Morrisek\AppData\Local\Temp\~3EAC.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Morrisek\Desktop" je 2170 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x0
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Přílohy
Addition.rar
(3.86 KiB) Staženo 33 x

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Pomalý notebook, spousta mallware

#2 Příspěvek od JaRon »

ahoj
1. uprac adresar plocha mas tam viac ako 2GB :!:
2. citat:
Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

anyb0dy
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 24 Pro 2013 07:51

Re: Pomalý notebook, spousta mallware

#3 Příspěvek od anyb0dy »

Plochu jsem uklidil, vůbec mě to nenapadlo.. díky za radu
Přikládám log JRT

~~~ Services

Successfully stopped: [Service] d0e87c27
Successfully deleted: [Service] d0e87c27



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Page



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110611191115}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110611571143}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110611191115}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110611571143}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2bcc0558-ed56-42af-b2b0-e8d95ac4cbff}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{2bcc0558-ed56-42af-b2b0-e8d95ac4cbff}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{44427915-1682-4967-b978-f36660d2757f}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{44427915-1682-4967-b978-f36660d2757f}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5d55d8a8-9142-437a-bb8a-fbbd2edcd96c}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{5d55d8a8-9142-437a-bb8a-fbbd2edcd96c}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c111e45e-31ee-467f-8a16-1033e69f4bbc}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{c111e45e-31ee-467f-8a16-1033e69f4bbc}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e8740fd2-0cf0-46d5-bfec-0f3bef1631c0}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{e8740fd2-0cf0-46d5-bfec-0f3bef1631c0}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2bcc0558-ed56-42af-b2b0-e8d95ac4cbff}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{2bcc0558-ed56-42af-b2b0-e8d95ac4cbff}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{44427915-1682-4967-b978-f36660d2757f}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{44427915-1682-4967-b978-f36660d2757f}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5d55d8a8-9142-437a-bb8a-fbbd2edcd96c}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{5d55d8a8-9142-437a-bb8a-fbbd2edcd96c}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c111e45e-31ee-467f-8a16-1033e69f4bbc}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{c111e45e-31ee-467f-8a16-1033e69f4bbc}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e8740fd2-0cf0-46d5-bfec-0f3bef1631c0}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{e8740fd2-0cf0-46d5-bfec-0f3bef1631c0}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}



~~~ Files

Successfully deleted: [File] "C:\Users\Morrisek\appdata\local\google\chrome\user data\default\local storage\http_istart.webssearches.com_0.localstorage"
Successfully deleted: [File] "C:\Users\Morrisek\appdata\local\google\chrome\user data\default\local storage\http_istart.webssearches.com_0.localstorage-journal"
Successfully deleted: [File] "C:\Users\Morrisek\appdata\local\google\chrome\user data\default\local storage\http_www.superfish.com_0.localstorage"
Successfully deleted: [File] "C:\Users\Morrisek\appdata\local\google\chrome\user data\default\local storage\http_www.superfish.com_0.localstorage-journal"
Successfully deleted: [File] "C:\Users\Morrisek\appdata\local\google\chrome\user data\default\local storage\http_www.trovi.com_0.localstorage"
Successfully deleted: [File] "C:\Users\Morrisek\appdata\local\google\chrome\user data\default\local storage\http_www.trovi.com_0.localstorage-journal"



~~~ Folders

Successfully deleted: [Folder] C:\ProgramData\dealster
Successfully deleted: [Folder] C:\ProgramData\ReeGularoDeals
Successfully deleted: [Folder] C:\ProgramData\RoboSavver
Successfully deleted: [Folder] C:\ProgramData\SaveNewaAppz
Successfully deleted: [Folder] "C:\Users\Morrisek\appdata\local\chromatic browser"
Successfully deleted: [Folder] "C:\Users\Morrisek\appdata\local\globalupdate"
Successfully deleted: [Folder] "C:\Users\Morrisek\appdata\local\torch"
Successfully deleted: [Folder] "C:\Users\Morrisek\appdata\local\webplayer"
Successfully deleted: [Folder] "C:\Program Files (x86)\globalupdate"
Successfully deleted: [Folder] "C:\Users\Morrisek\documents\optimizer pro"



~~~ Event Viewer Logs were cleared

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Pomalý notebook, spousta mallware

#4 Příspěvek od JaRon »

kedze si spominal, ze si robil dost velke odinstalacie, bolo by dobre upratat nazaver CCleanerom
a ak nie su problemy, tak hotovo :thumbsup:
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

anyb0dy
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 24 Pro 2013 07:51

Re: Pomalý notebook, spousta mallware

#5 Příspěvek od anyb0dy »

Rychle a jednoduše, moc děkuji za pomoc :thumbsup:
Hned se mrknu na ten CCcleanear :)

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Pomalý notebook, spousta mallware

#6 Příspěvek od JaRon »

rado sa stalo :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Zamčeno