Shopdrop + AllCheapPrice

Zpráva

vapis · #1 Příspěvek od **vapis** » 19 pro 2014 14:58

Zdravím, dnes se mi podařilo zavirovat PC, sám netuším čím. Během běžného brouzdání (Twitter, FB, seznam) se najednou restartoval Chrome, Windwos Defender zahlásil nakázu a od té doby marně bojuji. Něco mi říká, že by za tím mohl stát web

Kód: Vybrat vše

www.saudigazette.com.sa

, protože jeho návštěva byla asi to nejneobvyklejší, co jsem dnes stihl. Nebudu zdržovat, dále RSIT log. Je velký, takže v příloze. Díky za pomoc.

#2 Příspěvek od **vyosek** » 19 pro 2014 16:54

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Po spusteni probehne stazeni databaze
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

vapis · #3 Příspěvek od **vapis** » 21 pro 2014 22:04

AdwCleaner jsem shodou okolností použil již před vytvářením RSIT logu, snad to nebude ničemu vadit. Zde je tedy log z něj. Po jeho použití jsem navíc přeinstaloval chrome a nestandartní chování zmizelo, což samozřejmě není záruka, že už je vyléčeno.

# AdwCleaner v4.105 - Report created 19/12/2014 at 14:36:27
# Updated 08/12/2014 by Xplode
# Database : 2014-12-16.1 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : Lukáš - LUCKY
# Running from : E:\Downloads\adwcleaner_4.105.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\81d3e5e939ddccbe
Folder Deleted : C:\ProgramData\9355073640839630014
Folder Deleted : C:\Program Files (x86)\Amazon\ABB
Folder Deleted : C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio
File Deleted : C:\END
File Deleted : C:\Users\Lukáš\AppData\Roaming\LiveSupport.exe_log.txt
File Deleted : C:\Users\Lukáš\AppData\Roaming\regsvr32.exe_log.txt

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}
Key Deleted : HKCU\Software\Optimizer Pro
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B6D700D3-3D0D-FEEB-D675-2CE78F9EC5D6}

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [First Home Page]

-\\ Google Chrome v39.0.2171.95

*************************

AdwCleaner[R0].txt - [2313 octets] - [19/12/2014 14:34:56]
AdwCleaner[S0].txt - [1862 octets] - [19/12/2014 14:36:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1922 octets] ##########

#4 Příspěvek od **vyosek** » 21 pro 2014 22:31

Spustte AdwCleaner znovu prosim, byl proveden velky update databaze, tak treba nam jeste neco najde

Aplikujte Zoek

vapis · #5 Příspěvek od **vapis** » 21 pro 2014 22:35

AdwCleaner nic nenašel, zde log:

# AdwCleaner v4.106 - Report created 21/12/2014 at 22:01:28
# Updated 21/12/2014 by Xplode
# Database : 2014-12-21.4 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : Lukáš - LUCKY
# Running from : C:\Users\Lukáš\Desktop\adwcleaner_4.106.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416

-\\ Google Chrome v39.0.2171.95

*************************

AdwCleaner[R0].txt - [2313 octets] - [19/12/2014 14:34:56]
AdwCleaner[R1].txt - [842 octets] - [21/12/2014 21:59:55]
AdwCleaner[S0].txt - [2014 octets] - [19/12/2014 14:36:27]
AdwCleaner[S1].txt - [764 octets] - [21/12/2014 22:01:28]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [823 octets] ##########

A Zoek:

Zoek.exe v5.0.0.0 Updated 21-December-2014
Tool run by Luk ç on ne 21. 12. 2014 at 22:05:46,73.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\LUK~1\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

21. 12. 2014 22:06:53 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\Amazon deleted successfully
C:\PROGRA~2\COMMON~1\Blizzard Entertainment deleted successfully
C:\Program Files\ATI Technologies deleted successfully
C:\Users\LUK~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\LGFlashTool deleted successfully
C:\Users\LUK~1\AppData\Local\CrashDumps deleted successfully
C:\Users\LUK~1\AppData\Local\LSC deleted successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Adblock for Pirate Bay deleted
C:\Users\LUK~1\.android deleted
C:\LGExtract.exe deleted
C:\PROGRA~3\Package Cache deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [19. 12. 2014 12:53]

==== Chromium Look ======================

#6 Příspěvek od **vyosek** » 21 pro 2014 23:15

Zoek nam nedobehl, nechte jej pracovat, pockejte na restart, ktery udela a pak log bude c:\zoek_result.log

vapis · #7 Příspěvek od **vapis** » 23 pro 2014 17:11

To všechno udělal, nicméně pro jistotu jsem jej spustil znovu, zde log.

Zoek.exe v5.0.0.0 Updated 22-12-2014
Tool run by Luk ç on Łt 23. 12. 2014 at 16:40:29,58.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\LUK~1\Desktop\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2014-12-21-213340.log 7200 bytes

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Microsoft SQL Server Compact Edition deleted
C:\PROGRA~2\NVIDIA Corporation deleted
C:\PROGRA~2\Vimicro Corporation deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [19. 12. 2014 12:53]

==== Chromium Look ======================

Google Chrome Version: 39.0.2171.95 (Could not determine latest Stable Version)

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[19. 12. 2014 12:53]

Angry Birds - LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj
AdBlock - LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
Avast Online Security - LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Google Cast API - LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mafeflapfdfljijmlienjedomfjfmhpd
Inbox - LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkclgpgponpjmpfokoepglboejdobkpl

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.msn.com/?pc=MSE1"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.msn.com/?pc=MSE1"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{B8C7FEDF-6E21-4356-9EB3-05BC24AFE3BC} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IESR02"

==== Reset Google Chrome ======================

C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\LUK~1\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\LUK~1\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\LUK~1\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\LUK~1\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=151 folders=67 154057131 bytes)

==== Empty Temp Folders ======================

C:\Users\ADMINI~1\AppData\Local\Temp emptied successfully
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\LUK~1\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\LUK~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on Łt 23. 12. 2014 at 17:09:16,58 ======================

#8 Příspěvek od **vyosek** » 24 pro 2014 05:57

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

vapis · #9 Příspěvek od **vapis** » 24 pro 2014 12:15

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-12-2014
Ran by Lukáš (administrator) on LUCKY on 24-12-2014 12:12:54
Running from C:\Users\Lukáš\Desktop
Loaded Profile: Lukáš (Available profiles: Lukáš)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
(Microsoft) C:\Program Files (x86)\Lenovo\Lenovo Dashboard\DdMgr.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft) C:\Program Files (x86)\Lenovo\EducationPortal\Services\IdeaTouch.LocalDataServer.Education.exe
(Microsoft) C:\Program Files (x86)\Lenovo\GamePortal\Services\IdeaTouch.LocalDataServer.Game.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(AMD) C:\Windows\System32\atieclxx.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
() C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files (x86)\Common Files\AVerMedia\AVerHIDReceiver\AVerHIDReceiver.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Silver Silk Wireless Keyboard\skd8861.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(cyberlink) C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(forum.viry.cz) C:\Users\Lukáš\Desktop\FRSTLauncher.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13625048 2013-06-18] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1311304 2013-06-05] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-02-01] (Intel Corporation)
HKLM\...\Run: [IgfxTray] => C:\windows\system32\igfxtray.exe [457616 2014-10-03] ()
HKLM-x32\...\Run: [Lenovo Silver Silk Wireless Keyboard] => C:\Program Files (x86)\Lenovo\Lenovo Silver Silk Wireless Keyboard\skd8861.exe [392192 2012-02-17] (Lenovo)
HKLM-x32\...\Run: [LVT] => C:\Program Files\Lenovo\LVT\LJYZ.exe [886112 2011-11-24] (Lenovo)
HKLM-x32\...\Run: [Lenovo Eye Distance System] => C:\Program Files\Lenovo\Lenovo Eye Distance System\Lenovo Eye Distance System.exe [270680 2012-07-19] (Lenovo)
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-12-15] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167640 2012-12-15] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [95192 2013-03-09] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-03-08] (cyberlink)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-05] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM-x32\...\Run: [Lenovo Dynamic Brightness System] => C:\Program Files\Lenovo\Lenovo Brightness System\RunLDBS.exe [1753432 2012-09-18] (Lenovo)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-09-15] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2014-12-19] (AVAST Software)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-06-28] ( (Qualcomm®Atheros®))
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [Facebook Update] => "C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [GoogleChromeAutoLaunch_032E85145F9C73D9B43D5ED2AF6BF5BD] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\RunOnce: [Adobe Speed Launcher] => 1419409714
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Policies\Explorer: [NoDrives] 0x00000003
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\MountPoints2: {78275e82-5daa-11e4-be76-48d224d3a8b5} - "F:\steambackup2.EXE"
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\MountPoints2: {c89df8a2-6267-11e4-be77-48d224d3a8b5} - "G:\LG_PC_Programs.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk
ShortcutTarget: AVer HID Receiver.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerHIDReceiver\AVerHIDReceiver.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSE1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSE1
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4263180883-3752867461-2742355753-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {4FF78044-96B4-4312-A5B7-FDA3CB328095}
Tcpip\Parameters: [DhcpNameServer] 5.74.41.6

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-4263180883-3752867461-2742355753-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Lukáš\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-4263180883-3752867461-2742355753-1001: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll No File
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-19]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.firstclass.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-19]
CHR Extension: (Angry Birds) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-12-19]
CHR Extension: (Dokumenty Google) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-19]
CHR Extension: (Disk Google) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-19]
CHR Extension: (YouTube) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-19]
CHR Extension: (Vyhledávání Google) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-19]
CHR Extension: (Kalendář Google) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2014-12-19]
CHR Extension: (Tabulky Google) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-19]
CHR Extension: (Filmy Google Play) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdijeikdkaembjbdobgfkoidjkpbmlkd [2014-12-23]
CHR Extension: (AdBlock) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-12-19]
CHR Extension: (Avast Online Security) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-19]
CHR Extension: (Hovory Hangouts) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbpgddbgniojgndnhlkjbkpknjhppkbk [2014-12-19]
CHR Extension: (Google Cast API) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\mafeflapfdfljijmlienjedomfjfmhpd [2014-12-23]
CHR Extension: (Kontrola e-mailu Google) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2014-12-19]
CHR Extension: (Peněženka Google) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-19]
CHR Extension: (Google Calendar Checker (by Google)) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookhcbgokankfmjafalglpofmolfopek [2014-12-19]
CHR Extension: (Gmail) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-19]
CHR Extension: (Inbox by Gmail) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkclgpgponpjmpfokoepglboejdobkpl [2014-12-19]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-19]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-06-28] (Windows (R) Win 7 DDK provider)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-19] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-19] (Avast Software)
R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [364544 2012-08-08] (AVerMedia) [File not signed]
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [403456 2011-04-01] () [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [448384 2014-12-09] ()
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2014-10-17] (BitRaider, LLC)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
S2 CLKMSVC10_3A60B698; C:\Program Files (x86)\Lenovo\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-03-09] (CyberLink)
R2 Dashboard Service; C:\Program Files (x86)\Lenovo\Lenovo Dashboard\DdMgr.exe [25936 2013-03-22] (Microsoft) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-02-01] (Intel Corporation)
R2 IdeaTouch.LocalDataServer.Education; C:\Program Files (x86)\Lenovo\EducationPortal\Services\IdeaTouch.LocalDataServer.Education.exe [7680 2012-05-17] (Microsoft) [File not signed]
R2 IdeaTouch.LocalDataServer.Game; C:\Program Files (x86)\Lenovo\GamePortal\Services\IdeaTouch.LocalDataServer.Game.exe [7680 2013-01-18] (Microsoft) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-10-03] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [167736 2013-01-30] (Intel Corporation)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-10-16] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-06-28] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2013-12-13] (Advanced Micro Devices, Inc.)
S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2013-04-18] (Google Inc)
S3 AndNetDiag; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [29184 2013-04-18] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [36352 2013-06-28] (LG Electronics Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-19] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-19] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-19] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-19] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-19] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-19] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-19] ()
R3 AVerPola; C:\Windows\system32\DRIVERS\AVerPola.sys [745472 2012-11-07] (AVerMedia TECHNOLOGIES, Inc.)
R3 AVPolDIR; C:\Windows\System32\drivers\AVPolDIR.sys [7168 2012-11-07] (AVerMedia TECHNOLOGIES, Inc.)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-10-31] (Disc Soft Ltd)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [288328 2013-01-23] (Realtek Semiconductor Corp.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-19] (Avast Software)
R3 VMC412; C:\Windows\System32\Drivers\VMC412.sys [232576 2012-09-24] (Vimicro Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R0 WinI2C-DDC; C:\Windows\System32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.)
R0 WinI2C-DDC; C:\Windows\SysWOW64\drivers\DDCDrv.sys [15712 2010-03-23] (Nicomsoft Ltd.)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-24 12:12 - 2014-12-24 12:13 - 00023395 _____ () C:\Users\Lukáš\Desktop\FRST.txt
2014-12-24 12:12 - 2014-12-24 12:12 - 00000000 ____D () C:\FRST
2014-12-24 12:11 - 2014-12-24 12:11 - 00112640 _____ (forum.viry.cz) C:\Users\Lukáš\Desktop\FRSTLauncher.exe
2014-12-24 12:09 - 2014-12-24 12:09 - 00112640 _____ (forum.viry.cz) C:\Users\Lukáš\Desktop\Nepotvrzeno 944058.crdownload
2014-12-24 12:04 - 2014-12-24 12:04 - 02122240 _____ (Farbar) C:\Users\Lukáš\Desktop\FRST64.exe
2014-12-24 11:52 - 2014-12-24 12:02 - 00000416 _____ () C:\Users\Lukáš\Desktop\dayz.txt
2014-12-24 09:38 - 2014-12-24 09:38 - 00000149 _____ () C:\WINDOWS\setupact.log
2014-12-24 09:38 - 2014-12-24 09:38 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-12-23 17:09 - 2014-12-23 17:09 - 00000197 _____ () C:\WINDOWS\system32\2014-12-23-16-09-07.067-AvastVBoxSVC.exe-3036.log
2014-12-23 17:02 - 2014-12-23 16:40 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-12-23 16:41 - 2014-12-21 22:33 - 00007200 _____ () C:\zoek-results2014-12-21-213340.log
2014-12-21 22:34 - 2014-12-21 22:34 - 00000197 _____ () C:\WINDOWS\system32\2014-12-21-21-34-47.047-AvastVBoxSVC.exe-2452.log
2014-12-21 22:06 - 2014-12-23 17:09 - 00006267 _____ () C:\zoek-results.log
2014-12-21 22:05 - 2014-12-23 17:00 - 00000000 ____D () C:\zoek_backup
2014-12-21 22:04 - 2014-12-21 22:04 - 00000197 _____ () C:\WINDOWS\system32\2014-12-21-21-04-18.041-AvastVBoxSVC.exe-2700.log
2014-12-21 22:00 - 2014-12-21 22:00 - 01295360 _____ () C:\Users\Lukáš\Desktop\zoek.exe
2014-12-21 21:59 - 2014-12-21 21:59 - 02173952 _____ () C:\Users\Lukáš\Desktop\adwcleaner_4.106.exe
2014-12-21 12:06 - 2014-12-24 09:48 - 00245535 _____ () C:\WINDOWS\WindowsUpdate.log
2014-12-20 16:03 - 2014-12-20 16:04 - 00000197 _____ () C:\WINDOWS\system32\2014-12-20-15-03-40.006-AvastVBoxSVC.exe-2828.log
2014-12-20 15:44 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-12-20 15:44 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-12-19 15:57 - 2014-12-23 16:37 - 00000000 ____D () C:\Users\Lukáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome
2014-12-19 15:56 - 2014-12-19 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-12-19 15:52 - 2014-12-24 11:57 - 00000962 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-19 15:52 - 2014-12-24 09:28 - 00000958 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-19 15:52 - 2014-12-19 15:55 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-19 15:52 - 2014-12-19 15:52 - 00003934 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-12-19 15:52 - 2014-12-19 15:52 - 00003698 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-12-19 14:58 - 2014-12-19 14:58 - 00038498 _____ () C:\Users\Lukáš\Desktop\log-rsit.zip
2014-12-19 14:42 - 2014-12-19 14:42 - 00000000 ____D () C:\rsit
2014-12-19 14:42 - 2014-12-19 14:42 - 00000000 ____D () C:\Program Files\trend micro
2014-12-19 14:37 - 2014-12-19 14:37 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-13-37-34.012-AvastVBoxSVC.exe-2572.log
2014-12-19 14:34 - 2014-12-21 22:01 - 00000000 ____D () C:\AdwCleaner
2014-12-19 13:59 - 2014-12-19 13:59 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-59-39.083-aswFe.exe-3688.log
2014-12-19 13:56 - 2014-12-19 13:59 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-56-06.087-aswFe.exe-7992.log
2014-12-19 13:56 - 2014-12-19 13:56 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-12-56-04.056-AvastVBoxSVC.exe-512.log
2014-12-19 13:38 - 2014-12-19 13:38 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-38-34.046-aswFe.exe-3056.log
2014-12-19 13:38 - 2014-12-19 13:38 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-12-38-32.061-AvastVBoxSVC.exe-1256.log
2014-12-19 13:22 - 2014-12-20 15:54 - 00003272 _____ () C:\WINDOWS\System32\Tasks\avastBCLRestartS-1-5-21-4263180883-3752867461-2742355753-1001
2014-12-19 12:54 - 2014-12-19 12:54 - 00000000 ____D () C:\Users\Lukáš\AppData\Roaming\AVAST Software
2014-12-19 12:53 - 2014-12-19 12:54 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-12-19 12:53 - 2014-12-19 12:53 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2014-12-19 12:53 - 2014-12-19 12:53 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-12-19 12:53 - 2014-12-19 12:53 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-12-19 12:53 - 2014-12-19 12:53 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-12-19 12:53 - 2014-12-19 12:53 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-12-19 12:53 - 2014-12-19 12:53 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-12-19 12:53 - 2014-12-19 12:53 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-12-19 12:53 - 2014-12-19 12:53 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-12-19 12:53 - 2014-12-19 12:53 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-12-19 12:53 - 2014-12-19 12:53 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-12-19 12:53 - 2014-12-19 12:53 - 00000000 ____D () C:\WINDOWS\SysWOW64\vbox
2014-12-19 12:53 - 2014-12-19 12:53 - 00000000 ____D () C:\WINDOWS\system32\vbox
2014-12-19 12:53 - 2014-12-19 12:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-12-19 12:52 - 2014-12-19 12:52 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-12-19 12:52 - 2014-12-19 12:52 - 00000000 ____D () C:\Program Files\AVAST Software
2014-12-19 12:39 - 2014-12-19 12:39 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-19 12:28 - 2014-12-19 12:30 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-19 12:28 - 2014-12-19 12:28 - 00002772 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2014-12-19 12:28 - 2014-12-19 12:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-12-17 18:31 - 2014-12-17 18:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-12-17 18:31 - 2014-12-17 18:31 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-12-17 14:12 - 2014-12-17 14:12 - 00000000 ____D () C:\Users\Lukáš\AppData\Local\Blizzard
2014-12-17 14:06 - 2014-12-17 14:12 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-12-17 14:06 - 2014-12-17 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2014-12-17 14:03 - 2014-12-17 14:58 - 00000000 ____D () C:\Users\Lukáš\AppData\Local\Battle.net
2014-12-17 14:03 - 2014-12-17 14:05 - 00000000 ____D () C:\Users\Lukáš\AppData\Roaming\Battle.net
2014-12-17 14:03 - 2014-12-17 14:03 - 00000000 ____D () C:\Users\Lukáš\AppData\Local\Blizzard Entertainment
2014-12-17 14:03 - 2014-12-17 14:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-12-17 14:03 - 2014-12-17 14:03 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-12-17 14:03 - 2014-12-17 14:03 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-12-17 13:59 - 2014-12-17 14:00 - 00000000 ____D () C:\ProgramData\Battle.net
2014-12-14 02:02 - 2014-12-14 02:02 - 00000000 __SHD () C:\Users\Lukáš\AppData\Local\EmieBrowserModeList
2014-12-12 14:59 - 2014-12-12 14:59 - 00000000 ____D () C:\Program Files (x86)\LG Electronics
2014-12-12 14:59 - 2013-06-28 11:45 - 00036352 _____ (LG Electronics Inc.) C:\WINDOWS\system32\Drivers\lgandnetmodem64.sys
2014-12-12 14:59 - 2013-04-18 16:14 - 00029184 _____ (LG Electronics Inc.) C:\WINDOWS\system32\Drivers\lgandnetdiag64.sys
2014-12-12 14:59 - 2013-04-18 16:12 - 00031744 _____ (Google Inc) C:\WINDOWS\system32\Drivers\lgandnetadb.sys
2014-12-12 14:59 - 2011-07-18 06:03 - 01919968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdfcoinstaller01005.dll
2014-12-12 14:39 - 2014-12-12 14:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LGFlashTool
2014-12-12 14:39 - 2014-12-12 14:39 - 00000000 ____D () C:\LG
2014-12-12 14:26 - 2013-08-13 20:50 - 1014497496 _____ () C:\BIN_LGD605AT-00-V10a-EUR-XX-AUG-13-2013+0_Develop.wdb
2014-12-12 14:26 - 2013-08-13 20:50 - 00000362 _____ () C:\BIN_LGD605AT-00-V10a-EUR-XX-AUG-13-2013+0_Develop.wdh
2014-12-12 14:26 - 2013-07-10 16:50 - 00895488 _____ (LG Electronics) C:\LGUP_L9II.dll
2014-12-12 14:24 - 2014-12-12 14:24 - 1015298289 _____ () C:\D60510A_00.cab
2014-12-12 14:18 - 2014-12-12 14:12 - 1015298289 _____ () C:\D60510A_00.kdz
2014-12-12 13:15 - 2014-12-12 13:15 - 00000000 ____D () C:\Program Files (x86)\BuuyNsavE
2014-12-11 15:07 - 2014-12-11 15:07 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2014-12-11 06:52 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2014-12-11 06:52 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2014-12-11 06:52 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2014-12-11 06:52 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2014-12-11 06:40 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-12-11 06:40 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-12-11 06:40 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-12-11 06:40 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-12-11 06:40 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-12-11 06:40 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-12-11 06:40 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-12-11 06:40 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-12-11 06:40 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-12-11 06:40 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-12-11 06:40 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-12-11 06:40 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-12-11 06:40 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-12-11 06:40 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-12-11 06:40 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-12-11 06:40 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-12-11 06:40 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-12-11 06:40 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-12-11 06:40 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-12-11 06:40 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-12-11 06:40 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-12-11 06:40 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-12-11 06:40 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-12-11 06:40 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-12-11 06:40 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-12-11 06:40 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-12-11 06:40 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-12-11 06:40 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-12-11 06:40 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-12-11 06:40 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-12-11 06:40 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-12-11 06:40 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-12-11 06:40 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-12-11 06:40 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-12-11 06:40 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-12-11 06:40 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-12-11 06:40 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-12-11 06:40 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-12-11 06:40 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-12-11 06:40 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-12-11 06:40 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2014-12-11 06:40 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-12-11 06:40 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-12-09 20:15 - 2014-12-09 20:30 - 00000000 ____D () C:\Users\Lukáš\AppData\Local\DayZ
2014-12-08 20:17 - 2014-12-08 20:17 - 00115916 _____ () C:\Users\Lukáš\AppData\Roaming\icarus-dxdiag.xml
2014-12-06 21:24 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2014-12-06 21:24 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2014-12-06 21:24 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2014-12-06 21:24 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2014-12-06 21:24 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2014-12-06 21:24 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2014-12-06 21:24 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2014-12-06 21:24 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2014-12-06 20:44 - 2014-12-06 20:44 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-12-06 20:44 - 2014-12-06 20:44 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2014-12-06 12:19 - 2014-12-06 12:19 - 00000000 ____D () C:\Users\Lukáš\AppData\Roaming\StunlockStudios
2014-12-06 09:53 - 2014-12-06 09:53 - 00003166 _____ () C:\WINDOWS\System32\Tasks\{E3E57851-5E18-4670-A1B3-9963E6282F16}
2014-12-05 18:07 - 2014-12-05 18:07 - 00000000 ____D () C:\Users\Lukáš\AppData\Local\Ubisoft
2014-12-05 18:07 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2014-12-05 18:07 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2014-12-05 18:07 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2014-12-05 18:07 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-24 12:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-12-24 10:57 - 2014-10-16 18:52 - 00000940 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001UA.job
2014-12-24 10:00 - 2014-10-17 17:31 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-24 09:28 - 2014-10-17 04:50 - 00000000 __RDO () C:\Users\Lukáš\OneDrive
2014-12-23 22:54 - 2014-10-29 15:57 - 00003958 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{828BD814-1623-419B-B927-172F7F4356B7}
2014-12-23 22:46 - 2014-10-17 17:29 - 00000000 ____D () C:\Users\Lukáš\AppData\Roaming\vlc
2014-12-23 19:57 - 2014-10-16 18:52 - 00000918 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001Core.job
2014-12-23 17:13 - 2014-09-24 17:23 - 01749406 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-12-23 17:13 - 2014-09-24 16:39 - 00739720 _____ () C:\WINDOWS\system32\perfh005.dat
2014-12-23 17:13 - 2014-09-24 16:39 - 00151940 _____ () C:\WINDOWS\system32\perfc005.dat
2014-12-23 17:08 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-12-23 17:08 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-12-23 17:06 - 2014-10-15 10:30 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4263180883-3752867461-2742355753-1001
2014-12-22 18:52 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-12-21 22:25 - 2014-10-16 23:41 - 00000000 ____D () C:\Users\Lukáš
2014-12-20 16:42 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-12-19 15:56 - 2014-10-15 10:25 - 00000000 ____D () C:\Users\Lukáš\AppData\Local\Google
2014-12-19 12:48 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\addins
2014-12-19 12:32 - 2014-10-31 14:44 - 00000000 ____D () C:\Users\Lukáš\AppData\Roaming\DAEMON Tools Lite
2014-12-19 12:32 - 2014-10-29 18:03 - 00000000 ____D () C:\Users\Lukáš\AppData\Roaming\TeamViewer
2014-12-19 12:32 - 2014-10-20 15:22 - 00000000 ____D () C:\WINDOWS\Minidump
2014-12-19 12:32 - 2014-10-17 00:33 - 00000000 ___DC () C:\WINDOWS\Panther
2014-12-17 09:11 - 2013-11-06 07:04 - 00000000 ____D () C:\ProgramData\Lenovo
2014-12-13 08:36 - 2014-10-17 17:40 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-12 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-12-12 14:59 - 2013-11-06 06:52 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-12-11 14:01 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-12-11 07:03 - 2014-10-16 18:34 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-12-11 07:03 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2014-12-11 07:03 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2014-12-11 07:01 - 2014-10-16 18:34 - 112710672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-12-06 21:26 - 2014-10-15 10:15 - 00000000 ____D () C:\Users\Lukáš\AppData\Local\VirtualStore
2014-12-06 20:38 - 2014-10-31 12:16 - 00000000 ____D () C:\Users\Lukáš\AppData\Roaming\Webshare
2014-12-06 10:48 - 2014-11-06 19:21 - 00028160 ___SH () C:\Users\Lukáš\Desktop\Thumbs.db
2014-12-05 13:54 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-11-26 22:10 - 2014-09-24 20:08 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-11-26 22:10 - 2014-09-24 20:08 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

Files to move or delete:
====================
C:\ProgramData\Lenovo-31529.vbs

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-12-23 07:12

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (Windows8_OS) (Fixed) (Total:455.86 GB) (Free:359.72 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (Data) (Fixed) (Total:449.39 GB) (Free:413.97 GB) NTFS
Drive f: (Dead Island) (CDROM) (Total:5.55 GB) (Free:0 GB) UDF

Available physical RAM: 4430.56 MB
Total physical RAM: 8092.27 MB
Percentage of memory in use: 45%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 931.5 GB) (Disk ID: 59C83015)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001Core.job => C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001UA.job => C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm
AlternateDataStreams: C:\Users\Lukáš\OneDrive:ms-properties

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Luk��\Desktop" je 10 MB.

***** Startup Programs *****

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\\Program Files (x86)\\TriDef 3D\\TriDef\\TriDefMediaPlayer\\TriDefMediaPlayer.exe"="C:\\Program Files (x86)\\TriDef 3D\\TriDef\\TriDefMediaPlayer\\TriDefMediaPlayer.exe:*:Enabled:TriDef 3D Media Player"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000

==================== End Of Log ==============================

#10 Příspěvek od **vyosek** » 26 pro 2014 20:53

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [95192 2013-03-09] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-03-08] (cyberlink)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-05] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [Facebook Update] => "C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [GoogleChromeAutoLaunch_032E85145F9C73D9B43D5ED2AF6BF5BD] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\RunOnce: [Adobe Speed Launcher] => 1419409714
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Policies\Explorer: [NoDrives] 0x00000003
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\MountPoints2: {78275e82-5daa-11e4-be76-48d224d3a8b5} - "F:\steambackup2.EXE" 
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\MountPoints2: {c89df8a2-6267-11e4-be77-48d224d3a8b5} - "G:\LG_PC_Programs.exe"
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => No File

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

2014-12-24 12:12 - 2014-12-24 12:13 - 00023395 _____ () C:\Users\Lukáš\Desktop\FRST.txt
2014-12-24 12:11 - 2014-12-24 12:11 - 00112640 _____ (forum.viry.cz) C:\Users\Lukáš\Desktop\FRSTLauncher.exe
2014-12-24 12:09 - 2014-12-24 12:09 - 00112640 _____ (forum.viry.cz) C:\Users\Lukáš\Desktop\Nepotvrzeno 944058.crdownload
2014-12-24 09:38 - 2014-12-24 09:38 - 00000149 _____ () C:\WINDOWS\setupact.log
2014-12-24 09:38 - 2014-12-24 09:38 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-12-23 17:09 - 2014-12-23 17:09 - 00000197 _____ () C:\WINDOWS\system32\2014-12-23-16-09-07.067-AvastVBoxSVC.exe-3036.log
2014-12-23 17:02 - 2014-12-23 16:40 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-12-23 16:41 - 2014-12-21 22:33 - 00007200 _____ () C:\zoek-results2014-12-21-213340.log
2014-12-21 22:34 - 2014-12-21 22:34 - 00000197 _____ () C:\WINDOWS\system32\2014-12-21-21-34-47.047-AvastVBoxSVC.exe-2452.log
2014-12-21 22:06 - 2014-12-23 17:09 - 00006267 _____ () C:\zoek-results.log
2014-12-21 22:05 - 2014-12-23 17:00 - 00000000 ____D () C:\zoek_backup
2014-12-21 22:04 - 2014-12-21 22:04 - 00000197 _____ () C:\WINDOWS\system32\2014-12-21-21-04-18.041-AvastVBoxSVC.exe-2700.log
2014-12-21 22:00 - 2014-12-21 22:00 - 01295360 _____ () C:\Users\Lukáš\Desktop\zoek.exe
2014-12-21 21:59 - 2014-12-21 21:59 - 02173952 _____ () C:\Users\Lukáš\Desktop\adwcleaner_4.106.exe
2014-12-19 14:58 - 2014-12-19 14:58 - 00038498 _____ () C:\Users\Lukáš\Desktop\log-rsit.zip
2014-12-19 14:42 - 2014-12-19 14:42 - 00000000 ____D () C:\rsit
2014-12-19 14:42 - 2014-12-19 14:42 - 00000000 ____D () C:\Program Files\trend micro
2014-12-19 14:37 - 2014-12-19 14:37 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-13-37-34.012-AvastVBoxSVC.exe-2572.log
2014-12-19 14:34 - 2014-12-21 22:01 - 00000000 ____D () C:\AdwCleaner
2014-12-19 13:59 - 2014-12-19 13:59 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-59-39.083-aswFe.exe-3688.log
2014-12-19 13:56 - 2014-12-19 13:59 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-56-06.087-aswFe.exe-7992.log
2014-12-19 13:56 - 2014-12-19 13:56 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-12-56-04.056-AvastVBoxSVC.exe-512.log
2014-12-19 13:38 - 2014-12-19 13:38 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-38-34.046-aswFe.exe-3056.log
2014-12-19 13:38 - 2014-12-19 13:38 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-12-38-32.061-AvastVBoxSVC.exe-1256.log
C:\ProgramData\Lenovo-31529.vbs

Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001Core.job => C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001UA.job => C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm

Hosts:
EmptyTemp:
Reboot:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

vapis · #11 Příspěvek od **vapis** » 27 pro 2014 10:59

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-12-2014
Ran by Lukáš at 2014-12-27 10:55:37 Run:1
Running from C:\Users\Lukáš\Desktop
Loaded Profile: Lukáš (Available profiles: Lukáš)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [95192 2013-03-09] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-03-08] (cyberlink)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-05] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [Facebook Update] => "C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Run: [GoogleChromeAutoLaunch_032E85145F9C73D9B43D5ED2AF6BF5BD] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.)
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\RunOnce: [Adobe Speed Launcher] => 1419409714
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\Policies\Explorer: [NoDrives] 0x00000003
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\MountPoints2: {78275e82-5daa-11e4-be76-48d224d3a8b5} - "F:\steambackup2.EXE"
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\...\MountPoints2: {c89df8a2-6267-11e4-be77-48d224d3a8b5} - "G:\LG_PC_Programs.exe"
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => No File

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

2014-12-24 12:12 - 2014-12-24 12:13 - 00023395 _____ () C:\Users\Lukáš\Desktop\FRST.txt
2014-12-24 12:11 - 2014-12-24 12:11 - 00112640 _____ (forum.viry.cz) C:\Users\Lukáš\Desktop\FRSTLauncher.exe
2014-12-24 12:09 - 2014-12-24 12:09 - 00112640 _____ (forum.viry.cz) C:\Users\Lukáš\Desktop\Nepotvrzeno 944058.crdownload
2014-12-24 09:38 - 2014-12-24 09:38 - 00000149 _____ () C:\WINDOWS\setupact.log
2014-12-24 09:38 - 2014-12-24 09:38 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-12-23 17:09 - 2014-12-23 17:09 - 00000197 _____ () C:\WINDOWS\system32\2014-12-23-16-09-07.067-AvastVBoxSVC.exe-3036.log
2014-12-23 17:02 - 2014-12-23 16:40 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-12-23 16:41 - 2014-12-21 22:33 - 00007200 _____ () C:\zoek-results2014-12-21-213340.log
2014-12-21 22:34 - 2014-12-21 22:34 - 00000197 _____ () C:\WINDOWS\system32\2014-12-21-21-34-47.047-AvastVBoxSVC.exe-2452.log
2014-12-21 22:06 - 2014-12-23 17:09 - 00006267 _____ () C:\zoek-results.log
2014-12-21 22:05 - 2014-12-23 17:00 - 00000000 ____D () C:\zoek_backup
2014-12-21 22:04 - 2014-12-21 22:04 - 00000197 _____ () C:\WINDOWS\system32\2014-12-21-21-04-18.041-AvastVBoxSVC.exe-2700.log
2014-12-21 22:00 - 2014-12-21 22:00 - 01295360 _____ () C:\Users\Lukáš\Desktop\zoek.exe
2014-12-21 21:59 - 2014-12-21 21:59 - 02173952 _____ () C:\Users\Lukáš\Desktop\adwcleaner_4.106.exe
2014-12-19 14:58 - 2014-12-19 14:58 - 00038498 _____ () C:\Users\Lukáš\Desktop\log-rsit.zip
2014-12-19 14:42 - 2014-12-19 14:42 - 00000000 ____D () C:\rsit
2014-12-19 14:42 - 2014-12-19 14:42 - 00000000 ____D () C:\Program Files\trend micro
2014-12-19 14:37 - 2014-12-19 14:37 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-13-37-34.012-AvastVBoxSVC.exe-2572.log
2014-12-19 14:34 - 2014-12-21 22:01 - 00000000 ____D () C:\AdwCleaner
2014-12-19 13:59 - 2014-12-19 13:59 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-59-39.083-aswFe.exe-3688.log
2014-12-19 13:56 - 2014-12-19 13:59 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-56-06.087-aswFe.exe-7992.log
2014-12-19 13:56 - 2014-12-19 13:56 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-12-56-04.056-AvastVBoxSVC.exe-512.log
2014-12-19 13:38 - 2014-12-19 13:38 - 00000247 _____ () C:\WINDOWS\system32\2014-12-19-12-38-34.046-aswFe.exe-3056.log
2014-12-19 13:38 - 2014-12-19 13:38 - 00000197 _____ () C:\WINDOWS\system32\2014-12-19-12-38-32.061-AvastVBoxSVC.exe-1256.log
C:\ProgramData\Lenovo-31529.vbs

Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001Core.job => C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001UA.job => C:\Users\Lukáa\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\RemoteControl10 => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\BDRegion => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\CLMLServer => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\UpdateP2GoShortCut => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value not found.
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Facebook Update => value deleted successfully.
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value deleted successfully.
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value deleted successfully.
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_032E85145F9C73D9B43D5ED2AF6BF5BD => value deleted successfully.
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Adobe Speed Launcher => Value not found.
HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoDrives => value deleted successfully.
"HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{78275e82-5daa-11e4-be76-48d224d3a8b5}" => Key deleted successfully.
HKCR\CLSID\{78275e82-5daa-11e4-be76-48d224d3a8b5} => Key not found.
"HKU\S-1-5-21-4263180883-3752867461-2742355753-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c89df8a2-6267-11e4-be77-48d224d3a8b5}" => Key deleted successfully.
HKCR\CLSID\{c89df8a2-6267-11e4-be77-48d224d3a8b5} => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncBackedUp" => Key deleted successfully.
HKCR\CLSID\{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncPending" => Key deleted successfully.
HKCR\CLSID\{62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncRoot" => Key deleted successfully.
HKCR\CLSID\{A759AFF6-5851-457D-A540-F4ECED148351} => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncShared" => Key deleted successfully.
HKCR\CLSID\{1574C9EF-7D58-488F-B358-8B78C1538F51} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"C:\Users\Lukáš\Desktop\FRST.txt" => File/Directory not found.
"C:\Users\Lukáš\Desktop\FRSTLauncher.exe" => File/Directory not found.
"C:\Users\Lukáš\Desktop\Nepotvrzeno 944058.crdownload" => File/Directory not found.
C:\WINDOWS\setupact.log => Moved successfully.
C:\WINDOWS\setuperr.log => Moved successfully.
Could not move "C:\WINDOWS\system32\2014-12-23-16-09-07.067-AvastVBoxSVC.exe-3036.log" => Scheduled to move on reboot.
C:\WINDOWS\zoek-delete.exe => Moved successfully.
C:\zoek-results2014-12-21-213340.log => Moved successfully.
C:\WINDOWS\system32\2014-12-21-21-34-47.047-AvastVBoxSVC.exe-2452.log => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\WINDOWS\system32\2014-12-21-21-04-18.041-AvastVBoxSVC.exe-2700.log => Moved successfully.
C:\Users\Lukáš\Desktop\zoek.exe => Moved successfully.
C:\Users\Lukáš\Desktop\adwcleaner_4.106.exe => Moved successfully.
C:\Users\Lukáš\Desktop\log-rsit.zip => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\WINDOWS\system32\2014-12-19-13-37-34.012-AvastVBoxSVC.exe-2572.log => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\WINDOWS\system32\2014-12-19-12-59-39.083-aswFe.exe-3688.log => Moved successfully.
C:\WINDOWS\system32\2014-12-19-12-56-06.087-aswFe.exe-7992.log => Moved successfully.
C:\WINDOWS\system32\2014-12-19-12-56-04.056-AvastVBoxSVC.exe-512.log => Moved successfully.
C:\WINDOWS\system32\2014-12-19-12-38-34.046-aswFe.exe-3056.log => Moved successfully.
C:\WINDOWS\system32\2014-12-19-12-38-32.061-AvastVBoxSVC.exe-1256.log => Moved successfully.
C:\ProgramData\Lenovo-31529.vbs => Moved successfully.
C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001Core.job => Moved successfully.
C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4263180883-3752867461-2742355753-1001UA.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\ProgramData\Reprise => ":wupeogjxldtlfudivq`qsp`26hfm" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 741.1 MB temporary data.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-12-27 10:57:18)<=

C:\WINDOWS\system32\2014-12-23-16-09-07.067-AvastVBoxSVC.exe-3036.log => Is moved successfully.

==== End of Fixlog 10:57:18 ====

vapis · #12 Příspěvek od **vapis** » 27 pro 2014 11:02

Windows mi krátce po restartu vyhodili chybovou hlášku viz příloha.

#13 Příspěvek od **vyosek** » 28 pro 2014 07:11

Spustte znovu FRST

Do okenka Search vlozte Lenovo-31529.vbs
Kliknete na Search Registry
Vysledny log mi sem vlozte

vapis · #14 Příspěvek od **vapis** » 29 pro 2014 06:20

Farbar Recovery Scan Tool (x64) Version: 28-12-2014
Ran by Lukáš at 2014-12-29 06:19:34
Running from C:\Users\Lukáš\Desktop
Boot Mode: Normal

================== Search Registry: "Lenovo-31529.vbs" ===========

====== End Of Search ======

#15 Příspěvek od **vyosek** » 29 pro 2014 06:22

Tak jeste uklidime

DelFix https://toolslib.net/downloads/finish/2/

Stahnete a spustte
Ponechte zatrzitkou pouze u volby Remote disinfection tools
Kliknete na Run

Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

Napiste ci jsou problemy a hlaska Lenova stale vyskakuje

VIRY.CZ

Shopdrop + AllCheapPrice

Shopdrop + AllCheapPrice

Re: Shopdrop + AllCheapPrice

Re: Shopdrop + AllCheapPrice

Re: Shopdrop + AllCheapPrice

Re: Shopdrop + AllCheapPrice

Re: Shopdrop + AllCheapPrice

Re: Shopdrop + AllCheapPrice

Re: Shopdrop + AllCheapPrice

Re: Shopdrop + AllCheapPrice

Re: Shopdrop + AllCheapPrice

Re: Shopdrop + AllCheapPrice

Re: Shopdrop + AllCheapPrice

Re: Shopdrop + AllCheapPrice

Re: Shopdrop + AllCheapPrice

Re: Shopdrop + AllCheapPrice