Kontrola pc, problém se stahováním z internetu

[Archicz]

Dobrý den, rád bych Vás poprosil o kontrolu a vyčištění PC, občas se mi poslední dobou stává že při stahování souborů například z ulozto.cz se mi soubor zasekne firefox, nebo stahování vůbec nezačne.

LOG ZDE:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Tomas at 2015-01-18 07:39:49
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 102 GB (67%) free of 153 GB
Total RAM: 2046 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:40:03, on 18.1.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\System32\rundll32.exe
C:\Windows\PixArt\PAC207\Monitor.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\HiSuite\HiSuite.exe
C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Users\Tomas\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Users\Tomas\AppData\Local\HiSuite\userdata\ADB\adb.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Tomas\Desktop\RSIT.exe
C:\Program Files\trend micro\Tomas.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://trovi.com?SearchSource=10&CUI=UN ... =CT3329621
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\tbMyAs.dll
R3 - URLSearchHook: BS Player ControlBar B Toolbar - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\Tomas\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: BS Player ControlBar B - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\Tomas\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\tbMyAs.dll
O3 - Toolbar: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\tbMyAs.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: BS Player ControlBar B Toolbar - {31264a33-a653-46c4-af49-1232c59a7da5} - C:\Users\Tomas\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [MSStp] C:\Windows\inf\msstp.vbe
O4 - HKLM\..\Run: [mncdlnlSrv] C:\Windows\system32\mncdlnl.vbe
O4 - HKLM\..\Run: [P17RunE] RunDll32 P17RunE.dll,RunDLLEntry
O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [Mobile Partner] C:\Program Files\HiSuite\HiSuite.exe -s
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Tomas\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Tomas\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-924063812-4270153059-3166923768-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-924063812-4270153059-3166923768-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe
O23 - Service: HuaweiHiSuiteService.exe - Unknown owner - C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SInstalátor (ssinstall) - PS Media s.r.o. - C:\Windows\System32\ssins.exe
O23 - Service: Toolbar Service (TBSrv) - ClientConnect Ltd. - C:\Program Files\Tbccint\ToolbarService\ToolbarService.exe

--
End of file - 7202 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\haoasrb2.default

prefs.js - "browser.search.useDBForOrder" - "false"
prefs.js - "browser.startup.homepage" - "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.257 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_257.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\haoasrb2.default\extensions\
engine@conduit.com
{31264a33-a653-46c4-af49-1232c59a7da5}
{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-11-29 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31264a33-a653-46c4-af49-1232c59a7da5}]
BS Player ControlBar B Toolbar - C:\Users\Tomas\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll [2014-04-10 423744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}]
MyAshampoo Toolbar - C:\Program Files\MyAshampoo\tbMyAs.dll [2010-11-29 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - MyAshampoo Toolbar - C:\Program Files\MyAshampoo\tbMyAs.dll [2010-11-29 3908192]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-11-29 3908192]
{31264a33-a653-46c4-af49-1232c59a7da5} - BS Player ControlBar B Toolbar - C:\Users\Tomas\AppData\LocalLow\BS_Player_ControlBar_B\prxtbBS_P.dll [2014-04-10 423744]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2014-08-22 974432]
"MSStp"=C:\Windows\inf\msstp.vbe [2014-03-05 1584]
"mncdlnlSrv"=C:\Windows\system32\mncdlnl.vbe [2014-03-05 7670]
"P17RunE"=RunDll32 P17RunE.dll,RunDLLEntry []
"Monitor"=C:\Windows\PixArt\PAC207\Monitor.exe [2006-11-03 319488]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Mobile Partner"=C:\Program Files\HiSuite\HiSuite.exe [2012-05-15 552288]
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [2012-10-18 752736]
"cz.seznam.software.autoupdate"=C:\Users\Tomas\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Tomas\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-12-11 30879328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.WMV3"=wmv9vcm.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-01-18 07:39:49 ----D---- C:\rsit
2015-01-18 07:39:49 ----D---- C:\Program Files\trend micro
2015-01-16 23:24:03 ----A---- C:\Windows\system32\TSWbPrxy.exe
2015-01-16 10:52:43 ----A---- C:\Windows\system32\rdpcorets.dll
2015-01-16 10:50:06 ----A---- C:\Windows\system32\mstscax.dll
2015-01-15 13:06:20 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-01-14 20:19:53 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2015-01-14 20:19:47 ----A---- C:\Windows\system32\rdpudd.dll
2015-01-14 20:19:47 ----A---- C:\Windows\system32\rdpendp_winip.dll
2015-01-14 20:19:26 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2015-01-14 20:19:24 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-01-14 20:19:23 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2015-01-14 20:19:22 ----A---- C:\Windows\system32\wksprtPS.dll
2015-01-14 20:19:22 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-01-14 20:19:22 ----A---- C:\Windows\system32\tsgqec.dll
2015-01-14 20:19:22 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2015-01-14 20:19:21 ----A---- C:\Windows\system32\wksprt.exe
2015-01-14 20:19:21 ----A---- C:\Windows\system32\rdvidcrl.dll
2015-01-14 20:19:21 ----A---- C:\Windows\system32\mstsc.exe
2015-01-14 20:18:44 ----D---- C:\Program Files\Microsoft Silverlight
2015-01-14 19:51:00 ----D---- C:\Program Files\Mozilla Firefox
2015-01-14 18:16:07 ----A---- C:\Windows\ALIK.INI
2015-01-14 18:15:06 ----N---- C:\Windows\Setup1.exe
2015-01-14 18:15:04 ----A---- C:\Windows\ST6UNST.EXE
2015-01-14 17:44:51 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2015-01-14 17:44:47 ----A---- C:\Windows\system32\ntkrnlpa.exe
2015-01-14 17:44:46 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-01-14 17:44:42 ----A---- C:\Windows\system32\profsvc.dll
2015-01-14 17:44:42 ----A---- C:\Windows\system32\nlasvc.dll
2015-01-10 12:40:09 ----D---- C:\Users\Tomas\AppData\Roaming\Opera Software
2015-01-10 12:39:57 ----D---- C:\Program Files\Opera
2014-12-26 12:30:50 ----D---- C:\Program Files\Common Files\Skype
2014-12-26 12:30:48 ----RD---- C:\Program Files\Skype

======List of files/folders modified in the last 1 month======

2015-01-18 07:40:02 ----D---- C:\Windows\Prefetch
2015-01-18 07:39:56 ----D---- C:\Windows\Temp
2015-01-18 07:39:49 ----RD---- C:\Program Files
2015-01-18 07:24:46 ----D---- C:\Users\Tomas\AppData\Roaming\Seznam.cz
2015-01-18 07:24:34 ----D---- C:\Users\Tomas\AppData\Roaming\Skype
2015-01-18 07:22:46 ----D---- C:\Windows\system32\config
2015-01-17 01:53:59 ----D---- C:\Windows\System32
2015-01-17 01:53:56 ----D---- C:\Windows\winsxs
2015-01-17 01:53:51 ----SHD---- C:\System Volume Information
2015-01-16 23:47:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-01-16 23:47:04 ----D---- C:\Windows\inf
2015-01-16 10:43:17 ----D---- C:\Windows
2015-01-16 00:47:03 ----D---- C:\Windows\debug
2015-01-15 10:14:53 ----D---- C:\Program Files\Mozilla Maintenance Service
2015-01-14 21:26:57 ----D---- C:\Windows\rescache
2015-01-14 20:48:11 ----D---- C:\Windows\system32\wbem
2015-01-14 20:48:11 ----D---- C:\Windows\system32\en-US
2015-01-14 20:48:11 ----D---- C:\Windows\system32\drivers\en-US
2015-01-14 20:48:11 ----D---- C:\Windows\system32\drivers
2015-01-14 20:48:11 ----D---- C:\Windows\system32\cs-CZ
2015-01-14 20:48:11 ----D---- C:\Windows\PolicyDefinitions
2015-01-14 20:48:10 ----D---- C:\Windows\system32\DriverStore
2015-01-14 20:19:15 ----SHD---- C:\Windows\Installer
2015-01-14 20:19:15 ----SD---- C:\ProgramData\Microsoft
2015-01-14 20:16:06 ----D---- C:\Windows\system32\catroot2
2015-01-14 18:25:42 ----D---- C:\Windows\system32\MRT
2015-01-14 18:25:35 ----A---- C:\Windows\system32\MRT.exe
2015-01-14 18:22:08 ----D---- C:\Games
2015-01-14 18:02:19 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2015-01-10 14:39:40 ----D---- C:\Windows\system32\Tasks
2014-12-31 12:13:47 ----N---- C:\Windows\system32\MpSigStub.exe
2014-12-26 12:31:04 ----D---- C:\ProgramData\Skype
2014-12-26 12:30:50 ----D---- C:\Program Files\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-07-17 231800]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-19 388096]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-07-17 95920]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-13 347264]
R3 P17;SB Live! 24-bit; C:\Windows\system32\drivers\P17.sys [2009-04-21 1147392]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-01-30 84248]
S3 ivusb;Initio Driver for USB Default Controller; C:\Windows\system32\DRIVERS\ivusb.sys [2010-07-28 25112]
S3 PAC207;VideoCAM GE111; C:\Windows\system32\DRIVERS\PFC027.SYS [2006-12-05 507136]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2009-07-13 43008]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-01-30 182680]
S3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudserd.sys [2014-01-30 182680]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 CTAudSvcService;Creative Audio Service; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [2008-11-18 307200]
R2 HuaweiHiSuiteService.exe;HuaweiHiSuiteService.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe [2012-05-03 161120]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-08-22 22192]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-31 634656]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-19 1259296]
R2 ssinstall;SInstalátor; C:\Windows\System32\ssins.exe [2014-08-14 2324216]
R2 TBSrv;Toolbar Service; C:\Program Files\Tbccint\ToolbarService\ToolbarService.exe [2014-04-10 350528]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-08-22 288120]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-14 267440]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2014-05-18 79360]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-22 102912]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-01-14 114800]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-05-18 1343400]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

[vyosek]

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Po spusteni probehne stazeni databaze
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  resethosts;
  emptyclsid;
  IEdefaults;
  FFdefaults;
  CHRdefaults;
  emptyIEcache;
  emptyFFcache;
  emptyCHRcache;
  emptyalltemp;
  emptyflash;
  emptyjava;
  emptyrecycle.bin;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

[Archicz]

# AdwCleaner v4.108 - Report created 18/01/2015 at 08:30:42
# Updated 17/01/2015 by Xplode
# Database : 2015-01-13.2 [Live]
# Operating System : Windows 7 Professional Service Pack 1 (32 bits)
# Username : Tomas - TOMAS-PC
# Running from : C:\Users\Tomas\Desktop\adwcleaner_4.108.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : TBSrv

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Tbccint
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\ConduitEngine
Folder Deleted : C:\Program Files\Tbccint
Folder Deleted : C:\Users\Tomas\AppData\Local\Tbccint
Folder Deleted : C:\Users\Tomas\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Tomas\AppData\LocalLow\ConduitEngine
Folder Deleted : C:\Users\Tomas\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\Tomas\AppData\LocalLow\Tbccint
Folder Deleted : C:\Users\Tomas\AppData\LocalLow\BS_Player_ControlBar_B
Folder Deleted : C:\Users\Tomas\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\haoasrb2.default\Extensions\engine@conduit.com
Folder Deleted : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\haoasrb2.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
Folder Deleted : C:\Users\Tomas\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja
Folder Deleted : C:\Users\Tomas\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aaaalipaokhkccgmgkdglfinfnfhflko
File Deleted : C:\END

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Classes\pokki
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IECT3329621
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2475029
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3329621
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A75BE48D-BF58-4A8B-B96C-F9A09DFB9844}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3A1209A4-8568-40F0-9B5E-4A06A2A06417}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31264A33-A653-46C4-AF49-1232C59A7DA5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31264A33-A653-46C4-AF49-1232C59A7DA5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31264A33-A653-46C4-AF49-1232C59A7DA5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3A1209A4-8568-40F0-9B5E-4A06A2A06417}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{31264A33-A653-46C4-AF49-1232C59A7DA5}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{31264A33-A653-46C4-AF49-1232C59A7DA5}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{31264A33-A653-46C4-AF49-1232C59A7DA5}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{31264A33-A653-46C4-AF49-1232C59A7DA5}]
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7A46E0A-8604-44E3-8931-91AF10A7F108}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\Tbccint
Key Deleted : HKCU\Software\Tbccint_HKLM
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\conduitEngine
Key Deleted : HKCU\Software\AppDataLow\Software\MyAshampoo\toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\AppDataLow\Software\Tbccint
Key Deleted : HKCU\Software\AppDataLow\Software\TbccintSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\BS_Player_ControlBar_B
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\conduitEngine
Key Deleted : HKLM\SOFTWARE\MyAshampoo\toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17496

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v35.0 (x86 cs)

[haoasrb2.default\prefs.js] - Line Deleted : user_pref("CT3329621.FF19Solved", "true");
[haoasrb2.default\prefs.js] - Line Deleted : user_pref("CT3329621.UserID", "UN40294564131440632");
[haoasrb2.default\prefs.js] - Line Deleted : user_pref("CT3329621.dum", "2");
[haoasrb2.default\prefs.js] - Line Deleted : user_pref("CT3329621.fullUserID", "UN40294564131440632.IN.20140629182520");
[haoasrb2.default\prefs.js] - Line Deleted : user_pref("CT3329621.installDate", "29/06/2014 18:25:32");
[haoasrb2.default\prefs.js] - Line Deleted : user_pref("CT3329621.installSessionId", "dc680e7a-6b34-49e6-ac9f-48597d6ed717");
[haoasrb2.default\prefs.js] - Line Deleted : user_pref("CT3329621.installSp", "FALSE");
[haoasrb2.default\prefs.js] - Line Deleted : user_pref("CT3329621.installerVersion", "1.11.0.11");
[haoasrb2.default\prefs.js] - Line Deleted : user_pref("CT3329621.searchRevert", "false");
[haoasrb2.default\prefs.js] - Line Deleted : user_pref("CT3329621.searchUninstallUserMode", "4");
[haoasrb2.default\prefs.js] - Line Deleted : user_pref("CT3329621.searchUserMode", "4");
[haoasrb2.default\prefs.js] - Line Deleted : user_pref("CT3329621.toolbarInstallDate", "29-06-2014 18:25:21");
[haoasrb2.default\prefs.js] - Line Deleted : user_pref("CT3329621.versionFromInstaller", "10.33.0.5");
[haoasrb2.default\prefs.js] - Line Deleted : user_pref("CT3329621.xpeMode", "1");
[haoasrb2.default\prefs.js] - Line Deleted : user_pref("extensions.xpiState", "{\"app-profile\":{\"engine@conduit.com\":{\"d\":\"C:\\\\Users\\\\Tomas\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\haoasrb2.default\\\\extensions\\\\en[...]
[haoasrb2.default\prefs.js] - Line Deleted : user_pref("smartbar.machineId", "QVPV+GLH9YKKG12OFQOXDPPLNYW1VM4LNP6FHICE3S/VTGBCC93Y9SZWPTE/XUIKWLUDA90E3TYJFMRBTVFGWG");

-\\ Comodo Dragon v

[C:\Users\Tomas\AppData\Local\Comodo\Dragon\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.ask.com/web?o=APN10257&doi=2014-05-25&apn_dtid=%5ECMD161%5EYY%5EUS&q={searchTerms}
[C:\Users\Tomas\AppData\Local\Comodo\Dragon\User Data\Default\preferences] - Deleted [Extension] : cmaiofennmphjldldcpphcechfnnohja
[C:\Users\Tomas\AppData\Local\Comodo\Dragon\User Data\Default\preferences] - Deleted [Extension] : aaaalipaokhkccgmgkdglfinfnfhflko

-\\ Opera v0.0.0.0

[C:\Users\Tomas\AppData\Local\Comodo\Dragon\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.ask.com/web?o=APN10257&doi=2014-05-25&apn_dtid=%5ECMD161%5EYY%5EUS&q={searchTerms}

*************************

AdwCleaner[R0].txt - [8190 octets] - [18/01/2015 08:28:49]
AdwCleaner[S0].txt - [8491 octets] - [18/01/2015 08:30:42]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8551 octets] ##########

[vyosek]

Pokracujte Zoek-em

[Archicz]

Zoek.exe v5.0.0.0 Updated 15-01-2015
Tool run by Tomas on ne 18.01.2015 at 8:36:13,07.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Tomas\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

18.1.2015 8:38:05 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\Program Files\Drogerie TETA deleted successfully
C:\PROGRA~2\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} deleted successfully
C:\Users\Tomas\AppData\Local\CrashDumps deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-924063812-4270153059-3166923768-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4E839D4E-BFBF-4EEB-9D8B-39C63506DEE8} deleted successfully
HKEY_USERS\S-1-5-21-924063812-4270153059-3166923768-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{86ECDF66-A65C-4343-8CB0-2D9D12B8F8E4} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{31264a33-a653-46c4-af49-1232c59a7da5} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-924063812-4270153059-3166923768-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{31264a33-a653-46c4-af49-1232c59a7da5} deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\haoasrb2.default\prefs.js:
user_pref("browser.startup.homepage", "www.seznam.cz");
user_pref("browser.search.useDBForOrder", "false");

Added to C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\haoasrb2.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\haoasrb2.default

user.js not found
---- Lines {31264a33-a653-46c4-af49-1232c59a7da5} removed from prefs.js ----
user_pref("extensions.xpiState", "{\"app-profile\":{\"{31264a33-a653-46c4-af49-1232c59a7da5}\":{\"d\":\"C:\\\\Users\\\\Tomas\\\\AppData\\\\Roaming\\\\
---- FireFox user.js and prefs.js backups ----

prefs_18.01.2015_0848_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~2\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} not found
C:\Program Files\MyAshampoo deleted
C:\Users\Tomas\appdata\locallow\MyAshampoo deleted
C:\Windows\system32\config\systemprofile\Searches deleted
C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\haoasrb2.default\CT3329621 deleted
C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\haoasrb2.default\extensions\{31264a33-a653-46c4-af49-1232c59a7da5} deleted
"C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\haoasrb2.default\extensions\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}" deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\haoasrb2.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions ======================

AppDir: C:\Program Files\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\haoasrb2.default
8560995C727974F27F2A1CE68909FEB9 - C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_257.dll - Shockwave Flash
0806948270D853B709CCBBF38AF167E4 - C:\Program Files\Adobe\Reader 11.0\Reader\browser\nppdf32.dll - Adobe Acrobat
9DF0C4F0CEF60158614EDD1B3AB441EE - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll - Adobe Acrobat
87132527E2256CF6683A18C4EB34DD3B - C:\Windows\system32\Wat\npWatWeb.dll - Windows Activation Technologies
893BF7D2261C56C24F813405D9D018E0 - C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll - Silverlight Plug-In
8DA2ED6B04EA33F2EAE8BA883F903729 - C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrlui.dll - Microsoft® Silverlight


==== Chromium Look ======================

Comodo Web Inspector - Tomas\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdngekjahnmlkinegnhdmmbcfnmbclnn

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{0DBB5DF4-D88F-4842-BCCF-FA15A19305C3} Zbo§ˇ.cz Url="http://www.zbozi.cz/?q={searchTerms}&r= ... arch_12902"
{324B3669-E5F9-4336-B3C9-7316C898CE09} Firmy.cz Url="http://www.firmy.cz/?q={searchTerms}&so ... arch_12902"
{3305574E-5066-4A5F-B958-272CD0E70BFC} Novinky.cz Url="http://www.novinky.cz/hledej?w={searchT ... arch_12902"
{480FDB72-1CB9-47EA-8859-D235B86B6E13} Seznam TV Program Url="http://tv.seznam.cz/hledej?w={searchTer ... arch_12902"
{4861C1C2-66BC-4BBE-86EE-1B1E67C5A932} Slovnˇk EN/CZ Url="http://slovnik.seznam.cz/?q={searchTerm ... arch_12902"
{5641F441-E293-418E-8E13-489E8586424A} Encyklopedie Seznam Url="http://encyklopedie.seznam.cz/search?q= ... arch_12902"
{8CF81667-FAE3-4527-B40A-8B4E635BD83A} Slovnˇk CZ/EN Url="http://slovnik.seznam.cz/?q={searchTerm ... arch_12902"
{9B9D11EB-B2E8-4796-B4D9-382C3ADF1557} Seznam Url="http://search.seznam.cz/?q={searchTerms ... arch_12902"
{C76E983A-B031-4784-A483-31C2CD5FED69} Mapy.cz Url="http://www.mapy.cz/?query={searchTerms} ... arch_12902"

==== Reset Google Chrome ======================

C:\Users\Tomas\AppData\Local\Comodo\Dragon\User Data\Default\Preferences was reset successfully
C:\Users\Tomas\AppData\Roaming\Opera Software\Opera Stable\Preferences was reset successfully
C:\Users\Tomas\AppData\Local\Comodo\Dragon\User Data\Default\Web Data was reset successfully
C:\Users\Tomas\AppData\Roaming\Opera Software\Opera Stable\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyAshampoo Toolbar deleted successfully

==== Empty IE Cache ======================

C:\Users\Tomas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Tomas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CVMQJ49M will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\Tomas\AppData\Local\Mozilla\Firefox\Profiles\haoasrb2.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Tomas\AppData\Local\Opera Software\Opera Stable\Cache emptied successfully
C:\Users\Tomas\AppData\Local\Comodo\Dragon\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=1132 folders=256 21469084 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Tomas\AppData\Local\Temp will be emptied at reboot
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Tomas\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Tomas\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CVMQJ49M" not found

==== EOF on ne 18.01.2015 at 8:52:18,45 ======================

[vyosek]

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=24&t=132509

[Archicz]

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-01-2015
Ran by Tomas (administrator) on TOMAS-PC on 18-01-2015 09:01:32
Running from C:\Users\Tomas\Desktop
Loaded Profiles: Tomas & UpdatusUser (Available profiles: Tomas & UpdatusUser)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe
(PS Media s.r.o.) C:\Windows\System32\ssins.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\PAC207\Monitor.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
() C:\Program Files\HiSuite\HiSuite.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
() C:\Users\Tomas\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\Tomas\AppData\Local\HiSuite\userdata\ADB\adb.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(forum.viry.cz) C:\Users\Tomas\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [MSStp] => C:\Windows\inf\msstp.vbe [1584 2014-03-05] ()
HKLM\...\Run: [mncdlnlSrv] => C:\Windows\system32\mncdlnl.vbe [7670 2014-03-05] ()
HKLM\...\Run: [P17RunE] => RunDll32 P17RunE.dll,RunDLLEntry
HKLM\...\Run: [Monitor] => C:\Windows\PixArt\PAC207\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [seznam-listicka-distribuce] => C:\Program Files\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\Run: [Mobile Partner] => C:\Program Files\HiSuite\HiSuite.exe [552288 2012-05-15] ()
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Tomas\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Tomas\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [30879328 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [752736 2012-10-18] (ZONER software)
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\MountPoints2: {48029a31-9dcd-11e4-99dd-001731d9077d} - G:\iLinker.exe
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\MountPoints2: {ac1fd907-de6e-11e3-b337-806e6f6e6963} - E:\start.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-924063812-4270153059-3166923768-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-924063812-4270153059-3166923768-1000 -> {0DBB5DF4-D88F-4842-BCCF-FA15A19305C3} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_12902
SearchScopes: HKU\S-1-5-21-924063812-4270153059-3166923768-1000 -> {324B3669-E5F9-4336-B3C9-7316C898CE09} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_12902
SearchScopes: HKU\S-1-5-21-924063812-4270153059-3166923768-1000 -> {3305574E-5066-4A5F-B958-272CD0E70BFC} URL = http://www.novinky.cz/hledej?w={searchT ... arch_12902
SearchScopes: HKU\S-1-5-21-924063812-4270153059-3166923768-1000 -> {480FDB72-1CB9-47EA-8859-D235B86B6E13} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_12902
SearchScopes: HKU\S-1-5-21-924063812-4270153059-3166923768-1000 -> {4861C1C2-66BC-4BBE-86EE-1B1E67C5A932} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12902
SearchScopes: HKU\S-1-5-21-924063812-4270153059-3166923768-1000 -> {5641F441-E293-418E-8E13-489E8586424A} URL = http://encyklopedie.seznam.cz/search?q= ... arch_12902
SearchScopes: HKU\S-1-5-21-924063812-4270153059-3166923768-1000 -> {8CF81667-FAE3-4527-B40A-8B4E635BD83A} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12902
SearchScopes: HKU\S-1-5-21-924063812-4270153059-3166923768-1000 -> {9B9D11EB-B2E8-4796-B4D9-382C3ADF1557} URL = http://search.seznam.cz/?q={searchTerms ... arch_12902
SearchScopes: HKU\S-1-5-21-924063812-4270153059-3166923768-1000 -> {C76E983A-B031-4784-A483-31C2CD5FED69} URL = http://www.mapy.cz/?query={searchTerms} ... arch_12902
SearchScopes: HKU\S-1-5-21-924063812-4270153059-3166923768-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\haoasrb2.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome:
=======

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-05-18] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2008-11-18] (Creative Technology Ltd) [File not signed]
R2 HuaweiHiSuiteService.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe [161120 2012-05-03] ()
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
R2 ssinstall; C:\Windows\System32\ssins.exe [2324216 2014-08-14] (PS Media s.r.o.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 ivusb; C:\Windows\System32\DRIVERS\ivusb.sys [25112 2010-07-28] (Initio Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R3 P17; C:\Windows\System32\drivers\P17.sys [1147392 2009-04-21] (Creative Technology Ltd.)
S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [507136 2006-12-05] (PixArt Imaging Inc.)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [182680 2014-01-30] (DEVGURU Co., LTD.(www.devguru.co.kr))
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [102272 2011-10-24] (Huawei Technologies Co., Ltd.)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-18 09:01 - 2015-01-18 09:01 - 00009825 _____ () C:\Users\Tomas\Desktop\FRST.txt
2015-01-18 09:00 - 2015-01-18 09:00 - 00112640 _____ (forum.viry.cz) C:\Users\Tomas\Desktop\FRSTLauncher.exe
2015-01-18 08:59 - 2015-01-18 09:01 - 00000000 ____D () C:\FRST
2015-01-18 08:58 - 2015-01-18 08:58 - 01117696 _____ (Farbar) C:\Users\Tomas\Desktop\FRST.exe
2015-01-18 08:51 - 2015-01-18 08:36 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-01-18 08:37 - 2015-01-18 08:52 - 00010069 _____ () C:\zoek-results.log
2015-01-18 08:36 - 2015-01-18 08:48 - 00000000 ____D () C:\zoek_backup
2015-01-18 08:35 - 2015-01-18 08:35 - 01295360 _____ () C:\Users\Tomas\Desktop\zoek.exe
2015-01-18 08:31 - 2015-01-18 08:51 - 00000638 _____ () C:\Windows\PFRO.log
2015-01-18 08:28 - 2015-01-18 08:30 - 00000000 ____D () C:\AdwCleaner
2015-01-18 08:27 - 2015-01-18 08:27 - 02186752 _____ () C:\Users\Tomas\Desktop\adwcleaner_4.108.exe
2015-01-18 07:39 - 2015-01-18 07:40 - 00000000 ____D () C:\rsit
2015-01-18 07:39 - 2015-01-18 07:40 - 00000000 ____D () C:\Program Files\trend micro
2015-01-18 07:39 - 2015-01-18 07:39 - 01107968 _____ () C:\Users\Tomas\Desktop\RSIT.exe
2015-01-16 23:24 - 2014-12-11 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-16 10:52 - 2014-08-29 02:44 - 02744320 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-01-16 10:50 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-01-16 10:43 - 2015-01-18 08:52 - 00001070 _____ () C:\Windows\setupact.log
2015-01-16 10:43 - 2015-01-16 10:43 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-15 13:06 - 2014-05-08 10:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-01-14 20:19 - 2015-01-14 20:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-01-14 20:19 - 2013-10-02 01:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2015-01-14 20:19 - 2013-10-02 01:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-01-14 20:19 - 2013-10-02 01:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-01-14 20:19 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2015-01-14 20:19 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2015-01-14 20:19 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-01-14 20:19 - 2013-10-02 00:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2015-01-14 20:19 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-01-14 20:19 - 2013-10-01 23:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2015-01-14 20:19 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-01-14 20:19 - 2012-08-23 15:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-01-14 20:19 - 2012-08-23 15:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-01-14 20:19 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2015-01-14 20:18 - 2015-01-14 20:18 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-01-14 19:51 - 2015-01-14 19:51 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-01-14 18:16 - 2015-01-14 18:16 - 00000057 _____ () C:\Windows\ALIK.INI
2015-01-14 18:16 - 2015-01-14 18:16 - 00000000 ____D () C:\Users\Tomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alík - Můj první slabikář
2015-01-14 18:16 - 2015-01-14 18:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alík - Můj první slabikář
2015-01-14 18:15 - 2015-01-14 18:15 - 00253952 ____N (Microsoft Corporation) C:\Windows\Setup1.exe
2015-01-14 18:15 - 2015-01-14 18:15 - 00073728 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE
2015-01-14 17:44 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 17:44 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 17:44 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-01-14 17:44 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 17:44 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-10 12:41 - 2015-01-10 12:54 - 156728392 _____ () C:\Users\Tomas\Downloads\47.Války-a-zbraně.Válka-v-Koreji-cz.avi.opdownload
2015-01-10 12:40 - 2015-01-10 12:40 - 00000000 ____D () C:\Users\Tomas\AppData\Roaming\Opera Software
2015-01-10 12:40 - 2015-01-10 12:40 - 00000000 ____D () C:\Users\Tomas\AppData\Local\Opera Software
2015-01-10 12:39 - 2015-01-10 14:39 - 00000000 ____D () C:\Program Files\Opera
2014-12-26 12:30 - 2014-12-26 12:30 - 00002719 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-12-26 12:30 - 2014-12-26 12:30 - 00000000 ___RD () C:\Program Files\Skype
2014-12-26 12:30 - 2014-12-26 12:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-12-26 12:30 - 2014-12-26 12:30 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-12-20 20:59 - 2014-12-20 20:59 - 03249480 _____ (Unity Technologies ApS) C:\Users\Tomas\Downloads\UnityWebPlayer(1).exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-18 09:02 - 2014-05-18 11:58 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-18 08:59 - 2009-07-14 05:34 - 00025424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-18 08:59 - 2009-07-14 05:34 - 00025424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-18 08:57 - 2014-08-14 14:03 - 00000000 ____D () C:\Users\Tomas\AppData\Roaming\Seznam.cz
2015-01-18 08:56 - 2014-05-18 10:30 - 01858214 _____ () C:\Windows\WindowsUpdate.log
2015-01-18 08:53 - 2014-05-18 12:28 - 00000330 _____ () C:\Users\Tomas\rgut
2015-01-18 08:52 - 2014-08-14 14:02 - 00000000 _____ () C:\Windows\system32\sinstall.log
2015-01-18 08:52 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-18 07:24 - 2014-05-18 13:25 - 00000000 ____D () C:\Users\Tomas\AppData\Roaming\Skype
2015-01-18 07:19 - 2009-07-14 05:53 - 00032578 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-01-16 23:47 - 2014-05-18 11:00 - 01582262 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-15 10:14 - 2014-05-18 10:55 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-01-14 21:26 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2015-01-14 20:49 - 2009-07-14 03:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-14 18:25 - 2014-05-19 12:32 - 110348472 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-14 18:25 - 2014-05-19 12:32 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 18:22 - 2014-05-18 12:17 - 00000000 ____D () C:\Games
2015-01-14 18:02 - 2014-05-18 11:58 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-01-14 18:02 - 2014-05-18 11:58 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-12-31 12:13 - 2014-05-18 10:55 - 00249488 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-12-26 12:31 - 2014-05-18 13:25 - 00000000 ____D () C:\ProgramData\Skype
2014-12-21 11:24 - 2014-08-17 12:04 - 00000000 ____D () C:\Users\Tomas\AppData\Local\Adobe

==================== Files in the root of some directories =======

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================


Available physical RAM: 983.42 MB
Total physical RAM: 2046.49 MB
Percentage of memory in use: 51%

==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Tomas\Desktop" je 53 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

[vyosek]

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  HKLM\...\Run: [MSStp] => C:\Windows\inf\msstp.vbe [1584 2014-03-05] ()
  HKLM\...\Run: [mncdlnlSrv] => C:\Windows\system32\mncdlnl.vbe [7670 2014-03-05] ()
  HKLM\...\Run: [P17RunE] => RunDll32 P17RunE.dll,RunDLLEntry
  HKLM\...\Run: [seznam-listicka-distribuce] => C:\Program Files\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
  HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\Run: [Mobile Partner] => C:\Program Files\HiSuite\HiSuite.exe [552288 2012-05-15] ()
  HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Tomas\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
  HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Tomas\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
  HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [30879328 2014-12-11] (Skype Technologies S.A.)
  HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [752736 2012-10-18] (ZONER software)
  HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\MountPoints2: {48029a31-9dcd-11e4-99dd-001731d9077d} - G:\iLinker.exe
  HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\MountPoints2: {ac1fd907-de6e-11e3-b337-806e6f6e6963} - E:\start.exe
  
  SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\S-1-5-21-924063812-4270153059-3166923768-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  
  C:\Windows\inf\msstp.vbe
  C:\Windows\system32\mncdlnl.vbe
  2015-01-18 09:01 - 2015-01-18 09:01 - 00009825 _____ () C:\Users\Tomas\Desktop\FRST.txt
  2015-01-18 09:00 - 2015-01-18 09:00 - 00112640 _____ (forum.viry.cz) C:\Users\Tomas\Desktop\FRSTLauncher.exe
  2015-01-18 08:51 - 2015-01-18 08:36 - 00024064 _____ () C:\Windows\zoek-delete.exe
  2015-01-18 08:37 - 2015-01-18 08:52 - 00010069 _____ () C:\zoek-results.log
  2015-01-18 08:36 - 2015-01-18 08:48 - 00000000 ____D () C:\zoek_backup
  2015-01-18 08:35 - 2015-01-18 08:35 - 01295360 _____ () C:\Users\Tomas\Desktop\zoek.exe
  2015-01-18 08:31 - 2015-01-18 08:51 - 00000638 _____ () C:\Windows\PFRO.log
  2015-01-18 08:28 - 2015-01-18 08:30 - 00000000 ____D () C:\AdwCleaner
  2015-01-18 08:27 - 2015-01-18 08:27 - 02186752 _____ () C:\Users\Tomas\Desktop\adwcleaner_4.108.exe
  2015-01-18 07:39 - 2015-01-18 07:40 - 00000000 ____D () C:\rsit
  2015-01-18 07:39 - 2015-01-18 07:40 - 00000000 ____D () C:\Program Files\trend micro
  2015-01-18 07:39 - 2015-01-18 07:39 - 01107968 _____ () C:\Users\Tomas\Desktop\RSIT.exe
  2015-01-16 10:43 - 2015-01-18 08:52 - 00001070 _____ () C:\Windows\setupact.log
  2015-01-16 10:43 - 2015-01-16 10:43 - 00000000 _____ () C:\Windows\setuperr.log
  
  Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
  
  
  Hosts:
  EmptyTemp:
  Reboot:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

[Archicz]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 18-01-2015
Ran by Tomas at 2015-01-18 09:11:04 Run:1
Running from C:\Users\Tomas\Desktop
Loaded Profiles: Tomas & UpdatusUser (Available profiles: Tomas & UpdatusUser)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [MSStp] => C:\Windows\inf\msstp.vbe [1584 2014-03-05] ()
HKLM\...\Run: [mncdlnlSrv] => C:\Windows\system32\mncdlnl.vbe [7670 2014-03-05] ()
HKLM\...\Run: [P17RunE] => RunDll32 P17RunE.dll,RunDLLEntry
HKLM\...\Run: [seznam-listicka-distribuce] => C:\Program Files\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\Run: [Mobile Partner] => C:\Program Files\HiSuite\HiSuite.exe [552288 2012-05-15] ()
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Tomas\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Tomas\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [30879328 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [752736 2012-10-18] (ZONER software)
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\MountPoints2: {48029a31-9dcd-11e4-99dd-001731d9077d} - G:\iLinker.exe
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\...\MountPoints2: {ac1fd907-de6e-11e3-b337-806e6f6e6963} - E:\start.exe

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-924063812-4270153059-3166923768-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

C:\Windows\inf\msstp.vbe
C:\Windows\system32\mncdlnl.vbe
2015-01-18 09:01 - 2015-01-18 09:01 - 00009825 _____ () C:\Users\Tomas\Desktop\FRST.txt
2015-01-18 09:00 - 2015-01-18 09:00 - 00112640 _____ (forum.viry.cz) C:\Users\Tomas\Desktop\FRSTLauncher.exe
2015-01-18 08:51 - 2015-01-18 08:36 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-01-18 08:37 - 2015-01-18 08:52 - 00010069 _____ () C:\zoek-results.log
2015-01-18 08:36 - 2015-01-18 08:48 - 00000000 ____D () C:\zoek_backup
2015-01-18 08:35 - 2015-01-18 08:35 - 01295360 _____ () C:\Users\Tomas\Desktop\zoek.exe
2015-01-18 08:31 - 2015-01-18 08:51 - 00000638 _____ () C:\Windows\PFRO.log
2015-01-18 08:28 - 2015-01-18 08:30 - 00000000 ____D () C:\AdwCleaner
2015-01-18 08:27 - 2015-01-18 08:27 - 02186752 _____ () C:\Users\Tomas\Desktop\adwcleaner_4.108.exe
2015-01-18 07:39 - 2015-01-18 07:40 - 00000000 ____D () C:\rsit
2015-01-18 07:39 - 2015-01-18 07:40 - 00000000 ____D () C:\Program Files\trend micro
2015-01-18 07:39 - 2015-01-18 07:39 - 01107968 _____ () C:\Users\Tomas\Desktop\RSIT.exe
2015-01-16 10:43 - 2015-01-18 08:52 - 00001070 _____ () C:\Windows\setupact.log
2015-01-16 10:43 - 2015-01-16 10:43 - 00000000 _____ () C:\Windows\setuperr.log

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe


Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\MSStp => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\mncdlnlSrv => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\P17RunE => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce => value deleted successfully.
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Mobile Partner => value deleted successfully.
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.autoupdate => value deleted successfully.
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.szndesktop => value deleted successfully.
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
HKU\S-1-5-21-924063812-4270153059-3166923768-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Autoupdate => value deleted successfully.
"HKU\S-1-5-21-924063812-4270153059-3166923768-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{48029a31-9dcd-11e4-99dd-001731d9077d}" => Key deleted successfully.
HKCR\CLSID\{48029a31-9dcd-11e4-99dd-001731d9077d} => Key not found.
"HKU\S-1-5-21-924063812-4270153059-3166923768-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ac1fd907-de6e-11e3-b337-806e6f6e6963}" => Key deleted successfully.
HKCR\CLSID\{ac1fd907-de6e-11e3-b337-806e6f6e6963} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-21-924063812-4270153059-3166923768-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found.
C:\Windows\inf\msstp.vbe => Moved successfully.
C:\Windows\system32\mncdlnl.vbe => Moved successfully.
C:\Users\Tomas\Desktop\FRST.txt => Moved successfully.
C:\Users\Tomas\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Tomas\Desktop\zoek.exe => Moved successfully.
C:\Windows\PFRO.log => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Tomas\Desktop\adwcleaner_4.108.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Users\Tomas\Desktop\RSIT.exe => Moved successfully.
C:\Windows\setupact.log => Moved successfully.
C:\Windows\setuperr.log => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 16.1 MB temporary data.


The system needed a reboot.

==== End of Fixlog 09:11:30 ====

[vyosek]

Jak se chova PC??

[Archicz]

momentálně jsem dal stahovat z ulozto.cz jeden 350Mb soubor, s premiovym stahovanim jsem ho stahl bez problému, nyní stahuji jako normální uživatel a vše zatím bez problémů

[vyosek]

Tak jeste uklidime

DelFix https://toolslib.net/downloads/finish/2/

• Stahnete a spustte
• Ponechte zatrzitkou pouze u volby Remote disinfection tools
• Kliknete na Run

Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

[Archicz]

Ok děkuji moc za pomoc, doufám že ji zas nebudu nějakou dobu potřebovat. Přeji hezký den.

[vyosek]

Nemate zac, rad jsem pomohl Zase nekdy


A na zaklade Pravidla o zamykani temat