VIRY.CZ

Zdravím, prosím o pomoc, vyskakují reklamy a pc je pomalý

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jirka at 2015-02-14 10:29:38
Microsoft Windows 8.1
System drive C: has 865 GB (95%) free of 912 GB
Total RAM: 8084 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:29:45, on 14. 2. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Jirka\AppData\Roaming\StartMenu\StartMenu.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE
C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvTrayLoad.exe
C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvController.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Dolphin Deals\bin\DolphinDeals.expext.exe
C:\Program Files (x86)\Dolphin Deals\bin\DolphinDeals.BOASHelper.exe
C:\Program Files (x86)\Dolphin Deals\bin\DolphinDeals.BrowserAdapter.exe
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Dolphin Deals\bin\DolphinDeals.BOASPRT.exe
C:\Program Files (x86)\Dolphin Deals\bin\DolphinDeals.BOAS.exe
C:\Program Files (x86)\Dolphin Deals\bin\DolphinDeals.BOASPRT.exe
C:\Program Files (x86)\Dolphin Deals\bin\DolphinDeals.BOASPRT.exe
C:\Program Files (x86)\Dolphin Deals\bin\DolphinDeals.BOAS.exe
C:\Program Files (x86)\Dolphin Deals\bin\DolphinDeals.BOAS.exe
C:\Users\Jirka\Downloads\RSIT.exe
C:\Program Files (x86)\trend micro\Jirka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Dolphin Deals 1.0.0.6 - {15a4ce1e-d288-4d04-85bf-907170010a7a} - (no file)
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [PCSpeedUp] C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe
O4 - HKCU\..\Run: [StartMenu] C:\Users\Jirka\AppData\Roaming\StartMenu\StartMenu.exe
O4 - HKCU\..\Run: [ShowDesktopAsRun] C:\Users\Jirka\AppData\Roaming\StartMenu\desktop.scf
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BTDevManager - Unknown owner - C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @C:\windows\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: LsvUIService - Lenovo - C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvUIService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PC Speed Up Service (PCSUService) - Unknown owner - C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Conexant SmartAudio service (SAService) - Conexant Systems, Inc. - C:\windows\system32\SAsrv.exe
O23 - Service: Network Support Service Updater (ServiceUpdater) - Unknown owner - C:\windows\SysWOW64\netupdsrv.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Update Dolphin Deals - Unknown owner - C:\Program Files (x86)\Dolphin Deals\updateDolphinDeals.exe
O23 - Service: Util Dolphin Deals - Unknown owner - C:\Program Files (x86)\Dolphin Deals\bin\utilDolphinDeals.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: VeriFaceSrv - Unknown owner - C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9368 bytes

======Scheduled tasks folder======

C:\windows\tasks\PC Speed Up Update Cache.job - C:\Program Files (x86)\Zrychleni Pocitace\PCSUUCC.exe /ucf
C:\windows\tasks\PC SpeedUp Service Deactivator.job - C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe /dev0 /idle

=========Mozilla firefox=========

ProfilePath - C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\s2vcvle6.default-1423902445975

prefs.js - "browser.startup.homepage" - "https://www.google.cz/?gws_rd=ssl"
prefs.js - "keyword.URL" - "http://search.yahoo.com/yhs/search?hspa ... _bd_com&p="

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\s2vcvle6.default-1423902445975\searchplugins\
dsrlte.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{15a4ce1e-d288-4d04-85bf-907170010a7a}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-01-24 586968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2011-12-07 214312]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-01-24 5227112]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-10-01 22065760]
"PCSpeedUp"=C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe [2014-09-23 314664]
"StartMenu"=C:\Users\Jirka\AppData\Roaming\StartMenu\StartMenu.exe [2015-02-09 3359872]
"ShowDesktopAsRun"=C:\Users\Jirka\AppData\Roaming\StartMenu\desktop.scf [2015-02-08 81]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comupdatus.exe]
"Debugger=""C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\drv64.exe]
"Debugger=""C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nvtmru.exe]
"Debugger=""C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wlmerger.exe]
"Debugger=""C:\Program Files (x86)\Zrychleni Pocitace\PCSUSD.exe" /debugexe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"vidc.cvid"=iccvid.dll
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.clmp3enc"=C:\PROGRA~2\Lenovo\Power2Go\CLMP3Enc.ACM

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2015-02-14 10:29:38 ----D---- C:\rsit
2015-02-14 10:29:38 ----D---- C:\Program Files (x86)\trend micro
2015-02-14 10:02:04 ----D---- C:\Program Files (x86)\TeamViewer
2015-02-14 09:56:02 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-02-08 17:22:53 ----D---- C:\Users\Jirka\AppData\Roaming\StartMenu
2015-02-03 20:22:41 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-01-24 13:11:40 ----D---- C:\Users\Jirka\AppData\Roaming\Dropbox
2015-01-24 13:07:14 ----D---- C:\Users\Jirka\AppData\Roaming\AVAST Software
2015-01-24 13:06:00 ----A---- C:\windows\avastSS.scr
2015-01-24 13:03:22 ----D---- C:\ProgramData\AVAST Software
2015-01-18 17:25:11 ----A---- C:\windows\SysWOW64\HPOINS08.TXT
2015-01-18 17:25:09 ----A---- C:\windows\IsUninst.exe
2015-01-17 19:58:15 ----D---- C:\Users\Jirka\AppData\Roaming\CyberLink
2015-01-17 19:05:01 ----D---- C:\059555020546fb96768b586fcbbe
2015-01-17 18:26:35 ----A---- C:\windows\SysWOW64\wermgr.exe
2015-01-17 18:26:35 ----A---- C:\windows\SysWOW64\WerFaultSecure.exe
2015-01-17 18:26:35 ----A---- C:\windows\SysWOW64\WerFault.exe
2015-01-17 18:26:35 ----A---- C:\windows\SysWOW64\werdiagcontroller.dll
2015-01-17 18:26:35 ----A---- C:\windows\SysWOW64\wer.dll
2015-01-17 18:26:35 ----A---- C:\windows\SysWOW64\nlaapi.dll
2015-01-17 18:26:35 ----A---- C:\windows\SysWOW64\Faultrep.dll
2015-01-17 18:26:35 ----A---- C:\windows\SysWOW64\AudioSes.dll
2015-01-17 18:26:35 ----A---- C:\windows\SysWOW64\AUDIOKSE.dll
2015-01-17 18:26:35 ----A---- C:\windows\SysWOW64\AudioEng.dll
2015-01-08 10:31:20 ----D---- C:\Users\Jirka\AppData\Roaming\vlc
2015-01-06 16:02:33 ----D---- C:\Users\Jirka\AppData\Roaming\QuickScan
2015-01-04 13:22:10 ----A---- C:\awh5DD6.tmp
2014-12-18 17:53:09 ----D---- C:\KMPlayer
2014-12-16 22:28:00 ----A---- C:\windows\SysWOW64\poqexec.exe
2014-12-15 20:58:16 ----A---- C:\awhA40A.tmp
2014-12-15 15:34:13 ----D---- C:\Program Files (x86)\Mozilla Firefox.bak
2014-12-15 15:08:41 ----A---- C:\windows\SysWOW64\crypt32.dll
2014-12-15 15:08:27 ----A---- C:\windows\SysWOW64\DeviceSetupStatusProvider.dll
2014-12-15 15:08:23 ----A---- C:\windows\SysWOW64\MrmCoreR.dll
2014-12-14 09:52:18 ----A---- C:\windows\SysWOW64\WindowsCodecs.dll
2014-12-14 09:52:10 ----A---- C:\windows\SysWOW64\mshtml.dll
2014-12-14 09:52:08 ----A---- C:\windows\SysWOW64\ieframe.dll
2014-12-14 09:52:07 ----A---- C:\windows\SysWOW64\wininet.dll
2014-12-14 09:52:07 ----A---- C:\windows\SysWOW64\vbscript.dll
2014-12-14 09:52:07 ----A---- C:\windows\SysWOW64\urlmon.dll
2014-12-14 09:52:07 ----A---- C:\windows\SysWOW64\jscript9.dll
2014-12-14 09:52:07 ----A---- C:\windows\SysWOW64\iertutil.dll
2014-12-14 09:52:07 ----A---- C:\windows\SysWOW64\ieapfltr.dll
2014-12-14 09:52:06 ----A---- C:\windows\SysWOW64\webcheck.dll
2014-12-14 09:52:06 ----A---- C:\windows\SysWOW64\mshtmled.dll
2014-12-14 09:52:06 ----A---- C:\windows\SysWOW64\MshtmlDac.dll
2014-12-14 09:52:06 ----A---- C:\windows\SysWOW64\msfeeds.dll
2014-12-14 09:52:06 ----A---- C:\windows\SysWOW64\jscript.dll
2014-12-14 09:52:06 ----A---- C:\windows\SysWOW64\inetcomm.dll
2014-12-14 09:52:06 ----A---- C:\windows\SysWOW64\iepeers.dll
2014-12-14 09:52:06 ----A---- C:\windows\SysWOW64\iedkcs32.dll
2014-12-14 09:52:06 ----A---- C:\windows\SysWOW64\dxtrans.dll
2014-12-07 10:27:50 ----A---- C:\awh1E8C.tmp
2014-12-04 21:28:34 ----A---- C:\awhEEB3.tmp
2014-12-04 21:23:18 ----D---- C:\Program Files (x86)\Common Files\Config
2014-11-27 19:49:27 ----D---- C:\Program Files (x86)\VideoLAN
2014-11-27 19:49:13 ----D---- C:\Program Files (x86)\Seznam.cz
2014-11-27 19:48:13 ----D---- C:\Users\Jirka\AppData\Roaming\Seznam.cz
2014-11-27 19:47:53 ----D---- C:\Program Files (x86)\Zrychleni Pocitace
2014-11-27 19:47:32 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-11-27 19:44:36 ----D---- C:\Program Files (x86)\Dolphin Deals
2014-11-27 19:44:21 ----D---- C:\Program Files (x86)\Google
2014-11-18 19:56:49 ----A---- C:\windows\SysWOW64\pku2u.dll
2014-11-18 19:56:49 ----A---- C:\windows\SysWOW64\kerberos.dll
2014-11-16 09:27:57 ----A---- C:\windows\SysWOW64\msi.dll
2014-11-16 09:27:56 ----A---- C:\windows\SysWOW64\msihnd.dll
2014-11-16 09:27:56 ----A---- C:\windows\SysWOW64\authui.dll
2014-11-16 09:27:16 ----A---- C:\windows\SysWOW64\wusa.exe
2014-11-16 09:16:57 ----A---- C:\windows\SysWOW64\msxml3.dll
2014-11-16 09:16:28 ----A---- C:\windows\SysWOW64\mrt100.dll
2014-11-16 09:16:27 ----A---- C:\windows\SysWOW64\mrt_map.dll
2014-11-16 08:58:01 ----A---- C:\windows\SysWOW64\FlashPlayerApp.exe
2014-11-15 20:26:55 ----D---- C:\Users\Jirka\AppData\Roaming\Skype
2014-11-15 19:02:53 ----D---- C:\Users\Jirka\AppData\Roaming\Mozilla
2014-11-15 19:02:49 ----D---- C:\ProgramData\Mozilla
2014-11-15 19:01:14 ----A---- C:\windows\SysWOW64\Windows.UI.Xaml.dll
2014-11-15 19:01:06 ----A---- C:\windows\SysWOW64\mfcore.dll
2014-11-15 19:01:06 ----A---- C:\windows\SysWOW64\d3d10warp.dll
2014-11-15 19:01:02 ----A---- C:\windows\SysWOW64\Windows.Media.dll
2014-11-15 19:01:00 ----A---- C:\windows\SysWOW64\WMVDECOD.DLL
2014-11-15 19:00:57 ----A---- C:\windows\SysWOW64\SRH.dll
2014-11-15 19:00:57 ----A---- C:\windows\SysWOW64\printui.dll
2014-11-15 19:00:57 ----A---- C:\windows\SysWOW64\netcfgx.dll
2014-11-15 19:00:56 ----A---- C:\windows\SysWOW64\wlanmsm.dll
2014-11-15 19:00:56 ----A---- C:\windows\SysWOW64\AppxPackaging.dll
2014-11-15 19:00:55 ----A---- C:\windows\SysWOW64\Windows.Devices.Bluetooth.dll
2014-11-15 19:00:55 ----A---- C:\windows\SysWOW64\mftranscode.dll
2014-11-15 19:00:55 ----A---- C:\windows\SysWOW64\mfplat.dll
2014-11-15 19:00:54 ----A---- C:\windows\SysWOW64\SHCore.dll
2014-11-15 19:00:50 ----A---- C:\windows\SysWOW64\comdlg32.dll
2014-11-15 19:00:47 ----A---- C:\windows\SysWOW64\mfreadwrite.dll
2014-11-15 19:00:46 ----A---- C:\windows\SysWOW64\wlanapi.dll
2014-11-15 19:00:46 ----A---- C:\windows\SysWOW64\storagewmi.dll
2014-11-15 19:00:46 ----A---- C:\windows\SysWOW64\Display.dll
2014-11-15 19:00:45 ----A---- C:\windows\SysWOW64\winmmbase.dll
2014-11-15 19:00:44 ----A---- C:\windows\SysWOW64\wisp.dll
2014-11-15 19:00:44 ----A---- C:\windows\SysWOW64\aclui.dll
2014-11-15 19:00:42 ----A---- C:\windows\SysWOW64\bcryptprimitives.dll
2014-11-15 19:00:41 ----A---- C:\windows\SysWOW64\AppxSip.dll
2014-11-15 19:00:40 ----A---- C:\windows\SysWOW64\XpsPrint.dll
2014-11-15 19:00:40 ----A---- C:\windows\SysWOW64\wsecedit.dll
2014-11-15 19:00:39 ----A---- C:\windows\SysWOW64\winmm.dll
2014-11-15 19:00:38 ----A---- C:\windows\SysWOW64\SndVol.exe
2014-11-15 19:00:38 ----A---- C:\windows\SysWOW64\dwmapi.dll
2014-11-15 19:00:37 ----A---- C:\windows\SysWOW64\WebClnt.dll
2014-11-15 19:00:37 ----A---- C:\windows\SysWOW64\VAN.dll
2014-11-15 19:00:35 ----A---- C:\windows\SysWOW64\clusapi.dll
2014-11-15 19:00:34 ----A---- C:\windows\SysWOW64\iasnap.dll
2014-11-15 19:00:33 ----A---- C:\windows\SysWOW64\rsaenh.dll
2014-11-15 19:00:33 ----A---- C:\windows\SysWOW64\gpedit.dll
2014-11-15 19:00:32 ----A---- C:\windows\SysWOW64\osk.exe
2014-11-15 19:00:31 ----A---- C:\windows\SysWOW64\Windows.Networking.dll
2014-11-15 19:00:31 ----A---- C:\windows\SysWOW64\mispace.dll
2014-11-15 19:00:30 ----A---- C:\windows\SysWOW64\SettingSync.dll
2014-11-15 19:00:29 ----A---- C:\windows\SysWOW64\wshbth.dll
2014-11-15 19:00:29 ----A---- C:\windows\SysWOW64\stobject.dll
2014-11-15 19:00:28 ----A---- C:\windows\SysWOW64\KBDRUM.DLL
2014-11-15 19:00:28 ----A---- C:\windows\SysWOW64\ActionCenter.dll
2014-11-15 19:00:27 ----A---- C:\windows\SysWOW64\GdiPlus.dll
2014-11-15 19:00:25 ----A---- C:\windows\SysWOW64\KBDRU.DLL
2014-11-15 19:00:25 ----A---- C:\windows\SysWOW64\KBDBASH.DLL
2014-11-15 19:00:24 ----A---- C:\windows\SysWOW64\KBDYAK.DLL
2014-11-15 19:00:24 ----A---- C:\windows\SysWOW64\KBDRU1.DLL
2014-11-15 19:00:22 ----A---- C:\windows\SysWOW64\PrintDialogs.dll
2014-11-15 19:00:21 ----A---- C:\windows\SysWOW64\KBDTAT.DLL
2014-11-15 19:00:20 ----A---- C:\windows\SysWOW64\BluetoothApis.dll
2014-11-15 19:00:15 ----A---- C:\windows\SysWOW64\KBDTT102.DLL
2014-11-15 18:40:47 ----RD---- C:\Program Files (x86)\Skype
2014-11-15 18:40:47 ----D---- C:\Program Files (x86)\Common Files\Skype
2014-11-15 18:40:44 ----D---- C:\ProgramData\Skype
2014-11-15 13:34:09 ----RD---- C:\windows\BrowserChoice

======List of files/folders modified in the last 3 months======

2015-02-14 10:29:38 ----RD---- C:\Program Files (x86)
2015-02-14 10:26:43 ----D---- C:\windows\WinSxS
2015-02-14 10:26:36 ----D---- C:\windows\CbsTemp
2015-02-14 10:24:35 ----D---- C:\windows\System32
2015-02-14 10:24:04 ----D---- C:\windows\Prefetch
2015-02-14 10:23:39 ----D---- C:\windows\Inf
2015-02-14 10:23:30 ----SHD---- C:\System Volume Information
2015-02-14 10:02:08 ----RSD---- C:\windows\Fonts
2015-02-14 09:52:18 ----A---- C:\windows\win.ini
2015-02-14 09:40:26 ----D---- C:\windows\Temp
2015-02-12 21:22:27 ----D---- C:\windows\AppReadiness
2015-02-10 21:53:17 ----D---- C:\windows\Microsoft.NET
2015-02-08 17:50:23 ----D---- C:\windows\SysWOW64
2015-02-08 17:47:28 ----SHD---- C:\windows\Installer
2015-02-08 17:47:28 ----D---- C:\windows\Tasks
2015-02-08 17:37:04 ----RD---- C:\Program Files
2015-02-08 17:37:04 ----D---- C:\ProgramData\McAfee
2015-02-08 17:37:02 ----D---- C:\Program Files (x86)\Common Files
2015-02-08 17:26:59 ----HD---- C:\windows\ELAMBKUP
2015-01-24 13:06:01 ----AD---- C:\Windows
2015-01-24 13:03:22 ----HD---- C:\ProgramData
2015-01-17 19:58:16 ----D---- C:\ProgramData\CyberLink
2015-01-05 17:32:01 ----D---- C:\ProgramData\Energy Manager
2014-12-28 21:34:23 ----D---- C:\windows\rescache
2014-12-15 17:01:29 ----SD---- C:\ProgramData\Microsoft
2014-12-15 17:01:29 ----D---- C:\windows\SysWOW64\en-US
2014-12-15 17:01:29 ----D---- C:\windows\SysWOW64\cs-CZ
2014-12-15 17:01:28 ----D---- C:\windows\PolicyDefinitions
2014-12-15 17:01:28 ----D---- C:\Program Files (x86)\Internet Explorer
2014-12-14 09:49:51 ----SHD---- C:\$Recycle.Bin
2014-11-30 19:25:09 ----RSD---- C:\windows\assembly
2014-11-27 19:49:13 ----SD---- C:\Users\Jirka\AppData\Roaming\Microsoft
2014-11-20 20:40:34 ----D---- C:\windows\Logs
2014-11-18 20:20:56 ----D---- C:\windows\WinStore
2014-11-18 20:20:56 ----D---- C:\windows\SysWOW64\slmgr
2014-11-18 20:20:56 ----D---- C:\windows\SysWOW64\sk-SK
2014-11-18 20:20:56 ----D---- C:\windows\SysWOW64\oobe
2014-11-18 20:20:56 ----D---- C:\windows\servicing
2014-11-18 20:20:56 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2014-11-18 20:20:56 ----D---- C:\Program Files (x86)\Windows Media Player
2014-11-18 20:20:56 ----D---- C:\Program Files (x86)\Windows Mail
2014-11-18 20:20:56 ----D---- C:\Program Files (x86)\Windows Defender
2014-11-18 20:20:56 ----D---- C:\Program Files (x86)\Common Files\System
2014-11-18 20:20:55 ----RD---- C:\windows\ImmersiveControlPanel
2014-11-18 20:20:55 ----D---- C:\windows\SysWOW64\WCN
2014-11-18 20:20:55 ----D---- C:\windows\SysWOW64\wbem
2014-11-18 20:20:55 ----D---- C:\windows\SysWOW64\drivers
2014-11-18 20:20:54 ----AD---- C:\windows\Help
2014-11-15 20:13:11 ----RD---- C:\windows\ToastData
2014-11-15 20:13:10 ----D---- C:\windows\SysWOW64\setup
2014-11-15 20:13:08 ----D---- C:\windows\SysWOW64\InputMethod
2014-11-15 20:13:08 ----D---- C:\windows\apppatch
2014-11-15 20:12:07 ----D---- C:\Program Files (x86)\Common Files\Microsoft Shared
2014-11-15 13:34:03 ----D---- C:\windows\SysWOW64\migration
2014-11-15 13:34:01 ----D---- C:\windows\MediaViewer
2014-11-15 13:34:00 ----D---- C:\windows\Camera
2014-11-15 13:33:58 ----D---- C:\windows\FileManager

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\windows\SysWOW64\drivers\aswRvrt.sys []
R0 aswVmm;avast! VM Monitor; C:\windows\SysWOW64\drivers\aswVmm.sys []
R0 iaStorA;iaStorA; C:\windows\System32\drivers\iaStorA.sys []
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr2.sys []
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys []
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys []
R1 PCSUUCDRV;PC Speed Up Usb Cache Driver; \??\C:\Program Files (x86)\Zrychleni Pocitace\PCSpeedUp.sys [2014-09-23 47640]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\windows\system32\DRIVERS\vwififlt.sys []
R2 aswHwid;avast! HardwareID; C:\windows\system32\drivers\aswHwid.sys []
R2 aswMonFlt;aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys []
R2 aswStm;aswStm; C:\windows\system32\drivers\aswStm.sys []
R3 ACPIVPC;@oem65.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\windows\System32\drivers\AcpiVpc.sys []
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\windows\System32\drivers\BthEnum.sys []
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\windows\system32\DRIVERS\BthLEEnum.sys []
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\windows\System32\drivers\bthpan.sys []
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys []
R3 CnxtHdAudService;@oem62.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\CHDRT64.sys []
R3 ETD;@oem12.inf,%PS2DeviceDesc%;ELAN PS/2 Port Input Device; C:\windows\system32\DRIVERS\ETD.sys []
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys []
R3 iwdbus;@oem7.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\windows\System32\drivers\iwdbus.sys []
R3 MEIx64;@oem10.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\windows\system32\DRIVERS\TeeDriverx64.sys []
R3 nvlddmkm;nvlddmkm; C:\windows\system32\DRIVERS\nvlddmkm.sys []
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\System32\drivers\rfcomm.sys []
R3 RSUSBVSTOR;@oem9.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUVStor.sys []
R3 RtkBtFilter;@oem13.inf,%BtFilt.SvcDesc%;Realtek Bluetooth Filter Driver; C:\windows\system32\DRIVERS\RtkBtfilter.sys []
R3 RTL8168;@oem63.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\windows\system32\DRIVERS\Rt630x64.sys []
R3 rtsuvc;@oem27.inf,%rtsuvc.DeviceDesc%;Lenovo EasyCamera; C:\windows\system32\DRIVERS\rtsuvc.sys []
R3 RTWlanE;@oem64.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\windows\system32\DRIVERS\rtwlane.sys []
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\windows\system32\DRIVERS\vwifimp.sys []
S1 nethfdrv;nethfdrv; \??\C:\windows\system32\drivers\nethfdrv.sys []
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys []
S3 e1iexpress;@net1ic64.inf,%e1iExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\windows\system32\DRIVERS\e1i63x64.sys []
S3 intaud_WaveExtensible;@oem6.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\windows\system32\drivers\intelaud.sys []
S3 IntcDAud;@oem4.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys []
S3 NETwNe64;@netwew02.inf,___ %NIC_Service_DispName_WIN8_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 8 - 64 Bit; C:\windows\system32\DRIVERS\NETwew02.sys []
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\windows\System32\Drivers\usbvideo.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-01-24 50344]
R2 BTDevManager;BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [2014-01-06 79872]
R2 CxAudMsg;@C:\windows\system32\CxAudMsg64.exe,-100; C:\windows\system32\CxAudMsg64.exe []
R2 ETDService;Elan Service; C:\Program Files\Elantech\ETDService.exe [2013-10-09 99632]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-07 15720]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 LsvUIService;LsvUIService; C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvUIService.exe [2014-05-25 70416]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe []
R2 PCSUService;PC Speed Up Service; C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe [2014-09-23 430888]
R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2012-04-24 390632]
R2 SAService;Conexant SmartAudio service; C:\windows\system32\SAsrv.exe [2011-09-01 447104]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-02-09 5436176]
R2 Update Dolphin Deals;Update Dolphin Deals; C:\Program Files (x86)\Dolphin Deals\updateDolphinDeals.exe [2015-02-14 404776]
R2 Util Dolphin Deals;Util Dolphin Deals; C:\Program Files (x86)\Dolphin Deals\bin\utilDolphinDeals.exe [2015-02-14 404776]
R2 VeriFaceSrv;VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe [2014-05-25 68368]
S2 ServiceUpdater;Network Support Service Updater; C:\windows\SysWOW64\netupdsrv.exe []
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2013-12-24 279024]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-09-16 169432]
S3 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-09-16 390616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-01-23 114800]
S3 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-10-18 1914656]

-----------------EOF-----------------

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Po spusteni probehne stazeni databaze
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  resethosts;
  emptyclsid;
  IEdefaults;
  FFdefaults;
  CHRdefaults;
  emptyIEcache;
  emptyFFcache;
  emptyCHRcache;
  emptyalltemp;
  emptyflash;
  emptyjava;
  emptyrecycle.bin;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

# AdwCleaner v4.110 - Logfile created 14/02/2015 at 11:34:03
# Updated 05/02/2015 by Xplode
# Database : 2015-02-14.2 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Jirka - LENOVO-PCGEORGE
# Running from : C:\Users\Jirka\Desktop\adwcleaner_4.110.exe
# Option : Cleaning

***** [ Services ] *****

[#] Service Deleted : nethfdrv
Service Deleted : pcsuservice
[#] Service Deleted : ServiceUpdater
[#] Service Deleted : Update Dolphin Deals
[#] Service Deleted : Util Dolphin Deals
Service Deleted : {1578000e-2f4e-4939-b936-f77646d59121}Gw64
Service Deleted : {2488d407-f8a5-4291-8384-3d11d01d0e42}Gw64
Service Deleted : {3c43d77e-35fb-4b02-aca8-efc9fd329c13}Gw64
Service Deleted : {45eeb997-1a99-4f4a-9247-3eb607307351}Gw64
Service Deleted : {484194e7-9731-465e-9331-c230f71240af}Gw64
Service Deleted : {568d4f26-13b0-4611-b3d4-6ca56e6911fa}Gw64
Service Deleted : {5b0ab7c7-18fa-4fc6-adb5-68a7abb6cda1}Gw64
Service Deleted : {6090b5cf-f860-4911-bd89-63c2e9a94bd8}Gw64
Service Deleted : {914cf590-a9b4-4117-85ca-3658eeab475b}Gw64
Service Deleted : {95483b14-3553-44e6-aec5-dfd7ad6d9faa}Gw64
Service Deleted : {9d61ca53-6009-4369-8310-3c6be8c9ce52}Gw64
Service Deleted : {bfe54fc4-dd3e-45f5-91e1-0a6a7adcbc7e}Gw64
Service Deleted : {c4a7b09f-59a5-4aec-aa79-4922d6416b82}w64
Service Deleted : {d1b1a663-dd65-4a59-be6a-82f3133a4dba}Gw64
Service Deleted : {de86c844-6fc1-4efa-9444-d8351ef50119}Gw64
Service Deleted : {e475f209-b346-4472-81ad-49584a9f0f41}Gw64
Service Deleted : {e784b893-3076-48be-ae4b-a36faba891fb}Gw64
Service Deleted : {f5396474-2683-4072-93e8-31992a85f853}Gw64

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zrychleni Pocitace
[!] Folder Deleted : C:\Program Files (x86)\Dolphin Deals
Folder Deleted : C:\Program Files (x86)\Zrychleni Pocitace
[!] Folder Deleted : C:\Program Files (x86)\Dolphin Deals
Folder Deleted : C:\Users\Jirka\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp
Folder Deleted : C:\Users\Jirka\AppData\Local\pay-by-ads
Folder Deleted : C:\Users\Jirka\Documents\PCSpeedUp
Folder Deleted : C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
File Deleted : C:\windows\System32\drivers\{1578000e-2f4e-4939-b936-f77646d59121}Gw64.sys
File Deleted : C:\windows\System32\drivers\{2488d407-f8a5-4291-8384-3d11d01d0e42}Gw64.sys
File Deleted : C:\windows\System32\drivers\{3c43d77e-35fb-4b02-aca8-efc9fd329c13}Gw64.sys
File Deleted : C:\windows\System32\drivers\{45eeb997-1a99-4f4a-9247-3eb607307351}Gw64.sys
File Deleted : C:\windows\System32\drivers\{484194e7-9731-465e-9331-c230f71240af}Gw64.sys
File Deleted : C:\windows\System32\drivers\{568d4f26-13b0-4611-b3d4-6ca56e6911fa}Gw64.sys
File Deleted : C:\windows\System32\drivers\{5b0ab7c7-18fa-4fc6-adb5-68a7abb6cda1}Gw64.sys
File Deleted : C:\windows\System32\drivers\{6090b5cf-f860-4911-bd89-63c2e9a94bd8}Gw64.sys
File Deleted : C:\windows\System32\drivers\{914cf590-a9b4-4117-85ca-3658eeab475b}Gw64.sys
File Deleted : C:\windows\System32\drivers\{95483b14-3553-44e6-aec5-dfd7ad6d9faa}Gw64.sys
File Deleted : C:\windows\System32\drivers\{9d61ca53-6009-4369-8310-3c6be8c9ce52}Gw64.sys
File Deleted : C:\windows\System32\drivers\{bfe54fc4-dd3e-45f5-91e1-0a6a7adcbc7e}Gw64.sys
File Deleted : C:\windows\System32\drivers\{c4a7b09f-59a5-4aec-aa79-4922d6416b82}w64.sys
File Deleted : C:\windows\System32\drivers\{d1b1a663-dd65-4a59-be6a-82f3133a4dba}Gw64.sys
File Deleted : C:\windows\System32\drivers\{de86c844-6fc1-4efa-9444-d8351ef50119}Gw64.sys
File Deleted : C:\windows\System32\drivers\{e475f209-b346-4472-81ad-49584a9f0f41}Gw64.sys
File Deleted : C:\windows\System32\drivers\{e784b893-3076-48be-ae4b-a36faba891fb}Gw64.sys
File Deleted : C:\windows\System32\drivers\{f5396474-2683-4072-93e8-31992a85f853}Gw64.sys
File Deleted : C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\s2vcvle6.default-1423902445975\searchplugins\dsrlte.xml
File Deleted : C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
File Deleted : C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage-journal

***** [ Scheduled tasks ] *****

Task Deleted : PC SpeedUp Service Deactivator

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Key Deleted : HKCU\Software\Classes\pokki
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [pcspeedup]
Key Deleted : HKCU\Software\Classes\keepmysearch
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Update Dolphin Deals
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Util Dolphin Deals
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B89F5C49-51DB-4974-AB5A-E25901AA339C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E9B5B0D2-D08A-49FC-8B5C-159B60BAA268}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{497D595B-4AF5-4CC1-BD7F-C12B5D3FE6D3}
Key Deleted : HKCU\Software\Pokki
Key Deleted : HKCU\Software\Speedchecker Limited
Key Deleted : HKCU\Software\Dolphin Deals
Key Deleted : HKLM\SOFTWARE\Speedchecker Limited
Key Deleted : HKLM\SOFTWARE\Dolphin Deals
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\inethnfd
Key Deleted : [x64] HKLM\SOFTWARE\Speedchecker Limited
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PCSU-SL_is1
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Dolphin Deals

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v35.0.1 (x86 cs)


-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [8219 bytes] - [14/02/2015 11:32:16]
AdwCleaner[S0].txt - [7560 bytes] - [14/02/2015 11:34:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7619 bytes] ##########






Zoek.exe v5.0.0.0 Updated 13-February-2015
Tool run by Jirka on so 14. 02. 2015 at 11:47:34,44.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Jirka\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

14. 2. 2015 11:48:18 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\AGEIA Technologies deleted successfully
C:\PROGRA~2\New Folder deleted successfully
C:\Users\Jirka\AppData\Local\MediaStory deleted successfully
C:\Users\Jirka\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{15a4ce1e-d288-4d04-85bf-907170010a7a} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\s2vcvle6.default-1423902445975\prefs.js:
user_pref("browser.startup.homepage", "http://search.yahoo.com/?fr=hp-ddc-bd&t ... syc_bd_com");
user_pref("browser.newtab.url", "http://search.yahoo.com/?fr=hp-ddc-bd-t ... tab_bd_com");
user_pref("browser.search.selectedEngine", "Yahoo! Search");
user_pref("keyword.URL", "http://search.yahoo.com/yhs/search?hspa ... _bd_com&p=");

Added to C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\s2vcvle6.default-1423902445975\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\Users\Jirka\AppData\Local\5035 deleted
C:\PROGRA~2\COMMON~1\Config\uninstinethnfd.exe deleted
C:\PROGRA~2\COMMON~1\Config deleted
C:\Users\Public\Pokki deleted
C:\awh1E8C.tmp deleted
C:\awh5DD6.tmp deleted
C:\awhA40A.tmp deleted
C:\awhEEB3.tmp deleted
C:\Users\Jirka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PC App Store.lnk deleted
C:\Users\Jirka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Start Menu.lnk deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Default\AppData\Local\Pokki deleted
C:\Users\Jirka\AppData\Local\BTServer.log deleted
C:\Users\Jirka\AppData\Local\Pokki deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk deleted
C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Menu.lnk deleted
C:\windows\tasks\PC Speed Up Update Cache.job deleted
C:\windows\SysNative\tasks\PC Speed Up Update Cache deleted
C:\windows\SysNative\config\systemprofile\Searches deleted
C:\windows\SysNative\GroupPolicy\machine deleted
C:\windows\SysNative\GroupPolicy\gpt.ini deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\s2vcvle6.default-1423902445975
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [24. 01. 2015 13:06]

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================


==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[24. 01. 2015 13:05]

Avast Online Security - Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Dolphin Deals - Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohphmeifcnepailolgiakkkfhggmngam

==== Chromium Fix ======================

C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage deleted successfully
C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_api.sqeedolphindeals.com_0.localstorage deleted successfully
C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_api.sqeedolphindeals.com_0.localstorage-journal deleted successfully
C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohphmeifcnepailolgiakkkfhggmngam deleted successfully
C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ohphmeifcnepailolgiakkkfhggmngam_0.localstorage deleted successfully
C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ohphmeifcnepailolgiakkkfhggmngam_0.localstorage-journal deleted successfully
C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ohphmeifcnepailolgiakkkfhggmngam deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{EC47DBCF-05F2-4F39-A131-B13D03A24C66} Unknown Url="Not_Found"

==== Reset Google Chrome ======================

C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2672677731-2795918559-871157422-1002\Software\Microsoft\Internet Explorer\SearchScopes\{EC47DBCF-05F2-4F39-A131-B13D03A24C66} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comupdatus.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\drv64.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nvtmru.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wlmerger.exe deleted successfully
HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jirka\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Jirka\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Jirka\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Jirka\AppData\Local\Microsoft\Windows\INetCache\IE\7Y4BM4G4 will be deleted at reboot
C:\Users\Jirka\AppData\Local\Microsoft\Windows\INetCache\IE\DXZHZU2W will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\Jirka\AppData\Local\Mozilla\Firefox\Profiles\s2vcvle6.default-1423902445975\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=9482 folders=239 483456147 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Jirka\AppData\Local\Temp will be emptied at reboot
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\windows\Temp successfully emptied
C:\Users\Jirka\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Jirka\AppData\Local\Microsoft\Windows\INetCache\IE\7Y4BM4G4" not found
"C:\Users\Jirka\AppData\Local\Microsoft\Windows\INetCache\IE\DXZHZU2W" not found

==== EOF on so 14. 02. 2015 at 12:01:57,95 ======================

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-02-2015
Ran by Jirka (administrator) on LENOVO-PCGEORGE on 14-02-2015 12:20:45
Running from C:\Users\Jirka\Desktop
Loaded Profiles: Jirka (Available profiles: UpdatusUser & Jirka)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvUIService.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
() C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(PS Media s.r.o.) C:\Users\Jirka\AppData\Roaming\StartMenu\StartMenu.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvTrayLoad.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvController.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17477_none_fa2b7d3b9b36c7b4\TiWorker.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Desktop.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(forum.viry.cz) C:\Users\Jirka\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [216064 2014-01-06] (Realtek Semiconductor Corporation)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [907480 2013-09-05] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [RtsFT] => C:\windows\RTFTrack.exe [6340312 2013-10-17] (Realtek semiconductor)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80880 2014-05-25] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-24] (AVAST Software)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2672677731-2795918559-871157422-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22065760 2014-10-01] (Skype Technologies S.A.)
HKU\S-1-5-21-2672677731-2795918559-871157422-1002\...\Run: [StartMenu] => C:\Users\Jirka\AppData\Roaming\StartMenu\StartMenu.exe [3359872 2015-02-09] (PS Media s.r.o.)
HKU\S-1-5-21-2672677731-2795918559-871157422-1002\...\Run: [ShowDesktopAsRun] => C:\Users\Jirka\AppData\Roaming\StartMenu\desktop.scf [81 2015-02-08] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2672677731-2795918559-871157422-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-2672677731-2795918559-871157422-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/cz/cs/
HKU\S-1-5-21-2672677731-2795918559-871157422-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2672677731-2795918559-871157422-1002 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 77.48.100.254 8.8.8.8

FireFox:
========
FF ProfilePath: C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\s2vcvle6.default-1423902445975
FF Homepage: about:home
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-24]

Chrome:
=======
CHR Profile: C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-27]
CHR Extension: (Disk Google) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-27]
CHR Extension: (YouTube) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-27]
CHR Extension: (Vyhledávání Google) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-27]
CHR Extension: (Avast Online Security) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-24]
CHR Extension: (Peněženka Google) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-27]
CHR Extension: (Gmail) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-27]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-01-24]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-01-24] (AVAST Software)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [79872 2014-01-06] () [File not signed]
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [99632 2013-10-09] (ELAN Microelectronics Corp.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S3 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 LsvUIService; C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvUIService.exe [70416 2014-05-25] (Lenovo)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5436176 2015-02-09] (TeamViewer GmbH)
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe [68368 2014-05-25] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-01-24] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [87912 2015-01-24] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-01-24] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-01-24] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-01-24] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-01-24] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-01-24] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-01-24] ()
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [558296 2014-01-05] (Realtek Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8876248 2013-10-17] (Realtek Semiconductor Corp.)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [2982104 2013-12-26] (Realtek Semiconductor Corporation )
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
S1 PCSUUCDRV; \??\C:\Program Files (x86)\Zrychleni Pocitace\PCSpeedUp.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 12:20 - 2015-02-14 12:21 - 00013779 _____ () C:\Users\Jirka\Desktop\FRST.txt
2015-02-14 12:20 - 2015-02-14 12:20 - 00000000 ____D () C:\FRST
2015-02-14 12:19 - 2015-02-14 12:19 - 00112640 _____ (forum.viry.cz) C:\Users\Jirka\Desktop\FRSTLauncher.exe
2015-02-14 12:17 - 2015-02-14 12:17 - 02134528 _____ (Farbar) C:\Users\Jirka\Desktop\FRST64.exe
2015-02-14 12:12 - 2015-02-14 12:12 - 00000000 ____D () C:\Users\Jirka\AppData\Local\VirtualStore
2015-02-14 12:03 - 2015-02-14 12:03 - 00010922 _____ () C:\Users\Jirka\Desktop\zoek-results.txt
2015-02-14 12:00 - 2015-02-14 12:02 - 00002028 _____ () C:\Users\Jirka\AppData\Local\BTServer.log
2015-02-14 12:00 - 2015-02-14 11:47 - 00024064 _____ () C:\windows\zoek-delete.exe
2015-02-14 11:48 - 2015-02-14 12:01 - 00010922 _____ () C:\zoek-results.log
2015-02-14 11:47 - 2015-02-14 11:59 - 00000000 ____D () C:\zoek_backup
2015-02-14 11:46 - 2015-02-14 11:46 - 01304576 _____ () C:\Users\Jirka\Desktop\zoek.exe
2015-02-14 11:45 - 2015-02-14 11:46 - 01304576 _____ () C:\Users\Jirka\Downloads\zoek.exe
2015-02-14 11:45 - 2015-02-14 11:45 - 00007727 _____ () C:\Users\Jirka\Desktop\AdwCleaner[S0].txt
2015-02-14 11:32 - 2015-02-14 11:35 - 00000000 ____D () C:\AdwCleaner
2015-02-14 11:30 - 2015-02-14 11:30 - 02112512 _____ () C:\Users\Jirka\Desktop\adwcleaner_4.110.exe
2015-02-14 10:40 - 2015-02-14 10:40 - 00000000 _____ () C:\Users\Jirka\Desktop\Nový textový dokument.txt
2015-02-14 10:29 - 2015-02-14 10:29 - 01107968 _____ () C:\Users\Jirka\Downloads\RSIT.exe
2015-02-14 10:29 - 2015-02-14 10:29 - 00000000 ____D () C:\rsit
2015-02-14 10:29 - 2015-02-14 10:29 - 00000000 ____D () C:\Program Files (x86)\trend micro
2015-02-14 10:02 - 2015-02-14 10:46 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2015-02-14 10:02 - 2015-02-14 10:02 - 00001066 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-02-14 10:02 - 2015-02-14 10:02 - 00001054 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-02-14 09:59 - 2015-02-14 09:59 - 07829544 _____ (TeamViewer GmbH) C:\Users\Jirka\Downloads\TeamViewer_Setup_cs-iuu.exe
2015-02-14 09:56 - 2015-02-14 09:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-02-14 09:51 - 2015-02-14 09:56 - 00001182 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-02-14 09:51 - 2015-02-14 09:56 - 00001170 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-02-14 09:44 - 2015-02-14 09:45 - 24901448 _____ (Mozilla) C:\Users\Jirka\Downloads\seznam-firefox-win32-cs-26.0.0.exe
2015-02-14 09:27 - 2015-02-14 09:27 - 00000000 ____D () C:\Users\Jirka\Desktop\Původní data aplikace Firefox
2015-02-14 09:24 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2015-02-14 09:24 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-02-14 09:24 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
2015-02-14 09:24 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll
2015-02-14 09:24 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-02-14 09:24 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-02-14 09:24 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-02-14 09:24 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-02-14 09:24 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-02-14 09:24 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-02-14 09:24 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-02-14 09:23 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2015-02-14 09:23 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2015-02-14 09:23 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-02-14 09:23 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-02-14 09:23 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-02-14 09:23 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-02-14 09:23 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-02-14 09:23 - 2015-01-12 03:32 - 06041088 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-02-14 09:23 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-02-14 09:23 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-02-14 09:23 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-02-14 09:23 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-02-14 09:23 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-02-14 09:23 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-02-14 09:23 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
2015-02-14 09:23 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-02-14 09:23 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2015-02-14 09:23 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-02-14 09:23 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-02-14 09:23 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-02-14 09:23 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-02-14 09:23 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-02-14 09:23 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-02-14 09:23 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2015-02-14 09:23 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
2015-02-14 09:23 - 2015-01-12 02:29 - 04300800 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-02-14 09:23 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll
2015-02-14 09:23 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-02-14 09:23 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2015-02-14 09:23 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-02-14 09:23 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-02-14 09:23 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-02-14 09:23 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-02-14 09:23 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-02-14 09:23 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-02-14 09:23 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-02-14 09:23 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-02-14 09:23 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-02-14 09:23 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-02-14 09:23 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-02-14 09:23 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-02-14 09:23 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-02-14 09:23 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\windows\SysWOW64\scesrv.dll
2015-02-14 09:23 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\windows\system32\scesrv.dll
2015-02-14 09:23 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-02-14 09:23 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-02-14 09:23 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-02-14 09:23 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-02-14 09:23 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-02-14 09:23 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-02-14 09:23 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-02-14 09:23 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-02-12 19:42 - 2015-02-12 19:42 - 00003272 _____ () C:\windows\System32\Tasks\avastBCLRestartS-1-5-21-2672677731-2795918559-871157422-1002
2015-02-08 17:23 - 2015-02-08 17:23 - 00003128 _____ () C:\windows\System32\Tasks\DesktopAtStartup
2015-02-08 17:22 - 2015-02-09 21:25 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\StartMenu
2015-02-08 17:19 - 2015-02-08 17:19 - 08473000 _____ (PS Media s.r.o. ) C:\Users\Jirka\Downloads\setup.exe
2015-02-03 20:22 - 2015-02-14 09:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-25 19:18 - 2015-01-25 19:18 - 05671800 _____ (Speedchecker Limited ) C:\Users\Jirka\Documents\PCSUUpdate.exe
2015-01-24 13:11 - 2015-01-24 13:11 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\Dropbox
2015-01-24 13:07 - 2015-01-24 13:07 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\AVAST Software
2015-01-24 13:06 - 2015-01-24 13:07 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2015-01-24 13:06 - 2015-01-24 13:06 - 01050432 _____ (AVAST Software) C:\windows\system32\Drivers\aswsnx.sys
2015-01-24 13:06 - 2015-01-24 13:06 - 00436624 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2015-01-24 13:06 - 2015-01-24 13:06 - 00364512 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2015-01-24 13:06 - 2015-01-24 13:06 - 00267632 _____ () C:\windows\system32\Drivers\aswVmm.sys
2015-01-24 13:06 - 2015-01-24 13:06 - 00116728 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys
2015-01-24 13:06 - 2015-01-24 13:06 - 00093568 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2015-01-24 13:06 - 2015-01-24 13:06 - 00087912 _____ (AVAST Software) C:\windows\system32\Drivers\aswmonflt.sys
2015-01-24 13:06 - 2015-01-24 13:06 - 00065776 _____ () C:\windows\system32\Drivers\aswRvrt.sys
2015-01-24 13:06 - 2015-01-24 13:06 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2015-01-24 13:06 - 2015-01-24 13:06 - 00029208 _____ () C:\windows\system32\Drivers\aswHwid.sys
2015-01-24 13:06 - 2015-01-24 13:06 - 00001991 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-01-24 13:06 - 2015-01-24 13:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-01-24 13:03 - 2015-01-24 13:03 - 04862664 _____ (AVAST Software) C:\Users\Jirka\Downloads\avast-free-antivirus-2015_OnlineInstaller2015.exe
2015-01-24 13:03 - 2015-01-24 13:03 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-01-24 13:03 - 2015-01-24 13:03 - 00000000 ____D () C:\Program Files\AVAST Software
2015-01-23 16:34 - 2015-01-23 16:35 - 39725760 _____ () C:\Users\Jirka\Downloads\Firefox Setup 35.0.exe
2015-01-23 16:29 - 2015-01-23 16:29 - 00243512 _____ () C:\Users\Jirka\Downloads\Firefox Setup Stub 35.0.exe
2015-01-18 17:25 - 2015-01-18 18:19 - 00004141 _____ () C:\windows\SysWOW64\HPOINS08.TXT
2015-01-18 17:25 - 1999-04-22 16:15 - 00315904 _____ (InstallShield Software Corporation) C:\windows\IsUninst.exe
2015-01-17 19:58 - 2015-01-17 19:58 - 00000000 ____D () C:\Users\Public\CyberLink
2015-01-17 19:58 - 2015-01-17 19:58 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\CyberLink
2015-01-17 19:58 - 2015-01-17 19:58 - 00000000 ____D () C:\Users\Jirka\AppData\Local\CyberLink
2015-01-17 19:05 - 2015-01-17 19:06 - 00000000 ____D () C:\059555020546fb96768b586fcbbe
2015-01-17 18:26 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2015-01-17 18:26 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2015-01-17 18:26 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ahcache.sys
2015-01-17 18:26 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2015-01-17 18:26 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2015-01-17 18:26 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\windows\system32\ci.dll
2015-01-17 18:26 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
2015-01-17 18:26 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll
2015-01-17 18:26 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\windows\SysWOW64\Faultrep.dll
2015-01-17 18:26 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
2015-01-17 18:26 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\windows\system32\WerFaultSecure.exe
2015-01-17 18:26 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFaultSecure.exe
2015-01-17 18:26 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\windows\system32\ncsi.dll
2015-01-17 18:26 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
2015-01-17 18:26 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll
2015-01-17 18:26 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
2015-01-17 18:26 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\windows\system32\wermgr.exe
2015-01-17 18:26 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
2015-01-17 18:26 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
2015-01-17 18:26 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2015-01-17 18:26 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe
2015-01-17 18:26 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
2015-01-17 18:26 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\windows\SysWOW64\wermgr.exe
2015-01-17 18:26 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
2015-01-17 18:26 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
2015-01-17 18:26 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
2015-01-17 18:26 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\werdiagcontroller.dll
2015-01-17 18:26 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\werdiagcontroller.dll
2015-01-17 18:26 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\nlaapi.dll
2015-01-17 18:26 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2015-01-17 18:26 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 12:15 - 2014-11-13 13:29 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2672677731-2795918559-871157422-1002
2015-02-14 12:13 - 2014-05-25 07:35 - 01732417 _____ () C:\windows\WindowsUpdate.log
2015-02-14 12:13 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\AppReadiness
2015-02-14 12:08 - 2014-05-25 08:14 - 00740962 _____ () C:\windows\system32\perfh005.dat
2015-02-14 12:08 - 2014-05-25 08:14 - 00152146 _____ () C:\windows\system32\perfc005.dat
2015-02-14 12:08 - 2014-03-18 10:53 - 01749406 _____ () C:\windows\system32\PerfStringBackup.INI
2015-02-14 12:02 - 2014-11-13 13:26 - 00000000 ___DO () C:\Users\Jirka\OneDrive
2015-02-14 12:01 - 2014-11-30 20:27 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-02-14 12:01 - 2014-03-18 10:44 - 00070870 _____ () C:\windows\PFRO.log
2015-02-14 12:01 - 2013-08-22 15:46 - 00024579 _____ () C:\windows\setupact.log
2015-02-14 12:01 - 2013-08-22 15:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-02-14 12:00 - 2014-05-25 08:14 - 00004608 _____ () C:\windows\system32\VfService.trf
2015-02-14 12:00 - 2014-05-25 07:48 - 01014782 _____ () C:\Users\Public\CAFADEBUG.log
2015-02-14 12:00 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\sru
2015-02-14 11:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\GroupPolicy
2015-02-14 11:51 - 2013-08-22 16:20 - 00000000 ____D () C:\windows\CbsTemp
2015-02-14 11:38 - 2014-11-15 20:26 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\Skype
2015-02-14 11:37 - 2013-08-22 15:44 - 00346680 _____ () C:\windows\system32\FNTCACHE.DAT
2015-02-14 09:52 - 2013-08-22 14:25 - 00000194 _____ () C:\windows\win.ini
2015-02-14 09:46 - 2013-08-22 14:25 - 00262144 ___SH () C:\windows\system32\config\BBI
2015-02-14 09:22 - 2014-11-13 13:30 - 00003998 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{CAA1301E-252C-4EDE-A96A-7CD10EDDC3F8}
2015-02-11 19:03 - 2014-05-25 08:16 - 00000000 ____D () C:\windows\System32\Tasks\Lenovo
2015-02-11 19:03 - 2014-05-25 08:12 - 00000000 ____D () C:\Program Files\Lenovo
2015-02-10 20:29 - 2014-12-18 17:53 - 00000000 ____D () C:\KMPlayer
2015-02-08 17:47 - 2014-11-27 19:44 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-08 17:40 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\NDF
2015-02-08 17:37 - 2014-05-25 08:09 - 00000000 ____D () C:\ProgramData\McAfee
2015-02-08 17:26 - 2013-08-22 16:36 - 00000000 ___HD () C:\windows\ELAMBKUP
2015-02-04 20:19 - 2014-12-15 15:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox.bak
2015-02-03 21:30 - 2013-08-22 14:25 - 00262144 ___SH () C:\windows\system32\config\ELAM
2015-02-03 20:31 - 2014-11-16 08:58 - 00714720 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2014-11-16 08:58 - 00106976 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-25 19:41 - 2015-01-06 16:02 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\QuickScan
2015-01-25 19:19 - 2014-11-27 19:47 - 00001048 _____ () C:\Users\Jirka\Desktop\Zrychleni Pocitace.lnk
2015-01-25 19:17 - 2014-12-04 21:20 - 00057128 _____ () C:\Users\Jirka\Documents\PCSpeedUp-Silent-Update.exe
2015-01-17 19:58 - 2014-05-25 08:06 - 00000000 ____D () C:\ProgramData\CyberLink
2015-01-17 19:06 - 2014-11-15 12:49 - 00000000 ____D () C:\windows\system32\MRT
2015-01-17 19:05 - 2014-11-15 12:49 - 113365784 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-01-17 18:29 - 2014-11-27 19:48 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\Seznam.cz

==================== Files in the root of some directories =======

2015-02-14 12:00 - 2015-02-14 12:02 - 0002028 _____ () C:\Users\Jirka\AppData\Local\BTServer.log
2014-05-25 07:48 - 2014-05-25 07:48 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-10 21:52




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (Windows8_OS) (Fixed) (Total:890.61 GB) (Free:844.78 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.66 GB) NTFS

Available physical RAM: 5288.95 MB
Total physical RAM: 8084.27 MB
Percentage of memory in use: 34%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 931.5 GB) (Disk ID: 1B981DEB)

==================== Scheduled Tasks (whitelisted) ==================


==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Users\Jirka\OneDrive:ms-properties

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Jirka\Desktop" je 24 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
  HKLM\...\Policies\Explorer: [NoFolderOptions] 0
  HKLM\...\Policies\Explorer: [NoControlPanel] 0
  HKU\S-1-5-21-2672677731-2795918559-871157422-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22065760 2014-10-01] (Skype Technologies S.A.)
  
  HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
  HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
  HKU\S-1-5-21-2672677731-2795918559-871157422-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
  HKU\S-1-5-21-2672677731-2795918559-871157422-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/cz/cs/
  HKU\S-1-5-21-2672677731-2795918559-871157422-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
  SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  
  S1 PCSUUCDRV; \??\C:\Program Files (x86)\Zrychleni Pocitace\PCSpeedUp.sys [X]
  
  C:\Program Files (x86)\Zrychleni Pocitace
  2015-02-14 12:20 - 2015-02-14 12:21 - 00013779 _____ () C:\Users\Jirka\Desktop\FRST.txt
  2015-02-14 12:19 - 2015-02-14 12:19 - 00112640 _____ (forum.viry.cz) C:\Users\Jirka\Desktop\FRSTLauncher.exe
  2015-02-14 12:03 - 2015-02-14 12:03 - 00010922 _____ () C:\Users\Jirka\Desktop\zoek-results.txt
  2015-02-14 12:00 - 2015-02-14 12:02 - 00002028 _____ () C:\Users\Jirka\AppData\Local\BTServer.log
  2015-02-14 12:00 - 2015-02-14 11:47 - 00024064 _____ () C:\windows\zoek-delete.exe
  2015-02-14 11:48 - 2015-02-14 12:01 - 00010922 _____ () C:\zoek-results.log
  2015-02-14 11:47 - 2015-02-14 11:59 - 00000000 ____D () C:\zoek_backup
  2015-02-14 11:46 - 2015-02-14 11:46 - 01304576 _____ () C:\Users\Jirka\Desktop\zoek.exe
  2015-02-14 11:45 - 2015-02-14 11:46 - 01304576 _____ () C:\Users\Jirka\Downloads\zoek.exe
  2015-02-14 11:45 - 2015-02-14 11:45 - 00007727 _____ () C:\Users\Jirka\Desktop\AdwCleaner[S0].txt
  2015-02-14 11:32 - 2015-02-14 11:35 - 00000000 ____D () C:\AdwCleaner
  2015-02-14 11:30 - 2015-02-14 11:30 - 02112512 _____ () C:\Users\Jirka\Desktop\adwcleaner_4.110.exe
  2015-02-14 10:40 - 2015-02-14 10:40 - 00000000 _____ () C:\Users\Jirka\Desktop\Nový textový dokument.txt
  2015-02-14 10:29 - 2015-02-14 10:29 - 01107968 _____ () C:\Users\Jirka\Downloads\RSIT.exe
  2015-02-14 10:29 - 2015-02-14 10:29 - 00000000 ____D () C:\rsit
  2015-02-14 10:29 - 2015-02-14 10:29 - 00000000 ____D () C:\Program Files (x86)\trend micro
  2015-02-14 09:59 - 2015-02-14 09:59 - 07829544 _____ (TeamViewer GmbH) C:\Users\Jirka\Downloads\TeamViewer_Setup_cs-iuu.exe
  2015-02-14 09:44 - 2015-02-14 09:45 - 24901448 _____ (Mozilla) C:\Users\Jirka\Downloads\seznam-firefox-win32-cs-26.0.0.exe
  
  Hosts:
  EmptyTemp:
  Reboot:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-02-2015
Ran by Jirka at 2015-02-14 12:53:18 Run:1
Running from C:\Users\Jirka\Desktop
Loaded Profiles: Jirka (Available profiles: UpdatusUser & Jirka)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2672677731-2795918559-871157422-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22065760 2014-10-01] (Skype Technologies S.A.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2672677731-2795918559-871157422-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-2672677731-2795918559-871157422-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/cz/cs/
HKU\S-1-5-21-2672677731-2795918559-871157422-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

S1 PCSUUCDRV; \??\C:\Program Files (x86)\Zrychleni Pocitace\PCSpeedUp.sys [X]

C:\Program Files (x86)\Zrychleni Pocitace
2015-02-14 12:20 - 2015-02-14 12:21 - 00013779 _____ () C:\Users\Jirka\Desktop\FRST.txt
2015-02-14 12:19 - 2015-02-14 12:19 - 00112640 _____ (forum.viry.cz) C:\Users\Jirka\Desktop\FRSTLauncher.exe
2015-02-14 12:03 - 2015-02-14 12:03 - 00010922 _____ () C:\Users\Jirka\Desktop\zoek-results.txt
2015-02-14 12:00 - 2015-02-14 12:02 - 00002028 _____ () C:\Users\Jirka\AppData\Local\BTServer.log
2015-02-14 12:00 - 2015-02-14 11:47 - 00024064 _____ () C:\windows\zoek-delete.exe
2015-02-14 11:48 - 2015-02-14 12:01 - 00010922 _____ () C:\zoek-results.log
2015-02-14 11:47 - 2015-02-14 11:59 - 00000000 ____D () C:\zoek_backup
2015-02-14 11:46 - 2015-02-14 11:46 - 01304576 _____ () C:\Users\Jirka\Desktop\zoek.exe
2015-02-14 11:45 - 2015-02-14 11:46 - 01304576 _____ () C:\Users\Jirka\Downloads\zoek.exe
2015-02-14 11:45 - 2015-02-14 11:45 - 00007727 _____ () C:\Users\Jirka\Desktop\AdwCleaner[S0].txt
2015-02-14 11:32 - 2015-02-14 11:35 - 00000000 ____D () C:\AdwCleaner
2015-02-14 11:30 - 2015-02-14 11:30 - 02112512 _____ () C:\Users\Jirka\Desktop\adwcleaner_4.110.exe
2015-02-14 10:40 - 2015-02-14 10:40 - 00000000 _____ () C:\Users\Jirka\Desktop\Nový textový dokument.txt
2015-02-14 10:29 - 2015-02-14 10:29 - 01107968 _____ () C:\Users\Jirka\Downloads\RSIT.exe
2015-02-14 10:29 - 2015-02-14 10:29 - 00000000 ____D () C:\rsit
2015-02-14 10:29 - 2015-02-14 10:29 - 00000000 ____D () C:\Program Files (x86)\trend micro
2015-02-14 09:59 - 2015-02-14 09:59 - 07829544 _____ (TeamViewer GmbH) C:\Users\Jirka\Downloads\TeamViewer_Setup_cs-iuu.exe
2015-02-14 09:44 - 2015-02-14 09:45 - 24901448 _____ (Mozilla) C:\Users\Jirka\Downloads\seznam-firefox-win32-cs-26.0.0.exe

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\UpdateP2GShortCut => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoFolderOptions => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoControlPanel => value deleted successfully.
HKU\S-1-5-21-2672677731-2795918559-871157422-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\S-1-5-21-2672677731-2795918559-871157422-1002\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKU\S-1-5-21-2672677731-2795918559-871157422-1002\Software\Microsoft\Internet Explorer\Main\\Secondary Start Pages => value deleted successfully.
HKU\S-1-5-21-2672677731-2795918559-871157422-1002\Software\Microsoft\Internet Explorer\Main\\Default_Secondary_Page_URL => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
PCSUUCDRV => Service deleted successfully.
"C:\Program Files (x86)\Zrychleni Pocitace" => File/Directory not found.
C:\Users\Jirka\Desktop\FRST.txt => Moved successfully.
C:\Users\Jirka\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\Jirka\Desktop\zoek-results.txt => Moved successfully.
C:\Users\Jirka\AppData\Local\BTServer.log => Moved successfully.
C:\windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Jirka\Desktop\zoek.exe => Moved successfully.
C:\Users\Jirka\Downloads\zoek.exe => Moved successfully.
C:\Users\Jirka\Desktop\AdwCleaner[S0].txt => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Jirka\Desktop\adwcleaner_4.110.exe => Moved successfully.
C:\Users\Jirka\Desktop\Nový textový dokument.txt => Moved successfully.
C:\Users\Jirka\Downloads\RSIT.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files (x86)\trend micro => Moved successfully.
C:\Users\Jirka\Downloads\TeamViewer_Setup_cs-iuu.exe => Moved successfully.
C:\Users\Jirka\Downloads\seznam-firefox-win32-cs-26.0.0.exe => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 169.8 MB temporary data.


The system needed a reboot.

==== End of Fixlog 12:54:09 ====

Jak se chova PC???

Reklamy zmizely, yahoo také, počítač se chová normálně, děkuji za pomoc. Ještě mám dotaz k programu "zrychlení pc", majitel počítače jej totiž zakoupil za několik set korun, ale já sem mu tvrdil, že se jedná o slabou pomoc, protože sem o tom četl na internetu a myslím, že i na tomto fóru, takže je správně, když mu doporučím programu se navždy zbavit a nekupovat podobné věci?

Program Zrychleni Pocitace je neucinny a podvodny SW, hleda neexxistujici hrozby aby se zavdecil

Tak jeste uklidime

DelFix https://toolslib.net/downloads/finish/2/

• Stahnete a spustte
• Ponechte zatrzitkou pouze u volby Remote disinfection tools
• Kliknete na Run

Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

mockrát děkuji!

Nemate zac, rad jsem pomohl Zase nekdy


A na zaklade Pravidla o zamykani temat