VIRY.CZ

Dobrý večer,
Instaloval jsem aktualizaci Wintoflash a s ním se mi do pc natáhlo spousta nepořádku, který jsem chtěl vyřešit testem po restartu antiviru avast, jenže po něm systém naběhne, ale bez připojení k internetu (ping skrze cmd proběhne ok) a nejdou zapnout štíty antiviru.Nepodařilo se mi ani částečné obnovení s tím, že jednotka je zamčená.Přikládám log a prosím Vás o kontrolu.Zatím děkuji.


Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-02-2015
Ran by awas_000 (administrator) on MIREK on 14-02-2015 21:09:44
Running from C:\Users\awas_000\Desktop
Loaded Profiles: awas_000 (Available profiles: awas_000)
Platform: Windows 8.1 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
() C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\Gigabyte\Smart TimeLock\TimeMgmtDaemon.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Program Files (x86)\Gigabyte\AppCenter\ApCent.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\Gigabyte\SIV\thermald.exe
(Gigabyte Technology CO.) C:\Program Files\Gigabyte\SmartRecovery2\RPMDaemon.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Akamai Technologies, Inc.) C:\Users\awas_000\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\awas_000\AppData\Local\Akamai\netsession_win.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Acronis) D:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\Gigabyte\Smart TimeLock\AlarmClock.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(forum.viry.cz) C:\Users\awas_000\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [438784 2010-12-17] ()
HKLM\...\Run: [Slu~ba Acronis Scheduler2] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [519504 2013-08-21] (Acronis)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671792 2014-06-16] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-27] (AVAST Software)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => D:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2010624 2013-07-20] (Dominik Reichl)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => D:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [7830704 2014-03-05] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1105328 2013-01-10] (Acronis)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2072928 2014-10-31] (Wondershare)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe [1960336 2015-01-15] ()
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM\...\RunOnce: [RPMKickstart] => C:\Program Files\Gigabyte\SmartRecovery2\RPMKickstartEx.exe [2320384 2014-04-01] (TODO: <Company name>)
HKLM-x32\...\RunOnce: [SIV] => C:\Program Files (x86)\Gigabyte\SIV\RunOnceTc.exe [9728 2014-04-08] (GIGA-BYTE TECHNOLOGY CO., LTD.)
HKLM-x32\...\RunOnce: [EasyTune] => C:\Program Files (x86)\Gigabyte\EasyTune\etro.exe [5632 2014-08-18] (GIGA-BYTE TECHNOLOGY CO., LTD.)
HKLM-x32\...\RunOnce: [PreRun] => C:\Program Files (x86)\Gigabyte\AppCenter\PreRun.exe [8192 2013-04-29] ()
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23308256 2015-01-15] (Google)
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55360 2014-06-24] (Raptr, Inc)
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-06-16] ()
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30872168 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Akamai NetSession Interface] => C:\Users\awas_000\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [833024 2014-06-16] (ZONER software)
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\MountPoints2: {790fc9b5-4488-11e3-8255-0022157705ed} - "F:\setup.exe"
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\MountPoints2: {ff1fb538-f5a4-11e3-829d-806e6f6e6963} - "I:\setup.exe"
Startup: C:\Users\awas_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk
ShortcutTarget: MEGAsync.lnk -> C:\Users\awas_000\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => D:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll ()
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => D:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll ()
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => D:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX32.dll ()
BootExecute: autocheck autochk *
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
SearchScopes: HKLM-x32 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKLM-x32 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKU\S-1-5-21-3388811255-3395146725-224997178-1001 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKU\S-1-5-21-3388811255-3395146725-224997178-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://www.trovi.com/Results.aspx?gd=&c ... rms}&SSPV=
SearchScopes: HKU\S-1-5-21-3388811255-3395146725-224997178-1001 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: No Name -> {451C804F-C205-4F03-B48E-537EC94937BF} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
DPF: HKLM-x32 {F680B28A-3AEE-4C88-93ED-45AE9215C128} https://adisepo.mfcr.cz/adistc/adis/idp ... tsignx.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 - No File
Winsock: Missing Catalog9 entry, broken internet access. <===== ATTENTION.
Hosts: 127.0.0.1 activation.acronis.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default
FF Homepage: http://www.google.cz
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @cuminas.jp/DjVuPlugin -> C:\Program Files (x86)\Cuminas\Document Express DjVu Plug-in\npdjvu.dll (Cuminas Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF user.js: detected! => C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\user.js
FF SearchPlugin: C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\searchplugins\firmycz.xml
FF SearchPlugin: C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\searchplugins\zbocz.xml
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\Extensions\cs@dictionaries.addons.mozilla.org [2014-11-10]
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\Extensions\elemhidehelper@adblockplus.org.xpi [2013-10-22]
FF Extension: YouTube Video and Audio Downloader - C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\Extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi [2014-12-09]
FF Extension: Google Translator for Firefox - C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\Extensions\translator@zoli.bod.xpi [2013-10-22]
FF Extension: 1-Click YouTube Video Downloader - C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2014-12-09]
FF Extension: SourceApp 1.0.1 - C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\Extensions\{baa74904-cbb6-4a19-900b-b8cb1e551476}.xpi [2015-02-14]
FF Extension: Adblock Plus - C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-22]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-10-22]
FF HKLM-x32\...\Firefox\Extensions: [WSVCU@Wondershare.com] - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-02]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-02] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-02] (Avast Software)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 gadjservice; C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [16384 2014-04-16] () [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-10-03] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2013-01-16] (Hewlett-Packard Company) [File not signed]
S2 Service KMSELDI; D:\Program Files\KMSpico\Service_KMS.exe [1050904 2013-12-11] () [File not signed]
R2 Smart TimeLock; C:\Program Files (x86)\GIGABYTE\Smart TimeLock\TimeMgmtDaemon.exe [102400 2013-02-22] (Gigabyte Technology CO., LTD.) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138664 2014-04-24] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138664 2014-04-24] (SlySoft, Inc.)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22240 2013-10-28] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-02] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-02] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-02] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-02] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-02] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-02] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-02] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-02] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-03-11] (Advanced Micro Devices)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [312480 2014-05-09] ()
R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [17600 2014-04-14] (Glarysoft Ltd)
R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d64x64.sys [468240 2014-06-16] (Intel Corporation)
R3 etocdrv; C:\Windows\etocdrv.sys [15584 2013-10-30] (Giga-Byte Technology CO., LTD.)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2015-01-22] ()
S2 hardlock; C:\Windows\system32\drivers\hardlock.sys [323584 2012-10-06] (SafeNet Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2014-05-09] ()
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation)
S3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] ()
S3 RTL85n64; C:\Windows\system32\DRIVERS\RTL85n64.sys [2061928 2013-06-18] (Realtek Semiconductor Corporation )
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2014-02-16] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [183224 2014-02-16] (Acronis)
S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [22240 2013-10-24] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-02] (Avast Software)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [113936 2013-12-18] (Oracle Corporation)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [71680 2014-04-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R3 WsAudio_Device; C:\Windows\system32\drivers\VirtualAudio.sys [31080 2013-03-25] (Wondershare)
S3 yukonw8; C:\Windows\system32\DRIVERS\yk63x64.sys [295216 2013-06-18] (Marvell)
R1 {4f8c067a-e55a-4229-81e6-7be1491578a2}Gw64; C:\Windows\System32\drivers\{4f8c067a-e55a-4229-81e6-7be1491578a2}Gw64.sys [48784 2015-02-02] (StdLib)
S2 GhFlt; \??\C:\Windows\system32\drivers\ghflt.sys [X]
S3 HWiNFO32; \??\C:\Users\awas_000\AppData\Local\Temp\HWiNFO64A.SYS [X]
S0 WinDivert1.1; No ImagePath
S1 {baa74904-cbb6-4a19-900b-b8cb1e551476}Gw64; system32\drivers\{baa74904-cbb6-4a19-900b-b8cb1e551476}Gw64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 21:09 - 2015-02-14 21:09 - 00023194 _____ () C:\Users\awas_000\Desktop\FRST.txt
2015-02-14 21:09 - 2015-02-14 21:09 - 00000000 ____D () C:\FRST
2015-02-14 21:06 - 2015-02-14 21:08 - 00000000 ____D () C:\Users\awas_000\Desktop\záloha
2015-02-14 21:06 - 2015-02-14 21:06 - 00000000 ___RD () C:\Users\awas_000\Desktop\Zástupci
2015-02-14 21:06 - 2015-02-14 21:06 - 00000000 ____D () C:\Users\awas_000\Desktop\Tor Browser
2015-02-14 21:06 - 2015-02-14 21:06 - 00000000 ____D () C:\Users\awas_000\Desktop\sdk
2015-02-14 21:06 - 2015-02-14 21:06 - 00000000 ____D () C:\Users\awas_000\Desktop\Nová složka
2015-02-14 21:06 - 2015-02-14 21:06 - 00000000 ____D () C:\Users\awas_000\Desktop\CoreTemp64
2015-02-14 21:06 - 2015-02-14 20:55 - 00112640 _____ (forum.viry.cz) C:\Users\awas_000\Desktop\FRSTLauncher.exe
2015-02-14 21:06 - 2015-02-14 20:53 - 02134528 _____ (Farbar) C:\Users\awas_000\Desktop\FRST64.exe
2015-02-14 21:06 - 2015-02-14 17:10 - 00002070 _____ () C:\Users\awas_000\Desktop\AppsHat.lnk
2015-02-14 21:06 - 2015-02-09 12:18 - 00000061 _____ () C:\Users\awas_000\Desktop\Nový textový dokument (2).txt
2015-02-14 21:06 - 2015-01-30 10:59 - 00016590 _____ () C:\Users\awas_000\Desktop\domácí sít heslo-PNG.axx
2015-02-14 21:06 - 2015-01-07 20:46 - 243751586 _____ () C:\Users\awas_000\Desktop\▶ Carl Orff - Carmina Burana with The Copenhagen Royal Chapel Choir & DR Symphony Orchestra - YouTube [360p].mp4
2015-02-14 21:06 - 2015-01-07 20:44 - 123413686 _____ () C:\Users\awas_000\Desktop\Carl Orff - Carmina Burana with The Copenhagen Royal Chapel Choir & DR Symphony Orchestra - DASH.m4a
2015-02-14 21:06 - 2014-12-15 11:25 - 265166565 _____ () C:\Users\awas_000\Desktop\Anna Netrebko, Elina Garanca, Ramon Vargas, Ludovic Tezier.m4a
2015-02-14 21:06 - 2014-10-27 20:58 - 00000110 ____H () C:\Users\awas_000\Desktop\images4.jpg.uid-zps
2015-02-14 21:06 - 2014-09-03 20:22 - 00000048 _____ () C:\Users\awas_000\Desktop\iy.txt
2015-02-14 21:06 - 2014-08-01 20:49 - 37988732 _____ () C:\Users\awas_000\Desktop\01. ΤΑ ΣΑΒΒΑΤΑ.wav
2015-02-14 21:06 - 2014-06-19 20:09 - 00000110 ____H () C:\Users\awas_000\Desktop\obrázek00004.jpg.uid-zps
2015-02-14 21:06 - 2014-04-14 19:04 - 00000110 ____H () C:\Users\awas_000\Desktop\20140411_105732_Android.jpg.uid-zps
2015-02-14 21:06 - 2014-03-26 21:10 - 00000110 ____H () C:\Users\awas_000\Desktop\P1050505 - kopie.JPG.uid-zps
2015-02-14 21:06 - 2014-03-19 07:51 - 00000110 ____H () C:\Users\awas_000\Desktop\329734_203337986415170_1204469632_o.jpg.uid-zps
2015-02-14 21:06 - 2014-03-15 18:46 - 00001755 _____ () C:\Users\awas_000\Desktop\Disk Google.lnk
2015-02-14 21:06 - 2014-01-22 19:42 - 00000110 ____H () C:\Users\awas_000\Desktop\P1050222.JPG.uid-zps
2015-02-14 21:06 - 2014-01-07 12:25 - 00000110 ____H () C:\Users\awas_000\Desktop\DSCI0021.JPG.uid-zps
2015-02-14 21:06 - 2013-12-28 20:45 - 00000110 ____H () C:\Users\awas_000\Desktop\Monika2.jpg.uid-zps
2015-02-14 21:06 - 2013-12-03 07:51 - 00000110 ____H () C:\Users\awas_000\Desktop\Výstřižek1.PNG.uid-zps
2015-02-14 21:06 - 2013-11-26 10:42 - 00000110 ____H () C:\Users\awas_000\Desktop\P1010545.JPG.uid-zps
2015-02-14 21:06 - 2013-11-25 14:30 - 00000110 ____H () C:\Users\awas_000\Desktop\obrázek00002.jpg.uid-zps
2015-02-14 21:06 - 2013-11-25 14:30 - 00000110 ____H () C:\Users\awas_000\Desktop\obrázek00001.jpg.uid-zps
2015-02-14 21:06 - 2013-11-24 15:38 - 00000110 ____H () C:\Users\awas_000\Desktop\P1010541.JPG.uid-zps
2015-02-14 21:06 - 2013-11-24 15:36 - 00000110 ____H () C:\Users\awas_000\Desktop\P1010547.JPG.uid-zps
2015-02-14 21:06 - 2013-11-24 15:36 - 00000110 ____H () C:\Users\awas_000\Desktop\P1010538.JPG.uid-zps
2015-02-14 21:06 - 2013-11-05 15:01 - 00000110 ____H () C:\Users\awas_000\Desktop\obrázek00003.jpg.uid-zps
2015-02-14 21:06 - 2013-10-22 08:16 - 00000436 _____ () C:\Users\awas_000\Desktop\Tento počítač – zástupce.lnk
2015-02-14 21:00 - 2015-02-14 20:55 - 00112640 _____ (forum.viry.cz) C:\FRSTLauncher.exe
2015-02-14 20:57 - 2015-02-14 20:57 - 00000197 _____ () C:\Windows\system32\2015-02-14-19-57-15.079-AvastVBoxSVC.exe-2888.log
2015-02-14 20:31 - 2015-02-14 20:31 - 00000197 _____ () C:\Windows\system32\2015-02-14-19-31-56.016-AvastVBoxSVC.exe-2688.log
2015-02-14 20:15 - 2015-02-14 20:15 - 00000197 _____ () C:\Windows\system32\2015-02-14-19-15-49.059-AvastVBoxSVC.exe-2932.log
2015-02-14 19:33 - 2015-02-14 19:33 - 00000197 _____ () C:\Windows\system32\2015-02-14-18-33-25.046-AvastVBoxSVC.exe-3112.log
2015-02-14 19:06 - 2015-02-14 19:06 - 00000197 _____ () C:\Windows\system32\2015-02-14-18-06-00.063-AvastVBoxSVC.exe-3096.log
2015-02-14 18:51 - 2015-02-14 18:51 - 00000197 _____ () C:\Windows\system32\2015-02-14-17-51-26.028-AvastVBoxSVC.exe-5552.log
2015-02-14 18:26 - 2015-02-14 18:26 - 00000197 _____ () C:\Windows\system32\2015-02-14-17-26-38.075-AvastVBoxSVC.exe-1952.log
2015-02-14 17:10 - 2015-02-14 18:48 - 00000000 ____D () C:\Users\awas_000\AppData\Local\WebPlayer
2015-02-14 17:10 - 2015-02-14 18:48 - 00000000 ____D () C:\ProgramData\YTAHelper
2015-02-14 17:09 - 2015-02-14 18:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator
2015-02-14 17:09 - 2015-02-14 17:09 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2015-02-13 23:19 - 2015-02-13 23:19 - 00000197 _____ () C:\Windows\system32\2015-02-13-22-19-25.033-AvastVBoxSVC.exe-2084.log
2015-02-12 09:51 - 2015-02-12 09:51 - 00000197 _____ () C:\Windows\system32\2015-02-12-08-51-37.007-AvastVBoxSVC.exe-3068.log
2015-02-11 09:10 - 2015-02-04 00:38 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 09:10 - 2015-02-04 00:08 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 09:10 - 2015-02-04 00:08 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 09:10 - 2015-02-03 00:11 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 09:10 - 2015-02-03 00:11 - 00894464 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 09:10 - 2015-02-03 00:11 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 09:10 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2015-02-11 09:10 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 09:10 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 09:10 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-02-11 09:10 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-02-11 09:10 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 09:10 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 09:10 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 09:10 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 09:10 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 09:10 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 09:10 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-02-11 09:10 - 2015-01-12 03:32 - 06041088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-11 09:10 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 09:10 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 09:10 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 09:10 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 09:10 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 09:10 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 09:10 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-02-11 09:10 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-02-11 09:10 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-02-11 09:10 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 09:10 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 09:10 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 09:10 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 09:10 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 09:10 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 09:10 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-02-11 09:10 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-02-11 09:10 - 2015-01-12 02:29 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-11 09:10 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-02-11 09:10 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 09:10 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-02-11 09:10 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 09:10 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 09:10 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 09:10 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 09:10 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 09:10 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 09:10 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 09:10 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 09:10 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 09:10 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 09:10 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-02-11 09:10 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-02-11 09:10 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 09:10 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 09:10 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 09:10 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 09:10 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 09:10 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 09:10 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 09:10 - 2014-12-09 00:12 - 00391526 _____ () C:\Windows\system32\ApnDatabase.xml
2015-02-10 09:10 - 2015-02-10 09:11 - 00000197 _____ () C:\Windows\system32\2015-02-10-08-10-54.010-AvastVBoxSVC.exe-3368.log
2015-02-09 23:40 - 2015-02-09 23:40 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-02-09 12:21 - 2015-02-09 12:21 - 00000197 _____ () C:\Windows\system32\2015-02-09-11-21-42.096-AvastVBoxSVC.exe-3036.log
2015-02-05 19:57 - 2015-02-05 19:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64
2015-02-02 17:00 - 2015-02-02 17:01 - 00000197 _____ () C:\Windows\system32\2015-02-02-16-00-58.092-AvastVBoxSVC.exe-2068.log
2015-02-02 16:53 - 2015-02-02 05:46 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{4f8c067a-e55a-4229-81e6-7be1491578a2}Gw64.sys
2015-02-02 16:44 - 2015-02-14 18:57 - 00000000 ____D () C:\ProgramData\ShopperPro
2015-02-02 16:44 - 2015-02-14 18:57 - 00000000 ____D () C:\Program Files (x86)\SourceApp
2015-02-02 16:44 - 2015-02-14 18:57 - 00000000 ____D () C:\Program Files (x86)\ShopperPro
2015-02-02 16:44 - 2015-02-02 16:44 - 00004370 _____ () C:\Windows\System32\Tasks\Installer_iwebar
2015-02-02 16:44 - 2015-02-02 16:44 - 00000000 ____D () C:\Users\awas_000\AppData\Local\CrashRpt
2015-01-31 00:21 - 2015-01-31 00:22 - 00000197 _____ () C:\Windows\system32\2015-01-30-23-21-25.073-AvastVBoxSVC.exe-2952.log
2015-01-30 23:28 - 2015-01-30 23:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2015-01-30 23:28 - 2014-11-24 12:07 - 00916024 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2015-01-30 23:28 - 2014-11-24 12:07 - 00128080 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2015-01-29 19:53 - 2015-01-29 19:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-29 19:51 - 2015-01-29 19:51 - 00000247 _____ () C:\Windows\system32\2015-01-29-18-51-42.090-aswFe.exe-4300.log
2015-01-29 19:49 - 2015-01-29 19:51 - 00000247 _____ () C:\Windows\system32\2015-01-29-18-49-33.064-aswFe.exe-5256.log
2015-01-29 19:49 - 2015-01-29 19:49 - 00000197 _____ () C:\Windows\system32\2015-01-29-18-49-32.019-AvastVBoxSVC.exe-7396.log
2015-01-26 14:57 - 2015-02-14 18:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-01-26 14:57 - 2015-01-26 14:58 - 00000197 _____ () C:\Windows\system32\2015-01-26-13-57-53.057-AvastVBoxSVC.exe-4004.log
2015-01-26 14:57 - 2015-01-26 14:57 - 00001940 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-01-26 14:57 - 2014-12-02 10:46 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-01-26 14:47 - 2015-01-26 14:47 - 00000197 _____ () C:\Windows\system32\2015-01-26-13-47-01.022-AvastVBoxSVC.exe-3260.log
2015-01-26 14:36 - 2015-01-26 14:36 - 00000000 ____D () C:\Users\awas_000\AppData\Roaming\2BB34521-0F86-43D2-91BF-C01AC8169717
2015-01-22 19:54 - 2015-01-24 16:58 - 01634816 _____ () C:\Windows\rstcli.exe
2015-01-22 19:54 - 2015-01-24 16:58 - 00001519 _____ () C:\Windows\Gcli.txt
2015-01-22 19:54 - 2015-01-24 16:58 - 00000027 _____ () C:\Windows\cli.bat
2015-01-22 19:44 - 2015-02-14 20:57 - 00000014 _____ () C:\Windows\OCStatus.ini
2015-01-22 19:39 - 2015-01-22 19:39 - 00000197 _____ () C:\Windows\system32\2015-01-22-18-39-33.031-AvastVBoxSVC.exe-3104.log
2015-01-22 19:26 - 2014-10-24 14:16 - 00721263 _____ () C:\Windows\SysWOW64\WSCM64.dll
2015-01-22 19:26 - 2014-10-24 14:16 - 00214528 _____ () C:\Windows\SysWOW64\WSCM32.dll
2015-01-17 21:14 - 2015-01-17 21:14 - 00000197 _____ () C:\Windows\system32\2015-01-17-20-14-02.062-AvastVBoxSVC.exe-3232.log
2015-01-16 23:11 - 2015-01-16 23:12 - 00000197 _____ () C:\Windows\system32\2015-01-16-22-11-40.092-AvastVBoxSVC.exe-3128.log
2015-01-16 10:03 - 2015-02-14 19:31 - 00007960 _____ () C:\Windows\PFRO.log
2015-01-16 10:03 - 2015-01-16 10:03 - 00000197 _____ () C:\Windows\system32\2015-01-16-09-03-43.046-AvastVBoxSVC.exe-3184.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 21:08 - 2013-11-10 14:47 - 00108032 ___SH () C:\Users\awas_000\Desktop\Thumbs.db
2015-02-14 21:07 - 2015-01-13 23:12 - 01450373 _____ () C:\Windows\WindowsUpdate.log
2015-02-14 21:01 - 2013-10-22 08:14 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3388811255-3395146725-224997178-1001
2015-02-14 21:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2015-02-14 20:59 - 2013-09-30 05:20 - 01749406 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-14 20:59 - 2013-09-30 04:57 - 00739720 _____ () C:\Windows\system32\perfh005.dat
2015-02-14 20:59 - 2013-09-30 04:57 - 00151940 _____ () C:\Windows\system32\perfc005.dat
2015-02-14 20:57 - 2014-06-17 16:53 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2015-02-14 20:57 - 2014-06-16 23:54 - 00006464 _____ () C:\Windows\SysWOW64\Gms.log
2015-02-14 20:57 - 2014-06-16 19:16 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\etdrv.sys
2015-02-14 20:57 - 2014-01-26 09:19 - 00000346 _____ () C:\Windows\Tasks\GlaryInitialize 4.job
2015-02-14 20:57 - 2013-10-22 09:45 - 00000000 ____D () C:\Users\awas_000\AppData\Local\CrashDumps
2015-02-14 20:56 - 2014-03-15 18:44 - 00000968 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-14 20:55 - 2015-01-14 09:48 - 00004773 _____ () C:\Windows\setupact.log
2015-02-14 20:55 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-14 20:38 - 2013-08-22 14:25 - 00524288 ___SH () C:\Windows\system32\config\BBI
2015-02-14 20:19 - 2014-03-15 18:44 - 00000972 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-14 20:04 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-14 19:41 - 2014-06-24 08:47 - 00000000 ____D () C:\AdwCleaner
2015-02-14 19:29 - 2013-10-22 09:19 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-14 19:28 - 2014-02-02 18:37 - 00000000 ____D () C:\Users\awas_000\VirtualBox VMs
2015-02-14 18:58 - 2013-11-13 10:21 - 00002478 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-02-14 18:57 - 2014-02-02 18:11 - 00000000 ____D () C:\Users\awas_000\AppData\Local\Akamai
2015-02-14 18:57 - 2013-12-28 21:47 - 00000000 ____D () C:\Users\awas_000\AppData\Roaming\Skype
2015-02-14 18:57 - 2013-12-07 12:55 - 00000000 ____D () C:\Users\awas_000\AppData\Roaming\dvdcss
2015-02-14 18:57 - 2013-10-22 09:07 - 00000000 ____D () C:\Users\awas_000\AppData\Roaming\vlc
2015-02-14 18:57 - 2013-10-22 08:08 - 00000000 ____D () C:\Users\awas_000
2015-02-14 18:57 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\WinMetadata
2015-02-14 18:57 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\WinMetadata
2015-02-14 18:57 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\registration
2015-02-14 18:57 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\Sysprep
2015-02-14 18:48 - 2014-06-24 08:24 - 00000000 ____D () C:\Users\awas_000\AppData\Roaming\Seznam.cz
2015-02-14 18:48 - 2014-06-24 08:24 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
2015-02-14 17:47 - 2014-06-24 08:24 - 00000000 ____D () C:\ProgramData\TEMP
2015-02-13 23:15 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-02-12 11:00 - 2013-10-29 19:51 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2015-02-12 09:51 - 2013-08-22 15:44 - 00389520 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-12 09:50 - 2014-12-11 21:46 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-12 09:50 - 2014-07-09 16:08 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-12 09:50 - 2013-08-22 14:25 - 00524288 ___SH () C:\Windows\system32\config\BBI(38)
2015-02-12 09:50 - 2013-08-22 14:25 - 00524288 ___SH () C:\Windows\system32\config\BBI(34)
2015-02-12 09:49 - 2014-02-07 00:00 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-12 09:48 - 2013-11-13 10:02 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-12 09:47 - 2013-11-13 10:02 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-11 09:16 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-02-10 23:12 - 2014-02-16 14:19 - 00000000 ____D () C:\ProgramData\Acronis
2015-02-10 00:27 - 2014-09-10 22:20 - 00000000 ____D () C:\ProgramData\YTD Video Downloader
2015-02-04 20:29 - 2013-10-22 09:19 - 00003802 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-04 18:14 - 2014-03-15 18:44 - 00003944 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-04 18:14 - 2014-03-15 18:44 - 00003708 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-02 17:36 - 2013-10-22 08:53 - 00000967 _____ () C:\Users\awas_000\AppData\Roaming\burnaware.ini
2015-02-02 16:59 - 2013-08-22 14:25 - 00000194 _____ () C:\Windows\win.ini
2015-02-01 12:32 - 2013-11-10 15:02 - 00000000 ____D () C:\Users\awas_000\AppData\Roaming\Vso
2015-02-01 10:25 - 2014-12-16 23:37 - 00000000 ____D () C:\Users\awas_000\AppData\Roaming\MediaMonkey
2015-01-31 00:21 - 2013-10-22 08:11 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-30 23:33 - 2014-02-02 18:37 - 00000000 ____D () C:\Users\awas_000\.VirtualBox
2015-01-30 10:39 - 2014-10-21 22:18 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2015-01-30 10:39 - 2014-10-21 22:18 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2015-01-30 10:39 - 2014-10-21 22:18 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2015-01-30 10:39 - 2014-10-21 22:18 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-30 10:39 - 2014-08-09 09:58 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-30 10:39 - 2014-01-27 15:59 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-29 20:14 - 2014-03-15 18:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-01-26 14:52 - 2014-02-16 13:25 - 00000000 ____D () C:\Users\awas_000\AppData\Roaming\.purple
2015-01-24 17:01 - 2014-06-16 18:31 - 00000000 ____D () C:\Program Files (x86)\Gigabyte
2015-01-24 17:01 - 2013-11-17 09:59 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-22 19:37 - 2013-08-22 14:25 - 00524288 ___SH () C:\Windows\system32\config\BBI(31)
2015-01-22 19:35 - 2014-06-16 18:36 - 10048000 _____ () C:\Windows\system32\BT_Socket.dll
2015-01-22 19:35 - 2014-06-16 18:36 - 00388096 _____ () C:\Windows\system32\AutoGreenCP.dll
2015-01-22 17:14 - 2014-06-16 19:16 - 00030528 _____ () C:\Windows\GVTDrv64.sys
2015-01-22 17:14 - 2014-06-16 19:16 - 00000004 _____ () C:\Windows\SysWOW64\GVTunner.ref
2015-01-15 23:10 - 2013-11-10 15:02 - 00000000 ____D () C:\ProgramData\VSO

==================== Files in the root of some directories =======

2014-06-26 10:53 - 2014-06-26 10:53 - 0026624 _____ () C:\Users\awas_000\AppData\Roaming\00001760_VTS_0.IFO
2014-06-26 10:53 - 2014-06-26 10:53 - 0016384 _____ () C:\Users\awas_000\AppData\Roaming\00001760_VTS_1.IFO
2013-10-22 08:53 - 2015-02-02 17:36 - 0000967 _____ () C:\Users\awas_000\AppData\Roaming\burnaware.ini
2013-11-10 15:02 - 2013-11-10 15:36 - 0099384 _____ () C:\Users\awas_000\AppData\Roaming\inst.exe
2013-11-10 15:02 - 2013-11-10 15:36 - 0007859 _____ () C:\Users\awas_000\AppData\Roaming\pcouffin.cat
2013-11-10 15:02 - 2013-11-10 15:36 - 0001167 _____ () C:\Users\awas_000\AppData\Roaming\pcouffin.inf
2013-11-10 15:02 - 2013-11-10 15:36 - 0000055 _____ () C:\Users\awas_000\AppData\Roaming\pcouffin.log
2013-11-10 15:02 - 2013-11-10 15:36 - 0082816 _____ (VSO Software) C:\Users\awas_000\AppData\Roaming\pcouffin.sys
2014-12-16 10:26 - 2014-12-16 10:26 - 0003584 _____ () C:\Users\awas_000\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-06-26 10:35 - 2014-06-26 10:35 - 0007601 _____ () C:\Users\awas_000\AppData\Local\Resmon.ResmonCfg
2014-07-21 18:53 - 2014-07-29 18:37 - 0000040 ___SH () C:\ProgramData\.zreglib
2014-06-16 23:32 - 2014-06-16 23:32 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\awas_000\AppData\Local\Temp\cabex.dll
C:\Users\awas_000\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\awas_000\AppData\Local\Temp\listicka-partner-13415-1.1.2-offline.exe
C:\Users\awas_000\AppData\Local\Temp\setup.exe
C:\Users\awas_000\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================


==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Internet Security (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\awas_000\Desktop" je 7763 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Po spusteni probehne stazeni databaze
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  resethosts;
  emptyclsid;
  IEdefaults;
  FFdefaults;
  CHRdefaults;
  emptyIEcache;
  emptyFFcache;
  emptyCHRcache;
  emptyalltemp;
  emptyflash;
  emptyjava;
  emptyrecycle.bin;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Tady je.V systému žádné změny...



Zoek.exe v5.0.0.0 Updated 13-February-2015
Tool run by awas_000 on so 14. 02. 2015 at 22:07:52,99.
Microsoft Windows 8.1 Pro 6.3.9600 x64
Running in: Normal Mode No Internet Access Detected
Launched: C:\Users\awas_000\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

14. 2. 2015 22:10:08 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\ATI Technologies deleted successfully
C:\Program Files\Common Files\ShopperPro deleted successfully
C:\Program Files\Common Files\SolidWorks Shared deleted successfully
C:\PROGRA~3\DassaultSystemes deleted successfully
C:\PROGRA~3\xml_param deleted successfully
C:\Users\awas_000\AppData\Roaming\5646 deleted successfully
C:\Users\awas_000\AppData\Roaming\Any DVD Cloner Platinum deleted successfully
C:\Users\awas_000\AppData\Roaming\ARA deleted successfully
C:\Users\awas_000\AppData\Roaming\DassaultSystemes deleted successfully
C:\Users\awas_000\AppData\Roaming\Media Player Classic deleted successfully
C:\Users\awas_000\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A} deleted successfully
C:\Users\awas_000\AppData\Local\DassaultSystemes deleted successfully
C:\Users\awas_000\AppData\Local\PackageStaging deleted successfully
C:\Users\awas_000\AppData\Local\TomTom deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3388811255-3395146725-224997178-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{451C804F-C205-4F03-B48E-537EC94937BF} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5} deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\WSVCU@Wondershare.com deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\prefs.js:
user_pref("browser.startup.homepage", "www.google.cz");
user_pref("browser.search.suggest.enabled", false);
user_pref("browser.search.useDBForOrder", true);

Added to C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

Deleted from C:\Users\awas_000\AppData\Roaming\Thunderbird\Profiles\3k9dqpv1.default\prefs.js:

Added to C:\Users\awas_000\AppData\Roaming\Thunderbird\Profiles\3k9dqpv1.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default

user.js not found
---- Lines ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299 removed from prefs.js ----
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.active", true);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.addressbar", "NA");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.addressbarenhanced", "");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.asyncdb.was_copied", "true");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.asyncinternaldb.was_copied", "true");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.backgroundver", 1);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.certdomaininstaller", "");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.cookie.InstallationTime.value", "%221422892515%22");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:0
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.cookie.InstallerParams.value", "%7B%22source_id%22%3A%220
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.description", ".");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.domain", "");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.e9d197d59f2f45f382b1aa5c14d82@8706aaed9b904554b5cb7984e9.
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.e9d197d59f2f45f382b1aa5c14d82@8706aaed9b904554b5cb7984e9.
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.e9d197d59f2f45f382b1aa5c14d82@8706aaed9b904554b5cb7984e9.
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.e9d197d59f2f45f382b1aa5c14d82@8706aaed9b904554b5cb7984e9.
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.e9d197d59f2f45f382b1aa5c14d82@8706aaed9b904554b5cb7984e9.
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.e9d197d59f2f45f382b1aa5c14d82@8706aaed9b904554b5cb7984e9.
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.enablesearch", false);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.homepage", "");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.changeprevious", false);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.iframe", false);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.InstallationThankYouPage", true);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.InstallationTime", 1422892515);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.__defualt_browser__.expiration", "Fri Feb 01 2
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.__defualt_browser__.value", "%22ff%22");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb._installer_additional_info.expiration", "Fri F
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb._installer_additional_info.value", "%7B%22asw%
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.installer.value", "%7B%22InstallerIdentifiers%
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.InstallerIdentifiers.value", "%7B%22installer_
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.InstallerParams.expiration", "Fri Feb 01 2030
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.InstallerParams.value", "%7B%22source_id%22%3A
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.InstallerParamsCache.expiration", "Fri Feb 01
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.InstallerParamsCache.value", "%7B%22source_id%
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.InstallerUserIdentifiersCache.expiration", "Fr
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.InstallerUserIdentifiersCache.value", "%7B%22i
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.monetization_plugin_bundledUrls.expiration", "
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.monetization_plugin_bundledWithHash.expiration
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.monetization_plugin_bundledWithHash.value", "n
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.monetization_plugin_notBundledArr_.expiration"
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.monetization_plugin_notBundledArr_.value", "%5
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.monetization_plugin_regBundledWithSoftware.exp
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.monetization_plugin_regBundledWithSoftware.val
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.reporting_user_key_index.expiration", "Thu Jan
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.reporting_user_key_index.value", "12");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.Resources_appVer.value", "8");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.Resources_lastVersion.expiration", "Fri Feb 01
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.Resources_lastVersion.value", "1");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 0
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.Resources_meta.value", "%7B%7D");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.Resources_nextCheck.expiration", "Mon Feb 02 2
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.Resources_nextCheck.value", "true");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.Resources_queue.expiration", "Fri Feb 01 2030
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.Resources_queue.value", "%7B%7D");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.Resources_remote_resources.expiration", "Fri F
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.internaldb.Resources_remote_resources.value", "%7B%22remo
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.lastDailyReport", "1422892627988");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.lastUpdate", "1422892627018");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.manifesturl", "");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.name", "SensePlus.V2");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.newtab", "");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.opensearch", "");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.pluginsurl", "http://js.ourdatagenserv.com/plugin/apps/70
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.pluginsversion", 4);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.publisher", "Object Browser");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.searchstatus", 0);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.setnewtab", false);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.thankyou", "");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.updateinterval", 360);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.70299.ver", 8);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.apps", "70299");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.bic", "14b4af858cc93e9485e26c62ababae9a");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.cid", 70299);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.firstrun", false);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.hadappinstalled", true);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.installationdate", 1422892626);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.installerAdditionalInfo", "{\"asw\":[2, -1065351164, 536879104,
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.modetype", "production");
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.reportInstall", true);
user_pref("extensions.ae9d197d59f2f45f382b1aa5c14d828706aaed9b904554b5cb7984e9com70299.statsDailyCounter", 1);
---- Lines WSVCU@Wondershare.com removed from prefs.js ----
user_pref("extensions.WSVCU@Wondershare.com.install-event-fired", true);
---- FireFox user.js and prefs.js backups ----

prefs_201514.02._2219_.backup

ProfilePath: C:\Users\awas_000\AppData\Roaming\Thunderbird\Profiles\3k9dqpv1.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_201514.02._2219_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~2\SamsungPrinterLiveUpdateInstaller deleted
C:\PROGRA~2\Wondershare deleted
C:\PROGRA~2\COMMON~1\Wondershare deleted
C:\FRSTLauncher.exe deleted
C:\Users\awas_000\AppData\Roaming\dlg deleted
C:\Users\awas_000\AppData\Roaming\burnaware.ini deleted
C:\PROGRA~3\Wondershare Video Converter Ultimate deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\awas_000\AppData\Local\Wondershare deleted
C:\Users\awas_000\AppData\Local\Installer deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\Users\Public\Documents\GOOBZO deleted
C:\Users\Public\Documents\ShopperPro deleted
C:\Users\Public\Documents\YTAHelper deleted
C:\windows\SysNative\tasks\RocketTab deleted
C:\windows\SysNative\tasks\RocketTab Update Task deleted
C:\windows\SysNative\tasks\Installer_iwebar deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\GPT.INI deleted
C:\Windows\Syswow64\GroupPolicy\gpt.ini deleted
C:\Windows\Syswow64\FAP9C00.tmp deleted
C:\Windows\Syswow64\FAPAC8C.tmp deleted
C:\Windows\Syswow64\FAPAF2E.tmp deleted
C:\Windows\Syswow64\FAPC393.tmp deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\awas_000\AppData\Roaming\Thunderbird\Profiles\3k9dqpv1.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [14. 02. 2015 18:57]

==== Firefox Extensions ======================

ProfilePath: C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default
- Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
- Undetermined - translator@zoli.bod
- Undetermined - YoutubeDownloader@PeterOlayev.com
- Undetermined - wrc@avast.com
- esk slovnk pro kontrolu pravopisu - %ProfilePath%\extensions\cs@dictionaries.addons.mozilla.org
- Element Hiding Helper for Adblock Plus - %ProfilePath%\extensions\elemhidehelper@adblockplus.org.xpi
- YouTube Video and Audio Downloader - %ProfilePath%\extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi
- Google Translator for Firefox - %ProfilePath%\extensions\translator@zoli.bod.xpi
- 1-Click YouTube Video Downloader - %ProfilePath%\extensions\YoutubeDownloader@PeterOlayev.com.xpi
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

ProfilePath: C:\Users\awas_000\AppData\Roaming\Thunderbird\Profiles\3k9dqpv1.default
- esk slovnk pro kontrolu pravopisu - %ProfilePath%\extensions\cs@dictionaries.addons.mozilla.org

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default
C62322C77D1AAB77B1CF1130FCC3673A - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll - Shockwave Flash


==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[02. 12. 2014 10:46]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.seznam.cz/?clid=22668"
"Search Page"="http://search.seznam.cz/?sourceid=quick ... earchTerms}"
"Search Bar"="https://www.seznam.cz/?clid=22668"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://search.seznam.cz/?sourceid=quick ... earchTerms}"
"Start Page"="https://www.seznam.cz/?clid=22668"
"Search Bar"="https://www.seznam.cz/?clid=22668"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Search Page"="http://search.seznam.cz/?sourceid=quick ... earchTerms}"
"Start Page"="https://www.seznam.cz/?clid=22668"
"Search Bar"="https://www.seznam.cz/?clid=22668"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="https://www.seznam.cz/?clid=22668"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{15C4DF55-4B67-495A-A3D3-A497C4A49EE0} Seznam Url="http://search.seznam.cz/?sourceid=quick ... earchTerms}"

==== Reset Google Chrome ======================

Nothing found to reset

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\awas_000\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\awas_000\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\awas_000\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\awas_000\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

C:\Users\awas_000\AppData\Local\Mozilla\Firefox\Profiles\l8nbtsud.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=981 folders=125 207040097 bytes)

==== Empty Temp Folders ======================

C:\Users\awas_000\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\awas_000\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on so 14. 02. 2015 at 22:22:33,06 ======================

AdwCleaner by byl taky prosim

Tady je:



# AdwCleaner v4.110 - Logfile created 15/02/2015 at 08:03:47
# Updated 05/02/2015 by Xplode
# Database : 2015-02-05.2 [Local]
# Operating system : Windows 8.1 Pro (x64)
# Username : awas_000 - MIREK
# Running from : C:\Users\awas_000\Desktop\adwcleaner_4.110.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v35.0.1 (x86 cs)


*************************

AdwCleaner[R0].txt - [2135 bytes] - [24/06/2014 08:47:30]
AdwCleaner[R1].txt - [884 bytes] - [24/06/2014 08:49:59]
AdwCleaner[R2].txt - [1000 bytes] - [24/06/2014 08:53:19]
AdwCleaner[R3].txt - [1121 bytes] - [24/06/2014 09:00:22]
AdwCleaner[R4].txt - [1190 bytes] - [25/06/2014 08:47:52]
AdwCleaner[R5].txt - [3798 bytes] - [14/02/2015 19:41:03]
AdwCleaner[R6].txt - [5231 bytes] - [14/02/2015 22:03:39]
AdwCleaner[R7].txt - [1489 bytes] - [15/02/2015 07:58:42]
AdwCleaner[S0].txt - [2050 bytes] - [24/06/2014 08:47:51]
AdwCleaner[S1].txt - [944 bytes] - [24/06/2014 08:50:27]
AdwCleaner[S2].txt - [1061 bytes] - [24/06/2014 08:54:34]
AdwCleaner[S3].txt - [5155 bytes] - [14/02/2015 22:05:08]
AdwCleaner[S4].txt - [1418 bytes] - [15/02/2015 08:03:47]

########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [1477 bytes] ##########

Poprosim o novy log z FRST

Tady to je:


Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-02-2015
Ran by awas_000 (administrator) on MIREK on 15-02-2015 09:09:37
Running from C:\Users\awas_000\Desktop
Loaded Profiles: awas_000 (Available profiles: awas_000)
Platform: Windows 8.1 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
() C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\Gigabyte\Smart TimeLock\TimeMgmtDaemon.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files (x86)\Gigabyte\AppCenter\ApCent.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\Gigabyte\SIV\thermald.exe
(Gigabyte Technology CO.) C:\Program Files\Gigabyte\SmartRecovery2\RPMDaemon.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Akamai Technologies, Inc.) C:\Users\awas_000\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\awas_000\AppData\Local\Akamai\netsession_win.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Acronis) D:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\Gigabyte\Smart TimeLock\AlarmClock.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Burnaware Technologies) Z:\Program Files (x86)\BurnAware Professional\BurnAware.exe
(Burnaware Technologies) Z:\Program Files (x86)\BurnAware Professional\BurnImage.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(forum.viry.cz) C:\Users\awas_000\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [438784 2010-12-17] ()
HKLM\...\Run: [Slu~ba Acronis Scheduler2] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [519504 2013-08-21] (Acronis)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671792 2014-06-16] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-27] (AVAST Software)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => D:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2010624 2013-07-20] (Dominik Reichl)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => D:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [7830704 2014-03-05] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1105328 2013-01-10] (Acronis)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe [1960336 2015-01-15] ()
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM\...\RunOnce: [RPMKickstart] => C:\Program Files\Gigabyte\SmartRecovery2\RPMKickstartEx.exe [2320384 2014-04-01] (TODO: <Company name>)
HKLM-x32\...\RunOnce: [SIV] => C:\Program Files (x86)\Gigabyte\SIV\RunOnceTc.exe [9728 2014-04-08] (GIGA-BYTE TECHNOLOGY CO., LTD.)
HKLM-x32\...\RunOnce: [EasyTune] => C:\Program Files (x86)\Gigabyte\EasyTune\etro.exe [5632 2014-08-18] (GIGA-BYTE TECHNOLOGY CO., LTD.)
HKLM-x32\...\RunOnce: [PreRun] => C:\Program Files (x86)\Gigabyte\AppCenter\PreRun.exe [8192 2013-04-29] ()
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23308256 2015-01-15] (Google)
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55360 2014-06-24] (Raptr, Inc)
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-06-16] ()
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30872168 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Akamai NetSession Interface] => C:\Users\awas_000\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [833024 2014-06-16] (ZONER software)
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\MountPoints2: {790fc9b5-4488-11e3-8255-0022157705ed} - "F:\.autorun\autorun.exe"
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\MountPoints2: {ff1fb538-f5a4-11e3-829d-806e6f6e6963} - "I:\setup.exe"
Startup: C:\Users\awas_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk
ShortcutTarget: MEGAsync.lnk -> C:\Users\awas_000\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => D:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll ()
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => D:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll ()
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => D:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX32.dll ()
BootExecute: autocheck autochk *

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
SearchScopes: HKLM-x32 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3388811255-3395146725-224997178-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3388811255-3395146725-224997178-1001 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
DPF: HKLM-x32 {F680B28A-3AEE-4C88-93ED-45AE9215C128} https://adisepo.mfcr.cz/adistc/adis/idp ... tsignx.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 - No File
Winsock: Missing Catalog9 entry, broken internet access. <===== ATTENTION.
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default
FF Homepage: google.cz
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @cuminas.jp/DjVuPlugin -> C:\Program Files (x86)\Cuminas\Document Express DjVu Plug-in\npdjvu.dll (Cuminas Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\searchplugins\firmycz.xml
FF SearchPlugin: C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\searchplugins\zbocz.xml
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\Extensions\cs@dictionaries.addons.mozilla.org [2014-11-10]
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\Extensions\elemhidehelper@adblockplus.org.xpi [2013-10-22]
FF Extension: YouTube Video and Audio Downloader - C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\Extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi [2014-12-09]
FF Extension: Google Translator for Firefox - C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\Extensions\translator@zoli.bod.xpi [2013-10-22]
FF Extension: 1-Click YouTube Video Downloader - C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2014-12-09]
FF Extension: Adblock Plus - C:\Users\awas_000\AppData\Roaming\Mozilla\Firefox\Profiles\l8nbtsud.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-22]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-10-22]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-02]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-02] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-02] (Avast Software)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 gadjservice; C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [16384 2014-04-16] () [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-10-03] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2013-01-16] (Hewlett-Packard Company) [File not signed]
S2 Service KMSELDI; D:\Program Files\KMSpico\Service_KMS.exe [1050904 2013-12-11] () [File not signed]
R2 Smart TimeLock; C:\Program Files (x86)\GIGABYTE\Smart TimeLock\TimeMgmtDaemon.exe [102400 2013-02-22] (Gigabyte Technology CO., LTD.) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138664 2014-04-24] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138664 2014-04-24] (SlySoft, Inc.)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22240 2013-10-28] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-02] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-02] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-02] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-02] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-02] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-02] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-02] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-02] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-03-11] (Advanced Micro Devices)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [312480 2014-05-09] ()
R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [17600 2014-04-14] (Glarysoft Ltd)
R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d64x64.sys [468240 2014-06-16] (Intel Corporation)
R3 etocdrv; C:\Windows\etocdrv.sys [15584 2013-10-30] (Giga-Byte Technology CO., LTD.)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2015-01-22] ()
S2 hardlock; C:\Windows\system32\drivers\hardlock.sys [323584 2012-10-06] (SafeNet Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2014-05-09] ()
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation)
S3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] ()
S3 RTL85n64; C:\Windows\system32\DRIVERS\RTL85n64.sys [2061928 2013-06-18] (Realtek Semiconductor Corporation )
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2014-02-16] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [183224 2014-02-16] (Acronis)
S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [22240 2013-10-24] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-02] (Avast Software)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [113936 2013-12-18] (Oracle Corporation)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [71680 2014-04-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S4 WinDivert1.1; D:\Program Files\KMSpico\WinDivert.sys [35376 2014-01-03] (Basil Projects)
R3 WsAudio_Device; C:\Windows\system32\drivers\VirtualAudio.sys [31080 2013-03-25] (Wondershare)
S3 yukonw8; C:\Windows\system32\DRIVERS\yk63x64.sys [295216 2013-06-18] (Marvell)
S2 GhFlt; \??\C:\Windows\system32\drivers\ghflt.sys [X]
S3 HWiNFO32; \??\C:\Users\awas_000\AppData\Local\Temp\HWiNFO64A.SYS [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-15 09:07 - 2015-02-14 20:55 - 00112640 _____ (forum.viry.cz) C:\Users\awas_000\Desktop\FRSTLauncher.exe
2015-02-15 09:03 - 2015-02-15 09:04 - 00000000 ____D () C:\Users\awas_000\Desktop\Microsoft Windows XP Professional SP3 CZ [ 8.2013 ]
2015-02-15 09:01 - 2015-02-15 09:05 - 00000471 _____ () C:\Users\awas_000\AppData\Roaming\burnaware.ini
2015-02-15 08:06 - 2015-02-15 08:06 - 00001557 _____ () C:\Users\awas_000\Desktop\AdwCleaner[S4].txt
2015-02-15 08:06 - 2015-02-15 08:06 - 00000197 _____ () C:\Windows\system32\2015-02-15-07-06-48.026-AvastVBoxSVC.exe-2944.log
2015-02-15 07:58 - 2015-02-14 22:01 - 02112512 _____ () C:\Users\awas_000\Desktop\adwcleaner_4.110.exe
2015-02-14 23:18 - 2015-02-14 23:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Axantum AxCrypt
2015-02-14 23:18 - 2015-02-14 23:18 - 00000000 ____D () C:\Program Files\Axantum
2015-02-14 22:23 - 2015-02-14 22:23 - 00024239 _____ () C:\Users\awas_000\Desktop\zoek-results.txt
2015-02-14 22:23 - 2015-02-14 22:23 - 00000197 _____ () C:\Windows\system32\2015-02-14-21-23-40.061-AvastVBoxSVC.exe-1584.log
2015-02-14 22:20 - 2015-02-14 22:07 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-02-14 22:15 - 2015-01-25 20:38 - 03495040 _____ (Axantum Software AB) C:\Users\awas_000\Desktop\AxCrypt-1.7.3156.0-Setup.exe
2015-02-14 22:10 - 2015-02-14 22:22 - 00024239 _____ () C:\zoek-results.log
2015-02-14 22:08 - 2015-02-14 22:08 - 00000197 _____ () C:\Windows\system32\2015-02-14-21-08-06.091-AvastVBoxSVC.exe-3264.log
2015-02-14 22:07 - 2015-02-14 22:19 - 00000000 ____D () C:\zoek_backup
2015-02-14 22:07 - 2015-02-14 22:05 - 00005155 _____ () C:\Users\awas_000\Desktop\AdwCleaner[S3].txt
2015-02-14 22:07 - 2015-02-14 22:01 - 01304576 _____ () C:\Users\awas_000\Desktop\zoek.exe
2015-02-14 22:04 - 2015-02-14 22:04 - 00000197 _____ () C:\Windows\system32\2015-02-14-21-04-19.022-AvastVBoxSVC.exe-2960.log
2015-02-14 22:02 - 2015-02-14 22:02 - 00286552 _____ () C:\Windows\Minidump\021415-25703-01.dmp
2015-02-14 21:09 - 2015-02-15 09:09 - 00021483 _____ () C:\Users\awas_000\Desktop\FRST.txt
2015-02-14 21:09 - 2015-02-15 09:09 - 00000000 ____D () C:\FRST
2015-02-14 21:06 - 2015-02-14 21:08 - 00000000 ____D () C:\Users\awas_000\Desktop\záloha
2015-02-14 21:06 - 2015-02-14 21:06 - 00000000 ___RD () C:\Users\awas_000\Desktop\Zástupci
2015-02-14 21:06 - 2015-02-14 21:06 - 00000000 ____D () C:\Users\awas_000\Desktop\Tor Browser
2015-02-14 21:06 - 2015-02-14 21:06 - 00000000 ____D () C:\Users\awas_000\Desktop\sdk
2015-02-14 21:06 - 2015-02-14 21:06 - 00000000 ____D () C:\Users\awas_000\Desktop\CoreTemp64
2015-02-14 21:06 - 2015-02-14 20:53 - 02134528 _____ (Farbar) C:\Users\awas_000\Desktop\FRST64.exe
2015-02-14 21:06 - 2015-02-09 12:18 - 00000061 _____ () C:\Users\awas_000\Desktop\Nový textový dokument (2).txt
2015-02-14 21:06 - 2015-01-30 10:59 - 00016590 _____ () C:\Users\awas_000\Desktop\domácí sít heslo-PNG.axx
2015-02-14 21:06 - 2015-01-07 20:44 - 123413686 _____ () C:\Users\awas_000\Desktop\Carl Orff - Carmina Burana with The Copenhagen Royal Chapel Choir & DR Symphony Orchestra - DASH.m4a
2015-02-14 21:06 - 2014-10-27 20:58 - 00000110 ____H () C:\Users\awas_000\Desktop\images4.jpg.uid-zps
2015-02-14 21:06 - 2014-09-03 20:22 - 00000048 _____ () C:\Users\awas_000\Desktop\iy.txt
2015-02-14 21:06 - 2014-08-01 20:49 - 37988732 _____ () C:\Users\awas_000\Desktop\01. ΤΑ ΣΑΒΒΑΤΑ.wav
2015-02-14 21:06 - 2014-06-19 20:09 - 00000110 ____H () C:\Users\awas_000\Desktop\obrázek00004.jpg.uid-zps
2015-02-14 21:06 - 2014-04-14 19:04 - 00000110 ____H () C:\Users\awas_000\Desktop\20140411_105732_Android.jpg.uid-zps
2015-02-14 21:06 - 2014-03-26 21:10 - 00000110 ____H () C:\Users\awas_000\Desktop\P1050505 - kopie.JPG.uid-zps
2015-02-14 21:06 - 2014-03-19 07:51 - 00000110 ____H () C:\Users\awas_000\Desktop\329734_203337986415170_1204469632_o.jpg.uid-zps
2015-02-14 21:06 - 2014-03-15 18:46 - 00001755 _____ () C:\Users\awas_000\Desktop\Disk Google.lnk
2015-02-14 21:06 - 2014-01-22 19:42 - 00000110 ____H () C:\Users\awas_000\Desktop\P1050222.JPG.uid-zps
2015-02-14 21:06 - 2014-01-07 12:25 - 00000110 ____H () C:\Users\awas_000\Desktop\DSCI0021.JPG.uid-zps
2015-02-14 21:06 - 2013-12-28 20:45 - 00000110 ____H () C:\Users\awas_000\Desktop\Monika2.jpg.uid-zps
2015-02-14 21:06 - 2013-12-03 07:51 - 00000110 ____H () C:\Users\awas_000\Desktop\Výstřižek1.PNG.uid-zps
2015-02-14 21:06 - 2013-11-26 10:42 - 00000110 ____H () C:\Users\awas_000\Desktop\P1010545.JPG.uid-zps
2015-02-14 21:06 - 2013-11-25 14:30 - 00000110 ____H () C:\Users\awas_000\Desktop\obrázek00002.jpg.uid-zps
2015-02-14 21:06 - 2013-11-25 14:30 - 00000110 ____H () C:\Users\awas_000\Desktop\obrázek00001.jpg.uid-zps
2015-02-14 21:06 - 2013-11-24 15:38 - 00000110 ____H () C:\Users\awas_000\Desktop\P1010541.JPG.uid-zps
2015-02-14 21:06 - 2013-11-24 15:36 - 00000110 ____H () C:\Users\awas_000\Desktop\P1010547.JPG.uid-zps
2015-02-14 21:06 - 2013-11-24 15:36 - 00000110 ____H () C:\Users\awas_000\Desktop\P1010538.JPG.uid-zps
2015-02-14 21:06 - 2013-11-05 15:01 - 00000110 ____H () C:\Users\awas_000\Desktop\obrázek00003.jpg.uid-zps
2015-02-14 21:06 - 2013-10-22 08:16 - 00000436 _____ () C:\Users\awas_000\Desktop\Tento počítač – zástupce.lnk
2015-02-14 20:57 - 2015-02-14 20:57 - 00000197 _____ () C:\Windows\system32\2015-02-14-19-57-15.079-AvastVBoxSVC.exe-2888.log
2015-02-14 20:31 - 2015-02-14 20:31 - 00000197 _____ () C:\Windows\system32\2015-02-14-19-31-56.016-AvastVBoxSVC.exe-2688.log
2015-02-14 20:15 - 2015-02-14 20:15 - 00000197 _____ () C:\Windows\system32\2015-02-14-19-15-49.059-AvastVBoxSVC.exe-2932.log
2015-02-14 19:33 - 2015-02-14 19:33 - 00000197 _____ () C:\Windows\system32\2015-02-14-18-33-25.046-AvastVBoxSVC.exe-3112.log
2015-02-14 19:06 - 2015-02-14 19:06 - 00000197 _____ () C:\Windows\system32\2015-02-14-18-06-00.063-AvastVBoxSVC.exe-3096.log
2015-02-14 18:51 - 2015-02-14 18:51 - 00000197 _____ () C:\Windows\system32\2015-02-14-17-51-26.028-AvastVBoxSVC.exe-5552.log
2015-02-14 18:26 - 2015-02-14 18:26 - 00000197 _____ () C:\Windows\system32\2015-02-14-17-26-38.075-AvastVBoxSVC.exe-1952.log
2015-02-14 17:09 - 2015-02-14 17:09 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2015-02-13 23:19 - 2015-02-13 23:19 - 00000197 _____ () C:\Windows\system32\2015-02-13-22-19-25.033-AvastVBoxSVC.exe-2084.log
2015-02-12 09:51 - 2015-02-12 09:51 - 00000197 _____ () C:\Windows\system32\2015-02-12-08-51-37.007-AvastVBoxSVC.exe-3068.log
2015-02-11 09:10 - 2015-02-04 00:38 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 09:10 - 2015-02-04 00:08 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 09:10 - 2015-02-04 00:08 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 09:10 - 2015-02-03 00:11 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 09:10 - 2015-02-03 00:11 - 00894464 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 09:10 - 2015-02-03 00:11 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 09:10 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2015-02-11 09:10 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 09:10 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 09:10 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-02-11 09:10 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-02-11 09:10 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 09:10 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 09:10 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 09:10 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 09:10 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 09:10 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 09:10 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-02-11 09:10 - 2015-01-12 03:32 - 06041088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-11 09:10 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 09:10 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 09:10 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 09:10 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 09:10 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 09:10 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 09:10 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-02-11 09:10 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-02-11 09:10 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-02-11 09:10 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 09:10 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 09:10 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 09:10 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 09:10 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 09:10 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 09:10 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-02-11 09:10 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-02-11 09:10 - 2015-01-12 02:29 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-11 09:10 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-02-11 09:10 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 09:10 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-02-11 09:10 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 09:10 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 09:10 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 09:10 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 09:10 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 09:10 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 09:10 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 09:10 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 09:10 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 09:10 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 09:10 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-02-11 09:10 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-02-11 09:10 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 09:10 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 09:10 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 09:10 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 09:10 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 09:10 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 09:10 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 09:10 - 2014-12-09 00:12 - 00391526 _____ () C:\Windows\system32\ApnDatabase.xml
2015-02-10 09:10 - 2015-02-10 09:11 - 00000197 _____ () C:\Windows\system32\2015-02-10-08-10-54.010-AvastVBoxSVC.exe-3368.log
2015-02-09 23:40 - 2015-02-09 23:40 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-02-09 12:21 - 2015-02-09 12:21 - 00000197 _____ () C:\Windows\system32\2015-02-09-11-21-42.096-AvastVBoxSVC.exe-3036.log
2015-02-05 19:57 - 2015-02-05 19:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64
2015-02-02 17:00 - 2015-02-02 17:01 - 00000197 _____ () C:\Windows\system32\2015-02-02-16-00-58.092-AvastVBoxSVC.exe-2068.log
2015-01-31 00:21 - 2015-01-31 00:22 - 00000197 _____ () C:\Windows\system32\2015-01-30-23-21-25.073-AvastVBoxSVC.exe-2952.log
2015-01-30 23:28 - 2015-01-30 23:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2015-01-30 23:28 - 2014-11-24 12:07 - 00916024 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2015-01-30 23:28 - 2014-11-24 12:07 - 00128080 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2015-01-29 19:53 - 2015-01-29 19:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-29 19:51 - 2015-01-29 19:51 - 00000247 _____ () C:\Windows\system32\2015-01-29-18-51-42.090-aswFe.exe-4300.log
2015-01-29 19:49 - 2015-01-29 19:51 - 00000247 _____ () C:\Windows\system32\2015-01-29-18-49-33.064-aswFe.exe-5256.log
2015-01-29 19:49 - 2015-01-29 19:49 - 00000197 _____ () C:\Windows\system32\2015-01-29-18-49-32.019-AvastVBoxSVC.exe-7396.log
2015-01-26 14:57 - 2015-02-14 18:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-01-26 14:57 - 2015-01-26 14:58 - 00000197 _____ () C:\Windows\system32\2015-01-26-13-57-53.057-AvastVBoxSVC.exe-4004.log
2015-01-26 14:57 - 2015-01-26 14:57 - 00001940 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-01-26 14:57 - 2014-12-02 10:46 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-01-26 14:47 - 2015-01-26 14:47 - 00000197 _____ () C:\Windows\system32\2015-01-26-13-47-01.022-AvastVBoxSVC.exe-3260.log
2015-01-26 14:36 - 2015-01-26 14:36 - 00000000 ____D () C:\Users\awas_000\AppData\Roaming\2BB34521-0F86-43D2-91BF-C01AC8169717
2015-01-22 19:54 - 2015-01-24 16:58 - 01634816 _____ () C:\Windows\rstcli.exe
2015-01-22 19:54 - 2015-01-24 16:58 - 00001519 _____ () C:\Windows\Gcli.txt
2015-01-22 19:54 - 2015-01-24 16:58 - 00000027 _____ () C:\Windows\cli.bat
2015-01-22 19:44 - 2015-02-15 08:05 - 00000014 _____ () C:\Windows\OCStatus.ini
2015-01-22 19:39 - 2015-01-22 19:39 - 00000197 _____ () C:\Windows\system32\2015-01-22-18-39-33.031-AvastVBoxSVC.exe-3104.log
2015-01-22 19:26 - 2014-10-24 14:16 - 00721263 _____ () C:\Windows\SysWOW64\WSCM64.dll
2015-01-22 19:26 - 2014-10-24 14:16 - 00214528 _____ () C:\Windows\SysWOW64\WSCM32.dll
2015-01-17 21:14 - 2015-01-17 21:14 - 00000197 _____ () C:\Windows\system32\2015-01-17-20-14-02.062-AvastVBoxSVC.exe-3232.log
2015-01-16 23:11 - 2015-01-16 23:12 - 00000197 _____ () C:\Windows\system32\2015-01-16-22-11-40.092-AvastVBoxSVC.exe-3128.log
2015-01-16 10:03 - 2015-02-15 08:04 - 00008900 _____ () C:\Windows\PFRO.log
2015-01-16 10:03 - 2015-01-16 10:03 - 00000197 _____ () C:\Windows\system32\2015-01-16-09-03-43.046-AvastVBoxSVC.exe-3184.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-15 09:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2015-02-15 08:46 - 2013-10-22 09:45 - 00000000 ____D () C:\Users\awas_000\AppData\Local\CrashDumps
2015-02-15 08:29 - 2013-10-22 09:19 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-15 08:24 - 2015-01-13 23:12 - 01660883 _____ () C:\Windows\WindowsUpdate.log
2015-02-15 08:19 - 2014-03-15 18:44 - 00000972 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-15 08:15 - 2013-09-30 05:20 - 01749406 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-15 08:15 - 2013-09-30 04:57 - 00739720 _____ () C:\Windows\system32\perfh005.dat
2015-02-15 08:15 - 2013-09-30 04:57 - 00151940 _____ () C:\Windows\system32\perfc005.dat
2015-02-15 08:10 - 2013-10-22 08:14 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3388811255-3395146725-224997178-1001
2015-02-15 08:06 - 2014-06-16 23:54 - 00006464 _____ () C:\Windows\SysWOW64\Gms.log
2015-02-15 08:05 - 2014-06-17 16:53 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2015-02-15 08:05 - 2014-06-16 19:16 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\etdrv.sys
2015-02-15 08:05 - 2014-01-26 09:19 - 00000346 _____ () C:\Windows\Tasks\GlaryInitialize 4.job
2015-02-15 08:04 - 2015-01-14 09:48 - 00005237 _____ () C:\Windows\setupact.log
2015-02-15 08:04 - 2014-03-15 18:44 - 00000968 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-15 08:04 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-15 08:04 - 2013-08-22 14:25 - 00524288 ___SH () C:\Windows\system32\config\BBI
2015-02-15 08:03 - 2014-06-24 08:47 - 00000000 ____D () C:\AdwCleaner
2015-02-14 23:19 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-02-14 22:53 - 2013-10-22 09:07 - 00000000 ____D () C:\Users\awas_000\AppData\Roaming\vlc
2015-02-14 22:21 - 2014-10-21 08:37 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-02-14 22:19 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-02-14 22:19 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2015-02-14 22:02 - 2014-02-11 20:50 - 00000000 ____D () C:\Windows\Minidump
2015-02-14 22:02 - 2013-11-10 14:47 - 00108032 ___SH () C:\Users\awas_000\Desktop\Thumbs.db
2015-02-14 22:02 - 2013-10-22 08:08 - 00000000 ____D () C:\Users\awas_000
2015-02-14 20:04 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-14 19:28 - 2014-02-02 18:37 - 00000000 ____D () C:\Users\awas_000\VirtualBox VMs
2015-02-14 18:58 - 2013-11-13 10:21 - 00002478 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-02-14 18:57 - 2014-02-02 18:11 - 00000000 ____D () C:\Users\awas_000\AppData\Local\Akamai
2015-02-14 18:57 - 2013-12-28 21:47 - 00000000 ____D () C:\Users\awas_000\AppData\Roaming\Skype
2015-02-14 18:57 - 2013-12-07 12:55 - 00000000 ____D () C:\Users\awas_000\AppData\Roaming\dvdcss
2015-02-14 18:57 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\WinMetadata
2015-02-14 18:57 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\WinMetadata
2015-02-14 18:57 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\registration
2015-02-14 18:57 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\Sysprep
2015-02-14 18:48 - 2014-06-24 08:24 - 00000000 ____D () C:\Users\awas_000\AppData\Roaming\Seznam.cz
2015-02-14 17:47 - 2014-06-24 08:24 - 00000000 ____D () C:\ProgramData\TEMP
2015-02-12 09:51 - 2013-08-22 15:44 - 00389520 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-12 09:50 - 2014-12-11 21:46 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-12 09:50 - 2014-07-09 16:08 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-12 09:50 - 2013-08-22 14:25 - 00524288 ___SH () C:\Windows\system32\config\BBI(38)
2015-02-12 09:50 - 2013-08-22 14:25 - 00524288 ___SH () C:\Windows\system32\config\BBI(34)
2015-02-12 09:48 - 2013-11-13 10:02 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-12 09:47 - 2013-11-13 10:02 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-11 09:16 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-02-10 23:12 - 2014-02-16 14:19 - 00000000 ____D () C:\ProgramData\Acronis
2015-02-04 20:29 - 2013-10-22 09:19 - 00003802 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-04 18:14 - 2014-03-15 18:44 - 00003944 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-04 18:14 - 2014-03-15 18:44 - 00003708 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-02 16:59 - 2013-08-22 14:25 - 00000194 _____ () C:\Windows\win.ini
2015-02-01 12:32 - 2013-11-10 15:02 - 00000000 ____D () C:\Users\awas_000\AppData\Roaming\Vso
2015-02-01 10:25 - 2014-12-16 23:37 - 00000000 ____D () C:\Users\awas_000\AppData\Roaming\MediaMonkey
2015-01-31 00:21 - 2013-10-22 08:11 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-30 23:33 - 2014-02-02 18:37 - 00000000 ____D () C:\Users\awas_000\.VirtualBox
2015-01-30 10:39 - 2014-10-21 22:18 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2015-01-30 10:39 - 2014-10-21 22:18 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2015-01-30 10:39 - 2014-10-21 22:18 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2015-01-30 10:39 - 2014-10-21 22:18 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-30 10:39 - 2014-08-09 09:58 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-30 10:39 - 2014-01-27 15:59 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-29 20:14 - 2014-03-15 18:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-01-26 14:52 - 2014-02-16 13:25 - 00000000 ____D () C:\Users\awas_000\AppData\Roaming\.purple
2015-01-24 17:01 - 2014-06-16 18:31 - 00000000 ____D () C:\Program Files (x86)\Gigabyte
2015-01-24 17:01 - 2013-11-17 09:59 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-22 19:37 - 2013-08-22 14:25 - 00524288 ___SH () C:\Windows\system32\config\BBI(31)
2015-01-22 19:35 - 2014-06-16 18:36 - 10048000 _____ () C:\Windows\system32\BT_Socket.dll
2015-01-22 19:35 - 2014-06-16 18:36 - 00388096 _____ () C:\Windows\system32\AutoGreenCP.dll
2015-01-22 17:14 - 2014-06-16 19:16 - 00030528 _____ () C:\Windows\GVTDrv64.sys
2015-01-22 17:14 - 2014-06-16 19:16 - 00000004 _____ () C:\Windows\SysWOW64\GVTunner.ref

==================== Files in the root of some directories =======

2014-06-26 10:53 - 2014-06-26 10:53 - 0026624 _____ () C:\Users\awas_000\AppData\Roaming\00001760_VTS_0.IFO
2014-06-26 10:53 - 2014-06-26 10:53 - 0016384 _____ () C:\Users\awas_000\AppData\Roaming\00001760_VTS_1.IFO
2015-02-15 09:01 - 2015-02-15 09:05 - 0000471 _____ () C:\Users\awas_000\AppData\Roaming\burnaware.ini
2013-11-10 15:02 - 2013-11-10 15:36 - 0099384 _____ () C:\Users\awas_000\AppData\Roaming\inst.exe
2013-11-10 15:02 - 2013-11-10 15:36 - 0007859 _____ () C:\Users\awas_000\AppData\Roaming\pcouffin.cat
2013-11-10 15:02 - 2013-11-10 15:36 - 0001167 _____ () C:\Users\awas_000\AppData\Roaming\pcouffin.inf
2013-11-10 15:02 - 2013-11-10 15:36 - 0000055 _____ () C:\Users\awas_000\AppData\Roaming\pcouffin.log
2013-11-10 15:02 - 2013-11-10 15:36 - 0082816 _____ (VSO Software) C:\Users\awas_000\AppData\Roaming\pcouffin.sys
2014-12-16 10:26 - 2014-12-16 10:26 - 0003584 _____ () C:\Users\awas_000\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-06-26 10:35 - 2014-06-26 10:35 - 0007601 _____ () C:\Users\awas_000\AppData\Local\Resmon.ResmonCfg
2014-07-21 18:53 - 2014-07-29 18:37 - 0000040 ___SH () C:\ProgramData\.zreglib
2014-06-16 23:32 - 2014-06-16 23:32 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\awas_000\AppData\Local\Temp\Quarantine.exe
C:\Users\awas_000\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GlaryInitialize 4.job => d:\Program Files (x86)\Glary Utilities 4\Initialize.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Internet Security (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\awas_000\Desktop" je 7735 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe [1960336 2015-01-15] ()
  HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-06-16] ()
  HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30872168 2014-12-11] (Skype Technologies S.A.)
  HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Akamai NetSession Interface] => C:\Users\awas_000\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
  HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [833024 2014-06-16] (ZONER software)
  HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\MountPoints2: {790fc9b5-4488-11e3-8255-0022157705ed} - "F:\.autorun\autorun.exe" 
  HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\MountPoints2: {ff1fb538-f5a4-11e3-829d-806e6f6e6963} - "I:\setup.exe" 
  Startup: C:\Users\awas_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk
  ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX64.dll ()
  ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX64.dll ()
  ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX64.dll ()
  ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX32.dll ()
  ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX32.dll ()
  ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX32.dll ()
  
  HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
  HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
  HKU\S-1-5-21-3388811255-3395146725-224997178-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
  SearchScopes: HKLM-x32 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
  SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
  Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 - No File
  Winsock: Missing Catalog9 entry, broken internet access. <===== ATTENTION.
  
  CMD: netsh winsock reset
  
  S2 GhFlt; \??\C:\Windows\system32\drivers\ghflt.sys [X]
  S3 HWiNFO32; \??\C:\Users\awas_000\AppData\Local\Temp\HWiNFO64A.SYS [X]
  
  2015-02-15 09:07 - 2015-02-14 20:55 - 00112640 _____ (forum.viry.cz) C:\Users\awas_000\Desktop\FRSTLauncher.exe
  015-02-15 08:06 - 2015-02-15 08:06 - 00001557 _____ () C:\Users\awas_000\Desktop\AdwCleaner[S4].txt
  2015-02-15 08:06 - 2015-02-15 08:06 - 00000197 _____ () C:\Windows\system32\2015-02-15-07-06-48.026-AvastVBoxSVC.exe-2944.log
  2015-02-15 07:58 - 2015-02-14 22:01 - 02112512 _____ () C:\Users\awas_000\Desktop\adwcleaner_4.110.exe
  2015-02-14 22:23 - 2015-02-14 22:23 - 00024239 _____ () C:\Users\awas_000\Desktop\zoek-results.txt
  2015-02-14 22:23 - 2015-02-14 22:23 - 00000197 _____ () C:\Windows\system32\2015-02-14-21-23-40.061-AvastVBoxSVC.exe-1584.log
  2015-02-14 22:20 - 2015-02-14 22:07 - 00024064 _____ () C:\Windows\zoek-delete.exe
  2015-02-14 22:15 - 2015-01-25 20:38 - 03495040 _____ (Axantum Software AB) C:\Users\awas_000\Desktop\AxCrypt-1.7.3156.0-Setup.exe
  2015-02-14 22:10 - 2015-02-14 22:22 - 00024239 _____ () C:\zoek-results.log
  2015-02-14 22:08 - 2015-02-14 22:08 - 00000197 _____ () C:\Windows\system32\2015-02-14-21-08-06.091-AvastVBoxSVC.exe-3264.log
  2015-02-14 22:07 - 2015-02-14 22:19 - 00000000 ____D () C:\zoek_backup
  2015-02-14 22:07 - 2015-02-14 22:05 - 00005155 _____ () C:\Users\awas_000\Desktop\AdwCleaner[S3].txt
  2015-02-14 22:07 - 2015-02-14 22:01 - 01304576 _____ () C:\Users\awas_000\Desktop\zoek.exe
  2015-02-14 22:04 - 2015-02-14 22:04 - 00000197 _____ () C:\Windows\system32\2015-02-14-21-04-19.022-AvastVBoxSVC.exe-2960.log
  2015-02-14 21:09 - 2015-02-15 09:09 - 00021483 _____ () C:\Users\awas_000\Desktop\FRST.txt
  2015-02-14 21:06 - 2015-02-14 21:06 - 00000000 ____D () C:\Users\awas_000\Desktop\Tor Browser
  2015-02-14 20:57 - 2015-02-14 20:57 - 00000197 _____ () C:\Windows\system32\2015-02-14-19-57-15.079-AvastVBoxSVC.exe-2888.log
  2015-02-14 20:31 - 2015-02-14 20:31 - 00000197 _____ () C:\Windows\system32\2015-02-14-19-31-56.016-AvastVBoxSVC.exe-2688.log
  2015-02-14 20:15 - 2015-02-14 20:15 - 00000197 _____ () C:\Windows\system32\2015-02-14-19-15-49.059-AvastVBoxSVC.exe-2932.log
  2015-02-14 19:33 - 2015-02-14 19:33 - 00000197 _____ () C:\Windows\system32\2015-02-14-18-33-25.046-AvastVBoxSVC.exe-3112.log
  2015-02-14 19:06 - 2015-02-14 19:06 - 00000197 _____ () C:\Windows\system32\2015-02-14-18-06-00.063-AvastVBoxSVC.exe-3096.log
  2015-02-14 18:51 - 2015-02-14 18:51 - 00000197 _____ () C:\Windows\system32\2015-02-14-17-51-26.028-AvastVBoxSVC.exe-5552.log
  2015-02-14 18:26 - 2015-02-14 18:26 - 00000197 _____ () C:\Windows\system32\2015-02-14-17-26-38.075-AvastVBoxSVC.exe-1952.log
  2015-02-13 23:19 - 2015-02-13 23:19 - 00000197 _____ () C:\Windows\system32\2015-02-13-22-19-25.033-AvastVBoxSVC.exe-2084.log
  2015-02-12 09:51 - 2015-02-12 09:51 - 00000197 _____ () C:\Windows\system32\2015-02-12-08-51-37.007-AvastVBoxSVC.exe-3068.log
  2015-02-10 09:10 - 2015-02-10 09:11 - 00000197 _____ () C:\Windows\system32\2015-02-10-08-10-54.010-AvastVBoxSVC.exe-3368.log
  2015-01-29 19:51 - 2015-01-29 19:51 - 00000247 _____ () C:\Windows\system32\2015-01-29-18-51-42.090-aswFe.exe-4300.log
  2015-01-29 19:49 - 2015-01-29 19:51 - 00000247 _____ () C:\Windows\system32\2015-01-29-18-49-33.064-aswFe.exe-5256.log
  2015-01-29 19:49 - 2015-01-29 19:49 - 00000197 _____ () C:\Windows\system32\2015-01-29-18-49-32.019-AvastVBoxSVC.exe-7396.log
  2015-01-26 14:57 - 2015-01-26 14:58 - 00000197 _____ () C:\Windows\system32\2015-01-26-13-57-53.057-AvastVBoxSVC.exe-4004.log
  2015-01-26 14:47 - 2015-01-26 14:47 - 00000197 _____ () C:\Windows\system32\2015-01-26-13-47-01.022-AvastVBoxSVC.exe-3260.log
  2015-01-22 19:39 - 2015-01-22 19:39 - 00000197 _____ () C:\Windows\system32\2015-01-22-18-39-33.031-AvastVBoxSVC.exe-3104.log
  2015-01-17 21:14 - 2015-01-17 21:14 - 00000197 _____ () C:\Windows\system32\2015-01-17-20-14-02.062-AvastVBoxSVC.exe-3232.log
  2015-01-16 23:11 - 2015-01-16 23:12 - 00000197 _____ () C:\Windows\system32\2015-01-16-22-11-40.092-AvastVBoxSVC.exe-3128.log
  2015-01-16 10:03 - 2015-02-15 08:04 - 00008900 _____ () C:\Windows\PFRO.log
  2015-01-16 10:03 - 2015-01-16 10:03 - 00000197 _____ () C:\Windows\system32\2015-01-16-09-03-43.046-AvastVBoxSVC.exe-3184.log
  
  Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  Task: C:\Windows\Tasks\GlaryInitialize 4.job => d:\Program Files (x86)\Glary Utilities 4\Initialize.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  
  Hosts:
  EmptyTemp:
  Reboot:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-02-2015
Ran by awas_000 at 2015-02-15 09:34:27 Run:1
Running from C:\Users\awas_000\Desktop
Loaded Profiles: awas_000 (Available profiles: awas_000)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe [1960336 2015-01-15] ()
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-06-16] ()
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30872168 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Akamai NetSession Interface] => C:\Users\awas_000\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [833024 2014-06-16] (ZONER software)
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\MountPoints2: {790fc9b5-4488-11e3-8255-0022157705ed} - "F:\.autorun\autorun.exe"
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\...\MountPoints2: {ff1fb538-f5a4-11e3-829d-806e6f6e6963} - "I:\setup.exe"
Startup: C:\Users\awas_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\awas_000\AppData\Local\MEGAsync\ShellExtX32.dll ()

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
SearchScopes: HKLM-x32 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 - No File
Winsock: Missing Catalog9 entry, broken internet access. <===== ATTENTION.

CMD: netsh winsock reset

S2 GhFlt; \??\C:\Windows\system32\drivers\ghflt.sys [X]
S3 HWiNFO32; \??\C:\Users\awas_000\AppData\Local\Temp\HWiNFO64A.SYS [X]

2015-02-15 09:07 - 2015-02-14 20:55 - 00112640 _____ (forum.viry.cz) C:\Users\awas_000\Desktop\FRSTLauncher.exe
015-02-15 08:06 - 2015-02-15 08:06 - 00001557 _____ () C:\Users\awas_000\Desktop\AdwCleaner[S4].txt
2015-02-15 08:06 - 2015-02-15 08:06 - 00000197 _____ () C:\Windows\system32\2015-02-15-07-06-48.026-AvastVBoxSVC.exe-2944.log
2015-02-15 07:58 - 2015-02-14 22:01 - 02112512 _____ () C:\Users\awas_000\Desktop\adwcleaner_4.110.exe
2015-02-14 22:23 - 2015-02-14 22:23 - 00024239 _____ () C:\Users\awas_000\Desktop\zoek-results.txt
2015-02-14 22:23 - 2015-02-14 22:23 - 00000197 _____ () C:\Windows\system32\2015-02-14-21-23-40.061-AvastVBoxSVC.exe-1584.log
2015-02-14 22:20 - 2015-02-14 22:07 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-02-14 22:15 - 2015-01-25 20:38 - 03495040 _____ (Axantum Software AB) C:\Users\awas_000\Desktop\AxCrypt-1.7.3156.0-Setup.exe
2015-02-14 22:10 - 2015-02-14 22:22 - 00024239 _____ () C:\zoek-results.log
2015-02-14 22:08 - 2015-02-14 22:08 - 00000197 _____ () C:\Windows\system32\2015-02-14-21-08-06.091-AvastVBoxSVC.exe-3264.log
2015-02-14 22:07 - 2015-02-14 22:19 - 00000000 ____D () C:\zoek_backup
2015-02-14 22:07 - 2015-02-14 22:05 - 00005155 _____ () C:\Users\awas_000\Desktop\AdwCleaner[S3].txt
2015-02-14 22:07 - 2015-02-14 22:01 - 01304576 _____ () C:\Users\awas_000\Desktop\zoek.exe
2015-02-14 22:04 - 2015-02-14 22:04 - 00000197 _____ () C:\Windows\system32\2015-02-14-21-04-19.022-AvastVBoxSVC.exe-2960.log
2015-02-14 21:09 - 2015-02-15 09:09 - 00021483 _____ () C:\Users\awas_000\Desktop\FRST.txt
2015-02-14 21:06 - 2015-02-14 21:06 - 00000000 ____D () C:\Users\awas_000\Desktop\Tor Browser
2015-02-14 20:57 - 2015-02-14 20:57 - 00000197 _____ () C:\Windows\system32\2015-02-14-19-57-15.079-AvastVBoxSVC.exe-2888.log
2015-02-14 20:31 - 2015-02-14 20:31 - 00000197 _____ () C:\Windows\system32\2015-02-14-19-31-56.016-AvastVBoxSVC.exe-2688.log
2015-02-14 20:15 - 2015-02-14 20:15 - 00000197 _____ () C:\Windows\system32\2015-02-14-19-15-49.059-AvastVBoxSVC.exe-2932.log
2015-02-14 19:33 - 2015-02-14 19:33 - 00000197 _____ () C:\Windows\system32\2015-02-14-18-33-25.046-AvastVBoxSVC.exe-3112.log
2015-02-14 19:06 - 2015-02-14 19:06 - 00000197 _____ () C:\Windows\system32\2015-02-14-18-06-00.063-AvastVBoxSVC.exe-3096.log
2015-02-14 18:51 - 2015-02-14 18:51 - 00000197 _____ () C:\Windows\system32\2015-02-14-17-51-26.028-AvastVBoxSVC.exe-5552.log
2015-02-14 18:26 - 2015-02-14 18:26 - 00000197 _____ () C:\Windows\system32\2015-02-14-17-26-38.075-AvastVBoxSVC.exe-1952.log
2015-02-13 23:19 - 2015-02-13 23:19 - 00000197 _____ () C:\Windows\system32\2015-02-13-22-19-25.033-AvastVBoxSVC.exe-2084.log
2015-02-12 09:51 - 2015-02-12 09:51 - 00000197 _____ () C:\Windows\system32\2015-02-12-08-51-37.007-AvastVBoxSVC.exe-3068.log
2015-02-10 09:10 - 2015-02-10 09:11 - 00000197 _____ () C:\Windows\system32\2015-02-10-08-10-54.010-AvastVBoxSVC.exe-3368.log
2015-01-29 19:51 - 2015-01-29 19:51 - 00000247 _____ () C:\Windows\system32\2015-01-29-18-51-42.090-aswFe.exe-4300.log
2015-01-29 19:49 - 2015-01-29 19:51 - 00000247 _____ () C:\Windows\system32\2015-01-29-18-49-33.064-aswFe.exe-5256.log
2015-01-29 19:49 - 2015-01-29 19:49 - 00000197 _____ () C:\Windows\system32\2015-01-29-18-49-32.019-AvastVBoxSVC.exe-7396.log
2015-01-26 14:57 - 2015-01-26 14:58 - 00000197 _____ () C:\Windows\system32\2015-01-26-13-57-53.057-AvastVBoxSVC.exe-4004.log
2015-01-26 14:47 - 2015-01-26 14:47 - 00000197 _____ () C:\Windows\system32\2015-01-26-13-47-01.022-AvastVBoxSVC.exe-3260.log
2015-01-22 19:39 - 2015-01-22 19:39 - 00000197 _____ () C:\Windows\system32\2015-01-22-18-39-33.031-AvastVBoxSVC.exe-3104.log
2015-01-17 21:14 - 2015-01-17 21:14 - 00000197 _____ () C:\Windows\system32\2015-01-17-20-14-02.062-AvastVBoxSVC.exe-3232.log
2015-01-16 23:11 - 2015-01-16 23:12 - 00000197 _____ () C:\Windows\system32\2015-01-16-22-11-40.092-AvastVBoxSVC.exe-3128.log
2015-01-16 10:03 - 2015-02-15 08:04 - 00008900 _____ () C:\Windows\PFRO.log
2015-01-16 10:03 - 2015-01-16 10:03 - 00000197 _____ () C:\Windows\system32\2015-01-16-09-03-43.046-AvastVBoxSVC.exe-3184.log

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GlaryInitialize 4.job => d:\Program Files (x86)\Glary Utilities 4\Initialize.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\DelaypluginInstall => value deleted successfully.
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Service 16 => value deleted successfully.
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface => value deleted successfully.
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Autoupdate => value deleted successfully.
"HKU\S-1-5-21-3388811255-3395146725-224997178-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{790fc9b5-4488-11e3-8255-0022157705ed}" => Key deleted successfully.
HKCR\CLSID\{790fc9b5-4488-11e3-8255-0022157705ed} => Key not found.
"HKU\S-1-5-21-3388811255-3395146725-224997178-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ff1fb538-f5a4-11e3-829d-806e6f6e6963}" => Key deleted successfully.
HKCR\CLSID\{ff1fb538-f5a4-11e3-829d-806e6f6e6963} => Key not found.
C:\Users\awas_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk => Moved successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtPending" => Key deleted successfully.
"HKCR\CLSID\{056D528D-CE28-4194-9BA3-BA2E9197FF8C}" => Key deleted successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSynced" => Key deleted successfully.
"HKCR\CLSID\{05B38830-F4E9-4329-978B-1DD28605D202}" => Key deleted successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSyncing" => Key deleted successfully.
"HKCR\CLSID\{0596C850-7BDD-4C9D-AFDF-873BE6890637}" => Key deleted successfully.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtPending" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{056D528D-CE28-4194-9BA3-BA2E9197FF8C}" => Key deleted successfully.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSynced" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{05B38830-F4E9-4329-978B-1DD28605D202}" => Key deleted successfully.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSyncing" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{0596C850-7BDD-4C9D-AFDF-873BE6890637}" => Key deleted successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKU\S-1-5-21-3388811255-3395146725-224997178-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value deleted successfully.
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => Key not found.
"HKCR\PROTOCOLS\Handler\WSWSVCUchrome" => Key deleted successfully.
Winsock: Missing Catalog9 entry, broken internet access. <===== ATTENTION. => Winsock will be renumbered.

========= netsh winsock reset =========


Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.


========= End of CMD: =========

GhFlt => Service deleted successfully.
HWiNFO32 => Service deleted successfully.
C:\Users\awas_000\Desktop\FRSTLauncher.exe => Moved successfully.
015-02-15 08:06 - 2015-02-15 08:06 - 00001557 _____ () C:\Users\awas_000\Desktop\AdwCleaner[S4].txt => Error: No automatic fix found for this entry.
Could not move "C:\Windows\system32\2015-02-15-07-06-48.026-AvastVBoxSVC.exe-2944.log" => Scheduled to move on reboot.
C:\Users\awas_000\Desktop\adwcleaner_4.110.exe => Moved successfully.
C:\Users\awas_000\Desktop\zoek-results.txt => Moved successfully.
C:\Windows\system32\2015-02-14-21-23-40.061-AvastVBoxSVC.exe-1584.log => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\Users\awas_000\Desktop\AxCrypt-1.7.3156.0-Setup.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\Windows\system32\2015-02-14-21-08-06.091-AvastVBoxSVC.exe-3264.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\awas_000\Desktop\AdwCleaner[S3].txt => Moved successfully.
C:\Users\awas_000\Desktop\zoek.exe => Moved successfully.
C:\Windows\system32\2015-02-14-21-04-19.022-AvastVBoxSVC.exe-2960.log => Moved successfully.
C:\Users\awas_000\Desktop\FRST.txt => Moved successfully.
C:\Users\awas_000\Desktop\Tor Browser => Moved successfully.
C:\Windows\system32\2015-02-14-19-57-15.079-AvastVBoxSVC.exe-2888.log => Moved successfully.
C:\Windows\system32\2015-02-14-19-31-56.016-AvastVBoxSVC.exe-2688.log => Moved successfully.
C:\Windows\system32\2015-02-14-19-15-49.059-AvastVBoxSVC.exe-2932.log => Moved successfully.
C:\Windows\system32\2015-02-14-18-33-25.046-AvastVBoxSVC.exe-3112.log => Moved successfully.
C:\Windows\system32\2015-02-14-18-06-00.063-AvastVBoxSVC.exe-3096.log => Moved successfully.
C:\Windows\system32\2015-02-14-17-51-26.028-AvastVBoxSVC.exe-5552.log => Moved successfully.
C:\Windows\system32\2015-02-14-17-26-38.075-AvastVBoxSVC.exe-1952.log => Moved successfully.
C:\Windows\system32\2015-02-13-22-19-25.033-AvastVBoxSVC.exe-2084.log => Moved successfully.
C:\Windows\system32\2015-02-12-08-51-37.007-AvastVBoxSVC.exe-3068.log => Moved successfully.
C:\Windows\system32\2015-02-10-08-10-54.010-AvastVBoxSVC.exe-3368.log => Moved successfully.
C:\Windows\system32\2015-01-29-18-51-42.090-aswFe.exe-4300.log => Moved successfully.
C:\Windows\system32\2015-01-29-18-49-33.064-aswFe.exe-5256.log => Moved successfully.
C:\Windows\system32\2015-01-29-18-49-32.019-AvastVBoxSVC.exe-7396.log => Moved successfully.
C:\Windows\system32\2015-01-26-13-57-53.057-AvastVBoxSVC.exe-4004.log => Moved successfully.
C:\Windows\system32\2015-01-26-13-47-01.022-AvastVBoxSVC.exe-3260.log => Moved successfully.
C:\Windows\system32\2015-01-22-18-39-33.031-AvastVBoxSVC.exe-3104.log => Moved successfully.
C:\Windows\system32\2015-01-17-20-14-02.062-AvastVBoxSVC.exe-3232.log => Moved successfully.
C:\Windows\system32\2015-01-16-22-11-40.092-AvastVBoxSVC.exe-3128.log => Moved successfully.
C:\Windows\PFRO.log => Moved successfully.
C:\Windows\system32\2015-01-16-09-03-43.046-AvastVBoxSVC.exe-3184.log => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\GlaryInitialize 4.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 6.5 GB temporary data.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-02-15 09:36:08)<=

C:\Windows\system32\2015-02-15-07-06-48.026-AvastVBoxSVC.exe-2944.log => Is moved successfully.

==== End of Fixlog 09:36:08 ====

Jak se chova PC???

Parádní práce vše běhá jak má. Děkuji mnohokráte

----jinak frst nefunguje, pokud je "plocha" přesunutá na jiný disk, než C, pro správnou funkčnost ji bylo nutno vrátit, to kdyby s tím měl někdo problém...

Ještě jednou velké díky

Diky za info, zkusim se na to podivat

Tak jeste uklidime

DelFix https://toolslib.net/downloads/finish/2/

• Stahnete a spustte
• Ponechte zatrzitkou pouze u volby Remote disinfection tools
• Kliknete na Run

Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse