VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

zpomalený počítač (winnet32b.exe)

https://forum.viry.cz:443/viewtopic.php?t=145043

Stránka 1 z 1

zpomalený počítač (winnet32b.exe)

Napsal: 30 čer 2015 22:20
od PavlaF
Dobrý den,
prosím o pomoc s vyčištěním počítače od programu winnet32b.exe, který využívá procesor více jak 40% a zpomaluje počítač.
Předem mnohokrát děkuji
Pavla F.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-06-2015 01
Ran by Masinka (administrator) on TRIUMPH on 30-06-2015 23:10:24
Running from C:\Users\Masinka\Desktop
Loaded Profiles: Masinka (Available Profiles: Masinka & Kuba)
Platform: Windows 8.1 (X64) OS Language: Angličtina (Spojené státy)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft) C:\Program Files (x86)\Lenovo\Lenovo Dashboard\DdMgr.exe
(Microsoft) C:\Program Files (x86)\Lenovo\EducationPortal\Services\IdeaTouch.LocalDataServer.Education.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Windows\jmesoft\Service.exe
(LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Barracuda Networks, Inc.) C:\Users\Masinka\AppData\Roaming\Copy\CopyAgent.exe
() C:\ProgramData\Boxtools\Toolbox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Lenovo) C:\Windows\jmesoft\hotkey.exe
() C:\Windows\jmesoft\JME_LOAD.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
() C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost32.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
() C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost64.exe
(Dropbox, Inc.) C:\Users\Masinka\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Mega Limited) C:\Users\Masinka\AppData\Local\MEGAsync\MEGAsync.exe
() C:\Users\Masinka\AppData\Roaming\Microsoft\Networking\inet32upd.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
() C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\Masinka\AppData\Roaming\Microsoft\Networking\winnet32b.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(EJIE Technology) C:\Program Files (x86)\Clover\clover.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20905_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\backgroundTaskHost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1360600 2013-10-29] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [jmekey] => C:\windows\jmesoft\hotkey.exe [118784 2013-07-24] (Lenovo)
HKLM-x32\...\Run: [jmesoft] => C:\Windows\jmesoft\ServiceLoader.exe [28672 2011-08-17] ()
HKLM-x32\...\Run: [LVT] => C:\Program Files\Lenovo\LVT\LJYZ.exe [886112 2011-11-24] (Lenovo)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-05] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [95192 2013-03-09] (CyberLink Corp.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [mncvlriaSrv] => C:\windows\system32\mncvlria.vbe
HKLM-x32\...\Run: [MSStp] => C:\windows\inf\msstp.vbe
HKLM-x32\...\Run: [mncqcbqSrv] => C:\windows\system32\mncqcbq.vbe
HKLM-x32\...\Run: [NtVdmSrv] => C:\windows\inf\ntvdm.vbe
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [85600 2013-12-13] (Nullsoft, Inc.)
HKLM-x32\...\Run: [uni mouse driver] => "C:\Program Files\Mous driver\mouse_driver.exe" /hide
HKLM-x32\...\Run: [uni mouse driver tilt] => "C:\Program Files\Mous driver\wh_exec.exe"
HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [493960 2014-12-05] (Autodesk Inc.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] (Qualcomm®Atheros®)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-749186415-578826221-4059475977-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
HKU\S-1-5-21-749186415-578826221-4059475977-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2874048 2015-02-19] (Valve Corporation)
HKU\S-1-5-21-749186415-578826221-4059475977-1001\...\Run: [GoogleChromeAutoLaunch_AB5A53C011F8096057C86508D418692D] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-06-20] (Google Inc.)
HKU\S-1-5-21-749186415-578826221-4059475977-1001\...\Run: [Boxoft Tools] => C:\ProgramData\Boxtools\Boxofttoolbox.exe [514048 2010-12-15] ()
HKU\S-1-5-21-749186415-578826221-4059475977-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [21969480 2015-05-19] (Google)
HKU\S-1-5-21-749186415-578826221-4059475977-1001\...\Run: [Copy] => C:\Users\Masinka\AppData\Roaming\Copy\CopyAgent.exe [15414816 2015-04-07] (Barracuda Networks, Inc.)
HKU\S-1-5-21-749186415-578826221-4059475977-1001\...\Run: [Dropbox Update] => C:\Users\Masinka\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-20] (Dropbox, Inc.)
HKU\S-1-5-18\...\Run: [Copy] => C:\Users\Masinka\AppData\Roaming\Copy\CopyAgent.exe [15414816 2015-04-07] (Barracuda Networks, Inc.)
Startup: C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost32.exe [2015-06-21] ()
Startup: C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost64.exe [2015-06-21] ()
Startup: C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-05-15]
ShortcutTarget: Dropbox.lnk -> C:\Users\Masinka\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2015-02-21]
ShortcutTarget: MEGAsync.lnk -> C:\Users\Masinka\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Masinka\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Masinka\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Masinka\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Masinka\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Masinka\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Masinka\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Masinka\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Masinka\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Masinka\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Masinka\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Masinka\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [1aCopyShExtError] -> {83BEA36E-7680-4598-A4DF-994426F6E78D} => C:\Users\Masinka\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-04-13] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [2aCopyShExtSynced] -> {845B7388-6F85-4F32-9FD5-F02DC7882B89} => C:\Users\Masinka\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-04-13] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [3aCopyShExtSyncing] -> {F6378A7A-F753-449B-AE1B-997A96132E61} => C:\Users\Masinka\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-04-13] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [4aCopyShExtSyncingProg1] -> {3A511828-777D-46F8-82F4-5B530C1B3D9E} => C:\Users\Masinka\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-04-13] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [5aCopyShExtSyncingProg2] -> {C8C88204-5B14-40EC-BA72-8AEBC762047E} => C:\Users\Masinka\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-04-13] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [6aCopyShExtSyncingProg3] -> {ACFF45C3-3EEB-4351-86C2-6696BA264239} => C:\Users\Masinka\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-04-13] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [7aCopyShExtSyncingProg4] -> {29AF997F-488B-46F0-AE78-7146F1B89CC3} => C:\Users\Masinka\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-04-13] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [8aCopyShExtSyncingProg5] -> {03F9AD29-1C78-4B66-8890-B177B5430C53} => C:\Users\Masinka\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-04-13] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [Správa překryvné ikony digitálních podpisů AutoCADu ] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\windows\system32\AcSignIcon.dll [2009-02-09] (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Masinka\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Masinka\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Masinka\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-749186415-578826221-4059475977-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-749186415-578826221-4059475977-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com
HKU\S-1-5-21-749186415-578826221-4059475977-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-749186415-578826221-4059475977-1001 -> DefaultScope {4601FB85-7A0D-451C-BE6A-E3E428343774} URL =
SearchScopes: HKU\S-1-5-21-749186415-578826221-4059475977-1001 -> {4601FB85-7A0D-451C-BE6A-E3E428343774} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-26] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-05-13] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-26] (Oracle Corporation)
BHO: ExplorerWatcher Class -> {F8A6CAA2-533D-4AED-9E05-8EB19A4021AB} -> C:\Program Files (x86)\Clover\TabHelper64.dll [2014-01-23] (EJIE Technology)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{2A2FC20A-CD96-4660-B5CC-5D327CACE529}: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-26] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-29] (Adobe Systems)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-04] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-04] (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll [2013-12-13] (Nitro PDF)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll [2012-08-06] (Software602 a.s.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-29] (Adobe Systems)

Chrome:
=======
CHR Profile: C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Translate) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2015-02-16]
CHR Extension: (Google Slides) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-08]
CHR Extension: (Google Docs) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-08]
CHR Extension: (Google Drive) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-08]
CHR Extension: (MEGA) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2015-02-21]
CHR Extension: (YouTube) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-08]
CHR Extension: (Google Search) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-08]
CHR Extension: (Google Calendar) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2015-04-09]
CHR Extension: (Google Sheets) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-08]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2015-05-20]
CHR Extension: (AdBlock) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-21]
CHR Extension: (Pin It Button) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2015-02-16]
CHR Extension: (feedly) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\hipbfijinpcgfogaopmgehiegacbhmob [2015-02-16]
CHR Extension: (Dropbox) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2015-04-18]
CHR Extension: (Calculator XL) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbnlppngjpolaogkmcihddbacilmamfh [2015-02-16]
CHR Extension: (Google Forms) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhknlonaankphkkbnmjdlpehkinifeeg [2015-04-18]
CHR Extension: (Google Play) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2015-02-16]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-04-15]
CHR Extension: (Stormfall) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhlocdljofhnkgibklohoeddfkhhachb [2015-02-16]
CHR Extension: (Pocket) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjcnijlhddpbdemagnpefmlkjdagkogk [2015-02-16]
CHR Extension: (Merge PDF - Smallpdf.com) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbhibnjbbdkflfklbdpgbifkhcielgcm [2015-06-29]
CHR Extension: (feedly) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndhinffkekpekljifjkkkkkhopnjodja [2015-02-16]
CHR Extension: (Do It (Tomorrow)) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfagjoblnoeagfhfhohcdklnddjaiglo [2015-04-04]
CHR Extension: (Google Wallet) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-08]
CHR Extension: (ImTranslator: Google Translate) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\noaijdpnepcgjemiklgfkcfbkokogabh [2015-02-16]
CHR Extension: (Gmail) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-08]
CHR Extension: (RSS Feed Reader) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnjaodmkngahhkoihejjehlcdlnohgmp [2015-02-16]
CHR HKU\S-1-5-21-749186415-578826221-4059475977-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
S2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\44.0.2403.25\remoting_host.exe [69448 2015-05-28] (Google Inc.)
R2 Dashboard Service; C:\Program Files (x86)\Lenovo\Lenovo Dashboard\DdMgr.exe [25184 2013-08-09] (Microsoft) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 IdeaTouch.LocalDataServer.Education; C:\Program Files (x86)\Lenovo\EducationPortal\Services\IdeaTouch.LocalDataServer.Education.exe [7680 2012-05-17] (Microsoft) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-12] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-12] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-04] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
R2 JME Keyboard; C:\Windows\jmesoft\Service.exe [32768 2011-08-17] () [File not signed]
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584632 2015-03-06] (LENOVO INCORPORATED.)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [1662424 2014-02-20] ()
R2 NitroDriverReadSpool9; C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe [230920 2013-12-13] (Nitro PDF Software)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2013-05-14] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-18] (TeamViewer GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-07] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-16] (Qualcomm Atheros Communications, Inc.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [290008 2013-07-05] (Realtek Semiconductor Corp.)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R3 whfltr2k; C:\Windows\System32\drivers\whfltr2k.sys [10368 2009-09-16] ()
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-30 23:10 - 2015-06-30 23:10 - 00029995 _____ C:\Users\Masinka\Desktop\FRST.txt
2015-06-30 23:10 - 2015-06-30 23:10 - 00000000 ____D C:\FRST
2015-06-30 23:08 - 2015-06-30 23:08 - 02112512 _____ (Farbar) C:\Users\Masinka\Desktop\FRST64.exe
2015-06-20 10:45 - 2015-06-20 10:45 - 00000000 ____D C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-06-20 10:44 - 2015-06-30 22:49 - 00000942 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-749186415-578826221-4059475977-1001UA.job
2015-06-20 10:44 - 2015-06-29 10:49 - 00000890 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-749186415-578826221-4059475977-1001Core.job
2015-06-20 10:44 - 2015-06-20 10:44 - 00003892 _____ C:\windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-749186415-578826221-4059475977-1001UA
2015-06-20 10:44 - 2015-06-20 10:44 - 00003512 _____ C:\windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-749186415-578826221-4059475977-1001Core
2015-06-20 10:44 - 2015-06-20 10:44 - 00000000 ____D C:\Users\Masinka\AppData\Local\Dropbox
2015-06-20 10:44 - 2015-06-20 10:44 - 00000000 ____D C:\ProgramData\Dropbox
2015-06-13 22:41 - 2015-06-13 22:41 - 00000000 ____D C:\Users\Masinka\AppData\Roaming\Mobile Atlas Creator
2015-06-13 19:34 - 2015-06-13 19:34 - 00000000 ____D C:\Users\Masinka\AppData\Local\GHISLER
2015-06-13 19:33 - 2015-06-13 19:33 - 00000000 ____D C:\Users\Masinka\AppData\Roaming\GHISLER
2015-06-13 19:33 - 2015-06-13 19:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander
2015-06-13 19:33 - 2015-06-13 19:33 - 00000000 ____D C:\Program Files\totalcmd
2015-06-13 14:13 - 2015-06-13 14:13 - 00001272 _____ C:\Users\Masinka\Desktop\jdiskreport-1.4.0.jar – zástupce.lnk
2015-06-13 06:44 - 2015-06-13 06:44 - 00002184 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2015-06-13 00:09 - 2015-06-13 00:09 - 00001076 _____ C:\Users\Masinka\Desktop\LLFTOOL.EXE – zástupce.lnk
2015-06-10 07:45 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-06-10 07:45 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-06-10 07:45 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-06-10 07:45 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-06-10 07:45 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-06-10 07:45 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-06-10 07:45 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-06-10 07:44 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-06-10 07:44 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-06-10 07:44 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-06-10 07:44 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-06-10 07:44 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-06-10 07:44 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-06-10 07:44 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-06-10 07:44 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-06-10 07:44 - 2015-05-23 04:47 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2015-06-10 07:44 - 2015-05-23 04:43 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
2015-06-10 07:44 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-06-10 07:44 - 2015-05-23 04:38 - 00327168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-06-10 07:44 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-06-10 07:44 - 2015-05-23 04:28 - 01042944 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll
2015-06-10 07:44 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-06-10 07:44 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-06-10 07:44 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-06-10 07:44 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-06-10 07:44 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-06-10 07:44 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-06-10 07:44 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-06-10 07:44 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-06-10 07:44 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-06-10 07:44 - 2015-05-22 20:23 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2015-06-10 07:44 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-06-10 07:44 - 2015-05-22 20:15 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
2015-06-10 07:44 - 2015-05-22 20:09 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2015-06-10 07:44 - 2015-05-22 20:08 - 00374272 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-06-10 07:44 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-06-10 07:44 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-06-10 07:44 - 2015-05-22 19:49 - 02865152 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll
2015-06-10 07:44 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-06-10 07:44 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-06-10 07:43 - 2015-05-22 15:08 - 00700416 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-06-10 07:43 - 2015-05-21 15:08 - 01119232 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-06-10 07:43 - 2015-05-21 15:08 - 01020928 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-06-10 07:43 - 2015-05-21 15:08 - 00756736 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-06-10 07:43 - 2015-05-21 15:08 - 00422912 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-06-10 07:43 - 2015-05-21 15:08 - 00193536 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2015-06-10 07:43 - 2015-05-21 15:08 - 00045568 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-06-10 07:43 - 2015-04-17 00:07 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2015-06-10 07:43 - 2015-04-09 00:07 - 00410336 _____ C:\windows\system32\ApnDatabase.xml
2015-06-10 07:40 - 2015-03-20 05:49 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\compstui.dll
2015-06-10 07:40 - 2015-03-20 05:08 - 00477184 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll
2015-06-10 07:40 - 2015-03-20 04:37 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll
2015-06-10 07:40 - 2015-03-20 04:07 - 01091072 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2015-06-10 07:40 - 2015-03-02 03:43 - 00222208 _____ (Microsoft Corporation) C:\windows\system32\rastapi.dll
2015-06-10 07:40 - 2015-03-02 03:21 - 00207872 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastapi.dll
2015-06-10 07:39 - 2015-05-25 15:23 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\UtcResources.dll
2015-06-10 07:39 - 2015-05-25 15:07 - 01430528 _____ (Microsoft Corporation) C:\windows\system32\diagtrack.dll
2015-06-10 07:39 - 2015-04-09 00:41 - 00158720 _____ (Microsoft Corporation) C:\windows\SysWOW64\rgb9rast.dll
2015-06-10 07:38 - 2015-04-02 00:42 - 03097600 _____ (Microsoft Corporation) C:\windows\system32\msftedit.dll
2015-06-10 07:38 - 2015-04-02 00:30 - 02483712 _____ (Microsoft Corporation) C:\windows\SysWOW64\msftedit.dll
2015-06-10 07:35 - 2015-04-14 00:37 - 00275968 _____ (Microsoft Corporation) C:\windows\system32\authz.dll
2015-06-10 07:35 - 2015-04-14 00:34 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\authz.dll
2015-06-10 07:35 - 2015-04-10 02:40 - 01249280 _____ (Microsoft Corporation) C:\windows\system32\UIAutomationCore.dll
2015-06-10 07:35 - 2015-04-10 02:17 - 01018880 _____ (Microsoft Corporation) C:\windows\SysWOW64\UIAutomationCore.dll
2015-06-10 07:33 - 2015-04-25 04:34 - 00653824 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2015-06-10 07:33 - 2015-04-25 04:33 - 00549888 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2015-06-10 07:32 - 2015-04-16 08:17 - 00325464 ____C (Microsoft Corporation) C:\windows\system32\Drivers\USBXHCI.SYS
2015-06-10 07:32 - 2015-04-01 06:21 - 00337408 _____ (Microsoft Corporation) C:\windows\system32\SearchProtocolHost.exe
2015-06-10 07:32 - 2015-04-01 06:18 - 00468480 _____ (Microsoft Corporation) C:\windows\system32\mssph.dll
2015-06-10 07:32 - 2015-04-01 06:17 - 00248832 _____ (Microsoft Corporation) C:\windows\system32\mssphtb.dll
2015-06-10 07:32 - 2015-04-01 06:08 - 00774144 _____ (Microsoft Corporation) C:\windows\system32\mssvp.dll
2015-06-10 07:32 - 2015-04-01 05:46 - 03633664 _____ (Microsoft Corporation) C:\windows\system32\tquery.dll
2015-06-10 07:32 - 2015-04-01 05:17 - 02551808 _____ (Microsoft Corporation) C:\windows\system32\mssrch.dll
2015-06-10 07:32 - 2015-04-01 05:17 - 00903168 _____ (Microsoft Corporation) C:\windows\system32\SearchIndexer.exe
2015-06-10 07:32 - 2015-04-01 04:53 - 00391680 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssph.dll
2015-06-10 07:32 - 2015-04-01 04:53 - 00272896 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchProtocolHost.exe
2015-06-10 07:32 - 2015-04-01 04:45 - 02749952 _____ (Microsoft Corporation) C:\windows\SysWOW64\tquery.dll
2015-06-10 07:32 - 2015-04-01 04:45 - 00699392 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssvp.dll
2015-06-10 07:32 - 2015-04-01 04:14 - 01920000 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssrch.dll
2015-06-10 07:32 - 2015-04-01 04:12 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchIndexer.exe
2015-06-10 07:26 - 2015-05-21 18:47 - 04177920 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-06-02 19:49 - 2015-06-02 19:49 - 00000000 ____D C:\Users\Masinka\AppData\Local\GWX

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-30 23:06 - 2015-04-13 10:48 - 00000000 ____D C:\Users\Masinka\AppData\Roaming\Copy
2015-06-30 23:02 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\sru
2015-06-30 22:46 - 2014-06-07 00:23 - 01829525 _____ C:\windows\WindowsUpdate.log
2015-06-30 22:42 - 2014-10-08 19:15 - 00000976 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-30 20:21 - 2014-10-08 19:13 - 00003930 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{A0C6DD03-09C0-41BA-A571-54E339AEA10F}
2015-06-29 09:42 - 2014-10-08 19:15 - 00000972 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-28 08:07 - 2015-04-05 22:01 - 00000000 ____D C:\ProgramData\Boxtools
2015-06-28 07:55 - 2014-10-08 19:15 - 00003596 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-749186415-578826221-4059475977-1001
2015-06-28 07:47 - 2013-08-22 17:36 - 00000000 ____D C:\windows\AppReadiness
2015-06-28 07:38 - 2015-04-05 18:43 - 00000000 ____D C:\Users\Masinka\AppData\Roaming\Dropbox
2015-06-28 07:37 - 2015-05-20 07:40 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-06-28 07:37 - 2014-11-23 17:55 - 00000492 _____ C:\windows\Tasks\SDMsgUpdate (TE).job
2015-06-28 07:19 - 2013-08-22 16:46 - 00062252 _____ C:\windows\setupact.log
2015-06-28 07:19 - 2013-08-22 16:45 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-06-27 09:39 - 2014-10-08 19:09 - 00000000 ____D C:\Users\Masinka
2015-06-26 20:31 - 2015-02-25 19:56 - 00000000 ____D C:\Users\Masinka\AppData\Local\CrashDumps
2015-06-26 05:44 - 2015-02-21 00:10 - 00000000 ____D C:\Users\Masinka\AppData\Local\MEGAsync
2015-06-25 19:42 - 2014-10-08 19:15 - 00000000 ____D C:\Program Files (x86)\Google
2015-06-25 19:31 - 2015-02-24 22:31 - 00003828 _____ C:\windows\System32\Tasks\Opera scheduled Autoupdate 1424809836
2015-06-25 19:31 - 2015-02-24 22:30 - 00001071 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-06-25 19:31 - 2015-02-24 22:28 - 00000000 ____D C:\Program Files (x86)\Opera
2015-06-24 07:15 - 2015-05-20 07:40 - 00000991 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-06-24 07:15 - 2015-05-20 07:40 - 00000979 _____ C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-06-24 07:04 - 2013-08-22 17:20 - 00000000 ____D C:\windows\CbsTemp
2015-06-23 14:14 - 2014-12-24 16:36 - 00003886 _____ C:\windows\System32\Tasks\Adobe Acrobat Update Task
2015-06-22 19:50 - 2014-06-07 00:45 - 00739704 _____ C:\windows\system32\perfh005.dat
2015-06-22 19:50 - 2014-06-07 00:45 - 00151944 _____ C:\windows\system32\perfc005.dat
2015-06-22 19:50 - 2013-08-31 17:40 - 01749406 _____ C:\windows\system32\PerfStringBackup.INI
2015-06-22 07:00 - 2014-10-08 19:20 - 00000000 ____D C:\Users\Masinka\AppData\Roaming\Nitro PDF
2015-06-20 05:02 - 2015-03-21 21:29 - 00792568 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-06-20 05:02 - 2015-03-21 21:29 - 00178168 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-14 20:46 - 2013-08-22 15:25 - 00524288 ___SH C:\windows\system32\config\BBI
2015-06-14 20:04 - 2014-11-09 22:09 - 00000000 ____D C:\Users\Masinka\AppData\Local\Microsoft Help
2015-06-14 09:16 - 2015-02-24 08:31 - 00000000 ___RD C:\Users\Masinka\Documents\MEGAsync
2015-06-13 21:23 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\NDF
2015-06-12 08:08 - 2013-08-22 17:36 - 00000000 ____D C:\windows\rescache
2015-06-12 07:03 - 2013-08-22 16:44 - 00598120 _____ C:\windows\system32\FNTCACHE.DAT
2015-06-12 00:57 - 2015-04-15 07:51 - 00000000 ____D C:\windows\system32\appraiser
2015-06-12 00:57 - 2015-03-14 02:55 - 00000000 ___SD C:\windows\system32\CompatTel
2015-06-12 00:57 - 2013-08-22 17:36 - 00000000 ___RD C:\windows\ToastData
2015-06-12 00:57 - 2013-08-22 17:36 - 00000000 ____D C:\windows\PolicyDefinitions
2015-06-12 00:56 - 2014-11-23 18:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-06-12 00:56 - 2014-11-09 22:09 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-11 03:02 - 2014-10-10 16:30 - 00000000 ____D C:\windows\system32\MRT
2015-06-11 02:49 - 2014-10-10 16:30 - 140135120 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-06-11 02:46 - 2013-08-22 15:25 - 00000199 _____ C:\windows\win.ini
2015-06-05 06:45 - 2015-04-13 10:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-06-01 07:35 - 2015-05-20 07:40 - 00000000 ____D C:\Users\Masinka\AppData\Roaming\TeamViewer

==================== Files in the root of some directories =======

2015-04-05 22:01 - 2015-04-05 22:01 - 0000040 _____ () C:\Users\Masinka\AppData\Roaming\cdr.ini
2015-03-12 21:17 - 2015-03-12 21:18 - 184702896 _____ () C:\Users\Masinka\AppData\Local\ACCCx2_9_1_474.zip.aamdownload
2015-03-12 21:17 - 2015-03-12 21:18 - 0002216 _____ () C:\Users\Masinka\AppData\Local\ACCCx2_9_1_474.zip.aamdownload.aamd
2015-05-23 12:06 - 2015-05-23 12:06 - 0000001 _____ () C:\Users\Masinka\AppData\Local\llftool.4.40.agreement
2015-02-11 22:03 - 2015-02-11 22:03 - 0001562 _____ () C:\Users\Masinka\AppData\Local\recently-used.xbel
2014-10-08 19:10 - 2014-10-08 19:10 - 0000193 _____ () C:\Users\Masinka\AppData\Local\RegisteredPackageInformation.xml
2015-02-22 01:37 - 2015-02-22 01:37 - 0000017 _____ () C:\Users\Masinka\AppData\Local\resmon.resmoncfg
2014-06-06 23:58 - 2014-06-06 23:58 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Masinka\AppData\Local\Temp\130692831991012083.exe
C:\Users\Masinka\AppData\Local\Temp\13069283211576844286.exe
C:\Users\Masinka\AppData\Local\Temp\65424ea5-b21f-4d4a-ba25-56d66a705857.exe
C:\Users\Masinka\AppData\Local\Temp\AcDeltree.exe
C:\Users\Masinka\AppData\Local\Temp\AdobeApplicationManager.exe
C:\Users\Masinka\AppData\Local\Temp\COMAP.EXE
C:\Users\Masinka\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpj2m6ux.dll
C:\Users\Masinka\AppData\Local\Temp\FNP_ACT_InstallerCA.dll
C:\Users\Masinka\AppData\Local\Temp\i4jdel0.exe
C:\Users\Masinka\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Masinka\AppData\Local\Temp\ose00000.exe
C:\Users\Masinka\AppData\Local\Temp\ose00001.exe
C:\Users\Masinka\AppData\Local\Temp\proxy_vole8564349182348441395.dll
C:\Users\Masinka\AppData\Local\Temp\SpOrder.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-30 20:29

==================== End of log ============================

Re: zpomalený počítač (winnet32b.exe)

Napsal: 30 čer 2015 22:24
od altrok
Zdravim :bye:


:arrow: Nasledujici soubory prosim zabalte do zipu/raru a uploadnete na leteckouposta.cz. Odkaz ke stazeni mi pak poslete na mail, ktery mam uvedeny v podpisu.
  • C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost32.exe
    C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost64.exe
    C:\Users\Masinka\AppData\Roaming\Microsoft\Networking\inet32upd.exe
    C:\Users\Masinka\AppData\Roaming\Microsoft\Networking\winnet32b.exe
:arrow: V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

:arrow: Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )
  • ukoncete vsechny programy
  • kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
  • kliknete na Scan, pote na Cleaning
  • po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

Re: zpomalený počítač (winnet32b.exe)

Napsal: 01 črc 2015 20:54
od PavlaF
Dobrý den :)

email s odkazem na leteckou poštu jsem odeslala emailem a zde je log z programu AdwCleaner
Můžu se zeptat, čím tohle je způsobené?

Díky


# AdwCleaner v4.207 - Log vytvořen 01/07/2015 v 21:47:51
# Aktualizováno 21/06/2015 by Xplode
# Databáze : 2015-06-29.1 [Server]
# Operační system : Windows 8.1 (x64)
# Uživatelské jméno : Masinka - TRIUMPH
# Spuštěno z : C:\Users\Masinka\Desktop\adwcleaner_4.207.exe
# Nastavení : Čištění

***** [ Služby ] *****


***** [ Soubory / Složky ] *****

Složka Smazáno : C:\Program Files (x86)\Amazon\ABB
Soubor Smazáno : C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_bluetooth-driver-installer.en.softonic.com_0.localstorage
Soubor Smazáno : C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_bluetooth-driver-installer.en.softonic.com_0.localstorage-journal
Soubor Smazáno : C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_forums.winamp.com_0.localstorage
Soubor Smazáno : C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_forums.winamp.com_0.localstorage-journal
Soubor Smazáno : C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_winampplugins.co.uk_0.localstorage
Soubor Smazáno : C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_winampplugins.co.uk_0.localstorage-journal
Soubor Smazáno : C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.viewpoints.com_0.localstorage
Soubor Smazáno : C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.viewpoints.com_0.localstorage-journal
Soubor Smazáno : C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.winamp.com_0.localstorage
Soubor Smazáno : C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.winamp.com_0.localstorage-journal

***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Klíč Smazáno : HKCU\Software\InstallCore
Klíč Smazáno : HKCU\Software\Softonic
Klíč Smazáno : HKCU\Software\AppDataLow\Software\adawarebp

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17840


-\\ Google Chrome v43.0.2357.130

[C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Homepage] :
[C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Startup_URLs] : A39C747EA568B0371583604440843EBB9741680F653CE4EBF8640CCDA271CDC2"},"software_reporter":{"prompt_reason":"B3EC4CAC6875A26D6073502E196717A662318378DA9733B77903E6BE95B56769","prompt_seed":"99CBDA13C223E9FD8DF1563B628C53F30872025D60C98D5B6E07C4C6FAF3F214","prompt_version":"20E51C8DC54CA00D85B4861AABB8A70C79BD7426141A866873B6266735992A8B"},"sync":{"remaining_rollback_tries":"F9C3CCC1ECB93E6916C19FF659CF5F595685E53B3666B108BF9753C4FF99D621"}},"super_mac":"6D7E42034C0C21883B0E2093E94339D85481048854BE23C97CB1E5AD5BA38E8F"},"session":{"restore_on_startup":1,"startup_urls":["hxxp://websearch.amaizingsearches.info/?pid=2119&r=2014/05/07&hid=1059500198840146845&lg=EN&cc=CZ&unqvl=51

-\\ Opera v30.0.1835.88


*************************

AdwCleaner[R0].txt - [11632 bytů] - [01/07/2015 21:45:15]
AdwCleaner[S0].txt - [4792 bytů] - [01/07/2015 21:47:51]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4850 bytů] ##########

Re: zpomalený počítač (winnet32b.exe)

Napsal: 01 črc 2015 21:41
od altrok
:arrow: Soubory, ktere jste nam dala k dispozici jsou BitCoin minery - virtualni mena, ktera se velice zjednodusene ziskava vypoctem algoritmu (proto zvysena zatez procesoru). BitCoiny se tzv. "těží". Vysledky vypoctu jsou odesilany utocnikovi, ktery se diky Vasemu PC financne obohacuje. V dalsim kroku je smazeme jako zbytek haveti, ktera Vam v systemu hnizdi. Za vzorky tohoto malwaru dekuji.

:arrow: Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

Re: zpomalený počítač (winnet32b.exe)

Napsal: 01 črc 2015 21:51
od PavlaF
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-06-2015 01
Ran by Masinka (administrator) on TRIUMPH on 01-07-2015 22:45:44
Running from C:\Users\Masinka\Desktop
Loaded Profiles: Masinka (Available Profiles: Masinka & Kuba)
Platform: Windows 8.1 (X64) OS Language: Angličtina (Spojené státy)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft) C:\Program Files (x86)\Lenovo\Lenovo Dashboard\DdMgr.exe
(Microsoft) C:\Program Files (x86)\Lenovo\EducationPortal\Services\IdeaTouch.LocalDataServer.Education.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Windows\jmesoft\Service.exe
(LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\ProgramData\Boxtools\Toolbox.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Barracuda Networks, Inc.) C:\Users\Masinka\AppData\Roaming\Copy\CopyAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Dropbox, Inc.) C:\Users\Masinka\AppData\Local\Dropbox\Update\DropboxUpdate.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
() C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost32.exe
(Lenovo) C:\Windows\jmesoft\hotkey.exe
() C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost64.exe
() C:\Windows\jmesoft\JME_LOAD.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
() C:\Users\Masinka\AppData\Roaming\Microsoft\Networking\inet32upd.exe
() C:\Users\Masinka\AppData\Roaming\Microsoft\Networking\winnet32b.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(EJIE Technology) C:\Program Files (x86)\Clover\clover.exe
(Oracle Corporation) C:\Program Files\Java\jre1.8.0_31\bin\javaw.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
() C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1360600 2013-10-29] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [jmekey] => C:\windows\jmesoft\hotkey.exe [118784 2013-07-24] (Lenovo)
HKLM-x32\...\Run: [jmesoft] => C:\Windows\jmesoft\ServiceLoader.exe [28672 2011-08-17] ()
HKLM-x32\...\Run: [LVT] => C:\Program Files\Lenovo\LVT\LJYZ.exe [886112 2011-11-24] (Lenovo)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-05] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [95192 2013-03-09] (CyberLink Corp.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [mncvlriaSrv] => C:\windows\system32\mncvlria.vbe
HKLM-x32\...\Run: [MSStp] => C:\windows\inf\msstp.vbe
HKLM-x32\...\Run: [mncqcbqSrv] => C:\windows\system32\mncqcbq.vbe
HKLM-x32\...\Run: [NtVdmSrv] => C:\windows\inf\ntvdm.vbe
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [85600 2013-12-13] (Nullsoft, Inc.)
HKLM-x32\...\Run: [uni mouse driver] => "C:\Program Files\Mous driver\mouse_driver.exe" /hide
HKLM-x32\...\Run: [uni mouse driver tilt] => "C:\Program Files\Mous driver\wh_exec.exe"
HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [493960 2014-12-05] (Autodesk Inc.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] (Qualcomm®Atheros®)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-749186415-578826221-4059475977-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
HKU\S-1-5-21-749186415-578826221-4059475977-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2874048 2015-02-19] (Valve Corporation)
HKU\S-1-5-21-749186415-578826221-4059475977-1001\...\Run: [GoogleChromeAutoLaunch_AB5A53C011F8096057C86508D418692D] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-06-20] (Google Inc.)
HKU\S-1-5-21-749186415-578826221-4059475977-1001\...\Run: [Boxoft Tools] => C:\ProgramData\Boxtools\Boxofttoolbox.exe [514048 2010-12-15] ()
HKU\S-1-5-21-749186415-578826221-4059475977-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [21969480 2015-05-19] (Google)
HKU\S-1-5-21-749186415-578826221-4059475977-1001\...\Run: [Copy] => C:\Users\Masinka\AppData\Roaming\Copy\CopyAgent.exe [15414816 2015-04-07] (Barracuda Networks, Inc.)
HKU\S-1-5-21-749186415-578826221-4059475977-1001\...\Run: [Dropbox Update] => C:\Users\Masinka\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-20] (Dropbox, Inc.)
HKU\S-1-5-18\...\Run: [Copy] => C:\Users\Masinka\AppData\Roaming\Copy\CopyAgent.exe [15414816 2015-04-07] (Barracuda Networks, Inc.)
Startup: C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost32.exe [2015-06-21] ()
Startup: C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost64.exe [2015-06-21] ()
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Masinka\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Masinka\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Masinka\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Masinka\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Masinka\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Masinka\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Masinka\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Masinka\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Masinka\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Masinka\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Masinka\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [1aCopyShExtError] -> {83BEA36E-7680-4598-A4DF-994426F6E78D} => C:\Users\Masinka\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-04-13] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [2aCopyShExtSynced] -> {845B7388-6F85-4F32-9FD5-F02DC7882B89} => C:\Users\Masinka\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-04-13] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [3aCopyShExtSyncing] -> {F6378A7A-F753-449B-AE1B-997A96132E61} => C:\Users\Masinka\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-04-13] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [4aCopyShExtSyncingProg1] -> {3A511828-777D-46F8-82F4-5B530C1B3D9E} => C:\Users\Masinka\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-04-13] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [5aCopyShExtSyncingProg2] -> {C8C88204-5B14-40EC-BA72-8AEBC762047E} => C:\Users\Masinka\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-04-13] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [6aCopyShExtSyncingProg3] -> {ACFF45C3-3EEB-4351-86C2-6696BA264239} => C:\Users\Masinka\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-04-13] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [7aCopyShExtSyncingProg4] -> {29AF997F-488B-46F0-AE78-7146F1B89CC3} => C:\Users\Masinka\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-04-13] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [8aCopyShExtSyncingProg5] -> {03F9AD29-1C78-4B66-8890-B177B5430C53} => C:\Users\Masinka\AppData\Roaming\Copy\overlay\CopyShExt.dll [2015-04-13] (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [Správa překryvné ikony digitálních podpisů AutoCADu ] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\windows\system32\AcSignIcon.dll [2009-02-09] (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Masinka\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Masinka\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Masinka\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-749186415-578826221-4059475977-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-749186415-578826221-4059475977-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com
HKU\S-1-5-21-749186415-578826221-4059475977-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-749186415-578826221-4059475977-1001 -> {4601FB85-7A0D-451C-BE6A-E3E428343774} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-26] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-05-13] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-26] (Oracle Corporation)
BHO: ExplorerWatcher Class -> {F8A6CAA2-533D-4AED-9E05-8EB19A4021AB} -> C:\Program Files (x86)\Clover\TabHelper64.dll [2014-01-23] (EJIE Technology)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{2A2FC20A-CD96-4660-B5CC-5D327CACE529}: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-26] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-29] (Adobe Systems)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-04] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-04] (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll [2013-12-13] (Nitro PDF)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll [2012-08-06] (Software602 a.s.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-29] (Adobe Systems)

Chrome:
=======
CHR Profile: C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Translate) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2015-02-16]
CHR Extension: (Google Slides) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-08]
CHR Extension: (Google Docs) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-08]
CHR Extension: (Google Drive) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-08]
CHR Extension: (MEGA) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2015-02-21]
CHR Extension: (YouTube) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-08]
CHR Extension: (Google Search) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-08]
CHR Extension: (Google Calendar) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2015-04-09]
CHR Extension: (Google Sheets) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-08]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2015-05-20]
CHR Extension: (AdBlock) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-21]
CHR Extension: (Pin It Button) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2015-02-16]
CHR Extension: (feedly) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\hipbfijinpcgfogaopmgehiegacbhmob [2015-02-16]
CHR Extension: (Dropbox) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2015-04-18]
CHR Extension: (Calculator XL) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbnlppngjpolaogkmcihddbacilmamfh [2015-02-16]
CHR Extension: (Google Forms) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhknlonaankphkkbnmjdlpehkinifeeg [2015-04-18]
CHR Extension: (Google Play) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2015-02-16]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-04-15]
CHR Extension: (Stormfall) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhlocdljofhnkgibklohoeddfkhhachb [2015-02-16]
CHR Extension: (Pocket) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjcnijlhddpbdemagnpefmlkjdagkogk [2015-02-16]
CHR Extension: (Merge PDF - Smallpdf.com) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbhibnjbbdkflfklbdpgbifkhcielgcm [2015-06-29]
CHR Extension: (feedly) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndhinffkekpekljifjkkkkkhopnjodja [2015-02-16]
CHR Extension: (Do It (Tomorrow)) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfagjoblnoeagfhfhohcdklnddjaiglo [2015-04-04]
CHR Extension: (Google Wallet) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-08]
CHR Extension: (ImTranslator: Google Translate) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\noaijdpnepcgjemiklgfkcfbkokogabh [2015-02-16]
CHR Extension: (Gmail) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-08]
CHR Extension: (RSS Feed Reader) - C:\Users\Masinka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnjaodmkngahhkoihejjehlcdlnohgmp [2015-02-16]
CHR HKU\S-1-5-21-749186415-578826221-4059475977-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
S2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\44.0.2403.25\remoting_host.exe [69448 2015-05-28] (Google Inc.)
R2 Dashboard Service; C:\Program Files (x86)\Lenovo\Lenovo Dashboard\DdMgr.exe [25184 2013-08-09] (Microsoft) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 IdeaTouch.LocalDataServer.Education; C:\Program Files (x86)\Lenovo\EducationPortal\Services\IdeaTouch.LocalDataServer.Education.exe [7680 2012-05-17] (Microsoft) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-12] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-12] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-04] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
R2 JME Keyboard; C:\Windows\jmesoft\Service.exe [32768 2011-08-17] () [File not signed]
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584632 2015-03-06] (LENOVO INCORPORATED.)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [1662424 2014-02-20] ()
R2 NitroDriverReadSpool9; C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe [230920 2013-12-13] (Nitro PDF Software)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2013-05-14] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-18] (TeamViewer GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-07] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-16] (Qualcomm Atheros Communications, Inc.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [290008 2013-07-05] (Realtek Semiconductor Corp.)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R3 whfltr2k; C:\Windows\System32\drivers\whfltr2k.sys [10368 2009-09-16] ()
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-01 22:33 - 2015-07-01 22:33 - 00000000 ____D C:\Users\Masinka\AppData\Roaming\R-TT
2015-07-01 22:32 - 2015-07-01 22:33 - 00000000 ____D C:\Users\Masinka\Documents\R-TT
2015-07-01 22:32 - 2015-07-01 22:32 - 00000000 ____D C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\R-Studio
2015-07-01 22:32 - 2015-07-01 22:32 - 00000000 ____D C:\Program Files (x86)\R-Studio
2015-07-01 21:45 - 2015-07-01 21:47 - 00000000 ____D C:\AdwCleaner
2015-07-01 21:35 - 2015-07-01 21:35 - 02244096 _____ C:\Users\Masinka\Desktop\adwcleaner_4.207.exe
2015-06-30 23:10 - 2015-07-01 22:46 - 00029082 _____ C:\Users\Masinka\Desktop\FRST.txt
2015-06-30 23:10 - 2015-07-01 22:45 - 00000000 ____D C:\FRST
2015-06-30 23:08 - 2015-06-30 23:08 - 02112512 _____ (Farbar) C:\Users\Masinka\Desktop\FRST64.exe
2015-06-20 10:45 - 2015-06-20 10:45 - 00000000 ____D C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-06-20 10:44 - 2015-07-01 21:49 - 00000942 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-749186415-578826221-4059475977-1001UA.job
2015-06-20 10:44 - 2015-06-29 10:49 - 00000890 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-749186415-578826221-4059475977-1001Core.job
2015-06-20 10:44 - 2015-06-20 10:44 - 00003892 _____ C:\windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-749186415-578826221-4059475977-1001UA
2015-06-20 10:44 - 2015-06-20 10:44 - 00003512 _____ C:\windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-749186415-578826221-4059475977-1001Core
2015-06-20 10:44 - 2015-06-20 10:44 - 00000000 ____D C:\Users\Masinka\AppData\Local\Dropbox
2015-06-20 10:44 - 2015-06-20 10:44 - 00000000 ____D C:\ProgramData\Dropbox
2015-06-13 22:41 - 2015-06-13 22:41 - 00000000 ____D C:\Users\Masinka\AppData\Roaming\Mobile Atlas Creator
2015-06-13 19:34 - 2015-06-13 19:34 - 00000000 ____D C:\Users\Masinka\AppData\Local\GHISLER
2015-06-13 19:33 - 2015-06-13 19:33 - 00000000 ____D C:\Users\Masinka\AppData\Roaming\GHISLER
2015-06-13 19:33 - 2015-06-13 19:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander
2015-06-13 19:33 - 2015-06-13 19:33 - 00000000 ____D C:\Program Files\totalcmd
2015-06-13 14:13 - 2015-06-13 14:13 - 00001272 _____ C:\Users\Masinka\Desktop\jdiskreport-1.4.0.jar – zástupce.lnk
2015-06-13 06:44 - 2015-06-13 06:44 - 00002184 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2015-06-13 00:09 - 2015-06-13 00:09 - 00001076 _____ C:\Users\Masinka\Desktop\LLFTOOL.EXE – zástupce.lnk
2015-06-10 07:45 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-06-10 07:45 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-06-10 07:45 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-06-10 07:45 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-06-10 07:45 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-06-10 07:45 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-06-10 07:45 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-06-10 07:44 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-06-10 07:44 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-06-10 07:44 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-06-10 07:44 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-06-10 07:44 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-06-10 07:44 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-06-10 07:44 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-06-10 07:44 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-06-10 07:44 - 2015-05-23 04:47 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2015-06-10 07:44 - 2015-05-23 04:43 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
2015-06-10 07:44 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-06-10 07:44 - 2015-05-23 04:38 - 00327168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-06-10 07:44 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-06-10 07:44 - 2015-05-23 04:28 - 01042944 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll
2015-06-10 07:44 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-06-10 07:44 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-06-10 07:44 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-06-10 07:44 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-06-10 07:44 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-06-10 07:44 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-06-10 07:44 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-06-10 07:44 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-06-10 07:44 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-06-10 07:44 - 2015-05-22 20:23 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2015-06-10 07:44 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-06-10 07:44 - 2015-05-22 20:15 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
2015-06-10 07:44 - 2015-05-22 20:09 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2015-06-10 07:44 - 2015-05-22 20:08 - 00374272 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-06-10 07:44 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-06-10 07:44 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-06-10 07:44 - 2015-05-22 19:49 - 02865152 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll
2015-06-10 07:44 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-06-10 07:44 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-06-10 07:43 - 2015-05-22 15:08 - 00700416 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-06-10 07:43 - 2015-05-21 15:08 - 01119232 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-06-10 07:43 - 2015-05-21 15:08 - 01020928 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-06-10 07:43 - 2015-05-21 15:08 - 00756736 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-06-10 07:43 - 2015-05-21 15:08 - 00422912 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-06-10 07:43 - 2015-05-21 15:08 - 00193536 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2015-06-10 07:43 - 2015-05-21 15:08 - 00045568 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-06-10 07:43 - 2015-04-17 00:07 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2015-06-10 07:43 - 2015-04-09 00:07 - 00410336 _____ C:\windows\system32\ApnDatabase.xml
2015-06-10 07:40 - 2015-03-20 05:49 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\compstui.dll
2015-06-10 07:40 - 2015-03-20 05:08 - 00477184 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll
2015-06-10 07:40 - 2015-03-20 04:37 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll
2015-06-10 07:40 - 2015-03-20 04:07 - 01091072 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2015-06-10 07:40 - 2015-03-02 03:43 - 00222208 _____ (Microsoft Corporation) C:\windows\system32\rastapi.dll
2015-06-10 07:40 - 2015-03-02 03:21 - 00207872 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastapi.dll
2015-06-10 07:39 - 2015-05-25 15:23 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\UtcResources.dll
2015-06-10 07:39 - 2015-05-25 15:07 - 01430528 _____ (Microsoft Corporation) C:\windows\system32\diagtrack.dll
2015-06-10 07:39 - 2015-04-09 00:41 - 00158720 _____ (Microsoft Corporation) C:\windows\SysWOW64\rgb9rast.dll
2015-06-10 07:38 - 2015-04-02 00:42 - 03097600 _____ (Microsoft Corporation) C:\windows\system32\msftedit.dll
2015-06-10 07:38 - 2015-04-02 00:30 - 02483712 _____ (Microsoft Corporation) C:\windows\SysWOW64\msftedit.dll
2015-06-10 07:35 - 2015-04-14 00:37 - 00275968 _____ (Microsoft Corporation) C:\windows\system32\authz.dll
2015-06-10 07:35 - 2015-04-14 00:34 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\authz.dll
2015-06-10 07:35 - 2015-04-10 02:40 - 01249280 _____ (Microsoft Corporation) C:\windows\system32\UIAutomationCore.dll
2015-06-10 07:35 - 2015-04-10 02:17 - 01018880 _____ (Microsoft Corporation) C:\windows\SysWOW64\UIAutomationCore.dll
2015-06-10 07:33 - 2015-04-25 04:34 - 00653824 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2015-06-10 07:33 - 2015-04-25 04:33 - 00549888 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2015-06-10 07:32 - 2015-04-16 08:17 - 00325464 ____C (Microsoft Corporation) C:\windows\system32\Drivers\USBXHCI.SYS
2015-06-10 07:32 - 2015-04-01 06:21 - 00337408 _____ (Microsoft Corporation) C:\windows\system32\SearchProtocolHost.exe
2015-06-10 07:32 - 2015-04-01 06:18 - 00468480 _____ (Microsoft Corporation) C:\windows\system32\mssph.dll
2015-06-10 07:32 - 2015-04-01 06:17 - 00248832 _____ (Microsoft Corporation) C:\windows\system32\mssphtb.dll
2015-06-10 07:32 - 2015-04-01 06:08 - 00774144 _____ (Microsoft Corporation) C:\windows\system32\mssvp.dll
2015-06-10 07:32 - 2015-04-01 05:46 - 03633664 _____ (Microsoft Corporation) C:\windows\system32\tquery.dll
2015-06-10 07:32 - 2015-04-01 05:17 - 02551808 _____ (Microsoft Corporation) C:\windows\system32\mssrch.dll
2015-06-10 07:32 - 2015-04-01 05:17 - 00903168 _____ (Microsoft Corporation) C:\windows\system32\SearchIndexer.exe
2015-06-10 07:32 - 2015-04-01 04:53 - 00391680 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssph.dll
2015-06-10 07:32 - 2015-04-01 04:53 - 00272896 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchProtocolHost.exe
2015-06-10 07:32 - 2015-04-01 04:45 - 02749952 _____ (Microsoft Corporation) C:\windows\SysWOW64\tquery.dll
2015-06-10 07:32 - 2015-04-01 04:45 - 00699392 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssvp.dll
2015-06-10 07:32 - 2015-04-01 04:14 - 01920000 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssrch.dll
2015-06-10 07:32 - 2015-04-01 04:12 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchIndexer.exe
2015-06-10 07:26 - 2015-05-21 18:47 - 04177920 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-06-02 19:49 - 2015-06-02 19:49 - 00000000 ____D C:\Users\Masinka\AppData\Local\GWX

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-01 22:45 - 2015-04-13 10:48 - 00000000 ____D C:\Users\Masinka\AppData\Roaming\Copy
2015-07-01 22:42 - 2014-10-08 19:15 - 00000976 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-01 22:37 - 2014-10-08 19:15 - 00003594 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-749186415-578826221-4059475977-1001
2015-07-01 22:21 - 2015-04-05 22:01 - 00000000 ____D C:\ProgramData\Boxtools
2015-07-01 22:05 - 2014-06-07 00:23 - 02014602 _____ C:\windows\WindowsUpdate.log
2015-07-01 22:00 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\sru
2015-07-01 21:51 - 2014-10-08 19:15 - 00000972 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-01 21:50 - 2014-11-23 17:55 - 00000492 _____ C:\windows\Tasks\SDMsgUpdate (TE).job
2015-07-01 21:49 - 2013-08-22 16:46 - 00062368 _____ C:\windows\setupact.log
2015-07-01 21:49 - 2013-08-22 16:45 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-07-01 21:49 - 2013-08-22 15:25 - 00524288 ___SH C:\windows\system32\config\BBI
2015-07-01 21:48 - 2014-10-08 19:09 - 00000000 ____D C:\Users\Masinka
2015-07-01 21:47 - 2014-06-07 00:18 - 00000000 ____D C:\Program Files (x86)\Amazon
2015-07-01 20:54 - 2014-10-08 19:13 - 00003930 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{A0C6DD03-09C0-41BA-A571-54E339AEA10F}
2015-07-01 20:53 - 2013-08-22 17:36 - 00000000 ____D C:\windows\AppReadiness
2015-06-28 07:38 - 2015-04-05 18:43 - 00000000 ____D C:\Users\Masinka\AppData\Roaming\Dropbox
2015-06-28 07:37 - 2015-05-20 07:40 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-06-26 20:31 - 2015-02-25 19:56 - 00000000 ____D C:\Users\Masinka\AppData\Local\CrashDumps
2015-06-26 05:44 - 2015-02-21 00:10 - 00000000 ____D C:\Users\Masinka\AppData\Local\MEGAsync
2015-06-25 19:42 - 2014-10-08 19:15 - 00000000 ____D C:\Program Files (x86)\Google
2015-06-25 19:31 - 2015-02-24 22:31 - 00003828 _____ C:\windows\System32\Tasks\Opera scheduled Autoupdate 1424809836
2015-06-25 19:31 - 2015-02-24 22:30 - 00001071 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-06-25 19:31 - 2015-02-24 22:28 - 00000000 ____D C:\Program Files (x86)\Opera
2015-06-24 07:15 - 2015-05-20 07:40 - 00000991 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-06-24 07:15 - 2015-05-20 07:40 - 00000979 _____ C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-06-24 07:04 - 2013-08-22 17:20 - 00000000 ____D C:\windows\CbsTemp
2015-06-23 14:14 - 2014-12-24 16:36 - 00003886 _____ C:\windows\System32\Tasks\Adobe Acrobat Update Task
2015-06-22 19:50 - 2014-06-07 00:45 - 00739704 _____ C:\windows\system32\perfh005.dat
2015-06-22 19:50 - 2014-06-07 00:45 - 00151944 _____ C:\windows\system32\perfc005.dat
2015-06-22 19:50 - 2013-08-31 17:40 - 01749406 _____ C:\windows\system32\PerfStringBackup.INI
2015-06-22 07:00 - 2014-10-08 19:20 - 00000000 ____D C:\Users\Masinka\AppData\Roaming\Nitro PDF
2015-06-20 05:02 - 2015-03-21 21:29 - 00792568 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-06-20 05:02 - 2015-03-21 21:29 - 00178168 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-14 20:04 - 2014-11-09 22:09 - 00000000 ____D C:\Users\Masinka\AppData\Local\Microsoft Help
2015-06-14 09:16 - 2015-02-24 08:31 - 00000000 ___RD C:\Users\Masinka\Documents\MEGAsync
2015-06-13 21:23 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\NDF
2015-06-12 08:08 - 2013-08-22 17:36 - 00000000 ____D C:\windows\rescache
2015-06-12 07:03 - 2013-08-22 16:44 - 00598120 _____ C:\windows\system32\FNTCACHE.DAT
2015-06-12 00:57 - 2015-04-15 07:51 - 00000000 ____D C:\windows\system32\appraiser
2015-06-12 00:57 - 2015-03-14 02:55 - 00000000 ___SD C:\windows\system32\CompatTel
2015-06-12 00:57 - 2013-08-22 17:36 - 00000000 ___RD C:\windows\ToastData
2015-06-12 00:57 - 2013-08-22 17:36 - 00000000 ____D C:\windows\PolicyDefinitions
2015-06-12 00:56 - 2014-11-23 18:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-06-12 00:56 - 2014-11-09 22:09 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-11 03:02 - 2014-10-10 16:30 - 00000000 ____D C:\windows\system32\MRT
2015-06-11 02:49 - 2014-10-10 16:30 - 140135120 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-06-11 02:46 - 2013-08-22 15:25 - 00000199 _____ C:\windows\win.ini
2015-06-05 06:45 - 2015-04-13 10:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-06-01 07:35 - 2015-05-20 07:40 - 00000000 ____D C:\Users\Masinka\AppData\Roaming\TeamViewer

==================== Files in the root of some directories =======

2015-04-05 22:01 - 2015-04-05 22:01 - 0000040 _____ () C:\Users\Masinka\AppData\Roaming\cdr.ini
2015-03-12 21:17 - 2015-03-12 21:18 - 184702896 _____ () C:\Users\Masinka\AppData\Local\ACCCx2_9_1_474.zip.aamdownload
2015-03-12 21:17 - 2015-03-12 21:18 - 0002216 _____ () C:\Users\Masinka\AppData\Local\ACCCx2_9_1_474.zip.aamdownload.aamd
2015-05-23 12:06 - 2015-05-23 12:06 - 0000001 _____ () C:\Users\Masinka\AppData\Local\llftool.4.40.agreement
2015-02-11 22:03 - 2015-02-11 22:03 - 0001562 _____ () C:\Users\Masinka\AppData\Local\recently-used.xbel
2014-10-08 19:10 - 2014-10-08 19:10 - 0000193 _____ () C:\Users\Masinka\AppData\Local\RegisteredPackageInformation.xml
2015-02-22 01:37 - 2015-02-22 01:37 - 0000017 _____ () C:\Users\Masinka\AppData\Local\resmon.resmoncfg
2014-06-06 23:58 - 2014-06-06 23:58 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Masinka\AppData\Local\Temp\130692831991012083.exe
C:\Users\Masinka\AppData\Local\Temp\13069283211576844286.exe
C:\Users\Masinka\AppData\Local\Temp\65424ea5-b21f-4d4a-ba25-56d66a705857.exe
C:\Users\Masinka\AppData\Local\Temp\AcDeltree.exe
C:\Users\Masinka\AppData\Local\Temp\AdobeApplicationManager.exe
C:\Users\Masinka\AppData\Local\Temp\COMAP.EXE
C:\Users\Masinka\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpj2m6ux.dll
C:\Users\Masinka\AppData\Local\Temp\FNP_ACT_InstallerCA.dll
C:\Users\Masinka\AppData\Local\Temp\i4jdel0.exe
C:\Users\Masinka\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Masinka\AppData\Local\Temp\ose00000.exe
C:\Users\Masinka\AppData\Local\Temp\ose00001.exe
C:\Users\Masinka\AppData\Local\Temp\proxy_vole8564349182348441395.dll
C:\Users\Masinka\AppData\Local\Temp\Quarantine.exe
C:\Users\Masinka\AppData\Local\Temp\SpOrder.dll
C:\Users\Masinka\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-30 20:29

==================== End of log ============================

Re: zpomalený počítač (winnet32b.exe)

Napsal: 01 črc 2015 22:00
od altrok
  • Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
  • ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
  • znovu spustte FRST a kliknete na Fix
  • po restartu bude na plose ulozen fixlog, jehoz obsah mi vlozte do pristi odpovedi

    Kód: Vybrat vše

    Start
CloseProcesses:
CreateRestorePoint:
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [mncvlriaSrv] => C:\windows\system32\mncvlria.vbe
HKLM-x32\...\Run: [MSStp] => C:\windows\inf\msstp.vbe
HKLM-x32\...\Run: [mncqcbqSrv] => C:\windows\system32\mncqcbq.vbe
HKLM-x32\...\Run: [NtVdmSrv] => C:\windows\inf\ntvdm.vbe
C:\windows\system32\mncvlria.vbe
C:\windows\system32\mncvlria.inf
C:\windows\inf\msstp.vbe
C:\windows\inf\msstp.inf
C:\windows\system32\mncqcbq.vbe
C:\windows\system32\mncqcbq.inf
C:\windows\inf\ntvdm.vbe
C:\windows\inf\ntvdm.inf
HKLM\...\Policies\Explorer: [NoControlPanel] 0
Startup: C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost32.exe [2015-06-21] ()
Startup: C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost64.exe [2015-06-21] ()

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-749186415-578826221-4059475977-1001 -> {4601FB85-7A0D-451C-BE6A-E3E428343774} URL = 

2015-07-01 21:45 - 2015-07-01 21:47 - 00000000 ____D C:\AdwCleaner
2015-07-01 21:35 - 2015-07-01 21:35 - 02244096 _____ C:\Users\Masinka\Desktop\adwcleaner_4.207.exe
2015-06-30 23:10 - 2015-07-01 22:46 - 00029082 _____ C:\Users\Masinka\Desktop\FRST.txt
2014-06-06 23:58 - 2014-06-06 23:58 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
C:\Users\Masinka\AppData\Roaming\Microsoft\Networking

Task: {5BD0CA8D-A476-4615-948B-C8A4F8DBC63B} - System32\Tasks\{46563D9A-D259-4DF6-9407-7DE4552FE789} => pcalua.exe -a D:\setup.exe -d D:\
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm
FirewallRules: [TCP Query User{F5B24D1C-0851-4E7B-8D71-BD7912EA8B94}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe
FirewallRules: [UDP Query User{4242936D-43E2-49F6-95CA-E0BC8D735669}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe
C:\windows\kmsemulator.exe
Hosts:
EmptyTemp:
End

Re: zpomalený počítač (winnet32b.exe)

Napsal: 02 črc 2015 19:58
od PavlaF
Fix result of Farbar Recovery Scan Tool (x64) Version:28-06-2015 01
Ran by Masinka at 2015-07-02 20:49:33 Run:1
Running from C:\Users\Masinka\Desktop
Loaded Profiles: Masinka (Available Profiles: Masinka & Kuba)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [mncvlriaSrv] => C:\windows\system32\mncvlria.vbe
HKLM-x32\...\Run: [MSStp] => C:\windows\inf\msstp.vbe
HKLM-x32\...\Run: [mncqcbqSrv] => C:\windows\system32\mncqcbq.vbe
HKLM-x32\...\Run: [NtVdmSrv] => C:\windows\inf\ntvdm.vbe
C:\windows\system32\mncvlria.vbe
C:\windows\system32\mncvlria.inf
C:\windows\inf\msstp.vbe
C:\windows\inf\msstp.inf
C:\windows\system32\mncqcbq.vbe
C:\windows\system32\mncqcbq.inf
C:\windows\inf\ntvdm.vbe
C:\windows\inf\ntvdm.inf
HKLM\...\Policies\Explorer: [NoControlPanel] 0
Startup: C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost32.exe [2015-06-21] ()
Startup: C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost64.exe [2015-06-21] ()

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-749186415-578826221-4059475977-1001 -> {4601FB85-7A0D-451C-BE6A-E3E428343774} URL =

2015-07-01 21:45 - 2015-07-01 21:47 - 00000000 ____D C:\AdwCleaner
2015-07-01 21:35 - 2015-07-01 21:35 - 02244096 _____ C:\Users\Masinka\Desktop\adwcleaner_4.207.exe
2015-06-30 23:10 - 2015-07-01 22:46 - 00029082 _____ C:\Users\Masinka\Desktop\FRST.txt
2014-06-06 23:58 - 2014-06-06 23:58 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
C:\Users\Masinka\AppData\Roaming\Microsoft\Networking

Task: {5BD0CA8D-A476-4615-948B-C8A4F8DBC63B} - System32\Tasks\{46563D9A-D259-4DF6-9407-7DE4552FE789} => pcalua.exe -a D:\setup.exe -d D:\
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm
FirewallRules: [TCP Query User{F5B24D1C-0851-4E7B-8D71-BD7912EA8B94}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe
FirewallRules: [UDP Query User{4242936D-43E2-49F6-95CA-E0BC8D735669}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe
C:\windows\kmsemulator.exe
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => value removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\BCSSync => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\UpdateP2GoShortCut => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mncvlriaSrv => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\MSStp => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mncqcbqSrv => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\NtVdmSrv => value removed successfully
"C:\windows\system32\mncvlria.vbe" => File/Folder not found.
"C:\windows\system32\mncvlria.inf" => File/Folder not found.
"C:\windows\inf\msstp.vbe" => File/Folder not found.
"C:\windows\inf\msstp.inf" => File/Folder not found.
"C:\windows\system32\mncqcbq.vbe" => File/Folder not found.
"C:\windows\system32\mncqcbq.inf" => File/Folder not found.
"C:\windows\inf\ntvdm.vbe" => File/Folder not found.
C:\windows\inf\ntvdm.inf => moved successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoControlPanel => value removed successfully
C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost32.exe not found.
C:\Users\Masinka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost64.exe not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKU\S-1-5-21-749186415-578826221-4059475977-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{4601FB85-7A0D-451C-BE6A-E3E428343774}" => key removed successfully
HKCR\CLSID\{4601FB85-7A0D-451C-BE6A-E3E428343774} => key not found.
C:\AdwCleaner => moved successfully.
C:\Users\Masinka\Desktop\adwcleaner_4.207.exe => moved successfully.
C:\Users\Masinka\Desktop\FRST.txt => moved successfully.
C:\ProgramData\DP45977C.lfl => moved successfully.
C:\Users\Masinka\AppData\Roaming\Microsoft\Networking => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5BD0CA8D-A476-4615-948B-C8A4F8DBC63B}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5BD0CA8D-A476-4615-948B-C8A4F8DBC63B}" => key removed successfully
C:\Windows\System32\Tasks\{46563D9A-D259-4DF6-9407-7DE4552FE789} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{46563D9A-D259-4DF6-9407-7DE4552FE789}" => key removed successfully
C:\ProgramData\Reprise => ":wupeogjxldtlfudivq`qsp`26hfm" ADS removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F5B24D1C-0851-4E7B-8D71-BD7912EA8B94}C:\windows\kmsemulator.exe => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4242936D-43E2-49F6-95CA-E0BC8D735669}C:\windows\kmsemulator.exe => value removed successfully
"C:\windows\kmsemulator.exe" => File/Folder not found.
C:\Windows\System32\Drivers\etc\hosts => moved successfully.
Hosts restored successfully.
EmptyTemp: => 2.8 GB temporary data Removed.


The system needed a reboot..

==== End of Fixlog 20:51:04 ====

Re: zpomalený počítač (winnet32b.exe)

Napsal: 02 črc 2015 21:45
od altrok
Vyborne. Stale je procesor nadmerne zatizeny? Pozorujete nejake jine problemy? Pripadne uz jen uklidime :)

Re: zpomalený počítač (winnet32b.exe)

Napsal: 09 črc 2015 01:05
od PavlaF
Vše už běhá jak má... mockrát děkuju za rady a pomoc. :thumbsup:

Re: zpomalený počítač (winnet32b.exe)

Napsal: 10 črc 2015 06:33
od altrok
Takze jeste uklidime.
A pokud nejsou dotazy ci jine problemy, je to ode mne vse.
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz