VIRY.CZ

Dobrý den, PC mě hodně zpomalil, zejména v kombinaci se spuštěným chrome. MBAM našel 55 objektů. Nevím co z toho mohu smazat a zda to také bude stačit. Děkuji za pomoc.
Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 5. 12. 2015
Čas skenování: 12:39
Protokol: MBAM log.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2015.12.05.03
Databáze rootkitů: v2015.11.26.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 8.1
CPU: x86
Souborový systém: NTFS
Uživatel: martas

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 287471
Uplynulý čas: 28 min, 27 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 11
PUP.Optional.ModGoog, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, , [a2d5554c2962c571abcd0de7b44c9769],
PUP.Optional.CrossRider, HKLM\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [195e554c028921156401097cc43fee12],
PUP.Optional.PCSpeedUp, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PCSUUCDRV, , [cbace9b84942c373a6554b546d96718f],
PUP.Optional.InternetSpeedChecker.PrxySvrRST, HKU\S-1-5-18\SOFTWARE\Internet Speed Checker-nv, , [da9de9b86427c96d3844a0052cd6b64a],
PUP.Optional.InternetSpeedChecker.PrxySvrRST, HKU\S-1-5-18\SOFTWARE\Internet Speed Checker-nv-ie, , [5621623f2d5e67cf55276540e61c6997],
PUP.Optional.SavePass, HKU\S-1-5-18\SOFTWARE\SavePass 1.1-nv, , [babd257ca2e9a98da06f1a8c42c1ce32],
PUP.Optional.CrossRider, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_, , [e88f6d34b3d839fd0b35b8cccb3853ad],
PUP.Optional.Cinema, HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\SOFTWARE\CinemaP-1.9cV05.03-nv-ie, , [df98851cef9ced49db628fef0bf8768a],
PUP.Optional.InternetSpeedChecker.PrxySvrRST, HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\SOFTWARE\Internet Speed Checker-nv-ie, , [c0b77c25f79441f57efe9d08a55dd030],
PUP.Optional.SavePass, HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\SOFTWARE\SavePass1.1, , [accbd7ca24671a1c4dc1cfd760a307f9],
PUP.Optional.OutBrowse, HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\SOFTWARE\OB, , [ec8bb8e9aae12a0cc73dcbd4768d3bc5],

Hodnoty registru: 1
PUP.Optional.OutBrowse, HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\SOFTWARE\OB|monitype6, 3/18/15 0:24:14, , [ec8bb8e9aae12a0cc73dcbd4768d3bc5]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 3
PUP.Optional.GlobalUpdate, C:\Users\martas\AppData\Local\Temp\comh.182922, , [27505a47d9b245f1f5637908b2509b65],
PUP.Optional.GlobalUpdate, C:\Users\martas\AppData\Local\Temp\comh.17420, , [e097bde40e7d43f389cf4b36837f0ef2],
PUP.Optional.GlobalUpdate, C:\Users\martas\AppData\Local\Temp\comh.162697, , [4136d9c87615d363aeaaf0914ab835cb],

Soubory: 40
PUP.Optional.OutBrowse, C:\Users\martas\AppData\Local\Temp\dbhcabfbbg.exe, , [abccc9d88209bc7a8624c05dc1408080],
PUP.Optional.OutBrowse, C:\Users\martas\AppData\Local\Temp\dbhcabfbbgi.exe, , [3443376a92f9d95d2f7bc15c44bddb25],
PUP.Optional.OutBrowse, C:\Users\martas\AppData\Local\Temp\mytmpinstaller.exe, , [6017821f117a270f8c386b8125dba858],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\GoogleCrashHandler.exe, , [77003968a0eb71c56711af452bd542be],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\GoogleUpdate.exe, , [a2d5554c2962c571abcd0de7b44c9769],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\GoogleUpdateBroker.exe, , [a0d7f0b128639c9af7815e96936dd32d],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\GoogleUpdateOnDemand.exe, , [93e4623f3c4f3006fb7db440c838a65a],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\goopdate.dll, , [423590113a51e3532c4cb4400ff1df21],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\goopdateres_en.dll, , [d6a1ecb557345dd97afed22247b9dc24],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\npGoogleUpdate4.dll, , [d6a139683d4eb28481f7e50f669a7987],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\psmachine.dll, , [1a5de8b92566f2446c0c886c24dcc43c],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.182922\psuser.dll, , [6611336e69222e08384005efce325ca4],
PUP.Optional.CrossRider, C:\Users\martas\AppData\Local\Temp\nsgB306.tmp\InstallerUtils2.dll, , [87f0adf4c1cad95d8ece951bea17d42c],
PUP.Optional.CrossRider, C:\Users\martas\AppData\Local\Temp\nskA191.tmp\Czbic.exe, , [4e293b669deed0660f0a3fece41d08f8],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\GoogleCrashHandler.exe, , [ed8aa0013d4e7db9502814e07d831ae6],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\GoogleUpdate.exe, , [cfa8f8a9513a5fd73741e11356aa3cc4],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\GoogleUpdateBroker.exe, , [beb96e33eba056e0fa7ef6fe1ee26c94],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\GoogleUpdateOnDemand.exe, , [f87f821f632861d5d1a737bdd927f709],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\goopdate.dll, , [99de3e6398f30a2ca1d78e6658a8eb15],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\goopdateres_en.dll, , [caad138e3c4f77bf1167fef635cb2ed2],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\npGoogleUpdate4.dll, , [1c5bd9c8e6a52b0bc6b26193f808f907],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\psmachine.dll, , [e097b0f1f29983b3a9cf8a6a59a76e92],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.17420\psuser.dll, , [abcc0e937a1181b5f2868c6822ded32d],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\GoogleCrashHandler.exe, , [7cfbd9c82d5ea6908fe9bf35a858f40c],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\GoogleUpdate.exe, , [b9be059cd5b6b3835523f8fc4cb49d63],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\GoogleUpdateBroker.exe, , [a1d6d4cd3259d561a7d114e0817f39c7],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\GoogleUpdateOnDemand.exe, , [87f09110ed9e290de692599b42beba46],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\goopdate.dll, , [05723170880363d3d8a047adda2656aa],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\goopdateres_en.dll, , [bbbc920f49422313ff79886cd22e827e],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\npGoogleUpdate4.dll, , [92e5c7dacac1d0662256995b00008b75],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\psmachine.dll, , [383fd2cf8a017fb779ffc62ead53639d],
PUP.Optional.ModGoog, C:\Users\martas\AppData\Local\Temp\comh.162697\psuser.dll, , [4136960b7714261091e7c232d030d828],
PUP.Optional.ChinAd, C:\Users\martas\AppData\Local\Temp\81426634592\0AB64RN1.exe, , [bdba049dbfcce056dbe97daa2bd660a0],
PUP.Optional.CrossRider, C:\Users\martas\AppData\Local\Temp\81426634592\1AB64RN1.exe, , [ccab713091fae35346d472b907faa55b],
PUP.Optional.Yontoo, C:\Users\martas\AppData\Local\Temp\81426634592\1AB64RN3.exe, , [4b2c2e739bf00b2b3550cee579882fd1],
PUP.Optional.CrossBrowse, C:\Users\martas\AppData\Local\Temp\81426634592\1AB64RN4.exe, , [1364faa71e6df6408d61032718e9f40c],
PUP.Optional.BundleInstaller, C:\Users\martas\Downloads\FUJIFILM FINEPIX F660EXR user guide provided through pdfretriever.com.exe, , [5a1dd9c80f7c1c1af942a9815da420e0],
PUP.Optional.GlobalUpdate, C:\Users\martas\AppData\Local\Temp\comh.182922\GoogleUpdateHelper.msi, , [27505a47d9b245f1f5637908b2509b65],
PUP.Optional.GlobalUpdate, C:\Users\martas\AppData\Local\Temp\comh.17420\GoogleUpdateHelper.msi, , [e097bde40e7d43f389cf4b36837f0ef2],
PUP.Optional.GlobalUpdate, C:\Users\martas\AppData\Local\Temp\comh.162697\GoogleUpdateHelper.msi, , [4136d9c87615d363aeaaf0914ab835cb],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)

Krasny den Vam preju



Vsechny polozky jsou malware (nebo alespon PUPs), takze je vsechny odstrante. Tento druh malwaru se casto hodne rozleza, takze se na to mrkneme dukladneji.


V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

• ukoncete vsechny programy
• kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
• kliknete na Scan, pote na Cleaning
• po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner[Cx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

Děkuji vřele, tady je ten log.
# AdwCleaner v5.023 - Logfile created 05/12/2015 at 14:14:22
# Updated 30/11/2015 by Xplode
# Database : 2015-12-03.1 [Server]
# Operating system : Windows 8.1 Pro (x86)
# Username : martas - MARTASOSTROJ
# Running from : C:\Users\martas\Desktop\adwcleaner_5.023.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\myfree codec
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec

***** [ Files ] *****

[-] File Deleted : C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[-] File Deleted : C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
[-] File Deleted : C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage
[-] File Deleted : C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{444785F1-DE89-4295-863A-D46C3A781394}
[-] Key Deleted : HKCU\Software\Myfree Codec
[-] Key Deleted : HKLM\SOFTWARE\Myfree Codec
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[-] Key Deleted : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Installer
[-] Key Deleted : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\_CrossriderRegNamePlaceHolder_

***** [ Web browsers ] *****

[-] [C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://istart.webssearches.com/?type=hp&ts=1420375680&from=exp&uid=ST3808110AS_4LR0EYJPXXXX4LR0EYJP

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [2726 bytes] ##########

Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101


U PC budu az vecer.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-12-2015
Ran by martas (administrator) on MARTASOSTROJ (05-12-2015 14:56:16)
Running from C:\Users\martas\Desktop
Loaded Profiles: martas (Available Profiles: martas)
Platform: Microsoft Windows 8.1 Pro (X86) Language: Angličtina (Spojené státy)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cnext.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9600.16422_x86__8wekyb3d8bbwe\glcnd.exe
(Opera Software) C:\Program Files\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files\Opera\33.0.1990.115\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files\Opera\33.0.1990.115\opera.exe
(Opera Software) C:\Program Files\Opera\33.0.1990.115\opera.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [6743920 2014-12-14] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM\...\Run: [seznam-listicka-distribuce] => C:\Program Files\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6133520 2015-11-06] (AVAST Software)
HKLM\...\Run: [Raptr] => C:\Program Files\Raptr\raptrstub.exe [56080 2015-12-02] (Raptr, Inc)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616 2015-07-27] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\cnext.exe [4294856 2015-11-18] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\...\Run: [AdobeBridge] => [X]
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-10-16] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6917C112-9AD9-49DC-AEBE-430308E5579E}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-09-09] (AVAST Software)
IE Session Restore: HKU\S-1-5-21-2878440334-3389864573-2966859060-1001 -> is enabled.

FireFox:
========
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-08-08] (Intel Corporation)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-08-08] (Intel Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin HKU\S-1-5-21-2878440334-3389864573-2966859060-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\martas\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-30] (Unity Technologies ApS)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: No Name - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-11-30]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2015-11-30]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-04]
CHR Extension: (Dokumenty Google) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Disk Google) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock Plus) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-11-24]
CHR Extension: (Vyhledávání Google) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Tabulky Google) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-04]
CHR Extension: (Dokumenty Google offline) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18]
CHR Extension: (Avast Online Security) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-04]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-03]
CHR Extension: (Gmail) - C:\Users\martas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-30]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-16] (AVAST Software)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [586240 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [637912 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-08] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.)
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [279784 2014-10-25] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22224 2014-10-25] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [15528 2012-09-23] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24016 2015-11-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [81168 2015-11-30] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-11-30] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49776 2015-11-30] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [794952 2015-11-30] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [435464 2015-11-30] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [117200 2015-11-30] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209432 2015-11-30] (AVAST Software)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB3.sys [82944 2015-09-18] (Advanced Micro Devices)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2015-12-05] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-10-05] (Malwarebytes Corporation)
R3 MEI; C:\Windows\system32\DRIVERS\TeeDriver.sys [84952 2013-08-08] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [30224 2014-10-25] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [219992 2014-10-25] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [92504 2014-10-25] (Microsoft Corporation)
S3 WUDFSensorLP; C:\Windows\system32\DRIVERS\WUDFRd.sys [188416 2014-10-25] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [188416 2014-10-25] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-05 14:49 - 2015-12-05 14:49 - 00027219 _____ C:\Users\martas\Desktop\Addition.txt
2015-12-05 14:48 - 2015-12-05 14:48 - 00015327 _____ C:\Users\martas\Desktop\LM.bat
2015-12-05 14:47 - 2015-12-05 14:47 - 01719808 _____ (Farbar) C:\Users\martas\Desktop\FRST.exe
2015-12-05 14:47 - 2015-12-05 14:47 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Desktop\FRSTLauncher (4).exe
2015-12-05 14:04 - 2015-12-05 14:04 - 01736704 _____ C:\Users\martas\Desktop\adwcleaner_5.023.exe
2015-12-05 13:57 - 2015-12-05 13:57 - 00008122 _____ C:\MBAM log2.txt
2015-12-05 13:54 - 2015-12-05 14:56 - 00012140 _____ C:\Users\martas\Desktop\FRST.txt
2015-12-05 13:51 - 2015-12-05 14:56 - 00000000 ____D C:\FRST
2015-12-05 13:49 - 2015-12-05 13:49 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher (3).exe
2015-12-05 13:49 - 2015-12-05 13:49 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher (2).exe
2015-12-05 13:47 - 2015-12-05 13:47 - 00086876 _____ C:\Users\martas\Downloads\3BF0.tmp
2015-12-05 13:46 - 2015-12-05 13:47 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher (1).exe
2015-12-05 13:46 - 2015-12-05 13:46 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher.exe
2015-12-05 13:11 - 2015-12-05 13:11 - 00008121 _____ C:\MBAM log.txt
2015-12-05 12:58 - 2015-12-05 12:58 - 00002225 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-05 12:58 - 2015-12-05 12:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-05 12:56 - 2015-12-05 12:56 - 00927824 _____ (Google Inc.) C:\Users\martas\Downloads\ChromeSetup.exe
2015-12-05 12:56 - 2015-12-05 12:56 - 00927824 _____ (Google Inc.) C:\Users\martas\Downloads\ChromeSetup (1).exe
2015-12-05 12:38 - 2015-12-05 14:15 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-12-05 12:37 - 2015-12-05 12:37 - 00001076 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-12-05 12:37 - 2015-12-05 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-12-05 12:37 - 2015-12-05 12:37 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-05 12:37 - 2015-12-05 12:37 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2015-12-05 12:37 - 2015-10-05 09:50 - 00094936 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-12-05 12:37 - 2015-10-05 09:50 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-12-05 12:37 - 2015-10-05 09:50 - 00023256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-12-05 12:36 - 2015-12-05 12:36 - 22908888 _____ (Malwarebytes ) C:\Users\martas\Downloads\mbam-setup-2.2.0.1024.exe
2015-12-03 19:51 - 2015-12-03 19:55 - 77735536 _____ C:\Users\martas\Downloads\Haj---Skolak-Kaja-Marik-CETBA-PRO-DETI-MLUVENE-SLOVO-pahaajika.rar
2015-12-03 14:44 - 2015-12-03 14:44 - 00000000 ____D C:\Program Files\Common Files\AV
2015-12-02 22:43 - 2015-12-02 22:43 - 00000000 ____D C:\Users\martas\AppData\Local\AMD
2015-12-02 22:43 - 2015-12-02 22:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2015-12-02 22:28 - 2015-12-02 22:28 - 04947168 _____ (Advanced Micro Devices, Inc.) C:\Users\martas\Downloads\autodetectutility.exe
2015-12-02 19:29 - 2015-12-02 19:43 - 236261066 _____ C:\Users\martas\Downloads\Dahl---Karlik-a-tovarna-na-cokoladu-CETBA-PRO-DETI-MLUVENE-SLOVO-pahaajika.rar
2015-11-30 22:31 - 2015-11-30 22:31 - 00001041 _____ C:\Users\martas\Desktop\Format Factory.lnk
2015-11-30 22:31 - 2015-11-30 22:31 - 00000000 ____D C:\Users\martas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2015-11-30 22:31 - 2015-11-30 22:31 - 00000000 ____D C:\Program Files\FormatFactory
2015-11-30 22:30 - 2015-11-30 22:30 - 54458464 _____ (Free Time) C:\Users\martas\Downloads\FFSetup3.7.0.0.exe
2015-11-30 22:25 - 2015-11-30 22:25 - 00000000 ____D C:\Users\martas\Documents\SelfMV
2015-11-30 22:09 - 2015-05-21 07:02 - 00184192 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2015-11-30 22:09 - 2015-05-21 07:02 - 00089984 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2015-11-30 22:07 - 2015-11-30 22:07 - 00001968 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2015-11-30 22:07 - 2015-11-30 22:07 - 00001958 _____ C:\Users\Public\Desktop\Samsung Kies.lnk
2015-11-30 22:07 - 2015-11-30 22:07 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2015-11-30 22:07 - 2015-11-30 22:07 - 00000000 ____D C:\Users\martas\Documents\samsung
2015-11-30 22:07 - 2015-11-30 22:07 - 00000000 ____D C:\Users\martas\AppData\Roaming\Samsung
2015-11-30 22:07 - 2015-11-30 22:07 - 00000000 ____D C:\Users\martas\AppData\Local\Samsung
2015-11-30 22:06 - 2015-11-30 22:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2015-11-30 22:06 - 2013-12-30 10:53 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\system32\Redemption.dll
2015-11-30 22:06 - 2013-12-30 10:53 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\system32\secman.dll
2015-11-30 22:06 - 2013-12-30 10:52 - 00821824 _____ (Devguru Co., Ltd.) C:\Windows\system32\dgderapi.dll
2015-11-30 22:05 - 2015-11-30 22:07 - 00000000 ____D C:\Program Files\Samsung
2015-11-30 22:05 - 2015-11-30 22:06 - 00000000 ____D C:\ProgramData\Samsung
2015-11-30 22:04 - 2015-11-30 22:04 - 78749536 _____ (Samsung Electronics Co., Ltd.) C:\Users\martas\Downloads\KiesSetup.exe
2015-11-30 22:04 - 2015-11-30 22:04 - 00000000 ____D C:\Users\martas\AppData\Local\Downloaded Installations
2015-11-30 21:59 - 2015-11-30 21:58 - 00322760 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-11-30 21:59 - 2015-11-06 16:56 - 00794952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswC83C.tmp
2015-11-30 21:59 - 2015-11-06 16:56 - 00435464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswC851.tmp
2015-11-30 21:59 - 2015-10-16 07:42 - 00208664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswC852.tmp
2015-11-30 21:59 - 2015-10-16 07:42 - 00115640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswC853.tmp
2015-11-30 21:59 - 2015-10-16 07:42 - 00081728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswC83D.tmp
2015-11-30 21:59 - 2015-10-16 07:42 - 00076000 _____ (AVAST Software) C:\Windows\system32\Drivers\aswC84F.tmp
2015-11-30 21:59 - 2015-10-16 07:42 - 00049776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswC850.tmp
2015-11-30 21:59 - 2015-10-16 07:42 - 00024016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswC83E.tmp
2015-11-30 21:58 - 2015-11-30 21:58 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-11-26 09:22 - 2015-11-26 09:22 - 05577425 _____ C:\Users\martas\Downloads\prilohy_1950.zip
2015-11-26 09:20 - 2015-11-26 09:20 - 08182814 _____ C:\Users\martas\Downloads\message_1950.eml
2015-11-26 01:48 - 2015-11-26 01:48 - 00188307 _____ C:\Users\martas\Downloads\2012.pdf
2015-11-18 09:20 - 2015-11-18 09:20 - 00378144 _____ C:\Windows\system32\amdmiracast.dll
2015-11-18 09:20 - 2015-11-18 09:20 - 00128384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp32.dll
2015-11-18 09:20 - 2015-11-18 09:20 - 00110344 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave32.dll
2015-11-18 09:20 - 2015-11-18 09:20 - 00102616 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9pag.dll
2015-11-18 09:20 - 2015-11-18 09:20 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc32.dll
2015-11-18 09:20 - 2015-11-18 09:20 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom32.dll
2015-11-18 09:19 - 2015-11-18 09:19 - 09070320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumdag.dll
2015-11-18 09:17 - 2015-11-18 09:17 - 00267464 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2015-11-18 09:11 - 2015-11-18 09:11 - 21742080 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2015-11-18 09:08 - 2015-11-18 09:08 - 00203776 _____ C:\Windows\system32\clinfo.exe
2015-11-18 09:02 - 2015-11-18 09:02 - 41510912 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl.dll
2015-11-18 08:57 - 2015-11-18 08:57 - 00059392 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-11-18 08:49 - 2015-11-18 08:49 - 22348288 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl.dll
2015-11-18 06:48 - 2015-11-18 06:48 - 00562688 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr32.dll
2015-11-18 06:46 - 2015-11-18 06:46 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle32.dll
2015-11-18 06:14 - 2015-11-18 06:14 - 05223936 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle32.dll
2015-11-18 05:48 - 2015-11-18 05:48 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl32.dll
2015-11-18 05:08 - 2015-11-18 05:08 - 00683960 _____ C:\Windows\system32\atiapfxx.blb
2015-11-18 05:06 - 2015-11-18 05:06 - 00123392 _____ C:\Windows\system32\amdhdl32.dll
2015-11-18 04:43 - 2015-11-18 04:43 - 00367104 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2015-11-18 04:43 - 2015-11-18 04:43 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt.dll
2015-11-18 04:43 - 2015-11-18 04:43 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl.dll
2015-11-18 04:40 - 2015-11-18 04:40 - 25840128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atioglxx.dll
2015-11-18 04:40 - 2015-11-18 04:40 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd.dll
2015-11-18 04:40 - 2015-11-18 04:40 - 00670720 _____ (AMD) C:\Windows\system32\coinst_15.30.dll
2015-11-18 04:32 - 2015-11-18 04:32 - 00039424 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl.dll
2015-11-18 04:26 - 2015-11-18 04:26 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2015-11-18 04:26 - 2015-11-18 04:26 - 00198144 _____ C:\Windows\system32\dgtrayicon.exe
2015-11-18 04:25 - 2015-11-18 04:25 - 00449024 _____ (AMD) C:\Windows\system32\atieclxx.exe
2015-11-18 04:25 - 2015-11-18 04:25 - 00189952 _____ C:\Windows\system32\amdgfxinfo32.dll
2015-11-18 04:25 - 2015-11-18 04:25 - 00145408 _____ C:\Windows\system32\atieah32.exe
2015-11-18 04:25 - 2015-11-18 04:25 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2015-11-18 04:24 - 2015-11-18 04:24 - 00213504 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2015-11-18 04:22 - 2015-11-18 04:22 - 00164352 _____ (AMD) C:\Windows\system32\atitmmxx.dll
2015-11-18 04:10 - 2015-11-18 04:10 - 03471376 _____ C:\Windows\system32\atiumdva.cap
2015-11-18 03:58 - 2015-11-18 03:58 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu32.dll
2015-11-18 03:54 - 2015-11-18 03:54 - 00941568 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2015-11-18 03:54 - 2015-11-18 03:54 - 00070144 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2015-11-18 03:53 - 2015-11-18 03:53 - 00142336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atigktxx.dll
2015-11-18 03:52 - 2015-11-18 03:52 - 00538624 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2015-11-18 03:45 - 2015-11-18 03:45 - 00174592 _____ C:\Windows\system32\hsa-thunk.dll
2015-11-18 03:43 - 2015-11-18 03:43 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2015-11-15 18:46 - 2015-11-15 18:48 - 33103872 _____ C:\Users\martas\Downloads\Clovicek-05---Jak-si-nasbiral-boruvky.avi
2015-11-15 18:24 - 2015-11-15 18:26 - 32929792 _____ C:\Users\martas\Downloads\Clovicek-01---Jak-vykresal-prvni-jiskricku.avi
2015-11-15 17:34 - 2015-11-15 17:35 - 33103872 _____ C:\Users\martas\Downloads\Clovicek-02---Jak-mel-pro-strach-udelano.avi
2015-11-15 14:58 - 2015-11-15 14:58 - 00235490 _____ C:\Users\martas\Downloads\bonusove_akce-partneru_iBODU.pdf
2015-11-13 13:11 - 2015-11-13 13:11 - 02359350 _____ C:\Users\martas\Downloads\Zad.brzdy.bmp
2015-11-13 11:52 - 2015-11-13 11:53 - 306107698 _____ C:\Users\martas\Downloads\2004_05_13_FC_Burival-Fyzika_iontovych_poli-lq.avi
2015-11-13 09:25 - 2015-11-13 09:25 - 01829410 _____ C:\Users\martas\Desktop\2179855.PDF
2015-11-08 21:40 - 2015-11-08 21:40 - 00141123 _____ C:\Users\martas\Downloads\ekomat_technicky_list_pasy_ekoflex_s_petz_r2015-02-16.pdf
2015-11-07 16:11 - 2015-11-07 17:02 - 903036812 _____ C:\Users\martas\Downloads\Ptaci-ulet-cz-dabing.csfd-59-animovany.avi

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-05 14:53 - 2015-02-04 17:13 - 00000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-12-05 14:39 - 2014-12-29 21:58 - 00000964 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-05 14:15 - 2014-12-29 21:58 - 00000960 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-05 14:15 - 2013-08-22 08:23 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-05 14:14 - 2015-03-23 21:39 - 00000000 ____D C:\AdwCleaner
2015-12-05 14:01 - 2013-08-22 09:17 - 00000000 ____D C:\Windows\Camera
2015-12-05 13:54 - 2013-08-22 07:21 - 00000000 ____D C:\Windows
2015-12-05 13:15 - 2015-10-25 09:18 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-12-05 02:49 - 2013-08-22 09:05 - 00000000 ____D C:\Windows\CbsTemp
2015-12-05 02:48 - 2015-04-19 13:15 - 00000000 ____D C:\Users\martas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-12-05 02:48 - 2015-04-19 13:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-12-05 02:48 - 2015-04-19 13:15 - 00000000 ____D C:\Program Files\WinRAR
2015-12-05 02:48 - 2015-01-10 18:32 - 00001044 _____ C:\Users\Public\Desktop\VLC media player.lnk
2015-12-05 02:47 - 2015-01-02 15:06 - 00000000 ____D C:\Program Files\Opera
2015-12-05 02:01 - 2014-12-29 23:35 - 00000000 ____D C:\Users\martas\AppData\Local\Adobe
2015-12-04 22:24 - 2014-12-30 02:03 - 00000000 ____D C:\Users\martas\AppData\Roaming\Audacity
2015-12-04 09:59 - 2013-08-22 07:21 - 00000000 ____D C:\Windows\inf
2015-12-03 15:53 - 2013-08-22 07:13 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-12-02 22:45 - 2015-08-26 10:07 - 00000000 ____D C:\Users\martas\AppData\Roaming\Raptr
2015-12-02 22:43 - 2014-12-13 22:34 - 00000000 ____D C:\Program Files\Raptr
2015-12-02 22:42 - 2014-12-13 22:33 - 00000000 ____D C:\Program Files\AMD
2015-12-02 22:33 - 2014-12-13 22:33 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-02 22:31 - 2014-12-13 22:32 - 00000000 ____D C:\AMD
2015-12-02 19:48 - 2014-12-13 23:36 - 00738666 _____ C:\Windows\system32\perfh005.dat
2015-12-02 19:48 - 2014-12-13 23:36 - 00151408 _____ C:\Windows\system32\perfc005.dat
2015-12-02 19:48 - 2014-03-18 08:59 - 01745984 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-30 22:42 - 2015-03-08 23:06 - 00847360 ___SH C:\Users\martas\Downloads\Thumbs.db
2015-11-30 22:06 - 2014-12-14 00:48 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2015-11-30 21:59 - 2015-03-22 17:54 - 00435464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-11-30 21:59 - 2015-03-22 17:54 - 00209432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-11-30 21:59 - 2015-03-22 17:54 - 00117200 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-11-30 21:58 - 2015-03-22 17:54 - 00081728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-11-30 21:58 - 2015-03-22 17:54 - 00081168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-11-30 21:58 - 2015-03-22 17:54 - 00049776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-11-30 21:58 - 2015-03-22 17:54 - 00024016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-11-30 21:56 - 2015-03-22 17:54 - 00794952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-11-28 08:18 - 2015-03-08 12:51 - 00101376 ___SH C:\Users\martas\Desktop\Thumbs.db
2015-11-21 19:16 - 2015-01-10 18:32 - 00000000 ____D C:\Users\martas\AppData\Roaming\vlc
2015-11-18 09:20 - 2014-11-21 03:44 - 10907328 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx32.dll
2015-11-18 09:20 - 2014-11-21 03:44 - 01229984 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx32.dll
2015-11-18 09:20 - 2014-11-21 03:44 - 00133016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxpag.dll
2015-11-18 09:19 - 2014-11-21 03:43 - 08089248 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumdva.dll
2015-11-11 18:40 - 2015-11-03 11:56 - 00000000 ____D C:\Users\martas\Desktop\písničky
2015-11-09 16:59 - 2015-04-19 13:20 - 00000000 ____D C:\Users\martas\AppData\Roaming\SpinTires

==================== Files in the root of some directories =======

2014-12-14 00:52 - 2014-12-14 00:52 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\martas\AppData\Local\Temp\AutoRun.exe
C:\Users\martas\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\martas\AppData\Local\Temp\EAInstall.dll
C:\Users\martas\AppData\Local\Temp\FFSetup3.8.0.0.exe
C:\Users\martas\AppData\Local\Temp\Quarantine.exe
C:\Users\martas\AppData\Local\Temp\radeon-crimson-15.11-minimalsetup.exe
C:\Users\martas\AppData\Local\Temp\raptrpatch.exe
C:\Users\martas\AppData\Local\Temp\raptr_stub.exe
C:\Users\martas\AppData\Local\Temp\sqlite3.dll
C:\Users\martas\AppData\Local\Temp\tmp5F3A.exe
C:\Users\martas\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-12-02 19:13

==================== End of FRST.txt ============================

Fix result of Farbar Recovery Scan Tool (x86) Version:05-12-2015
Ran by martas (2015-12-06 08:02:39) Run:2
Running from C:\Users\martas\Desktop
Loaded Profiles: martas & (Available Profiles: martas)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CloseProcesses:
HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM\...\Run: [seznam-listicka-distribuce] => C:\Program Files\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\...\Run: [AdobeBridge] => [X]
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
2015-12-05 14:04 - 2015-12-05 14:04 - 01736704 _____ C:\Users\martas\Desktop\adwcleaner_5.023.exe
2015-12-05 13:57 - 2015-12-05 13:57 - 00008122 _____ C:\MBAM log2.txt
2015-12-05 13:54 - 2015-12-05 14:56 - 00012140 _____ C:\Users\martas\Desktop\FRST.txt
2015-12-05 14:49 - 2015-12-05 14:49 - 00027219 _____ C:\Users\martas\Desktop\Addition.txt
2015-12-05 14:48 - 2015-12-05 14:48 - 00015327 _____ C:\Users\martas\Desktop\LM.bat
2015-12-05 13:49 - 2015-12-05 13:49 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher (3).exe
2015-12-05 13:49 - 2015-12-05 13:49 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher (2).exe
2015-12-05 13:47 - 2015-12-05 13:47 - 00086876 _____ C:\Users\martas\Downloads\3BF0.tmp
2015-12-05 13:46 - 2015-12-05 13:47 - 00112640 _____ (forum.viry.cz) C:\Users\martas\Downloads\FRSTLauncher (1).exe
2015-12-05 13:11 - 2015-12-05 13:11 - 00008121 _____ C:\MBAM log.txt
2015-12-05 12:56 - 2015-12-05 12:56 - 00927824 _____ (Google Inc.) C:\Users\martas\Downloads\ChromeSetup (1).exe
2015-12-05 14:14 - 2015-03-23 21:39 - 00000000 ____D C:\AdwCleaner
Task: {5CCBEDEC-7C42-40DF-87A1-2F35819964B6} - System32\Tasks\AutoPico Daily Restart => C:\!!\wpi\install\Activators\KMS\AutoPico.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
FirewallRules: [{632E6896-EC3A-43E2-9708-968A7CE08658}] => (Allow) C:\!!\wpi\install\Activators\KMS\AutoPico.exe
FirewallRules: [{2FF32CB3-B53F-4B5A-83F8-DCD31CE73AD6}] => (Allow) C:\!!\wpi\install\Activators\KMS\AutoPico.exe
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => value not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce => value not found.
HKU\S-1-5-21-2878440334-3389864573-2966859060-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
"C:\Users\martas\Desktop\adwcleaner_5.023.exe" => not found.
"C:\MBAM log2.txt" => not found.
"C:\Users\martas\Desktop\FRST.txt" => not found.
"C:\Users\martas\Desktop\Addition.txt" => not found.
"C:\Users\martas\Desktop\LM.bat" => not found.
"C:\Users\martas\Downloads\FRSTLauncher (3).exe" => not found.
"C:\Users\martas\Downloads\FRSTLauncher (2).exe" => not found.
"C:\Users\martas\Downloads\3BF0.tmp" => not found.
"C:\Users\martas\Downloads\FRSTLauncher (1).exe" => not found.
"C:\MBAM log.txt" => not found.
"C:\Users\martas\Downloads\ChromeSetup (1).exe" => not found.
"C:\AdwCleaner" => not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5CCBEDEC-7C42-40DF-87A1-2F35819964B6}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5CCBEDEC-7C42-40DF-87A1-2F35819964B6}" => key removed successfully.
C:\Windows\System32\Tasks\AutoPico Daily Restart => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoPico Daily Restart" => key removed successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{632E6896-EC3A-43E2-9708-968A7CE08658} => value removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2FF32CB3-B53F-4B5A-83F8-DCD31CE73AD6} => value removed successfully.
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
EmptyTemp: => 1.8 GB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 08:03:37 ====

Takze jeste uklidime.

• Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
• Oznacte jen moznost "Remove disinfection tools"
• kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

Vřelé díky a pěkné s předstihem pěkné svátky přeji, klid a pohodu hlavně.

Pred zapoctovym tydnem je klidu a pohody nedostatek, ale na Vanoce si to vynahradime. Pohodove svatky i Vam.

Nemate zac, rad jsem pomohl


Mejte se krasne a treba zase nekdy