VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

reklamy v prohlížečích, samovolné restarty

https://forum.viry.cz:443/viewtopic.php?t=148109

Stránka 1 z 1

reklamy v prohlížečích, samovolné restarty

Napsal: 27 úno 2016 23:13
od pavel17
Zdravím,
prosím o kontrolu logu..v prohlížečích jsou reklamní okna, při prohlížení se smažou všechny otevřené listy a přesměruje se to na nějaké reklamy a zcela neznámé stránky, to samé při kliknutí na nějaký odkaz, načítání všeho je velmi pomalé a často končí zavřením prohlížečů (dělá na opeře, chrome..). Navíc se tak minimálně jednou denně notebook sám od sebe restartuje a to je cca 3 měsíce nově koupený..děkuji za pomoc a rady


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:27-02-2016
Ran by Ivushka (administrator) on LAPTOP-9N491QR6 (27-02-2016 13:50:26)
Running from C:\Users\Ivushka\Desktop
Loaded Profiles: Ivushka (Available Profiles: Ivushka)
Platform: Windows 10 Home (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\tbaseprovisioning.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagent.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
(Intel Security, Inc.) C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe
() C:\Program Files\update\UpdateAgent.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe
(Lenovo) C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe
(Lenovo) C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.8.203.0\McCSPServiceHost.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Lenovo) C:\Program Files (x86)\Lenovo\CCSDK\WinGather.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\Core\mchost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.201.11370.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.16941.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
(Lenovo) C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe
() C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.31\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.31\opera.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\Core\mchost.exe
(McAfee, Inc.) C:\Program Files\mcafee\virusscan\McVsShld.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\Core\mchost.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [LenovoUtility] => C:\Program Files\Lenovo\LenovoUtility\utility.exe [791848 2015-10-31] ()
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040792 2015-07-06] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-06-29] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-06-29] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-06-29] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3743648 2015-07-13] (ELAN Microelectronics Corp.)
HKLM\...\Run: [Bluetooth] => C:\Program Files\Lenovo\Bluetooth Software\bttray.exe [535808 2015-07-27] (Broadcom Corporation.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe [110008 2015-07-20] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe [492472 2015-07-20] (CyberLink Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-07-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [179624 2016-02-18] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [3873704 2016-02-01] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50599552 2016-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [801816 2013-09-27] (ZONER software)
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\...\RunOnce: [Uninstall C:\Users\Ivushka\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Ivushka\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\...\MountPoints2: F - "F:\Setup.exe"
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\Parameters: [NameServer] 82.163.142.7 95.211.158.134
Tcpip\..\Interfaces\{11277b43-94d5-4736-b982-9f85b914a64a}: [NameServer] 208.87.151.22,208.87.151.23
Tcpip\..\Interfaces\{11277b43-94d5-4736-b982-9f85b914a64a}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{26b11a49-585f-4b43-a90c-9af3c3d7b25b}: [NameServer] 208.87.151.22,208.87.151.23
Tcpip\..\Interfaces\{45db014e-d3fa-4e00-a4e6-51aa27850723}: [NameServer] 208.87.151.22,208.87.151.23
Tcpip\..\Interfaces\{45db014e-d3fa-4e00-a4e6-51aa27850723}: [DhcpNameServer] 82.163.142.7
Tcpip\..\Interfaces\{67e395df-1999-4526-aa3d-7bbb1fbf1db1}: [NameServer] 208.87.151.22,208.87.151.23
Tcpip\..\Interfaces\{67e395df-1999-4526-aa3d-7bbb1fbf1db1}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6c208d38-fb82-4add-a97a-cf282674e3c6}: [NameServer] 208.87.151.22,208.87.151.23
Tcpip\..\Interfaces\{6c208d38-fb82-4add-a97a-cf282674e3c6}: [DhcpNameServer] 82.163.142.7
Tcpip\..\Interfaces\{a327b7a0-5f2d-4923-9425-e8bd9a636c4d}: [NameServer] 208.87.151.22,208.87.151.23
Tcpip\..\Interfaces\{ba4753c0-3fc8-427c-bf6f-295c52d01c81}: [NameServer] 208.87.151.22,208.87.151.23
Tcpip\..\Interfaces\{d1328491-6ca5-415c-983f-c21321ed9d79}: [NameServer] 208.87.151.22,208.87.151.23
Tcpip\..\Interfaces\{f52d89b9-754f-4ff0-8bab-37b5acb90c2d}: [NameServer] 208.87.151.22,208.87.151.23
Tcpip\..\Interfaces\{f52d89b9-754f-4ff0-8bab-37b5acb90c2d}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{f7c37147-27e5-4300-87ab-c5acc9277eb8}: [NameServer] 208.87.151.22,208.87.151.23
Tcpip\..\Interfaces\{f7c37147-27e5-4300-87ab-c5acc9277eb8}: [DhcpNameServer] 82.163.142.7

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo15.msn.com/?pc=LCTE
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://mystart.lenovo.com
SearchScopes: HKU\S-1-5-21-3127553534-2473892740-565383663-1002 -> DefaultScope {133AF9E2-55C2-4D66-B199-3EB99A9BA04D} URL =
SearchScopes: HKU\S-1-5-21-3127553534-2473892740-565383663-1002 -> {133AF9E2-55C2-4D66-B199-3EB99A9BA04D} URL =
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2016-01-08] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2016-01-08] (McAfee, Inc.)

FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2016-01-08] ()
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2016-01-08] ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-27] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [jid1-xNAj4KGyf5wyhg@jetpack] - C:\Program Files (x86)\Faster Web\faster-web.xpi => not found
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2016-02-20] [not signed]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR Profile: C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-27]
CHR Extension: (Google Docs) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-27]
CHR Extension: (Google Drive) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-27]
CHR Extension: (YouTube) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-27]
CHR Extension: (Google Search) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-27]
CHR Extension: (Google Sheets) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-27]
CHR Extension: (Google Docs Offline) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-02-27]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-02-27]
CHR Extension: (Gmail) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-27]

Opera:
=======
OPR StartupUrls: "hxxp://seznam.cz/"

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-07-21] (Advanced Micro Devices, Inc.) [File not signed]
S2 amdacpusrsvc; C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe [121856 2015-07-21] (Advanced Micro Devices) [File not signed]
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [604144 2016-02-01] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [3881184 2016-02-01] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1045928 2016-02-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [561104 2016-02-01] (AVG Technologies CZ, s.r.o.)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2286872 2015-07-27] (Broadcom Corporation.)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [980224 2015-07-27] (Broadcom Corporation.)
R2 CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [650680 2015-07-29] (Lenovo)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [135072 2015-07-13] (ELAN Microelectronics Corp.)
R2 FastbootService; C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe [288768 2015-11-01] (Lenovo) [File not signed]
R2 GDCAgent; C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe [1155512 2015-07-29] (Lenovo)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 ImControllerService; c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [35784 2015-11-13] (Lenovo Group Limited)
R2 LenovoPortalService; C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe [24312 2015-11-01] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [271296 2015-07-17] (Lenovo)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [863448 2016-01-08] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [338208 2015-03-19] (McAfee, Inc.)
R2 McBootDelayStartSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.8.203.0\McCSPServiceHost.exe [1694152 2015-12-02] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [681680 2016-01-08] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [234192 2015-11-18] (McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [380896 2016-01-21] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [275368 2015-11-18] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [902112 2015-12-14] (Intel Security, Inc.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 tbaseprovisioning; C:\Windows\SysWOW64\tbaseprovisioning.exe [60432 2015-06-22] (Advanced Micro Devices, Inc.)
R2 UpdateAgentService; C:\Program Files\update\UpdateAgent.exe [226216 2015-11-01] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 amdacpksd; C:\Windows\system32\drivers\amdacpksd.sys [297672 2015-07-21] (Advanced Micro Devices)
R3 AmdGpio2; C:\Windows\System32\drivers\AmdGpio2.sys [26136 2015-05-12] (Advanced Micro Devices, INC.)
S3 amdkmcsp; C:\Windows\system32\DRIVERS\amdkmcsp.sys [101104 2015-06-22] (Advanced Micro Devices, Inc. )
R0 amdpsp; C:\Windows\System32\DRIVERS\amdpsp.sys [277240 2015-06-22] (Advanced Micro Devices, Inc. )
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-07-21] (Advanced Micro Devices)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21632 2016-01-07] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [184240 2015-11-06] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [315312 2016-01-05] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-08] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [398256 2015-08-14] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [260528 2016-01-22] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [42416 2015-12-04] (AVG Technologies CZ, s.r.o.)
R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [23472 2016-01-08] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [315840 2015-12-16] (AVG Technologies CZ, s.r.o.)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [199472 2015-07-17] (Broadcom Corporation.)
R3 BCMWL63A; C:\Windows\system32\DRIVERS\bcmwl63a.sys [11254536 2015-07-31] (Broadcom Corp)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [79248 2015-11-25] (McAfee, Inc.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
R0 Fastboot; C:\Windows\System32\DRIVERS\Fastboot.sys [67608 2015-11-01] (Windows (R) Win 7 DDK provider) [File not signed]
R0 FBFsmon; C:\Windows\System32\DRIVERS\FBFsmon.sys [39448 2015-11-01] (Windows (R) Win 7 DDK provider) [File not signed]
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [207208 2015-05-19] (McAfee, Inc.)
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [419624 2015-11-25] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [351144 2015-11-25] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [83096 2015-11-25] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [496368 2015-11-25] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [846080 2015-11-25] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [539496 2015-11-20] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [109480 2015-11-20] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [245096 2015-11-25] (McAfee, Inc.)
S3 NETwNe64; C:\Windows\System32\drivers\NETwew01.sys [3354384 2015-07-10] (Intel Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-06-22] (Realtek )
S3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [411712 2015-05-18] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [3059416 2015-06-11] (Realtek Semiconductor Corp.)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-27 13:50 - 2016-02-27 13:51 - 00023120 _____ C:\Users\Ivushka\Desktop\FRST.txt
2016-02-27 13:50 - 2016-02-27 13:50 - 00000000 ____D C:\FRST
2016-02-27 13:48 - 2016-02-27 13:49 - 02371072 _____ (Farbar) C:\Users\Ivushka\Desktop\FRST64.exe
2016-02-27 13:47 - 2016-02-27 13:47 - 00112640 _____ C:\Users\Ivushka\Desktop\FRSTLauncher.exe
2016-02-27 13:35 - 2016-02-27 13:35 - 00016148 _____ C:\Windows\system32\LAPTOP-9N491QR6_Ivushka_HistoryPrediction.bin
2016-02-27 12:18 - 2016-01-13 19:13 - 00000967 _____ C:\Windows\system32\Drivers\etc\hosts.20160227-121805.backup
2016-02-27 10:38 - 2016-02-27 10:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2016-02-27 10:37 - 2016-02-27 10:37 - 00004208 _____ C:\Windows\System32\Tasks\Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse
2016-02-27 09:53 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
2016-02-27 09:45 - 2016-02-27 09:45 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2016-02-27 09:44 - 2016-02-27 12:16 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-02-27 09:44 - 2016-02-27 09:53 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-02-27 09:44 - 2016-02-27 09:44 - 00001467 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-02-27 09:44 - 2016-02-27 09:44 - 00001455 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2016-02-27 09:44 - 2016-02-27 09:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-02-27 09:44 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2016-02-27 07:57 - 2016-02-27 07:57 - 00000000 ____D C:\ProgramData\b7b70ff3-5df7-0
2016-02-27 07:52 - 2016-02-27 09:32 - 00000000 ____D C:\ProgramData\4849aee0
2016-02-27 07:52 - 2016-02-27 07:52 - 00003884 _____ C:\Windows\System32\Tasks\{1FB6B9DA-6CB5-B114-F30F-B7B7489CBB7F}
2016-02-27 07:52 - 2016-02-27 07:52 - 00000000 ____D C:\ProgramData\b7b70ff3-6ca1-0
2016-02-27 07:52 - 2016-02-27 07:52 - 00000000 ____D C:\ProgramData\{23ecb912-112c-1}
2016-02-27 07:52 - 2016-02-27 07:52 - 00000000 ____D C:\ProgramData\{180a3f72-312c-0}
2016-02-27 07:52 - 2016-02-27 07:52 - 00000000 ____D C:\ProgramData\{0fdbf0cc-512c-1}
2016-02-27 07:52 - 2016-02-27 07:52 - 00000000 ____D C:\ProgramData\{0e9588ee-112c-0}
2016-02-26 17:22 - 2016-02-27 12:50 - 00004020 _____ C:\Windows\System32\Tasks\Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse
2016-02-26 16:24 - 2016-02-26 17:10 - 730384384 _____ C:\Users\Ivushka\Downloads\Back-To-The-Future-I.avi
2016-02-26 15:53 - 2016-02-26 16:03 - 144964873 _____ C:\Users\Ivushka\Downloads\2.Broke.Girls.S05E13.HDTV.x264-LOL.mp4
2016-02-26 15:51 - 2016-02-26 16:06 - 203212192 _____ C:\Users\Ivushka\Downloads\The.Big.Bang.Theory.S09E17.720p.HDTV.x264-DIMENSION---CZ-titulky.avi
2016-02-25 19:56 - 2016-02-25 19:56 - 00262144 ____N C:\Windows\Minidump\022516-47390-01.dmp
2016-02-25 18:59 - 2016-02-25 19:13 - 187442024 _____ C:\Users\Ivushka\Downloads\The.Middle.S07E16.hdtv-lol.mp4
2016-02-25 18:55 - 2016-02-25 19:07 - 189217247 _____ C:\Users\Ivushka\Downloads\Baby.Daddy.S05E04.HDTV.x264-FLEET.mp4
2016-02-25 18:44 - 2016-02-25 18:54 - 126415823 _____ C:\Users\Ivushka\Downloads\modern.family.s07e14.720p.hdtv.hevc.x265.rmteam.mkv
2016-02-24 20:53 - 2016-02-24 21:01 - 125693967 _____ C:\Users\Ivushka\Downloads\mom.S03E10.hdtv-lol[ettv].mp4
2016-02-24 18:35 - 2016-02-24 18:43 - 121529099 _____ C:\Users\Ivushka\Downloads\american.dad.s12e05.720p.hdtv.hevc.x265.rmteam.mkv
2016-02-22 20:42 - 2016-02-22 18:49 - 00038494 _____ C:\Users\Ivushka\Downloads\Telenovela.S01E08.HDTV.x264-FLEET.srt
2016-02-22 20:41 - 2016-02-22 20:41 - 00015989 _____ C:\Users\Ivushka\Downloads\telenovela-S01E08-hdtv-By-stiletto42.zip
2016-02-22 20:17 - 2016-02-22 20:17 - 00014516 _____ C:\Users\Ivushka\Downloads\telenovela-S01E07-hdtv-By-stiletto42.zip
2016-02-22 20:17 - 2016-02-04 19:49 - 00036108 _____ C:\Users\Ivushka\Downloads\Telenovela.S01E07.srt
2016-02-22 18:59 - 2016-02-22 19:12 - 177100218 _____ C:\Users\Ivushka\Downloads\The-Middle---Průměrňákovi-S07E15-CZtit-v-OBRAZE.avi
2016-02-21 20:03 - 2016-02-21 20:11 - 143194146 _____ C:\Users\Ivushka\Downloads\The.Simpsons.S27E14.HDTV.x264-KILLERS.mp4
2016-02-21 19:53 - 2016-02-21 19:53 - 00262144 ____N C:\Windows\Minidump\022116-68328-01.dmp
2016-02-21 19:50 - 2016-02-21 20:03 - 143194760 _____ C:\Users\Ivushka\Downloads\The.Simpsons.S27E14.HDTV.x264-KILLERS.mp4.opdownload
2016-02-21 18:57 - 2016-02-21 18:57 - 00000000 ____D C:\Users\Ivushka\Documents\Pinnacle
2016-02-21 18:45 - 2016-02-21 18:45 - 00000000 ____D C:\Users\Ivushka\Documents\Projekty aplikace Pinnacle
2016-02-21 17:32 - 2016-02-21 19:55 - 00000000 ____D C:\Users\Ivushka\Desktop\videa
2016-02-21 17:19 - 2016-02-21 17:19 - 00003584 _____ C:\Users\Ivushka\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-02-21 17:18 - 2016-02-21 19:12 - 00000000 ____D C:\Users\Ivushka\temp
2016-02-21 17:17 - 2016-02-21 17:17 - 00000197 _____ C:\Users\Ivushka\AppData\Roaming\LAPTOP-9N491QR6.MTBF.txt
2016-02-21 17:17 - 2016-02-21 17:17 - 00000000 ____D C:\Users\Ivushka\Documents\InstantCDDVD
2016-02-21 17:16 - 2016-02-21 19:18 - 00000000 ____D C:\Users\Ivushka\AppData\Local\Pinnacle
2016-02-21 16:39 - 2016-02-21 19:18 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI
2016-02-20 20:36 - 2016-02-20 20:36 - 00262144 ____N C:\Windows\Minidump\022016-59031-01.dmp
2016-02-19 20:16 - 2016-02-19 20:16 - 00000000 ____D C:\ProgramData\Intel Security
2016-02-19 20:15 - 2016-02-19 20:15 - 00000000 ____D C:\Program Files\Common Files\Intel Security
2016-02-19 19:31 - 2016-02-19 19:31 - 00000000 ____D C:\ProgramData\PhotoMaster
2016-02-19 15:55 - 2016-02-19 17:41 - 1876964424 _____ C:\Users\Ivushka\Downloads\Rosamunde-Pilcher-2014-Stíny-minulosti-CZ-Maxvencamax.avi
2016-02-19 15:12 - 2016-02-19 15:23 - 201169296 _____ C:\Users\Ivushka\Downloads\The.Big.Bang.Theory.S09E16.720p.HDTV.x264-DIMENSION-CZ-titulky.avi
2016-02-18 17:59 - 2016-02-18 18:17 - 281022301 _____ C:\Users\Ivushka\Downloads\SpongeBob.SquarePants.S09E04.Eek.An.Urchin.-.Squids.Defense.480p.WEB-DL.AAC2.0.H.264-YFN.mkv
2016-02-17 19:36 - 2016-02-17 19:54 - 275201689 _____ C:\Users\Ivushka\Downloads\SpongeBob.SquarePants.S09E03.Patrick-Man.-.Garys.New.Toy.480p.WEB-DL.AAC2.0.H.264-YFN.mkv
2016-02-17 19:07 - 2016-02-17 19:24 - 281244974 _____ C:\Users\Ivushka\Downloads\SpongeBob.SquarePants.S09E02.License.to.Milkshake.-.Squid.Baby.480p.WEB-DL.AAC2.0.H.264-YFN.mkv
2016-02-17 18:46 - 2016-02-17 19:02 - 275492552 _____ C:\Users\Ivushka\Downloads\SpongeBob.SquarePants.S09E01.Extreme.Spots.-.Squirrel.Record.480p.WEB-DL.AAC2.0.H.264-YFN.mkv
2016-02-17 17:57 - 2016-02-17 18:09 - 175304560 _____ C:\Users\Ivushka\Downloads\American.Dad.S12E04.720p.HDTV.x26-HEVC.Sammy.mp4
2016-02-16 19:37 - 2016-02-16 19:51 - 206057877 _____ C:\Users\Ivushka\Downloads\Telenovela.S01E09.HDTV.x264-FLEET.mp4
2016-02-16 19:04 - 2016-02-16 19:22 - 215694469 _____ C:\Users\Ivushka\Downloads\Telenovela.S01E08.HDTV.x264-FLEET.mp4
2016-02-16 17:37 - 2016-02-16 17:37 - 00000000 ____D C:\Users\Default\AppData\Roaming\AVG
2016-02-16 17:37 - 2016-02-16 17:37 - 00000000 ____D C:\Users\Default\AppData\Local\AVG
2016-02-16 17:37 - 2016-02-16 17:37 - 00000000 ____D C:\Users\Default User\AppData\Roaming\AVG
2016-02-16 17:37 - 2016-02-16 17:37 - 00000000 ____D C:\Users\Default User\AppData\Local\AVG
2016-02-16 17:37 - 2016-02-15 10:30 - 00048552 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\uxt1394.tmp
2016-02-16 17:25 - 2016-02-16 18:39 - 00033018 _____ C:\Users\Ivushka\Desktop\Záloha zápisky z USA.odt
2016-02-15 17:34 - 2016-02-15 18:18 - 00000000 ____D C:\Users\Ivushka\Desktop\pro mamku
2016-02-15 16:49 - 2016-02-15 16:58 - 171351728 _____ C:\Users\Ivushka\Downloads\The-Simpsons-S27E13-CZtit-V-OBRAZE.avi
2016-02-14 19:02 - 2016-02-15 18:22 - 00000000 ____D C:\Users\Ivushka\Desktop\Getty výběr
2016-02-13 21:16 - 2016-02-13 22:06 - 879340755 _____ C:\Users\Ivushka\Downloads\Telenovela.S01E07.mkv
2016-02-13 20:55 - 2016-02-13 21:15 - 181306926 _____ C:\Users\Ivushka\Downloads\Telenovela---S01E05---The-Rivals-CZ-tit.avi
2016-02-13 20:55 - 2016-02-13 21:14 - 178858962 _____ C:\Users\Ivushka\Downloads\Telenovela---S01E04---The-Kiss-CZ-tit.avi
2016-02-13 19:27 - 2016-02-13 19:38 - 179840320 _____ C:\Users\Ivushka\Downloads\Telenovela---S01E03---Trapped-in-a-Well-CZ-tit.avi
2016-02-13 19:26 - 2016-02-13 19:40 - 179390208 _____ C:\Users\Ivushka\Downloads\Telenovela---S01E02---Evil-Twin-CZ-tit.avi
2016-02-13 19:08 - 2016-02-13 19:21 - 221400265 _____ C:\Users\Ivushka\Downloads\Telenovela.S01E01.HDTV.x264-KILLERS[ettv].mp4
2016-02-13 18:55 - 2016-02-13 19:08 - 221400879 _____ C:\Users\Ivushka\Downloads\Telenovela.S01E01.HDTV.x264-KILLERS[ettv].mp4.opdownload
2016-02-13 17:43 - 2016-02-13 17:57 - 181471349 _____ C:\Users\Ivushka\Downloads\The-Simpsons-S27E02-vložené-titulky-cz-novinka-2015.mp4
2016-02-13 13:13 - 2016-02-13 15:32 - 733900801 _____ C:\Users\Ivushka\Downloads\148.Poznas-jak-to-prijde--How-Do-You-Know--ang+cz.tit.2010-novinky.fel.avi
2016-02-13 13:10 - 2016-02-13 15:36 - 735916032 _____ C:\Users\Ivushka\Downloads\Holka-Na-Roztrhání---CZ-Dabing.avi
2016-02-13 11:12 - 2016-02-13 12:48 - 00000000 ____D C:\Users\Ivushka\Desktop\Veverky
2016-02-12 15:40 - 2016-02-12 15:53 - 202581484 _____ C:\Users\Ivushka\Downloads\The.Big.Bang.Theory.S09E15.720p.HDTV.X264-DIMENSION-s-CZ-titulky.avi
2016-02-12 15:29 - 2016-02-12 15:40 - 202582098 _____ C:\Users\Ivushka\Downloads\The.Big.Bang.Theory.S09E15.720p.HDTV.X264-DIMENSION-s-CZ-titulky.avi.opdownload
2016-02-10 15:12 - 2016-02-21 19:41 - 00010094 _____ C:\Users\Ivushka\Desktop\Bez názvu 1.odt
2016-02-10 14:41 - 2016-02-10 14:41 - 19613888 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2016-02-09 20:02 - 2016-01-30 22:25 - 01951872 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-02-09 20:02 - 2016-01-30 22:25 - 01248896 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-02-09 20:02 - 2016-01-30 22:24 - 01824880 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-02-09 20:02 - 2016-01-30 22:23 - 02601160 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-02-09 20:02 - 2016-01-30 22:23 - 01420392 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-02-09 20:02 - 2016-01-30 22:06 - 01535032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-02-09 20:02 - 2016-01-30 22:06 - 01531368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-02-09 20:02 - 2016-01-30 22:06 - 00809336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2016-02-09 20:02 - 2016-01-30 22:04 - 01811360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-02-09 20:02 - 2016-01-30 22:04 - 01180696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-02-09 20:02 - 2016-01-30 21:38 - 21873152 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-02-09 20:02 - 2016-01-30 21:34 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\ngckeyenum.dll
2016-02-09 20:02 - 2016-01-30 21:33 - 24593920 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-02-09 20:02 - 2016-01-30 21:33 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\IoTAssignedAccessLockFramework.dll
2016-02-09 20:02 - 2016-01-30 21:29 - 11557888 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-02-09 20:02 - 2016-01-30 21:29 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rasman.dll
2016-02-09 20:02 - 2016-01-30 21:26 - 06787072 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-02-09 20:02 - 2016-01-30 21:26 - 03793408 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-02-09 20:02 - 2016-01-30 21:25 - 12504576 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-02-09 20:02 - 2016-01-30 21:25 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-02-09 20:02 - 2016-01-30 21:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-02-09 20:02 - 2016-01-30 21:25 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-02-09 20:02 - 2016-01-30 21:24 - 00784384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-02-09 20:02 - 2016-01-30 21:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-02-09 20:02 - 2016-01-30 21:24 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-02-09 20:02 - 2016-01-30 21:23 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-02-09 20:02 - 2016-01-30 21:22 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2016-02-09 20:02 - 2016-01-30 21:20 - 02849792 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-02-09 20:02 - 2016-01-30 21:19 - 01602560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-02-09 20:02 - 2016-01-30 21:19 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\NetworkDesktopSettings.dll
2016-02-09 20:02 - 2016-01-30 21:19 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IoTAssignedAccessLockFramework.dll
2016-02-09 20:02 - 2016-01-30 21:18 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-02-09 20:02 - 2016-01-30 21:18 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-02-09 20:02 - 2016-01-30 21:17 - 19324928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-02-09 20:02 - 2016-01-30 21:17 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2016-02-09 20:02 - 2016-01-30 21:16 - 09889280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-02-09 20:02 - 2016-01-30 21:16 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-02-09 20:02 - 2016-01-30 21:14 - 07525376 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-02-09 20:02 - 2016-01-30 21:14 - 03588096 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-02-09 20:02 - 2016-01-30 21:13 - 04791808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-02-09 20:02 - 2016-01-30 21:13 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasman.dll
2016-02-09 20:02 - 2016-01-30 21:13 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\ztrace_maps.dll
2016-02-09 20:02 - 2016-01-30 21:11 - 05156352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-02-09 20:02 - 2016-01-30 21:11 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-02-09 20:02 - 2016-01-30 21:11 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-02-09 20:02 - 2016-01-30 21:11 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-02-09 20:02 - 2016-01-30 21:07 - 18802176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-02-09 20:02 - 2016-01-30 21:06 - 02316800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-02-09 20:02 - 2016-01-30 21:05 - 01380864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-02-09 20:02 - 2016-01-30 21:05 - 00574464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2016-02-09 20:02 - 2016-01-30 21:05 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-02-09 20:02 - 2016-01-30 21:04 - 00100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2016-02-09 20:02 - 2016-01-30 21:02 - 03580416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-02-09 20:02 - 2016-01-30 21:02 - 00768000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-02-09 20:02 - 2016-01-30 21:00 - 11263488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-02-09 20:02 - 2016-01-30 20:59 - 05457408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-02-09 20:02 - 2016-01-30 20:58 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ztrace_maps.dll
2016-02-09 19:00 - 2016-02-09 19:06 - 83816128 _____ C:\Users\Ivushka\Downloads\American.Dad.S12E03.HDTV.x264-FLEET.mp4
2016-02-07 18:44 - 2016-02-19 19:01 - 00000000 ____D C:\Users\Ivushka\Desktop\Výběr fotka
2016-02-03 19:30 - 2016-02-03 19:30 - 00010867 _____ C:\Users\Ivushka\Downloads\american.dad.s12e02.hdtv.x264-killers.nfo
2016-01-31 16:05 - 2016-01-31 16:26 - 165096881 _____ C:\Users\Ivushka\Downloads\The-Simpsons-S27E10-vložené-titulky-cz-novinka-2015.mp4
2016-01-30 17:00 - 2016-01-30 18:11 - 00000000 ____D C:\Users\Ivushka\Desktop\Venice výběr
2016-01-28 18:11 - 2016-01-28 18:49 - 545510863 _____ C:\Users\Ivushka\Downloads\Rosamunde-Pilcher---Cekani-na-duhu-DVB-T-(bt).mkv

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-27 13:41 - 2015-12-16 20:42 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-02-27 13:14 - 2015-12-16 20:42 - 00000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-02-27 13:01 - 2015-12-16 20:43 - 00000992 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-27 12:47 - 2016-01-10 12:32 - 00000000 ____D C:\Users\Ivushka\AppData\Local\AvgSetupLog
2016-02-27 12:46 - 2015-12-20 15:43 - 00002954 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-02-27 12:46 - 2015-11-01 01:15 - 00002274 _____ C:\Windows\System32\Tasks\DolbySelectorTask
2016-02-27 12:46 - 2015-10-31 23:57 - 00002212 _____ C:\Windows\System32\Tasks\PDVDServ12 Task
2016-02-27 12:41 - 2015-12-16 20:43 - 00003504 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-27 12:41 - 2015-12-16 20:43 - 00003280 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-27 12:41 - 2015-12-16 20:43 - 00000988 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-27 11:48 - 2016-01-10 12:36 - 00000000 ____D C:\ProgramData\MFAData
2016-02-27 09:53 - 2015-12-12 17:30 - 00000000 ____D C:\Program Files\Common Files\AV
2016-02-27 09:46 - 2015-07-16 07:54 - 00875126 _____ C:\Windows\system32\PerfStringBackup.INI
2016-02-27 09:46 - 2015-07-10 03:02 - 00000000 ____D C:\Windows\INF
2016-02-27 09:09 - 2015-12-16 20:43 - 00002459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-27 09:09 - 2015-12-16 20:43 - 00002447 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-02-27 07:54 - 2015-12-11 20:31 - 00004170 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{D1614DA4-9ECB-47B8-AE50-6A784165FEF9}
2016-02-27 07:52 - 2016-01-13 19:15 - 00000000 ____D C:\ProgramData\21d151fc-6e37-1
2016-02-27 07:52 - 2016-01-13 19:15 - 00000000 ____D C:\ProgramData\21d151fc-1803-0
2016-02-26 21:11 - 2015-12-20 16:31 - 00000000 ____D C:\Users\Ivushka\AppData\Roaming\vlc
2016-02-25 19:57 - 2015-07-10 04:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-25 19:56 - 2015-12-30 19:10 - 00000000 ____D C:\Windows\Minidump
2016-02-25 18:17 - 2015-10-31 23:47 - 00000000 ____D C:\Windows\System32\Tasks\Lenovo
2016-02-25 18:16 - 2015-12-12 17:28 - 00000000 ____D C:\Users\Ivushka\AppData\Local\Downloaded Installations
2016-02-25 18:12 - 2015-07-10 01:05 - 00032768 ___SH C:\Windows\system32\config\ELAM
2016-02-24 18:47 - 2015-07-10 03:04 - 00000000 ____D C:\Windows\AppReadiness
2016-02-23 18:34 - 2015-07-10 03:04 - 00000000 ___HD C:\Program Files\WindowsApps
2016-02-21 19:53 - 2015-12-11 16:40 - 00000000 ____D C:\Users\Ivushka
2016-02-21 19:53 - 2015-07-10 04:20 - 00285368 _____ C:\Windows\system32\FNTCACHE.DAT
2016-02-21 15:54 - 2015-12-11 16:54 - 00000000 ____D C:\Users\Ivushka\AppData\Roaming\Skype
2016-02-20 20:39 - 2016-01-10 12:36 - 00000882 _____ C:\Users\Public\Desktop\AVG.lnk
2016-02-20 20:39 - 2016-01-10 12:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-02-20 20:39 - 2016-01-02 22:25 - 00000000 ____D C:\Users\Ivushka\AppData\Local\CrashDumps
2016-02-20 20:37 - 2015-11-01 01:12 - 00623827 _____ C:\Windows\SysWOW64\rootpa.e2e
2016-02-20 20:37 - 2015-10-31 23:53 - 00000000 ____D C:\Program Files (x86)\McAfee
2016-02-19 20:20 - 2015-10-31 23:52 - 00000000 ____D C:\ProgramData\McAfee
2016-02-19 20:18 - 2015-10-31 23:53 - 00000000 ____D C:\Program Files\Common Files\McAfee
2016-02-19 20:18 - 2015-07-10 03:04 - 00000000 ___HD C:\Windows\ELAMBKUP
2016-02-19 20:16 - 2015-12-12 18:15 - 00003122 _____ C:\Windows\System32\Tasks\McAfeeLogon
2016-02-19 20:16 - 2015-12-12 18:15 - 00000000 ____D C:\Windows\System32\Tasks\McAfee
2016-02-19 19:31 - 2015-10-31 23:51 - 00000000 ____D C:\ProgramData\CyberLink
2016-02-19 17:59 - 2015-07-10 03:04 - 00000000 ____D C:\Windows\rescache
2016-02-17 17:50 - 2015-07-10 03:04 - 00000000 ____D C:\Windows\LiveKernelReports
2016-02-16 19:44 - 2015-12-11 19:15 - 00000000 ____D C:\Users\Ivushka\Desktop\Foto záloha
2016-02-16 17:37 - 2016-01-10 12:43 - 00000000 ____D C:\Users\Ivushka\AppData\Roaming\AVG
2016-02-16 17:32 - 2015-11-01 01:06 - 00065536 _____ C:\Windows\psp_storage.bin
2016-02-16 17:32 - 2015-07-10 01:05 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-02-16 17:30 - 2015-07-10 05:16 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-16 17:25 - 2016-01-04 14:46 - 36764147 _____ C:\Users\Ivushka\Desktop\Poznatky z USA.odt
2016-02-14 21:45 - 2015-12-11 17:49 - 00000000 ____D C:\Users\Ivushka\Desktop\USA
2016-02-14 20:19 - 2015-12-11 20:13 - 00000000 ____D C:\Windows\system32\MRT
2016-02-14 20:16 - 2015-12-11 20:13 - 146614896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-02-14 19:55 - 2016-01-10 12:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-02-14 08:02 - 2015-12-11 16:54 - 00000000 ____D C:\ProgramData\Skype
2016-02-13 21:12 - 2015-12-15 19:12 - 00000000 ____D C:\Users\Ivushka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth
2016-02-12 16:08 - 2016-01-01 18:26 - 00000000 ____D C:\Users\Ivushka\Desktop\SD výběr
2016-02-10 18:19 - 2015-07-10 02:55 - 00000000 ____D C:\Windows\CbsTemp
2016-02-10 14:42 - 2015-12-16 20:42 - 00004030 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-02-02 14:47 - 2015-07-10 03:06 - 00828920 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-02-02 14:47 - 2015-07-10 03:06 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2016-02-21 17:17 - 2016-02-21 17:17 - 0000197 _____ () C:\Users\Ivushka\AppData\Roaming\LAPTOP-9N491QR6.MTBF.txt
2016-02-21 17:17 - 2016-02-21 19:40 - 0000898 _____ () C:\Users\Ivushka\AppData\Roaming\__AvidCloudManager.log
2016-02-21 17:17 - 2016-02-21 19:18 - 0000672 _____ () C:\Users\Ivushka\AppData\Roaming\__AvidCloudManagerPrevious.log
2016-02-21 17:19 - 2016-02-21 17:19 - 0003584 _____ () C:\Users\Ivushka\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-01-13 18:58 - 2016-01-13 18:58 - 0002560 _____ () C:\Users\Ivushka\AppData\Local\uninstall.exe
2015-11-01 01:14 - 2015-11-01 01:14 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-02-21 09:25

==================== End of FRST.txt ============================

Re: reklamy v prohlížečích, samovolné restarty

Napsal: 28 úno 2016 11:35
od altrok
Krasny den Vam preju :bye:


:arrow: V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).


:arrow: Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )
  • ukoncete vsechny programy
  • kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
  • kliknete na Scan, pote na Cleaning
  • po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner[Cx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

Re: reklamy v prohlížečích, samovolné restarty

Napsal: 28 úno 2016 17:45
od pavel17
# AdwCleaner v5.037 - Logfile created 28/02/2016 at 08:39:28
# Updated 28/02/2016 by Xplode
# Database : 2016-02-28.2 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Ivushka - LAPTOP-9N491QR6
# Running from : C:\Users\Ivushka\Desktop\adwcleaner_5.037.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\5C3DA7D1-1452741329-E511-90AB-1C3947224D0C
[-] Folder Deleted : C:\ProgramData\21d151fc-1803-0
[-] Folder Deleted : C:\ProgramData\21d151fc-6e37-1
[-] Folder Deleted : C:\ProgramData\4849aee0
[-] Folder Deleted : C:\ProgramData\Avg_Update_0116avz
[-] Folder Deleted : C:\ProgramData\b7b70ff3-5df7-0
[-] Folder Deleted : C:\ProgramData\b7b70ff3-6ca1-0
[-] Folder Deleted : C:\ProgramData\{0e9588ee-112c-0}
[-] Folder Deleted : C:\ProgramData\{0fdbf0cc-512c-1}
[-] Folder Deleted : C:\ProgramData\{180a3f72-312c-0}
[-] Folder Deleted : C:\ProgramData\{23ecb912-112c-1}
[-] Folder Deleted : C:\Users\Ivushka\REACHit
[-] Folder Deleted : C:\Users\Ivushka\AppData\Local\TheBrowser

***** [ Files ] *****

[-] File Deleted : C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_nps.pastaleads.com_0.localstorage
[-] File Deleted : C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_nps.pastaleads.com_0.localstorage-journal

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4849aee0}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD20C151-A061-4097-955D-682F317A7035}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{79F768ED-0B12-42EF-8257-36751A0ECF3A}]
[-] Key Deleted : HKCU\Software\DAILYPCCLEAN
[-] Key Deleted : HKCU\Software\Microsoft\Tinstalls
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DnsIo
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]
[-] Data Restored : HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{11277b43-94d5-4736-b982-9f85b914a64a} [NameServer]
[-] Data Restored : HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{26b11a49-585f-4b43-a90c-9af3c3d7b25b} [NameServer]
[-] Data Restored : HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{45db014e-d3fa-4e00-a4e6-51aa27850723} [NameServer]
[-] Data Restored : HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{67e395df-1999-4526-aa3d-7bbb1fbf1db1} [NameServer]
[-] Data Restored : HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{6c208d38-fb82-4add-a97a-cf282674e3c6} [NameServer]
[-] Data Restored : HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{a327b7a0-5f2d-4923-9425-e8bd9a636c4d} [NameServer]
[-] Data Restored : HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{ba4753c0-3fc8-427c-bf6f-295c52d01c81} [NameServer]
[-] Data Restored : HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{d1328491-6ca5-415c-983f-c21321ed9d79} [NameServer]
[-] Data Restored : HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{f52d89b9-754f-4ff0-8bab-37b5acb90c2d} [NameServer]
[-] Data Restored : HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{f7c37147-27e5-4300-87ab-c5acc9277eb8} [NameServer]
[-] Data Restored : HKLM\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{11277b43-94d5-4736-b982-9f85b914a64a} [NameServer]
[-] Data Restored : HKLM\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{26b11a49-585f-4b43-a90c-9af3c3d7b25b} [NameServer]
[-] Data Restored : HKLM\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{45db014e-d3fa-4e00-a4e6-51aa27850723} [NameServer]
[-] Data Restored : HKLM\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{67e395df-1999-4526-aa3d-7bbb1fbf1db1} [NameServer]
[-] Data Restored : HKLM\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{6c208d38-fb82-4add-a97a-cf282674e3c6} [NameServer]
[-] Data Restored : HKLM\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{a327b7a0-5f2d-4923-9425-e8bd9a636c4d} [NameServer]
[-] Data Restored : HKLM\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{ba4753c0-3fc8-427c-bf6f-295c52d01c81} [NameServer]
[-] Data Restored : HKLM\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{d1328491-6ca5-415c-983f-c21321ed9d79} [NameServer]
[-] Data Restored : HKLM\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{f52d89b9-754f-4ff0-8bab-37b5acb90c2d} [NameServer]
[-] Data Restored : HKLM\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{f7c37147-27e5-4300-87ab-c5acc9277eb8} [NameServer]

***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [5142 bytes] - [28/02/2016 08:39:28]
C:\AdwCleaner\AdwCleaner[S1].txt - [5581 bytes] - [28/02/2016 08:35:36]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [5288 bytes] ##########

Re: reklamy v prohlížečích, samovolné restarty

Napsal: 28 úno 2016 17:57
od altrok
:arrow: Dejte logy FRST.txt a Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101
Pozn. pri druhem a dalsim spusteni FRST je pro vytvoreni logu Addition.txt nutne tuto volbu explicitne zatrhnout pred zacatkem skenu.

Re: reklamy v prohlížečích, samovolné restarty

Napsal: 28 úno 2016 18:06
od pavel17
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:27-02-2016
Ran by Ivushka (administrator) on LAPTOP-9N491QR6 (28-02-2016 08:59:39)
Running from C:\Users\Ivushka\Desktop
Loaded Profiles: Ivushka (Available Profiles: Ivushka)
Platform: Windows 10 Home (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\tbaseprovisioning.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagent.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
(Lenovo) C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Intel Security, Inc.) C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
() C:\Program Files\update\UpdateAgent.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe
(Lenovo) C:\Program Files\Lenovo\BatteryGauge\BatteryGaugeIcon.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe
() C:\Program Files\Lenovo\LenovoUtility\utility.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Lenovo) C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.31\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.31\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.31\opera.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Lenovo) C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.31\opera.exe
(Lenovo) C:\Program Files (x86)\Lenovo\CCSDK\WinGather.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.8.203.0\McCSPServiceHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ActionUriServer.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [LenovoUtility] => C:\Program Files\Lenovo\LenovoUtility\utility.exe [791848 2015-10-31] ()
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040792 2015-07-06] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-06-29] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-06-29] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-06-29] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3743648 2015-07-13] (ELAN Microelectronics Corp.)
HKLM\...\Run: [Bluetooth] => C:\Program Files\Lenovo\Bluetooth Software\bttray.exe [535808 2015-07-27] (Broadcom Corporation.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe [110008 2015-07-20] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe [492472 2015-07-20] (CyberLink Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-07-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [179624 2016-02-18] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [3873704 2016-02-01] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50599552 2016-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [801816 2013-09-27] (ZONER software)
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\...\RunOnce: [Uninstall C:\Users\Ivushka\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Ivushka\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\...\MountPoints2: F - "F:\Setup.exe"
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\Parameters: [NameServer] 82.163.142.7 95.211.158.134
Tcpip\..\Interfaces\{11277b43-94d5-4736-b982-9f85b914a64a}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{45db014e-d3fa-4e00-a4e6-51aa27850723}: [DhcpNameServer] 82.163.142.7
Tcpip\..\Interfaces\{67e395df-1999-4526-aa3d-7bbb1fbf1db1}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6c208d38-fb82-4add-a97a-cf282674e3c6}: [DhcpNameServer] 82.163.142.7
Tcpip\..\Interfaces\{f52d89b9-754f-4ff0-8bab-37b5acb90c2d}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{f7c37147-27e5-4300-87ab-c5acc9277eb8}: [DhcpNameServer] 82.163.142.7

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo15.msn.com/?pc=LCTE
SearchScopes: HKU\S-1-5-21-3127553534-2473892740-565383663-1002 -> DefaultScope {133AF9E2-55C2-4D66-B199-3EB99A9BA04D} URL =
SearchScopes: HKU\S-1-5-21-3127553534-2473892740-565383663-1002 -> {133AF9E2-55C2-4D66-B199-3EB99A9BA04D} URL =
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2016-01-08] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2016-01-08] (McAfee, Inc.)

FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2016-01-08] ()
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2016-01-08] ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-27] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [jid1-xNAj4KGyf5wyhg@jetpack] - C:\Program Files (x86)\Faster Web\faster-web.xpi => not found
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2016-02-20] [not signed]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR Profile: C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-27]
CHR Extension: (Google Docs) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-27]
CHR Extension: (Google Drive) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-27]
CHR Extension: (YouTube) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-27]
CHR Extension: (Google Search) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-27]
CHR Extension: (Google Sheets) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-27]
CHR Extension: (Google Docs Offline) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-02-27]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-02-27]
CHR Extension: (Gmail) - C:\Users\Ivushka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-27]

Opera:
=======
OPR StartupUrls: "hxxp://seznam.cz/"

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-07-21] (Advanced Micro Devices, Inc.) [File not signed]
S2 amdacpusrsvc; C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe [121856 2015-07-21] (Advanced Micro Devices) [File not signed]
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [604144 2016-02-01] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [3881184 2016-02-01] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1045928 2016-02-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [561104 2016-02-01] (AVG Technologies CZ, s.r.o.)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2286872 2015-07-27] (Broadcom Corporation.)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [980224 2015-07-27] (Broadcom Corporation.)
R2 CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [650680 2015-07-29] (Lenovo)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [135072 2015-07-13] (ELAN Microelectronics Corp.)
R2 FastbootService; C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe [288768 2015-11-01] (Lenovo) [File not signed]
R2 GDCAgent; C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe [1155512 2015-07-29] (Lenovo)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 ImControllerService; c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [36808 2016-01-29] (Lenovo Group Limited)
R2 LenovoPortalService; C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe [24312 2015-11-01] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [271296 2015-07-17] (Lenovo)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [863448 2016-01-08] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [338208 2015-03-19] (McAfee, Inc.)
R2 McBootDelayStartSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.8.203.0\McCSPServiceHost.exe [1694152 2015-12-02] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [681680 2016-01-08] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [234192 2015-11-18] (McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [380896 2016-01-21] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [275368 2015-11-18] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [902112 2015-12-14] (Intel Security, Inc.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 tbaseprovisioning; C:\Windows\SysWOW64\tbaseprovisioning.exe [60432 2015-06-22] (Advanced Micro Devices, Inc.)
R2 UpdateAgentService; C:\Program Files\update\UpdateAgent.exe [226216 2015-11-01] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 amdacpksd; C:\Windows\system32\drivers\amdacpksd.sys [297672 2015-07-21] (Advanced Micro Devices)
R3 AmdGpio2; C:\Windows\System32\drivers\AmdGpio2.sys [26136 2015-05-12] (Advanced Micro Devices, INC.)
S3 amdkmcsp; C:\Windows\system32\DRIVERS\amdkmcsp.sys [101104 2015-06-22] (Advanced Micro Devices, Inc. )
R0 amdpsp; C:\Windows\System32\DRIVERS\amdpsp.sys [277240 2015-06-22] (Advanced Micro Devices, Inc. )
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-07-21] (Advanced Micro Devices)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21632 2016-01-07] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [184240 2015-11-06] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [315312 2016-01-05] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-08] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [398256 2015-08-14] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [260528 2016-01-22] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [42416 2015-12-04] (AVG Technologies CZ, s.r.o.)
R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [23472 2016-01-08] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [315840 2015-12-16] (AVG Technologies CZ, s.r.o.)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [199472 2015-07-17] (Broadcom Corporation.)
R3 BCMWL63A; C:\Windows\system32\DRIVERS\bcmwl63a.sys [11254536 2015-07-31] (Broadcom Corp)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [79248 2015-11-25] (McAfee, Inc.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
R0 Fastboot; C:\Windows\System32\DRIVERS\Fastboot.sys [67608 2015-11-01] (Windows (R) Win 7 DDK provider) [File not signed]
R0 FBFsmon; C:\Windows\System32\DRIVERS\FBFsmon.sys [39448 2015-11-01] (Windows (R) Win 7 DDK provider) [File not signed]
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [207208 2015-05-19] (McAfee, Inc.)
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [419624 2015-11-25] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [351144 2015-11-25] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [83096 2015-11-25] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [496368 2015-11-25] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [846080 2015-11-25] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [539496 2015-11-20] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [109480 2015-11-20] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [245096 2015-11-25] (McAfee, Inc.)
S3 NETwNe64; C:\Windows\System32\drivers\NETwew01.sys [3354384 2015-07-10] (Intel Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-06-22] (Realtek )
S3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [411712 2015-05-18] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [3059416 2015-06-11] (Realtek Semiconductor Corp.)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-28 08:59 - 2016-02-28 09:00 - 00022262 _____ C:\Users\Ivushka\Desktop\FRST.txt
2016-02-28 08:45 - 2016-02-28 08:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2016-02-28 08:42 - 2016-02-28 08:42 - 00016148 _____ C:\Windows\system32\LAPTOP-9N491QR6_Ivushka_HistoryPrediction.bin
2016-02-28 08:34 - 2016-02-28 08:39 - 00000000 ____D C:\AdwCleaner
2016-02-28 08:33 - 2016-02-28 08:34 - 01518592 _____ C:\Users\Ivushka\Desktop\adwcleaner_5.037.exe
2016-02-28 08:32 - 2016-02-28 08:45 - 00004020 _____ C:\Windows\System32\Tasks\Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse
2016-02-27 15:36 - 2016-02-27 15:36 - 02365304 _____ (Microsoft Corporation) C:\Windows\system32\WudfUpdate_01011.dll
2016-02-27 15:03 - 2016-02-27 15:03 - 00214832 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2016-02-27 14:59 - 2016-02-27 14:59 - 00122160 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2016-02-27 13:50 - 2016-02-28 08:59 - 00000000 ____D C:\FRST
2016-02-27 13:48 - 2016-02-27 13:49 - 02371072 _____ (Farbar) C:\Users\Ivushka\Desktop\FRST64.exe
2016-02-27 12:18 - 2016-01-13 19:13 - 00000967 _____ C:\Windows\system32\Drivers\etc\hosts.20160227-121805.backup
2016-02-27 10:37 - 2016-02-28 08:35 - 00004208 _____ C:\Windows\System32\Tasks\Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse
2016-02-27 09:53 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
2016-02-27 09:45 - 2016-02-27 09:45 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2016-02-27 09:44 - 2016-02-27 12:16 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-02-27 09:44 - 2016-02-27 09:53 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-02-27 09:44 - 2016-02-27 09:44 - 00001467 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-02-27 09:44 - 2016-02-27 09:44 - 00001455 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2016-02-27 09:44 - 2016-02-27 09:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-02-27 09:44 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2016-02-27 07:52 - 2016-02-27 07:52 - 00003884 _____ C:\Windows\System32\Tasks\{1FB6B9DA-6CB5-B114-F30F-B7B7489CBB7F}
2016-02-26 16:24 - 2016-02-26 17:10 - 730384384 _____ C:\Users\Ivushka\Downloads\Back-To-The-Future-I.avi
2016-02-26 15:53 - 2016-02-26 16:03 - 144964873 _____ C:\Users\Ivushka\Downloads\2.Broke.Girls.S05E13.HDTV.x264-LOL.mp4
2016-02-26 15:51 - 2016-02-26 16:06 - 203212192 _____ C:\Users\Ivushka\Downloads\The.Big.Bang.Theory.S09E17.720p.HDTV.x264-DIMENSION---CZ-titulky.avi
2016-02-25 19:56 - 2016-02-25 19:56 - 00262144 ____N C:\Windows\Minidump\022516-47390-01.dmp
2016-02-25 18:59 - 2016-02-25 19:13 - 187442024 _____ C:\Users\Ivushka\Downloads\The.Middle.S07E16.hdtv-lol.mp4
2016-02-25 18:55 - 2016-02-25 19:07 - 189217247 _____ C:\Users\Ivushka\Downloads\Baby.Daddy.S05E04.HDTV.x264-FLEET.mp4
2016-02-25 18:44 - 2016-02-25 18:54 - 126415823 _____ C:\Users\Ivushka\Downloads\modern.family.s07e14.720p.hdtv.hevc.x265.rmteam.mkv
2016-02-24 20:53 - 2016-02-24 21:01 - 125693967 _____ C:\Users\Ivushka\Downloads\mom.S03E10.hdtv-lol[ettv].mp4
2016-02-24 18:35 - 2016-02-24 18:43 - 121529099 _____ C:\Users\Ivushka\Downloads\american.dad.s12e05.720p.hdtv.hevc.x265.rmteam.mkv
2016-02-22 20:42 - 2016-02-22 18:49 - 00038494 _____ C:\Users\Ivushka\Downloads\Telenovela.S01E08.HDTV.x264-FLEET.srt
2016-02-22 20:41 - 2016-02-22 20:41 - 00015989 _____ C:\Users\Ivushka\Downloads\telenovela-S01E08-hdtv-By-stiletto42.zip
2016-02-22 20:17 - 2016-02-22 20:17 - 00014516 _____ C:\Users\Ivushka\Downloads\telenovela-S01E07-hdtv-By-stiletto42.zip
2016-02-22 20:17 - 2016-02-04 19:49 - 00036108 _____ C:\Users\Ivushka\Downloads\Telenovela.S01E07.srt
2016-02-22 18:59 - 2016-02-22 19:12 - 177100218 _____ C:\Users\Ivushka\Downloads\The-Middle---Průměrňákovi-S07E15-CZtit-v-OBRAZE.avi
2016-02-21 20:03 - 2016-02-21 20:11 - 143194146 _____ C:\Users\Ivushka\Downloads\The.Simpsons.S27E14.HDTV.x264-KILLERS.mp4
2016-02-21 19:53 - 2016-02-21 19:53 - 00262144 ____N C:\Windows\Minidump\022116-68328-01.dmp
2016-02-21 19:50 - 2016-02-21 20:03 - 143194760 _____ C:\Users\Ivushka\Downloads\The.Simpsons.S27E14.HDTV.x264-KILLERS.mp4.opdownload
2016-02-21 18:57 - 2016-02-21 18:57 - 00000000 ____D C:\Users\Ivushka\Documents\Pinnacle
2016-02-21 18:45 - 2016-02-21 18:45 - 00000000 ____D C:\Users\Ivushka\Documents\Projekty aplikace Pinnacle
2016-02-21 17:32 - 2016-02-21 19:55 - 00000000 ____D C:\Users\Ivushka\Desktop\videa
2016-02-21 17:19 - 2016-02-21 17:19 - 00003584 _____ C:\Users\Ivushka\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-02-21 17:18 - 2016-02-21 19:12 - 00000000 ____D C:\Users\Ivushka\temp
2016-02-21 17:17 - 2016-02-21 17:17 - 00000197 _____ C:\Users\Ivushka\AppData\Roaming\LAPTOP-9N491QR6.MTBF.txt
2016-02-21 17:17 - 2016-02-21 17:17 - 00000000 ____D C:\Users\Ivushka\Documents\InstantCDDVD
2016-02-21 17:16 - 2016-02-21 19:18 - 00000000 ____D C:\Users\Ivushka\AppData\Local\Pinnacle
2016-02-21 16:39 - 2016-02-21 19:18 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI
2016-02-20 20:36 - 2016-02-20 20:36 - 00262144 ____N C:\Windows\Minidump\022016-59031-01.dmp
2016-02-19 20:16 - 2016-02-19 20:16 - 00000000 ____D C:\ProgramData\Intel Security
2016-02-19 20:15 - 2016-02-19 20:15 - 00000000 ____D C:\Program Files\Common Files\Intel Security
2016-02-19 19:31 - 2016-02-19 19:31 - 00000000 ____D C:\ProgramData\PhotoMaster
2016-02-19 15:55 - 2016-02-19 17:41 - 1876964424 _____ C:\Users\Ivushka\Downloads\Rosamunde-Pilcher-2014-Stíny-minulosti-CZ-Maxvencamax.avi
2016-02-19 15:12 - 2016-02-19 15:23 - 201169296 _____ C:\Users\Ivushka\Downloads\The.Big.Bang.Theory.S09E16.720p.HDTV.x264-DIMENSION-CZ-titulky.avi
2016-02-18 17:59 - 2016-02-18 18:17 - 281022301 _____ C:\Users\Ivushka\Downloads\SpongeBob.SquarePants.S09E04.Eek.An.Urchin.-.Squids.Defense.480p.WEB-DL.AAC2.0.H.264-YFN.mkv
2016-02-17 19:36 - 2016-02-17 19:54 - 275201689 _____ C:\Users\Ivushka\Downloads\SpongeBob.SquarePants.S09E03.Patrick-Man.-.Garys.New.Toy.480p.WEB-DL.AAC2.0.H.264-YFN.mkv
2016-02-17 19:07 - 2016-02-17 19:24 - 281244974 _____ C:\Users\Ivushka\Downloads\SpongeBob.SquarePants.S09E02.License.to.Milkshake.-.Squid.Baby.480p.WEB-DL.AAC2.0.H.264-YFN.mkv
2016-02-17 18:46 - 2016-02-17 19:02 - 275492552 _____ C:\Users\Ivushka\Downloads\SpongeBob.SquarePants.S09E01.Extreme.Spots.-.Squirrel.Record.480p.WEB-DL.AAC2.0.H.264-YFN.mkv
2016-02-17 17:57 - 2016-02-17 18:09 - 175304560 _____ C:\Users\Ivushka\Downloads\American.Dad.S12E04.720p.HDTV.x26-HEVC.Sammy.mp4
2016-02-16 19:37 - 2016-02-16 19:51 - 206057877 _____ C:\Users\Ivushka\Downloads\Telenovela.S01E09.HDTV.x264-FLEET.mp4
2016-02-16 19:04 - 2016-02-16 19:22 - 215694469 _____ C:\Users\Ivushka\Downloads\Telenovela.S01E08.HDTV.x264-FLEET.mp4
2016-02-16 17:37 - 2016-02-16 17:37 - 00000000 ____D C:\Users\Default\AppData\Roaming\AVG
2016-02-16 17:37 - 2016-02-16 17:37 - 00000000 ____D C:\Users\Default\AppData\Local\AVG
2016-02-16 17:37 - 2016-02-16 17:37 - 00000000 ____D C:\Users\Default User\AppData\Roaming\AVG
2016-02-16 17:37 - 2016-02-16 17:37 - 00000000 ____D C:\Users\Default User\AppData\Local\AVG
2016-02-16 17:25 - 2016-02-16 18:39 - 00033018 _____ C:\Users\Ivushka\Desktop\Záloha zápisky z USA.odt
2016-02-15 17:34 - 2016-02-15 18:18 - 00000000 ____D C:\Users\Ivushka\Desktop\pro mamku
2016-02-15 16:49 - 2016-02-15 16:58 - 171351728 _____ C:\Users\Ivushka\Downloads\The-Simpsons-S27E13-CZtit-V-OBRAZE.avi
2016-02-14 19:02 - 2016-02-15 18:22 - 00000000 ____D C:\Users\Ivushka\Desktop\Getty výběr
2016-02-13 21:16 - 2016-02-13 22:06 - 879340755 _____ C:\Users\Ivushka\Downloads\Telenovela.S01E07.mkv
2016-02-13 20:55 - 2016-02-13 21:15 - 181306926 _____ C:\Users\Ivushka\Downloads\Telenovela---S01E05---The-Rivals-CZ-tit.avi
2016-02-13 20:55 - 2016-02-13 21:14 - 178858962 _____ C:\Users\Ivushka\Downloads\Telenovela---S01E04---The-Kiss-CZ-tit.avi
2016-02-13 19:27 - 2016-02-13 19:38 - 179840320 _____ C:\Users\Ivushka\Downloads\Telenovela---S01E03---Trapped-in-a-Well-CZ-tit.avi
2016-02-13 19:26 - 2016-02-13 19:40 - 179390208 _____ C:\Users\Ivushka\Downloads\Telenovela---S01E02---Evil-Twin-CZ-tit.avi
2016-02-13 19:08 - 2016-02-13 19:21 - 221400265 _____ C:\Users\Ivushka\Downloads\Telenovela.S01E01.HDTV.x264-KILLERS[ettv].mp4
2016-02-13 18:55 - 2016-02-13 19:08 - 221400879 _____ C:\Users\Ivushka\Downloads\Telenovela.S01E01.HDTV.x264-KILLERS[ettv].mp4.opdownload
2016-02-13 17:43 - 2016-02-13 17:57 - 181471349 _____ C:\Users\Ivushka\Downloads\The-Simpsons-S27E02-vložené-titulky-cz-novinka-2015.mp4
2016-02-13 13:13 - 2016-02-13 15:32 - 733900801 _____ C:\Users\Ivushka\Downloads\148.Poznas-jak-to-prijde--How-Do-You-Know--ang+cz.tit.2010-novinky.fel.avi
2016-02-13 13:10 - 2016-02-13 15:36 - 735916032 _____ C:\Users\Ivushka\Downloads\Holka-Na-Roztrhání---CZ-Dabing.avi
2016-02-13 11:12 - 2016-02-13 12:48 - 00000000 ____D C:\Users\Ivushka\Desktop\Veverky
2016-02-12 15:40 - 2016-02-12 15:53 - 202581484 _____ C:\Users\Ivushka\Downloads\The.Big.Bang.Theory.S09E15.720p.HDTV.X264-DIMENSION-s-CZ-titulky.avi
2016-02-12 15:29 - 2016-02-12 15:40 - 202582098 _____ C:\Users\Ivushka\Downloads\The.Big.Bang.Theory.S09E15.720p.HDTV.X264-DIMENSION-s-CZ-titulky.avi.opdownload
2016-02-10 15:12 - 2016-02-21 19:41 - 00010094 _____ C:\Users\Ivushka\Desktop\Bez názvu 1.odt
2016-02-10 14:41 - 2016-02-10 14:41 - 19613888 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2016-02-09 20:02 - 2016-01-30 22:25 - 01951872 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-02-09 20:02 - 2016-01-30 22:25 - 01248896 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-02-09 20:02 - 2016-01-30 22:24 - 01824880 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-02-09 20:02 - 2016-01-30 22:23 - 02601160 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-02-09 20:02 - 2016-01-30 22:23 - 01420392 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-02-09 20:02 - 2016-01-30 22:06 - 01535032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-02-09 20:02 - 2016-01-30 22:06 - 01531368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-02-09 20:02 - 2016-01-30 22:06 - 00809336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2016-02-09 20:02 - 2016-01-30 22:04 - 01811360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-02-09 20:02 - 2016-01-30 22:04 - 01180696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-02-09 20:02 - 2016-01-30 21:38 - 21873152 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-02-09 20:02 - 2016-01-30 21:34 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\ngckeyenum.dll
2016-02-09 20:02 - 2016-01-30 21:33 - 24593920 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-02-09 20:02 - 2016-01-30 21:33 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\IoTAssignedAccessLockFramework.dll
2016-02-09 20:02 - 2016-01-30 21:29 - 11557888 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-02-09 20:02 - 2016-01-30 21:29 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rasman.dll
2016-02-09 20:02 - 2016-01-30 21:26 - 06787072 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-02-09 20:02 - 2016-01-30 21:26 - 03793408 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-02-09 20:02 - 2016-01-30 21:25 - 12504576 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-02-09 20:02 - 2016-01-30 21:25 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-02-09 20:02 - 2016-01-30 21:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-02-09 20:02 - 2016-01-30 21:25 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-02-09 20:02 - 2016-01-30 21:24 - 00784384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-02-09 20:02 - 2016-01-30 21:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-02-09 20:02 - 2016-01-30 21:24 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-02-09 20:02 - 2016-01-30 21:23 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-02-09 20:02 - 2016-01-30 21:22 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2016-02-09 20:02 - 2016-01-30 21:20 - 02849792 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-02-09 20:02 - 2016-01-30 21:19 - 01602560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-02-09 20:02 - 2016-01-30 21:19 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\NetworkDesktopSettings.dll
2016-02-09 20:02 - 2016-01-30 21:19 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IoTAssignedAccessLockFramework.dll
2016-02-09 20:02 - 2016-01-30 21:18 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-02-09 20:02 - 2016-01-30 21:18 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-02-09 20:02 - 2016-01-30 21:17 - 19324928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-02-09 20:02 - 2016-01-30 21:17 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2016-02-09 20:02 - 2016-01-30 21:16 - 09889280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-02-09 20:02 - 2016-01-30 21:16 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-02-09 20:02 - 2016-01-30 21:14 - 07525376 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-02-09 20:02 - 2016-01-30 21:14 - 03588096 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-02-09 20:02 - 2016-01-30 21:13 - 04791808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-02-09 20:02 - 2016-01-30 21:13 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasman.dll
2016-02-09 20:02 - 2016-01-30 21:13 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\ztrace_maps.dll
2016-02-09 20:02 - 2016-01-30 21:11 - 05156352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-02-09 20:02 - 2016-01-30 21:11 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-02-09 20:02 - 2016-01-30 21:11 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-02-09 20:02 - 2016-01-30 21:11 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-02-09 20:02 - 2016-01-30 21:07 - 18802176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-02-09 20:02 - 2016-01-30 21:06 - 02316800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-02-09 20:02 - 2016-01-30 21:05 - 01380864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-02-09 20:02 - 2016-01-30 21:05 - 00574464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2016-02-09 20:02 - 2016-01-30 21:05 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-02-09 20:02 - 2016-01-30 21:04 - 00100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2016-02-09 20:02 - 2016-01-30 21:02 - 03580416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-02-09 20:02 - 2016-01-30 21:02 - 00768000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-02-09 20:02 - 2016-01-30 21:00 - 11263488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-02-09 20:02 - 2016-01-30 20:59 - 05457408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-02-09 20:02 - 2016-01-30 20:58 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ztrace_maps.dll
2016-02-09 19:00 - 2016-02-09 19:06 - 83816128 _____ C:\Users\Ivushka\Downloads\American.Dad.S12E03.HDTV.x264-FLEET.mp4
2016-02-07 18:44 - 2016-02-19 19:01 - 00000000 ____D C:\Users\Ivushka\Desktop\Výběr fotka
2016-02-03 19:30 - 2016-02-03 19:30 - 00010867 _____ C:\Users\Ivushka\Downloads\american.dad.s12e02.hdtv.x264-killers.nfo
2016-01-31 16:05 - 2016-01-31 16:26 - 165096881 _____ C:\Users\Ivushka\Downloads\The-Simpsons-S27E10-vložené-titulky-cz-novinka-2015.mp4
2016-01-30 17:00 - 2016-01-30 18:11 - 00000000 ____D C:\Users\Ivushka\Desktop\Venice výběr

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-28 09:00 - 2015-12-16 20:43 - 00000988 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-28 08:59 - 2015-12-12 18:15 - 00000000 ____D C:\Users\Ivushka\Desktop\hry
2016-02-28 08:56 - 2015-12-20 15:42 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-02-28 08:43 - 2015-12-11 16:54 - 00000000 ____D C:\Users\Ivushka\AppData\Roaming\Skype
2016-02-28 08:41 - 2016-01-10 12:36 - 00000000 ____D C:\ProgramData\MFAData
2016-02-28 08:41 - 2015-07-10 04:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-28 08:40 - 2015-12-11 16:40 - 00000000 ____D C:\Users\Ivushka
2016-02-28 08:40 - 2015-11-01 01:06 - 00065536 _____ C:\Windows\psp_storage.bin
2016-02-28 08:40 - 2015-07-10 01:05 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-02-28 08:39 - 2015-11-01 01:12 - 00655571 _____ C:\Windows\SysWOW64\rootpa.e2e
2016-02-28 08:32 - 2015-12-11 20:31 - 00004170 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{D1614DA4-9ECB-47B8-AE50-6A784165FEF9}
2016-02-28 08:29 - 2015-11-01 00:01 - 00000000 ____D C:\ProgramData\Lenovo
2016-02-27 22:18 - 2015-12-20 16:31 - 00000000 ____D C:\Users\Ivushka\AppData\Roaming\vlc
2016-02-27 22:01 - 2015-12-16 20:43 - 00000992 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-27 21:41 - 2015-12-16 20:42 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-02-27 15:40 - 2015-07-10 03:02 - 00000000 ____D C:\Windows\INF
2016-02-27 15:36 - 2015-11-01 01:20 - 00256968 _____ (Lenovo Group Limited) C:\Windows\system32\iMDriverHelper.dll
2016-02-27 14:36 - 2015-07-10 03:04 - 00000000 ___HD C:\Program Files\WindowsApps
2016-02-27 14:36 - 2015-07-10 03:04 - 00000000 ____D C:\Windows\AppReadiness
2016-02-27 14:14 - 2015-12-16 20:42 - 00000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-02-27 12:47 - 2016-01-10 12:32 - 00000000 ____D C:\Users\Ivushka\AppData\Local\AvgSetupLog
2016-02-27 12:46 - 2015-12-20 15:43 - 00002954 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-02-27 12:46 - 2015-11-01 01:15 - 00002274 _____ C:\Windows\System32\Tasks\DolbySelectorTask
2016-02-27 12:46 - 2015-10-31 23:57 - 00002212 _____ C:\Windows\System32\Tasks\PDVDServ12 Task
2016-02-27 12:41 - 2015-12-16 20:43 - 00003504 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-27 12:41 - 2015-12-16 20:43 - 00003280 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-27 09:53 - 2015-12-12 17:30 - 00000000 ____D C:\Program Files\Common Files\AV
2016-02-27 09:46 - 2015-07-16 07:54 - 00875126 _____ C:\Windows\system32\PerfStringBackup.INI
2016-02-27 09:09 - 2015-12-16 20:43 - 00002459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-27 09:09 - 2015-12-16 20:43 - 00002447 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-02-25 19:56 - 2015-12-30 19:10 - 00000000 ____D C:\Windows\Minidump
2016-02-25 18:17 - 2015-10-31 23:47 - 00000000 ____D C:\Windows\System32\Tasks\Lenovo
2016-02-25 18:16 - 2015-12-12 17:28 - 00000000 ____D C:\Users\Ivushka\AppData\Local\Downloaded Installations
2016-02-25 18:12 - 2015-07-10 01:05 - 00032768 ___SH C:\Windows\system32\config\ELAM
2016-02-21 19:53 - 2015-07-10 04:20 - 00285368 _____ C:\Windows\system32\FNTCACHE.DAT
2016-02-20 20:39 - 2016-01-10 12:36 - 00000882 _____ C:\Users\Public\Desktop\AVG.lnk
2016-02-20 20:39 - 2016-01-10 12:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-02-20 20:39 - 2016-01-02 22:25 - 00000000 ____D C:\Users\Ivushka\AppData\Local\CrashDumps
2016-02-20 20:37 - 2015-10-31 23:53 - 00000000 ____D C:\Program Files (x86)\McAfee
2016-02-19 20:20 - 2015-10-31 23:52 - 00000000 ____D C:\ProgramData\McAfee
2016-02-19 20:18 - 2015-10-31 23:53 - 00000000 ____D C:\Program Files\Common Files\McAfee
2016-02-19 20:18 - 2015-07-10 03:04 - 00000000 ___HD C:\Windows\ELAMBKUP
2016-02-19 20:16 - 2015-12-12 18:15 - 00003122 _____ C:\Windows\System32\Tasks\McAfeeLogon
2016-02-19 20:16 - 2015-12-12 18:15 - 00000000 ____D C:\Windows\System32\Tasks\McAfee
2016-02-19 19:31 - 2015-10-31 23:51 - 00000000 ____D C:\ProgramData\CyberLink
2016-02-19 17:59 - 2015-07-10 03:04 - 00000000 ____D C:\Windows\rescache
2016-02-17 17:50 - 2015-07-10 03:04 - 00000000 ____D C:\Windows\LiveKernelReports
2016-02-16 19:44 - 2015-12-11 19:15 - 00000000 ____D C:\Users\Ivushka\Desktop\Foto záloha
2016-02-16 17:37 - 2016-01-10 12:43 - 00000000 ____D C:\Users\Ivushka\AppData\Roaming\AVG
2016-02-16 17:30 - 2015-07-10 05:16 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-16 17:25 - 2016-01-04 14:46 - 36764147 _____ C:\Users\Ivushka\Desktop\Poznatky z USA.odt
2016-02-14 21:45 - 2015-12-11 17:49 - 00000000 ____D C:\Users\Ivushka\Desktop\USA
2016-02-14 20:19 - 2015-12-11 20:13 - 00000000 ____D C:\Windows\system32\MRT
2016-02-14 20:16 - 2015-12-11 20:13 - 146614896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-02-14 19:55 - 2016-01-10 12:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-02-14 08:02 - 2015-12-11 16:54 - 00000000 ____D C:\ProgramData\Skype
2016-02-13 21:12 - 2015-12-15 19:12 - 00000000 ____D C:\Users\Ivushka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth
2016-02-12 16:08 - 2016-01-01 18:26 - 00000000 ____D C:\Users\Ivushka\Desktop\SD výběr
2016-02-10 18:19 - 2015-07-10 02:55 - 00000000 ____D C:\Windows\CbsTemp
2016-02-10 14:42 - 2015-12-16 20:42 - 00004030 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-02-02 14:47 - 2015-07-10 03:06 - 00828920 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-02-02 14:47 - 2015-07-10 03:06 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2016-02-21 17:17 - 2016-02-21 17:17 - 0000197 _____ () C:\Users\Ivushka\AppData\Roaming\LAPTOP-9N491QR6.MTBF.txt
2016-02-21 17:17 - 2016-02-21 19:40 - 0000898 _____ () C:\Users\Ivushka\AppData\Roaming\__AvidCloudManager.log
2016-02-21 17:17 - 2016-02-21 19:18 - 0000672 _____ () C:\Users\Ivushka\AppData\Roaming\__AvidCloudManagerPrevious.log
2016-02-21 17:19 - 2016-02-21 17:19 - 0003584 _____ () C:\Users\Ivushka\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-01-13 18:58 - 2016-01-13 18:58 - 0002560 _____ () C:\Users\Ivushka\AppData\Local\uninstall.exe
2015-11-01 01:14 - 2015-11-01 01:14 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Ivushka\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-02-21 09:25

==================== End of FRST.txt ============================

Re: reklamy v prohlížečích, samovolné restarty

Napsal: 28 úno 2016 18:15
od altrok
:arrow: Mate dva aktivni antiviry, coz neni rozumne - jeden odinstalujte pomoci oficialniho odinstalatoru http://support.eset.com/kb146/?locale=e ... cale=cs_CZ

Kód: Vybrat vše

AV: AVG AntiVirus Free Edition (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AV: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}


  • Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
  • ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
  • znovu spustte FRST a kliknete na Fix
  • po restartu bude na plose ulozen fixlog, jehoz obsah vlozte do pristi odpovedi

    Kód: Vybrat vše

    Start
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [801816 2013-09-27] (ZONER software)
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\...\RunOnce: [Uninstall C:\Users\Ivushka\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Ivushka\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\...\MountPoints2: F - "F:\Setup.exe" 
FF HKLM-x32\...\Firefox\Extensions: [jid1-xNAj4KGyf5wyhg@jetpack] - C:\Program Files (x86)\Faster Web\faster-web.xpi => not found
C:\Program Files (x86)\Faster Web
2016-02-28 08:34 - 2016-02-28 08:39 - 00000000 ____D C:\AdwCleaner
2016-02-28 08:33 - 2016-02-28 08:34 - 01518592 _____ C:\Users\Ivushka\Desktop\adwcleaner_5.037.exe
Task: {0EA052B1-41D4-4AAF-B21C-5662BE7F656F} - System32\Tasks\{1FB6B9DA-6CB5-B114-F30F-B7B7489CBB7F} => /s /n /i:"/rt" "C:\PROGRA~3\4849aee0\f982c19.dll"
C:\PROGRA~3\4849aee0
Task: {6A1F7A52-F4F8-4439-A724-40AA69942613} - System32\Tasks\0116avzUpdateInfo => C:\ProgramData\Avg_Update_0116avz\0116avz_AVG-Secure-Search-Update.exe
Task: {90C86EE4-79E9-4632-985E-32809837363E} - System32\Tasks\{7F0D0947-7D04-090B-7811-7E0D7F79110E} => powershell.exe -nologo -executionpolicy bypass -noninteractive -windowstyle hidden -EncodedCommand JABFAHIAcgBvAHIAQQBjAHQAaQBvAG4AUAByAGUAZgBlAHIAZQBuAGMAZQA9ACIAcwB0AG8AcAAiADsAJABzAGMAPQAiAFMAaQBsAGUAbgB0AGwAeQBDAG8AbgB0AGkAbgB1AGUAIgA7ACQAVwBhAHIAbgBpAG4AZwBQAHIAZQBmAGUAcgBlAG4AYwBlAD0AJABzAGMAOwAkAFAAcgBvAGcA (the data entry has 9368 more characters).
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
ShortcutWithArgument: C:\Users\Ivushka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dmysearch.com/?prd=set_epc&s=G1Eztuttn1,8810c45c-2229-4fee-b0d2-f2a1ef2f3f86,
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dmysearch.com/?prd=set_epc&s=G1Eztuttn1,8810c45c-2229-4fee-b0d2-f2a1ef2f3f86,
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dmysearch.com/?prd=set_epc&s=G1Eztuttn1,8810c45c-2229-4fee-b0d2-f2a1ef2f3f86,
EmptyTemp:
End

Re: reklamy v prohlížečích, samovolné restarty

Napsal: 28 úno 2016 18:51
od pavel17
AVG odinstalováno

Fix result of Farbar Recovery Scan Tool (x64) Version:27-02-2016
Ran by Ivushka (2016-02-28 09:37:53) Run:1
Running from C:\Users\Ivushka\Desktop
Loaded Profiles: Ivushka (Available Profiles: Ivushka)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [801816 2013-09-27] (ZONER software)
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\...\RunOnce: [Uninstall C:\Users\Ivushka\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Ivushka\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\...\MountPoints2: F - "F:\Setup.exe"
FF HKLM-x32\...\Firefox\Extensions: [jid1-xNAj4KGyf5wyhg@jetpack] - C:\Program Files (x86)\Faster Web\faster-web.xpi => not found
C:\Program Files (x86)\Faster Web
2016-02-28 08:34 - 2016-02-28 08:39 - 00000000 ____D C:\AdwCleaner
2016-02-28 08:33 - 2016-02-28 08:34 - 01518592 _____ C:\Users\Ivushka\Desktop\adwcleaner_5.037.exe
Task: {0EA052B1-41D4-4AAF-B21C-5662BE7F656F} - System32\Tasks\{1FB6B9DA-6CB5-B114-F30F-B7B7489CBB7F} => /s /n /i:"/rt" "C:\PROGRA~3\4849aee0\f982c19.dll"
C:\PROGRA~3\4849aee0
Task: {6A1F7A52-F4F8-4439-A724-40AA69942613} - System32\Tasks\0116avzUpdateInfo => C:\ProgramData\Avg_Update_0116avz\0116avz_AVG-Secure-Search-Update.exe
Task: {90C86EE4-79E9-4632-985E-32809837363E} - System32\Tasks\{7F0D0947-7D04-090B-7811-7E0D7F79110E} => powershell.exe -nologo -executionpolicy bypass -noninteractive -windowstyle hidden -EncodedCommand JABFAHIAcgBvAHIAQQBjAHQAaQBvAG4AUAByAGUAZgBlAHIAZQBuAGMAZQA9ACIAcwB0AG8AcAAiADsAJABzAGMAPQAiAFMAaQBsAGUAbgB0AGwAeQBDAG8AbgB0AGkAbgB1AGUAIgA7ACQAVwBhAHIAbgBpAG4AZwBQAHIAZQBmAGUAcgBlAG4AYwBlAD0AJABzAGMAOwAkAFAAcgBvAGcA (the data entry has 9368 more characters).
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
ShortcutWithArgument: C:\Users\Ivushka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dmysearch.com/?prd=set_epc&s=G1Eztuttn1,8810c45c-2229-4fee-b0d2-f2a1ef2f3f86,
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dmysearch.com/?prd=set_epc&s=G1Eztuttn1,8810c45c-2229-4fee-b0d2-f2a1ef2f3f86,
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dmysearch.com/?prd=set_epc&s=G1Eztuttn1,8810c45c-2229-4fee-b0d2-f2a1ef2f3f86,
EmptyTemp:
End
*****************

Restore point was successfully created.
Processes closed successfully.
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Autoupdate => value removed successfully
HKU\S-1-5-21-3127553534-2473892740-565383663-1002\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Uninstall C:\Users\Ivushka\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64 => value removed successfully
"HKU\S-1-5-21-3127553534-2473892740-565383663-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F" => key removed successfully
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\jid1-xNAj4KGyf5wyhg@jetpack => value removed successfully
"C:\Program Files (x86)\Faster Web" => not found.
C:\AdwCleaner => moved successfully
C:\Users\Ivushka\Desktop\adwcleaner_5.037.exe => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0EA052B1-41D4-4AAF-B21C-5662BE7F656F}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0EA052B1-41D4-4AAF-B21C-5662BE7F656F}" => key removed successfully
C:\Windows\System32\Tasks\{1FB6B9DA-6CB5-B114-F30F-B7B7489CBB7F} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{1FB6B9DA-6CB5-B114-F30F-B7B7489CBB7F}" => key removed successfully
"C:\PROGRA~3\4849aee0" => not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6A1F7A52-F4F8-4439-A724-40AA69942613}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6A1F7A52-F4F8-4439-A724-40AA69942613}" => key removed successfully
C:\Windows\System32\Tasks\0116avzUpdateInfo => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\0116avzUpdateInfo" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{90C86EE4-79E9-4632-985E-32809837363E}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{90C86EE4-79E9-4632-985E-32809837363E}" => key removed successfully
C:\Windows\System32\Tasks\{7F0D0947-7D04-090B-7811-7E0D7F79110E} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7F0D0947-7D04-090B-7811-7E0D7F79110E}" => key removed successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\Users\Ivushka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk => Shortcut argument removed successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk => Shortcut argument removed successfully.
C:\Users\Public\Desktop\Google Chrome.lnk => Shortcut argument removed successfully.
EmptyTemp: => 356.7 MB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 09:39:13 ====

Re: reklamy v prohlížečích, samovolné restarty

Napsal: 29 úno 2016 06:07
od pavel17
reklamní banery zmizely, prohlížeče se zatím chovají normálně a zatím žádný nečekaný náhlý restart pc nebyl..tak snad bude vše i nadále ok

moc děkuji za pomoc :-)

Re: reklamy v prohlížečích, samovolné restarty

Napsal: 29 úno 2016 10:53
od altrok
Za malo :) Jeste nez mi utecete, koukneme jeste na stav disku.
  • Stahnete Crystal Disk Info (CDI) https://osdn.jp/frs/redir.php?m=cznic&f ... o6_7_5.zip
  • archiv extrahujte a spustte vyextrahovany soubor DiskInfo.exe
  • ve spustenem programu kliknete nahore na Upravy -> Kopirovat (log mate nyni zkopirovany ve schrance)
  • log vlozte do dalsi odpovedi (Ctrl + V)

Re: reklamy v prohlížečích, samovolné restarty

Napsal: 06 bře 2016 20:53
od pavel17
omlouvám se za neaktivitu, notebook sem dříve neměl k dispozici..

----------------------------------------------------------------------------
CrystalDiskInfo 6.7.5 (C) 2008-2016 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 10 [10.0 Build 10240] (x64)
Date : 2016/03/06 11:51:44

-- Controller Map ----------------------------------------------------------
+ AMD SATA Controller [ATA]
- WDC WD10JPCX-24UE4T0
- PLDS DVD-RW DA8A6SH
- Microsoft Storage Spaces Controller [SCSI]

-- Disk List ---------------------------------------------------------------
(1) WDC WD10JPCX-24UE4T0 : 1000,2 GB [0/0/0, pd1] - wd

----------------------------------------------------------------------------
(1) WDC WD10JPCX-24UE4T0
----------------------------------------------------------------------------
Model : WDC WD10JPCX-24UE4T0
Firmware : 01.01A01
Serial Number : WD-WX91A85A4SLR
Disk Size : 1000,2 GB (8,4/137,4/1000,2/1000,2)
Buffer Size : 16384 KB
Queue Depth : 32
# of Sectors : 1953525168
Rotation Rate : 5400 RPM
Interface : Serial ATA
Major Version : ACS-2
Minor Version : ----
Transfer Mode : SATA/300 | SATA/600
Power On Hours : 433 hod.
Power On Count : 203 krát
Temperature : 35 C (95 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 0060h [ON]
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 200 200 _51 000000000000 Počet chyb čtení
03 187 176 _21 000000000661 Čas na roztočení ploten
04 100 100 __0 00000000024A Počet spuštění/zastavení
05 200 200 140 000000000000 Počet přemapovaných sektorů
07 200 200 _51 000000000000 Počet chybných hledání
09 100 100 __0 0000000001B1 Hodin v činnosti
0A 100 100 __0 000000000000 Počet opakovaných pokusů o roztočení ploten
0B 100 100 __0 000000000000 Počet pokusů o překalibrování
0C 100 100 __0 0000000000CB Počet cyklů zapnutí zařízení
C0 200 200 __0 000000000000 Počet vypnutí disku
C1 199 199 __0 000000000D17 Počet cyklů načítání/vymazání
C2 112 105 __0 000000000023 Teplota
C4 200 200 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 200 200 __0 000000000000 Počet podezřelých sektorů
C6 100 253 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 200 200 __0 000000000000 Počet chyb při zápisu sektorů
F0 100 100 __0 0000000001A7 Čas nastavování hlaviček - v hodinách

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 427A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2057 442D 5758 3931 4138 3541 3453 4C52
020: 0000 8000 0000 3031 2E30 3141 3031 5744 4320 5744
030: 3130 4A50 4358 2D32 3455 4534 5430 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0000 0000 0007 3FFF 0010 003F FC10 00FB 0100
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F FF0E 0004 004C 0044
080: 03FE 0000 346B 7D29 6123 3469 BC09 6123 407F 0061
090: 0061 0060 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6DB0 7470 0000 0000 0000 0000 6003 0000 5001 4EE6
110: 5B66 F162 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0400
130: 0001 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 7035 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1518 0000 0000
220: 0000 0000 103E 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 1000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 61A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 C8 C8 00 00 00 00 00 00 00 03 27
010: 00 BB B0 61 06 00 00 00 00 00 04 32 00 64 64 4A
020: 02 00 00 00 00 00 05 33 00 C8 C8 00 00 00 00 00
030: 00 00 07 2F 00 C8 C8 00 00 00 00 00 00 00 09 32
040: 00 64 64 B1 01 00 00 00 00 00 0A 32 00 64 64 00
050: 00 00 00 00 00 00 0B 32 00 64 64 00 00 00 00 00
060: 00 00 0C 32 00 64 64 CB 00 00 00 00 00 00 C0 32
070: 00 C8 C8 00 00 00 00 00 00 00 C1 32 00 C7 C7 17
080: 0D 00 00 00 00 00 C2 22 00 70 69 23 00 00 00 00
090: 00 00 C4 32 00 C8 C8 00 00 00 00 00 00 00 C5 32
0A0: 00 C8 C8 00 00 00 00 00 00 00 C6 30 00 64 FD 00
0B0: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00
0C0: 00 00 C8 08 00 C8 C8 00 00 00 00 00 00 00 F0 32
0D0: 00 64 64 A7 01 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 40 47 01 7B
170: 03 00 01 00 02 CC 05 00 00 00 00 00 00 00 00 00
180: 00 00 01 04 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 33 C8 C8 C8 C8 00 00 00 00 00 00 03 15
010: 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00
020: 00 00 00 00 00 00 05 8C 00 00 00 00 00 00 00 00
030: 00 00 07 33 C8 C8 C8 C8 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 00 00 00 00 00
050: 00 00 00 00 00 00 0B 00 00 00 00 00 00 00 00 00
060: 00 00 0C 00 00 00 00 00 00 00 00 00 00 00 C0 00
070: 00 00 00 00 00 00 00 00 00 00 C1 00 00 00 00 00
080: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
090: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
0A0: 00 00 00 00 00 00 00 00 00 00 C6 00 00 00 00 00
0B0: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
0C0: 00 00 C8 00 C8 C8 C8 C8 00 00 00 00 00 00 F0 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3A

Re: reklamy v prohlížečích, samovolné restarty

Napsal: 06 bře 2016 23:44
od altrok
Disk je v naprostem poradku, takze samovolne restarty by nemely byt jeho vinou. Pokud nepozorujete zadne problemy, tak uz jen uklidime.
A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

Re: reklamy v prohlížečích, samovolné restarty

Napsal: 07 bře 2016 01:58
od pavel17
Děkuji Vám za pomoc :-)
reklamy v prohlížečích se nevyskytují, to je úplně v pohodě, s těmi restarty to je lepší, ale zcela nezmizely..před Vaším zásahem se notebook restartoval asi jednou denně, teď se první samovolný restart objevil až po týdnu..pravděpodobně to bude problém OS Win 10..

Ale i tak si velmi cením Vaši pomoci, díky :-)

Re: reklamy v prohlížečích, samovolné restarty

Napsal: 07 bře 2016 02:06
od altrok
Nemate zac. Nejaka skodna v PC byla, ale byla uspesne zlikvidovana.

Pokud se jedna o softwarovou vadu, mel by pomoct reset do tovarniho nastaveni. Diagnostikovat podobne problemy, ktere mohou byt zpusobeny vadou hardwaru, bohuzel neumim, takze Vas odkazu na servis...
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz