VIRY.CZ

Dobrý den,

na jednom PC se mi stále po restartu zobrazují 2 okna s errorem:

"javaupdate.exe – Systémová chyba.

Program nelze spustit, protože v počítači chybí nss3.dll. Pokuste se tento problém vyřešit přeinstalací programu."

Tyto okna lze sice vypnout, ale je to otravné.
Javu nemám nainstalovanou.

Našel jsem cestu k souboru javaupdate.exe, ale i když h osmažu, tak ¨po restartu znovu objeví:
c:\Windows\java update\javaupdate.exe


Projel jsem PC adwcleanerem 6.041, ale nepomohlo – po restartu opět vyskočí okno.


Děkuji za rady.

FRST uvádím zde, Addition.txt v příloze.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-12-2016
Ran by MrPierc (administrator) on MRPIERC-PC (21-12-2016 07:57:42)
Running from C:\Users\MrPierc\Downloads
Loaded Profiles: MrPierc (Available Profiles: MrPierc)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe
() C:\Windows\SysWOW64\srvany.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\KMService.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Realtek Semiconductor) C:\Windows\RAVCpl64.exe
() C:\Users\MrPierc\AppData\Roaming\svchost.exe
() C:\Users\MrPierc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\svchost.exe
(Logitech(c)) C:\Program Files (x86)\Logitech\G930\G930.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Valve Corporation) D:\Steam\Steam.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
() C:\AppCache\x86\svchost.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD.EXE

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RAVCpl64.exe [6453760 2008-06-27] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2008-06-25] (Realtek Semiconductor Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [641664 2012-04-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] => Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
HKLM-x32\...\Run: [Logitech G930] => C:\Program Files (x86)\Logitech\G930\G930.exe [1516888 2011-03-23] (Logitech(c))
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [23556fb1360f366337f97c924e76ead3] => C:\Users\MrPierc\AppData\Roaming\svchost.exe [29184 2016-12-20] ()
HKLM-x32\...\Run: [java update] => C:\Windows\java update\javaupdate.exe [956908 2006-07-21] ()
HKLM\...\Policies\Explorer\Run: [Policies] => C:\Windows\java update\javaupdate.exe [956908 2006-07-21] ()
HKU\S-1-5-21-44186382-3769326757-1659282314-1001\...\Run: [23556fb1360f366337f97c924e76ead3] => C:\Users\MrPierc\AppData\Roaming\svchost.exe [29184 2016-12-20] ()
HKU\S-1-5-21-44186382-3769326757-1659282314-1001\...\Run: [java update] => C:\Windows\java update\javaupdate.exe [ ] ()
HKU\S-1-5-21-44186382-3769326757-1659282314-1001\...\Policies\Explorer\Run: [Policies] => C:\Windows\java update\javaupdate.exe [956908 2006-07-21] ()
Startup: C:\Users\MrPierc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\23556fb1360f366337f97c924e76ead3.exe [2016-12-20] ()
Startup: C:\Users\MrPierc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Update.lnk [2016-12-10]
ShortcutTarget: Microsoft Update.lnk -> C:\Users\MrPierc\AppData\Local\Temp\M3.exe ()
Startup: C:\Users\MrPierc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\svchost.exe [2016-12-10] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 127.0.0.1 validation.sls.microsoft.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{9EDDA931-B809-463A-9340-E4C911CBB0A5}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{B87238FC-BF9B-4B54-8590-8BA3619AAF1E}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-44186382-3769326757-1659282314-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.cz/
URLSearchHook: HKU\S-1-5-21-44186382-3769326757-1659282314-1001 - DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\Windows\SysWOW64\dvmurl.dll (DeviceVM Inc.)
SearchScopes: HKU\S-1-5-21-44186382-3769326757-1659282314-1001 -> DefaultScope {FD63BF63-BFFF-4B8F-9D26-4267DF7F17DD} URL = hxxp://www.google.com/custom?q={searchTerms}&s ... BFORID%3A1
SearchScopes: HKU\S-1-5-21-44186382-3769326757-1659282314-1001 -> {FD63BF63-BFFF-4B8F-9D26-4267DF7F17DD} URL = hxxp://www.google.com/custom?q={searchTerms}&s ... BFORID%3A1
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF DefaultProfile: u2atqwo7.default
FF ProfilePath: C:\Users\MrPierc\AppData\Roaming\Mozilla\Firefox\Profiles\u2atqwo7.default [2016-12-21]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll [2016-12-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-14] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2012-06-03] (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-44186382-3769326757-1659282314-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2012-06-03] (Pando Networks)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxps://www.ulozto.cz/
CHR StartupUrls: Default -> "hxxps://www.ulozto.cz/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\PepperFlash\pepflashplayer.dll => No File
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\pdf.dll => No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll => No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll => No File
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll => No File
CHR Plugin: (Java(TM) Platform SE 7 U5) - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll => No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_168.dll => No File
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\SysWOW64\npDeployJava1.dll => No File
CHR Profile: C:\Users\MrPierc\AppData\Local\Google\Chrome\User Data\Default [2016-12-19]
CHR Extension: (AdBlock) - C:\Users\MrPierc\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-12-19]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\MrPierc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-12-10]
CHR Extension: (Chrome Media Router) - C:\Users\MrPierc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-19]

Opera:
=======
OPR Session Restore: -> is enabled.
OPR Extension: (AdBlock) - C:\Users\MrPierc\AppData\Roaming\Opera Software\Opera Stable\Extensions\aobdicepooefnbaeokijohmhjlleamfj [2016-05-29]
StartMenuInternet: (HKLM) Opera - C:\Program Files\Opera x64\Opera.exe

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 GEST Service; C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe [80392 2008-07-11] ()
R2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2016-12-10] () [File not signed]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2012-06-09] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10216688 2016-11-28] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 LADF_BakerCOnly; C:\Windows\System32\DRIVERS\ladfBakerCamd64.sys [410184 2011-03-18] (Logitech)
S3 LADF_BakerROnly; C:\Windows\System32\DRIVERS\ladfBakerRamd64.sys [335688 2011-03-18] (Logitech)
S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-12-21 07:57 - 2016-12-21 07:58 - 00012767 _____ C:\Users\MrPierc\Downloads\FRST.txt
2016-12-21 07:57 - 2016-12-21 07:57 - 00000000 ____D C:\FRST
2016-12-21 07:51 - 2016-12-21 07:51 - 02420224 _____ (Farbar) C:\Users\MrPierc\Downloads\FRST64.exe
2016-12-21 07:42 - 2016-12-21 07:45 - 00000000 ____D C:\AdwCleaner
2016-12-21 07:42 - 2016-12-21 07:42 - 03977168 _____ C:\Users\MrPierc\Downloads\adwcleaner_6.041.exe
2016-12-16 17:11 - 2016-12-16 17:11 - 00134746 _____ C:\Users\MrPierc\Documents\cc_20161216_171103.reg
2016-12-16 17:11 - 2016-12-16 17:11 - 00009874 _____ C:\Users\MrPierc\Documents\cc_20161216_171124.reg
2016-12-16 17:04 - 2016-12-16 17:05 - 08803648 _____ (Piriform Ltd) C:\Users\MrPierc\Downloads\ccsetup525.exe
2016-12-10 17:52 - 2016-12-10 17:56 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-12-10 17:52 - 2016-12-10 17:52 - 00001043 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
2016-12-10 17:52 - 2016-12-10 17:52 - 00001031 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk
2016-12-10 17:52 - 2016-12-10 17:52 - 00000000 ____D C:\Users\MrPierc\AppData\Roaming\TeamViewer
2016-12-10 17:48 - 2016-12-10 17:49 - 12880752 _____ (TeamViewer GmbH) C:\Users\MrPierc\Downloads\TeamViewer_Setup_cs.exe
2016-12-10 17:40 - 2016-12-10 17:40 - 00000000 __SHD C:\AppCache
2016-12-10 17:31 - 2016-12-21 07:59 - 00008587 _____ C:\Users\MrPierc\AppData\Roaming\svchost.exe.tmp
2016-12-10 17:31 - 2016-12-20 08:46 - 00029184 _____ C:\Users\MrPierc\AppData\Roaming\svchost.exe
2016-12-10 17:21 - 2016-12-21 07:46 - 00000000 ____D C:\Users\MrPierc\AppData\LocalLow\Mozilla
2016-12-10 17:21 - 2016-12-15 12:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-10 17:21 - 2016-12-15 08:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-12-10 17:21 - 2016-12-10 17:21 - 00001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-12-10 17:21 - 2016-12-10 17:21 - 00001147 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-12-10 17:21 - 2016-12-10 17:21 - 00000000 ____D C:\Users\MrPierc\AppData\Roaming\Mozilla
2016-12-10 17:18 - 2016-12-10 17:18 - 00243624 _____ C:\Users\MrPierc\Downloads\Firefox Setup Stub 50.0.2.exe
2016-12-10 17:12 - 2016-12-10 17:12 - 00001414 _____ C:\Users\MrPierc\Desktop\Zaloha_plocha_PC_Blanka_10.12.2016 – zástupce.lnk
2016-12-10 16:33 - 2016-12-10 16:33 - 00000000 ____D C:\Users\MrPierc\AppData\Roaming\Sun
2016-12-10 16:31 - 2016-12-10 16:31 - 00000927 _____ C:\Users\MrPierc\Desktop\Dokumenty TataaMama – zástupce.lnk
2016-12-10 16:20 - 2016-12-10 17:17 - 00001541 _____ C:\Users\MrPierc\Desktop\Filmy_z_netu – zástupce.lnk

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-12-21 07:56 - 2009-07-14 05:45 - 00022976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-21 07:56 - 2009-07-14 05:45 - 00022976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-21 07:56 - 2006-06-03 12:22 - 00016515 ____H C:\Users\MrPierc\AppData\Roaming\MrPierclog.dat
2016-12-21 07:46 - 2012-05-31 16:09 - 00020544 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2016-12-21 07:46 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-20 18:46 - 2012-05-31 16:30 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-17 05:55 - 2012-09-07 17:18 - 00003384 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-17 05:55 - 2012-09-07 17:18 - 00003256 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-16 17:24 - 2009-07-14 16:18 - 00668882 _____ C:\Windows\system32\perfh005.dat
2016-12-16 17:24 - 2009-07-14 16:18 - 00141542 _____ C:\Windows\system32\perfc005.dat
2016-12-16 17:24 - 2009-07-14 06:13 - 01584626 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-16 17:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-12-16 11:13 - 2014-11-26 08:59 - 00003850 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1416988771
2016-12-16 11:13 - 2014-11-26 08:57 - 00000000 ____D C:\Program Files (x86)\Opera
2016-12-16 09:48 - 2009-07-14 06:08 - 00032518 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-12-14 21:56 - 2012-09-07 17:19 - 00002195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-14 21:56 - 2012-09-07 17:19 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-12-14 17:47 - 2012-05-31 16:30 - 00807000 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-12-14 17:47 - 2012-05-31 16:30 - 00144984 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-12-14 17:47 - 2012-05-31 16:30 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-12-14 17:46 - 2012-05-31 16:30 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-12-14 17:46 - 2012-05-31 16:30 - 00000000 ____D C:\Windows\system32\Macromed
2016-12-11 18:31 - 2012-05-31 17:14 - 00000000 ____D C:\Users\MrPierc\AppData\Local\Mozilla
2016-12-11 15:47 - 2012-06-08 15:38 - 00000000 ____D C:\Users\MrPierc\AppData\Local\Google
2016-12-11 07:12 - 2012-05-31 16:43 - 00118840 _____ C:\Users\MrPierc\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-11 07:11 - 2009-07-14 05:45 - 00431048 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-10 17:28 - 2012-06-04 17:49 - 00077824 _____ C:\Windows\KMService.exe
2016-12-10 17:20 - 2012-06-04 17:49 - 00008192 _____ C:\Windows\SysWOW64\srvany.exe
2016-12-10 16:36 - 2013-11-18 10:58 - 00000000 ____D C:\ProgramData\Oracle
2016-12-10 16:32 - 2014-11-26 08:38 - 00269888 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

==================== Files in the root of some directories =======

2006-06-03 12:22 - 2016-12-21 07:56 - 0016515 ____H () C:\Users\MrPierc\AppData\Roaming\MrPierclog.dat
2016-12-10 17:31 - 2016-12-20 08:46 - 0029184 _____ () C:\Users\MrPierc\AppData\Roaming\svchost.exe
2016-12-10 17:31 - 2016-12-21 07:59 - 0008587 _____ () C:\Users\MrPierc\AppData\Roaming\svchost.exe.tmp

Files to move or delete:
====================
C:\Windows\SysWOW64\ntshrui.dll


Some files in TEMP:
====================
C:\Users\MrPierc\AppData\Local\Temp\5593.exe
C:\Users\MrPierc\AppData\Local\Temp\FP_PL_PFS_INSTALLER_32bit.exe
C:\Users\MrPierc\AppData\Local\Temp\installerdll21255651.dll
C:\Users\MrPierc\AppData\Local\Temp\installerdll21264387.dll
C:\Users\MrPierc\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\MrPierc\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\MrPierc\AppData\Local\Temp\jre-7u5-windows-i586-iftw.exe
C:\Users\MrPierc\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\MrPierc\AppData\Local\Temp\jre-8u111-windows-au.exe
C:\Users\MrPierc\AppData\Local\Temp\libeay32.dll
C:\Users\MrPierc\AppData\Local\Temp\M3.exe
C:\Users\MrPierc\AppData\Local\Temp\msvcr120.dll
C:\Users\MrPierc\AppData\Local\Temp\rootsupd.exe
C:\Users\MrPierc\AppData\Local\Temp\Setup.exe
C:\Users\MrPierc\AppData\Local\Temp\sonarinst.exe
C:\Users\MrPierc\AppData\Local\Temp\sqlite3.dll
C:\Users\MrPierc\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\MrPierc\AppData\Local\Temp\uttF772.tmp.exe
C:\Users\MrPierc\AppData\Local\Temp\vcredist_x64.exe
C:\Users\MrPierc\AppData\Local\Temp\vcredist_x86.exe
C:\Users\MrPierc\AppData\Local\Temp\WindowsInstaller-KB893803-v2-x86.exe
C:\Users\MrPierc\AppData\Local\Temp\xxvmrqinzbtcjntkw.exe
C:\Users\MrPierc\AppData\Local\Temp\_is9C4E.exe


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-12-16 12:10

==================== End of FRST.txt ============================

ahoj,
Tvorba fixlistu pro FRST
•Spustte poznamkovy blok (Start-spustit-notepad)
•Zkopirujte skript >> •Ulozte vytvoreny TXT jako fixlist.txt
•Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe
•Kliknete na Fix
•Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Dobrý den,

děkuji za reakci. Přikládám.

Po restartu, stejná chyba.

ahoj,
necakal som, ze po prvom kroku bude vsetko OK
PC je silne zavireny
1. vycisti PC s CCleanerom - aj registre
2. prescanuj PC s MBAM - log sem

Dobrý den,

děkuji za pomoc. Přikládám výsledky ze skenu.

vsetko najdene nechaj odstranit v MBAM - restart PC
napis, ci su problemy

Dobrý den, je to pryč
Moc děkuji za pomoc!

Přikládám pro jistotu soubor po 2. skenu.

rado sa stalo
prajem pekne sviatky