PC sa sprava podozrivo

Zpráva

e-comm · #1 Příspěvek od **e-comm** » 30 kvě 2015 18:56

Dobry den,
v poslednej dobe sa pc sprava divne..mrzne, sem tam ide rychlejsie inokedy velmi pomaly..mam podozrenie na malware..
Mali by ste cas sa mi nato pozriet?

Vopred dakujem

Logfile of random's system information tool 1.10 (written by random/random)
Run by Ľubka at 2015-05-30 20:07:53
Microsoft Windows 7 Starter Service Pack 1
System drive C: has 178 GB (81%) free of 221 GB
Total RAM: 1013 MB (8% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:08:20, on 30. 5. 2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16750)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Bluetooth Suite\BtvStack.exe
C:\Program Files\Bluetooth Suite\AthBtTray.exe
C:\Program Files\Acer\Android Manager\iSync.exe
C:\Program Files\Acer\Updater\iUpdate.exe
C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\igfxext.exe
C:\Program Files\Launch Manager\LMworker.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Users\Ľubka\AppData\Roaming\Spotify\SpotifyWebHelper.exe
C:\Windows\system32\taskhost.exe
C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ľubka\Downloads\RSIT.exe
C:\Users\Ľubka\AppData\Roaming\Spotify\Spotify.exe
C:\Users\Ľubka\AppData\Roaming\Spotify\SpotifyCrashService.exe
C:\Users\Ľubka\AppData\Roaming\Spotify\Spotify.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Ľubka\Downloads\RSIT (1).exe
C:\Program Files\trend micro\Ľubka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5w4762v20r
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AtherosBtStack] "C:\Program Files\Bluetooth Suite\BtvStack.exe"
O4 - HKLM\..\Run: [AthBtTray] "C:\Program Files\Bluetooth Suite\AthBtTray.exe"
O4 - HKLM\..\Run: [iSyncData] C:\Program Files\Acer\Android Manager\iSync.exe
O4 - HKLM\..\Run: [AndroidManager] C:\Program Files\Acer\Android Manager\AML.exe
O4 - HKLM\..\Run: [iPatchData] C:\Program Files\Acer\Updater\iUpdate.exe
O4 - HKLM\..\Run: [Acer ePower Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Ľubka\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Ľubka\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Spotify] "C:\Users\Ľubka\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Acer VCM.lnk = ?
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files\Bluetooth Suite\adminservice.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files\Launch Manager\dsiwmis.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files\Acer\Acer VCM\RS_Service.exe
O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe

--
End of file - 8143 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-92525525-684568335-2651620714-1000Core.job - C:\Users\Ľubka\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-92525525-684568335-2651620714-1000UA.job - C:\Users\Ľubka\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2012-03-08 393600]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files\Launch Manager\LManager.exe [2010-08-10 975952]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-06-08 284696]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-08-03 9398888]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-06-16 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-06-16 173592]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-06-16 150552]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-02-05 1692968]
"AtherosBtStack"=C:\Program Files\Bluetooth Suite\BtvStack.exe [2010-05-26 470176]
"AthBtTray"=C:\Program Files\Bluetooth Suite\AthBtTray.exe [2010-05-26 289952]
"iSyncData"=C:\Program Files\Acer\Android Manager\iSync.exe [2010-01-08 407416]
"AndroidManager"=C:\Program Files\Acer\Android Manager\AML.exe [2010-01-08 508280]
"iPatchData"=C:\Program Files\Acer\Updater\iUpdate.exe [2010-11-30 489848]
"Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-06-11 715296]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-04-07 157480]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Ľubka\AppData\Local\Google\Update\GoogleUpdate.exe [2015-05-21 107848]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"Spotify Web Helper"=C:\Users\Ľubka\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2015-05-29 2021944]
"Spotify"=C:\Users\Ľubka\AppData\Roaming\Spotify\Spotify.exe [2015-05-29 7323192]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Acer VCM.lnk - C:\Program Files\Acer\Acer VCM\AcerVCM.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-04-19 218112]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"midi1"=wdmaud.drv
"msacm.siren"=sirenacm.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-05-30 19:57:51 ----D---- C:\Program Files\trend micro
2015-05-30 19:57:46 ----D---- C:\rsit
2015-05-30 18:07:30 ----D---- C:\Program Files\ESET
2015-05-23 22:39:23 ----D---- C:\Users\Ľubka\AppData\Roaming\vlc
2015-05-23 22:37:55 ----D---- C:\Program Files\VideoLAN
2015-05-23 22:35:08 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2015-05-23 22:33:14 ----D---- C:\Program Files\iPod
2015-05-23 22:33:06 ----D---- C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB
2015-05-23 22:33:06 ----D---- C:\Program Files\iTunes
2015-05-23 22:28:57 ----D---- C:\Program Files\Apple Software Update
2015-05-23 22:27:47 ----D---- C:\Program Files\Bonjour
2015-05-22 08:04:51 ----D---- C:\Users\Ľubka\AppData\Roaming\Spotify
2015-05-21 21:10:46 ----D---- C:\Program Files\GUM314C.tmp
2015-05-21 21:10:46 ----A---- C:\Program Files\GUT315D.tmp
2015-05-10 23:49:48 ----D---- C:\Windows\Migration
2015-05-10 23:36:01 ----D---- C:\6c6a7ed937d77504815505faa5

======List of files/folders modified in the last 1 month======

2015-05-30 20:08:00 ----D---- C:\Windows\Prefetch
2015-05-30 20:07:54 ----D---- C:\Windows\Temp
2015-05-30 19:57:51 ----RD---- C:\Program Files
2015-05-28 17:13:20 ----D---- C:\Windows\system32\config
2015-05-28 16:57:49 ----D---- C:\Windows\rescache
2015-05-28 09:50:54 ----D---- C:\Windows\system32\catroot
2015-05-28 09:44:25 ----D---- C:\Windows\system32\NDF
2015-05-25 06:32:39 ----D---- C:\Windows\Tasks
2015-05-23 22:36:08 ----SHD---- C:\Windows\Installer
2015-05-23 22:36:08 ----SHD---- C:\Config.Msi
2015-05-23 22:35:11 ----D---- C:\Windows\System32
2015-05-23 22:35:08 ----D---- C:\Windows\system32\drivers
2015-05-23 22:35:07 ----DC---- C:\Windows\system32\DRVSTORE
2015-05-23 22:33:09 ----D---- C:\Program Files\Common Files\Apple
2015-05-23 22:33:06 ----HD---- C:\ProgramData
2015-05-23 22:33:06 ----D---- C:\ProgramData\Apple Computer
2015-05-23 22:30:26 ----SHD---- C:\System Volume Information
2015-05-23 22:29:15 ----D---- C:\Windows\system32\Tasks
2015-05-23 22:28:44 ----D---- C:\Windows\system32\DriverStore
2015-05-23 22:28:44 ----D---- C:\Windows\inf
2015-05-23 22:27:11 ----D---- C:\ProgramData\Apple
2015-05-23 09:10:41 ----SD---- C:\ProgramData\Microsoft
2015-05-23 00:17:06 ----D---- C:\Windows\Microsoft.NET
2015-05-22 23:19:10 ----D---- C:\Windows\winsxs
2015-05-22 23:18:40 ----D---- C:\Windows\system32\sk-SK
2015-05-22 23:18:33 ----D---- C:\Program Files\Google
2015-05-22 22:59:00 ----D---- C:\Program Files\Adobe
2015-05-22 22:57:16 ----D---- C:\Program Files\Acer
2015-05-22 22:56:55 ----D---- C:\Program Files\Common Files
2015-05-22 22:54:20 ----D---- C:\Windows
2015-05-22 22:53:43 ----D---- C:\Program Files\Windows Live
2015-05-22 22:50:17 ----D---- C:\Program Files\Acer GameZone
2015-05-22 22:47:35 ----D---- C:\Program Files\Common Files\microsoft shared
2015-05-22 22:44:59 ----D---- C:\Users\Ľubka\AppData\Roaming\SoftGrid Client
2015-05-22 22:27:37 ----D---- C:\Windows\Logs
2015-05-22 22:09:19 ----D---- C:\Program Files\Common Files\Adobe
2015-05-22 22:09:00 ----D---- C:\ProgramData\Adobe
2015-05-22 21:55:01 ----HD---- C:\Program Files\InstallShield Installation Information
2015-05-22 21:45:41 ----D---- C:\Program Files\MyFree Codec
2015-05-22 01:38:42 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2015-05-21 22:38:31 ----D---- C:\ProgramData\Google
2015-05-21 22:21:56 ----D---- C:\Windows\system32\catroot2
2015-05-21 21:59:26 ----D---- C:\ProgramData\Samsung
2015-05-21 21:21:38 ----D---- C:\ProgramData\Skype
2015-05-21 21:19:02 ----D---- C:\Users\Ľubka\AppData\Roaming\Skype
2015-05-21 21:11:01 ----D---- C:\Users\Ľubka\AppData\Roaming\Samsung
2015-05-21 21:10:59 ----D---- C:\Program Files\Samsung
2015-05-21 21:08:59 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-05-10 23:59:09 ----RSD---- C:\Windows\assembly
2015-05-10 23:50:38 ----D---- C:\Windows\system32\en-US

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2010-06-08 435736]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2010-04-07 1792512]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-05-20 28200]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2010-04-19 4806144]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2010-08-03 3158120]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-02-05 242992]
S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2010-05-20 37224]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2010-05-20 47144]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2010-05-20 256360]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2010-05-20 177704]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2010-05-20 46952]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2010-05-20 143080]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2010-05-26 230760]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 EUCR;EUCR; C:\Windows\system32\DRIVERS\EUCR6SK.SYS [2010-06-17 82768]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-03-08 39272]
S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 26840]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x86.sys [2010-08-24 68208]
S3 massfilter;ZTE Mass Storage Filter Driver; C:\Windows\system32\drivers\massfilter.sys [2013-05-01 9728]
S3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2011-04-18 43392]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\drivers\usb8023x.sys [2013-02-12 15872]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2012-12-13 45056]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 WinUsb;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S3 ZTEusbmdm6k;ZTE Proprietary USB Driver; C:\Windows\system32\DRIVERS\ZTEusbmdm6k.sys [2013-05-01 104960]
S3 ZTEusbnmea;ZTE NMEA Port; C:\Windows\system32\DRIVERS\ZTEusbnmea.sys [2013-05-01 105344]
S3 ZTEusbser6k;ZTE Diagnostic Port; C:\Windows\system32\DRIVERS\ZTEusbser6k.sys [2013-05-01 104960]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-19 60744]
R2 AtherosSvc;AtherosSvc; C:\Program Files\Bluetooth Suite\adminservice.exe [2010-05-26 38560]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files\Launch Manager\dsiwmis.exe [2010-08-10 321104]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 735776]
R2 GREGService;GREGService; C:\Program Files\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-06-08 13336]
R2 RS_Service;Raw Socket Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [2010-01-30 260640]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-04-07 540968]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-05-21 144200]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-22 268464]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-05-21 144200]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]

-----------------EOF-----------------

#2 Příspěvek od **altrok** » 31 kvě 2015 13:38

Krasny den Vam preju

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

ukoncete vsechny programy
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Scan, pote na Cleaning
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

Ulozte na plochu zoek.exe http://hijackthis.nl/smeenk/zoek.htm

spustte jako spravce
do velkeho okna zkopirujte script uvedeny nize
kliknete na Run script
po restartu na Vas vyskoci log (pripadne jej najdete v C:\zoek-results.log) - vlozte mi jej do pristi odpovedi
Kód: Vybrat vše
```
autoclean;
emptyclsid;
emptyalltemp;
```

e-comm · #3 Příspěvek od **e-comm** » 01 čer 2015 20:13

Vdaka za rychlu odpoved.

posielam LOG

# AdwCleaner v4.206 - Log vytvorený 01/06/2015 at 21:09:19
# Aktualizované 01/06/2015 by Xplode
# Databáza : 2015-06-01.1 [Server]
# Operačný systém : Windows 7 Starter Service Pack 1 (x86)
# Uživateľské meno : Ľubka - PC
# Spustené z : C:\Users\Ľubka\Downloads\adwcleaner_4.206.exe
# Nastavenia : Čistenie

***** [ Služby ] *****

***** [ Súbory / Priečinky ] *****

Priečinok Zmazané : C:\ProgramData\Babylon
Priečinok Zmazané : C:\ProgramData\Partner
Súbor Zmazané : C:\Users\Ľubka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_spybot-search-destroy.en.softonic.com_0.localstorage-journal
Súbor Zmazané : C:\Users\Ľubka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal

***** [ Naplánované úlohy ] *****

***** [ Zástupcovia ] *****

***** [ Registre ] *****

Kľúč registra Zmazané : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Kľúč registra Zmazané : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Kľúč registra Zmazané : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Kľúč registra Zmazané : HKLM\SOFTWARE\Classes\Prod.cap
Kľúč registra Zmazané : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Kľúč registra Zmazané : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Kľúč registra Zmazané : HKCU\Software\InstallCore
Kľúč registra Zmazané : HKLM\SOFTWARE\Babylon
Kľúč registra Zmazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA}
Dáta Zmazané : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

***** [ Webové prehliadače ] *****

-\\ Internet Explorer v10.0.9200.16750

-\\ Google Chrome v

*************************

AdwCleaner[R0].txt - [1917 bajtov] - [01/06/2015 21:05:25]
AdwCleaner[S0].txt - [1837 bajtov] - [01/06/2015 21:09:19]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1897 bajtov] ##########

#4 Příspěvek od **altrok** » 01 čer 2015 20:16

Pokracujte zoekem, pak budeme cistit dal

e-comm · #5 Příspěvek od **e-comm** » 01 čer 2015 20:40

prave prebieha Zoek scan

e-comm · #6 Příspěvek od **e-comm** » 01 čer 2015 21:08

ZOEK LOG

Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by •ubka on po 01. 06. 2015 at 21:15:33,27.
Microsoft Windows 7 Starter 6.1.7601 Service Pack 1 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\UBKA~1\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

1. 6. 2015 21:18:26 Zoek.exe System Restore Point Created Successfully.

==== Empty Folders Check ======================

C:\Program Files\Adobe deleted successfully
C:\Program Files\Fotolab deleted successfully
C:\Program Files\MSXML 4.0 deleted successfully
C:\Program Files\MyFree Codec deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-92525525-684568335-2651620714-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0A900DF-9611-4446-86BD-4B1D47E7DB2A} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-92525525-684568335-2651620714-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\Program Files\Adobe not found
C:\Program Files\Fotolab not found
C:\Program Files\MyFree Codec not found
C:\Program Files\GUT315D.tmp deleted
C:\Program Files\GUT5467.tmp deleted
C:\Program Files\GUM314C.tmp deleted
C:\Program Files\GUM4B70.tmp deleted
C:\PROGRA~2\OberonGameConsole deleted
"C:\Users\UBKA~1\AppData\Local\{AE83C1D8-90A2-4851-AB9A-533BEE721C80}" deleted

==== Chromium Look ======================

Bookmark Manager - UBKA~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik

==== Chromium Startpages ======================

C:\Users\UBKA~1\AppData\Local\Google\Chrome\User Data\Default\Preferences
295"},"software_reporter":{"prompt_reason":"903C933409F0012370BC91CAE90AFA16026092E37F984AC97C5EF65C2AC3FBA4","prompt_seed":"043AE418D89CB8C556FA44CEBA43109A5B962958079632E024645B235827F126","prompt_version":"7AEBB7A5D8B40C69B752A8C40993A9F1AFCBD70461CE0A65C042E0AAFEE91A62"},"sync":{"remaining_rollback_tries":"01322E983B44206A43C40CE2D3670BC7065B64B9B6DE16481FBC8347DC379B9E"}},"super_mac":"199B04848A26E0CB61F8944BBA9190C7383F176D8F8CEEF0F641EF17DC947FC9"},"session":{"restore_on_startup":4,"startup_urls":["http://google.sk/"]}}

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.sk/"
"Default_Page_URL"="http://homepage.acer.com/rdr.aspx?b=ACA ... 5w4762v20r"
"Search Page"="http://www.google.com"
"Search Bar"="http://www.google.com/ie"
"Default_Search_URL"="http://www.google.com/ie"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
@="http://www.google.com/search?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com/ie"
"Default_Search_URL"="http://www.google.com/ie"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.sk/"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/ ... chasst.htm"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{67A2568C-7A0A-4EED-AECC-B5405DE63B64} Google Url="http://www.google.com/search?sourceid=i ... SK419SK419"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... SK419SK419"

==== Empty IE Cache ======================

C:\Users\UBKA~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\UBKA~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\UBKA~1\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=250 folders=18 117266744 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\UBKA~1\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\UBKA~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on po 01. 06. 2015 at 22:06:53,93 ======================

#7 Příspěvek od **altrok** » 01 čer 2015 21:10

Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

e-comm · #8 Příspěvek od **e-comm** » 01 čer 2015 21:22

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 29-05-2015
Ran by Ľubka at 2015-06-01 22:19:30
Running from C:\Users\Ľubka\Downloads
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-92525525-684568335-2651620714-500 - Administrator - Disabled)
Guest (S-1-5-21-92525525-684568335-2651620714-501 - Limited - Disabled)
Ľubka (S-1-5-21-92525525-684568335-2651620714-1000 - Administrator - Enabled) => C:\Users\Ľubka

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer Crystal Eye webcam (HKLM\...\{51F026FA-5146-4232-A8BA-1364740BD053}) (Version: 4.0.2.9 - Liteon)
Acer ePower Management (HKLM\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 5.00.3005 - Acer Incorporated)
Acer eRecovery Management (HKLM\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3013 - Acer Incorporated)
Acer Registration (HKLM\...\Acer Registration) (Version: 1.03.3003 - Acer Incorporated)
Acer ScreenSaver (HKLM\...\Acer Screensaver) (Version: 1.1.0830.2010 - Acer Incorporated)
Acer VCM (HKLM\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3002 - Acer Incorporated)
Airport Mania First Flight (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11505173}) (Version: - Oberon Media)
AndroidInstaller (Version: 1.00.022 - Insyde) Hidden
Apple Mobile Device Support (HKLM\...\{E1DB0812-2D60-43DB-AE09-6C7027D93B28}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.35 - Atheros Communications Inc.)
Bluetooth Win7 Suite (HKLM\...\{101A497C-7EF6-4001-834D-E5FA1C70FEFA}) (Version: 7.01.000.18 - Atheros Communications)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Doplnok programu Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
ENE USB Card Reader Driver (HKLM\...\3B29FD3CCF1F5B855DA0C521597413EBABE97DFB) (Version: 5.89.0.70 - ENE)
eSobi v2 (HKLM\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.4.000274 - esobi Inc.)
eSobi v2 (Version: 2.0.4.000274 - esobi Inc.) Hidden
Google Chrome (HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\Google Chrome) (Version: 43.0.2357.81 - Spoločnosť Google Inc.)
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.27.5 - Google Inc.) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2117 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.4.1002 - Intel Corporation)
iTunes (HKLM\...\{CE1F04C7-79BC-4219-BE6A-BA490224D4B5}) (Version: 12.1.2.27 - Apple Inc.)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Launch Manager (HKLM\...\LManager) (Version: 4.0.14 - Acer Inc.)
Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 8.0 Support DLLs (HKLM\...\{342F5437-C87D-4BB5-89B9-B23E16C6A395}) (Version: 1.0.0 - McNeel & Associates)
Money S3 START (HKLM\...\Money S3) (Version: - )
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
OpenOffice.org 3.2 (HKLM\...\{28B94253-5729-4C30-8DE4-F2A0A63149B0}) (Version: 3.2.9505 - OpenOffice.org)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (HKLM\...\{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}) (Version: 15.4.5722.2 - Microsoft Corporation)
Podpora Apple aplikácií (32-bit) (HKLM\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6171 - Realtek Semiconductor Corp.)
Spotify (HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\Spotify) (Version: 1.0.6.80.g2a801a53 - Spotify AB)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.7.0 - Synaptics Incorporated)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\Ľubka\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.27.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.27.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.27.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{38216570-5DB1-45F8-A344-B0C4E252B14B}\InprocServer32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.26.7\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.27.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\43.0.2357.81\delegate_execute.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.21.153\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.22.3\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.21.165\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{AFFB6436-3C41-4376-98AB-785AA7AB0905}\InprocServer32 -> C:\Windows\system32\kernel32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.27.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.27.5\psuser.dll (Google Inc.)

==================== Restore Points =========================

23-05-2015 22:29:20 Installed iTunes
30-05-2015 20:10:55 Configured eSobi v2
30-05-2015 20:22:43 Configured eSobi v2
01-06-2015 21:17:44 zoek.exe restore point

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {282B1EEB-5F2C-440D-901C-01B866C8C5C4} - System32\Tasks\{D6EB35AE-AD74-46AE-93DE-C7EBCC625E1B} => pcalua.exe -a "C:\Program Files\InstallShield Installation Information\{15D967B5-A4BE-42AE-9E84-64CD062B25AA}\setup.exe" -c -runfromtemp -l0x0409
Task: {2E6063E5-C756-49A2-8140-CB3EC3C250EB} - System32\Tasks\{43C713EA-4DC7-45DC-9A22-577A12F25B4F} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files\T-Mobile Communication Centre\TMCC.exe"
Task: {37256E64-5082-4ADE-BF74-ED174996D649} - System32\Tasks\{D14C3C76-5FDD-4F8B-A69D-8E15784647A9} => pcalua.exe -a C:\Users\Ľubka\Desktop\wmp11-windowsxp-x86-enu.exe -d C:\Users\Ľubka\Desktop
Task: {3D9A235A-C7A8-4775-A467-62DD663790B5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-05-21] (Google Inc.)
Task: {44B75B3A-A148-47A9-9445-6CA89A02C567} - System32\Tasks\{DCC0EEB1-44A0-474F-A72E-23D0ADD67959} => pcalua.exe -a "C:\Program Files\Acer GameZone\Airport Mania First Flight\Uninstall.exe" -c "C:\Program Files\Acer GameZone\Airport Mania First Flight\install.log"
Task: {5155185F-DB5F-4F10-BC1A-63ACC83D4F99} - System32\Tasks\{5CB073BD-ACF0-4334-8F48-BCD1E3C17685} => pcalua.exe -a C:\Users\Ľubka\Desktop\rh40sr_cs_20110309.exe -d C:\Users\Ľubka\Desktop
Task: {5FAF871B-6F9D-4D56-97D3-63E94059688E} - System32\Tasks\{11D518F9-C582-4525-8ECC-C53E23DABA87} => pcalua.exe -a E:\TMCCSetup_2.85.60.14.exe -d E:\
Task: {8F4CFCF1-5C85-49C8-98BE-132F729DD690} - System32\Tasks\{847D982C-3EA7-46C9-97B0-B2FA7DED4E3E} => pcalua.exe -a "C:\Users\Ľubka\Downloads\SweetIMSetup (1).exe" -d C:\Users\Ľubka\Downloads
Task: {B3EA5BB5-E515-4823-930E-ABBA41AEF425} - System32\Tasks\{9511711F-D525-4156-8085-97C30884C11B} => pcalua.exe -a C:\Users\Ľubka\Documents\wmp11-windowsxp-x86-enu.exe -d C:\Users\Ľubka\Documents
Task: {C762430C-C7AC-478C-890F-D4C86F40EAAB} - System32\Tasks\{D84333BD-86BF-4FA0-91CB-D43FE93E3827} => pcalua.exe -a "C:\Program Files\CIGLER SOFTWARE\Common Files\SETUP\s3mngr.exe" -c "C:\Program Files\CIGLER SOFTWARE\Common Files\SETUP"
Task: {D4C25BBB-AA57-4F33-B29C-AF75F9905230} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {E8051E9B-0DE1-4CF8-9EF0-8D666DAC757C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-92525525-684568335-2651620714-1000UA => C:\Users\Ľubka\AppData\Local\Google\Update\GoogleUpdate.exe [2015-05-21] (Google Inc.)
Task: {E9C5A8C5-26E2-4259-BE9A-00B1F9D046FB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-92525525-684568335-2651620714-1000Core => C:\Users\Ľubka\AppData\Local\Google\Update\GoogleUpdate.exe [2015-05-21] (Google Inc.)
Task: {EAC0A247-AF7F-4BF7-8A1A-C66B8C5DD790} - System32\Tasks\{BCCFED3B-4B6F-46D9-9A43-9ED2A947E35D} => pcalua.exe -a "C:\Users\Ľubka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZRHROCRC\Codecs6030_allin1.exe" -d C:\Users\Ľubka\Desktop
Task: {F00EC71E-086C-46E2-9F3C-78AE0B8D6CFA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-05-21] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92525525-684568335-2651620714-1000Core.job => C:\Users\=ubka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92525525-684568335-2651620714-1000UA.job => C:\Users\=ubka\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-03-20 18:12 - 2015-03-20 18:12 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-03-20 18:12 - 2015-03-20 18:12 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2010-08-31 17:38 - 2009-05-20 08:02 - 00072200 _____ () C:\Program Files\Launch Manager\CdDirIo.dll
2015-05-22 08:05 - 2015-05-29 08:28 - 41287224 _____ () C:\Users\Ľubka\AppData\Roaming\Spotify\libcef.dll
2015-05-22 21:58 - 2014-02-10 13:44 - 04592128 _____ () C:\Users\Ľubka\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libglesv2.dll
2015-05-22 21:58 - 2014-02-10 13:44 - 00112128 _____ () C:\Users\Ľubka\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libegl.dll
2015-05-26 06:28 - 2015-05-22 22:22 - 14982472 _____ () C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\43.0.2357.81\PepperFlash\pepflashplayer.dll
2013-08-16 06:15 - 2013-08-16 06:15 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\55ed9c64f5bf19f2110ff33b19f3ad35\IsdiInterop.ni.dll
2010-08-31 17:09 - 2010-06-08 19:44 - 00058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-92525525-684568335-2651620714-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 10.0.0.138

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{5081AC56-D28A-466A-8496-417728B7FDA6}] => (Allow) C:\Program Files\Acer\Acer VCM\RS_Service.exe
FirewallRules: [{440A285D-90AE-4AD4-98F9-CF8FF0D1E799}] => (Allow) C:\Program Files\Acer\Acer VCM\VC.exe
FirewallRules: [{B6E1C2FB-ECAB-497B-B9D3-0A1A8D666523}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{A27AA9E4-7073-420C-92EA-F3A78E95CA43}] => (Allow) svchost.exe
FirewallRules: [{B444E12E-6E33-4CE7-8389-E1F0B85DF896}] => (Allow) C:\Program Files\Opera\opera.exe
FirewallRules: [{053BFE2B-3276-4F6B-9C14-65FDDB935FB3}] => (Allow) C:\Program Files\Opera\opera.exe
FirewallRules: [{3E677F3F-CDAF-41EA-9388-19EDB53CDBF6}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{2F8BD1C9-FE2B-4D00-BFA0-76B5DAD71809}] => (Allow) LPort=2869
FirewallRules: [{AA378154-FEC3-408C-9A1C-FBE082BAF21D}] => (Allow) LPort=1900
FirewallRules: [{A8394759-5344-4439-A672-7D1172F60B50}] => (Allow) C:\Program Files\Windows Live\Mesh\MOE.exe
FirewallRules: [TCP Query User{8123D6C4-210B-477A-BE09-57DFA1C7DD42}C:\program files\google\google earth\client\googleearth.exe] => (Allow) C:\program files\google\google earth\client\googleearth.exe
FirewallRules: [UDP Query User{5E01F5F3-974A-4C17-A0EA-9E6592816B37}C:\program files\google\google earth\client\googleearth.exe] => (Allow) C:\program files\google\google earth\client\googleearth.exe
FirewallRules: [TCP Query User{AE21967A-2374-4DFB-A6C0-A3B0B5C565C8}C:\program files\radlight company\radlight 4.0\rlkernel.exe] => (Allow) C:\program files\radlight company\radlight 4.0\rlkernel.exe
FirewallRules: [UDP Query User{4439E0AB-9964-4E41-B047-C0BA7D047EE3}C:\program files\radlight company\radlight 4.0\rlkernel.exe] => (Allow) C:\program files\radlight company\radlight 4.0\rlkernel.exe
FirewallRules: [TCP Query User{B7CBB7F0-4E6A-489B-818B-88F047BFD062}C:\program files\google\google earth\plugin\geplugin.exe] => (Block) C:\program files\google\google earth\plugin\geplugin.exe
FirewallRules: [UDP Query User{6D7C3B8C-6908-4AEA-BEBE-C8962A791709}C:\program files\google\google earth\plugin\geplugin.exe] => (Block) C:\program files\google\google earth\plugin\geplugin.exe
FirewallRules: [{9052CCE5-8087-4859-A17C-D3C92E9E5CF3}] => (Allow) C:\Windows\System32\muzapp.exe
FirewallRules: [{ECDBF24F-E36C-4A8E-B299-CBB40503A45A}] => (Allow) C:\Windows\System32\muzapp.exe
FirewallRules: [{172892A8-BD15-41DB-9494-73E5A2EF0767}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [TCP Query User{E12B0659-16D4-4849-8A39-673EEFEF67DE}C:\users\ľubka\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ľubka\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{3D1EAA46-D3B1-460F-BDD7-AFC67DC88E4D}C:\users\ľubka\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ľubka\appdata\roaming\spotify\spotify.exe
FirewallRules: [{128D0726-6F5A-43E0-9DD8-5A56DA2F463F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A18B9440-F585-45AF-BB48-6888B5096665}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4F8C04FF-DCB0-41DA-B03E-BFE2185E3264}] => (Allow) C:\Program Files\iTunes\iTunes.exe

==================== Faulty Device Manager Devices =============

Name: Atheros AR8152 PCI-E Fast Ethernet Controller (NDIS 6.20)
Description: Atheros AR8152 PCI-E Fast Ethernet Controller (NDIS 6.20)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Atheros
Service: L1C
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

==================== Event log errors: =========================

Application errors:
==================
Error: (06/01/2015 05:33:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 22922444

Error: (06/01/2015 05:33:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 22922444

Error: (06/01/2015 05:33:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/01/2015 11:11:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6989

Error: (06/01/2015 11:11:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6989

Error: (06/01/2015 11:11:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/01/2015 11:11:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3463

Error: (06/01/2015 11:11:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3463

Error: (06/01/2015 11:11:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/01/2015 08:11:01 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 12418

System errors:
=============
Error: (06/01/2015 10:06:44 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Nasledujúce ovládače pre spustenie zavedenia alebo spustenie systému zlyhali pri načítaní:
cdrom

Error: (06/01/2015 10:06:38 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)
Description: Modul WLAN Extensibility Module sa nepodarilo spustiť.

Cesta k modulu: C:\Windows\system32\athExt.dll
Kód chyby: 126

Error: (06/01/2015 10:00:20 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označená ako interaktívna služba. Systém je však nakonfigurovaný tak, aby nepovolil interaktívne služby. Služba pravdepodobne nebude pracovať správne.

Error: (06/01/2015 10:00:19 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označená ako interaktívna služba. Systém je však nakonfigurovaný tak, aby nepovolil interaktívne služby. Služba pravdepodobne nebude pracovať správne.

Error: (06/01/2015 10:00:18 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označená ako interaktívna služba. Systém je však nakonfigurovaný tak, aby nepovolil interaktívne služby. Služba pravdepodobne nebude pracovať správne.

Error: (06/01/2015 10:00:18 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označená ako interaktívna služba. Systém je však nakonfigurovaný tak, aby nepovolil interaktívne služby. Služba pravdepodobne nebude pracovať správne.

Error: (06/01/2015 10:00:17 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba PEVSystemStart je označená ako interaktívna služba. Systém je však nakonfigurovaný tak, aby nepovolil interaktívne služby. Služba pravdepodobne nebude pracovať správne.

Error: (06/01/2015 09:11:43 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Nasledujúce ovládače pre spustenie zavedenia alebo spustenie systému zlyhali pri načítaní:
cdrom

Error: (06/01/2015 09:11:27 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)
Description: Modul WLAN Extensibility Module sa nepodarilo spustiť.

Cesta k modulu: C:\Windows\system32\athExt.dll
Kód chyby: 126

Error: (06/01/2015 09:10:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby Apple Mobile Device zlyhalo kvôli nasledujúcej chybe:
%%109

Microsoft Office:
=========================
Error: (06/01/2015 05:33:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 22922444

Error: (06/01/2015 05:33:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 22922444

Error: (06/01/2015 05:33:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/01/2015 11:11:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6989

Error: (06/01/2015 11:11:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6989

Error: (06/01/2015 11:11:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/01/2015 11:11:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3463

Error: (06/01/2015 11:11:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3463

Error: (06/01/2015 11:11:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/01/2015 08:11:01 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 12418

==================== Memory info ===========================

Processor: Intel(R) Atom(TM) CPU N450 @ 1.66GHz
Percentage of memory in use: 79%
Total physical RAM: 1013.09 MB
Available physical RAM: 210.13 MB
Total Pagefile: 2037.09 MB
Available Pagefile: 747.82 MB
Total Virtual: 2047.88 MB
Available Virtual: 1899.51 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:215.79 GB) (Free:174.01 GB) NTFS
Drive d: () (Fixed) (Total:4 GB) (Free:2.55 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: FCD1B200)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Not Active) - (Size=4 GB) - (Type=0C)
Partition 3: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=215.8 GB) - (Type=OF Extended)

==================== End of log ============================

e-comm · #9 Příspěvek od **e-comm** » 01 čer 2015 21:24

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-05-2015
Ran by Ľubka (administrator) on PC on 01-06-2015 22:14:10
Running from C:\Users\Ľubka\Downloads
Loaded Profiles: Ľubka (Available Profiles: Ľubka)
Platform: Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: Slovenčina (Slovensko)
Internet Explorer Version 10 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros Commnucations) C:\Program Files\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer VCM\RS_Service.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Atheros Commnucations) C:\Program Files\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files\Bluetooth Suite\AthBtTray.exe
(Insyde Software Corp.) C:\Program Files\Acer\Android Manager\iSync.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LMworker.exe
(Insyde Software Corp.) C:\Program Files\Acer\Updater\iUpdate.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Spotify Ltd) C:\Users\Ľubka\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Spotify Ltd) C:\Users\Ľubka\AppData\Roaming\Spotify\Spotify.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Spotify Ltd) C:\Users\Ľubka\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Spotify Ltd) C:\Users\Ľubka\AppData\Roaming\Spotify\Spotify.exe
(Google Inc.) C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [975952 2010-08-10] (Dritek System Inc.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-06-08] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9398888 2010-08-03] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1692968 2010-02-05] (Synaptics Incorporated)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files\Bluetooth Suite\BtvStack.exe [470176 2010-05-26] (Atheros Commnucations)
HKLM\...\Run: [AthBtTray] => C:\Program Files\Bluetooth Suite\AthBtTray.exe [289952 2010-05-26] (Atheros Commnucations)
HKLM\...\Run: [iSyncData] => C:\Program Files\Acer\Android Manager\iSync.exe [407416 2010-01-08] (Insyde Software Corp.)
HKLM\...\Run: [AndroidManager] => C:\Program Files\Acer\Android Manager\AML.exe [508280 2010-01-08] ()
HKLM\...\Run: [iPatchData] => C:\Program Files\Acer\Updater\iUpdate.exe [489848 2010-11-30] (Insyde Software Corp.)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [715296 2010-06-11] (Acer Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2015-04-07] (Apple Inc.)
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\Run: [Google Update] => C:\Users\Ľubka\AppData\Local\Google\Update\GoogleUpdate.exe [107848 2015-05-21] (Google Inc.)
HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\Run: [SpybotSD TeaTimer] => C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\Run: [Spotify Web Helper] => C:\Users\Ľubka\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2021944 2015-05-29] (Spotify Ltd)
HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\Run: [Spotify] => C:\Users\Ľubka\AppData\Roaming\Spotify\Spotify.exe [7323192 2015-05-29] (Spotify Ltd)
HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\MountPoints2: {03aca1cf-3cf8-11e0-9189-4c0f6e0159fd} - E:\TMCCSetup_3.57.95.14.exe
HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\MountPoints2: {502cfdcc-b291-11e2-b733-88ae1da49123} - E:\TMCCSetup_2.85.60.14.exe
HKU\S-1-5-21-92525525-684568335-2651620714-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Acer.scr [456224 2010-07-29] ()
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk [2010-08-31]
ShortcutTarget: Acer VCM.lnk -> C:\Program Files\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-92525525-684568335-2651620714-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... lz=1I7ACAW
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-92525525-684568335-2651620714-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-92525525-684568335-2651620714-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... SK419SK419
BHO: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26] (Safer Networking Limited)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
Winsock: Catalog5 10 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-21] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-21] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin HKU\S-1-5-21-92525525-684568335-2651620714-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-25] (Google Inc.)
FF Plugin HKU\S-1-5-21-92525525-684568335-2651620714-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-25] (Google Inc.)

Chrome:
=======
CHR Profile: C:\Users\Ľubka\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Bookmark Manager) - C:\Users\Ľubka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-22]
CHR Extension: (Google Wallet) - C:\Users\Ľubka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-01]
StartMenuInternet: Google Chrome - C:\Users\Ľubka\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files\Bluetooth Suite\adminservice.exe [38560 2010-05-26] (Atheros Commnucations) [File not signed]
R2 ePowerSvc; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [735776 2010-06-11] (Acer Incorporated)
R2 GREGService; C:\Program Files\Acer\Registration\GREGsvc.exe [23584 2010-01-08] (Acer Incorporated)
R2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)
R2 Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AthBTPort; C:\Windows\System32\DRIVERS\btath_flt.sys [37224 2010-05-20] (Atheros)
S3 ATHDFU; C:\Windows\System32\Drivers\AthDfu.sys [47144 2010-05-20] (Windows (R) Win 7 DDK provider)
S3 BTATH_A2DP; C:\Windows\System32\drivers\btath_a2dp.sys [256360 2010-05-20] (Atheros)
R3 BTATH_BUS; C:\Windows\System32\DRIVERS\btath_bus.sys [28200 2010-05-20] (Atheros)
S3 BTATH_HCRP; C:\Windows\System32\DRIVERS\btath_hcrp.sys [177704 2010-05-20] (Atheros)
S3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [46952 2010-05-20] (Atheros)
S3 BTATH_RCP; C:\Windows\System32\DRIVERS\btath_rcp.sys [143080 2010-05-20] (Atheros)
S3 BtFilter; C:\Windows\System32\DRIVERS\btfilter.sys [230760 2010-05-26] (Atheros)
S3 EUCR; C:\Windows\System32\DRIVERS\EUCR6SK.SYS [82768 2010-06-17] (ENE Technology Inc.)
S3 MpNWMon; C:\Windows\System32\DRIVERS\MpNWMon.sys [43392 2011-04-18] (Microsoft Corporation)
S3 USBAAPL; C:\Windows\System32\Drivers\usbaapl.sys [45056 2012-12-13] (Apple, Inc.) [File not signed]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-01 22:14 - 2015-06-01 22:16 - 00012762 _____ () C:\Users\Ľubka\Downloads\FRST.txt
2015-06-01 22:13 - 2015-06-01 22:14 - 00000000 ____D () C:\FRST
2015-06-01 22:12 - 2015-06-01 22:13 - 01147392 _____ (Farbar) C:\Users\Ľubka\Downloads\FRST.exe
2015-06-01 22:03 - 2015-06-01 21:15 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-06-01 21:17 - 2015-06-01 22:06 - 00006758 _____ () C:\zoek-results.log
2015-06-01 21:15 - 2015-06-01 22:00 - 00000000 ____D () C:\zoek_backup
2015-06-01 21:14 - 2015-06-01 21:14 - 01308672 _____ () C:\Users\Ľubka\Desktop\zoek.exe
2015-06-01 21:04 - 2015-06-01 21:09 - 00000000 ____D () C:\AdwCleaner
2015-06-01 21:02 - 2015-06-01 21:03 - 02231296 _____ () C:\Users\Ľubka\Downloads\adwcleaner_4.206.exe
2015-05-30 20:18 - 2015-05-30 20:18 - 16409960 _____ (Safer Networking Limited ) C:\Users\Ľubka\Downloads\spybotsd162 (1).exe
2015-05-30 20:07 - 2015-05-30 20:07 - 01107968 _____ () C:\Users\Ľubka\Downloads\RSIT (1).exe
2015-05-30 19:57 - 2015-05-30 20:07 - 00000000 ____D () C:\Program Files\trend micro
2015-05-30 19:57 - 2015-05-30 19:58 - 00000000 ____D () C:\rsit
2015-05-30 19:57 - 2015-05-30 19:57 - 01107968 _____ () C:\Users\Ľubka\Downloads\RSIT.exe
2015-05-30 18:06 - 2015-05-30 18:07 - 02347384 _____ (ESET) C:\Users\Ľubka\Downloads\esetsmartinstaller_csy.exe
2015-05-27 16:39 - 2015-05-27 17:11 - 583426686 _____ () C:\Users\Ľubka\Downloads\Výměna-manželek---20.-5.-2015.avi
2015-05-27 14:35 - 2015-05-27 15:33 - 1036469934 _____ () C:\Users\Ľubka\Downloads\Šéfka-3.4.2011.avi
2015-05-26 20:43 - 2015-05-26 21:40 - 1003405428 _____ () C:\Users\Ľubka\Downloads\Šéfka---10.4.2011.avi
2015-05-26 19:39 - 2015-05-26 20:37 - 948636020 _____ () C:\Users\Ľubka\Downloads\Šéfka-17.04.2011.avi
2015-05-25 19:26 - 2015-05-25 19:27 - 00002270 _____ () C:\Users\Ľubka\Downloads\jan-kulczyks-house.kml
2015-05-23 22:39 - 2015-05-28 09:50 - 00000000 ____D () C:\Users\Ľubka\AppData\Roaming\vlc
2015-05-23 22:38 - 2015-05-23 22:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-05-23 22:37 - 2015-05-23 22:37 - 00000000 ____D () C:\Program Files\VideoLAN
2015-05-23 22:35 - 2015-05-23 22:35 - 28849904 _____ () C:\Users\Ľubka\Downloads\vlc-2.2.1-win32.exe
2015-05-23 22:35 - 2015-05-23 22:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-05-23 22:35 - 2012-10-03 16:14 - 00026840 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2015-05-23 22:33 - 2015-05-23 22:34 - 00000000 ____D () C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB
2015-05-23 22:33 - 2015-05-23 22:34 - 00000000 ____D () C:\Program Files\iTunes
2015-05-23 22:33 - 2015-05-23 22:33 - 00000000 ____D () C:\Program Files\iPod
2015-05-23 22:28 - 2015-05-23 22:28 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-05-23 22:28 - 2015-05-23 22:28 - 00000000 ____D () C:\Program Files\Apple Software Update
2015-05-23 22:27 - 2015-05-23 22:27 - 00000000 ____D () C:\Program Files\Bonjour
2015-05-23 22:18 - 2015-05-23 22:20 - 108728624 _____ (Apple Inc.) C:\Users\Ľubka\Downloads\iTunesSetup (1).exe
2015-05-23 17:15 - 2015-05-23 17:46 - 541828684 _____ () C:\Users\Ľubka\Downloads\Výměna-manželek---13.-5.-2015.avi
2015-05-22 08:05 - 2015-06-01 22:07 - 00000000 ____D () C:\Users\Ľubka\AppData\Local\Spotify
2015-05-22 08:05 - 2015-05-22 08:05 - 00001757 _____ () C:\Users\Ľubka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2015-05-22 08:04 - 2015-06-01 22:12 - 00000000 ____D () C:\Users\Ľubka\AppData\Roaming\Spotify
2015-05-22 08:04 - 2015-05-22 08:04 - 00155296 _____ (Spotify Ltd) C:\Users\Ľubka\Downloads\SpotifySetup.exe
2015-05-21 22:37 - 2015-05-21 22:37 - 00000688 _____ () C:\Windows\ZTEInstallInfo.log
2015-05-10 23:36 - 2015-05-10 23:38 - 00000000 ____D () C:\6c6a7ed937d77504815505faa5

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-01 22:15 - 2009-07-14 06:34 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-01 22:15 - 2009-07-14 06:34 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-01 22:11 - 2012-09-16 10:01 - 01342500 _____ () C:\Windows\WindowsUpdate.log
2015-06-01 22:11 - 2011-06-25 08:15 - 00000924 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-01 22:06 - 2014-02-20 20:02 - 00065380 _____ () C:\Windows\PFRO.log
2015-06-01 22:06 - 2013-12-14 10:59 - 00002498 _____ () C:\Windows\setupact.log
2015-06-01 22:06 - 2011-06-25 08:15 - 00000920 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-01 22:06 - 2011-03-12 13:44 - 00000056 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini
2015-06-01 22:06 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-06-01 21:37 - 2011-07-19 15:08 - 00000946 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92525525-684568335-2651620714-1000UA.job
2015-06-01 07:18 - 2011-07-19 15:08 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92525525-684568335-2651620714-1000Core.job
2015-05-30 20:21 - 2012-08-04 12:24 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-05-30 20:21 - 2012-08-04 12:24 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy
2015-05-30 20:19 - 2010-08-31 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-05-30 20:19 - 2010-08-31 17:33 - 00000000 ____D () C:\Program Files\Acer
2015-05-28 16:57 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2015-05-28 09:44 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2015-05-26 20:44 - 2011-02-28 20:54 - 00000000 ____D () C:\Users\Ľubka\AppData\Local\CrashDumps
2015-05-23 22:33 - 2011-07-29 16:19 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-05-23 22:33 - 2011-07-29 16:17 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-05-23 22:27 - 2011-07-29 16:16 - 00000000 ____D () C:\ProgramData\Apple
2015-05-23 00:17 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-05-22 23:18 - 2010-08-31 17:35 - 00000000 ____D () C:\Program Files\Google
2015-05-22 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\sk-SK
2015-05-22 22:56 - 2011-08-19 19:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codec Pack
2015-05-22 22:53 - 2011-02-20 16:07 - 00000000 ____D () C:\Program Files\Windows Live
2015-05-22 22:50 - 2010-08-31 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer GameZone
2015-05-22 22:50 - 2010-08-31 17:21 - 00000000 ____D () C:\Program Files\Acer GameZone
2015-05-22 22:47 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-05-22 22:44 - 2011-02-20 17:10 - 00000000 ____D () C:\Users\Ľubka\AppData\Roaming\SoftGrid Client
2015-05-22 22:43 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-05-22 22:38 - 2011-03-19 16:14 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-05-22 22:09 - 2010-08-31 17:40 - 00000000 ____D () C:\ProgramData\Adobe
2015-05-22 22:09 - 2010-08-31 17:39 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2015-05-22 22:07 - 2011-06-26 16:57 - 00000000 ____D () C:\Users\Ľubka\AppData\Local\Adobe
2015-05-22 22:02 - 2011-02-20 20:40 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-05-22 21:55 - 2010-08-31 17:09 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-05-21 22:39 - 2011-02-20 17:21 - 00000000 ____D () C:\Users\Ľubka\AppData\Local\Google
2015-05-21 22:38 - 2010-08-31 17:35 - 00000000 ____D () C:\ProgramData\Google
2015-05-21 21:59 - 2012-04-21 16:33 - 00000000 ____D () C:\Users\Ľubka\AppData\Local\Samsung
2015-05-21 21:59 - 2012-04-21 16:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2015-05-21 21:59 - 2012-04-21 16:20 - 00000000 ____D () C:\ProgramData\Samsung
2015-05-21 21:21 - 2011-02-20 16:34 - 00000000 ____D () C:\ProgramData\Skype
2015-05-21 21:19 - 2011-02-20 16:35 - 00000000 ____D () C:\Users\Ľubka\AppData\Roaming\Skype
2015-05-21 21:11 - 2012-04-21 16:33 - 00000000 ____D () C:\Users\Ľubka\AppData\Roaming\Samsung
2015-05-21 21:10 - 2012-04-21 16:20 - 00000000 ____D () C:\Program Files\Samsung
2015-05-21 21:08 - 2010-08-31 16:57 - 00783400 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-10 23:26 - 2009-07-14 06:33 - 00283096 _____ () C:\Windows\system32\FNTCACHE.DAT

==================== Files in the root of some directories =======

2011-08-08 20:47 - 2011-12-05 00:36 - 0006144 _____ () C:\Users\Ľubka\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-08-31 17:21 - 2010-03-03 00:59 - 0131984 _____ () C:\ProgramData\FullRemove.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-05-28 16:43

==================== End of log ============================

#10 Příspěvek od **altrok** » 01 čer 2015 21:32

Windows Defender na Windows 7 plni jen funkci antispywaru, z cehoz plyne, ze nemate antivir. Doporucuji nejaky nainstalovat. Tarty03 pro vas sleduje srovnavaci testy http://forum.viry.cz/viewtopic.php?f=14 ... 4#p1399224

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu bude na plose ulozen fixlog, jehoz obsah mi vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CloseProcesses:
Folder: C:\6c6a7ed937d77504815505faa5
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{38216570-5DB1-45F8-A344-B0C4E252B14B}\InprocServer32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.26.7\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.21.153\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.22.3\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.21.165\psuser.dll No File

Task: {37256E64-5082-4ADE-BF74-ED174996D649} - System32\Tasks\{D14C3C76-5FDD-4F8B-A69D-8E15784647A9} => pcalua.exe -a C:\Users\Ľubka\Desktop\wmp11-windowsxp-x86-enu.exe -d C:\Users\Ľubka\Desktop
Task: {5155185F-DB5F-4F10-BC1A-63ACC83D4F99} - System32\Tasks\{5CB073BD-ACF0-4334-8F48-BCD1E3C17685} => pcalua.exe -a C:\Users\Ľubka\Desktop\rh40sr_cs_20110309.exe -d C:\Users\Ľubka\Desktop
Task: {5FAF871B-6F9D-4D56-97D3-63E94059688E} - System32\Tasks\{11D518F9-C582-4525-8ECC-C53E23DABA87} => pcalua.exe -a E:\TMCCSetup_2.85.60.14.exe -d E:\
Task: {8F4CFCF1-5C85-49C8-98BE-132F729DD690} - System32\Tasks\{847D982C-3EA7-46C9-97B0-B2FA7DED4E3E} => pcalua.exe -a "C:\Users\Ľubka\Downloads\SweetIMSetup (1).exe" -d C:\Users\Ľubka\Downloads
C:\Users\Ľubka\Downloads\SweetIMSetup (1).exe
C:\Users\Ľubka\Downloads\SweetIMSetup.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92525525-684568335-2651620714-1000Core.job
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92525525-684568335-2651620714-1000UA.job

HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [975952 2010-08-10] (Dritek System Inc.)
HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\Run: [Google Update] => C:\Users\Ľubka\AppData\Local\Google\Update\GoogleUpdate.exe [107848 2015-05-21] (Google Inc.)
HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\Run: [SpybotSD TeaTimer] => C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\Run: [Spotify Web Helper] => C:\Users\Ľubka\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2021944 2015-05-29] (Spotify Ltd)
HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\MountPoints2: {03aca1cf-3cf8-11e0-9189-4c0f6e0159fd} - E:\TMCCSetup_3.57.95.14.exe
HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\MountPoints2: {502cfdcc-b291-11e2-b733-88ae1da49123} - E:\TMCCSetup_2.85.60.14.exe

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

2015-06-01 22:14 - 2015-06-01 22:16 - 00012762 _____ () C:\Users\Ľubka\Downloads\FRST.txt
2015-06-01 22:03 - 2015-06-01 21:15 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-06-01 21:17 - 2015-06-01 22:06 - 00006758 _____ () C:\zoek-results.log
2015-06-01 21:15 - 2015-06-01 22:00 - 00000000 ____D () C:\zoek_backup
2015-06-01 21:14 - 2015-06-01 21:14 - 01308672 _____ () C:\Users\Ľubka\Desktop\zoek.exe
2015-06-01 21:04 - 2015-06-01 21:09 - 00000000 ____D () C:\AdwCleaner
2015-06-01 21:02 - 2015-06-01 21:03 - 02231296 _____ () C:\Users\Ľubka\Downloads\adwcleaner_4.206.exe
2015-05-30 20:18 - 2015-05-30 20:18 - 16409960 _____ (Safer Networking Limited ) C:\Users\Ľubka\Downloads\spybotsd162 (1).exe
2015-05-30 20:07 - 2015-05-30 20:07 - 01107968 _____ () C:\Users\Ľubka\Downloads\RSIT (1).exe
2015-05-30 19:57 - 2015-05-30 20:07 - 00000000 ____D () C:\Program Files\trend micro
2015-05-30 19:57 - 2015-05-30 19:58 - 00000000 ____D () C:\rsit
2015-05-30 19:57 - 2015-05-30 19:57 - 01107968 _____ () C:\Users\Ľubka\Downloads\RSIT.exe
2010-08-31 17:21 - 2010-03-03 00:59 - 0131984 _____ () C:\ProgramData\FullRemove.exe
EmptyTemp:
End

e-comm · #11 Příspěvek od **e-comm** » 01 čer 2015 21:40

ked kliknem na nfix tammi vypise hlasku o tom ze nenasiel fixlist.txt

#12 Příspěvek od **altrok** » 01 čer 2015 21:43

FRST.exe/FRST64.exe i fixlist.txt musi byt ve stejnem umisteni (proto v navodech pro jednoduchost doporucujeme vse ukladat a spoustet z plochy).

e-comm · #13 Příspěvek od **e-comm** » 01 čer 2015 21:49

Fix result of Farbar Recovery Scan Tool (x86) Version: 29-05-2015
Ran by Ľubka at 2015-06-01 22:44:55 Run:1
Running from C:\Users\Ľubka\Desktop
Loaded Profiles: Ľubka (Available Profiles: Ľubka)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CloseProcesses:
Folder: C:\6c6a7ed937d77504815505faa5
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{38216570-5DB1-45F8-A344-B0C4E252B14B}\InprocServer32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.26.7\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.21.153\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.22.3\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Users\Ľubka\AppData\Local\Google\Update\1.3.21.165\psuser.dll No File

Task: {37256E64-5082-4ADE-BF74-ED174996D649} - System32\Tasks\{D14C3C76-5FDD-4F8B-A69D-8E15784647A9} => pcalua.exe -a C:\Users\Ľubka\Desktop\wmp11-windowsxp-x86-enu.exe -d C:\Users\Ľubka\Desktop
Task: {5155185F-DB5F-4F10-BC1A-63ACC83D4F99} - System32\Tasks\{5CB073BD-ACF0-4334-8F48-BCD1E3C17685} => pcalua.exe -a C:\Users\Ľubka\Desktop\rh40sr_cs_20110309.exe -d C:\Users\Ľubka\Desktop
Task: {5FAF871B-6F9D-4D56-97D3-63E94059688E} - System32\Tasks\{11D518F9-C582-4525-8ECC-C53E23DABA87} => pcalua.exe -a E:\TMCCSetup_2.85.60.14.exe -d E:\
Task: {8F4CFCF1-5C85-49C8-98BE-132F729DD690} - System32\Tasks\{847D982C-3EA7-46C9-97B0-B2FA7DED4E3E} => pcalua.exe -a "C:\Users\Ľubka\Downloads\SweetIMSetup (1).exe" -d C:\Users\Ľubka\Downloads
C:\Users\Ľubka\Downloads\SweetIMSetup (1).exe
C:\Users\Ľubka\Downloads\SweetIMSetup.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92525525-684568335-2651620714-1000Core.job
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92525525-684568335-2651620714-1000UA.job

HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [975952 2010-08-10] (Dritek System Inc.)
HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\Run: [Google Update] => C:\Users\Ľubka\AppData\Local\Google\Update\GoogleUpdate.exe [107848 2015-05-21] (Google Inc.)
HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\Run: [SpybotSD TeaTimer] => C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\Run: [Spotify Web Helper] => C:\Users\Ľubka\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2021944 2015-05-29] (Spotify Ltd)
HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\MountPoints2: {03aca1cf-3cf8-11e0-9189-4c0f6e0159fd} - E:\TMCCSetup_3.57.95.14.exe
HKU\S-1-5-21-92525525-684568335-2651620714-1000\...\MountPoints2: {502cfdcc-b291-11e2-b733-88ae1da49123} - E:\TMCCSetup_2.85.60.14.exe

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

2015-06-01 22:14 - 2015-06-01 22:16 - 00012762 _____ () C:\Users\Ľubka\Downloads\FRST.txt
2015-06-01 22:03 - 2015-06-01 21:15 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-06-01 21:17 - 2015-06-01 22:06 - 00006758 _____ () C:\zoek-results.log
2015-06-01 21:15 - 2015-06-01 22:00 - 00000000 ____D () C:\zoek_backup
2015-06-01 21:14 - 2015-06-01 21:14 - 01308672 _____ () C:\Users\Ľubka\Desktop\zoek.exe
2015-06-01 21:04 - 2015-06-01 21:09 - 00000000 ____D () C:\AdwCleaner
2015-06-01 21:02 - 2015-06-01 21:03 - 02231296 _____ () C:\Users\Ľubka\Downloads\adwcleaner_4.206.exe
2015-05-30 20:18 - 2015-05-30 20:18 - 16409960 _____ (Safer Networking Limited ) C:\Users\Ľubka\Downloads\spybotsd162 (1).exe
2015-05-30 20:07 - 2015-05-30 20:07 - 01107968 _____ () C:\Users\Ľubka\Downloads\RSIT (1).exe
2015-05-30 19:57 - 2015-05-30 20:07 - 00000000 ____D () C:\Program Files\trend micro
2015-05-30 19:57 - 2015-05-30 19:58 - 00000000 ____D () C:\rsit
2015-05-30 19:57 - 2015-05-30 19:57 - 01107968 _____ () C:\Users\Ľubka\Downloads\RSIT.exe
2010-08-31 17:21 - 2010-03-03 00:59 - 0131984 _____ () C:\ProgramData\FullRemove.exe
EmptyTemp:
End
*****************

Processes closed successfully.

========================= Folder: C:\6c6a7ed937d77504815505faa5 ========================

2013-03-19 06:20 - 2013-03-19 06:20 - 0016118 ____N () C:\6c6a7ed937d77504815505faa5\DHtmlHeader.html
2013-03-19 06:23 - 2013-03-19 06:23 - 0088533 ____N () C:\6c6a7ed937d77504815505faa5\DisplayIcon.ico
2013-03-19 04:34 - 2013-03-19 04:34 - 0003628 ____N () C:\6c6a7ed937d77504815505faa5\header.bmp
2013-03-19 05:03 - 2013-03-19 05:03 - 1901056 ____N () C:\6c6a7ed937d77504815505faa5\netfx_core_x64.msi
2013-03-19 05:03 - 2013-03-19 05:03 - 1163264 ____N () C:\6c6a7ed937d77504815505faa5\netfx_core_x86.msi
2013-03-19 05:03 - 2013-03-19 05:03 - 0872448 ____N () C:\6c6a7ed937d77504815505faa5\netfx_extended_x64.msi
2013-03-19 05:03 - 2013-03-19 05:03 - 0495616 ____N () C:\6c6a7ed937d77504815505faa5\netfx_extended_x86.msi
2013-09-12 14:41 - 2013-09-12 14:41 - 213393078 ____N () C:\6c6a7ed937d77504815505faa5\netfx_Full_GDR.mzz
2013-09-12 14:44 - 2013-09-12 14:44 - 1544192 ____N () C:\6c6a7ed937d77504815505faa5\netfx_Full_GDR_x64.msi
2013-09-12 14:21 - 2013-09-12 14:21 - 0921600 ____N () C:\6c6a7ed937d77504815505faa5\netfx_Full_GDR_x86.msi
2013-09-12 04:46 - 2013-09-12 04:46 - 213393078 _____ () C:\6c6a7ed937d77504815505faa5\netfx_Full_LDR.mzz
2013-09-12 04:48 - 2013-09-12 04:48 - 1548288 ____N () C:\6c6a7ed937d77504815505faa5\netfx_Full_LDR_x64.msi
2013-09-12 04:29 - 2013-09-12 04:29 - 0925696 ____N () C:\6c6a7ed937d77504815505faa5\netfx_Full_LDR_x86.msi
2013-09-11 23:46 - 2013-09-11 23:46 - 1531904 ____N () C:\6c6a7ed937d77504815505faa5\netfx_Full_x64.msi
2013-09-11 23:46 - 2013-09-11 23:46 - 0901120 ____N () C:\6c6a7ed937d77504815505faa5\netfx_Full_x86.msi
2013-09-12 14:46 - 2013-09-12 14:46 - 1508978 ____N () C:\6c6a7ed937d77504815505faa5\ParameterInfo.xml
2013-09-12 06:21 - 2013-09-12 06:21 - 0088128 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\Setup.exe
2013-09-12 06:21 - 2013-09-12 06:21 - 0889432 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\SetupEngine.dll
2013-09-12 06:21 - 2013-09-12 06:21 - 0306760 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\SetupUi.dll
2013-03-19 06:20 - 2013-03-19 06:20 - 0030120 ____N () C:\6c6a7ed937d77504815505faa5\SetupUi.xsd
2013-09-12 06:21 - 2013-09-12 06:21 - 0119392 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\SetupUtility.exe
2013-03-19 06:23 - 2013-03-19 06:23 - 0041080 ____N () C:\6c6a7ed937d77504815505faa5\SplashScreen.bmp
2013-03-19 05:03 - 2013-03-19 05:03 - 0196416 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\sqmapi.dll
2013-03-19 06:23 - 2013-03-19 06:23 - 0014084 ____N () C:\6c6a7ed937d77504815505faa5\Strings.xml
2013-03-19 06:23 - 2013-03-19 06:23 - 0038910 ____N () C:\6c6a7ed937d77504815505faa5\UiInfo.xml
2013-03-19 04:34 - 2013-03-19 04:34 - 0104072 ____N () C:\6c6a7ed937d77504815505faa5\watermark.bmp
2013-03-19 05:03 - 2013-03-19 05:03 - 7278068 ____N () C:\6c6a7ed937d77504815505faa5\Windows6.0-KB956250-v6001-x64.msu
2013-03-19 05:03 - 2013-03-19 05:03 - 4270292 ____N () C:\6c6a7ed937d77504815505faa5\Windows6.0-KB956250-v6001-x86.msu
2013-03-19 05:03 - 2013-03-19 05:03 - 7167139 ____N () C:\6c6a7ed937d77504815505faa5\Windows6.1-KB958488-v6001-x64.msu
2013-03-19 05:03 - 2013-03-19 05:03 - 4219350 ____N () C:\6c6a7ed937d77504815505faa5\Windows6.1-KB958488-v6001-x86.msu
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1025
2013-09-11 23:40 - 2013-09-11 23:40 - 0013290 ____N () C:\6c6a7ed937d77504815505faa5\1025\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0076568 ____N () C:\6c6a7ed937d77504815505faa5\1025\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0028776 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1025\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1028
2013-09-11 23:40 - 2013-09-11 23:40 - 0009955 ____N () C:\6c6a7ed937d77504815505faa5\1028\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0066544 ____N () C:\6c6a7ed937d77504815505faa5\1028\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0025192 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1028\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1029
2013-09-11 23:40 - 2013-09-11 23:40 - 0006789 ____N () C:\6c6a7ed937d77504815505faa5\1029\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0081984 ____N () C:\6c6a7ed937d77504815505faa5\1029\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0029800 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1029\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1030
2013-09-11 23:40 - 2013-09-11 23:40 - 0005042 ____N () C:\6c6a7ed937d77504815505faa5\1030\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0079680 ____N () C:\6c6a7ed937d77504815505faa5\1030\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0029288 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1030\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1031
2013-09-11 23:40 - 2013-09-11 23:40 - 0005355 ____N () C:\6c6a7ed937d77504815505faa5\1031\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0083958 ____N () C:\6c6a7ed937d77504815505faa5\1031\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0030312 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1031\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1032
2013-09-11 23:40 - 2013-09-11 23:40 - 0015463 ____N () C:\6c6a7ed937d77504815505faa5\1032\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0085568 ____N () C:\6c6a7ed937d77504815505faa5\1032\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0030824 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1032\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1033
2013-09-11 23:40 - 2013-09-11 23:40 - 0004482 ____N () C:\6c6a7ed937d77504815505faa5\1033\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0079446 ____N () C:\6c6a7ed937d77504815505faa5\1033\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0028776 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1033\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1035
2013-09-11 23:40 - 2013-09-11 23:40 - 0005537 ____N () C:\6c6a7ed937d77504815505faa5\1035\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0080300 ____N () C:\6c6a7ed937d77504815505faa5\1035\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0029800 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1035\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1036
2013-09-11 23:40 - 2013-09-11 23:40 - 0005739 ____N () C:\6c6a7ed937d77504815505faa5\1036\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0083954 ____N () C:\6c6a7ed937d77504815505faa5\1036\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0030312 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1036\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1037
2013-09-11 23:40 - 2013-09-11 23:40 - 0011412 ____N () C:\6c6a7ed937d77504815505faa5\1037\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0075120 ____N () C:\6c6a7ed937d77504815505faa5\1037\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0027752 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1037\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1038
2013-09-11 23:40 - 2013-09-11 23:40 - 0006876 ____N () C:\6c6a7ed937d77504815505faa5\1038\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0082776 ____N () C:\6c6a7ed937d77504815505faa5\1038\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0030312 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1038\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1040
2013-09-11 23:40 - 2013-09-11 23:40 - 0005606 ____N () C:\6c6a7ed937d77504815505faa5\1040\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0081740 ____N () C:\6c6a7ed937d77504815505faa5\1040\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0029800 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1040\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1041
2013-09-11 23:40 - 2013-09-11 23:40 - 0015402 ____N () C:\6c6a7ed937d77504815505faa5\1041\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0072018 ____N () C:\6c6a7ed937d77504815505faa5\1041\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0026728 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1041\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1042
2013-09-11 23:40 - 2013-09-11 23:40 - 0014277 ____N () C:\6c6a7ed937d77504815505faa5\1042\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0070440 ____N () C:\6c6a7ed937d77504815505faa5\1042\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0026216 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1042\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1043
2013-09-11 23:40 - 2013-09-11 23:40 - 0005214 ____N () C:\6c6a7ed937d77504815505faa5\1043\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0081474 ____N () C:\6c6a7ed937d77504815505faa5\1043\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0030824 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1043\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1044
2013-09-11 23:40 - 2013-09-11 23:40 - 0004851 ____N () C:\6c6a7ed937d77504815505faa5\1044\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0081080 ____N () C:\6c6a7ed937d77504815505faa5\1044\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0029288 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1044\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1045
2013-09-11 23:40 - 2013-09-11 23:40 - 0006903 ____N () C:\6c6a7ed937d77504815505faa5\1045\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0083666 ____N () C:\6c6a7ed937d77504815505faa5\1045\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0029800 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1045\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1046
2013-09-11 23:40 - 2013-09-11 23:40 - 0005274 ____N () C:\6c6a7ed937d77504815505faa5\1046\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0080726 ____N () C:\6c6a7ed937d77504815505faa5\1046\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0029800 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1046\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1049
2013-09-11 23:40 - 2013-09-11 23:40 - 0016978 ____N () C:\6c6a7ed937d77504815505faa5\1049\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0082068 ____N () C:\6c6a7ed937d77504815505faa5\1049\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0029800 ____N (Корпорация Майкрософт) C:\6c6a7ed937d77504815505faa5\1049\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1053
2013-09-11 23:40 - 2013-09-11 23:40 - 0005575 ____N () C:\6c6a7ed937d77504815505faa5\1053\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0079614 ____N () C:\6c6a7ed937d77504815505faa5\1053\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0029288 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1053\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\1055
2013-09-11 23:40 - 2013-09-11 23:40 - 0006771 ____N () C:\6c6a7ed937d77504815505faa5\1055\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0079762 ____N () C:\6c6a7ed937d77504815505faa5\1055\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0029288 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\1055\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\2052
2013-09-11 23:40 - 2013-09-11 23:40 - 0009275 ____N () C:\6c6a7ed937d77504815505faa5\2052\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0066512 ____N () C:\6c6a7ed937d77504815505faa5\2052\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0024680 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\2052\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\2070
2013-09-11 23:40 - 2013-09-11 23:40 - 0006142 ____N () C:\6c6a7ed937d77504815505faa5\2070\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0082326 ____N () C:\6c6a7ed937d77504815505faa5\2070\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0029800 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\2070\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:37 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\3082
2013-09-11 23:40 - 2013-09-11 23:40 - 0005245 ____N () C:\6c6a7ed937d77504815505faa5\3082\eula.rtf
2013-09-12 14:09 - 2013-09-12 14:09 - 0081724 ____N () C:\6c6a7ed937d77504815505faa5\3082\LocalizedData.xml
2013-09-12 07:33 - 2013-09-12 07:33 - 0030312 ____N (Microsoft Corporation) C:\6c6a7ed937d77504815505faa5\3082\SetupResources.dll
2015-05-10 23:36 - 2015-05-10 23:36 - 0000000 ____D () C:\6c6a7ed937d77504815505faa5\Graphics
2013-03-19 06:20 - 2013-03-19 06:20 - 0001150 ____N () C:\6c6a7ed937d77504815505faa5\Graphics\Print.ico
2013-03-19 06:20 - 2013-03-19 06:20 - 0000894 ____N () C:\6c6a7ed937d77504815505faa5\Graphics\Rotate1.ico
2013-03-19 06:20 - 2013-03-19 06:20 - 0000894 ____N () C:\6c6a7ed937d77504815505faa5\Graphics\Rotate2.ico
2013-03-19 06:20 - 2013-03-19 06:20 - 0000894 ____N () C:\6c6a7ed937d77504815505faa5\Graphics\Rotate3.ico
2013-03-19 06:20 - 2013-03-19 06:20 - 0000894 ____N () C:\6c6a7ed937d77504815505faa5\Graphics\Rotate4.ico
2013-03-19 06:20 - 2013-03-19 06:20 - 0000894 ____N () C:\6c6a7ed937d77504815505faa5\Graphics\Rotate5.ico
2013-03-19 06:20 - 2013-03-19 06:20 - 0000894 ____N () C:\6c6a7ed937d77504815505faa5\Graphics\Rotate6.ico
2013-03-19 06:20 - 2013-03-19 06:20 - 0000894 ____N () C:\6c6a7ed937d77504815505faa5\Graphics\Rotate7.ico
2013-03-19 06:20 - 2013-03-19 06:20 - 0000894 ____N () C:\6c6a7ed937d77504815505faa5\Graphics\Rotate8.ico
2013-03-19 06:20 - 2013-03-19 06:20 - 0001150 ____N () C:\6c6a7ed937d77504815505faa5\Graphics\Save.ico
2013-03-19 06:20 - 2013-03-19 06:20 - 0036710 ____N () C:\6c6a7ed937d77504815505faa5\Graphics\Setup.ico
2013-03-19 06:20 - 2013-03-19 06:20 - 0010134 ____N () C:\6c6a7ed937d77504815505faa5\Graphics\stop.ico
2013-03-19 06:20 - 2013-03-19 06:20 - 0001150 ____N () C:\6c6a7ed937d77504815505faa5\Graphics\SysReqMet.ico
2013-03-19 06:20 - 2013-03-19 06:20 - 0001150 ____N () C:\6c6a7ed937d77504815505faa5\Graphics\SysReqNotMet.ico
2013-03-19 06:20 - 2013-03-19 06:20 - 0010134 ____N () C:\6c6a7ed937d77504815505faa5\Graphics\warn.ico

====== End of Folder: ======

"HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{38216570-5DB1-45F8-A344-B0C4E252B14B}" => key Removed successfully.
"HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}" => key Removed successfully.
"HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}" => key Removed successfully.
"HKU\S-1-5-21-92525525-684568335-2651620714-1000_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}" => key Removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{37256E64-5082-4ADE-BF74-ED174996D649}" => key Removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{37256E64-5082-4ADE-BF74-ED174996D649}" => key Removed successfully.
C:\Windows\System32\Tasks\{D14C3C76-5FDD-4F8B-A69D-8E15784647A9} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D14C3C76-5FDD-4F8B-A69D-8E15784647A9}" => key Removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5155185F-DB5F-4F10-BC1A-63ACC83D4F99}" => key Removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5155185F-DB5F-4F10-BC1A-63ACC83D4F99}" => key Removed successfully.
C:\Windows\System32\Tasks\{5CB073BD-ACF0-4334-8F48-BCD1E3C17685} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5CB073BD-ACF0-4334-8F48-BCD1E3C17685}" => key Removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5FAF871B-6F9D-4D56-97D3-63E94059688E}" => key Removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5FAF871B-6F9D-4D56-97D3-63E94059688E}" => key Removed successfully.
C:\Windows\System32\Tasks\{11D518F9-C582-4525-8ECC-C53E23DABA87} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{11D518F9-C582-4525-8ECC-C53E23DABA87}" => key Removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8F4CFCF1-5C85-49C8-98BE-132F729DD690}" => key Removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8F4CFCF1-5C85-49C8-98BE-132F729DD690}" => key Removed successfully.
C:\Windows\System32\Tasks\{847D982C-3EA7-46C9-97B0-B2FA7DED4E3E} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{847D982C-3EA7-46C9-97B0-B2FA7DED4E3E}" => key Removed successfully.
"C:\Users\Ľubka\Downloads\SweetIMSetup (1).exe" => File/Folder not found.
"C:\Users\Ľubka\Downloads\SweetIMSetup.exe" => File/Folder not found.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92525525-684568335-2651620714-1000Core.job not found.
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-92525525-684568335-2651620714-1000UA.job not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\LManager => value Removed successfully.
HKU\S-1-5-21-92525525-684568335-2651620714-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => value Removed successfully.
HKU\S-1-5-21-92525525-684568335-2651620714-1000\Software\Microsoft\Windows\CurrentVersion\Run\\SpybotSD TeaTimer => value Removed successfully.
HKU\S-1-5-21-92525525-684568335-2651620714-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Spotify Web Helper => value Removed successfully.
"HKU\S-1-5-21-92525525-684568335-2651620714-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{03aca1cf-3cf8-11e0-9189-4c0f6e0159fd}" => key Removed successfully.
HKCR\CLSID\{03aca1cf-3cf8-11e0-9189-4c0f6e0159fd} => key not found.
"HKU\S-1-5-21-92525525-684568335-2651620714-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{502cfdcc-b291-11e2-b733-88ae1da49123}" => key Removed successfully.
HKCR\CLSID\{502cfdcc-b291-11e2-b733-88ae1da49123} => key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value Removed successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value Removed successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value Removed successfully.
C:\Users\Ľubka\Downloads\FRST.txt => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Ľubka\Desktop\zoek.exe => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Ľubka\Downloads\adwcleaner_4.206.exe => Moved successfully.
C:\Users\Ľubka\Downloads\spybotsd162 (1).exe => Moved successfully.
C:\Users\Ľubka\Downloads\RSIT (1).exe => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\rsit => Moved successfully.
C:\Users\Ľubka\Downloads\RSIT.exe => Moved successfully.
C:\ProgramData\FullRemove.exe => Moved successfully.
EmptyTemp: => Removed 63.7 MB temporary data.

The system needed a reboot.

==== End of Fixlog 22:45:16 ====

#14 Příspěvek od **altrok** » 01 čer 2015 21:52

Pocitaci by se melo alespon trochu oproti puvodnimu stavu odlehcit. Poradne otestujte, jak se PC chova.

Stahnete Crystal Disk Info (CDI) http://sourceforge.jp/frs/redir.php?m=j ... o6_2_2.zip
archiv extrahujte a spustte vyextrahovany soubor DiskInfo.exe
ve spustenem programu kliknete nahore na Upravy -> Kopirovat (log mate nyni zkopirovany ve schrance)
log vlozte do dalsi odpovedi (Ctrl + V)

e-comm · #15 Příspěvek od **e-comm** » 01 čer 2015 21:55

super, je to o cosi lepsie , akurat prestala pracovat mys..

VIRY.CZ

PC sa sprava podozrivo

PC sa sprava podozrivo

Re: PC sa sprava podozrivo

Re: PC sa sprava podozrivo

Re: PC sa sprava podozrivo

Re: PC sa sprava podozrivo

Re: PC sa sprava podozrivo

Re: PC sa sprava podozrivo

Re: PC sa sprava podozrivo

Re: PC sa sprava podozrivo

Re: PC sa sprava podozrivo

Re: PC sa sprava podozrivo

Re: PC sa sprava podozrivo

Re: PC sa sprava podozrivo

Re: PC sa sprava podozrivo

Re: PC sa sprava podozrivo