Dobrý den, vyhledávač od Google na mě dneska vybafl že bych mohl mít v počítači Malware. Stáhnul jsem si výše uvedený program a spustil kontrolu. Po skončení kontroly mi tento program každou chvilku vyhazuje hlášku že zablokoval přístup na podezřelou stránku 111.111.111.111
Nevím co přesně tato hláška znamená a prosím o kontrolu logu z tohoto programu.
Vzhledem k tomu, že se mi sem ten log nechce vejít, přikládám ho v dokumentu v PDF.
Děkuji.
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosím o kontrolu logu - Malwarebytes Anti-Malware
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Prosím o kontrolu logu - Malwarebytes Anti-Malware
- Přílohy
-
- Malwarebytes Anti.pdf
- (239.73 KiB) Staženo 105 x
-
Rudy
- Site Admin
- Příspěvky: 119322
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu - Malwarebytes Anti-Malware
Zdravím!
Vše, co MBAM nalezl, smažte. IP 111.111.111.111 patří Japonsku: http://whois.domaintools.com/111.111.111.111 . Takže je možné, že se na ni nalézají závadné weby. Dejte pro jistotu log FRST:
Vše, co MBAM nalezl, smažte. IP 111.111.111.111 patří Japonsku: http://whois.domaintools.com/111.111.111.111 . Takže je možné, že se na ni nalézají závadné weby. Dejte pro jistotu log FRST:
Stáhněte FRST: http://vyosek.ic.cz/pro_usery/FRSTLauncher.exe a uložte na plochu. Spusťte a klikněte na >Scan<. Po skončení skenu se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu logu - Malwarebytes Anti-Malware
Doufám, že se mi to povedlo a vkládám log z FRST.
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-09-2013 01
Ran by Boža (administrator) on BOŽA on 02-10-2013 00:42:52
Running from C:\Documents and Settings\Boža\Plocha
Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Software602 a.s.) C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
(ASUSTeK COMPUTER INC.) C:\WINDOWS\ATKKBService.exe
() C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
() C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
(The Firebird Project) C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
() C:\Documents and Settings\All Users\Data aplikací\HiSuiteOuc\HiSuiteOuc.exe
() C:\Documents and Settings\All Users\Data aplikací\HandSetService\HuaweiHiSuiteService.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Pandora.TV) C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
() C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
(The Firebird Project) C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\tv_w32.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastUI.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\SOUNDMAN.EXE
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(SkypEmoticons) C:\Documents and Settings\Boža\Data aplikací\SkypEmoticons\SE.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\WZQKPICK.EXE
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(LemurLeap) C:\Program Files\LemurLeap\updateLemurLeap.exe
() C:\Documents and Settings\Boža\Data aplikací\Seznam.cz\bin\szndesktop.exe
(Microsoft Corporation) C:\WINDOWS\system32\taskmgr.exe
(PandoraTV) C:\Program Files\PANDORA.TV\PanService\PanProcess.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM\...\Run: [SoundMan] - C:\Windows\SOUNDMAN.EXE [577536 2007-04-16] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [seznam-listicka-distribuce] - C:\Program Files\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKCU\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2007-06-27] (Nero AG)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [AlcoholAutomount] - D:\Audio video\Alcohol 120\AxAutoMntSrv.exe [33120 2010-08-20] (Alcohol Soft Development Team)
HKCU\...\Run: [] - [x]
HKCU\...\Run: [se] - C:\Documents and Settings\Boža\Data aplikací\SkypEmoticons\SE.exe [5842336 2013-09-18] (SkypEmoticons)
HKCU\...\Run: [cz.seznam.software.autoupdate] - C:\Documents and Settings\Boža\Data aplikací\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKCU\...\Run: [cz.seznam.software.szndesktop] - C:\Documents and Settings\Boža\Data aplikací\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\Default User\...\RunOnce: [nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\Default User\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\Default User\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe [ 2007-06-27] (Nero AG)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\WinZip Quick Pick.lnk
ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files\WinZip\WZQKPICK.EXE (WinZip Computing, S.L.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com/?utm_source=b&utm_m ... 1379540236
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
BHO: LemurLeap - {415419c3-dad0-4df1-ac37-22c72ad81878} - C:\Program Files\LemurLeap\LemurLeapbho.dll (LemurLeap)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU -&Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU -&Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 10.0.0.1
FireFox:
========
FF ProfilePath: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default
FF user.js: detected! => C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\user.js
FF NewTab: hxxp://home.brandthunder.com/nasathemes/?newtab
FF DefaultSearchEngine: Centrum.cz - Hledání v internetu
FF SearchEngineOrder.1: qvo6
FF Homepage: hxxp://www.centrum.cz/
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3228856&SearchSource=2&q=
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin: @software602.cz/602XML Filler - C:\Program Files\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - D:\Přehravače\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: No Name - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\btpersonas@brandthunder.com
FF Extension: Centrum doménový pomocník - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\centrumpomocnik@centrum.cz
FF Extension: No Name - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\nostmp
FF Extension: Cooliris - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\piclens@cooliris.com
FF Extension: Firefox Synchronisation Extension - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\synchronize@nokia.suite
FF Extension: savensHaree - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\xzvei7a@eeoeuu-aooa.org
FF Extension: WebTran - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\{003D3EDC-99B9-4a34-9C20-60CB94F7E829}
FF Extension: FreemakeVideoConverterTB Community Toolbar - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\{81fae9c9-cfbd-4cb3-8322-412e72f55f65}
FF Extension: Seznam lištička - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF Extension: Centrum.cz nastavení - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: FoxLingo - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}
FF Extension: DivXWebPlayer - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\DivXWebPlayer@divx.com.xpi
FF Extension: No Name - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\{166745b8-8d4a-4c86-9120-696de51a77aa}.xpi
FF Extension: No Name - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\{a95d8332-e4b4-6e7f-98ac-20b733364387}.xpi
FF Extension: No Name - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.qvo6.com/?utm_source=b&utm_m ... 1379540236
Chrome:
=======
CHR HomePage: hxxp://www.seznam.cz/?clid=16194
CHR RestoreOnStartup: "hxxp://www.qvo6.com/?utm_source=b&utm_medium=w ... 1379540236"]},"sync":{"keep_everything_synced":false,"preferences":false,"search_engines":false,"suppress_start":true},"webkit":{"webprefs":{"allow_running_insecure_content"
CHR Extension: (Seznam Li\u0161ti\u010Dka - Slovn\u00EDk) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd\1.2.13_0
CHR Extension: (YouTube) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (LemurLeap) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\jlnfdbbladgcmhhamgkioifhbobjaoof\1.0.0_0
CHR Extension: (savensHaree ) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\kmilnpoiaahbllakcdnaakfbbnnaakin\5.10
CHR Extension: (Chrome In-App Payments service) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Seznam Li\u0161ti\u010Dka - Rychl\u00E1 volba) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak\1.5.14_0
CHR Extension: (Gmail) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [jlnfdbbladgcmhhamgkioifhbobjaoof] - C:\Program Files\LemurLeap\jlnfdbbladgcmhhamgkioifhbobjaoof.crx
========================== Services (Whitelisted) =================
R2 602XML Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 ATKKeyboardService; C:\WINDOWS\ATKKBService.exe [253952 2005-08-07] (ASUSTeK COMPUTER INC.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 BlueSoleilCS; C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe [850432 2009-02-27] ()
R3 BsHelpCS; C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe [98407 2009-02-27] ()
R2 BsMobileCS; C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe [143467 2009-02-27] ()
R2 FirebirdGuardianDefaultInstance; C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe [65536 2007-12-12] (The Firebird Project)
R3 FirebirdServerDefaultInstance; C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe [1531989 2007-12-12] (The Firebird Project)
R2 HiSuiteOuc.exe; C:\Documents and Settings\All Users\Data aplikací\HiSuiteOuc\HiSuiteOuc.exe [116032 2013-07-11] ()
R2 HuaweiHiSuiteService.exe; C:\Documents and Settings\All Users\Data aplikací\HandSetService\HuaweiHiSuiteService.exe [158208 2013-05-02] ()
S3 Installer Service; C:\Documents and Settings\All Users\Data aplikací\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{7C41450A-4442-43F4-8DCA-BE04CC70A5EE}\Installer\InstallerService.exe [119296 2013-05-31] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 NBService; D:\Audio video\Nero 7\Nero BackItUp\NBService.exe [800040 2007-06-29] (Nero AG)
R2 nvUpdatusService; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2253120 2011-10-08] (NVIDIA Corporation)
R2 PanService; C:\Program Files\PANDORA.TV\PanService\PandoraService.exe [625304 2012-09-28] (Pandora.TV)
S2 StarWindServiceAE; D:\Audio video\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software)
R2 Update LemurLeap; C:\Program Files\LemurLeap\updateLemurLeap.exe [206624 2013-09-26] (LemurLeap)
R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf"
==================== Drivers (Whitelisted) ====================
S3 ALCXSENS; C:\Windows\System32\drivers\ALCXSENS.SYS [400384 2004-02-24] (Sensaura)
R3 ALCXWDM; C:\Windows\System32\drivers\ALCXWDM.SYS [4122368 2008-09-24] (Realtek Semiconductor Corp.)
R1 aslm75; C:\WINDOWS\system32\drivers\aslm75.sys [6272 1997-04-22] ()
S1 asusgsb; C:\Windows\System32\drivers\asusgsb.sys [12416 2005-07-08] (ASUSTeK Computer Inc.)
R1 asuskbnt; C:\Windows\System32\drivers\atkkbnt.sys [23040 2005-06-09] (ASUSTeK COMPUTER INC.)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [66336 2013-08-30] (AVAST Software)
R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [49760 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [177864 2013-08-30] ()
S3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [33800 2008-11-25] (IVT Corporation.)
S3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [27528 2008-11-25] (IVT Corporation.)
S3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [14088 2008-12-07] (IVT Corporation.)
R3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [39304 2009-01-03] (IVT Corporation.)
R0 BtHidBus; C:\Windows\System32\Drivers\BtHidBus.sys [20744 2009-01-07] (IVT Corporation.)
S0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [20880 2007-03-05] (IVT Corporation.)
S0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [35600 2007-03-05] (IVT Corporation.)
R3 btnetBUs; C:\Windows\System32\Drivers\btnetBus.sys [30088 2008-12-07] ()
S3 BTNetFilter; C:\Program Files\IVT Corporation\BlueSoleil\Device\Win2k\BTNetFilter.sys [22416 2006-11-22] (IVT Corporation.)
S3 cpudrv; C:\Program Files\SystemRequirementsLab\cpudrv.sys [11336 2011-06-02] ()
R2 EIO; C:\WINDOWS\system32\drivers\EIO.sys [11264 2005-08-01] (ASUSTeK Computer Inc.)
R3 IvtBtBUs; C:\Windows\System32\Drivers\IvtBtBus.sys [26248 2008-07-02] (IVT Corporation.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [466008 2012-12-15] (Duplex Secure Ltd.)
S3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [14856 2008-01-21] (IVT Corporation.)
R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [31880 2009-01-08] (IVT Corporation.)
S3 Video3D; C:\Windows\System32\Drivers\Video3D.sys [44544 2004-07-06] (ASUSTeK COMPUTER INC.)
R3 yukonwxp; C:\Windows\System32\DRIVERS\yk51x86.sys [299424 2012-01-25] (Marvell)
U3 ag3zdvyq; C:\Windows\System32\Drivers\ag3zdvyq.sys [0 ] (Microsoft Corporation)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [102272 2011-10-24] (Huawei Technologies Co., Ltd.)
U1 WS2IFSL;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-02 00:42 - 2013-10-02 00:42 - 00000000 ____D C:\FRST
2013-10-02 00:41 - 2013-10-02 00:41 - 00000000 ____D C:\Documents and Settings\Boža\Local Settings\Data aplikací\qb38396E.40
2013-10-02 00:41 - 2013-09-27 20:27 - 01086873 _____ (Farbar) C:\Documents and Settings\Boža\Plocha\FRST.exe
2013-10-02 00:11 - 2013-10-02 00:11 - 00000000 ____D C:\Program Files\Seznam.cz
2013-10-02 00:09 - 2013-10-02 00:12 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\Seznam.cz
2013-10-02 00:09 - 2013-10-02 00:10 - 00000000 ____D C:\Program Files\LemurLeap
2013-10-02 00:08 - 2013-10-02 00:08 - 00000386 _____ C:\WINDOWS\Tasks\AmiUpdXp.job
2013-10-02 00:08 - 2013-10-02 00:08 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\SwvUpdater
2013-10-01 23:52 - 2013-10-02 00:38 - 00029696 _____ C:\Documents and Settings\Boža\Local Settings\Data aplikací\MSGBOX.EXE
2013-10-01 11:27 - 2013-10-01 11:27 - 00000784 _____ C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
2013-10-01 11:27 - 2013-10-01 11:27 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-10-01 11:27 - 2013-10-01 11:27 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware
2013-10-01 11:27 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-10-01 11:20 - 2013-10-01 11:20 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\Malwarebytes
2013-10-01 11:20 - 2013-10-01 11:20 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2013-09-19 22:57 - 2013-09-19 22:57 - 00000088 _____ C:\Documents and Settings\Boža\7098176685019684841.log
2013-09-19 22:49 - 2013-09-19 22:49 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\337
2013-09-19 22:48 - 2013-10-01 22:13 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\Omiga Plus
2013-09-19 22:48 - 2013-09-19 22:52 - 00000000 ____D C:\Program Files\Omiga Plus
2013-09-18 23:38 - 2013-10-01 22:13 - 00000000 ____D C:\Program Files\Common Files\337
2013-09-18 23:38 - 2013-09-19 23:02 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\eSafe
2013-09-18 23:38 - 2013-09-18 23:39 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\SkypEmoticons
2013-09-18 23:38 - 2013-09-18 23:38 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\SkypEmoticons
2013-09-18 23:36 - 2013-09-18 23:43 - 00000000 ____D C:\Program Files\Optimizer Pro
2013-09-18 23:35 - 2013-09-20 06:31 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\savensHaree
2013-09-18 23:35 - 2013-09-18 23:38 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\SummerSoft
2013-09-18 23:34 - 2013-09-18 23:43 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\InstallMate
2013-09-18 22:02 - 2013-09-18 22:02 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\TeamViewer 8
2013-09-17 21:41 - 2013-09-18 00:07 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-09-17 08:08 - 2013-09-17 08:08 - 00114071 _____ C:\Documents and Settings\Boža\Plocha\Boháč mi dluží za práci a vysmívá se. Nebojte se bránit, radí advokát - iDNES.cz.htm
2013-09-17 08:08 - 2013-09-17 08:08 - 00000000 ____D C:\Documents and Settings\Boža\Plocha\Boháč mi dluží za práci a vysmívá se. Nebojte se bránit, radí advokát - iDNES.cz_soubory
2013-09-12 23:15 - 2013-09-12 23:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876315$
2013-09-12 23:15 - 2013-09-12 23:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2013-09-12 23:15 - 2013-09-12 23:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-09-05 10:22 - 2013-09-05 10:22 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-09-02 23:37 - 2013-09-02 23:37 - 00007168 ___SH C:\WINDOWS\Thumbs.db
==================== One Month Modified Files and Folders =======
2013-10-02 00:44 - 2012-10-28 14:53 - 00000000 ____D C:\Documents and Settings\Boža\Plocha
2013-10-02 00:43 - 2012-10-29 09:43 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\Skype
2013-10-02 00:42 - 2013-10-02 00:42 - 00000000 ____D C:\FRST
2013-10-02 00:41 - 2013-10-02 00:41 - 00000000 ____D C:\Documents and Settings\Boža\Local Settings\Data aplikací\qb38396E.40
2013-10-02 00:41 - 2012-10-28 14:53 - 00000000 ___HD C:\Documents and Settings\Boža\Local Settings\Data aplikací
2013-10-02 00:38 - 2013-10-01 23:52 - 00029696 _____ C:\Documents and Settings\Boža\Local Settings\Data aplikací\MSGBOX.EXE
2013-10-02 00:26 - 2012-10-29 02:18 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-10-02 00:12 - 2013-10-02 00:09 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\Seznam.cz
2013-10-02 00:11 - 2013-10-02 00:11 - 00000000 ____D C:\Program Files\Seznam.cz
2013-10-02 00:10 - 2013-10-02 00:09 - 00000000 ____D C:\Program Files\LemurLeap
2013-10-02 00:09 - 2012-10-28 14:53 - 00000000 __RHD C:\Documents and Settings\Boža\Data aplikací
2013-10-02 00:08 - 2013-10-02 00:08 - 00000386 _____ C:\WINDOWS\Tasks\AmiUpdXp.job
2013-10-02 00:08 - 2013-10-02 00:08 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\SwvUpdater
2013-10-01 23:56 - 2012-10-29 01:42 - 00000936 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-01 23:48 - 2012-10-29 01:42 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-10-01 23:41 - 2012-10-28 15:42 - 00000157 _____ C:\WINDOWS\wiadebug.log
2013-10-01 23:41 - 2012-10-28 15:42 - 00000049 _____ C:\WINDOWS\wiaservc.log
2013-10-01 23:41 - 2009-02-27 17:04 - 00001280 _____ C:\WINDOWS\system32\bscs.ini
2013-10-01 23:40 - 2012-10-29 11:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB974392$
2013-10-01 23:40 - 2012-10-29 01:42 - 00000932 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-01 23:40 - 2012-10-28 14:52 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-10-01 23:39 - 2012-10-29 19:47 - 00131072 _____ C:\WINDOWS\system32\config\OAlerts.evt
2013-10-01 23:39 - 2012-10-28 14:53 - 00000178 ___SH C:\Documents and Settings\Boža\ntuser.ini
2013-10-01 23:39 - 2012-10-28 14:53 - 00000000 ____D C:\Documents and Settings\Boža
2013-10-01 23:39 - 2012-10-28 14:52 - 00032454 _____ C:\WINDOWS\SchedLgU.Txt
2013-10-01 23:39 - 2012-10-28 14:47 - 01978872 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-01 22:13 - 2013-09-19 22:48 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\Omiga Plus
2013-10-01 22:13 - 2013-09-18 23:38 - 00000000 ____D C:\Program Files\Common Files\337
2013-10-01 19:28 - 2012-10-29 23:42 - 00000000 ____D C:\Documents and Settings\Boža\Dokumenty\Soubory aplikace Outlook
2013-10-01 14:46 - 2012-10-29 23:41 - 00002547 _____ C:\Documents and Settings\Boža\Plocha\Microsoft Word 2010 (2).lnk
2013-10-01 11:27 - 2013-10-01 11:27 - 00000784 _____ C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
2013-10-01 11:27 - 2013-10-01 11:27 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-10-01 11:27 - 2013-10-01 11:27 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware
2013-10-01 11:27 - 2012-10-28 15:39 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2013-10-01 11:27 - 2012-10-28 15:39 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy
2013-10-01 11:20 - 2013-10-01 11:20 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\Malwarebytes
2013-10-01 11:20 - 2013-10-01 11:20 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2013-10-01 11:20 - 2012-10-28 15:37 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2013-09-30 16:41 - 2012-10-31 00:29 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\.minecraft
2013-09-29 20:13 - 2002-12-05 13:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-09-27 20:27 - 2013-10-02 00:41 - 01086873 _____ (Farbar) C:\Documents and Settings\Boža\Plocha\FRST.exe
2013-09-27 02:31 - 2012-12-13 01:02 - 00001088 _____ C:\Documents and Settings\Boža\Local Settings\Data aplikací\SRDownloader.nast
2013-09-22 22:57 - 2012-10-29 19:41 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2013-09-20 21:05 - 2012-10-29 01:43 - 00002095 _____ C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
2013-09-20 06:31 - 2013-09-18 23:35 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\savensHaree
2013-09-19 23:24 - 2012-12-14 01:46 - 08114176 _____ C:\Documents and Settings\Boža\NTUSER.rhk
2013-09-19 23:24 - 2012-12-14 01:46 - 00311296 _____ C:\Documents and Settings\NetworkService\NTUSER.rhk
2013-09-19 23:24 - 2012-12-14 01:46 - 00278528 _____ C:\WINDOWS\system32\config\default.rhk
2013-09-19 23:24 - 2012-12-14 01:46 - 00241664 _____ C:\Documents and Settings\UpdatusUser\NTUSER.rhk
2013-09-19 23:24 - 2012-12-14 01:46 - 00241664 _____ C:\Documents and Settings\LocalService\NTUSER.rhk
2013-09-19 23:24 - 2012-12-14 01:46 - 00028672 _____ C:\WINDOWS\system32\config\SAM.rhk
2013-09-19 23:24 - 2012-12-14 01:45 - 38371328 _____ C:\WINDOWS\system32\config\software.rhk
2013-09-19 23:24 - 2012-10-28 14:51 - 00000000 __SHD C:\Documents and Settings\NetworkService
2013-09-19 23:24 - 2012-10-28 14:51 - 00000000 __SHD C:\Documents and Settings\LocalService
2013-09-19 23:23 - 2012-12-14 01:45 - 00057344 _____ C:\WINDOWS\system32\config\SECURITY.rhk
2013-09-19 23:05 - 2012-10-29 22:22 - 00000000 ____D C:\Documents and Settings\Boža\Dokumenty\Záloha CCleaner
2013-09-19 23:02 - 2013-09-18 23:38 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\eSafe
2013-09-19 22:57 - 2013-09-19 22:57 - 00000088 _____ C:\Documents and Settings\Boža\7098176685019684841.log
2013-09-19 22:52 - 2013-09-19 22:48 - 00000000 ____D C:\Program Files\Omiga Plus
2013-09-19 22:49 - 2013-09-19 22:49 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\337
2013-09-19 22:48 - 2011-02-20 00:03 - 00421032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp100.dll
2013-09-18 23:43 - 2013-09-18 23:36 - 00000000 ____D C:\Program Files\Optimizer Pro
2013-09-18 23:43 - 2013-09-18 23:34 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\InstallMate
2013-09-18 23:39 - 2013-09-18 23:38 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\SkypEmoticons
2013-09-18 23:38 - 2013-09-18 23:38 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\SkypEmoticons
2013-09-18 23:38 - 2013-09-18 23:35 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\SummerSoft
2013-09-18 23:37 - 2012-10-29 02:12 - 00001006 _____ C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
2013-09-18 23:37 - 2012-10-28 14:53 - 00001085 _____ C:\Documents and Settings\Boža\Nabídka Start\Programy\Internet Explorer.lnk
2013-09-18 22:02 - 2013-09-18 22:02 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\TeamViewer 8
2013-09-18 22:02 - 2013-05-07 14:52 - 00000815 _____ C:\Documents and Settings\All Users\Plocha\TeamViewer 8.lnk
2013-09-18 01:06 - 2012-10-30 16:32 - 00000069 _____ C:\WINDOWS\NeroDigital.ini
2013-09-18 00:53 - 2012-10-29 02:12 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-09-18 00:07 - 2013-09-17 21:41 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-09-17 15:07 - 2013-08-25 23:57 - 00002781 _____ C:\Documents and Settings\Boža\Local Settings\Data aplikací\SRDownloader.err
2013-09-17 11:55 - 2012-10-30 01:17 - 00030046 _____ C:\Documents and Settings\Boža\Plocha\DVD.xlsx
2013-09-17 08:08 - 2013-09-17 08:08 - 00114071 _____ C:\Documents and Settings\Boža\Plocha\Boháč mi dluží za práci a vysmívá se. Nebojte se bránit, radí advokát - iDNES.cz.htm
2013-09-17 08:08 - 2013-09-17 08:08 - 00000000 ____D C:\Documents and Settings\Boža\Plocha\Boháč mi dluží za práci a vysmívá se. Nebojte se bránit, radí advokát - iDNES.cz_soubory
2013-09-14 15:25 - 2012-10-28 14:48 - 00002504 _____ C:\WINDOWS\system32\CONFIG.NT
2013-09-12 23:21 - 2012-10-28 15:36 - 00271784 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-09-12 23:15 - 2013-09-12 23:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876315$
2013-09-12 23:15 - 2013-09-12 23:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2013-09-12 23:15 - 2013-09-12 23:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-09-12 23:15 - 2012-10-29 11:26 - 00000000 ____D C:\WINDOWS\ie8updates
2013-09-12 23:14 - 2013-08-15 00:29 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-09-12 22:58 - 2012-10-29 11:11 - 76725432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-09-12 09:30 - 2012-11-11 12:39 - 00002347 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Adobe Reader XI.lnk
2013-09-12 06:06 - 2012-10-29 23:37 - 00000000 ____D C:\WINDOWS\AutoKMS
2013-09-11 11:17 - 2012-11-11 14:38 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2013-09-11 00:27 - 2012-10-29 02:18 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-09-11 00:27 - 2012-10-29 02:18 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2013-09-05 10:22 - 2013-09-05 10:22 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-09-04 00:00 - 2013-05-24 00:33 - 00000000 ____D C:\Documents and Settings\Boža\Plocha\ARCHITEKTONICKO-STAVEBNÍ ČÁST
2013-09-02 23:37 - 2013-09-02 23:37 - 00007168 ___SH C:\WINDOWS\Thumbs.db
Some content of TEMP:
====================
C:\Documents and Settings\Boža\Local Settings\Temp\LiveSupport_setup.exe
C:\Documents and Settings\Boža\Local Settings\Temp\sSetup-se.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 1034240 ____A (Microsoft Corporation) 27afd587c462e280ee046b8cca3c2cd1
C:\Windows\System32\winlogon.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 0507904 ____A (Microsoft Corporation) cddb1f8e1aea356f3ad106f2cf9b7fea
C:\Windows\System32\svchost.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93
C:\Windows\System32\services.exe
[2008-04-14 07:52] - [2009-02-09 13:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7
C:\Windows\System32\User32.dll
[2008-04-14 07:52] - [2008-04-14 07:52] - 0578560 ____A (Microsoft Corporation) e16e0990967374e76f3e40cacafd3d53
C:\Windows\System32\userinit.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239
C:\Windows\System32\Drivers\volsnap.sys
[2008-04-14 06:42] - [2008-04-14 06:42] - 0052480 ____A (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1
==================== Alternate Data Streams (whitelisted) ====
AlternateDataStreams: C:\Documents and Settings\All Users\Data aplikací\TEMP:373E1720
AlternateDataStreams: C:\Documents and Settings\All Users\Data aplikací\TEMP:39413AC3
==================== Loaded Modules (whitelisted) ============
2013-10-01 19:23 - 2013-10-01 15:27 - 02102784 _____ () C:\Program Files\AVAST Software\Avast\defs\13100102\algo.dll
2009-02-27 16:41 - 2009-02-27 16:41 - 00122976 _____ () C:\WINDOWS\system32\BsMobileSDK.dll
2009-02-27 16:44 - 2009-02-27 16:44 - 00622693 _____ () C:\WINDOWS\system32\BsShell.dll
2008-03-07 13:54 - 2008-03-07 13:54 - 17907824 _____ () C:\WINDOWS\system32\BsLangInDepRes.dll
2012-10-29 02:00 - 2005-10-07 16:05 - 00125440 _____ () C:\Program Files\WinRAR\rarext.dll
2012-10-29 02:00 - 2007-10-02 16:41 - 00319488 _____ () C:\Program Files\WinRAR\rarlng.dll
2007-06-16 17:18 - 2007-06-16 17:18 - 00032768 _____ () D:\Audio video\Media Player Utilities\AMVConverter\AmvTransform.dll
2013-10-02 00:11 - 2013-03-29 13:37 - 00059384 _____ () C:\Documents and Settings\Boža\Data aplikací\Seznam.cz\bin\25156libfoxloader.dll
2008-12-26 16:44 - 2008-12-26 16:44 - 00237568 _____ () C:\Program Files\IVT Corporation\BlueSoleil\Mobile\BaseLib.dll
2008-12-26 16:45 - 2008-12-26 16:45 - 00061440 _____ () C:\Program Files\IVT Corporation\BlueSoleil\Mobile\ExtraLib.dll
2003-05-01 17:23 - 2003-05-01 17:23 - 00041472 _____ () C:\Program Files\IVT Corporation\BlueSoleil\Mobile\cscvt.dll
2008-04-14 07:51 - 2008-04-14 07:51 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll
2013-09-17 21:41 - 2013-09-17 21:41 - 03279768 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2013-09-11 00:27 - 2013-09-11 00:27 - 16177544 _____ () C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll
2013-10-02 00:10 - 2013-03-25 16:39 - 00894968 _____ () C:\Documents and Settings\Boža\Data aplikací\Seznam.cz\bin\lightspeed.dll
2013-10-02 00:11 - 2013-04-24 12:31 - 00081992 _____ () C:\Documents and Settings\Boža\Data aplikací\Seznam.cz\bin\libchinst.dll
2013-10-02 00:10 - 2012-10-24 16:42 - 00247352 _____ () C:\Documents and Settings\Boža\Data aplikací\Seznam.cz\bin\unlockInstance.dll
2012-12-05 00:14 - 2012-10-22 12:15 - 01277952 _____ () C:\Program Files\PANDORA.TV\PanService\avformat-53.dll
2012-12-05 00:13 - 2012-07-09 18:57 - 02090496 _____ () C:\Program Files\PANDORA.TV\PanService\avcodec-53.dll
2012-12-05 00:14 - 2011-12-06 17:19 - 00133632 _____ () C:\Program Files\PANDORA.TV\PanService\avutil-51.dll
2012-12-05 00:14 - 2012-03-23 11:07 - 00224768 _____ () C:\Program Files\PANDORA.TV\PanService\libupnp.dll
==================== Scheduled Tasks (whitelisted) ===========
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AmiUpdXp.job => C:\Documents and Settings\Bo~a\Data aplikací\SwvUpdater\Updater.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Supplementary Scan (All) ================
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0
"C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher
C:\Program Files\ASUS\Probe\AsusProb.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe /start [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Probe
"C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS SmartDoctor
C:\Program Files\HiSuite\HiSuite.exe -s [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BluetoothAuthenticationAgent
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BtTray
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameFace Messenger
"C:\Program Files\Software602\Print2PDF\Print2PDF.exe" /server [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Mobile Partner
Reim ECHO je vypnut.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck
Reim ECHO je vypnut.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe
Reim ECHO je vypnut.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Print2PDF Print Monitor
Reim ECHO je vypnut.
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled"=dword:00000001
"AntiVirusDisableNotify"=dword:00000000
"FirewallDisableNotify"=dword:00000000
"UpdatesDisableNotify"=dword:00000000
"AntiVirusOverride"=dword:00000000
"FirewallOverride"=dword:00000000
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x0
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE"="C:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE:*:Enabled:Microsoft SharePoint Workspace"
"C:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE:*:Enabled:Microsoft OneNote"
"C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\\WINDOWS\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe"="C:\\WINDOWS\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe:*:Enabled:Visual Basic Command Line Compiler"
"J:\\Hry programy\\Far Cry\\Bin32\\FarCry.exe"="J:\\Hry programy\\Far Cry\\Bin32\\FarCry.exe:*:Enabled:Far Cry"
"C:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"="C:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe:*:Enabled:Daemonu.exe"
"C:\\Program Files\\Common Files\\soft602\\langserv.exe"="C:\\Program Files\\Common Files\\soft602\\langserv.exe:*:Enabled:Software602 Spell Checker"
"C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"="C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleilCS.exe"="C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleilCS.exe:*:Enabled:BlueSoleilCS"
"C:\\WINDOWS\\system32\\javaw.exe"="C:\\WINDOWS\\system32\\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"C:\\Program Files\\TeamViewer\\Version8\\TeamViewer.exe"="C:\\Program Files\\TeamViewer\\Version8\\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\\Program Files\\TeamViewer\\Version8\\TeamViewer_Service.exe"="C:\\Program Files\\TeamViewer\\Version8\\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\\Program Files\\PANDORA.TV\\PanService\\PanProcess.exe"="C:\\Program Files\\PANDORA.TV\\PanService\\PanProcess.exe:*:Enabled:PanProcess"
"C:\\Program Files\\PANDORA.TV\\PanService\\PandoraService.exe"="C:\\Program Files\\PANDORA.TV\\PanService\\PandoraService.exe:*:Enabled:PandoraService"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP"="1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007"
"2869:TCP"="2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008"
"139:TCP"="139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004"
"445:TCP"="445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005"
"137:UDP"="137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001"
"138:UDP"="138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"="midimap.dll"
"msacm.imaadpcm"="imaadp32.acm"
"msacm.msadpcm"="msadp32.acm"
"msacm.msg711"="msg711.acm"
"msacm.msgsm610"="msgsm32.acm"
"msacm.trspch"="tssoft32.acm"
"vidc.cvid"="iccvid.dll"
"VIDC.I420"="msh263.drv"
"vidc.iv31"="ir32_32.dll"
"vidc.iv32"="ir32_32.dll"
"vidc.iv41"="ir41_32.ax"
"VIDC.IYUV"="iyuv_32.dll"
"vidc.mrle"="msrle32.dll"
"vidc.msvc"="msvidc32.dll"
"VIDC.UYVY"="msyuv.dll"
"VIDC.YUY2"="msyuv.dll"
"VIDC.YVU9"="tsbyuv.dll"
"VIDC.YVYU"="msyuv.dll"
"wavemapper"="msacm32.drv"
"msacm.msg723"="msg723.acm"
"vidc.M263"="msh263.drv"
"vidc.M261"="msh261.drv"
"msacm.msaudio1"="msaud32.acm"
"msacm.sl_anet"="sl_anet.acm"
"msacm.iac2"="C:\\WINDOWS\\system32\\iac25_32.ax"
"vidc.iv50"="ir50_32.dll"
"msacm.l3acm"="C:\\WINDOWS\\system32\\l3codeca.acm"
"vidc.asv2"="asusasv2.dll"
"MSVideo8"="VfWWDM32.dll"
"msacm.l3fhg"="mp3fhg.acm"
"VIDC.XVID"="xvidvfw.dll"
"VIDC.YV12"="yv12vfw.dll"
"msacm.ac3acm"="ac3acm.acm"
"VIDC.FFDS"="ff_vfw.dll"
"wave"="wdmaud.drv"
"midi"="wdmaud.drv"
"mixer"="wdmaud.drv"
"vidc.DIVX"="DivX.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\Terminal Server]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\Terminal Server\RDP]
"wave"="rdpsnd.dll"
"mixer"="rdpsnd.dll"
"MaxBandwidth"=dword:000056b9
"wavemapper"="msacm32.drv"
"EnableMP3Codec"=dword:00000001
"midimapper"="midimap.dll"
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:34.18 GB) (Free:3.25 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive d: (Programy) (Fixed) (Total:34.18 GB) (Free:25.54 GB) NTFS
Drive e: (Data) (Fixed) (Total:43.42 GB) (Free:13.33 GB) NTFS
Drive i: (AUDIO VIDEO) (Fixed) (Total:151.37 GB) (Free:6.05 GB) NTFS
Drive j: () (Fixed) (Total:151.37 GB) (Free:16.09 GB) NTFS
Drive k: () (Fixed) (Total:163.02 GB) (Free:65.28 GB) NTFS
Available physical RAM: 223.65 MB
Total physical RAM: 1023.23 MB
Percentage of memory in use: 78%
==================== MBR and Partition Table =================
Disk: 0 (Size: 112 GB) (Disk ID: AEFEAEFE)
Partition 1: (Active) - (Size=34 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=78 GB) - (Type=OF Extended)
Disk: 1 (MBR Code: Windows XP) (Size: 466 GB) (Disk ID: 83227AE2)
Partition 1: (Not Active) - (Size=151 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=151 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=163 GB) - (Type=07 NTFS)
==================== End Of Log ==============================
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-09-2013 01
Ran by Boža (administrator) on BOŽA on 02-10-2013 00:42:52
Running from C:\Documents and Settings\Boža\Plocha
Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Software602 a.s.) C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
(ASUSTeK COMPUTER INC.) C:\WINDOWS\ATKKBService.exe
() C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
() C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
(The Firebird Project) C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
() C:\Documents and Settings\All Users\Data aplikací\HiSuiteOuc\HiSuiteOuc.exe
() C:\Documents and Settings\All Users\Data aplikací\HandSetService\HuaweiHiSuiteService.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Pandora.TV) C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
() C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
(The Firebird Project) C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\tv_w32.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastUI.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\SOUNDMAN.EXE
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(SkypEmoticons) C:\Documents and Settings\Boža\Data aplikací\SkypEmoticons\SE.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\WZQKPICK.EXE
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(LemurLeap) C:\Program Files\LemurLeap\updateLemurLeap.exe
() C:\Documents and Settings\Boža\Data aplikací\Seznam.cz\bin\szndesktop.exe
(Microsoft Corporation) C:\WINDOWS\system32\taskmgr.exe
(PandoraTV) C:\Program Files\PANDORA.TV\PanService\PanProcess.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM\...\Run: [SoundMan] - C:\Windows\SOUNDMAN.EXE [577536 2007-04-16] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [seznam-listicka-distribuce] - C:\Program Files\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKCU\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2007-06-27] (Nero AG)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [AlcoholAutomount] - D:\Audio video\Alcohol 120\AxAutoMntSrv.exe [33120 2010-08-20] (Alcohol Soft Development Team)
HKCU\...\Run: [] - [x]
HKCU\...\Run: [se] - C:\Documents and Settings\Boža\Data aplikací\SkypEmoticons\SE.exe [5842336 2013-09-18] (SkypEmoticons)
HKCU\...\Run: [cz.seznam.software.autoupdate] - C:\Documents and Settings\Boža\Data aplikací\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKCU\...\Run: [cz.seznam.software.szndesktop] - C:\Documents and Settings\Boža\Data aplikací\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\Default User\...\RunOnce: [nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\Default User\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\Default User\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe [ 2007-06-27] (Nero AG)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\WinZip Quick Pick.lnk
ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files\WinZip\WZQKPICK.EXE (WinZip Computing, S.L.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com/?utm_source=b&utm_m ... 1379540236
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
BHO: LemurLeap - {415419c3-dad0-4df1-ac37-22c72ad81878} - C:\Program Files\LemurLeap\LemurLeapbho.dll (LemurLeap)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU -&Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU -&Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 10.0.0.1
FireFox:
========
FF ProfilePath: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default
FF user.js: detected! => C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\user.js
FF NewTab: hxxp://home.brandthunder.com/nasathemes/?newtab
FF DefaultSearchEngine: Centrum.cz - Hledání v internetu
FF SearchEngineOrder.1: qvo6
FF Homepage: hxxp://www.centrum.cz/
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3228856&SearchSource=2&q=
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin: @software602.cz/602XML Filler - C:\Program Files\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - D:\Přehravače\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: No Name - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\btpersonas@brandthunder.com
FF Extension: Centrum doménový pomocník - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\centrumpomocnik@centrum.cz
FF Extension: No Name - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\nostmp
FF Extension: Cooliris - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\piclens@cooliris.com
FF Extension: Firefox Synchronisation Extension - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\synchronize@nokia.suite
FF Extension: savensHaree - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\xzvei7a@eeoeuu-aooa.org
FF Extension: WebTran - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\{003D3EDC-99B9-4a34-9C20-60CB94F7E829}
FF Extension: FreemakeVideoConverterTB Community Toolbar - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\{81fae9c9-cfbd-4cb3-8322-412e72f55f65}
FF Extension: Seznam lištička - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF Extension: Centrum.cz nastavení - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: FoxLingo - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}
FF Extension: DivXWebPlayer - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\DivXWebPlayer@divx.com.xpi
FF Extension: No Name - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\{166745b8-8d4a-4c86-9120-696de51a77aa}.xpi
FF Extension: No Name - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\{a95d8332-e4b4-6e7f-98ac-20b733364387}.xpi
FF Extension: No Name - C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.qvo6.com/?utm_source=b&utm_m ... 1379540236
Chrome:
=======
CHR HomePage: hxxp://www.seznam.cz/?clid=16194
CHR RestoreOnStartup: "hxxp://www.qvo6.com/?utm_source=b&utm_medium=w ... 1379540236"]},"sync":{"keep_everything_synced":false,"preferences":false,"search_engines":false,"suppress_start":true},"webkit":{"webprefs":{"allow_running_insecure_content"
CHR Extension: (Seznam Li\u0161ti\u010Dka - Slovn\u00EDk) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd\1.2.13_0
CHR Extension: (YouTube) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (LemurLeap) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\jlnfdbbladgcmhhamgkioifhbobjaoof\1.0.0_0
CHR Extension: (savensHaree ) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\kmilnpoiaahbllakcdnaakfbbnnaakin\5.10
CHR Extension: (Chrome In-App Payments service) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Seznam Li\u0161ti\u010Dka - Rychl\u00E1 volba) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak\1.5.14_0
CHR Extension: (Gmail) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [jlnfdbbladgcmhhamgkioifhbobjaoof] - C:\Program Files\LemurLeap\jlnfdbbladgcmhhamgkioifhbobjaoof.crx
========================== Services (Whitelisted) =================
R2 602XML Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 ATKKeyboardService; C:\WINDOWS\ATKKBService.exe [253952 2005-08-07] (ASUSTeK COMPUTER INC.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 BlueSoleilCS; C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe [850432 2009-02-27] ()
R3 BsHelpCS; C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe [98407 2009-02-27] ()
R2 BsMobileCS; C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe [143467 2009-02-27] ()
R2 FirebirdGuardianDefaultInstance; C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe [65536 2007-12-12] (The Firebird Project)
R3 FirebirdServerDefaultInstance; C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe [1531989 2007-12-12] (The Firebird Project)
R2 HiSuiteOuc.exe; C:\Documents and Settings\All Users\Data aplikací\HiSuiteOuc\HiSuiteOuc.exe [116032 2013-07-11] ()
R2 HuaweiHiSuiteService.exe; C:\Documents and Settings\All Users\Data aplikací\HandSetService\HuaweiHiSuiteService.exe [158208 2013-05-02] ()
S3 Installer Service; C:\Documents and Settings\All Users\Data aplikací\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{7C41450A-4442-43F4-8DCA-BE04CC70A5EE}\Installer\InstallerService.exe [119296 2013-05-31] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 NBService; D:\Audio video\Nero 7\Nero BackItUp\NBService.exe [800040 2007-06-29] (Nero AG)
R2 nvUpdatusService; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2253120 2011-10-08] (NVIDIA Corporation)
R2 PanService; C:\Program Files\PANDORA.TV\PanService\PandoraService.exe [625304 2012-09-28] (Pandora.TV)
S2 StarWindServiceAE; D:\Audio video\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software)
R2 Update LemurLeap; C:\Program Files\LemurLeap\updateLemurLeap.exe [206624 2013-09-26] (LemurLeap)
R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf"
==================== Drivers (Whitelisted) ====================
S3 ALCXSENS; C:\Windows\System32\drivers\ALCXSENS.SYS [400384 2004-02-24] (Sensaura)
R3 ALCXWDM; C:\Windows\System32\drivers\ALCXWDM.SYS [4122368 2008-09-24] (Realtek Semiconductor Corp.)
R1 aslm75; C:\WINDOWS\system32\drivers\aslm75.sys [6272 1997-04-22] ()
S1 asusgsb; C:\Windows\System32\drivers\asusgsb.sys [12416 2005-07-08] (ASUSTeK Computer Inc.)
R1 asuskbnt; C:\Windows\System32\drivers\atkkbnt.sys [23040 2005-06-09] (ASUSTeK COMPUTER INC.)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [66336 2013-08-30] (AVAST Software)
R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [49760 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [177864 2013-08-30] ()
S3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [33800 2008-11-25] (IVT Corporation.)
S3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [27528 2008-11-25] (IVT Corporation.)
S3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [14088 2008-12-07] (IVT Corporation.)
R3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [39304 2009-01-03] (IVT Corporation.)
R0 BtHidBus; C:\Windows\System32\Drivers\BtHidBus.sys [20744 2009-01-07] (IVT Corporation.)
S0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [20880 2007-03-05] (IVT Corporation.)
S0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [35600 2007-03-05] (IVT Corporation.)
R3 btnetBUs; C:\Windows\System32\Drivers\btnetBus.sys [30088 2008-12-07] ()
S3 BTNetFilter; C:\Program Files\IVT Corporation\BlueSoleil\Device\Win2k\BTNetFilter.sys [22416 2006-11-22] (IVT Corporation.)
S3 cpudrv; C:\Program Files\SystemRequirementsLab\cpudrv.sys [11336 2011-06-02] ()
R2 EIO; C:\WINDOWS\system32\drivers\EIO.sys [11264 2005-08-01] (ASUSTeK Computer Inc.)
R3 IvtBtBUs; C:\Windows\System32\Drivers\IvtBtBus.sys [26248 2008-07-02] (IVT Corporation.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [466008 2012-12-15] (Duplex Secure Ltd.)
S3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [14856 2008-01-21] (IVT Corporation.)
R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [31880 2009-01-08] (IVT Corporation.)
S3 Video3D; C:\Windows\System32\Drivers\Video3D.sys [44544 2004-07-06] (ASUSTeK COMPUTER INC.)
R3 yukonwxp; C:\Windows\System32\DRIVERS\yk51x86.sys [299424 2012-01-25] (Marvell)
U3 ag3zdvyq; C:\Windows\System32\Drivers\ag3zdvyq.sys [0 ] (Microsoft Corporation)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [102272 2011-10-24] (Huawei Technologies Co., Ltd.)
U1 WS2IFSL;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-02 00:42 - 2013-10-02 00:42 - 00000000 ____D C:\FRST
2013-10-02 00:41 - 2013-10-02 00:41 - 00000000 ____D C:\Documents and Settings\Boža\Local Settings\Data aplikací\qb38396E.40
2013-10-02 00:41 - 2013-09-27 20:27 - 01086873 _____ (Farbar) C:\Documents and Settings\Boža\Plocha\FRST.exe
2013-10-02 00:11 - 2013-10-02 00:11 - 00000000 ____D C:\Program Files\Seznam.cz
2013-10-02 00:09 - 2013-10-02 00:12 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\Seznam.cz
2013-10-02 00:09 - 2013-10-02 00:10 - 00000000 ____D C:\Program Files\LemurLeap
2013-10-02 00:08 - 2013-10-02 00:08 - 00000386 _____ C:\WINDOWS\Tasks\AmiUpdXp.job
2013-10-02 00:08 - 2013-10-02 00:08 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\SwvUpdater
2013-10-01 23:52 - 2013-10-02 00:38 - 00029696 _____ C:\Documents and Settings\Boža\Local Settings\Data aplikací\MSGBOX.EXE
2013-10-01 11:27 - 2013-10-01 11:27 - 00000784 _____ C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
2013-10-01 11:27 - 2013-10-01 11:27 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-10-01 11:27 - 2013-10-01 11:27 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware
2013-10-01 11:27 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-10-01 11:20 - 2013-10-01 11:20 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\Malwarebytes
2013-10-01 11:20 - 2013-10-01 11:20 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2013-09-19 22:57 - 2013-09-19 22:57 - 00000088 _____ C:\Documents and Settings\Boža\7098176685019684841.log
2013-09-19 22:49 - 2013-09-19 22:49 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\337
2013-09-19 22:48 - 2013-10-01 22:13 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\Omiga Plus
2013-09-19 22:48 - 2013-09-19 22:52 - 00000000 ____D C:\Program Files\Omiga Plus
2013-09-18 23:38 - 2013-10-01 22:13 - 00000000 ____D C:\Program Files\Common Files\337
2013-09-18 23:38 - 2013-09-19 23:02 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\eSafe
2013-09-18 23:38 - 2013-09-18 23:39 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\SkypEmoticons
2013-09-18 23:38 - 2013-09-18 23:38 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\SkypEmoticons
2013-09-18 23:36 - 2013-09-18 23:43 - 00000000 ____D C:\Program Files\Optimizer Pro
2013-09-18 23:35 - 2013-09-20 06:31 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\savensHaree
2013-09-18 23:35 - 2013-09-18 23:38 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\SummerSoft
2013-09-18 23:34 - 2013-09-18 23:43 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\InstallMate
2013-09-18 22:02 - 2013-09-18 22:02 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\TeamViewer 8
2013-09-17 21:41 - 2013-09-18 00:07 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-09-17 08:08 - 2013-09-17 08:08 - 00114071 _____ C:\Documents and Settings\Boža\Plocha\Boháč mi dluží za práci a vysmívá se. Nebojte se bránit, radí advokát - iDNES.cz.htm
2013-09-17 08:08 - 2013-09-17 08:08 - 00000000 ____D C:\Documents and Settings\Boža\Plocha\Boháč mi dluží za práci a vysmívá se. Nebojte se bránit, radí advokát - iDNES.cz_soubory
2013-09-12 23:15 - 2013-09-12 23:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876315$
2013-09-12 23:15 - 2013-09-12 23:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2013-09-12 23:15 - 2013-09-12 23:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-09-05 10:22 - 2013-09-05 10:22 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-09-02 23:37 - 2013-09-02 23:37 - 00007168 ___SH C:\WINDOWS\Thumbs.db
==================== One Month Modified Files and Folders =======
2013-10-02 00:44 - 2012-10-28 14:53 - 00000000 ____D C:\Documents and Settings\Boža\Plocha
2013-10-02 00:43 - 2012-10-29 09:43 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\Skype
2013-10-02 00:42 - 2013-10-02 00:42 - 00000000 ____D C:\FRST
2013-10-02 00:41 - 2013-10-02 00:41 - 00000000 ____D C:\Documents and Settings\Boža\Local Settings\Data aplikací\qb38396E.40
2013-10-02 00:41 - 2012-10-28 14:53 - 00000000 ___HD C:\Documents and Settings\Boža\Local Settings\Data aplikací
2013-10-02 00:38 - 2013-10-01 23:52 - 00029696 _____ C:\Documents and Settings\Boža\Local Settings\Data aplikací\MSGBOX.EXE
2013-10-02 00:26 - 2012-10-29 02:18 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-10-02 00:12 - 2013-10-02 00:09 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\Seznam.cz
2013-10-02 00:11 - 2013-10-02 00:11 - 00000000 ____D C:\Program Files\Seznam.cz
2013-10-02 00:10 - 2013-10-02 00:09 - 00000000 ____D C:\Program Files\LemurLeap
2013-10-02 00:09 - 2012-10-28 14:53 - 00000000 __RHD C:\Documents and Settings\Boža\Data aplikací
2013-10-02 00:08 - 2013-10-02 00:08 - 00000386 _____ C:\WINDOWS\Tasks\AmiUpdXp.job
2013-10-02 00:08 - 2013-10-02 00:08 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\SwvUpdater
2013-10-01 23:56 - 2012-10-29 01:42 - 00000936 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-01 23:48 - 2012-10-29 01:42 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-10-01 23:41 - 2012-10-28 15:42 - 00000157 _____ C:\WINDOWS\wiadebug.log
2013-10-01 23:41 - 2012-10-28 15:42 - 00000049 _____ C:\WINDOWS\wiaservc.log
2013-10-01 23:41 - 2009-02-27 17:04 - 00001280 _____ C:\WINDOWS\system32\bscs.ini
2013-10-01 23:40 - 2012-10-29 11:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB974392$
2013-10-01 23:40 - 2012-10-29 01:42 - 00000932 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-01 23:40 - 2012-10-28 14:52 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-10-01 23:39 - 2012-10-29 19:47 - 00131072 _____ C:\WINDOWS\system32\config\OAlerts.evt
2013-10-01 23:39 - 2012-10-28 14:53 - 00000178 ___SH C:\Documents and Settings\Boža\ntuser.ini
2013-10-01 23:39 - 2012-10-28 14:53 - 00000000 ____D C:\Documents and Settings\Boža
2013-10-01 23:39 - 2012-10-28 14:52 - 00032454 _____ C:\WINDOWS\SchedLgU.Txt
2013-10-01 23:39 - 2012-10-28 14:47 - 01978872 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-01 22:13 - 2013-09-19 22:48 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\Omiga Plus
2013-10-01 22:13 - 2013-09-18 23:38 - 00000000 ____D C:\Program Files\Common Files\337
2013-10-01 19:28 - 2012-10-29 23:42 - 00000000 ____D C:\Documents and Settings\Boža\Dokumenty\Soubory aplikace Outlook
2013-10-01 14:46 - 2012-10-29 23:41 - 00002547 _____ C:\Documents and Settings\Boža\Plocha\Microsoft Word 2010 (2).lnk
2013-10-01 11:27 - 2013-10-01 11:27 - 00000784 _____ C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
2013-10-01 11:27 - 2013-10-01 11:27 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-10-01 11:27 - 2013-10-01 11:27 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware
2013-10-01 11:27 - 2012-10-28 15:39 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2013-10-01 11:27 - 2012-10-28 15:39 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy
2013-10-01 11:20 - 2013-10-01 11:20 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\Malwarebytes
2013-10-01 11:20 - 2013-10-01 11:20 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2013-10-01 11:20 - 2012-10-28 15:37 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2013-09-30 16:41 - 2012-10-31 00:29 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\.minecraft
2013-09-29 20:13 - 2002-12-05 13:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-09-27 20:27 - 2013-10-02 00:41 - 01086873 _____ (Farbar) C:\Documents and Settings\Boža\Plocha\FRST.exe
2013-09-27 02:31 - 2012-12-13 01:02 - 00001088 _____ C:\Documents and Settings\Boža\Local Settings\Data aplikací\SRDownloader.nast
2013-09-22 22:57 - 2012-10-29 19:41 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2013-09-20 21:05 - 2012-10-29 01:43 - 00002095 _____ C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
2013-09-20 06:31 - 2013-09-18 23:35 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\savensHaree
2013-09-19 23:24 - 2012-12-14 01:46 - 08114176 _____ C:\Documents and Settings\Boža\NTUSER.rhk
2013-09-19 23:24 - 2012-12-14 01:46 - 00311296 _____ C:\Documents and Settings\NetworkService\NTUSER.rhk
2013-09-19 23:24 - 2012-12-14 01:46 - 00278528 _____ C:\WINDOWS\system32\config\default.rhk
2013-09-19 23:24 - 2012-12-14 01:46 - 00241664 _____ C:\Documents and Settings\UpdatusUser\NTUSER.rhk
2013-09-19 23:24 - 2012-12-14 01:46 - 00241664 _____ C:\Documents and Settings\LocalService\NTUSER.rhk
2013-09-19 23:24 - 2012-12-14 01:46 - 00028672 _____ C:\WINDOWS\system32\config\SAM.rhk
2013-09-19 23:24 - 2012-12-14 01:45 - 38371328 _____ C:\WINDOWS\system32\config\software.rhk
2013-09-19 23:24 - 2012-10-28 14:51 - 00000000 __SHD C:\Documents and Settings\NetworkService
2013-09-19 23:24 - 2012-10-28 14:51 - 00000000 __SHD C:\Documents and Settings\LocalService
2013-09-19 23:23 - 2012-12-14 01:45 - 00057344 _____ C:\WINDOWS\system32\config\SECURITY.rhk
2013-09-19 23:05 - 2012-10-29 22:22 - 00000000 ____D C:\Documents and Settings\Boža\Dokumenty\Záloha CCleaner
2013-09-19 23:02 - 2013-09-18 23:38 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\eSafe
2013-09-19 22:57 - 2013-09-19 22:57 - 00000088 _____ C:\Documents and Settings\Boža\7098176685019684841.log
2013-09-19 22:52 - 2013-09-19 22:48 - 00000000 ____D C:\Program Files\Omiga Plus
2013-09-19 22:49 - 2013-09-19 22:49 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\337
2013-09-19 22:48 - 2011-02-20 00:03 - 00421032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp100.dll
2013-09-18 23:43 - 2013-09-18 23:36 - 00000000 ____D C:\Program Files\Optimizer Pro
2013-09-18 23:43 - 2013-09-18 23:34 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\InstallMate
2013-09-18 23:39 - 2013-09-18 23:38 - 00000000 ____D C:\Documents and Settings\Boža\Data aplikací\SkypEmoticons
2013-09-18 23:38 - 2013-09-18 23:38 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\SkypEmoticons
2013-09-18 23:38 - 2013-09-18 23:35 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\SummerSoft
2013-09-18 23:37 - 2012-10-29 02:12 - 00001006 _____ C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
2013-09-18 23:37 - 2012-10-28 14:53 - 00001085 _____ C:\Documents and Settings\Boža\Nabídka Start\Programy\Internet Explorer.lnk
2013-09-18 22:02 - 2013-09-18 22:02 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\TeamViewer 8
2013-09-18 22:02 - 2013-05-07 14:52 - 00000815 _____ C:\Documents and Settings\All Users\Plocha\TeamViewer 8.lnk
2013-09-18 01:06 - 2012-10-30 16:32 - 00000069 _____ C:\WINDOWS\NeroDigital.ini
2013-09-18 00:53 - 2012-10-29 02:12 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-09-18 00:07 - 2013-09-17 21:41 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-09-17 15:07 - 2013-08-25 23:57 - 00002781 _____ C:\Documents and Settings\Boža\Local Settings\Data aplikací\SRDownloader.err
2013-09-17 11:55 - 2012-10-30 01:17 - 00030046 _____ C:\Documents and Settings\Boža\Plocha\DVD.xlsx
2013-09-17 08:08 - 2013-09-17 08:08 - 00114071 _____ C:\Documents and Settings\Boža\Plocha\Boháč mi dluží za práci a vysmívá se. Nebojte se bránit, radí advokát - iDNES.cz.htm
2013-09-17 08:08 - 2013-09-17 08:08 - 00000000 ____D C:\Documents and Settings\Boža\Plocha\Boháč mi dluží za práci a vysmívá se. Nebojte se bránit, radí advokát - iDNES.cz_soubory
2013-09-14 15:25 - 2012-10-28 14:48 - 00002504 _____ C:\WINDOWS\system32\CONFIG.NT
2013-09-12 23:21 - 2012-10-28 15:36 - 00271784 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-09-12 23:15 - 2013-09-12 23:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876315$
2013-09-12 23:15 - 2013-09-12 23:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2013-09-12 23:15 - 2013-09-12 23:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-09-12 23:15 - 2012-10-29 11:26 - 00000000 ____D C:\WINDOWS\ie8updates
2013-09-12 23:14 - 2013-08-15 00:29 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-09-12 22:58 - 2012-10-29 11:11 - 76725432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-09-12 09:30 - 2012-11-11 12:39 - 00002347 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Adobe Reader XI.lnk
2013-09-12 06:06 - 2012-10-29 23:37 - 00000000 ____D C:\WINDOWS\AutoKMS
2013-09-11 11:17 - 2012-11-11 14:38 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2013-09-11 00:27 - 2012-10-29 02:18 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-09-11 00:27 - 2012-10-29 02:18 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2013-09-05 10:22 - 2013-09-05 10:22 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-09-04 00:00 - 2013-05-24 00:33 - 00000000 ____D C:\Documents and Settings\Boža\Plocha\ARCHITEKTONICKO-STAVEBNÍ ČÁST
2013-09-02 23:37 - 2013-09-02 23:37 - 00007168 ___SH C:\WINDOWS\Thumbs.db
Some content of TEMP:
====================
C:\Documents and Settings\Boža\Local Settings\Temp\LiveSupport_setup.exe
C:\Documents and Settings\Boža\Local Settings\Temp\sSetup-se.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 1034240 ____A (Microsoft Corporation) 27afd587c462e280ee046b8cca3c2cd1
C:\Windows\System32\winlogon.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 0507904 ____A (Microsoft Corporation) cddb1f8e1aea356f3ad106f2cf9b7fea
C:\Windows\System32\svchost.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93
C:\Windows\System32\services.exe
[2008-04-14 07:52] - [2009-02-09 13:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7
C:\Windows\System32\User32.dll
[2008-04-14 07:52] - [2008-04-14 07:52] - 0578560 ____A (Microsoft Corporation) e16e0990967374e76f3e40cacafd3d53
C:\Windows\System32\userinit.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239
C:\Windows\System32\Drivers\volsnap.sys
[2008-04-14 06:42] - [2008-04-14 06:42] - 0052480 ____A (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1
==================== Alternate Data Streams (whitelisted) ====
AlternateDataStreams: C:\Documents and Settings\All Users\Data aplikací\TEMP:373E1720
AlternateDataStreams: C:\Documents and Settings\All Users\Data aplikací\TEMP:39413AC3
==================== Loaded Modules (whitelisted) ============
2013-10-01 19:23 - 2013-10-01 15:27 - 02102784 _____ () C:\Program Files\AVAST Software\Avast\defs\13100102\algo.dll
2009-02-27 16:41 - 2009-02-27 16:41 - 00122976 _____ () C:\WINDOWS\system32\BsMobileSDK.dll
2009-02-27 16:44 - 2009-02-27 16:44 - 00622693 _____ () C:\WINDOWS\system32\BsShell.dll
2008-03-07 13:54 - 2008-03-07 13:54 - 17907824 _____ () C:\WINDOWS\system32\BsLangInDepRes.dll
2012-10-29 02:00 - 2005-10-07 16:05 - 00125440 _____ () C:\Program Files\WinRAR\rarext.dll
2012-10-29 02:00 - 2007-10-02 16:41 - 00319488 _____ () C:\Program Files\WinRAR\rarlng.dll
2007-06-16 17:18 - 2007-06-16 17:18 - 00032768 _____ () D:\Audio video\Media Player Utilities\AMVConverter\AmvTransform.dll
2013-10-02 00:11 - 2013-03-29 13:37 - 00059384 _____ () C:\Documents and Settings\Boža\Data aplikací\Seznam.cz\bin\25156libfoxloader.dll
2008-12-26 16:44 - 2008-12-26 16:44 - 00237568 _____ () C:\Program Files\IVT Corporation\BlueSoleil\Mobile\BaseLib.dll
2008-12-26 16:45 - 2008-12-26 16:45 - 00061440 _____ () C:\Program Files\IVT Corporation\BlueSoleil\Mobile\ExtraLib.dll
2003-05-01 17:23 - 2003-05-01 17:23 - 00041472 _____ () C:\Program Files\IVT Corporation\BlueSoleil\Mobile\cscvt.dll
2008-04-14 07:51 - 2008-04-14 07:51 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll
2013-09-17 21:41 - 2013-09-17 21:41 - 03279768 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2013-09-11 00:27 - 2013-09-11 00:27 - 16177544 _____ () C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll
2013-10-02 00:10 - 2013-03-25 16:39 - 00894968 _____ () C:\Documents and Settings\Boža\Data aplikací\Seznam.cz\bin\lightspeed.dll
2013-10-02 00:11 - 2013-04-24 12:31 - 00081992 _____ () C:\Documents and Settings\Boža\Data aplikací\Seznam.cz\bin\libchinst.dll
2013-10-02 00:10 - 2012-10-24 16:42 - 00247352 _____ () C:\Documents and Settings\Boža\Data aplikací\Seznam.cz\bin\unlockInstance.dll
2012-12-05 00:14 - 2012-10-22 12:15 - 01277952 _____ () C:\Program Files\PANDORA.TV\PanService\avformat-53.dll
2012-12-05 00:13 - 2012-07-09 18:57 - 02090496 _____ () C:\Program Files\PANDORA.TV\PanService\avcodec-53.dll
2012-12-05 00:14 - 2011-12-06 17:19 - 00133632 _____ () C:\Program Files\PANDORA.TV\PanService\avutil-51.dll
2012-12-05 00:14 - 2012-03-23 11:07 - 00224768 _____ () C:\Program Files\PANDORA.TV\PanService\libupnp.dll
==================== Scheduled Tasks (whitelisted) ===========
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AmiUpdXp.job => C:\Documents and Settings\Bo~a\Data aplikací\SwvUpdater\Updater.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Supplementary Scan (All) ================
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0
"C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher
C:\Program Files\ASUS\Probe\AsusProb.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe /start [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Probe
"C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS SmartDoctor
C:\Program Files\HiSuite\HiSuite.exe -s [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BluetoothAuthenticationAgent
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BtTray
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameFace Messenger
"C:\Program Files\Software602\Print2PDF\Print2PDF.exe" /server [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Mobile Partner
Reim ECHO je vypnut.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck
Reim ECHO je vypnut.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe
Reim ECHO je vypnut.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Print2PDF Print Monitor
Reim ECHO je vypnut.
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled"=dword:00000001
"AntiVirusDisableNotify"=dword:00000000
"FirewallDisableNotify"=dword:00000000
"UpdatesDisableNotify"=dword:00000000
"AntiVirusOverride"=dword:00000000
"FirewallOverride"=dword:00000000
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x0
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE"="C:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE:*:Enabled:Microsoft SharePoint Workspace"
"C:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE:*:Enabled:Microsoft OneNote"
"C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\\WINDOWS\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe"="C:\\WINDOWS\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe:*:Enabled:Visual Basic Command Line Compiler"
"J:\\Hry programy\\Far Cry\\Bin32\\FarCry.exe"="J:\\Hry programy\\Far Cry\\Bin32\\FarCry.exe:*:Enabled:Far Cry"
"C:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"="C:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe:*:Enabled:Daemonu.exe"
"C:\\Program Files\\Common Files\\soft602\\langserv.exe"="C:\\Program Files\\Common Files\\soft602\\langserv.exe:*:Enabled:Software602 Spell Checker"
"C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"="C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleilCS.exe"="C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleilCS.exe:*:Enabled:BlueSoleilCS"
"C:\\WINDOWS\\system32\\javaw.exe"="C:\\WINDOWS\\system32\\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"C:\\Program Files\\TeamViewer\\Version8\\TeamViewer.exe"="C:\\Program Files\\TeamViewer\\Version8\\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\\Program Files\\TeamViewer\\Version8\\TeamViewer_Service.exe"="C:\\Program Files\\TeamViewer\\Version8\\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\\Program Files\\PANDORA.TV\\PanService\\PanProcess.exe"="C:\\Program Files\\PANDORA.TV\\PanService\\PanProcess.exe:*:Enabled:PanProcess"
"C:\\Program Files\\PANDORA.TV\\PanService\\PandoraService.exe"="C:\\Program Files\\PANDORA.TV\\PanService\\PandoraService.exe:*:Enabled:PandoraService"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP"="1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007"
"2869:TCP"="2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008"
"139:TCP"="139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004"
"445:TCP"="445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005"
"137:UDP"="137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001"
"138:UDP"="138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"="midimap.dll"
"msacm.imaadpcm"="imaadp32.acm"
"msacm.msadpcm"="msadp32.acm"
"msacm.msg711"="msg711.acm"
"msacm.msgsm610"="msgsm32.acm"
"msacm.trspch"="tssoft32.acm"
"vidc.cvid"="iccvid.dll"
"VIDC.I420"="msh263.drv"
"vidc.iv31"="ir32_32.dll"
"vidc.iv32"="ir32_32.dll"
"vidc.iv41"="ir41_32.ax"
"VIDC.IYUV"="iyuv_32.dll"
"vidc.mrle"="msrle32.dll"
"vidc.msvc"="msvidc32.dll"
"VIDC.UYVY"="msyuv.dll"
"VIDC.YUY2"="msyuv.dll"
"VIDC.YVU9"="tsbyuv.dll"
"VIDC.YVYU"="msyuv.dll"
"wavemapper"="msacm32.drv"
"msacm.msg723"="msg723.acm"
"vidc.M263"="msh263.drv"
"vidc.M261"="msh261.drv"
"msacm.msaudio1"="msaud32.acm"
"msacm.sl_anet"="sl_anet.acm"
"msacm.iac2"="C:\\WINDOWS\\system32\\iac25_32.ax"
"vidc.iv50"="ir50_32.dll"
"msacm.l3acm"="C:\\WINDOWS\\system32\\l3codeca.acm"
"vidc.asv2"="asusasv2.dll"
"MSVideo8"="VfWWDM32.dll"
"msacm.l3fhg"="mp3fhg.acm"
"VIDC.XVID"="xvidvfw.dll"
"VIDC.YV12"="yv12vfw.dll"
"msacm.ac3acm"="ac3acm.acm"
"VIDC.FFDS"="ff_vfw.dll"
"wave"="wdmaud.drv"
"midi"="wdmaud.drv"
"mixer"="wdmaud.drv"
"vidc.DIVX"="DivX.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\Terminal Server]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\Terminal Server\RDP]
"wave"="rdpsnd.dll"
"mixer"="rdpsnd.dll"
"MaxBandwidth"=dword:000056b9
"wavemapper"="msacm32.drv"
"EnableMP3Codec"=dword:00000001
"midimapper"="midimap.dll"
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:34.18 GB) (Free:3.25 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive d: (Programy) (Fixed) (Total:34.18 GB) (Free:25.54 GB) NTFS
Drive e: (Data) (Fixed) (Total:43.42 GB) (Free:13.33 GB) NTFS
Drive i: (AUDIO VIDEO) (Fixed) (Total:151.37 GB) (Free:6.05 GB) NTFS
Drive j: () (Fixed) (Total:151.37 GB) (Free:16.09 GB) NTFS
Drive k: () (Fixed) (Total:163.02 GB) (Free:65.28 GB) NTFS
Available physical RAM: 223.65 MB
Total physical RAM: 1023.23 MB
Percentage of memory in use: 78%
==================== MBR and Partition Table =================
Disk: 0 (Size: 112 GB) (Disk ID: AEFEAEFE)
Partition 1: (Active) - (Size=34 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=78 GB) - (Type=OF Extended)
Disk: 1 (MBR Code: Windows XP) (Size: 466 GB) (Disk ID: 83227AE2)
Partition 1: (Not Active) - (Size=151 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=151 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=163 GB) - (Type=07 NTFS)
==================== End Of Log ==============================
-
Rudy
- Site Admin
- Příspěvky: 119322
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu - Malwarebytes Anti-Malware
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
HKCU\...\Run: [] - [x]
HKCU\...\Run: [] - [x]
HKU\Default User\...\RunOnce: [nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\Default User\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com/?utm_source=b&utm_m ... 1379540236
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... default&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... default&q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... default&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... default&q={searchTerms}
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
FF ProfilePath: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default
FF NewTab: hxxp://home.brandthunder.com/nasathemes/?newtab
FF SearchEngineOrder.1: qvo6
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.as ... ource=2&q=
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.qvo6.com/?utm_source=b&utm_m ... 1379540236
CHR RestoreOnStartup: "hxxp://www.qvo6.com/?utm_source=b&utm_medium=w ... 1379540236"]},"sync":{"keep_everything_synced":false,"preferences":false,"search_engines":false,"suppress_start":true},"webkit":{"webprefs":{"allow_running_insecure_content"
CHR Extension: (savensHaree ) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\kmilnpoiaahbllakcdnaakfbbnnaakin\5.10
C:\WINDOWS\Tasks\AmiUpdXp.job
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu logu - Malwarebytes Anti-Malware
Udělal jsem vše podle návodu a vkládám druhý log z FRST.
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 03-10-2013
Ran by Boža at 2013-10-03 09:51:21 Run:1
Running from C:\Documents and Settings\Boža\Plocha
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKCU\...\Run: [] - [x]
HKCU\...\Run: [] - [x]
HKU\Default User\...\RunOnce: [nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\Default User\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com/?utm_source=b&utm_m ... 1379540236
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... default&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... default&q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... default&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... default&q={searchTerms}
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
FF ProfilePath: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default
FF NewTab: hxxp://home.brandthunder.com/nasathemes/?newtab
FF SearchEngineOrder.1: qvo6
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.as ... ource=2&q=
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.qvo6.com/?utm_source=b&utm_m ... 1379540236
CHR RestoreOnStartup: "hxxp://www.qvo6.com/?utm_source=b&utm_medium=w ... 1379540236"]},"sync":{"keep_everything_synced":false,"preferences":false,"search_engines":false,"suppress_start":true},"webkit":{"webprefs":{"allow_running_insecure_content"
CHR Extension: (savensHaree ) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\kmilnpoiaahbllakcdnaakfbbnnaakin\5.10
C:\WINDOWS\Tasks\AmiUpdXp.job
End
*****************
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value not found.
HKU\Default User\Software\Microsoft\Windows\CurrentVersion\RunOnce\\nltide_3 => Value deleted successfully.
HKU\Default User\Software\Microsoft\Windows\CurrentVersion\RunOnce\\_nltide_3 => Value deleted successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => Value deleted successfully.
HKCR\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => Key not found.
=> Should not be moved.
Firefox newtab deleted successfully.
Firefox SearchEngineOrder.1 deleted successfully.
Firefox Keyword.URL deleted successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\askcom.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\conduit.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-1.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-10.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-11.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-12.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-13.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-14.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-2.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-3.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-4.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-5.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-6.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-7.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-8.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-9.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\searchplugins-backup => Moved successfully.
C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml => Moved successfully.
C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml => Moved successfully.
C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml => Moved successfully.
C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml => Moved successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\\Default => Value was restored successfully.
CHR RestoreOnStartup: "hxxp://www.qvo6.com/?utm_source=b&utm_medium=w ... 1379540236"]},"sync":{"keep_everything_synced":false,"preferences":false,"search_engines":false,"suppress_start":true},"webkit":{"webprefs":{"allow_running_insecure_content" ==> The Chrome "Settings" can be used to fix the entry.
C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\kmilnpoiaahbllakcdnaakfbbnnaakin => Moved successfully.
C:\WINDOWS\Tasks\AmiUpdXp.job => Moved successfully.
==== End of Fixlog ====
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 03-10-2013
Ran by Boža at 2013-10-03 09:51:21 Run:1
Running from C:\Documents and Settings\Boža\Plocha
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKCU\...\Run: [] - [x]
HKCU\...\Run: [] - [x]
HKU\Default User\...\RunOnce: [nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\Default User\...\RunOnce: [_nltide_3] - rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com/?utm_source=b&utm_m ... 1379540236
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... default&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... default&q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... default&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... default&q={searchTerms}
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
FF ProfilePath: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default
FF NewTab: hxxp://home.brandthunder.com/nasathemes/?newtab
FF SearchEngineOrder.1: qvo6
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.as ... ource=2&q=
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.qvo6.com/?utm_source=b&utm_m ... 1379540236
CHR RestoreOnStartup: "hxxp://www.qvo6.com/?utm_source=b&utm_medium=w ... 1379540236"]},"sync":{"keep_everything_synced":false,"preferences":false,"search_engines":false,"suppress_start":true},"webkit":{"webprefs":{"allow_running_insecure_content"
CHR Extension: (savensHaree ) - C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\kmilnpoiaahbllakcdnaakfbbnnaakin\5.10
C:\WINDOWS\Tasks\AmiUpdXp.job
End
*****************
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value not found.
HKU\Default User\Software\Microsoft\Windows\CurrentVersion\RunOnce\\nltide_3 => Value deleted successfully.
HKU\Default User\Software\Microsoft\Windows\CurrentVersion\RunOnce\\_nltide_3 => Value deleted successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => Value deleted successfully.
HKCR\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => Key not found.
=> Should not be moved.
Firefox newtab deleted successfully.
Firefox SearchEngineOrder.1 deleted successfully.
Firefox Keyword.URL deleted successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\askcom.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\conduit.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-1.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-10.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-11.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-12.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-13.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-14.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-2.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-3.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-4.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-5.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-6.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-7.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-8.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin-9.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\icqplugin.xml => Moved successfully.
C:\Documents and Settings\Boža\Data aplikací\Mozilla\Firefox\Profiles\4d29trmw.default\searchplugins\searchplugins-backup => Moved successfully.
C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml => Moved successfully.
C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml => Moved successfully.
C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml => Moved successfully.
C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml => Moved successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\\Default => Value was restored successfully.
CHR RestoreOnStartup: "hxxp://www.qvo6.com/?utm_source=b&utm_medium=w ... 1379540236"]},"sync":{"keep_everything_synced":false,"preferences":false,"search_engines":false,"suppress_start":true},"webkit":{"webprefs":{"allow_running_insecure_content" ==> The Chrome "Settings" can be used to fix the entry.
C:\DOCUME~1\BOA~1\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\kmilnpoiaahbllakcdnaakfbbnnaakin => Moved successfully.
C:\WINDOWS\Tasks\AmiUpdXp.job => Moved successfully.
==== End of Fixlog ====
-
Rudy
- Site Admin
- Příspěvky: 119322
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu - Malwarebytes Anti-Malware
Smazáno. Je ještě nějaký problém?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu logu - Malwarebytes Anti-Malware
Zatím PC funguje jak má, zdá se že je to vše. Moc děkuji za pomoc.
-
Rudy
- Site Admin
- Příspěvky: 119322
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu - Malwarebytes Anti-Malware
Nemáte zač! 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?