Nelze odinstalovat openoffice a nainstalovat novější

[petatape]

Včera při instalaci corelu se mi stáhl do PC Microsoft net framework 4 a od té chvíle nejde používat openoffice. Chtěl jsem tedy nainstalovat nový a to také nejde. Chtěl jsem odinstalovat framework a to také hlásí že inicializace aplikace se nezdařila. Navíc přestal fungovat i PDF. Prosím co mohu udělat??
Díky za radu.

zde je log:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Master at 2014-01-15 15:20:32
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 12 GB (32%) free of 38 GB
Total RAM: 1022 MB (59% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2013-05-06 194912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-06-21 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-06-21 126976]
"KeySpy"=C:\Documents and Settings\Master\Dokumenty\Downloads\Keymaster\KeySpy.exe [2007-04-07 217088]
"KONICA MINOLTA PagePro 1350WStatusDisplay"=C:\WINDOWS\system32\MSTMON_Q.EXE [2004-11-26 167936]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-12-05 3568312]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2013-02-13 1263952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.7\ICQ.exe [2012-03-13 127040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [2004-12-14 29696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-06-21 348160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.7\ICQ.exe"="C:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7"
"C:\Program Files\VideoLAN\VLC\vlc.exe"="C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.7\ICQ.exe"="C:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7"

======List of files/folders created in the last 1 months======

2014-01-15 15:20:32 ----D---- C:\rsit
2014-01-14 18:24:44 ----D---- C:\Program Files\Microsoft.NET
2014-01-10 16:14:48 ----D---- C:\5a435b1295847f862e7008
2014-01-10 16:11:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\CorelDRAW Graphics Suite X6

======List of files/folders modified in the last 1 months======

2014-01-15 15:20:35 ----D---- C:\Program Files\trend micro
2014-01-15 15:10:11 ----SHD---- C:\WINDOWS\Installer
2014-01-15 15:09:04 ----D---- C:\WINDOWS\Temp
2014-01-15 15:08:55 ----D---- C:\WINDOWS\Prefetch
2014-01-15 15:07:44 ----RD---- C:\Program Files
2014-01-15 14:59:09 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-01-15 13:11:31 ----RSD---- C:\WINDOWS\assembly
2014-01-15 13:11:31 ----D---- C:\WINDOWS\Microsoft.NET
2014-01-14 18:47:46 ----D---- C:\WINDOWS
2014-01-14 18:46:05 ----D---- C:\WINDOWS\system32
2014-01-14 18:45:26 ----D---- C:\Program Files\Trell
2014-01-14 18:44:18 ----HD---- C:\WINDOWS\inf
2014-01-14 18:44:17 ----D---- C:\WINDOWS\system32\mui
2014-01-14 18:44:15 ----RSHDC---- C:\WINDOWS\system32\dllcache
2014-01-14 18:42:51 ----D---- C:\WINDOWS\system32\CatRoot2
2014-01-14 18:42:27 ----SHD---- C:\Config.Msi
2014-01-14 18:42:26 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-14 18:41:01 ----D---- C:\WINDOWS\system32\cs-cz
2014-01-14 18:36:53 ----D---- C:\WINDOWS\WinSxS
2014-01-14 18:15:39 ----D---- C:\Program Files\Ztrl
2014-01-14 13:02:39 ----SD---- C:\WINDOWS\Tasks
2014-01-14 13:02:29 ----D---- C:\WINDOWS\system32\drivers
2014-01-14 13:02:25 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-01-07 18:28:27 ----A---- C:\WINDOWS\MSTMON_Q.INI
2013-12-26 07:32:55 ----D---- C:\Program Files\Mozilla Firefox
2013-12-21 16:18:50 ----D---- C:\WINDOWS\Minidump

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2013-03-07 21576]
R1 aswRdr;aswRdr; \??\C:\WINDOWS\system32\drivers\aswRdr.sys []
R1 aswSnx;aswSnx; \??\C:\WINDOWS\system32\drivers\aswSnx.sys []
R1 aswSP;aswSP; \??\C:\WINDOWS\system32\drivers\aswSP.sys []
R1 aswTdi;aswTdi; \??\C:\WINDOWS\system32\drivers\aswTdi.sys []
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-18 12032]
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R2 MLPTDR_Q;MLPTDR_Q; \??\C:\WINDOWS\system32\MLPTDR_Q.SYS []
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2003-03-04 145408]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-06-21 807998]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-05-27 578304]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2009-03-18 30336]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 ALSysIO;ALSysIO; \??\C:\DOCUME~1\Master\LOCALS~1\Temp\ALSysIO.sys []
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-12-05 50344]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-10-08 182696]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11 257416]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-01-02 136176]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-01-02 136176]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-05-19 129976]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Rudy]

Zdravím!
V prvé řadě zkuste odinstalovat OpenOffice pomocí Total Uninstall: http://www.stahuj.centrum.cz/utility_a_ ... uninstall/ . Pak zkuste instalaci nové verze.

[petatape]

stará verze je odinst. ale nová nejde nainst. hlásí to interní chyba 2503

[petatape]

ještě jsem se pokusil obnovit systém před pokus instalace corelu. Nic. Jednoduchá řešení nefungují.
Co mám udělat?

[petatape]

asi jsem vyřešil problém: avast mi v PC našel malware-gen. Po přesunutí do truhly se zdá být vše OK a instalace se zdařila bez problémů. Teď jen zjistit jestli tam nemam ještě nějakej bordel....co mam udělat?

[Rudy]

Zkuste tento postup: http://forum.viry.cz/viewtopic.php?f=13&t=133100 . OO už jde nainstalovat?

[petatape]

je nainstalováno, zatím to vypadá dobře.

log:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-01-2014 03
Ran by Master (administrator) on X on 16-01-2014 18:37:06
Running from C:\Documents and Settings\Master\Plocha
Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) ===================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
() C:\Documents and Settings\Master\Dokumenty\Downloads\Keymaster\KeySpy.exe
(KONICA MINOLTA BUSINESS TECHNOLOGIES, INC.) C:\WINDOWS\system32\MSTMON_Q.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
() C:\Program Files\Trell\Trell_kasa.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Documents and Settings\Master\Plocha\FRSTLauncher (1).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [KeySpy] - C:\Documents and Settings\Master\Dokumenty\Downloads\Keymaster\KeySpy.exe [217088 2007-04-07] ()
HKLM\...\Run: [KONICA MINOLTA PagePro 1350WStatusDisplay] - C:\WINDOWS\system32\MSTMON_Q.EXE [167936 2004-11-26] (KONICA MINOLTA BUSINESS TECHNOLOGIES, INC.)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-16] (AVAST Software)
HKLM\...\Run: [SDTray] - C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxsrvc.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\Administrator\...\Run: [Akamai NetSession Interface] - "C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Akamai\netsession_win.exe"
HKU\Administrator\...\RunOnce: [TSClientMSIUninstaller] - C:\Windows\Installer\TSClientMsiTrans\tscuinst.vbs [ 2007-10-30] ()
HKU\Administrator\...\RunOnce: [TSClientAXDisabler] - C:\Windows\Installer\TSClientMsiTrans\tscdsbl.bat [ 2008-01-18] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {711290F8-6FF5-4FEF-910A-C15CCC1637B0} URL = http://search.conduit.com/ResultsExt.as ... 40227&UM=2
BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU - &Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Master\Data aplikací\Mozilla\Firefox\Profiles\tuiyim33.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
FF Extension: 7Go Games - C:\Documents and Settings\Master\Data aplikací\Mozilla\Firefox\Profiles\tuiyim33.default\Extensions\7go@7go.com [2013-08-29]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-01-02]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013-08-02]

Chrome:
=======
CHR RestoreOnStartup: "hxxp://www.google.cz/"
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\28.0.1500.95\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat 7.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Shockwave for Director) - C:\WINDOWS\system32\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\WINDOWS\system32\npDeployJava1.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (avast! Online Security) - C:\Documents and Settings\Master\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2011.70_0 [2014-01-16]
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Documents and Settings\Master\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.172_0 [2013-08-08]
CHR Extension: (DivX Browser Bar) - C:\Documents and Settings\Master\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pkmpcdbgnfjfeelcpebpkflcmbkclfho\10.22.5.510_0 [2013-11-19]
CHR HKLM\...\Chrome\Extension: [gjajpkikblccgefaibcafkfbanllpefi] - C:\Documents and Settings\Master\Data aplikací\7go\7go.crx [2013-07-30]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-05]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2013-05-06]
CHR HKLM\...\Chrome\Extension: [pkmpcdbgnfjfeelcpebpkflcmbkclfho] - C:\Documents and Settings\Master\Local Settings\Data aplikací\CRE\pkmpcdbgnfjfeelcpebpkflcmbkclfho.crx [2013-07-31]
CHR HKCU\...\Chrome\Extension: [pkmpcdbgnfjfeelcpebpkflcmbkclfho] - C:\Documents and Settings\Master\Local Settings\Data aplikací\CRE\pkmpcdbgnfjfeelcpebpkflcmbkclfho.crx [2013-07-31]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-16] (AVAST Software)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-01-16] (Oracle Corporation)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)

==================== Drivers (Whitelisted) ====================

R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21576 2013-03-07] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-01-14] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [54832 2014-01-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-12-05] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [775952 2014-01-14] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [410528 2014-01-14] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57672 2014-01-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [180248 2014-01-14] ()
R2 MLPTDR_Q; C:\WINDOWS\system32\MLPTDR_Q.SYS [18848 2003-07-22] (KONICA MINOLTA BUSINESS TECHNOLOGIES, INC.)
S3 ALSysIO; \??\C:\DOCUME~1\Master\LOCALS~1\Temp\ALSysIO.sys [x]
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-16 18:37 - 2014-01-16 18:37 - 00012822 _____ C:\Documents and Settings\Master\Plocha\FRST.txt
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D C:\FRST
2014-01-16 18:33 - 2014-01-16 18:33 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Master\Plocha\FRSTLauncher (1).exe
2014-01-16 18:28 - 2014-01-16 18:28 - 01221120 _____ (Farbar) C:\Documents and Settings\Master\Plocha\FRST.exe
2014-01-16 17:28 - 2014-01-16 17:28 - 00000000 ____D C:\Documents and Settings\Master\Dokumenty\ProcAlyzer Dumps
2014-01-16 15:41 - 2014-01-16 15:40 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-16 15:40 - 2014-01-16 15:40 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-16 15:40 - 2014-01-16 15:40 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-16 15:40 - 2014-01-16 15:40 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-01-16 15:40 - 2014-01-16 15:40 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Java
2014-01-16 15:28 - 2014-01-16 15:28 - 00000644 _____ C:\WINDOWS\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-01-16 15:28 - 2014-01-16 15:28 - 00000616 _____ C:\WINDOWS\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-01-16 15:28 - 2014-01-16 15:28 - 00000446 _____ C:\WINDOWS\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-01-16 15:27 - 2014-01-16 17:28 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2014-01-16 15:27 - 2014-01-16 15:31 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2014-01-16 15:27 - 2014-01-16 15:27 - 00065536 _____ C:\WINDOWS\system32\config\SpybotSD.evt
2014-01-16 15:27 - 2014-01-16 15:27 - 00001842 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Spybot-S&D Start Center.lnk
2014-01-16 15:27 - 2014-01-16 15:27 - 00001836 _____ C:\Documents and Settings\All Users\Plocha\Spybot-S&D Start Center.lnk
2014-01-16 15:27 - 2014-01-16 15:27 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Spybot - Search & Destroy 2
2014-01-16 15:27 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean.exe
2014-01-16 15:11 - 2014-01-16 15:11 - 00000000 ____D C:\Documents and Settings\Master\Data aplikací\OpenOffice
2014-01-16 15:10 - 2014-01-16 15:11 - 00000000 ___SD C:\Documents and Settings\All Users\Nabídka Start\Programy\OpenOffice 4.0.1
2014-01-16 15:10 - 2014-01-16 15:10 - 00000865 _____ C:\Documents and Settings\All Users\Plocha\OpenOffice 4.0.1.lnk
2014-01-16 15:08 - 2014-01-16 15:09 - 00000000 ____D C:\Program Files\OpenOffice 4
2014-01-16 11:13 - 2014-01-16 11:14 - 00000000 ____D C:\Documents and Settings\Master\Plocha\OpenOffice 4.0.1 (cs) Installation Files
2014-01-16 11:06 - 2014-01-16 11:06 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2014-01-16 09:39 - 2014-01-16 09:39 - 00000000 ____D C:\a94da79eae96276da083
2014-01-16 09:38 - 2014-01-16 09:38 - 00000000 ____D C:\Program Files\PosteRazor
2014-01-16 09:38 - 2014-01-16 09:38 - 00000000 ____D C:\Documents and Settings\Master\Data aplikací\CasaPortale.de
2014-01-16 09:38 - 2014-01-16 09:38 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\PosteRazor
2014-01-16 09:23 - 2014-01-16 09:23 - 00004670 _____ C:\Documents and Settings\Master\Dokumenty\cc_20140116_092349.reg
2014-01-16 08:30 - 2014-01-16 09:38 - 00000000 ____D C:\Program Files\Total Uninstall 6
2014-01-16 08:30 - 2014-01-16 08:30 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Martau
2014-01-15 15:20 - 2014-01-15 15:20 - 00000000 ____D C:\rsit
2014-01-14 18:42 - 2014-01-16 09:05 - 00180012 _____ C:\WINDOWS\KB942288-v3.log
2014-01-14 18:24 - 2014-01-14 18:24 - 00000000 ____D C:\Program Files\Microsoft.NET
2014-01-13 14:37 - 2014-01-13 14:37 - 00634800 _____ C:\Documents and Settings\Master\Plocha\Apophysis-140113-5.svg
2014-01-13 14:37 - 2014-01-13 14:37 - 00002350 _____ C:\Documents and Settings\Master\Local Settings\Data aplikací\recently-used.xbel
2014-01-10 16:14 - 2014-01-10 16:14 - 00000000 ____D C:\5a435b1295847f862e7008
2014-01-10 16:11 - 2014-01-10 16:11 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\CorelDRAW Graphics Suite X6
2014-01-09 14:46 - 2014-01-06 14:20 - 00013312 _____ C:\Documents and Settings\Master\Plocha\sudové víno.xls
2014-01-09 10:57 - 2014-01-09 10:57 - 00011612 _____ C:\Documents and Settings\Master\Dokumenty\BLATEL.odt
2014-01-02 10:32 - 2014-01-02 10:32 - 00012823 _____ C:\Documents and Settings\Master\Plocha\PROVOZNIDOBANOVA.odt
2013-12-21 16:18 - 2013-12-21 16:18 - 00090112 _____ C:\WINDOWS\Minidump\Mini122113-01.dmp
2013-12-17 15:03 - 2013-12-17 15:03 - 00010982 _____ C:\Documents and Settings\Master\Dokumenty\cc_20131217_150335.reg
2013-12-17 14:19 - 2014-01-16 10:59 - 00006756 _____ C:\WINDOWS\setupapi.log

==================== One Month Modified Files and Folders =======

2014-01-16 18:37 - 2014-01-16 18:37 - 00012822 _____ C:\Documents and Settings\Master\Plocha\FRST.txt
2014-01-16 18:37 - 2011-12-30 20:00 - 00000000 ____D C:\Documents and Settings\Master\Plocha
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D C:\FRST
2014-01-16 18:36 - 2011-12-30 20:00 - 00000000 ___HD C:\Documents and Settings\Master\Local Settings\Data aplikací
2014-01-16 18:33 - 2014-01-16 18:33 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Master\Plocha\FRSTLauncher (1).exe
2014-01-16 18:28 - 2014-01-16 18:28 - 01221120 _____ (Farbar) C:\Documents and Settings\Master\Plocha\FRST.exe
2014-01-16 18:13 - 2012-01-02 11:34 - 00000000 ____D C:\Program Files\Ztrl
2014-01-16 17:59 - 2013-03-22 10:01 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-01-16 17:28 - 2014-01-16 17:28 - 00000000 ____D C:\Documents and Settings\Master\Dokumenty\ProcAlyzer Dumps
2014-01-16 17:28 - 2014-01-16 15:27 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2014-01-16 17:28 - 2011-12-30 20:00 - 00000000 ___RD C:\Documents and Settings\Master\Dokumenty
2014-01-16 17:27 - 2011-12-29 21:57 - 00000360 __RSH C:\boot.ini
2014-01-16 17:25 - 2011-12-29 21:46 - 00000000 ____D C:\Documents and Settings\LocalService\Data aplikací
2014-01-16 17:24 - 2012-02-24 18:31 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2014-01-16 16:22 - 2012-12-29 16:26 - 00000005 _____ C:\Program Files\trl.trl
2014-01-16 15:40 - 2014-01-16 15:41 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-16 15:40 - 2014-01-16 15:40 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-16 15:40 - 2014-01-16 15:40 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-16 15:40 - 2014-01-16 15:40 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-01-16 15:40 - 2014-01-16 15:40 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Java
2014-01-16 15:40 - 2013-12-07 17:11 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2014-01-16 15:40 - 2011-12-29 21:58 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2014-01-16 15:33 - 2012-12-29 16:15 - 00000000 ____D C:\Program Files\Trell
2014-01-16 15:31 - 2014-01-16 15:27 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2014-01-16 15:28 - 2014-01-16 15:28 - 00000644 _____ C:\WINDOWS\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-01-16 15:28 - 2014-01-16 15:28 - 00000616 _____ C:\WINDOWS\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-01-16 15:28 - 2014-01-16 15:28 - 00000446 _____ C:\WINDOWS\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-01-16 15:27 - 2014-01-16 15:27 - 00065536 _____ C:\WINDOWS\system32\config\SpybotSD.evt
2014-01-16 15:27 - 2014-01-16 15:27 - 00001842 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Spybot-S&D Start Center.lnk
2014-01-16 15:27 - 2014-01-16 15:27 - 00001836 _____ C:\Documents and Settings\All Users\Plocha\Spybot-S&D Start Center.lnk
2014-01-16 15:27 - 2014-01-16 15:27 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Spybot - Search & Destroy 2
2014-01-16 15:27 - 2011-12-29 21:58 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2014-01-16 15:27 - 2011-12-29 21:58 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2014-01-16 15:11 - 2014-01-16 15:11 - 00000000 ____D C:\Documents and Settings\Master\Data aplikací\OpenOffice
2014-01-16 15:11 - 2014-01-16 15:10 - 00000000 ___SD C:\Documents and Settings\All Users\Nabídka Start\Programy\OpenOffice 4.0.1
2014-01-16 15:11 - 2011-12-30 20:00 - 00000000 __RHD C:\Documents and Settings\Master\Data aplikací
2014-01-16 15:10 - 2014-01-16 15:10 - 00000865 _____ C:\Documents and Settings\All Users\Plocha\OpenOffice 4.0.1.lnk
2014-01-16 15:10 - 2011-12-29 21:58 - 00000000 ___HD C:\Documents and Settings\All Users\Šablony
2014-01-16 15:09 - 2014-01-16 15:08 - 00000000 ____D C:\Program Files\OpenOffice 4
2014-01-16 15:07 - 2012-07-10 16:12 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2014-01-16 15:07 - 2011-12-30 21:17 - 00000000 ____D C:\Program Files\OpenOffice.org 3
2014-01-16 15:05 - 2011-12-29 21:59 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2014-01-16 15:04 - 2004-08-18 13:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl
2014-01-16 15:02 - 2012-03-12 13:04 - 00000157 _____ C:\WINDOWS\wiadebug.log
2014-01-16 15:02 - 2012-03-12 13:04 - 00000049 _____ C:\WINDOWS\wiaservc.log
2014-01-16 15:02 - 2011-12-29 21:46 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-16 14:54 - 2011-12-29 21:46 - 00032492 _____ C:\WINDOWS\SchedLgU.Txt
2014-01-16 14:53 - 2011-12-30 20:00 - 00000178 ___SH C:\Documents and Settings\Master\ntuser.ini
2014-01-16 14:53 - 2011-12-29 21:40 - 01352431 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-16 11:14 - 2014-01-16 11:13 - 00000000 ____D C:\Documents and Settings\Master\Plocha\OpenOffice 4.0.1 (cs) Installation Files
2014-01-16 11:06 - 2014-01-16 11:06 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2014-01-16 10:59 - 2013-12-17 14:19 - 00006756 _____ C:\WINDOWS\setupapi.log
2014-01-16 09:43 - 2013-04-05 14:06 - 00001733 _____ C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
2014-01-16 09:41 - 2011-12-29 21:58 - 00126912 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-16 09:40 - 2011-12-30 20:00 - 00000000 ____D C:\Documents and Settings\Master
2014-01-16 09:40 - 2011-12-29 21:46 - 00000000 __SHD C:\Documents and Settings\LocalService
2014-01-16 09:40 - 2011-12-29 21:46 - 00000000 ____D C:\Documents and Settings\Administrator
2014-01-16 09:40 - 2011-12-29 21:45 - 00000000 __SHD C:\Documents and Settings\NetworkService
2014-01-16 09:39 - 2014-01-16 09:39 - 00000000 ____D C:\a94da79eae96276da083
2014-01-16 09:39 - 2011-12-29 21:38 - 00000000 ____D C:\WINDOWS\Registration
2014-01-16 09:38 - 2014-01-16 09:38 - 00000000 ____D C:\Program Files\PosteRazor
2014-01-16 09:38 - 2014-01-16 09:38 - 00000000 ____D C:\Documents and Settings\Master\Data aplikací\CasaPortale.de
2014-01-16 09:38 - 2014-01-16 09:38 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\PosteRazor
2014-01-16 09:38 - 2014-01-16 08:30 - 00000000 ____D C:\Program Files\Total Uninstall 6
2014-01-16 09:38 - 2013-08-11 12:04 - 00000000 ____D C:\Program Files\trend micro
2014-01-16 09:37 - 2011-12-29 21:39 - 00000000 ____D C:\WINDOWS\system32\Restore
2014-01-16 09:23 - 2014-01-16 09:23 - 00004670 _____ C:\Documents and Settings\Master\Dokumenty\cc_20140116_092349.reg
2014-01-16 09:05 - 2014-01-14 18:42 - 00180012 _____ C:\WINDOWS\KB942288-v3.log
2014-01-16 08:30 - 2014-01-16 08:30 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Martau
2014-01-16 08:30 - 2011-12-29 21:52 - 00000000 ____D C:\WINDOWS\system
2014-01-15 15:20 - 2014-01-15 15:20 - 00000000 ____D C:\rsit
2014-01-15 12:00 - 2011-12-30 20:00 - 00000000 ___HD C:\Documents and Settings\Master\Okolní síť
2014-01-14 18:44 - 2011-12-29 21:52 - 00000000 ____D C:\WINDOWS\system32\mui
2014-01-14 18:42 - 2011-12-29 21:59 - 01138324 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-14 18:24 - 2014-01-14 18:24 - 00000000 ____D C:\Program Files\Microsoft.NET
2014-01-14 13:02 - 2013-03-19 13:12 - 00180248 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-01-14 13:02 - 2013-03-19 13:12 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-01-14 13:02 - 2012-01-02 13:56 - 00775952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-01-14 13:02 - 2012-01-02 13:56 - 00410528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-01-14 13:02 - 2012-01-02 13:56 - 00270240 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-01-14 13:02 - 2012-01-02 13:56 - 00057672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2014-01-14 13:02 - 2012-01-02 13:56 - 00054832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2014-01-14 13:02 - 2012-01-02 13:56 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-01-13 14:56 - 2012-09-04 13:29 - 00012167 _____ C:\Documents and Settings\Master\Plocha\renders.flame
2014-01-13 14:37 - 2014-01-13 14:37 - 00634800 _____ C:\Documents and Settings\Master\Plocha\Apophysis-140113-5.svg
2014-01-13 14:37 - 2014-01-13 14:37 - 00002350 _____ C:\Documents and Settings\Master\Local Settings\Data aplikací\recently-used.xbel
2014-01-13 13:56 - 2012-09-04 13:29 - 00009810 _____ C:\Documents and Settings\Master\Plocha\renders.bak
2014-01-10 16:14 - 2014-01-10 16:14 - 00000000 ____D C:\5a435b1295847f862e7008
2014-01-10 16:11 - 2014-01-10 16:11 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\CorelDRAW Graphics Suite X6
2014-01-09 16:21 - 2012-06-15 15:16 - 00000000 ____D C:\Documents and Settings\Master\Plocha\Data
2014-01-09 13:20 - 2013-05-18 15:38 - 00000000 ____D C:\Documents and Settings\Master\Plocha\večerka
2014-01-09 10:57 - 2014-01-09 10:57 - 00011612 _____ C:\Documents and Settings\Master\Dokumenty\BLATEL.odt
2014-01-07 18:28 - 2004-08-31 01:31 - 00014877 _____ C:\WINDOWS\MSTMON_Q.INI
2014-01-06 14:20 - 2014-01-09 14:46 - 00013312 _____ C:\Documents and Settings\Master\Plocha\sudové víno.xls
2014-01-02 14:49 - 2011-12-30 20:13 - 00037376 _____ C:\Documents and Settings\Master\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-02 10:32 - 2014-01-02 10:32 - 00012823 _____ C:\Documents and Settings\Master\Plocha\PROVOZNIDOBANOVA.odt
2013-12-26 07:32 - 2011-12-30 18:36 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-21 16:18 - 2013-12-21 16:18 - 00090112 _____ C:\WINDOWS\Minidump\Mini122113-01.dmp
2013-12-21 16:18 - 2012-02-07 15:23 - 00000000 ____D C:\WINDOWS\Minidump
2013-12-17 15:03 - 2013-12-17 15:03 - 00010982 _____ C:\Documents and Settings\Master\Dokumenty\cc_20131217_150335.reg

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2004-08-18 13:00] - [2008-04-14 08:52] - 1034240 ____A (Microsoft Corporation) 27afd587c462e280ee046b8cca3c2cd1

C:\Windows\System32\winlogon.exe
[2004-08-18 13:00] - [2008-04-14 08:52] - 0507904 ____A (Microsoft Corporation) cddb1f8e1aea356f3ad106f2cf9b7fea

C:\Windows\System32\svchost.exe
[2004-08-18 13:00] - [2008-04-14 08:52] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93

C:\Windows\System32\services.exe
[2004-08-18 13:00] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7

C:\Windows\System32\User32.dll
[2004-08-18 13:00] - [2008-04-14 08:52] - 0578560 ____A (Microsoft Corporation) e16e0990967374e76f3e40cacafd3d53

C:\Windows\System32\userinit.exe
[2004-08-18 13:00] - [2008-04-14 08:52] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239

C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2004-08-18 13:00] - [2008-04-14 07:42] - 0052480 ____A (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1





===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:37.26 GB) (Free:13.2 GB) NTFS ==>[Drive with boot components (Windows XP)]

Available physical RAM: 454.66 MB
Total physical RAM: 1021.98 MB
Percentage of memory in use: 55%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 37 GB) (Disk ID: 96BF96BF)
Partition 1: (Active) - (Size=37 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\WINDOWS\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\WINDOWS\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Documents and Settings\Master\Plocha" je 3578 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate
"C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ
"C:\Program Files\ICQ7.7\ICQ.exe" silent loginmode=4 [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabdka Start^Programy^Po sputn^Adobe Reader Speed Launch.lnk
C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]


[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\ICQ7.7\\ICQ.exe"="C:\\Program Files\\ICQ7.7\\ICQ.exe:*:Enabled:ICQ7.7"


[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\ICQ7.7\\ICQ.exe"="C:\\Program Files\\ICQ7.7\\ICQ.exe:*:Enabled:ICQ7.7"
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"="C:\\Program Files\\VideoLAN\\VLC\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDTray.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDFSSvc.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdate.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdSvc.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP"="139:TCP:*:Enabled:@xpsp2res.dll,-22004"
"445:TCP"="445:TCP:*:Enabled:@xpsp2res.dll,-22005"
"137:UDP"="137:UDP:*:Enabled:@xpsp2res.dll,-22001"
"138:UDP"="138:UDP:*:Enabled:@xpsp2res.dll,-22002"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP"="139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004"
"445:TCP"="445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005"
"137:UDP"="137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001"
"138:UDP"="138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002"


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000


==================== End Of Log ==============================

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Start
C:\Documents and Settings\Master\Dokumenty\Downloads\Keymaster\KeySpy.exe
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\Administrator\...\Run: [Akamai NetSession Interface] - "C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Akamai\netsession_win.exe"
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {711290F8-6FF5-4FEF-910A-C15CCC1637B0} URL = http://search.conduit.com/ResultsExt.as ... 40227&UM=2
CHR HKLM\...\Chrome\Extension: [gjajpkikblccgefaibcafkfbanllpefi] - C:\Documents and Settings\Master\Data aplikací\7go\7go.crx [2013-07-30]
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[petatape]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 15-01-2014 03
Ran by Master at 2014-01-17 10:30:22 Run:1
Running from C:\Documents and Settings\Master\Plocha
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
C:\Documents and Settings\Master\Dokumenty\Downloads\Keymaster\KeySpy.exe
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\Administrator\...\Run: [Akamai NetSession Interface] - "C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Akamai\netsession_win.exe"
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {711290F8-6FF5-4FEF-910A-C15CCC1637B0} URL = http://search.conduit.com/ResultsExt.as ... 40227&UM=2
CHR HKLM\...\Chrome\Extension: [gjajpkikblccgefaibcafkfbanllpefi] - C:\Documents and Settings\Master\Data aplikací\7go\7go.crx [2013-07-30]
End
*****************

C:\Documents and Settings\Master\Dokumenty\Downloads\Keymaster\KeySpy.exe => Moved successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKU\Administrator\Software\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{711290F8-6FF5-4FEF-910A-C15CCC1637B0} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{711290F8-6FF5-4FEF-910A-C15CCC1637B0} => Key not found.
HKLM\SOFTWARE\Google\Chrome\Extensions\gjajpkikblccgefaibcafkfbanllpefi => Key deleted successfully.
C:\Documents and Settings\Master\Data aplikací\7go\7go.crx => Moved successfully.


The system needs a manual reboot.

==== End of Fixlog ====

[Rudy]

Vše smazáno.

[petatape]

Moc děkuji za pomoc

[Rudy]

Nemáte zač!