Prohlídka

Zpráva

KwonPavlis · #1 Příspěvek od **KwonPavlis** » 23 led 2014 19:07

Dobrý den, prosím o kontrolu

Logfile of random's system information tool 1.09 (written by random/random)
Run by Matěj at 2014-01-23 19:05:59
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 49 GB (64%) free of 76 GB
Total RAM: 3582 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:06:02, on 23.1.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVG\AVG PC Tuneup 2011\BoostSpeed.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\ItSecMng.exe
C:\Program Files\AVG Secure Search\vprot.exe
C:\Program Files\Gaming Keyboard\Monitor.EXE
C:\Program Files\AVG\AVG2014\avgui.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Gaming Keyboard\OSD.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Matěj\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y2BVGXE3\RSIT.exe
C:\Program Files\trend micro\Matěj.exe
C:\Windows\system32\DllHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.searchiseasy.info/?pid ... Z&unqvl=33
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - (no file)
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
O4 - HKLM\..\Run: [VICTORY Gaming Keyboard] "C:\Program Files\Gaming Keyboard\Monitor.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [mobilegeni daemon] C:\Program Files\Mobogenie\DaemonProcess.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKCU\..\Run: [NextLive] C:\Windows\system32\rundll32.exe "C:\Users\Matěj\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
O4 - HKCU\..\Run: [Google Update] "C:\Users\Matěj\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\RunOnce: [RegistryDefrag] C:\Program Files\AVG\AVG PC Tuneup 2011\registrydefrag.exe -report
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-247 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-247 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.dell.com
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\17.3.0\ViProtocol.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgwdsvc.exe
O23 - Service: Bluetooth Device Manager - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\obexsrv.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\Windows\system32\UAService7.exe
O23 - Service: vToolbarUpdater17.3.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe

--
End of file - 5775 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2123599516-1565121475-1755823417-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2123599516-1565121475-1755823417-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Security Toolbar - C:\Program Files\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll [2014-01-09 3349528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG Security Toolbar - C:\Program Files\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll [2014-01-09 3349528]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ITSecMng"=C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [2009-07-22 83336]
"vProt"=C:\Program Files\AVG Secure Search\vprot.exe [2014-01-09 2486296]
"nwiz"=C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2013-11-14 2602784]
"VICTORY Gaming Keyboard"=C:\Program Files\Gaming Keyboard\Monitor.exe [2013-04-09 270336]
"AVG_UI"=C:\Program Files\AVG\AVG2014\avgui.exe [2013-11-07 4956176]
"mobilegeni daemon"=C:\Program Files\Mobogenie\DaemonProcess.exe []
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2013-12-14 221184]
"NextLive"=C:\Users\Matěj\AppData\Roaming\newnext.me\nengine.dll [2013-11-14 1283584]
"Google Update"=C:\Users\Matěj\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-15 116648]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"RegistryDefrag"=C:\Program Files\AVG\AVG PC Tuneup 2011\registrydefrag.exe [2010-09-23 238920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BTMTrayAgent]
C:\Program Files\Motorola\Bluetooth\btmshell.dll [2010-11-30 20899408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2013-11-14 2602784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AutoDect.lnk]
[]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BsScanner]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"vidc.tscc"=C:\Windows\system32\tsccvid.dll
"vidc.tsc2"=C:\Windows\system32\tsc2_codec32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.YVU9"=tsbyuv.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-01-23 19:04:24 ----D---- C:\rsit
2014-01-23 19:04:24 ----D---- C:\Program Files\trend micro
2014-01-23 18:55:01 ----A---- C:\Windows\system32\rdboot32.exe
2014-01-23 18:26:37 ----A---- C:\Windows\system32\FNTCACHE.DAT
2014-01-21 17:15:54 ----D---- C:\Program Files\Microsoft SkyDrive
2014-01-18 18:59:48 ----A---- C:\Windows\ODBC.INI
2014-01-18 18:58:20 ----D---- C:\Windows\Msagent
2014-01-18 18:02:05 ----A---- C:\Windows\uinst001.exe
2014-01-15 15:37:39 ----A---- C:\Windows\system32\win32k.sys
2014-01-15 15:37:38 ----A---- C:\Windows\system32\drivers\netio.sys
2014-01-15 15:37:37 ----A---- C:\Windows\system32\drivers\usbport.sys
2014-01-15 15:37:37 ----A---- C:\Windows\system32\drivers\usbhub.sys
2014-01-15 15:37:37 ----A---- C:\Windows\system32\drivers\usbehci.sys
2014-01-15 15:37:37 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2014-01-15 15:37:36 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2014-01-15 15:37:36 ----A---- C:\Windows\system32\drivers\usbohci.sys
2014-01-15 15:37:36 ----A---- C:\Windows\system32\drivers\usbd.sys
2014-01-14 16:58:14 ----D---- C:\Users\Matěj\AppData\Roaming\newnext.me
2014-01-14 16:27:05 ----D---- C:\Program Files\Microsoft SDKs
2014-01-14 16:26:02 ----D---- C:\Windows\PCHEALTH
2014-01-14 16:18:49 ----AS---- C:\Windows\system32\nircmdc.exe
2014-01-03 16:09:48 ----D---- C:\Users\Matěj\AppData\Roaming\AVG2014
2014-01-03 16:07:26 ----HD---- C:\$AVG
2014-01-03 15:59:24 ----A---- C:\Windows\system32\F39D4DE6-98B8-4E05-91BD-549E8A8248BD.tmp
2014-01-03 14:59:15 ----D---- C:\Program Files\Google
2014-01-02 20:07:36 ----D---- C:\ProgramData\Package Cache
2014-01-02 19:05:09 ----D---- C:\Users\Matěj\AppData\Roaming\AVG
2014-01-02 18:28:04 ----SHD---- C:\Config.Msi
2013-12-24 21:30:56 ----D---- C:\Program Files\Gaming Keyboard

======List of files/folders modified in the last 1 month======

2014-01-23 19:06:00 ----D---- C:\Windows\Temp
2014-01-23 19:04:24 ----RD---- C:\Program Files
2014-01-23 19:00:17 ----D---- C:\ProgramData\MFAData
2014-01-23 18:55:04 ----D---- C:\Windows\system32\config
2014-01-23 18:55:01 ----D---- C:\Windows\System32
2014-01-23 18:54:48 ----SHD---- C:\System Volume Information
2014-01-23 18:48:57 ----D---- C:\Windows\Prefetch
2014-01-23 18:48:54 ----D---- C:\Windows
2014-01-23 18:45:28 ----D---- C:\Windows\inf
2014-01-23 18:41:44 ----D---- C:\Windows\system32\Tasks
2014-01-23 18:37:09 ----SHD---- C:\Windows\Installer
2014-01-23 18:37:09 ----D---- C:\Program Files\Common Files
2014-01-23 18:35:06 ----RSD---- C:\Windows\assembly
2014-01-23 18:35:06 ----D---- C:\Windows\Microsoft.NET
2014-01-23 18:27:02 ----D---- C:\ProgramData\NVIDIA
2014-01-23 18:24:27 ----D---- C:\ProgramData\Microsoft Help
2014-01-23 18:24:14 ----D---- C:\Program Files\Microsoft.NET
2014-01-23 18:24:14 ----D---- C:\Program Files\Common Files\microsoft shared
2014-01-23 18:24:12 ----D---- C:\Windows\Logs
2014-01-23 18:23:32 ----RSD---- C:\Windows\Fonts
2014-01-23 18:19:40 ----D---- C:\Windows\ShellNew
2014-01-23 18:19:34 ----D---- C:\Program Files\Common Files\System
2014-01-23 18:19:32 ----A---- C:\Windows\win.ini
2014-01-23 18:14:24 ----D---- C:\ProgramData\Skype
2014-01-23 18:10:15 ----DC---- C:\Windows\system32\DRVSTORE
2014-01-23 18:10:15 ----D---- C:\Windows\system32\drivers
2014-01-23 18:09:39 ----SD---- C:\ProgramData\Microsoft
2014-01-23 18:07:15 ----HD---- C:\Program Files\InstallShield Installation Information
2014-01-22 19:18:53 ----D---- C:\Windows\winsxs
2014-01-22 19:08:37 ----D---- C:\Windows\system32\catroot2
2014-01-22 17:34:09 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-01-21 16:39:39 ----SD---- C:\Users\Matěj\AppData\Roaming\Microsoft
2014-01-18 18:58:22 ----D---- C:\Windows\Help
2014-01-18 18:56:11 ----D---- C:\Windows\system
2014-01-16 15:13:05 ----D---- C:\Windows\debug
2014-01-15 19:21:17 ----D---- C:\Windows\Tasks
2014-01-15 19:06:48 ----D---- C:\Windows\system32\DriverStore
2014-01-15 16:15:21 ----D---- C:\Windows\system32\MRT
2014-01-15 16:14:21 ----A---- C:\Windows\system32\MRT.exe
2014-01-15 15:37:04 ----D---- C:\Windows\system32\catroot
2014-01-11 14:01:02 ----D---- C:\Windows\system32\NDF
2014-01-09 17:14:28 ----D---- C:\Program Files\AVG Secure Search
2014-01-03 16:37:52 ----D---- C:\ProgramData
2014-01-03 16:08:24 ----D---- C:\ProgramData\AVG2014
2014-01-03 16:06:57 ----D---- C:\Program Files\AVG
2014-01-02 11:35:35 ----D---- C:\Windows\SoftwareDistribution
2013-12-31 11:17:11 ----D---- C:\ProgramData\ProductData
2013-12-30 19:39:13 ----D---- C:\Windows\Minidump

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHX;AVGIDSHX; C:\Windows\system32\DRIVERS\avgidshx.sys [2013-10-24 147768]
R0 Avglogx;AVG Logging Driver; C:\Windows\system32\DRIVERS\avglogx.sys [2013-10-31 222520]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2013-10-01 102712]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2013-09-10 27448]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\Windows\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R1 Avgdiskx;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiskx.sys [2013-11-05 120600]
R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6x.sys [2013-09-26 47928]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdriverx.sys [2013-11-04 209176]
R1 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\avgidsshimx.sys [2013-09-17 22840]
R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2013-10-31 176952]
R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2013-08-01 193848]
R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx86.sys [2013-11-15 37664]
R1 Tosrfcom;Bluetooth RFCOMM; C:\Windows\System32\Drivers\tosrfcom.sys [2009-07-28 69480]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2013-11-25 409808]
R3 BCM43XX;Ovladač pro bezdrátovou síťovou kartu DW WLAN; C:\Windows\system32\DRIVERS\bcmwl6.sys [2013-11-28 4248128]
R3 NWUSBModem;Novatel Wireless USB Modem Driver; C:\Windows\system32\DRIVERS\nwusbmdm.sys [2005-10-19 77056]
R3 NWUSBPort;Novatel Wireless USB Status Port Driver; C:\Windows\system32\DRIVERS\nwusbser.sys [2005-10-19 77056]
R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
R3 tosporte;Bluetooth COM Port; C:\Windows\system32\DRIVERS\tosporte.sys [2009-06-17 46984]
R3 Tosrfusb;Bluetooth USB Controller; C:\Windows\system32\DRIVERS\tosrfusb.sys [2009-07-28 49016]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
R3 WinUsb;Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\Windows\System32\drivers\sfdrv01.sys [2005-08-10 50688]
S0 sfsync03;StarForce Protection Synchronization Driver (version 3.x); C:\Windows\System32\drivers\sfsync03.sys [2005-12-06 35328]
S0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\Windows\System32\drivers\sfvfs02.sys [2005-11-03 63488]
S2 mdmxsdk;mdmxsdk; C:\Windows\system32\drivers\mdmxsdk.sys []
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S2 SVKP;SVKP; C:\Windows\system32\drivers\SVKP.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 ATP;Comodo Unite Miniport Driver; C:\Windows\system32\drivers\ATP.sys []
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 BTMCOM;Bluetooth Serial Port; C:\Windows\System32\Drivers\btmcom.sys [2010-11-30 41344]
S3 BTMUSB;Motorola Bluetooth Radio Service; C:\Windows\System32\Drivers\btmusb.sys [2010-11-30 402432]
S3 catchme;catchme; C:\Windows\system32\drivers\catchme.sys []
S3 EagleXNt;EagleXNt; C:\Windows\system32\drivers\EagleXNt.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
S3 HSPADataCardusbmdm;HSPADataCard Proprietary USB Driver; C:\Windows\system32\drivers\HSPADataCardusbmdm.sys []
S3 HSPADataCardusbnmea;HSPADataCard NMEA Port; C:\Windows\system32\drivers\HSPADataCardusbnmea.sys []
S3 HSPADataCardusbser;HSPADataCard Diagnostic Port; C:\Windows\system32\drivers\HSPADataCardusbser.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2009-09-10 102912]
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\Windows\system32\DRIVERS\ewusbdev.sys [2009-10-12 101120]
S3 LgBttPort;LGE Bluetooth TransPort; C:\Windows\system32\drivers\LgBttPort.sys []
S3 lgbusenum;LG Bluetooth Bus Enumerator; C:\Windows\system32\drivers\lgbusenum.sys []
S3 LGVMODEM;LGE Virtual Modem; C:\Windows\system32\drivers\LGVMODEM.sys []
S3 massfilter;Mass Storage Filter Driver; C:\Windows\system32\drivers\massfilter.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 8192]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 sony_ssm.sys;sony_ssm.sys; C:\Windows\system32\drivers\sony_ssm.sys.sys []
S3 tosrfbd;Bluetooth RFBUS; C:\Windows\system32\DRIVERS\tosrfbd.sys [2009-07-07 168936]
S3 tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys [2009-06-19 42472]
S3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys [2009-06-19 79872]
S3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys [2009-07-24 21608]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 49664]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinRing0_1_2_0;WinRing0_1_2_0; C:\Windows\system32\drivers\WinRing0_1_2_0.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 avgfws;AVG Firewall; C:\Program Files\AVG\AVG2014\avgfws.exe [2013-09-24 1358944]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [2013-11-11 3478544]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [2013-09-24 348008]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files\Motorola\Bluetooth\obexsrv.exe [2010-11-30 508680]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-11-11 664352]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-11-11 414496]
R2 UserAccess7;SecuROM User Access Service (V7); C:\Windows\system32\UAService7.exe [2013-08-08 122880]
R2 vToolbarUpdater17.3.0;vToolbarUpdater17.3.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe [2014-01-09 1771544]
R3 Bluetooth Device Manager;Bluetooth Device Manager; C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe [2010-11-30 3511888]
R3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-07-17 647680]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-14 257416]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-11-26 108032]
S3 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2009-07-30 144752]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-03-01 1343400]
S4 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files\Motorola\Bluetooth\audiosrv.exe [2010-11-30 901384]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 23 led 2014 20:42

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

Ulozte nejlepe na plochu
Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
Probehne vytvoreni zalohy a nasledne prohledavani
Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

KwonPavlis · #3 Příspěvek od **KwonPavlis** » 25 led 2014 11:52

Dobrý den - Log JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Home Premium x86
Ran by MatŘj on so 25.01.2014 at 11:39:41,51
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
Suspicious HKCU\..\Run entries found. Trojan:JS/Medfos.B?

Value Name Type Value Data
========================================================================================
NextLive REG_SZ C:\Windows\system32\rundll32.exe "C:\Users\MatŘj\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\scripthelper.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\viprotocol.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installcore
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2123599516-1565121475-1755823417-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\protocols\handler\viprotocol
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{1BF07C0D-DAA0-401B-A599-4D1DF7A05141}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\Windows\system32\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\MatŘj\appdata\local\{052B6A81-4173-4711-801E-E1680EAA28E2}
Successfully deleted: [Empty Folder] C:\Users\MatŘj\appdata\local\{3996CB84-7D3C-43A1-8AC0-A548EDE55D27}
Successfully deleted: [Empty Folder] C:\Users\MatŘj\appdata\local\{6FBE871E-6261-44DA-8EA2-767DDEA99702}

~~~ Chrome

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google [Blacklisted Policy]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on so 25.01.2014 at 11:43:03,13
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Log ADWCleaner

# AdwCleaner v3.017 - Report created 25/01/2014 at 11:46:03
# Updated 12/01/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : Matěj - MATĚJ-PC
# Running from : C:\Users\Matěj\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : vToolbarUpdater17.3.0

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\Program Files\AVG Secure Search
Folder Deleted : C:\Program Files\Common Files\AVG Secure Search
Folder Deleted : C:\Users\Matěj\AppData\Local\AVG Secure Search
Folder Deleted : C:\Users\Matěj\AppData\Local\genienext
Folder Deleted : C:\Users\Matěj\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Matěj\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\Matěj\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\Matěj\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof

***** [ Shortcuts ] *****

***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\kkfggacklibaabdomphfdpcodjgihgon
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Deleted : HKCU\Software\Classes\pokki
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
Value Deleted : HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel [Homepage]
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\ParetoLogic
Key Deleted : HKCU\Software\UpdateStar
Key Deleted : HKLM\Software\AVG Secure Search
Key Deleted : HKLM\Software\AVG Security Toolbar
Key Deleted : HKLM\Software\ParetoLogic
Key Deleted : HKLM\Software\Speedchecker Limited
Key Deleted : HKLM\Software\Uniblue

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428

-\\ Google Chrome v32.0.1700.76

[ File : C:\Users\Matěj\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [3171 octets] - [25/01/2014 11:45:20]
AdwCleaner[S0].txt - [3180 octets] - [25/01/2014 11:46:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3240 octets] ##########

#4 Příspěvek od **vyosek** » 26 led 2014 03:22

Poprosim o log dle tohoto navodu http://forum.viry.cz/viewtopic.php?f=30&t=133101

KwonPavlis · #5 Příspěvek od **KwonPavlis** » 26 led 2014 10:57

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 26-01-2014 01
Ran by Matěj (administrator) on MATĚJ-PC on 26-01-2014 10:55:13
Running from C:\Users\Matěj\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) ===================

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(IObit) C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe
(Motorola, Inc.) C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
(Sony DADC Austria AG.) C:\Windows\System32\UAService7.exe
(Motorola, Inc.) C:\Program Files\Motorola\Bluetooth\obexsrv.exe
(Macrovision Europe Ltd.) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(AVG) C:\Program Files\AVG\AVG PC Tuneup 2011\BoostSpeed.exe
(IObit) C:\Program Files\IObit\Advanced SystemCare 7\Monitor.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\ItSecMng.exe
() C:\Program Files\Gaming Keyboard\Monitor.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe
(IObit) C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe
() C:\Program Files\Gaming Keyboard\OSD.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ITSecMng] - C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [83336 2009-07-22] (TOSHIBA CORPORATION)
HKLM\...\Run: [nwiz] - C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2602784 2013-11-14] ()
HKLM\...\Run: [VICTORY Gaming Keyboard] - C:\Program Files\Gaming Keyboard\Monitor.exe [270336 2013-04-09] ()
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKCU\...\Run: [ISUSPM Startup] - C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2013-12-14] (InstallShield Software Corporation)
HKCU\...\Run: [Advanced SystemCare 7] - C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe [2285344 2013-12-18] (IObit)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com/?ocid=iehp
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {66AD62A5-2607-4191-AD8F-F250D89B9BE2} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
BHO: ArcPluginIEBHO Class - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome:
=======
CHR HomePage: https://www.youtube.com/user/ViralBrothers
CHR Extension: (Dokumenty Google) - C:\Users\Matěj\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-24]
CHR Extension: (Disk Google) - C:\Users\Matěj\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-24]
CHR Extension: (YouTube) - C:\Users\Matěj\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-24]
CHR Extension: (Vyhledávání Google) - C:\Users\Matěj\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-24]
CHR Extension: (AdBlock) - C:\Users\Matěj\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-24]
CHR Extension: (Peněženka Google) - C:\Users\Matěj\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-24]
CHR Extension: (Gmail) - C:\Users\Matěj\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-24]
CHR HKLM\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASC_GhromePluginFor6.crx [2014-01-24]

========================== Services (Whitelisted) =================

R2 AdvancedSystemCareService7; C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe [881440 2013-12-09] (IObit)
S3 ArcService; C:\Program Files\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-01-21] (Perfect World Entertainment Inc)
R2 avgfws; C:\Program Files\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R3 Bluetooth Device Manager; C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe [3511888 2010-11-30] (Motorola, Inc.)
S4 Bluetooth Media Service; C:\Program Files\Motorola\Bluetooth\audiosrv.exe [901384 2010-11-30] (Motorola, Inc.)
R2 Bluetooth OBEX Service; C:\Program Files\Motorola\Bluetooth\obexsrv.exe [508680 2010-11-30] (Motorola, Inc.)
S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-12-03] (IObit)
R2 UserAccess7; C:\Windows\system32\UAService7.exe [122880 2013-08-08] (Sony DADC Austria AG.)
S2 gupdate; "C:\Program Files\Google\Update\GoogleUpdate.exe" /svc [x]
S3 gupdatem; "C:\Program Files\Google\Update\GoogleUpdate.exe" /medsvc [x]

==================== Drivers (Whitelisted) ====================

S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus.sys [14336 2010-12-07] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag.sys [20736 2010-12-07] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps.sys [20096 2010-12-07] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem.sys [25088 2010-12-07] (LG Electronics Inc.)
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6x.sys [47928 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [209176 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [147768 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22840 2013-09-17] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [37664 2013-11-15] (AVG Technologies)
S3 BTMCOM; C:\Windows\System32\Drivers\btmcom.sys [41344 2010-11-30] (Motorola, Inc.)
S3 BTMUSB; C:\Windows\System32\Drivers\btmusb.sys [402432 2010-11-30] (Motorola, Inc.)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R0 nhcDriverDevice; C:\Windows\System32\drivers\nhcDriver.sys [71680 2014-01-25] (Notebook Hardware Control)
S0 sfsync03; C:\Windows\System32\drivers\sfsync03.sys [35328 2005-12-06] (Protection Technology)
S0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [63488 2005-11-03] (Protection Technology)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 ATP; No ImagePath
S3 catchme; No ImagePath
S3 EagleXNt; No ImagePath
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [198656 2009-10-21] (Huawei Technologies Co., Ltd.)
S3 HSPADataCardusbmdm; No ImagePath
S3 HSPADataCardusbnmea; No ImagePath
S3 HSPADataCardusbser; No ImagePath
S3 LgBttPort; No ImagePath
S3 lgbusenum; No ImagePath
S3 LGVMODEM; No ImagePath
S3 massfilter; No ImagePath
S2 mdmxsdk; No ImagePath
S3 sony_ssm.sys; No ImagePath
S2 SVKP; No ImagePath
S3 WinRing0_1_2_0; No ImagePath

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-01-26 10:55 - 2014-01-26 10:55 - 00010686 _____ C:\Users\Matěj\Desktop\FRST.txt
2014-01-26 10:54 - 2014-01-26 10:54 - 00000000 ____D C:\FRST
2014-01-26 10:53 - 2014-01-26 10:53 - 00000000 _____ C:\Users\Matěj\Desktop\FRSTLauncher.exe
2014-01-26 10:52 - 2014-01-26 10:52 - 01222144 _____ (Farbar) C:\Users\Matěj\Desktop\FRST.exe
2014-01-25 18:01 - 2014-01-26 10:31 - 00000112 _____ C:\Windows\setupact.log
2014-01-25 18:01 - 2014-01-25 18:01 - 00000000 _____ C:\Windows\setuperr.log
2014-01-25 16:05 - 2014-01-25 16:05 - 00000000 ____D C:\Program Files\LG Electronics
2014-01-25 16:05 - 2010-12-07 14:23 - 00025088 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lgandmodem.sys
2014-01-25 16:05 - 2010-12-07 14:23 - 00020736 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lganddiag.sys
2014-01-25 16:05 - 2010-12-07 14:23 - 00020096 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lgandgps.sys
2014-01-25 16:05 - 2010-12-07 14:22 - 00014336 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lgandbus.sys
2014-01-25 15:46 - 2014-01-25 15:46 - 00001154 _____ C:\Users\Public\Desktop\ManageMyMobile.lnk
2014-01-25 15:30 - 2014-01-25 15:46 - 00000000 ____D C:\Program Files\IObit
2014-01-25 15:30 - 2014-01-25 15:39 - 00002162 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2014-01-25 15:30 - 2014-01-25 15:30 - 00001182 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2014-01-25 15:30 - 2014-01-25 15:30 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Apple Computer
2014-01-25 15:29 - 2014-01-25 15:30 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\IObit
2014-01-25 14:26 - 2014-01-25 14:26 - 00000976 _____ C:\Users\Matěj\Desktop\CCleaner.lnk
2014-01-25 14:26 - 2014-01-25 14:26 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-01-25 14:26 - 2014-01-25 14:26 - 00000000 ____D C:\Program Files\CCleaner
2014-01-25 12:11 - 2014-01-25 12:11 - 00107848 _____ C:\Users\Matěj\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-25 12:11 - 2014-01-25 12:11 - 00071680 _____ (Notebook Hardware Control) C:\Windows\system32\Drivers\nhcDriver.sys
2014-01-25 12:11 - 2014-01-25 12:11 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Notebook Hardware Control
2014-01-25 11:39 - 2014-01-25 11:39 - 00000000 ____D C:\Windows\ERUNT
2014-01-24 18:17 - 2014-01-24 18:17 - 00002136 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-24 18:16 - 2014-01-25 15:44 - 00000000 ____D C:\Program Files\Google
2014-01-23 19:42 - 2014-01-23 19:55 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Arc
2014-01-23 19:40 - 2014-01-23 19:40 - 00001804 _____ C:\Users\Public\Desktop\Arc.lnk
2014-01-23 19:40 - 2014-01-23 19:40 - 00000000 ____D C:\Program Files\Perfect World Entertainment
2014-01-23 19:04 - 2014-01-23 19:06 - 00000000 ____D C:\Program Files\trend micro
2014-01-23 19:04 - 2014-01-23 19:04 - 00000000 ____D C:\rsit
2014-01-23 18:26 - 2014-01-23 18:27 - 00409736 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-22 17:47 - 2014-01-22 17:47 - 00001128 _____ C:\Users\Matěj\Desktop\Bluetooth Assistant.lnk
2014-01-22 16:39 - 2014-01-22 16:39 - 00000359 _____ C:\Users\Matěj\Desktop\Počítač.lnk
2014-01-21 19:15 - 2014-01-22 17:47 - 00000982 _____ C:\Users\Matěj\Desktop\Bluetooth Information Exchanger.lnk
2014-01-21 17:22 - 2014-01-21 17:22 - 00000020 _____ C:\Windows\dúF
2014-01-21 17:15 - 2014-01-21 17:15 - 00000000 ____D C:\Program Files\Microsoft SkyDrive
2014-01-21 16:55 - 2014-01-23 18:41 - 00000000 ____D C:\Users\Matěj\AppData\Local\Flvto Youtube Downloader
2014-01-18 18:59 - 2014-01-18 19:06 - 00000384 _____ C:\Windows\ODBC.INI
2014-01-18 18:58 - 2014-01-18 18:58 - 00000000 ____D C:\Windows\Msagent
2014-01-18 18:02 - 2014-01-18 18:03 - 00069632 _____ C:\Windows\uinst001.exe
2014-01-15 15:37 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 15:37 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 15:37 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 15:37 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 15:37 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 15:37 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 15:37 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 15:37 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 15:37 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 16:27 - 2014-01-14 16:27 - 00000000 ____D C:\Program Files\Microsoft SDKs
2014-01-14 16:26 - 2014-01-14 16:26 - 00000000 ____D C:\Windows\PCHEALTH
2014-01-14 16:19 - 2013-12-03 18:56 - 00001645 ____S C:\Windows\system32\msrllk.vbe
2014-01-14 16:18 - 2013-12-10 22:25 - 00001645 ____S C:\Windows\system32\mssqcn.vbe
2014-01-14 16:18 - 2013-08-11 15:40 - 00043520 ____S (NirSoft) C:\Windows\system32\nircmdc.exe
2014-01-03 16:09 - 2014-01-03 16:09 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\AVG2014
2014-01-03 16:08 - 2014-01-03 16:08 - 00000954 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-03 16:07 - 2014-01-03 16:07 - 00000000 ___HD C:\$AVG
2014-01-03 15:59 - 2014-01-03 16:18 - 00000000 ____D C:\Users\Matěj\AppData\Local\Avg2014
2014-01-03 15:59 - 2014-01-03 15:59 - 00000512 _____ C:\Windows\system32\F39D4DE6-98B8-4E05-91BD-549E8A8248BD
2014-01-03 15:59 - 2014-01-03 15:59 - 00000000 _____ C:\Windows\system32\F39D4DE6-98B8-4E05-91BD-549E8A8248BD.tmp
2014-01-03 11:52 - 2014-01-03 15:27 - 00000000 ____D C:\Users\Matěj\AppData\Local\Opera Software
2014-01-03 11:06 - 2014-01-03 15:59 - 00000180 _____ C:\Windows\system32\config\afw_hm.conf
2014-01-03 11:06 - 2014-01-03 15:59 - 00000004 _____ C:\Windows\system32\config\afw_db.conf
2014-01-02 20:07 - 2014-01-02 20:07 - 00000000 ____D C:\ProgramData\Package Cache
2014-01-02 19:05 - 2014-01-03 14:48 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\AVG

==================== One Month Modified Files and Folders =======

2014-01-26 10:55 - 2014-01-26 10:55 - 00010686 _____ C:\Users\Matěj\Desktop\FRST.txt
2014-01-26 10:54 - 2014-01-26 10:54 - 00000000 ____D C:\FRST
2014-01-26 10:53 - 2014-01-26 10:53 - 00000000 _____ C:\Users\Matěj\Desktop\FRSTLauncher.exe
2014-01-26 10:53 - 2013-08-30 11:02 - 00000000 ___RD C:\Users\Matěj\s
2014-01-26 10:53 - 2013-07-04 15:23 - 00000000 ____D C:\Users\Matěj\AppData\Local\CrashDumps
2014-01-26 10:52 - 2014-01-26 10:52 - 01222144 _____ (Farbar) C:\Users\Matěj\Desktop\FRST.exe
2014-01-26 10:44 - 2013-07-23 17:59 - 00000000 ____D C:\ProgramData\MFAData
2014-01-26 10:38 - 2009-07-14 05:34 - 00057152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-26 10:38 - 2009-07-14 05:34 - 00057152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-26 10:33 - 2013-11-24 16:15 - 01800832 _____ C:\Windows\WindowsUpdate.log
2014-01-26 10:31 - 2014-01-25 18:01 - 00000112 _____ C:\Windows\setupact.log
2014-01-26 10:31 - 2013-08-04 16:32 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2014-01-26 10:31 - 2013-07-23 10:38 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-26 10:31 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-25 20:18 - 2013-12-14 14:08 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-25 18:01 - 2014-01-25 18:01 - 00000000 _____ C:\Windows\setuperr.log
2014-01-25 16:51 - 2013-07-14 11:04 - 00000000 ____D C:\Windows\Minidump
2014-01-25 16:44 - 2013-02-26 16:01 - 01923654 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-25 16:05 - 2014-01-25 16:05 - 00000000 ____D C:\Program Files\LG Electronics
2014-01-25 15:46 - 2014-01-25 15:46 - 00001154 _____ C:\Users\Public\Desktop\ManageMyMobile.lnk
2014-01-25 15:46 - 2014-01-25 15:30 - 00000000 ____D C:\Program Files\IObit
2014-01-25 15:46 - 2013-11-23 17:46 - 00000000 ____D C:\ProgramData\ProductData
2014-01-25 15:46 - 2013-11-01 12:31 - 00000000 ____D C:\ProgramData\IObit
2014-01-25 15:44 - 2014-01-24 18:16 - 00000000 ____D C:\Program Files\Google
2014-01-25 15:44 - 2013-10-15 16:46 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-25 15:44 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files (x86)
2014-01-25 15:44 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2014-01-25 15:39 - 2014-01-25 15:30 - 00002162 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2014-01-25 15:35 - 2013-11-26 16:09 - 30007296 _____ C:\Windows\system32\config\components.iobit
2014-01-25 15:35 - 2013-11-23 17:57 - 01536000 _____ C:\Windows\system32\config\default.iobit
2014-01-25 15:35 - 2013-11-23 17:57 - 00094208 _____ C:\Windows\system32\config\sam.iobit
2014-01-25 15:35 - 2013-11-23 17:57 - 00028672 _____ C:\Windows\system32\config\security.iobit
2014-01-25 15:35 - 2013-11-01 12:42 - 46776320 _____ C:\Windows\system32\config\software.iobit
2014-01-25 15:35 - 2013-02-26 16:21 - 00000000 ____D C:\Users\Matěj
2014-01-25 15:30 - 2014-01-25 15:30 - 00001182 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2014-01-25 15:30 - 2014-01-25 15:30 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Apple Computer
2014-01-25 15:30 - 2014-01-25 15:29 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\IObit
2014-01-25 14:26 - 2014-01-25 14:26 - 00000976 _____ C:\Users\Matěj\Desktop\CCleaner.lnk
2014-01-25 14:26 - 2014-01-25 14:26 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-01-25 14:26 - 2014-01-25 14:26 - 00000000 ____D C:\Program Files\CCleaner
2014-01-25 12:11 - 2014-01-25 12:11 - 00107848 _____ C:\Users\Matěj\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-25 12:11 - 2014-01-25 12:11 - 00071680 _____ (Notebook Hardware Control) C:\Windows\system32\Drivers\nhcDriver.sys
2014-01-25 12:11 - 2014-01-25 12:11 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Notebook Hardware Control
2014-01-25 11:39 - 2014-01-25 11:39 - 00000000 ____D C:\Windows\ERUNT
2014-01-24 18:19 - 2013-02-26 16:48 - 00000000 ____D C:\Users\Matěj\AppData\Local\Google
2014-01-24 18:17 - 2014-01-24 18:17 - 00002136 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-23 19:55 - 2014-01-23 19:42 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Arc
2014-01-23 19:40 - 2014-01-23 19:40 - 00001804 _____ C:\Users\Public\Desktop\Arc.lnk
2014-01-23 19:40 - 2014-01-23 19:40 - 00000000 ____D C:\Program Files\Perfect World Entertainment
2014-01-23 19:40 - 2013-03-05 18:43 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2014-01-23 19:06 - 2014-01-23 19:04 - 00000000 ____D C:\Program Files\trend micro
2014-01-23 19:04 - 2014-01-23 19:04 - 00000000 ____D C:\rsit
2014-01-23 18:41 - 2014-01-21 16:55 - 00000000 ____D C:\Users\Matěj\AppData\Local\Flvto Youtube Downloader
2014-01-23 18:35 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2014-01-23 18:27 - 2014-01-23 18:26 - 00409736 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-23 18:24 - 2013-09-18 17:17 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-23 18:24 - 2013-03-02 10:23 - 00000000 ____D C:\Program Files\Microsoft.NET
2014-01-23 18:19 - 2009-07-14 10:19 - 00000000 ____D C:\Windows\ShellNew
2014-01-23 18:19 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\System
2014-01-23 18:19 - 2009-07-14 03:04 - 00000401 _____ C:\Windows\win.ini
2014-01-23 18:14 - 2013-04-08 16:53 - 00000000 ____D C:\ProgramData\Skype
2014-01-22 17:47 - 2014-01-22 17:47 - 00001128 _____ C:\Users\Matěj\Desktop\Bluetooth Assistant.lnk
2014-01-22 17:47 - 2014-01-21 19:15 - 00000982 _____ C:\Users\Matěj\Desktop\Bluetooth Information Exchanger.lnk
2014-01-22 16:39 - 2014-01-22 16:39 - 00000359 _____ C:\Users\Matěj\Desktop\Počítač.lnk
2014-01-21 17:22 - 2014-01-21 17:22 - 00000020 _____ C:\Windows\dúF
2014-01-21 17:15 - 2014-01-21 17:15 - 00000000 ____D C:\Program Files\Microsoft SkyDrive
2014-01-18 19:06 - 2014-01-18 18:59 - 00000384 _____ C:\Windows\ODBC.INI
2014-01-18 19:03 - 2013-09-18 17:17 - 00000000 ____D C:\Users\Matěj\AppData\Local\Microsoft Help
2014-01-18 18:58 - 2014-01-18 18:58 - 00000000 ____D C:\Windows\Msagent
2014-01-18 18:58 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Help
2014-01-18 18:56 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system
2014-01-18 18:26 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public
2014-01-18 18:03 - 2014-01-18 18:02 - 00069632 _____ C:\Windows\uinst001.exe
2014-01-15 16:15 - 2013-07-22 23:07 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 16:14 - 2013-03-02 14:44 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-14 16:27 - 2014-01-14 16:27 - 00000000 ____D C:\Program Files\Microsoft SDKs
2014-01-14 16:26 - 2014-01-14 16:26 - 00000000 ____D C:\Windows\PCHEALTH
2014-01-11 14:01 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2014-01-03 16:18 - 2014-01-03 15:59 - 00000000 ____D C:\Users\Matěj\AppData\Local\Avg2014
2014-01-03 16:09 - 2014-01-03 16:09 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\AVG2014
2014-01-03 16:08 - 2014-01-03 16:08 - 00000954 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-03 16:07 - 2014-01-03 16:07 - 00000000 ___HD C:\$AVG
2014-01-03 16:06 - 2013-11-15 20:34 - 00000000 ____D C:\Program Files\AVG
2014-01-03 15:59 - 2014-01-03 15:59 - 00000512 _____ C:\Windows\system32\F39D4DE6-98B8-4E05-91BD-549E8A8248BD
2014-01-03 15:59 - 2014-01-03 15:59 - 00000000 _____ C:\Windows\system32\F39D4DE6-98B8-4E05-91BD-549E8A8248BD.tmp
2014-01-03 15:59 - 2014-01-03 11:06 - 00000180 _____ C:\Windows\system32\config\afw_hm.conf
2014-01-03 15:59 - 2014-01-03 11:06 - 00000004 _____ C:\Windows\system32\config\afw_db.conf
2014-01-03 15:59 - 2013-12-14 14:13 - 00000000 ____D C:\Users\wangzhisong
2014-01-03 15:59 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default
2014-01-03 15:27 - 2014-01-03 11:52 - 00000000 ____D C:\Users\Matěj\AppData\Local\Opera Software
2014-01-03 14:48 - 2014-01-02 19:05 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\AVG
2014-01-02 20:07 - 2014-01-02 20:07 - 00000000 ____D C:\ProgramData\Package Cache
2013-12-27 14:51 - 2013-11-11 14:25 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2014-01-19 19:37

==================== End Of Log ============================

#6 Příspěvek od **vyosek** » 27 led 2014 20:15

Odinstalujte Advanced SystemCare a nasledne i vse od IOBit - jsou to cinske smejdy a spise jen skodi nez jsou uzitkem. Hledaji nesmyslne a neexistujici problemy, databazi haveti ukradli jine renomovane spolecnosti

Trvate na antiviru AVG - u nas neni moc obliben - vysoka zatez systemu, slabsi detekce

KwonPavlis · #7 Příspěvek od **KwonPavlis** » 28 led 2014 16:46

Advanced SystemCare se nějak nechce odinstalovat, odinstalátor ve složce nefunguje

Jaký AntiVirus by jste doporučoval ?

KwonPavlis · #8 Příspěvek od **KwonPavlis** » 28 led 2014 18:43

ASC 7.1 Pro - Odinstaloval jsem ho pomocí programu Total Uninstall..ASC už nikdy více, děkuji za upozornění že je to "čínský šmejd"

#9 Příspěvek od **vyosek** » 28 led 2014 21:23

Antivir doporucuji Avast Free nbo treba Bitdefender free

Poprosim o novy log z FRST

KwonPavlis · #10 Příspěvek od **KwonPavlis** » 29 led 2014 06:52

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-01-2014
Ran by Matěj (administrator) on MATĚJ-PC on 29-01-2014 06:48:31
Running from C:\Users\Matěj\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) ===================

(Bitdefender) C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Motorola, Inc.) C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Sony DADC Austria AG.) C:\Windows\System32\UAService7.exe
(Motorola, Inc.) C:\Program Files\Motorola\Bluetooth\obexsrv.exe
(Bitdefender) C:\Program Files\Bitdefender\Antivirus Free Edition\gziface.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Macrovision Europe Ltd.) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
(Bitdefender) C:\Program Files\Bitdefender\Antivirus Free Edition\update.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\ItSecMng.exe
(AVG) C:\Program Files\AVG\AVG PC Tuneup 2011\BoostSpeed.exe
() C:\Program Files\Gaming Keyboard\Monitor.EXE
() C:\Program Files\Gaming Keyboard\OSD.exe
(Glarysoft Ltd) C:\Program Files\Glary Utilities 4\Integrator.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ITSecMng] - C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [83336 2009-07-22] (TOSHIBA CORPORATION)
HKLM\...\Run: [nwiz] - C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2602784 2013-11-14] ()
HKLM\...\Run: [VICTORY Gaming Keyboard] - C:\Program Files\Gaming Keyboard\Monitor.exe [270336 2013-04-09] ()
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKCU\...\Run: [ISUSPM Startup] - C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2013-12-14] (InstallShield Software Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com/?ocid=iehp
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {66AD62A5-2607-4191-AD8F-F250D89B9BE2} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome:
=======
CHR HomePage: https://www.youtube.com/user/ViralBrothers
CHR Extension: (Dokumenty Google) - C:\Users\Matěj\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-24]
CHR Extension: (Disk Google) - C:\Users\Matěj\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-24]
CHR Extension: (YouTube) - C:\Users\Matěj\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-24]
CHR Extension: (Vyhledávání Google) - C:\Users\Matěj\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-24]
CHR Extension: (AdBlock) - C:\Users\Matěj\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-24]
CHR Extension: (Peněženka Google) - C:\Users\Matěj\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-24]
CHR Extension: (Gmail) - C:\Users\Matěj\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-24]

========================== Services (Whitelisted) =================

S3 ArcService; C:\Program Files\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-01-21] (Perfect World Entertainment Inc)
R3 Bluetooth Device Manager; C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe [3511888 2010-11-30] (Motorola, Inc.)
S4 Bluetooth Media Service; C:\Program Files\Motorola\Bluetooth\audiosrv.exe [901384 2010-11-30] (Motorola, Inc.)
R2 Bluetooth OBEX Service; C:\Program Files\Motorola\Bluetooth\obexsrv.exe [508680 2010-11-30] (Motorola, Inc.)
R2 gzserv; C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe [57520 2013-10-23] (Bitdefender)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 UserAccess7; C:\Windows\system32\UAService7.exe [122880 2013-08-08] (Sony DADC Austria AG.)

==================== Drivers (Whitelisted) ====================

S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus.sys [14336 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag.sys [20736 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps.sys [20096 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem.sys [25088 2012-03-02] (LG Electronics Inc.)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [633344 2013-04-17] (BitDefender)
S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [486536 2013-04-17] (BitDefender)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [37664 2013-11-15] (AVG Technologies)
R1 bdfwfpf; C:\Program Files\Bitdefender\Antivirus Free Edition\bdfwfpf.sys [108008 2013-07-02] (Bitdefender SRL)
R1 bdselfpr; C:\Program Files\Bitdefender\Antivirus Free Edition\bdselfpr.sys [135472 2013-07-16] (BitDefender LLC)
R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [14528 2014-01-22] (Glarysoft Ltd)
S3 BTMCOM; C:\Windows\System32\Drivers\btmcom.sys [41344 2010-11-30] (Motorola, Inc.)
S3 BTMUSB; C:\Windows\System32\Drivers\btmusb.sys [402432 2010-11-30] (Motorola, Inc.)
R1 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [164952 2013-04-22] (BitDefender LLC)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R0 nhcDriverDevice; C:\Windows\System32\drivers\nhcDriver.sys [71680 2014-01-25] (Notebook Hardware Control)
S0 sfsync03; C:\Windows\System32\drivers\sfsync03.sys [35328 2005-12-06] (Protection Technology)
S0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [63488 2005-11-03] (Protection Technology)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [355744 2013-05-28] (BitDefender S.R.L.)
S3 androidusb; System32\Drivers\lgandadb.sys [x]
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 ATP; No ImagePath
S3 catchme; No ImagePath
S3 EagleXNt; No ImagePath
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [198656 2009-10-21] (Huawei Technologies Co., Ltd.)
S3 HSPADataCardusbmdm; No ImagePath
S3 HSPADataCardusbnmea; No ImagePath
S3 HSPADataCardusbser; No ImagePath
S3 LgBttPort; No ImagePath
S3 lgbusenum; No ImagePath
S3 LGVMODEM; No ImagePath
S3 massfilter; No ImagePath
S2 mdmxsdk; No ImagePath
S3 sony_ssm.sys; No ImagePath
S2 SVKP; No ImagePath
S3 WinRing0_1_2_0; No ImagePath

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-01-29 06:44 - 2014-01-29 06:44 - 00211461 _____ C:\ProgramData\1390974186.bdinstall.bin
2014-01-29 06:44 - 2014-01-29 06:44 - 00002183 _____ C:\Users\Public\Desktop\Bitdefender Antivirus Free Edition.lnk
2014-01-29 06:43 - 2014-01-29 06:44 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-29 06:43 - 2014-01-29 06:43 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\QuickScan
2014-01-29 06:43 - 2014-01-29 06:43 - 00000000 _____ C:\Windows\system32\Drivers\avchv.sys
2014-01-29 06:43 - 2013-05-28 12:11 - 00355744 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2014-01-29 06:43 - 2013-04-22 13:20 - 00164952 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2014-01-29 06:43 - 2013-04-17 14:59 - 00633344 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys
2014-01-29 06:43 - 2013-04-17 14:59 - 00486536 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys
2014-01-29 06:43 - 2012-11-02 14:17 - 00242504 _____ (BitDefender) C:\Windows\system32\Drivers\SETBEFA.tmp
2014-01-29 06:42 - 2014-01-29 06:42 - 00000000 ____D C:\Users\Matěj\Desktop\FRST-OlderVersion
2014-01-29 06:35 - 2014-01-29 06:45 - 00013032 _____ C:\Windows\WindowsUpdate.log
2014-01-29 06:33 - 2014-01-29 06:33 - 00000586 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-29 06:32 - 2014-01-29 06:46 - 00012596 _____ C:\Windows\PFRO.log
2014-01-29 06:32 - 2014-01-29 06:46 - 00001002 _____ C:\Windows\setupact.log
2014-01-29 06:32 - 2014-01-29 06:32 - 00000000 _____ C:\Windows\setuperr.log
2014-01-28 20:07 - 2014-01-28 20:07 - 00000000 ____D C:\Users\Matěj\AppData\Local\Macromedia
2014-01-28 20:04 - 2014-01-28 20:04 - 00000000 ____D C:\Users\Matěj\AppData\Local\Mozilla
2014-01-28 18:39 - 2014-01-28 18:39 - 00001003 _____ C:\Users\Public\Desktop\Total Uninstall 6.lnk
2014-01-28 18:39 - 2014-01-28 18:39 - 00000000 ____D C:\ProgramData\Martau
2014-01-28 18:39 - 2014-01-28 18:39 - 00000000 ____D C:\Program Files\Total Uninstall 6
2014-01-28 17:00 - 2014-01-28 17:00 - 00001078 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-28 17:00 - 2014-01-28 17:00 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Malwarebytes
2014-01-28 17:00 - 2014-01-28 17:00 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-28 17:00 - 2014-01-28 17:00 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2014-01-28 17:00 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-28 16:27 - 2014-01-28 16:27 - 00000000 ____D C:\ProgramData\Razer
2014-01-27 17:16 - 2014-01-27 17:17 - 00000015 _____ C:\Users\Matěj\Desktop\LG P350 - IMEI.txt
2014-01-27 16:38 - 2014-01-27 17:04 - 00000838 _____ C:\Users\Matěj\Desktop\LGMobile Support Tool.lnk
2014-01-27 16:36 - 2014-01-27 16:43 - 00000000 ____D C:\ProgramData\LGMOBILEAX
2014-01-27 16:32 - 2014-01-27 16:33 - 00000000 ____D C:\Users\Matěj\Desktop\Mobil
2014-01-26 13:35 - 2014-01-26 13:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_lgandadb_01005.Wdf
2014-01-26 13:31 - 2014-01-26 14:09 - 00000000 ____D C:\Users\Matěj\.android
2014-01-26 13:29 - 2014-01-26 13:30 - 00000000 ____D C:\Users\Matěj\Desktop\Písničky
2014-01-26 11:32 - 2014-01-26 11:32 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\ProductData
2014-01-26 11:31 - 2014-01-26 11:31 - 00000976 _____ C:\Users\Public\Desktop\CCleaner.lnk
2014-01-26 11:16 - 2014-01-26 11:16 - 00000000 ____D C:\ProgramData\GlarySoft
2014-01-26 11:10 - 2014-01-29 06:48 - 00000312 _____ C:\Windows\Tasks\GlaryInitialize 4.job
2014-01-26 11:10 - 2014-01-29 06:48 - 00000000 ____D C:\Program Files\Glary Utilities 4
2014-01-26 11:10 - 2014-01-26 11:12 - 00001049 _____ C:\Users\Public\Desktop\Glary Utilities 4.lnk
2014-01-26 11:10 - 2014-01-26 11:10 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\GlarySoft
2014-01-26 11:10 - 2014-01-22 02:16 - 00101664 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe
2014-01-26 11:10 - 2014-01-22 02:09 - 00014528 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\BootDefragDriver.sys
2014-01-26 10:56 - 2014-01-26 10:56 - 00005584 _____ C:\Users\Matěj\Desktop\Addition.zip
2014-01-26 10:55 - 2014-01-29 06:48 - 00008255 _____ C:\Users\Matěj\Desktop\FRST.txt
2014-01-26 10:55 - 2014-01-26 10:56 - 00017477 _____ C:\Users\Matěj\Desktop\Addition.txt
2014-01-26 10:54 - 2014-01-29 06:48 - 00000000 ____D C:\FRST
2014-01-26 10:52 - 2014-01-29 06:42 - 01137152 _____ (Farbar) C:\Users\Matěj\Desktop\FRST.exe
2014-01-25 16:05 - 2014-01-25 16:05 - 00000000 ____D C:\Program Files\LG Electronics
2014-01-25 16:05 - 2012-03-02 09:02 - 00025088 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lgandmodem.sys
2014-01-25 16:05 - 2012-03-02 09:02 - 00020736 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lganddiag.sys
2014-01-25 16:05 - 2012-03-02 09:02 - 00020096 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lgandgps.sys
2014-01-25 16:05 - 2012-03-02 09:02 - 00014336 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lgandbus.sys
2014-01-25 16:05 - 2011-01-13 04:06 - 01419232 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01005.dll
2014-01-25 15:30 - 2014-01-26 11:26 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Apple Computer
2014-01-25 14:26 - 2014-01-26 11:31 - 00000000 ____D C:\Program Files\CCleaner
2014-01-25 14:26 - 2014-01-25 14:26 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-01-25 12:11 - 2014-01-25 12:11 - 00107848 _____ C:\Users\Matěj\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-25 12:11 - 2014-01-25 12:11 - 00071680 _____ (Notebook Hardware Control) C:\Windows\system32\Drivers\nhcDriver.sys
2014-01-25 12:11 - 2014-01-25 12:11 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Notebook Hardware Control
2014-01-25 11:39 - 2014-01-25 11:39 - 00000000 ____D C:\Windows\ERUNT
2014-01-24 18:17 - 2014-01-24 18:17 - 00002136 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-24 18:16 - 2014-01-25 15:44 - 00000000 ____D C:\Program Files\Google
2014-01-23 19:42 - 2014-01-26 11:59 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Arc
2014-01-23 19:40 - 2014-01-26 14:21 - 00000000 ____D C:\Program Files\Perfect World Entertainment
2014-01-23 19:40 - 2014-01-23 19:40 - 00001804 _____ C:\Users\Public\Desktop\Arc.lnk
2014-01-23 19:04 - 2014-01-23 19:06 - 00000000 ____D C:\Program Files\trend micro
2014-01-23 19:04 - 2014-01-23 19:04 - 00000000 ____D C:\rsit
2014-01-23 18:26 - 2014-01-23 18:27 - 00409736 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-22 17:47 - 2014-01-22 17:47 - 00001128 _____ C:\Users\Matěj\Desktop\Bluetooth Assistant.lnk
2014-01-22 16:39 - 2014-01-22 16:39 - 00000359 _____ C:\Users\Matěj\Desktop\Počítač.lnk
2014-01-21 19:15 - 2014-01-22 17:47 - 00000982 _____ C:\Users\Matěj\Desktop\Bluetooth Information Exchanger.lnk
2014-01-21 17:22 - 2014-01-21 17:22 - 00000020 _____ C:\Windows\dúF
2014-01-21 17:15 - 2014-01-21 17:15 - 00000000 ____D C:\Program Files\Microsoft SkyDrive
2014-01-21 16:55 - 2014-01-23 18:41 - 00000000 ____D C:\Users\Matěj\AppData\Local\Flvto Youtube Downloader
2014-01-18 18:59 - 2014-01-18 19:06 - 00000384 _____ C:\Windows\ODBC.INI
2014-01-18 18:58 - 2014-01-18 18:58 - 00000000 ____D C:\Windows\Msagent
2014-01-18 18:02 - 2014-01-18 18:03 - 00069632 _____ C:\Windows\uinst001.exe
2014-01-15 15:37 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 15:37 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 15:37 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 15:37 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 15:37 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 15:37 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 15:37 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 15:37 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 15:37 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 16:26 - 2014-01-14 16:26 - 00000000 ____D C:\Windows\PCHEALTH
2014-01-14 16:18 - 2013-08-11 15:40 - 00043520 ____S (NirSoft) C:\Windows\system32\nircmdc.exe
2014-01-03 15:59 - 2014-01-29 06:42 - 00000000 ____D C:\Users\Matěj\AppData\Local\Avg2014
2014-01-03 15:59 - 2014-01-03 15:59 - 00000512 _____ C:\Windows\system32\F39D4DE6-98B8-4E05-91BD-549E8A8248BD
2014-01-03 15:59 - 2014-01-03 15:59 - 00000000 _____ C:\Windows\system32\F39D4DE6-98B8-4E05-91BD-549E8A8248BD.tmp
2014-01-03 11:06 - 2014-01-03 15:59 - 00000180 _____ C:\Windows\system32\config\afw_hm.conf
2014-01-03 11:06 - 2014-01-03 15:59 - 00000004 _____ C:\Windows\system32\config\afw_db.conf
2014-01-02 20:07 - 2014-01-02 20:07 - 00000000 ____D C:\ProgramData\Package Cache
2014-01-02 19:05 - 2014-01-03 14:48 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\AVG

==================== One Month Modified Files and Folders =======

2014-01-29 06:48 - 2014-01-26 11:10 - 00000312 _____ C:\Windows\Tasks\GlaryInitialize 4.job
2014-01-29 06:48 - 2014-01-26 11:10 - 00000000 ____D C:\Program Files\Glary Utilities 4
2014-01-29 06:48 - 2014-01-26 10:55 - 00008255 _____ C:\Users\Matěj\Desktop\FRST.txt
2014-01-29 06:48 - 2014-01-26 10:54 - 00000000 ____D C:\FRST
2014-01-29 06:46 - 2014-01-29 06:32 - 00012596 _____ C:\Windows\PFRO.log
2014-01-29 06:46 - 2014-01-29 06:32 - 00001002 _____ C:\Windows\setupact.log
2014-01-29 06:46 - 2013-08-04 16:32 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2014-01-29 06:46 - 2013-07-23 10:38 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-29 06:46 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-29 06:45 - 2014-01-29 06:35 - 00013032 _____ C:\Windows\WindowsUpdate.log
2014-01-29 06:45 - 2013-10-15 16:46 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-29 06:45 - 2013-07-23 17:59 - 00000000 ____D C:\ProgramData\MFAData
2014-01-29 06:44 - 2014-01-29 06:44 - 00211461 _____ C:\ProgramData\1390974186.bdinstall.bin
2014-01-29 06:44 - 2014-01-29 06:44 - 00002183 _____ C:\Users\Public\Desktop\Bitdefender Antivirus Free Edition.lnk
2014-01-29 06:44 - 2014-01-29 06:43 - 00000000 ____D C:\Program Files\Bitdefender
2014-01-29 06:43 - 2014-01-29 06:43 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\QuickScan
2014-01-29 06:43 - 2014-01-29 06:43 - 00000000 _____ C:\Windows\system32\Drivers\avchv.sys
2014-01-29 06:42 - 2014-01-29 06:42 - 00000000 ____D C:\Users\Matěj\Desktop\FRST-OlderVersion
2014-01-29 06:42 - 2014-01-26 10:52 - 01137152 _____ (Farbar) C:\Users\Matěj\Desktop\FRST.exe
2014-01-29 06:42 - 2014-01-03 15:59 - 00000000 ____D C:\Users\Matěj\AppData\Local\Avg2014
2014-01-29 06:42 - 2013-11-15 20:34 - 00000000 ____D C:\Program Files\AVG
2014-01-29 06:42 - 2013-08-30 11:02 - 00000000 ___RD C:\Users\Matěj\s
2014-01-29 06:40 - 2009-07-14 05:34 - 00057152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-29 06:40 - 2009-07-14 05:34 - 00057152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-29 06:33 - 2014-01-29 06:33 - 00000586 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-29 06:32 - 2014-01-29 06:32 - 00000000 _____ C:\Windows\setuperr.log
2014-01-28 20:18 - 2013-12-14 14:08 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-28 20:07 - 2014-01-28 20:07 - 00000000 ____D C:\Users\Matěj\AppData\Local\Macromedia
2014-01-28 20:04 - 2014-01-28 20:04 - 00000000 ____D C:\Users\Matěj\AppData\Local\Mozilla
2014-01-28 18:42 - 2013-11-01 12:31 - 00000000 ____D C:\ProgramData\IObit
2014-01-28 18:39 - 2014-01-28 18:39 - 00001003 _____ C:\Users\Public\Desktop\Total Uninstall 6.lnk
2014-01-28 18:39 - 2014-01-28 18:39 - 00000000 ____D C:\ProgramData\Martau
2014-01-28 18:39 - 2014-01-28 18:39 - 00000000 ____D C:\Program Files\Total Uninstall 6
2014-01-28 18:39 - 2013-07-04 15:23 - 00000000 ____D C:\Users\Matěj\AppData\Local\CrashDumps
2014-01-28 17:00 - 2014-01-28 17:00 - 00001078 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-28 17:00 - 2014-01-28 17:00 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Malwarebytes
2014-01-28 17:00 - 2014-01-28 17:00 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-28 17:00 - 2014-01-28 17:00 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2014-01-28 16:38 - 2013-11-26 16:09 - 30007296 _____ C:\Windows\system32\config\components.iobit
2014-01-28 16:38 - 2013-11-23 17:57 - 01536000 _____ C:\Windows\system32\config\default.iobit
2014-01-28 16:38 - 2013-11-23 17:57 - 00094208 _____ C:\Windows\system32\config\sam.iobit
2014-01-28 16:38 - 2013-11-23 17:57 - 00028672 _____ C:\Windows\system32\config\security.iobit
2014-01-28 16:38 - 2013-11-01 12:42 - 46776320 _____ C:\Windows\system32\config\software.iobit
2014-01-28 16:38 - 2013-02-26 16:21 - 00000000 ____D C:\Users\Matěj
2014-01-28 16:27 - 2014-01-28 16:27 - 00000000 ____D C:\ProgramData\Razer
2014-01-27 17:17 - 2014-01-27 17:16 - 00000015 _____ C:\Users\Matěj\Desktop\LG P350 - IMEI.txt
2014-01-27 17:04 - 2014-01-27 16:38 - 00000838 _____ C:\Users\Matěj\Desktop\LGMobile Support Tool.lnk
2014-01-27 17:00 - 2013-06-05 08:46 - 00002411 _____ C:\Windows\system32\lgAxconfig.ini
2014-01-27 16:55 - 2013-02-26 16:01 - 01995862 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-27 16:43 - 2014-01-27 16:36 - 00000000 ____D C:\ProgramData\LGMOBILEAX
2014-01-27 16:33 - 2014-01-27 16:32 - 00000000 ____D C:\Users\Matěj\Desktop\Mobil
2014-01-26 14:21 - 2014-01-23 19:40 - 00000000 ____D C:\Program Files\Perfect World Entertainment
2014-01-26 14:09 - 2014-01-26 13:31 - 00000000 ____D C:\Users\Matěj\.android
2014-01-26 13:35 - 2014-01-26 13:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_lgandadb_01005.Wdf
2014-01-26 13:30 - 2014-01-26 13:29 - 00000000 ____D C:\Users\Matěj\Desktop\Písničky
2014-01-26 13:20 - 2013-11-27 17:25 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-01-26 13:20 - 2013-02-28 18:35 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-01-26 11:59 - 2014-01-23 19:42 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Arc
2014-01-26 11:55 - 2013-02-28 18:36 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Adobe
2014-01-26 11:34 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Help
2014-01-26 11:32 - 2014-01-26 11:32 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\ProductData
2014-01-26 11:31 - 2014-01-26 11:31 - 00000976 _____ C:\Users\Public\Desktop\CCleaner.lnk
2014-01-26 11:31 - 2014-01-25 14:26 - 00000000 ____D C:\Program Files\CCleaner
2014-01-26 11:26 - 2014-01-25 15:30 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Apple Computer
2014-01-26 11:26 - 2013-12-14 14:13 - 00000000 ____D C:\Users\wangzhisong
2014-01-26 11:26 - 2013-12-14 14:13 - 00000000 ____D C:\Users\Matěj\AppData\Local\cache
2014-01-26 11:26 - 2013-11-04 17:10 - 00000000 ____D C:\Users\Matěj\AppData\Local\Akamai
2014-01-26 11:26 - 2013-08-06 07:59 - 00000000 ____D C:\Users\Matěj\AppData\Local\Facebook
2014-01-26 11:26 - 2013-03-05 18:43 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2014-01-26 11:26 - 2013-02-26 16:48 - 00000000 ____D C:\Users\Matěj\AppData\Local\Google
2014-01-26 11:26 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default
2014-01-26 11:16 - 2014-01-26 11:16 - 00000000 ____D C:\ProgramData\GlarySoft
2014-01-26 11:12 - 2014-01-26 11:10 - 00001049 _____ C:\Users\Public\Desktop\Glary Utilities 4.lnk
2014-01-26 11:10 - 2014-01-26 11:10 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\GlarySoft
2014-01-26 10:56 - 2014-01-26 10:56 - 00005584 _____ C:\Users\Matěj\Desktop\Addition.zip
2014-01-26 10:56 - 2014-01-26 10:55 - 00017477 _____ C:\Users\Matěj\Desktop\Addition.txt
2014-01-25 16:51 - 2013-07-14 11:04 - 00000000 ____D C:\Windows\Minidump
2014-01-25 16:05 - 2014-01-25 16:05 - 00000000 ____D C:\Program Files\LG Electronics
2014-01-25 15:46 - 2013-11-23 17:46 - 00000000 ____D C:\ProgramData\ProductData
2014-01-25 15:44 - 2014-01-24 18:16 - 00000000 ____D C:\Program Files\Google
2014-01-25 15:44 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files (x86)
2014-01-25 15:44 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2014-01-25 14:26 - 2014-01-25 14:26 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-01-25 12:11 - 2014-01-25 12:11 - 00107848 _____ C:\Users\Matěj\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-25 12:11 - 2014-01-25 12:11 - 00071680 _____ (Notebook Hardware Control) C:\Windows\system32\Drivers\nhcDriver.sys
2014-01-25 12:11 - 2014-01-25 12:11 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\Notebook Hardware Control
2014-01-25 11:39 - 2014-01-25 11:39 - 00000000 ____D C:\Windows\ERUNT
2014-01-24 18:17 - 2014-01-24 18:17 - 00002136 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-23 19:40 - 2014-01-23 19:40 - 00001804 _____ C:\Users\Public\Desktop\Arc.lnk
2014-01-23 19:06 - 2014-01-23 19:04 - 00000000 ____D C:\Program Files\trend micro
2014-01-23 19:04 - 2014-01-23 19:04 - 00000000 ____D C:\rsit
2014-01-23 18:41 - 2014-01-21 16:55 - 00000000 ____D C:\Users\Matěj\AppData\Local\Flvto Youtube Downloader
2014-01-23 18:35 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2014-01-23 18:27 - 2014-01-23 18:26 - 00409736 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-23 18:24 - 2013-09-18 17:17 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-23 18:24 - 2013-03-02 10:23 - 00000000 ____D C:\Program Files\Microsoft.NET
2014-01-23 18:19 - 2009-07-14 10:19 - 00000000 ____D C:\Windows\ShellNew
2014-01-23 18:19 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\System
2014-01-23 18:19 - 2009-07-14 03:04 - 00000401 _____ C:\Windows\win.ini
2014-01-23 18:14 - 2013-04-08 16:53 - 00000000 ____D C:\ProgramData\Skype
2014-01-22 17:47 - 2014-01-22 17:47 - 00001128 _____ C:\Users\Matěj\Desktop\Bluetooth Assistant.lnk
2014-01-22 17:47 - 2014-01-21 19:15 - 00000982 _____ C:\Users\Matěj\Desktop\Bluetooth Information Exchanger.lnk
2014-01-22 16:39 - 2014-01-22 16:39 - 00000359 _____ C:\Users\Matěj\Desktop\Počítač.lnk
2014-01-22 02:16 - 2014-01-26 11:10 - 00101664 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe
2014-01-22 02:09 - 2014-01-26 11:10 - 00014528 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\BootDefragDriver.sys
2014-01-21 17:22 - 2014-01-21 17:22 - 00000020 _____ C:\Windows\dúF
2014-01-21 17:15 - 2014-01-21 17:15 - 00000000 ____D C:\Program Files\Microsoft SkyDrive
2014-01-18 19:06 - 2014-01-18 18:59 - 00000384 _____ C:\Windows\ODBC.INI
2014-01-18 19:03 - 2013-09-18 17:17 - 00000000 ____D C:\Users\Matěj\AppData\Local\Microsoft Help
2014-01-18 18:58 - 2014-01-18 18:58 - 00000000 ____D C:\Windows\Msagent
2014-01-18 18:56 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system
2014-01-18 18:26 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public
2014-01-18 18:03 - 2014-01-18 18:02 - 00069632 _____ C:\Windows\uinst001.exe
2014-01-15 16:15 - 2013-07-22 23:07 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 16:14 - 2013-03-02 14:44 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-14 16:26 - 2014-01-14 16:26 - 00000000 ____D C:\Windows\PCHEALTH
2014-01-11 14:01 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2014-01-03 15:59 - 2014-01-03 15:59 - 00000512 _____ C:\Windows\system32\F39D4DE6-98B8-4E05-91BD-549E8A8248BD
2014-01-03 15:59 - 2014-01-03 15:59 - 00000000 _____ C:\Windows\system32\F39D4DE6-98B8-4E05-91BD-549E8A8248BD.tmp
2014-01-03 15:59 - 2014-01-03 11:06 - 00000180 _____ C:\Windows\system32\config\afw_hm.conf
2014-01-03 15:59 - 2014-01-03 11:06 - 00000004 _____ C:\Windows\system32\config\afw_db.conf
2014-01-03 14:48 - 2014-01-02 19:05 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\AVG
2014-01-02 20:07 - 2014-01-02 20:07 - 00000000 ____D C:\ProgramData\Package Cache

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2014-01-19 19:37

==================== End Of Log ============================

#11 Příspěvek od **vyosek** » 29 led 2014 11:06

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKCU\...\Run: [ISUSPM Startup] - C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2013-12-14] (InstallShield Software Corporation)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com/?ocid=iehp
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {66AD62A5-2607-4191-AD8F-F250D89B9BE2} URL = http://search.yahoo.com/search?fr=chr-g ... =443898&p={searchTerms}

S3 ATP; No ImagePath
S3 catchme; No ImagePath
S3 EagleXNt; No ImagePath
S3 HSPADataCardusbmdm; No ImagePath
S3 HSPADataCardusbnmea; No ImagePath
S3 HSPADataCardusbser; No ImagePath
S3 LgBttPort; No ImagePath
S3 lgbusenum; No ImagePath
S3 LGVMODEM; No ImagePath
S3 massfilter; No ImagePath
S2 mdmxsdk; No ImagePath
S3 sony_ssm.sys; No ImagePath
S2 SVKP; No ImagePath
S3 WinRing0_1_2_0; No ImagePath

2014-01-29 06:42 - 2014-01-29 06:42 - 00000000 ____D C:\Users\Matěj\Desktop\FRST-OlderVersion
2014-01-26 10:56 - 2014-01-26 10:56 - 00005584 _____ C:\Users\Matěj\Desktop\Addition.zip
2014-01-26 10:55 - 2014-01-29 06:48 - 00008255 _____ C:\Users\Matěj\Desktop\FRST.txt
2014-01-26 10:55 - 2014-01-26 10:56 - 00017477 _____ C:\Users\Matěj\Desktop\Addition.txt
2014-01-29 06:45 - 2013-10-15 16:46 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-29 06:45 - 2013-07-23 17:59 - 00000000 ____D C:\ProgramData\MFAData
2014-01-29 06:42 - 2014-01-03 15:59 - 00000000 ____D C:\Users\Matěj\AppData\Local\Avg2014
2014-01-29 06:42 - 2013-11-15 20:34 - 00000000 ____D C:\Program Files\AVG
2014-01-29 06:42 - 2014-01-29 06:42 - 00000000 ____D C:\Users\Matěj\Desktop\FRST-OlderVersion
2014-01-28 18:42 - 2013-11-01 12:31 - 00000000 ____D C:\ProgramData\IObit
2014-01-28 16:38 - 2013-11-26 16:09 - 30007296 _____ C:\Windows\system32\config\components.iobit
2014-01-28 16:38 - 2013-11-23 17:57 - 01536000 _____ C:\Windows\system32\config\default.iobit
2014-01-28 16:38 - 2013-11-23 17:57 - 00094208 _____ C:\Windows\system32\config\sam.iobit
2014-01-28 16:38 - 2013-11-23 17:57 - 00028672 _____ C:\Windows\system32\config\security.iobit
2014-01-28 16:38 - 2013-11-01 12:42 - 46776320 _____ C:\Windows\system32\config\software.iobit
2014-01-03 14:48 - 2014-01-02 19:05 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\AVG

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GlaryInitialize 4.job => C:\Program Files\Glary Utilities 4\Initialize.exe

AlternateDataStreams: C:\ProgramData\TEMP:0B4227B4

Hosts:
CMD: shutdown /r /f /t 2

End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

KwonPavlis · #12 Příspěvek od **KwonPavlis** » 29 led 2014 16:16

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 29-01-2014
Ran by Matěj at 2014-01-29 16:11:36 Run:1
Running from C:\Users\Matěj\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKCU\...\Run: [ISUSPM Startup] - C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2013-12-14] (InstallShield Software Corporation)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com/?ocid=iehp
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {66AD62A5-2607-4191-AD8F-F250D89B9BE2} URL = http://search.yahoo.com/search?fr=chr-g ... =443898&p={searchTerms}

S3 ATP; No ImagePath
S3 catchme; No ImagePath
S3 EagleXNt; No ImagePath
S3 HSPADataCardusbmdm; No ImagePath
S3 HSPADataCardusbnmea; No ImagePath
S3 HSPADataCardusbser; No ImagePath
S3 LgBttPort; No ImagePath
S3 lgbusenum; No ImagePath
S3 LGVMODEM; No ImagePath
S3 massfilter; No ImagePath
S2 mdmxsdk; No ImagePath
S3 sony_ssm.sys; No ImagePath
S2 SVKP; No ImagePath
S3 WinRing0_1_2_0; No ImagePath

2014-01-29 06:42 - 2014-01-29 06:42 - 00000000 ____D C:\Users\Matěj\Desktop\FRST-OlderVersion
2014-01-26 10:56 - 2014-01-26 10:56 - 00005584 _____ C:\Users\Matěj\Desktop\Addition.zip
2014-01-26 10:55 - 2014-01-29 06:48 - 00008255 _____ C:\Users\Matěj\Desktop\FRST.txt
2014-01-26 10:55 - 2014-01-26 10:56 - 00017477 _____ C:\Users\Matěj\Desktop\Addition.txt
2014-01-29 06:45 - 2013-10-15 16:46 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-29 06:45 - 2013-07-23 17:59 - 00000000 ____D C:\ProgramData\MFAData
2014-01-29 06:42 - 2014-01-03 15:59 - 00000000 ____D C:\Users\Matěj\AppData\Local\Avg2014
2014-01-29 06:42 - 2013-11-15 20:34 - 00000000 ____D C:\Program Files\AVG
2014-01-29 06:42 - 2014-01-29 06:42 - 00000000 ____D C:\Users\Matěj\Desktop\FRST-OlderVersion
2014-01-28 18:42 - 2013-11-01 12:31 - 00000000 ____D C:\ProgramData\IObit
2014-01-28 16:38 - 2013-11-26 16:09 - 30007296 _____ C:\Windows\system32\config\components.iobit
2014-01-28 16:38 - 2013-11-23 17:57 - 01536000 _____ C:\Windows\system32\config\default.iobit
2014-01-28 16:38 - 2013-11-23 17:57 - 00094208 _____ C:\Windows\system32\config\sam.iobit
2014-01-28 16:38 - 2013-11-23 17:57 - 00028672 _____ C:\Windows\system32\config\security.iobit
2014-01-28 16:38 - 2013-11-01 12:42 - 46776320 _____ C:\Windows\system32\config\software.iobit
2014-01-03 14:48 - 2014-01-02 19:05 - 00000000 ____D C:\Users\Matěj\AppData\Roaming\AVG

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GlaryInitialize 4.job => C:\Program Files\Glary Utilities 4\Initialize.exe

AlternateDataStreams: C:\ProgramData\TEMP:0B4227B4

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ISUSPM Startup => Value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{66AD62A5-2607-4191-AD8F-F250D89B9BE2} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{66AD62A5-2607-4191-AD8F-F250D89B9BE2} => Key not found.
ATP => Service deleted successfully.
catchme => Service deleted successfully.
EagleXNt => Service deleted successfully.
HSPADataCardusbmdm => Service deleted successfully.
HSPADataCardusbnmea => Service deleted successfully.
HSPADataCardusbser => Service deleted successfully.
LgBttPort => Service deleted successfully.
lgbusenum => Service deleted successfully.
LGVMODEM => Service deleted successfully.
massfilter => Service deleted successfully.
mdmxsdk => Service deleted successfully.
sony_ssm.sys => Service deleted successfully.
SVKP => Service deleted successfully.
WinRing0_1_2_0 => Service deleted successfully.
C:\Users\Matěj\Desktop\FRST-OlderVersion => Moved successfully.
C:\Users\Matěj\Desktop\Addition.zip => Moved successfully.
C:\Users\Matěj\Desktop\FRST.txt => Moved successfully.
C:\Users\Matěj\Desktop\Addition.txt => Moved successfully.
C:\ProgramData\AVG2014 => Moved successfully.
C:\ProgramData\MFAData => Moved successfully.
C:\Users\Matěj\AppData\Local\Avg2014 => Moved successfully.
C:\Program Files\AVG => Moved successfully.
"C:\Users\Matěj\Desktop\FRST-OlderVersion" => File/Directory not found.
C:\ProgramData\IObit => Moved successfully.
C:\Windows\system32\config\components.iobit => Moved successfully.
C:\Windows\system32\config\default.iobit => Moved successfully.
C:\Windows\system32\config\sam.iobit => Moved successfully.
C:\Windows\system32\config\security.iobit => Moved successfully.
C:\Windows\system32\config\software.iobit => Moved successfully.
C:\Users\Matěj\AppData\Roaming\AVG => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\GlaryInitialize 4.job => Moved successfully.
C:\ProgramData\TEMP => ":0B4227B4" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========

========= End of CMD: =========

==== End of Fixlog ====

#13 Příspěvek od **vyosek** » 30 led 2014 08:41

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

KwonPavlis · #14 Příspěvek od **KwonPavlis** » 30 led 2014 08:57

Až budu na Notebooku, provedu

Mohl bych se zeptat, jestli bych se mohl naučit číst logy ?

#15 Příspěvek od **vyosek** » 30 led 2014 13:55

Ja Vam urcite v tom abyste se to naucil branit nebudu, klidne se to ucte.A pak vas rad na foru privitam mezi pomocniky fora

VIRY.CZ

Prohlídka

Prohlídka

Re: Prohlídka

Re: Prohlídka

Re: Prohlídka

Re: Prohlídka

Re: Prohlídka

Re: Prohlídka

Re: Prohlídka

Re: Prohlídka

Re: Prohlídka

Re: Prohlídka

Re: Prohlídka

Re: Prohlídka

Re: Prohlídka

Re: Prohlídka