Prosím o kontrolu logu

Zpráva

Nedo · #1 Příspěvek od **Nedo** » 01 úno 2014 10:45

Prosím o kontrolu, děkuji rádcům fóra...

již jsem zde nebyl nějaký ten pátek, přečetl jsem si návod jak vytvořit log z FRST.... naposledy jsem tady byl s logem HJT, tak jsem to neudělal špatně

Děkuji Vám

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-02-2014 03
Ran by OEM (administrator) on OEM-PC on 01-02-2014 10:38:20
Running from C:\Users\OEM\Desktop
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Software602 a.s.) C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
(ASUSTeK Computer Inc.) C:\Program Files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
(DeviceVM, Inc.) C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
(HP) C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
(ASUSTeK Computer Inc.) C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
(NEC Electronics Corporation) C:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS32.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(DeviceVM, Inc.) C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Windows\vVX3000.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Google Inc.) C:\Users\OEM\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\OEM\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\OEM\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\OEM\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\OEM\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\OEM\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\OEM\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\OEM\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\OEM\AppData\Local\Google\Chrome\Application\chrome.exe
(Google) C:\Users\OEM\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
(Google Inc.) C:\Users\OEM\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\OEM\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(forum.viry.cz) C:\Users\OEM\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HDAudDeck] - C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [1713152 2010-02-10] (VIA)
HKLM\...\Run: [NUSB3MON] - C:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2010-01-22] (NEC Electronics Corporation)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-05-27] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [ATICustomerCare] - C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [311296 2010-03-04] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [BCU] - C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe [411864 2010-03-05] (DeviceVM, Inc.)
HKLM\...\Run: [Cpu Level Up] - C:\Program Files\ASUS\AI Suite\CPU Level UPEx\CpuLevelUp.exe [1177216 2009-12-28] (ASUSTeK Computer Inc.)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [VX3000] - C:\Windows\vVX3000.exe [762736 2010-05-20] (Microsoft Corporation)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [HPUsageTrackingLEDM] - C:\Program Files\HP\HP UT LEDM\bin\hppusg.exe [30264 2009-10-15] (Hewlett-Packard Company)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [LifeCam] - C:\Program Files\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-1811802863-1512063865-990150721-1000\...\Run: [] - [x]
HKU\S-1-5-21-1811802863-1512063865-990150721-1000\...\MountPoints2: {3e28d577-e066-11e0-9bcf-485b39b3b8d1} - E:\DPFMate.exe
HKU\S-1-5-21-1811802863-1512063865-990150721-1000\...\MountPoints2: {3e28d57a-e066-11e0-9bcf-485b39b3b8d1} - E:\DPFMate.exe
HKU\S-1-5-21-1811802863-1512063865-990150721-1000\...\MountPoints2: {efb1e779-2524-11e2-aa33-485b39b3b8d1} - E:\SISetup.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
SearchScopes: HKCU - DefaultScope {38342032-25DF-47D1-9D4D-E2CFB885ED86} URL = http://www.google.cz/search?q={searchTe ... {startPage}
SearchScopes: HKCU - {0ABC2179-E7CE-4d20-BA86-7452523D2737} URL = http://www.google.com/custom?client=pub ... earchTerms}
SearchScopes: HKCU - {38342032-25DF-47D1-9D4D-E2CFB885ED86} URL = http://www.google.cz/search?q={searchTe ... {startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
SearchScopes: HKCU - {71428217-6BB1-4A6F-8808-2B7B19C41065} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
SearchScopes: HKCU - {79CC8CC0-1BAE-4eab-A6D2-30FEF9644D44} URL = http://uk.search.yahoo.com/search?p={se ... &type=EGMB
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\OEM\AppData\Roaming\Mozilla\Firefox\Profiles\93gdzqx3.default
FF SelectedSearchEngine: Obchody MALL.cz
FF Homepage: hxxp://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @software602.cz/602XML Filler - C:\Program Files\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @greentube.com/GreenWebPlayer - C:\Games\GreenWebPlayer\npgreenwebplayer.dll No File
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\OEM\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\OEM\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\OEM\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\OEM\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\OEM\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\OEM\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\OEM\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin ProgramFiles/Appdata: C:\Users\OEM\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\mall-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: DownloadHelper - C:\Users\OEM\AppData\Roaming\Mozilla\Firefox\Profiles\93gdzqx3.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-27]
FF Extension: Adblock Plus - C:\Users\OEM\AppData\Roaming\Mozilla\Firefox\Profiles\93gdzqx3.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-07-26]
FF HKLM\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension [2012-11-02]
FF HKLM\...\Thunderbird\Extensions: [{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}] - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\
FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ []

Chrome:
=======
CHR HomePage: hxxp://www.google.cz/
CHR Plugin: (Shockwave Flash) - C:\Users\OEM\AppData\Local\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\OEM\AppData\Local\Google\Chrome\Application\32.0.1700.102\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\OEM\AppData\Local\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\OEM\AppData\Local\Google\Chrome\Application\32.0.1700.102\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (BitCometAgent) - C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll (BitComet)
CHR Plugin: (GreenWebPlayer) - C:\Games\GreenWebPlayer\npgreenwebplayer.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U7) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.70.10) - C:\Windows\system32\npDeployJava1.dll No File
CHR Plugin: (Software602 Form Filler) - C:\Program Files\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Extension: (SKiD Racer) - C:\Users\OEM\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhoaojooagiaaiidlnfhkkafjpbbnnno [2011-12-25]
CHR Extension: (YouTube) - C:\Users\OEM\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-15]
CHR Extension: (Adblock Plus) - C:\Users\OEM\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2011-08-09]
CHR Extension: (Vyhledávání Google) - C:\Users\OEM\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-15]
CHR Extension: (AdBlock) - C:\Users\OEM\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2011-08-02]
CHR Extension: (Peněženka Google) - C:\Users\OEM\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Gmail) - C:\Users\OEM\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-15]

========================== Services (Whitelisted) =================

R2 602XML Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [84520 2011-03-14] (Software602 a.s.)
R2 AsSysCtrlService; C:\Program Files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [96896 2009-12-28] (ASUSTeK Computer Inc.)
R2 BCUService; C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe [235752 2010-03-05] (DeviceVM, Inc.)
R2 HP LaserJet Service; C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe [136192 2009-10-15] (HP)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [490280 2010-03-25] (Nero AG)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)
S4 POSPerformanceCounters; C:\Program Files\Microsoft Point Of Service\Microsoft.PointOfService.Service.exe [42056 2008-12-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\System32\drivers\AsIO.sys [11296 2009-08-04] ()
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36640 2010-07-26] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [13216 2009-07-16] ()
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [98432 2010-04-27] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14848 2010-04-27] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [123648 2010-04-27] (MCCI Corporation)
S3 ss_bserd; C:\Windows\System32\DRIVERS\ss_bserd.sys [100224 2010-04-27] (MCCI Corporation)
R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1119232 2010-01-11] (VIA Technologies, Inc.)
R3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [172416 2010-11-20] (Microsoft Corporation)
R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [48128 2010-11-20] (Microsoft Corporation)
R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2010-11-20] (Microsoft Corporation)
R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [296064 2010-11-20] (Microsoft Corporation)
S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
S3 lmimirr; system32\DRIVERS\lmimirr.sys [x]
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2010\WNt500x86\Sandra.sys [x]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-02-01 10:38 - 2014-02-01 10:38 - 00018935 _____ () C:\Users\OEM\Desktop\FRST.txt
2014-02-01 10:38 - 2014-02-01 10:38 - 00000000 ____D () C:\FRST
2014-02-01 10:34 - 2014-02-01 10:34 - 00000000 ___RD () C:\Program Files\Skype
2014-02-01 10:34 - 2014-02-01 10:34 - 00000000 ____D () C:\Users\OEM\AppData\Local\Skype
2014-02-01 10:34 - 2014-02-01 10:34 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-02-01 10:24 - 2014-02-01 10:24 - 00112640 _____ (forum.viry.cz) C:\Users\OEM\Desktop\FRSTLauncher.exe
2014-02-01 10:17 - 2014-02-01 10:17 - 00112640 _____ (forum.viry.cz) C:\Users\OEM\Downloads\Nepotvrzeno 117684.crdownload
2014-02-01 10:16 - 2014-02-01 10:16 - 01137152 _____ (Farbar) C:\Users\OEM\Desktop\FRST.exe
2014-02-01 09:18 - 2014-02-01 09:18 - 00001094 _____ () C:\Users\OEM\Desktop\DSLDP1-0001743783-20140201-091837.xml
2014-02-01 09:18 - 2014-02-01 09:18 - 00000918 _____ () C:\Users\OEM\Desktop\DSLDP1-0001743783-20140201-091544-pracovni.xml
2014-01-31 23:05 - 2014-01-31 23:05 - 29704715 _____ () C:\Users\OEM\Downloads\Preliminary design S3-revize 1.zip
2014-01-31 22:20 - 2014-01-31 22:20 - 00000823 _____ () C:\Users\OEM\Desktop\PDSHL1-7061175429-20140131-222010.xml
2014-01-30 12:06 - 2014-01-30 12:06 - 00000721 _____ () C:\Users\OEM\Desktop\DPH-69571406-201312_30.01.2014_Veta.xml
2014-01-30 10:30 - 2014-01-30 10:30 - 01629294 _____ () C:\Users\OEM\Desktop\prilohy_92249.zip
2014-01-29 21:57 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-29 21:56 - 2014-01-29 21:56 - 00005163 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-01-29 21:56 - 2013-12-18 21:10 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-01-29 21:56 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-29 21:56 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-28 12:58 - 2014-01-28 12:58 - 00001263 _____ () C:\Users\OEM\Desktop\DPHEVD_D_29393809-201312_28.01.2014_Veta.xml
2014-01-28 12:57 - 2014-01-28 12:57 - 00000647 _____ () C:\Users\OEM\Desktop\DPHEVD_O_29393809-201312_28.01.2014_Veta.xml
2014-01-28 12:55 - 2014-01-28 12:55 - 00000911 _____ () C:\Users\OEM\Desktop\DPH-29393809-201312_28.01.2014_Veta.xml
2014-01-27 19:29 - 2014-01-27 19:29 - 00915609 _____ () C:\Users\OEM\Desktop\tp.jpeg
2014-01-27 19:26 - 2014-01-27 19:26 - 01039742 _____ () C:\Users\OEM\Desktop\tp1.jpeg
2014-01-27 19:25 - 2014-01-27 19:25 - 00000000 ____D () C:\Users\OEM\Desktop\DAT
2014-01-27 19:02 - 2014-01-27 19:02 - 00000528 _____ () C:\Users\OEM\Desktop\DPHEVD_D_26833476-201312_27.01.2014_Veta.xml
2014-01-27 19:01 - 2014-01-27 19:01 - 00000906 _____ () C:\Users\OEM\Desktop\DPH-26833476-201312_27.01.2014_Veta.xml
2014-01-27 13:27 - 2014-01-27 13:40 - 00000000 ____D () C:\Users\OEM\Desktop\GALAN
2014-01-26 10:40 - 2014-02-01 10:36 - 00000000 ____D () C:\UCTO2014
2014-01-26 10:40 - 2014-01-26 10:40 - 00001625 _____ () C:\Users\OEM\Desktop\ÚČTO 2014.LNK
2014-01-26 10:39 - 2014-01-26 10:39 - 00000000 __RSH () C:\MSDOS.SYS
2014-01-26 10:39 - 2014-01-26 10:39 - 00000000 __RSH () C:\IO.SYS
2014-01-24 11:20 - 2014-01-24 11:20 - 00001951 _____ () C:\Users\Public\Desktop\Ekonomický systém POHODA 2014 Komplet.lnk
2014-01-24 11:19 - 2013-10-04 08:42 - 00147456 _____ (STORMWARE) C:\Windows\system32\bzpdfc.dll
2014-01-24 11:19 - 2013-09-01 11:59 - 01103872 _____ () C:\Windows\system32\CBLCtlsU.ocx
2014-01-24 11:19 - 2013-07-13 11:15 - 00805376 _____ () C:\Windows\system32\EditCtlsU.ocx
2014-01-24 11:19 - 2013-07-12 21:57 - 00539648 _____ () C:\Windows\system32\LblCtlsU.ocx
2014-01-24 11:19 - 2013-04-05 12:55 - 00476160 _____ () C:\Windows\system32\TabStripCtlU.ocx
2014-01-24 11:19 - 2013-03-28 22:13 - 00645632 _____ () C:\Windows\system32\BtnCtlsU.ocx
2014-01-24 11:19 - 2013-03-03 13:37 - 01061888 _____ () C:\Windows\system32\ExLvwU.ocx
2014-01-22 21:07 - 2014-01-22 21:07 - 00000000 ____D () C:\Users\OEM\Desktop\JIRKA
2014-01-15 14:42 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 14:42 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 14:42 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 14:42 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 14:42 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 14:42 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 14:42 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 14:42 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 14:42 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 15:23 - 2014-01-14 15:37 - 00000000 ____D () C:\Users\OEM\Desktop\OSSZ KONTROLA
2014-01-09 09:02 - 2014-01-17 09:41 - 00000000 ____D () C:\Users\OEM\Desktop\DCH KONEC
2014-01-07 10:58 - 2014-01-07 10:58 - 00000000 ____D () C:\Users\OEM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\system32\GPhotos.scr

==================== One Month Modified Files and Folders =======

2014-02-01 10:38 - 2014-02-01 10:38 - 00018935 _____ () C:\Users\OEM\Desktop\FRST.txt
2014-02-01 10:38 - 2014-02-01 10:38 - 00000000 ____D () C:\FRST
2014-02-01 10:36 - 2014-01-26 10:40 - 00000000 ____D () C:\UCTO2014
2014-02-01 10:35 - 2010-08-26 06:06 - 00000000 ____D () C:\Users\OEM\AppData\Roaming\Skype
2014-02-01 10:34 - 2014-02-01 10:34 - 00000000 ___RD () C:\Program Files\Skype
2014-02-01 10:34 - 2014-02-01 10:34 - 00000000 ____D () C:\Users\OEM\AppData\Local\Skype
2014-02-01 10:34 - 2014-02-01 10:34 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-02-01 10:34 - 2010-08-26 06:05 - 00000000 ____D () C:\ProgramData\Skype
2014-02-01 10:33 - 2010-08-30 08:59 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-01 10:32 - 2013-12-26 14:31 - 00127445 _____ () C:\Windows\setupact.log
2014-02-01 10:32 - 2010-08-26 10:46 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR
2014-02-01 10:24 - 2014-02-01 10:24 - 00112640 _____ (forum.viry.cz) C:\Users\OEM\Desktop\FRSTLauncher.exe
2014-02-01 10:17 - 2014-02-01 10:17 - 00112640 _____ (forum.viry.cz) C:\Users\OEM\Downloads\Nepotvrzeno 117684.crdownload
2014-02-01 10:16 - 2014-02-01 10:16 - 01137152 _____ (Farbar) C:\Users\OEM\Desktop\FRST.exe
2014-02-01 10:07 - 2012-05-22 13:56 - 00876544 _____ () C:\Users\OEM\AppData\Roaming\pohoda.sys
2014-02-01 10:02 - 2010-08-20 13:27 - 01584626 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-01 10:00 - 2010-12-23 20:23 - 00000934 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-01 09:58 - 2010-08-27 15:35 - 00001050 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1811802863-1512063865-990150721-1000UA.job
2014-02-01 09:56 - 2012-05-31 06:43 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-01 09:18 - 2014-02-01 09:18 - 00001094 _____ () C:\Users\OEM\Desktop\DSLDP1-0001743783-20140201-091837.xml
2014-02-01 09:18 - 2014-02-01 09:18 - 00000918 _____ () C:\Users\OEM\Desktop\DSLDP1-0001743783-20140201-091544-pracovni.xml
2014-02-01 07:58 - 2010-08-27 15:35 - 00000998 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1811802863-1512063865-990150721-1000Core.job
2014-02-01 07:36 - 2009-07-14 05:34 - 00015040 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-01 07:36 - 2009-07-14 05:34 - 00015040 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-01 07:32 - 2010-08-20 13:20 - 02071981 _____ () C:\Windows\WindowsUpdate.log
2014-02-01 07:28 - 2010-12-23 20:23 - 00000930 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-01 07:28 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-01-31 23:05 - 2014-01-31 23:05 - 29704715 _____ () C:\Users\OEM\Downloads\Preliminary design S3-revize 1.zip
2014-01-31 22:20 - 2014-01-31 22:20 - 00000823 _____ () C:\Users\OEM\Desktop\PDSHL1-7061175429-20140131-222010.xml
2014-01-30 12:06 - 2014-01-30 12:06 - 00000721 _____ () C:\Users\OEM\Desktop\DPH-69571406-201312_30.01.2014_Veta.xml
2014-01-30 10:30 - 2014-01-30 10:30 - 01629294 _____ () C:\Users\OEM\Desktop\prilohy_92249.zip
2014-01-29 22:03 - 2010-12-02 22:31 - 00000000 ____D () C:\Users\OEM\Desktop\KONKURSY
2014-01-29 21:59 - 2013-11-06 17:11 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-29 21:56 - 2014-01-29 21:56 - 00005163 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-01-29 21:56 - 2010-08-26 10:00 - 00000000 ____D () C:\Program Files\Java
2014-01-29 09:44 - 2011-10-18 09:56 - 00000000 ____D () C:\Premier
2014-01-28 12:58 - 2014-01-28 12:58 - 00001263 _____ () C:\Users\OEM\Desktop\DPHEVD_D_29393809-201312_28.01.2014_Veta.xml
2014-01-28 12:57 - 2014-01-28 12:57 - 00000647 _____ () C:\Users\OEM\Desktop\DPHEVD_O_29393809-201312_28.01.2014_Veta.xml
2014-01-28 12:55 - 2014-01-28 12:55 - 00000911 _____ () C:\Users\OEM\Desktop\DPH-29393809-201312_28.01.2014_Veta.xml
2014-01-27 19:29 - 2014-01-27 19:29 - 00915609 _____ () C:\Users\OEM\Desktop\tp.jpeg
2014-01-27 19:26 - 2014-01-27 19:26 - 01039742 _____ () C:\Users\OEM\Desktop\tp1.jpeg
2014-01-27 19:25 - 2014-01-27 19:25 - 00000000 ____D () C:\Users\OEM\Desktop\DAT
2014-01-27 19:24 - 2010-12-02 22:27 - 00000000 ____D () C:\Users\OEM\Desktop\JUPOL
2014-01-27 19:02 - 2014-01-27 19:02 - 00000528 _____ () C:\Users\OEM\Desktop\DPHEVD_D_26833476-201312_27.01.2014_Veta.xml
2014-01-27 19:01 - 2014-01-27 19:01 - 00000906 _____ () C:\Users\OEM\Desktop\DPH-26833476-201312_27.01.2014_Veta.xml
2014-01-27 13:40 - 2014-01-27 13:27 - 00000000 ____D () C:\Users\OEM\Desktop\GALAN
2014-01-27 12:56 - 2012-03-17 18:26 - 00002282 ____H () C:\Users\OEM\Documents\Default.rdp
2014-01-26 14:58 - 2010-08-26 05:46 - 00000000 ____D () C:\Users\OEM\AppData\Roaming\Mozilla
2014-01-26 11:34 - 2011-03-24 10:21 - 00000000 ____D () C:\Users\OEM\Desktop\ZÁLOHA ÚČTA
2014-01-26 10:40 - 2014-01-26 10:40 - 00001625 _____ () C:\Users\OEM\Desktop\ÚČTO 2014.LNK
2014-01-26 10:39 - 2014-01-26 10:39 - 00000000 __RSH () C:\MSDOS.SYS
2014-01-26 10:39 - 2014-01-26 10:39 - 00000000 __RSH () C:\IO.SYS
2014-01-26 00:51 - 2012-12-19 23:21 - 00000000 ____D () C:\Users\OEM\Desktop\MONTEGO
2014-01-26 00:50 - 2013-01-23 09:00 - 00000000 ____D () C:\UCTO2013
2014-01-25 09:46 - 2013-12-29 16:00 - 00000894 _____ () C:\Windows\PFRO.log
2014-01-25 00:54 - 2010-08-20 13:21 - 00000000 ____D () C:\Users\OEM\AppData\Local\VirtualStore
2014-01-24 11:20 - 2014-01-24 11:20 - 00001951 _____ () C:\Users\Public\Desktop\Ekonomický systém POHODA 2014 Komplet.lnk
2014-01-24 11:20 - 2013-10-02 21:29 - 00000000 ____D () C:\Program Files\Common Files\STORMWARE Shared
2014-01-24 08:43 - 2010-10-03 20:49 - 00000000 ____D () C:\Users\OEM\Desktop\BYDLENÍ
2014-01-24 00:27 - 2013-11-08 10:12 - 00028802 _____ () C:\Users\OEM\Desktop\GABY.xlsx
2014-01-22 21:07 - 2014-01-22 21:07 - 00000000 ____D () C:\Users\OEM\Desktop\JIRKA
2014-01-22 19:39 - 2010-09-07 16:14 - 00000000 ____D () C:\Users\OEM\Desktop\RECEPTY
2014-01-20 19:05 - 2010-11-30 08:23 - 00000000 ____D () C:\Users\OEM\Desktop\vtípky
2014-01-19 08:32 - 2010-08-20 13:50 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-17 09:41 - 2014-01-09 09:02 - 00000000 ____D () C:\Users\OEM\Desktop\DCH KONEC
2014-01-16 18:11 - 2013-12-27 01:56 - 00418352 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-15 23:54 - 2013-07-12 21:57 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 23:48 - 2010-08-20 13:47 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-14 15:37 - 2014-01-14 15:23 - 00000000 ____D () C:\Users\OEM\Desktop\OSSZ KONTROLA
2014-01-14 10:23 - 2012-07-12 09:20 - 00000000 ____D () C:\Users\OEM\AppData\Roaming\vlc
2014-01-13 10:37 - 2012-01-08 13:24 - 00000000 ____D () C:\Users\OEM\Desktop\MOJE
2014-01-07 22:33 - 2010-11-30 08:22 - 00000000 ____D () C:\Users\OEM\Desktop\krakonošovo
2014-01-07 10:58 - 2014-01-07 10:58 - 00000000 ____D () C:\Users\OEM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\system32\GPhotos.scr

Some content of TEMP:
====================
C:\Users\OEM\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\OEM\AppData\Local\Temp\vlc-2.1.2-win32.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2014-01-29 09:12

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:465.66 GB) (Free:238.5 GB) NTFS
Drive e: (KINGSTON) (Removable) (Total:14.91 GB) (Free:10.58 GB) FAT32

Available physical RAM: 1527.88 MB
Total physical RAM: 3327.18 MB
Percentage of memory in use: 54%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 984CAF78)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
Disk: 1 (MBR Code: Windows XP) (Size: 15 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=15 GB) - (Type=0C)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1811802863-1512063865-990150721-1000Core.job => C:\Users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1811802863-1512063865-990150721-1000UA.job => C:\Users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\OEM\Desktop" je 59671 MB.

***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
"C:\Users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe" /c [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google+ Auto Backup
"C:\Users\OEM\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper
C:\Program Files\Samsung\Kies\KiesHelper.exe /s [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MDS_Menu
"C:\Program Files\Olympus\ib\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Olympus\ib" UpdateWithCreateOnce "Software\OLYMPUS\ib\1.0" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent
"C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2
C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Olympus ib
"C:\Program Files\Olympus\ib\olycamdetect.exe" /Startup [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Print2PDF Print Monitor
"C:\Program Files\Software602\Print2PDF\Print2PDF.exe" /server [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype
"C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
"C:\Program Files\Common Files\Java\Java Update\jusched.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^OEM^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Update GreenWebPlayer.lnk
C:\Games\GREENW~1\Updater.exe [x]

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000

==================== End Of Log ==============================

#2 Příspěvek od **vyosek** » 01 úno 2014 10:59

Zdravim a pekne dopoledne preji

Vas log se studuje Obrázek

a pracuje se na nem Obrázek

.
Prosim o strpeni! Obrázek

#3 Příspěvek od **vyosek** » 01 úno 2014 11:03

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKLM\...\Run: [BCU] - C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe [411864 2010-03-05] (DeviceVM, Inc.)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-1811802863-1512063865-990150721-1000\...\Run: [] - [x]
HKU\S-1-5-21-1811802863-1512063865-990150721-1000\...\MountPoints2: {3e28d577-e066-11e0-9bcf-485b39b3b8d1} - E:\DPFMate.exe
HKU\S-1-5-21-1811802863-1512063865-990150721-1000\...\MountPoints2: {3e28d57a-e066-11e0-9bcf-485b39b3b8d1} - E:\DPFMate.exe
HKU\S-1-5-21-1811802863-1512063865-990150721-1000\...\MountPoints2: {efb1e779-2524-11e2-aa33-485b39b3b8d1} - E:\SISetup.exe

SearchScopes: HKCU - {71428217-6BB1-4A6F-8808-2B7B19C41065} URL = http://search.yahoo.com/search?fr=chr-g ... =302398&p={searchTerms}
SearchScopes: HKCU - {79CC8CC0-1BAE-4eab-A6D2-30FEF9644D44} URL = http://uk.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=EGMB

DisableService: NAUpdate

S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
S3 lmimirr; system32\DRIVERS\lmimirr.sys [x]
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2010\WNt500x86\Sandra.sys [x]

2014-02-01 10:24 - 2014-02-01 10:24 - 00112640 _____ (forum.viry.cz) C:\Users\OEM\Desktop\FRSTLauncher.exe
2014-02-01 10:17 - 2014-02-01 10:17 - 00112640 _____ (forum.viry.cz) C:\Users\OEM\Downloads\Nepotvrzeno 117684.crdownload

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1811802863-1512063865-990150721-1000Core.job => C:\Users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1811802863-1512063865-990150721-1000UA.job => C:\Users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe

REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google+ Auto Backup" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MDS_Menu" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Olympus ib" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Print2PDF Print Monitor" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^OEM^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Update GreenWebPlayer.lnk" /f


Hosts:
CMD: shutdown /r /f /t 2

End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Nedo · #4 Příspěvek od **Nedo** » 01 úno 2014 11:30

Zde je log po provedení akce:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 01-02-2014 03
Ran by OEM at 2014-02-01 11:22:47 Run:1
Running from C:\Users\OEM\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [BCU] - C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe [411864 2010-03-05] (DeviceVM, Inc.)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-1811802863-1512063865-990150721-1000\...\Run: [] - [x]
HKU\S-1-5-21-1811802863-1512063865-990150721-1000\...\MountPoints2: {3e28d577-e066-11e0-9bcf-485b39b3b8d1} - E:\DPFMate.exe
HKU\S-1-5-21-1811802863-1512063865-990150721-1000\...\MountPoints2: {3e28d57a-e066-11e0-9bcf-485b39b3b8d1} - E:\DPFMate.exe
HKU\S-1-5-21-1811802863-1512063865-990150721-1000\...\MountPoints2: {efb1e779-2524-11e2-aa33-485b39b3b8d1} - E:\SISetup.exe

SearchScopes: HKCU - {71428217-6BB1-4A6F-8808-2B7B19C41065} URL = http://search.yahoo.com/search?fr=chr-g ... =302398&p={searchTerms}
SearchScopes: HKCU - {79CC8CC0-1BAE-4eab-A6D2-30FEF9644D44} URL = http://uk.search.yahoo.com/search?p={se ... &type=EGMB

DisableService: NAUpdate

S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
S3 lmimirr; system32\DRIVERS\lmimirr.sys [x]
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2010\WNt500x86\Sandra.sys [x]

2014-02-01 10:24 - 2014-02-01 10:24 - 00112640 _____ (forum.viry.cz) C:\Users\OEM\Desktop\FRSTLauncher.exe
2014-02-01 10:17 - 2014-02-01 10:17 - 00112640 _____ (forum.viry.cz) C:\Users\OEM\Downloads\Nepotvrzeno 117684.crdownload

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1811802863-1512063865-990150721-1000Core.job => C:\Users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1811802863-1512063865-990150721-1000UA.job => C:\Users\OEM\AppData\Local\Google\Update\GoogleUpdate.exe

REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google+ Auto Backup" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MDS_Menu" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Olympus ib" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Print2PDF Print Monitor" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^OEM^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Update GreenWebPlayer.lnk" /f

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\BCU => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKU\S-1-5-21-1811802863-1512063865-990150721-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3e28d577-e066-11e0-9bcf-485b39b3b8d1} => Key not found.
HKCR\CLSID\{3e28d577-e066-11e0-9bcf-485b39b3b8d1} => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3e28d57a-e066-11e0-9bcf-485b39b3b8d1} => Key not found.
HKCR\CLSID\{3e28d57a-e066-11e0-9bcf-485b39b3b8d1} => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{efb1e779-2524-11e2-aa33-485b39b3b8d1} => Key not found.
HKCR\CLSID\{efb1e779-2524-11e2-aa33-485b39b3b8d1} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{71428217-6BB1-4A6F-8808-2B7B19C41065} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{71428217-6BB1-4A6F-8808-2B7B19C41065} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{79CC8CC0-1BAE-4eab-A6D2-30FEF9644D44} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{79CC8CC0-1BAE-4eab-A6D2-30FEF9644D44} => Key not found.
NAUpdate service was disabled
dgderdrv => Service deleted successfully.
lmimirr => Service deleted successfully.
SANDRA => Service deleted successfully.
C:\Users\OEM\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\OEM\Downloads\Nepotvrzeno 117684.crdownload => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1811802863-1512063865-990150721-1000Core.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1811802863-1512063865-990150721-1000UA.job => Moved successfully.

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google+ Auto Backup" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MDS_Menu" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Olympus ib" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Print2PDF Print Monitor" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^OEM^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Update GreenWebPlayer.lnk" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========

========= End of CMD: =========

==== End of Fixlog ====

#5 Příspěvek od **vyosek** » 01 úno 2014 11:32

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

Nedo · #6 Příspěvek od **Nedo** » 01 úno 2014 11:36

Skvele, moc Vam dekuji za kontrolu.

Uzasna rychlost a perfektni navod na postup, ktery pochopi i analfabet

Klobouk dolu pred Vami

#7 Příspěvek od **vyosek** » 01 úno 2014 11:38

Nemate zac, rad jsem pomohl

Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat

VIRY.CZ

Prosím o kontrolu logu

Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu