prosim o kontrolu - wrapper.z5x.net

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
cica18
Návštěvník
Návštěvník
Příspěvky: 134
Registrován: 12 Bře 2007 17:37

prosim o kontrolu - wrapper.z5x.net

#1 Příspěvek od cica18 »

v chrome mi nabiha samovolne stranka wrapper.z5x.net

diky za pomoc

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01
Ran by Marketa (administrator) on MARKETA-PC on 24-03-2014 23:28:43
Running from C:\Users\Marketa\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\AtService.exe
(AMD) C:\windows\system32\atiesrxx.exe
(AMD) C:\windows\system32\atieclxx.exe
(Hewlett-Packard Company) C:\windows\system32\Hpservice.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ActivIdentity) C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
(Roman Svihalek, ActivityMon Software) C:\Program Files\ActivityMon Software\ActivityMon\svchost.exe
() C:\Program Files\ActivityMon Software\ActivityMon\rundll32.exe
(Andrea Electronics Corporation) C:\windows\system32\AEADISRV.EXE
() C:\Program Files\ActivityMon Software\ActivityMon\actSessionUI32.exe
(Acronis) C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
(Bioscrypt Inc.) C:\Program Files\Hewlett-Packard\IAM\Bin\AsGHost.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Garmin Ltd or its subsidiaries) C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(McAfee, Inc.) C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
(IObit) C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
(PDF Complete Inc) C:\Program Files\PDF Complete\pdfsvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe
(forum.viry.cz) C:\Users\Marketa\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-08-04] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767608 2014-03-22] (AVAST Software)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-03-12] (Hewlett-Packard)
HKU\S-1-5-21-730507215-887370363-3937766701-1001\...\Run: [GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8] - C:\Program Files\Google\Chrome\Application\chrome.exe [859976 2014-03-15] (Google Inc.)
HKU\S-1-5-21-730507215-887370363-3937766701-1001\...\Run: [ShowBatteryBar] - C:\Program Files\BatteryBar\ShowBatteryBar.exe [90624 2013-04-11] ()
AppInit_DLLs: C:\PROGRA~1\HEWLET~1\IAM\Bin\APSHook.dll => C:\Program Files\Hewlett-Packard\IAM\Bin\APSHook.dll [89872 2009-07-23] (Bioscrypt Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {33352078-A858-42E4-A7F6-4231D8370186} URL = http://startsear.ch/?aff=1&src=sp&cf=f4 ... earchTerms}
SearchScopes: HKCU - DefaultScope {3BAE4745-31B5-4D9C-B4A8-139E334CD8A3} URL = http://search.conduit.com/ResultsExt.as ... 84513&UM=2
SearchScopes: HKCU - {33352078-A858-42E4-A7F6-4231D8370186} URL = http://startsear.ch/?aff=1&src=sp&cf=f4 ... earchTerms}
SearchScopes: HKCU - {35D1B90A-EC19-4791-883F-FA59996960D3} URL = http://www.mysearchresults.com/search?& ... earchTerms}
SearchScopes: HKCU - {3BAE4745-31B5-4D9C-B4A8-139E334CD8A3} URL = http://search.conduit.com/ResultsExt.as ... 84513&UM=2
SearchScopes: HKCU - {CC2D3BCA-B2B2-4C1F-B750-DFAEAA32B2C6} URL = http://search.seznam.cz/searchScreen?w= ... rms}&mod=f
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
BHO: PasswordBox Helper - {5DB69B97-934B-451D-94DB-32EF802A01CD} - C:\Program Files\PasswordBox\Application\pbbtn.dll (PasswordBox, Inc.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll (Bioscrypt Inc.)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138 192.168.1.1
Tcpip\..\Interfaces\{080FA4BF-28B2-4E7A-A306-E06364A2E9F9}: [NameServer]217.77.165.81 217.77.161.131
Tcpip\..\Interfaces\{58A95CB5-18F8-4B18-929F-C7A966324B11}: [NameServer]217.77.165.81 217.77.161.131

FireFox:
========
FF Plugin: @garmin.com/GpsControl - C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @playstation.com/PsndlCheck,version=1.00 - C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF Plugin: @real.com/nppl3260;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @veetle.com/veetleCorePlugin,version=0.9.19 - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: uTorrentBar Community Toolbar - \Extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} [2011-09-14]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-04-03]
FF HKLM\...\Firefox\Extensions: [{77BEC163-D389-42c1-91A4-C758846296A5}] - C:\Program Files\Video downloader\Firefox
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-04-03]

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "spdy": {
"servers": [ "plusone.google.com:443", "googleads.g.doubleclick.net:443", "toolbarqueries.google.com:443", "clients2.google.com:443", "apis.google.com:443", "ajax.googleapis.com:443"
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\33.0.1750.154\pdf.dll ()
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak\1.0_0\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Injovo Extension Plugin) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\khldgopgjjapmbkgflpoclebjjmkmbnk\2.0.0.432_0\npbrowserext.dll (Injovo)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll No File
CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Media Go Detector) - C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
CHR Plugin: (PlayStation(R)Network Downloader Check Plug-in) - C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
CHR Plugin: (Veetle TV Player) - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
CHR Plugin: (Veetle TV Core) - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealJukebox NS Plugin) - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
CHR Extension: (Bejeweled) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\adpkifcfcacgmnggcbpbjbkdijciiigm [2013-03-02]
CHR Extension: (Angry Birds) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2013-03-02]
CHR Extension: (TV) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\beobeededemalmllhkmnkinmfembdimh [2013-03-02]
CHR Extension: (FreeHDSport.TV) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnnidmnbdkmhfkjgdnngciimpdgohok [2013-02-20]
CHR Extension: (YouTube) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-25]
CHR Extension: (Adblock Plus) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-02-20]
CHR Extension: (Vyhledávání Google) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-25]
CHR Extension: (TV program) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\eggkgjblbjpigonjpmblphnackhfigbo [2013-03-02]
CHR Extension: (Crimson: Steam Pirates) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\glfbkgkceahodalogdpenjoekbacjfcj [2013-03-02]
CHR Extension: (avast! Online Security) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-03-22]
CHR Extension: (AirMech) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdahlabpinmfcemhcbcfoijcpoalfgdn [2013-03-02]
CHR Extension: (Ultimate Flash Sonic) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmgmfbijldhdncjcipeocgkgbjhaecfp [2013-03-02]
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak [2013-03-08]
CHR Extension: (Video downloader) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\khldgopgjjapmbkgflpoclebjjmkmbnk [2013-01-29]
CHR Extension: (Plants vs Zombies) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmcegpfdgcoclcdfkjahiimlikdpnina [2013-03-02]
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd [2014-02-23]
CHR Extension: (Peněženka Google) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Gmail) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-25]
CHR HKLM\...\Chrome\Extension: [bejbohlohkkgompgecdcbbglkpjfjgdj] - C:\Users\Marketa\AppData\Local\Temp\crx3AEF.tmp [2011-12-25]
CHR HKLM\...\Chrome\Extension: [bgnnidmnbdkmhfkjgdnngciimpdgohok] - C:\Program Files\VipBoxSportsApp.com\stv11.crx [2012-11-10]
CHR HKLM\...\Chrome\Extension: [fdkednngfjmpnljkolbapdednncafhen] - C:\Users\Marketa\AppData\Local\CRE\fdkednngfjmpnljkolbapdednncafhen.crx [2013-06-26]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-10-29]
CHR HKLM\...\Chrome\Extension: [kpionmjnkbpcdpcflammlgllecmejgjj] - C:\Program Files\vShare.tv plugin\vshareplg.crx [2013-10-29]
CHR HKLM\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx [2014-01-15]
CHR HKCU\...\Chrome\Extension: [fdkednngfjmpnljkolbapdednncafhen] - C:\Users\Marketa\AppData\Local\CRE\fdkednngfjmpnljkolbapdednncafhen.crx [2013-06-26]

========================== Services (Whitelisted) =================

R2 ac.sharedstore; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [207400 2009-06-03] (ActivIdentity)
R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [777584 2013-08-21] (Acronis)
R2 ActivityMon2; C:\Program Files\ActivityMon Software\ActivityMon\svchost.exe [80568 2012-10-18] (Roman Svihalek, ActivityMon Software)
R2 afcdpsrv; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [3869688 2013-12-20] (Acronis)
R2 ASBroker; C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll [192784 2009-07-23] (Bioscrypt Inc.)
R2 ASChannel; C:\Program Files\Hewlett-Packard\IAM\Bin\AsChnl.dll [150288 2009-07-23] (Bioscrypt Inc.)
R2 ATService; C:\Program Files\Fingerprint Sensor\AtService.exe [1201400 2009-07-29] (AuthenTec, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-05] (AVAST Software)
R2 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250200 2013-09-19] (Garmin Ltd or its subsidiaries)
R2 HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [124928 2009-07-09] (Hewlett-Packard)
S3 HP ProtectTools Service; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe [45056 2009-07-30] (Hewlett-Packard Development Company, L.P)
R2 HpFkCryptService; C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [256544 2009-07-29] (McAfee, Inc.)
R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)
S3 PasswordBox; C:\Program Files\PasswordBox\pbbtnService.exe [67584 2013-11-01] (PasswordBox, Inc.)
R2 pdfcDispatcher; C:\Program Files\PDF Complete\pdfsvc.exe [635416 2009-06-18] (PDF Complete Inc)
S3 RipCore; C:\Program Files\Fawkes Engineering\AccuRIP\RipCore.exe [2108352 2012-09-20] ()
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
S3 Správce výběru OS; C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe [2156952 2011-12-12] ()
S3 syncagentsrv; C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7149264 2013-10-22] (Acronis)
S3 VmbService; C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [9216 2011-07-14] (Vodafone)
S2 yksvc; C:\windows\System32\yk62x86.dll [364544 2009-09-28] (Marvell)

==================== Drivers (Whitelisted) ====================

R3 5U876UVC; C:\windows\System32\DRIVERS\5U876.sys [118656 2009-06-30] (Ricoh co.,Ltd.)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [67824 2014-02-05] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [79720 2013-10-29] (AVAST Software)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49944 2013-10-29] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [775952 2014-02-05] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [410784 2014-02-05] (AVAST Software)
S3 aswStm; C:\windows\system32\drivers\aswStm.sys [64168 2014-02-05] (AVAST Software)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [180248 2013-12-26] ()
R1 dtsoftbus01; C:\windows\System32\DRIVERS\dtsoftbus01.sys [232512 2011-10-07] (DT Soft Ltd)
S3 FsUsbExDisk; C:\windows\system32\FsUsbExDisk.SYS [36608 2010-06-14] ()
S3 grmnusb; C:\windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)
S3 huawei_cdcacm; C:\windows\System32\DRIVERS\ew_jucdcacm.sys [89856 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 huawei_ext_ctrl; C:\windows\System32\DRIVERS\ew_juextctrl.sys [26624 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 huawei_wwanecm; C:\windows\System32\DRIVERS\ew_juwwanecm.sys [182272 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 MfeAVFK; C:\windows\System32\drivers\MfeAVFK.sys [79816 2009-05-16] (McAfee, Inc.)
S3 MfeBOPK; C:\windows\System32\drivers\MfeBOPK.sys [35272 2009-05-16] (McAfee, Inc.)
R1 mfehidk; C:\windows\System32\drivers\mfehidk.sys [214024 2009-05-16] (McAfee, Inc.)
S3 MfeRKDK; C:\windows\System32\drivers\MfeRKDK.sys [34248 2009-05-16] (McAfee, Inc.)
R1 mfetdik; C:\windows\System32\drivers\mfetdik.sys [55336 2009-05-16] (McAfee, Inc.)
S3 NETw1v32; C:\windows\System32\DRIVERS\NETw1v32.sys [5958656 2009-07-21] (Intel Corporation)
R2 npf; C:\windows\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.)
R1 RsvLock; C:\windows\system32\Drivers\RsvLock.sys [12528 2009-07-29] (SafeBoot International)
R0 SafeBoot; C:\windows\system32\Drivers\SafeBoot.sys [109216 2009-07-29] ()
R0 SbAlg; C:\windows\system32\Drivers\SbAlg.sys [51408 2009-07-29] (SafeBoot N.V.)
R0 SbFsLock; C:\windows\system32\Drivers\SbFsLock.sys [12960 2009-07-29] (SafeBoot International)
R0 sptd; C:\windows\System32\Drivers\sptd.sys [436792 2012-06-05] ()
S3 ss_bbus; C:\windows\System32\DRIVERS\ss_bbus.sys [98432 2010-04-27] (MCCI)
S3 ss_bmdfl; C:\windows\System32\DRIVERS\ss_bmdfl.sys [14848 2010-04-27] (MCCI Corporation)
S3 ss_bmdm; C:\windows\System32\DRIVERS\ss_bmdm.sys [123648 2010-04-27] (MCCI Corporation)
S3 tdrpman; C:\windows\System32\DRIVERS\tdrpman.sys [889888 2013-12-20] (Acronis International GmbH)
R0 tib; C:\windows\System32\DRIVERS\tib.sys [736192 2013-11-08] (Acronis International GmbH)
R0 tib_mounter; C:\windows\System32\DRIVERS\tib_mounter.sys [143648 2013-12-20] (Acronis International GmbH)
R0 vididr; C:\windows\System32\DRIVERS\vididr.sys [116000 2013-11-08] (Acronis International GmbH)
R0 vidsflt; C:\windows\System32\DRIVERS\vidsflt.sys [85280 2013-11-08] (Acronis International GmbH)
R3 yukonw7; C:\windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Marketa\AppData\Local\Temp\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S0 SmartDefragDriver; System32\Drivers\SmartDefragDriver.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-24 23:28 - 2014-03-24 23:28 - 00027290 _____ () C:\Users\Marketa\Desktop\FRST.txt
2014-03-24 23:25 - 2014-03-24 23:25 - 00000000 ____D () C:\FRST
2014-03-24 23:23 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\FRSTLauncher.exe
2014-03-24 23:23 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\FRSTLauncher.exe
2014-03-24 23:21 - 2014-03-24 23:21 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\Nepotvrzeno 191337.crdownload
2014-03-24 23:20 - 2014-03-24 23:20 - 01145856 _____ (Farbar) C:\Users\Marketa\Desktop\FRST.exe
2014-03-24 23:20 - 2014-03-24 23:20 - 00085784 _____ () C:\Users\Marketa\Downloads\trzFC12.tmp
2014-03-24 23:15 - 2014-03-24 23:15 - 10904816 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner.exe
2014-03-24 23:09 - 2014-03-24 23:09 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar (4).exe
2014-03-23 21:39 - 2014-03-23 21:45 - 00000000 ____D () C:\Users\Marketa\Downloads\47.Ronin.2013.WEBRip.x264.AC3-FooKaS
2014-03-23 21:38 - 2014-03-23 21:38 - 00018585 _____ () C:\Users\Marketa\Downloads\[CzT]47_roninu_47_Ronin_2013_WebRip_.torrent
2014-03-23 21:04 - 2014-03-23 21:04 - 00035301 _____ () C:\Users\Marketa\Downloads\[CzT]Trosecnik_Cast_Away_2000_1080p_.torrent
2014-03-22 22:57 - 2014-03-22 22:58 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar (3).exe
2014-03-22 12:56 - 2014-03-22 12:56 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar (2).exe
2014-03-20 23:14 - 2014-03-20 23:32 - 1554069504 _____ () C:\Users\Marketa\Downloads\Thor.The.Dark.World.2013.480p.BRRip.XviD.AC3.CZ.avi
2014-03-20 23:14 - 2014-03-20 23:14 - 00015415 _____ () C:\Users\Marketa\Downloads\[CzT]Thor_Temny_svet_Thor_The_Dark_World_2013_CZ_.torrent
2014-03-20 23:05 - 2014-03-20 23:06 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar (1).exe
2014-03-16 15:23 - 2014-03-16 15:24 - 00000000 ____D () C:\Users\Marketa\Desktop\Masopust Vraclav březen 2014
2014-03-15 07:15 - 2014-03-15 07:15 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar.exe
2014-03-14 20:12 - 2014-03-14 20:12 - 00000000 ____D () C:\windows\Tasks\ImCleanDisabled
2014-03-14 06:45 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-03-14 06:45 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-03-14 06:45 - 2014-03-01 05:10 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-03-14 06:45 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-03-14 06:45 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-03-14 06:45 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-03-14 06:45 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-03-14 06:45 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-03-14 06:45 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-03-14 06:45 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-03-14 06:45 - 2014-03-01 04:38 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-03-14 06:45 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-03-14 06:45 - 2014-03-01 04:31 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-03-14 06:45 - 2014-03-01 04:25 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-03-14 06:45 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-03-14 06:45 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-03-14 06:45 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-03-14 06:45 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-03-14 06:45 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-03-14 06:45 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-03-14 06:45 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-03-14 06:45 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-03-14 06:45 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-03-14 06:44 - 2014-02-07 02:07 - 02349056 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-03-14 06:44 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2014-03-14 06:44 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2014-03-14 06:44 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2014-03-11 10:58 - 2014-03-11 10:58 - 00000000 ____D () C:\Users\Marketa\Documents\GomPlayer
2014-03-11 10:57 - 2014-03-11 10:57 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\GRETECH
2014-03-11 10:57 - 2014-03-11 10:57 - 00000000 ____D () C:\Program Files\GRETECH
2014-03-11 10:28 - 2014-03-11 10:58 - 00000000 ____D () C:\Users\Marketa\Desktop\DVD Radost ze zdravych deti
2014-03-07 21:21 - 2014-03-24 23:02 - 00008586 _____ () C:\windows\setupact.log
2014-03-07 21:21 - 2014-03-11 15:24 - 00000982 _____ () C:\windows\PFRO.log
2014-03-07 21:21 - 2014-03-07 21:21 - 00000000 _____ () C:\windows\setuperr.log
2014-03-05 10:04 - 2014-03-05 10:04 - 43634688 _____ () C:\windows\system32\config\COMPONENTS.iobit
2014-03-05 07:32 - 2014-03-07 21:56 - 00000000 ____D () C:\Users\Marketa\Desktop\Masky
2014-03-02 20:18 - 2014-03-02 20:55 - 2653429760 _____ () C:\Users\Marketa\Downloads\Strom života.avi
2014-03-02 19:58 - 2014-03-02 20:13 - 00000000 ____D () C:\Users\Marketa\Downloads\12 Years a Slave (2013) DVDRip XviD-MAXSPEED
2014-03-02 19:07 - 2014-03-02 20:54 - 00000000 ____D () C:\Users\Marketa\Downloads\Hwayi
2014-03-02 18:04 - 2014-03-02 18:06 - 00000000 ____D () C:\Users\Marketa\Downloads\Jen pockej, zajici!
2014-03-02 17:59 - 2014-03-02 17:59 - 00013615 _____ () C:\Users\Marketa\Desktop\nhc – zástupce.lnk
2014-03-02 17:39 - 2014-03-02 17:46 - 919937384 _____ () C:\Users\Marketa\Downloads\Babovresky (2013).avi
2014-03-02 17:38 - 2014-03-02 18:08 - 2560399726 _____ () C:\Users\Marketa\Downloads\Bláznivá, zatracená láska - CZ (2011).avi
2014-03-01 12:10 - 2014-03-01 12:10 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DreamWorks
2014-03-01 12:10 - 2014-03-01 12:10 - 00000000 ____D () C:\Program Files\DreamWorks Interactive
2014-03-01 08:17 - 2014-03-01 12:14 - 00000000 ____D () C:\Users\Marketa\Downloads\The Neverhood
2014-02-22 11:47 - 2014-02-22 11:52 - 73892478 _____ () C:\Users\Marketa\Downloads\Eso-hity--2001-☼.rar
2014-02-22 11:38 - 2014-02-22 11:47 - 106301416 _____ () C:\Users\Marketa\Downloads\Největší-hity.rar
2014-02-22 11:00 - 2014-02-22 11:12 - 227341952 _____ () C:\Users\Marketa\Downloads\Hity-2012-2013(hits).rar

==================== One Month Modified Files and Folders =======

2014-03-24 23:29 - 2013-01-28 22:49 - 00000000 ____D () C:\ProgramData\ActivityMon
2014-03-24 23:28 - 2014-03-24 23:28 - 00027290 _____ () C:\Users\Marketa\Desktop\FRST.txt
2014-03-24 23:25 - 2014-03-24 23:25 - 00000000 ____D () C:\FRST
2014-03-24 23:23 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\FRSTLauncher.exe
2014-03-24 23:23 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\FRSTLauncher.exe
2014-03-24 23:21 - 2014-03-24 23:21 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\Nepotvrzeno 191337.crdownload
2014-03-24 23:20 - 2014-03-24 23:20 - 01145856 _____ (Farbar) C:\Users\Marketa\Desktop\FRST.exe
2014-03-24 23:20 - 2014-03-24 23:20 - 00085784 _____ () C:\Users\Marketa\Downloads\trzFC12.tmp
2014-03-24 23:17 - 2013-10-24 12:22 - 00000328 _____ () C:\windows\Tasks\HP Photo Creations Communicator.job
2014-03-24 23:15 - 2014-03-24 23:15 - 10904816 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner.exe
2014-03-24 23:09 - 2014-03-24 23:09 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar (4).exe
2014-03-24 23:03 - 2013-07-26 20:31 - 01665803 _____ () C:\windows\WindowsUpdate.log
2014-03-24 23:03 - 2013-07-12 11:27 - 00000940 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-24 23:02 - 2014-03-07 21:21 - 00008586 _____ () C:\windows\setupact.log
2014-03-24 20:23 - 2009-07-14 05:34 - 00019760 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-24 20:23 - 2009-07-14 05:34 - 00019760 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-24 20:15 - 2013-07-12 11:27 - 00000936 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-24 20:15 - 2009-07-14 05:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-03-24 17:48 - 2014-01-15 22:33 - 00000000 ____D () C:\ProgramData\ProductData
2014-03-23 23:17 - 2011-09-14 10:39 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\uTorrent
2014-03-23 21:45 - 2014-03-23 21:39 - 00000000 ____D () C:\Users\Marketa\Downloads\47.Ronin.2013.WEBRip.x264.AC3-FooKaS
2014-03-23 21:38 - 2014-03-23 21:38 - 00018585 _____ () C:\Users\Marketa\Downloads\[CzT]47_roninu_47_Ronin_2013_WebRip_.torrent
2014-03-23 21:04 - 2014-03-23 21:04 - 00035301 _____ () C:\Users\Marketa\Downloads\[CzT]Trosecnik_Cast_Away_2000_1080p_.torrent
2014-03-23 07:34 - 2009-09-20 08:18 - 00000000 ____D () C:\ProgramData\PDFC
2014-03-22 22:58 - 2014-03-22 22:57 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar (3).exe
2014-03-22 12:56 - 2014-03-22 12:56 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar (2).exe
2014-03-22 07:55 - 2014-02-05 05:25 - 00002047 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-03-22 07:49 - 2011-09-12 15:27 - 00000000 ____D () C:\Users\Marketa
2014-03-22 07:49 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\system32\wfp
2014-03-22 07:49 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\registration
2014-03-20 23:32 - 2014-03-20 23:14 - 1554069504 _____ () C:\Users\Marketa\Downloads\Thor.The.Dark.World.2013.480p.BRRip.XviD.AC3.CZ.avi
2014-03-20 23:14 - 2014-03-20 23:14 - 00015415 _____ () C:\Users\Marketa\Downloads\[CzT]Thor_Temny_svet_Thor_The_Dark_World_2013_CZ_.torrent
2014-03-20 23:06 - 2014-03-20 23:05 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar (1).exe
2014-03-20 20:35 - 2011-09-15 19:00 - 00000052 _____ () C:\windows\system32\DOErrors.log
2014-03-20 20:34 - 2011-09-20 12:54 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\HpUpdate
2014-03-20 07:59 - 2013-12-18 07:54 - 00000000 ____D () C:\Users\Marketa\Desktop\Montessori pomůcky
2014-03-19 07:37 - 2013-11-13 10:48 - 00000000 ____D () C:\Users\Marketa\Desktop\Tea foto
2014-03-18 22:54 - 2013-08-05 08:25 - 00000000 ____D () C:\windows\system32\MRT
2014-03-18 22:51 - 2011-09-16 05:32 - 87350280 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-03-18 22:48 - 2009-07-14 03:04 - 00000513 _____ () C:\windows\win.ini
2014-03-18 22:47 - 2009-07-14 05:52 - 00000000 ____D () C:\windows\twain_32
2014-03-18 22:46 - 2012-04-09 16:13 - 07022592 ___SH () C:\Users\Marketa\Desktop\Thumbs.db
2014-03-18 22:06 - 2013-11-10 08:10 - 00000000 ____D () C:\Users\Marketa\Desktop\Logo MŠ Rybička
2014-03-17 20:07 - 2009-09-20 08:17 - 00006428 _____ () C:\windows\system32\PerfStringBackup.INI
2014-03-16 20:43 - 2011-09-14 10:35 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\Media Player Classic
2014-03-16 15:24 - 2014-03-16 15:23 - 00000000 ____D () C:\Users\Marketa\Desktop\Masopust Vraclav březen 2014
2014-03-16 09:54 - 2011-10-15 21:13 - 00000000 ____D () C:\Users\Marketa\Desktop\Sokol
2014-03-15 11:16 - 2014-01-15 22:33 - 00000000 ____D () C:\ProgramData\IObit
2014-03-15 11:14 - 2009-07-14 05:33 - 03819744 _____ () C:\windows\system32\FNTCACHE.DAT
2014-03-15 11:12 - 2011-09-19 13:49 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-15 07:15 - 2014-03-15 07:15 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar.exe
2014-03-15 06:55 - 2009-09-20 08:23 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-14 20:12 - 2014-03-14 20:12 - 00000000 ____D () C:\windows\Tasks\ImCleanDisabled
2014-03-14 11:16 - 2013-01-09 21:44 - 00000914 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-03-14 06:38 - 2012-04-02 04:04 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2014-03-14 06:38 - 2011-09-26 19:32 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-11 15:24 - 2014-03-07 21:21 - 00000982 _____ () C:\windows\PFRO.log
2014-03-11 10:59 - 2009-09-20 08:30 - 00000000 ____D () C:\ProgramData\Sonic
2014-03-11 10:58 - 2014-03-11 10:58 - 00000000 ____D () C:\Users\Marketa\Documents\GomPlayer
2014-03-11 10:58 - 2014-03-11 10:28 - 00000000 ____D () C:\Users\Marketa\Desktop\DVD Radost ze zdravych deti
2014-03-11 10:57 - 2014-03-11 10:57 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\GRETECH
2014-03-11 10:57 - 2014-03-11 10:57 - 00000000 ____D () C:\Program Files\GRETECH
2014-03-11 07:33 - 2012-06-29 20:24 - 00000000 ____D () C:\Trefik10
2014-03-10 16:40 - 2011-09-15 05:05 - 00000000 ____D () C:\Users\Marketa\AppData\Local\Microsoft Help
2014-03-10 16:23 - 2014-02-19 16:48 - 00000000 ____D () C:\Users\Marketa\Desktop\Výzkum v MŠ NA Herzánce
2014-03-10 10:24 - 2011-09-23 16:30 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\BatteryBar
2014-03-10 09:29 - 2011-09-12 15:50 - 00000000 ____D () C:\Users\Marketa\AppData\Local\PDFC
2014-03-09 12:55 - 2013-08-24 11:15 - 00000000 ____D () C:\Users\Marketa\Desktop\Pro Terezku a kluky
2014-03-08 17:16 - 2013-11-12 07:16 - 00000000 ____D () C:\Users\Marketa\Desktop\Háčkování a pletení návody
2014-03-07 21:56 - 2014-03-05 07:32 - 00000000 ____D () C:\Users\Marketa\Desktop\Masky
2014-03-07 21:21 - 2014-03-07 21:21 - 00000000 _____ () C:\windows\setuperr.log
2014-03-07 16:51 - 2011-10-07 19:45 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\DAEMON Tools Lite
2014-03-07 16:06 - 2014-01-15 22:52 - 72515584 _____ () C:\windows\system32\config\SOFTWARE.iobit
2014-03-07 16:06 - 2014-01-15 22:52 - 00364544 _____ () C:\windows\system32\config\DEFAULT.iobit
2014-03-07 16:06 - 2014-01-15 22:52 - 00061440 _____ () C:\windows\system32\config\SAM.iobit
2014-03-07 16:06 - 2014-01-15 22:52 - 00032768 _____ () C:\windows\system32\config\SECURITY.iobit
2014-03-05 10:04 - 2014-03-05 10:04 - 43634688 _____ () C:\windows\system32\config\COMPONENTS.iobit
2014-03-03 18:53 - 2011-11-11 19:56 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\vlc
2014-03-02 20:55 - 2014-03-02 20:18 - 2653429760 _____ () C:\Users\Marketa\Downloads\Strom života.avi
2014-03-02 20:54 - 2014-03-02 19:07 - 00000000 ____D () C:\Users\Marketa\Downloads\Hwayi
2014-03-02 20:13 - 2014-03-02 19:58 - 00000000 ____D () C:\Users\Marketa\Downloads\12 Years a Slave (2013) DVDRip XviD-MAXSPEED
2014-03-02 18:08 - 2014-03-02 17:38 - 2560399726 _____ () C:\Users\Marketa\Downloads\Bláznivá, zatracená láska - CZ (2011).avi
2014-03-02 18:06 - 2014-03-02 18:04 - 00000000 ____D () C:\Users\Marketa\Downloads\Jen pockej, zajici!
2014-03-02 17:59 - 2014-03-02 17:59 - 00013615 _____ () C:\Users\Marketa\Desktop\nhc – zástupce.lnk
2014-03-02 17:46 - 2014-03-02 17:39 - 919937384 _____ () C:\Users\Marketa\Downloads\Babovresky (2013).avi
2014-03-01 12:14 - 2014-03-01 08:17 - 00000000 ____D () C:\Users\Marketa\Downloads\The Neverhood
2014-03-01 12:10 - 2014-03-01 12:10 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DreamWorks
2014-03-01 12:10 - 2014-03-01 12:10 - 00000000 ____D () C:\Program Files\DreamWorks Interactive
2014-03-01 08:29 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\Microsoft.NET
2014-03-01 05:30 - 2014-03-14 06:45 - 17074688 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-03-01 05:11 - 2014-03-14 06:45 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-03-01 05:10 - 2014-03-14 06:45 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-03-01 04:52 - 2014-03-14 06:45 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-03-01 04:51 - 2014-03-14 06:45 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-14 06:45 - 02168320 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-03-01 04:43 - 2014-03-14 06:45 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-03-01 04:43 - 2014-03-14 06:45 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-03-01 04:40 - 2014-03-14 06:45 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-03-01 04:38 - 2014-03-14 06:45 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-03-01 04:38 - 2014-03-14 06:45 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-03-01 04:37 - 2014-03-14 06:45 - 00553472 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-03-01 04:31 - 2014-03-14 06:45 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-03-01 04:25 - 2014-03-14 06:45 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-03-01 04:16 - 2014-03-14 06:45 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-03-01 04:14 - 2014-03-14 06:45 - 04244480 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-03-01 04:03 - 2014-03-14 06:45 - 00524288 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-03-01 04:00 - 2014-03-14 06:45 - 01964032 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-03-01 03:57 - 2014-03-14 06:45 - 11266048 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-03-01 03:32 - 2014-03-14 06:45 - 01820160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-03-01 03:27 - 2014-03-14 06:45 - 01156096 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-03-01 03:25 - 2014-03-14 06:45 - 00703488 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-02-25 16:59 - 2009-07-14 05:53 - 00032594 _____ () C:\windows\Tasks\SCHEDLGU.TXT
2014-02-23 08:17 - 2011-09-22 19:43 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\Winamp
2014-02-22 11:52 - 2014-02-22 11:47 - 73892478 _____ () C:\Users\Marketa\Downloads\Eso-hity--2001-☼.rar
2014-02-22 11:47 - 2014-02-22 11:38 - 106301416 _____ () C:\Users\Marketa\Downloads\Největší-hity.rar
2014-02-22 11:12 - 2014-02-22 11:00 - 227341952 _____ () C:\Users\Marketa\Downloads\Hity-2012-2013(hits).rar

Some content of TEMP:
====================
C:\Users\Marketa\AppData\Local\temp\ExPromo.exe
C:\Users\Marketa\AppData\Local\temp\promote-upx.exe
C:\Users\Marketa\AppData\Local\temp\UNINSTALL.EXE


==================== Bamital & volsnap Check =================

C:\windows\explorer.exe => MD5 is legit
C:\windows\system32\winlogon.exe => MD5 is legit
C:\windows\system32\wininit.exe => MD5 is legit
C:\windows\system32\svchost.exe => MD5 is legit
C:\windows\system32\services.exe => MD5 is legit
C:\windows\system32\User32.dll => MD5 is legit
C:\windows\system32\userinit.exe => MD5 is legit
C:\windows\system32\rpcss.dll => MD5 is legit
C:\windows\system32\Drivers\volsnap.sys => MD5 is legit



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Marketa\Desktop" je 62427 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\accrdsub
"C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\acevents
"C:\Program Files\ActivIdentity\ActivClient\acevents.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTibMounterMonitor
c:\program files\common files\acronis\tibmounter\tibmountermonitor.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\actSessionUI32.exe
"C:\Program Files\ActivityMon Software\ActivityMon\actSessionUI32.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
c:\program files\common files\adobe\arm\1.0\adobearm.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANT Agent
c:\program files\garmin\ant agent\ant agent.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon
"C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync
"c:\program files\microsoft office\office14\bcssync.exe" /delayservices [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CognizanceTS
rundll32.exe C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarminExpressTrayApp
c:\program files\garmin\express tray\expresstray.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8
"c:\program files\google\chrome\application\chrome.exe" --no-startup-window [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8
"C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPADVISOR
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MobileBroadband
C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe /silent [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PTHOSTTR
C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Slu�ba Acronis Scheduler2
c:\program files\common files\acronis\schedule2\schedhlp.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion
"C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe" /Background [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAX
C:\Program Files\Analog Devices\SoundMAX\soundmax.exe /tray [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP
C:\Program Files\Analog Devices\Core\smax4pnp.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
c:\program files\common files\java\java update\jusched.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh
%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe
c:\program files\acronis\trueimagehome\trueimagemonitor.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt
c:\program files\avg safeguard toolbar\vprot.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WirelessAssistant
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WinZip Quick Pick.lnk
C:\PROGRA~1\WinZip\WZQKPICK.EXE

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Marketa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk
C:\Users\Marketa\AppData\Roaming\Dropbox\bin\Dropbox.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Marketa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^V��ezy obrazovky a spu�t�n� aplikace OneNote 2010.lnk
C:\PROGRA~1\MICROS~2\Office14\ONENOTEM.EXE


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000001


==================== End Of Log ==============================
Přílohy
Addition.zip
(9.63 KiB) Staženo 71 x
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: prosim o kontrolu - wrapper.z5x.net

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
  • Ulozte nejlepe na plochu
  • Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
  • Probehne vytvoreni zalohy a nasledne prohledavani
  • Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
cica18
Návštěvník
Návštěvník
Příspěvky: 134
Registrován: 12 Bře 2007 17:37

Re: prosim o kontrolu - wrapper.z5x.net

#3 Příspěvek od cica18 »

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 7 Home Premium x86
Ran by Marketa on Łt 25.03.2014 at 22:12:22,20
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\scripthelper.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installcore
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-730507215-887370363-3937766701-1001\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-730507215-887370363-3937766701-1001\Software\video downloader
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\video downloader
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\HPSF_Tasks_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\HPSF_Tasks_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\ConduitHelper_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\ConduitHelper_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_veetle_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_veetle_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33352078-A858-42E4-A7F6-4231D8370186}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{35D1B90A-EC19-4791-883F-FA59996960D3}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{3BAE4745-31B5-4D9C-B4A8-139E334CD8A3}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CC2D3BCA-B2B2-4C1F-B750-DFAEAA32B2C6}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{33352078-A858-42E4-A7F6-4231D8370186}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\ytd video downloader"
Successfully deleted: [Folder] "C:\Users\Marketa\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\Marketa\appdata\local\cre"
Successfully deleted: [Folder] "C:\Program Files\coupons"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader"
Successfully deleted: [Empty Folder] C:\Users\Marketa\appdata\local\{0C1DB5FC-0E90-44B9-91DD-D86A196CC3E9}
Successfully deleted: [Empty Folder] C:\Users\Marketa\appdata\local\{44551CE3-47C8-495F-B952-9FDD93178F80}
Successfully deleted: [Empty Folder] C:\Users\Marketa\appdata\local\{467DA7B7-8E57-4675-8D6F-778E00C6FF9E}
Successfully deleted: [Empty Folder] C:\Users\Marketa\appdata\local\{6ED00CBF-36AC-476C-ADC2-D4AA4BFBCD36}
Successfully deleted: [Empty Folder] C:\Users\Marketa\appdata\local\{8A204261-6315-495F-ADF7-27277E5B1713}
Successfully deleted: [Empty Folder] C:\Users\Marketa\appdata\local\{A9C7BBA3-16FD-49B3-BDB6-4F38794555E0}
Successfully deleted: [Empty Folder] C:\Users\Marketa\appdata\local\{C63578F1-AE0F-4770-A73A-32EC140984D0}
Successfully deleted: [Empty Folder] C:\Users\Marketa\appdata\local\{CBA78A0A-D9F9-40C7-B8E6-B2EAB7F06302}



~~~ Chrome

Successfully deleted: [Folder] C:\Users\Marketa\appdata\local\Google\Chrome\User Data\Default\Extensions\bgnnidmnbdkmhfkjgdnngciimpdgohok
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\bgnnidmnbdkmhfkjgdnngciimpdgohok



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Łt 25.03.2014 at 22:16:00,10
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# AdwCleaner v3.022 - Report created 25/03/2014 at 22:19:01
# Updated 13/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : Marketa - MARKETA-PC
# Running from : C:\Users\Marketa\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Marketa\AppData\LocalLow\MixiDJ_V30
Folder Deleted : C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\adpkifcfcacgmnggcbpbjbkdijciiigm
File Deleted : C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\0\Extensions\freehdsport@freehdsport.tv.xpi
File Deleted : C:\Users\Marketa\AppData\Local\Temp\Uninstall.exe

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{77BEC163-D389-42c1-91A4-C758846296A5}]
Key Deleted : HKCU\Software\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKCU\Software\vShare.tv
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Mozilla Firefox v

[ File : C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\0\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Line Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search");

-\\ Google Chrome v33.0.1750.154

[ File : C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2293 octets] - [25/03/2014 22:17:02]
AdwCleaner[S0].txt - [2250 octets] - [25/03/2014 22:19:01]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2310 octets] ##########
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: prosim o kontrolu - wrapper.z5x.net

#4 Příspěvek od vyosek »

:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
cica18
Návštěvník
Návštěvník
Příspěvky: 134
Registrován: 12 Bře 2007 17:37

Re: prosim o kontrolu - wrapper.z5x.net

#5 Příspěvek od cica18 »

Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by Marketa on st 26.03.2014 at 22:57:44,98.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Marketa\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

26.3.2014 23:04:42 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{77BEC163-D389-42c1-91A4-C758846296A5} deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\0\prefs.js:
user_pref("browser.startup.homepage", "http://mysearch.avg.com?cid={C3AE18FB-1 ... 2014-02-06 06:59:19&v=17.3.1.204&pid=safeguard&sg=0&sap=hp");

Added to C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\0\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\0

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_26.03.2014_2316_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~2\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} deleted
C:\Program Files\VipBoxSportsApp.com deleted
C:\Program Files\Common Files\DVDVideoSoft\bin deleted
C:\extensions deleted
C:\Users\Marketa\AppData\Roaming\cdr.ini deleted
C:\PROGRA~2\ProductData deleted
C:\PROGRA~2\Package Cache deleted
C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847} deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Coupons deleted
C:\Users\Marketa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VipBoxSportsApp.com deleted
C:\windows\system32\config\systemprofile\AppData\LocalLow\AVG SafeGuard toolbar deleted
"C:\Users\Marketa\AppData\Roaming\Samsung" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"smartwebprinting@hp.com"="C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [03.04.2012 21:56]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"smartwebprinting@hp.com"="C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [03.04.2012 21:56]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\0
- Advanced SystemCare Surfing Protection - %ProfilePath%\extensions\ascsurfingprotection@iobit.com

==== Firefox Plugins ======================


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
bejbohlohkkgompgecdcbbglkpjfjgdj - C:\Users\Marketa\AppData\Local\Temp\crx3AEF.tmp[]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[05.02.2014 05:24]
jfmjfhklogoienhpfnppmbcbjfjnkonk - No path found[]
nfengeggddojhakldhlpjdlddgkkjkdd - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx[12.10.2013 13:04]

Angry Birds - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj
TV program - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\eggkgjblbjpigonjpmblphnackhfigbo
Crimson Steam Pirates - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\glfbkgkceahodalogdpenjoekbacjfcj
avast Online Security - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
AirMech - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdahlabpinmfcemhcbcfoijcpoalfgdn
Windows Media Player Extension for HTML5 - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak
Video downloader - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\khldgopgjjapmbkgflpoclebjjmkmbnk
Plants vs Zombies - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmcegpfdgcoclcdfkjahiimlikdpnina
Advanced SystemCare Surfing Protection - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd

==== Chrome Fix ======================

C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\khldgopgjjapmbkgflpoclebjjmkmbnk deleted successfully
C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_khldgopgjjapmbkgflpoclebjjmkmbnk_0.localstorage deleted successfully
C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_khldgopgjjapmbkgflpoclebjjmkmbnk_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE11SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\bejbohlohkkgompgecdcbbglkpjfjgdj deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Coupon Printer for Windows5.0.0.0 deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt deleted successfully

==== Empty IE Cache ======================

C:\Users\Marketa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Marketa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=135 folders=38 20555943 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Marketa\AppData\Local\temp will be emptied at reboot
C:\Users\Public\AppData\Local\temp emptied successfully
C:\windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\windows\serviceprofiles\Localservice\AppData\Local\Temp will be emptied at reboot
C:\windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\windows\Temp successfully emptied
C:\Users\Marketa\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\windows\serviceprofiles\networkservice\AppData\Local\Temp\MpCmdRun.log" not found

==== EOF on st 26.03.2014 at 23:27:05,46 ======================
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: prosim o kontrolu - wrapper.z5x.net

#6 Příspěvek od vyosek »

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
cica18
Návštěvník
Návštěvník
Příspěvky: 134
Registrován: 12 Bře 2007 17:37

Re: prosim o kontrolu - wrapper.z5x.net

#7 Příspěvek od cica18 »

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01
Ran by Marketa (administrator) on MARKETA-PC on 28-03-2014 22:24:59
Running from C:\Users\Marketa\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\AtService.exe
(AMD) C:\windows\system32\atiesrxx.exe
(Hewlett-Packard Company) C:\windows\system32\Hpservice.exe
(AMD) C:\windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ActivIdentity) C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
(Roman Svihalek, ActivityMon Software) C:\Program Files\ActivityMon Software\ActivityMon\svchost.exe
(Andrea Electronics Corporation) C:\windows\system32\AEADISRV.EXE
() C:\Program Files\ActivityMon Software\ActivityMon\rundll32.exe
(Acronis) C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
() C:\Program Files\ActivityMon Software\ActivityMon\actSessionUI32.exe
(Bioscrypt Inc.) C:\Program Files\Hewlett-Packard\IAM\Bin\AsGHost.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Garmin Ltd or its subsidiaries) C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(McAfee, Inc.) C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
(IObit) C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
(PDF Complete Inc) C:\Program Files\PDF Complete\pdfsvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(forum.viry.cz) C:\Users\Marketa\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-08-04] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767608 2014-03-22] (AVAST Software)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-03-25] (Hewlett-Packard)
HKU\S-1-5-21-730507215-887370363-3937766701-1001\...\Run: [GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8] - C:\Program Files\Google\Chrome\Application\chrome.exe [859976 2014-03-15] (Google Inc.)
HKU\S-1-5-21-730507215-887370363-3937766701-1001\...\Run: [ShowBatteryBar] - C:\Program Files\BatteryBar\ShowBatteryBar.exe [90624 2013-04-11] ()
AppInit_DLLs: C:\PROGRA~1\HEWLET~1\IAM\Bin\APSHook.dll => C:\Program Files\Hewlett-Packard\IAM\Bin\APSHook.dll [89872 2009-07-23] (Bioscrypt Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
BHO: PasswordBox Helper - {5DB69B97-934B-451D-94DB-32EF802A01CD} - C:\Program Files\PasswordBox\Application\pbbtn.dll (PasswordBox, Inc.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll (Bioscrypt Inc.)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138 192.168.1.1
Tcpip\..\Interfaces\{080FA4BF-28B2-4E7A-A306-E06364A2E9F9}: [NameServer]217.77.165.81 217.77.161.131
Tcpip\..\Interfaces\{58A95CB5-18F8-4B18-929F-C7A966324B11}: [NameServer]217.77.165.81 217.77.161.131

FireFox:
========
FF Plugin: @garmin.com/GpsControl - C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @playstation.com/PsndlCheck,version=1.00 - C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF Plugin: @real.com/nppl3260;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @veetle.com/veetleCorePlugin,version=0.9.19 - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-04-03]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-04-03]

Chrome:
=======
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd [2014-02-23]
CHR Extension: (Peněženka Google) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-10-29]
CHR HKLM\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx [2014-01-15]

========================== Services (Whitelisted) =================

R2 ac.sharedstore; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [207400 2009-06-03] (ActivIdentity)
R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [777584 2013-08-21] (Acronis)
R2 ActivityMon2; C:\Program Files\ActivityMon Software\ActivityMon\svchost.exe [80568 2012-10-18] (Roman Svihalek, ActivityMon Software)
R2 afcdpsrv; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [3869688 2013-12-20] (Acronis)
R2 ASBroker; C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll [192784 2009-07-23] (Bioscrypt Inc.)
R2 ASChannel; C:\Program Files\Hewlett-Packard\IAM\Bin\AsChnl.dll [150288 2009-07-23] (Bioscrypt Inc.)
R2 ATService; C:\Program Files\Fingerprint Sensor\AtService.exe [1201400 2009-07-29] (AuthenTec, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-05] (AVAST Software)
R2 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250200 2013-09-19] (Garmin Ltd or its subsidiaries)
R2 HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [124928 2009-07-09] (Hewlett-Packard)
S3 HP ProtectTools Service; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe [45056 2009-07-30] (Hewlett-Packard Development Company, L.P)
R2 HpFkCryptService; C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [256544 2009-07-29] (McAfee, Inc.)
R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)
S3 PasswordBox; C:\Program Files\PasswordBox\pbbtnService.exe [67584 2013-11-01] (PasswordBox, Inc.)
R2 pdfcDispatcher; C:\Program Files\PDF Complete\pdfsvc.exe [635416 2009-06-18] (PDF Complete Inc)
S3 RipCore; C:\Program Files\Fawkes Engineering\AccuRIP\RipCore.exe [2108352 2012-09-20] ()
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
S3 Správce výběru OS; C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe [2156952 2011-12-12] ()
S3 syncagentsrv; C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7149264 2013-10-22] (Acronis)
S3 VmbService; C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [9216 2011-07-14] (Vodafone)
S2 yksvc; C:\windows\System32\yk62x86.dll [364544 2009-09-28] (Marvell)

==================== Drivers (Whitelisted) ====================

R3 5U876UVC; C:\windows\System32\DRIVERS\5U876.sys [118656 2009-06-30] (Ricoh co.,Ltd.)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [67824 2014-02-05] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [79720 2013-10-29] (AVAST Software)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49944 2013-10-29] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [775952 2014-02-05] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [410784 2014-02-05] (AVAST Software)
S3 aswStm; C:\windows\system32\drivers\aswStm.sys [64168 2014-02-05] (AVAST Software)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [180248 2013-12-26] ()
R1 dtsoftbus01; C:\windows\System32\DRIVERS\dtsoftbus01.sys [232512 2011-10-07] (DT Soft Ltd)
S3 FsUsbExDisk; C:\windows\system32\FsUsbExDisk.SYS [36608 2010-06-14] ()
S3 grmnusb; C:\windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)
S3 huawei_cdcacm; C:\windows\System32\DRIVERS\ew_jucdcacm.sys [89856 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 huawei_ext_ctrl; C:\windows\System32\DRIVERS\ew_juextctrl.sys [26624 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 huawei_wwanecm; C:\windows\System32\DRIVERS\ew_juwwanecm.sys [182272 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 MfeAVFK; C:\windows\System32\drivers\MfeAVFK.sys [79816 2009-05-16] (McAfee, Inc.)
S3 MfeBOPK; C:\windows\System32\drivers\MfeBOPK.sys [35272 2009-05-16] (McAfee, Inc.)
R1 mfehidk; C:\windows\System32\drivers\mfehidk.sys [214024 2009-05-16] (McAfee, Inc.)
S3 MfeRKDK; C:\windows\System32\drivers\MfeRKDK.sys [34248 2009-05-16] (McAfee, Inc.)
R1 mfetdik; C:\windows\System32\drivers\mfetdik.sys [55336 2009-05-16] (McAfee, Inc.)
S3 NETw1v32; C:\windows\System32\DRIVERS\NETw1v32.sys [5958656 2009-07-21] (Intel Corporation)
R2 npf; C:\windows\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.)
R1 RsvLock; C:\windows\system32\Drivers\RsvLock.sys [12528 2009-07-29] (SafeBoot International)
R0 SafeBoot; C:\windows\system32\Drivers\SafeBoot.sys [109216 2009-07-29] ()
R0 SbAlg; C:\windows\system32\Drivers\SbAlg.sys [51408 2009-07-29] (SafeBoot N.V.)
R0 SbFsLock; C:\windows\system32\Drivers\SbFsLock.sys [12960 2009-07-29] (SafeBoot International)
R0 sptd; C:\windows\System32\Drivers\sptd.sys [436792 2012-06-05] ()
S3 ss_bbus; C:\windows\System32\DRIVERS\ss_bbus.sys [98432 2010-04-27] (MCCI)
S3 ss_bmdfl; C:\windows\System32\DRIVERS\ss_bmdfl.sys [14848 2010-04-27] (MCCI Corporation)
S3 ss_bmdm; C:\windows\System32\DRIVERS\ss_bmdm.sys [123648 2010-04-27] (MCCI Corporation)
S3 tdrpman; C:\windows\System32\DRIVERS\tdrpman.sys [889888 2013-12-20] (Acronis International GmbH)
R0 tib; C:\windows\System32\DRIVERS\tib.sys [736192 2013-11-08] (Acronis International GmbH)
R0 tib_mounter; C:\windows\System32\DRIVERS\tib_mounter.sys [143648 2013-12-20] (Acronis International GmbH)
R0 vididr; C:\windows\System32\DRIVERS\vididr.sys [116000 2013-11-08] (Acronis International GmbH)
R0 vidsflt; C:\windows\System32\DRIVERS\vidsflt.sys [85280 2013-11-08] (Acronis International GmbH)
R3 yukonw7; C:\windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Marketa\AppData\Local\Temp\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S0 SmartDefragDriver; System32\Drivers\SmartDefragDriver.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-28 22:24 - 2014-03-28 22:24 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\FRSTLauncher.exe
2014-03-28 22:23 - 2014-03-28 22:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\Nepotvrzeno 864135.crdownload
2014-03-28 22:22 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\trz75EF.tmp
2014-03-26 23:21 - 2014-03-26 22:57 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-03-26 23:04 - 2014-03-26 23:27 - 00010344 _____ () C:\zoek-results.log
2014-03-26 23:00 - 2014-03-26 23:01 - 01285120 _____ () C:\Users\Marketa\Downloads\zoek.exe
2014-03-26 22:57 - 2014-03-26 23:17 - 00000000 ____D () C:\zoek_backup
2014-03-26 22:56 - 2014-03-26 22:56 - 04095370 _____ () C:\Users\Marketa\Downloads\zoek.zip
2014-03-26 22:53 - 2014-03-26 22:52 - 01271747 _____ () C:\Users\Marketa\Downloads\trz1EAE.tmp
2014-03-25 22:16 - 2014-03-25 22:19 - 00000000 ____D () C:\AdwCleaner
2014-03-25 22:16 - 2014-03-25 22:16 - 00005541 _____ () C:\Users\Marketa\Desktop\JRT1.txt
2014-03-25 22:16 - 2014-03-25 22:16 - 00005541 _____ () C:\Users\Marketa\Desktop\JRT.txt
2014-03-25 22:08 - 2014-03-25 22:08 - 00000000 ____D () C:\windows\ERUNT
2014-03-25 22:06 - 2014-03-25 22:06 - 01950720 _____ () C:\Users\Marketa\Desktop\adwcleaner.exe
2014-03-25 22:06 - 2014-03-25 22:06 - 01038974 _____ (Thisisu) C:\Users\Marketa\Desktop\JRT.exe
2014-03-25 15:08 - 2014-03-25 15:15 - 00000000 ____D () C:\Users\Marketa\Desktop\Boty
2014-03-24 23:32 - 2014-03-24 23:33 - 00781383 _____ () C:\Users\Marketa\Downloads\RSIT.exe
2014-03-24 23:28 - 2014-03-28 22:25 - 00017360 _____ () C:\Users\Marketa\Desktop\FRST.txt
2014-03-24 23:25 - 2014-03-24 23:25 - 00000000 ____D () C:\FRST
2014-03-24 23:23 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\FRSTLauncher.exe
2014-03-24 23:20 - 2014-03-24 23:20 - 01145856 _____ (Farbar) C:\Users\Marketa\Desktop\FRST.exe
2014-03-24 23:20 - 2014-03-24 23:20 - 00085784 _____ () C:\Users\Marketa\Downloads\trzFC12.tmp
2014-03-23 21:39 - 2014-03-27 20:44 - 00000000 ____D () C:\Users\Marketa\Downloads\47.Ronin.2013.WEBRip.x264.AC3-FooKaS
2014-03-23 21:38 - 2014-03-23 21:38 - 00018585 _____ () C:\Users\Marketa\Downloads\[CzT]47_roninu_47_Ronin_2013_WebRip_.torrent
2014-03-23 21:04 - 2014-03-23 21:04 - 00035301 _____ () C:\Users\Marketa\Downloads\[CzT]Trosecnik_Cast_Away_2000_1080p_.torrent
2014-03-20 23:14 - 2014-03-20 23:32 - 1554069504 _____ () C:\Users\Marketa\Downloads\Thor.The.Dark.World.2013.480p.BRRip.XviD.AC3.CZ.avi
2014-03-20 23:14 - 2014-03-20 23:14 - 00015415 _____ () C:\Users\Marketa\Downloads\[CzT]Thor_Temny_svet_Thor_The_Dark_World_2013_CZ_.torrent
2014-03-16 15:23 - 2014-03-16 15:24 - 00000000 ____D () C:\Users\Marketa\Desktop\Masopust Vraclav březen 2014
2014-03-14 20:12 - 2014-03-14 20:12 - 00000000 ____D () C:\windows\Tasks\ImCleanDisabled
2014-03-14 06:45 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-03-14 06:45 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-03-14 06:45 - 2014-03-01 05:10 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-03-14 06:45 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-03-14 06:45 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-03-14 06:45 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-03-14 06:45 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-03-14 06:45 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-03-14 06:45 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-03-14 06:45 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-03-14 06:45 - 2014-03-01 04:38 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-03-14 06:45 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-03-14 06:45 - 2014-03-01 04:31 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-03-14 06:45 - 2014-03-01 04:25 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-03-14 06:45 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-03-14 06:45 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-03-14 06:45 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-03-14 06:45 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-03-14 06:45 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-03-14 06:45 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-03-14 06:45 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-03-14 06:45 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-03-14 06:45 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-03-14 06:44 - 2014-02-07 02:07 - 02349056 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-03-14 06:44 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2014-03-14 06:44 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2014-03-14 06:44 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2014-03-11 10:58 - 2014-03-11 10:58 - 00000000 ____D () C:\Users\Marketa\Documents\GomPlayer
2014-03-11 10:57 - 2014-03-11 10:57 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\GRETECH
2014-03-11 10:57 - 2014-03-11 10:57 - 00000000 ____D () C:\Program Files\GRETECH
2014-03-11 10:28 - 2014-03-11 10:58 - 00000000 ____D () C:\Users\Marketa\Desktop\DVD Radost ze zdravych deti
2014-03-07 21:21 - 2014-03-28 22:13 - 00010378 _____ () C:\windows\setupact.log
2014-03-07 21:21 - 2014-03-26 23:25 - 00001318 _____ () C:\windows\PFRO.log
2014-03-07 21:21 - 2014-03-07 21:21 - 00000000 _____ () C:\windows\setuperr.log
2014-03-05 10:04 - 2014-03-05 10:04 - 43634688 _____ () C:\windows\system32\config\COMPONENTS.iobit
2014-03-05 07:32 - 2014-03-07 21:56 - 00000000 ____D () C:\Users\Marketa\Desktop\Masky
2014-03-02 20:18 - 2014-03-02 20:55 - 2653429760 _____ () C:\Users\Marketa\Downloads\Strom života.avi
2014-03-02 19:58 - 2014-03-02 20:13 - 00000000 ____D () C:\Users\Marketa\Downloads\12 Years a Slave (2013) DVDRip XviD-MAXSPEED
2014-03-02 19:07 - 2014-03-02 20:54 - 00000000 ____D () C:\Users\Marketa\Downloads\Hwayi
2014-03-02 18:04 - 2014-03-02 18:06 - 00000000 ____D () C:\Users\Marketa\Downloads\Jen pockej, zajici!
2014-03-02 17:59 - 2014-03-02 17:59 - 00013615 _____ () C:\Users\Marketa\Desktop\nhc – zástupce.lnk
2014-03-02 17:39 - 2014-03-02 17:46 - 919937384 _____ () C:\Users\Marketa\Downloads\Babovresky (2013).avi
2014-03-02 17:38 - 2014-03-02 18:08 - 2560399726 _____ () C:\Users\Marketa\Downloads\Bláznivá, zatracená láska - CZ (2011).avi
2014-03-01 12:10 - 2014-03-01 12:10 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DreamWorks
2014-03-01 12:10 - 2014-03-01 12:10 - 00000000 ____D () C:\Program Files\DreamWorks Interactive
2014-03-01 08:17 - 2014-03-01 12:14 - 00000000 ____D () C:\Users\Marketa\Downloads\The Neverhood

==================== One Month Modified Files and Folders =======

2014-03-28 22:25 - 2014-03-24 23:28 - 00017360 _____ () C:\Users\Marketa\Desktop\FRST.txt
2014-03-28 22:25 - 2013-01-28 22:49 - 00000000 ____D () C:\ProgramData\ActivityMon
2014-03-28 22:24 - 2014-03-28 22:24 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\FRSTLauncher.exe
2014-03-28 22:23 - 2014-03-28 22:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\Nepotvrzeno 864135.crdownload
2014-03-28 22:13 - 2014-03-07 21:21 - 00010378 _____ () C:\windows\setupact.log
2014-03-28 22:13 - 2013-07-26 20:31 - 01788990 _____ () C:\windows\WindowsUpdate.log
2014-03-28 21:54 - 2009-07-14 05:34 - 00019760 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-28 21:54 - 2009-07-14 05:34 - 00019760 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-28 21:49 - 2013-07-12 11:27 - 00000940 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-28 21:46 - 2013-07-12 11:27 - 00000936 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-28 21:46 - 2009-07-14 05:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-03-28 19:44 - 2013-10-24 12:22 - 00000328 _____ () C:\windows\Tasks\HP Photo Creations Communicator.job
2014-03-28 13:16 - 2011-11-11 19:56 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\vlc
2014-03-27 23:03 - 2011-09-14 10:39 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\uTorrent
2014-03-27 20:44 - 2014-03-23 21:39 - 00000000 ____D () C:\Users\Marketa\Downloads\47.Ronin.2013.WEBRip.x264.AC3-FooKaS
2014-03-27 20:18 - 2011-09-15 19:00 - 00000052 _____ () C:\windows\system32\DOErrors.log
2014-03-27 20:15 - 2011-09-20 12:54 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\HpUpdate
2014-03-26 23:27 - 2014-03-26 23:04 - 00010344 _____ () C:\zoek-results.log
2014-03-26 23:25 - 2014-03-07 21:21 - 00001318 _____ () C:\windows\PFRO.log
2014-03-26 23:17 - 2014-03-26 22:57 - 00000000 ____D () C:\zoek_backup
2014-03-26 23:16 - 2011-10-07 18:31 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-03-26 23:01 - 2014-03-26 23:00 - 01285120 _____ () C:\Users\Marketa\Downloads\zoek.exe
2014-03-26 22:57 - 2014-03-26 23:21 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-03-26 22:56 - 2014-03-26 22:56 - 04095370 _____ () C:\Users\Marketa\Downloads\zoek.zip
2014-03-26 22:52 - 2014-03-26 22:53 - 01271747 _____ () C:\Users\Marketa\Downloads\trz1EAE.tmp
2014-03-25 22:19 - 2014-03-25 22:16 - 00000000 ____D () C:\AdwCleaner
2014-03-25 22:16 - 2014-03-25 22:16 - 00005541 _____ () C:\Users\Marketa\Desktop\JRT1.txt
2014-03-25 22:16 - 2014-03-25 22:16 - 00005541 _____ () C:\Users\Marketa\Desktop\JRT.txt
2014-03-25 22:08 - 2014-03-25 22:08 - 00000000 ____D () C:\windows\ERUNT
2014-03-25 22:06 - 2014-03-25 22:06 - 01950720 _____ () C:\Users\Marketa\Desktop\adwcleaner.exe
2014-03-25 22:06 - 2014-03-25 22:06 - 01038974 _____ (Thisisu) C:\Users\Marketa\Desktop\JRT.exe
2014-03-25 15:15 - 2014-03-25 15:08 - 00000000 ____D () C:\Users\Marketa\Desktop\Boty
2014-03-25 15:08 - 2012-04-09 16:13 - 07027200 ___SH () C:\Users\Marketa\Desktop\Thumbs.db
2014-03-24 23:33 - 2014-03-24 23:32 - 00781383 _____ () C:\Users\Marketa\Downloads\RSIT.exe
2014-03-24 23:25 - 2014-03-24 23:25 - 00000000 ____D () C:\FRST
2014-03-24 23:23 - 2014-03-28 22:22 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\trz75EF.tmp
2014-03-24 23:23 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\FRSTLauncher.exe
2014-03-24 23:20 - 2014-03-24 23:20 - 01145856 _____ (Farbar) C:\Users\Marketa\Desktop\FRST.exe
2014-03-24 23:20 - 2014-03-24 23:20 - 00085784 _____ () C:\Users\Marketa\Downloads\trzFC12.tmp
2014-03-23 21:38 - 2014-03-23 21:38 - 00018585 _____ () C:\Users\Marketa\Downloads\[CzT]47_roninu_47_Ronin_2013_WebRip_.torrent
2014-03-23 21:04 - 2014-03-23 21:04 - 00035301 _____ () C:\Users\Marketa\Downloads\[CzT]Trosecnik_Cast_Away_2000_1080p_.torrent
2014-03-23 07:34 - 2009-09-20 08:18 - 00000000 ____D () C:\ProgramData\PDFC
2014-03-22 07:55 - 2014-02-05 05:25 - 00002047 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-03-22 07:49 - 2011-09-12 15:27 - 00000000 ____D () C:\Users\Marketa
2014-03-22 07:49 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\system32\wfp
2014-03-22 07:49 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\registration
2014-03-20 23:32 - 2014-03-20 23:14 - 1554069504 _____ () C:\Users\Marketa\Downloads\Thor.The.Dark.World.2013.480p.BRRip.XviD.AC3.CZ.avi
2014-03-20 23:14 - 2014-03-20 23:14 - 00015415 _____ () C:\Users\Marketa\Downloads\[CzT]Thor_Temny_svet_Thor_The_Dark_World_2013_CZ_.torrent
2014-03-20 07:59 - 2013-12-18 07:54 - 00000000 ____D () C:\Users\Marketa\Desktop\Montessori pomůcky
2014-03-19 07:37 - 2013-11-13 10:48 - 00000000 ____D () C:\Users\Marketa\Desktop\Tea foto
2014-03-18 22:54 - 2013-08-05 08:25 - 00000000 ____D () C:\windows\system32\MRT
2014-03-18 22:51 - 2011-09-16 05:32 - 87350280 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-03-18 22:48 - 2009-07-14 03:04 - 00000513 _____ () C:\windows\win.ini
2014-03-18 22:47 - 2009-07-14 05:52 - 00000000 ____D () C:\windows\twain_32
2014-03-18 22:06 - 2013-11-10 08:10 - 00000000 ____D () C:\Users\Marketa\Desktop\Logo MŠ Rybička
2014-03-17 20:07 - 2009-09-20 08:17 - 00006428 _____ () C:\windows\system32\PerfStringBackup.INI
2014-03-16 20:43 - 2011-09-14 10:35 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\Media Player Classic
2014-03-16 15:24 - 2014-03-16 15:23 - 00000000 ____D () C:\Users\Marketa\Desktop\Masopust Vraclav březen 2014
2014-03-16 09:54 - 2011-10-15 21:13 - 00000000 ____D () C:\Users\Marketa\Desktop\Sokol
2014-03-15 11:16 - 2014-01-15 22:33 - 00000000 ____D () C:\ProgramData\IObit
2014-03-15 11:14 - 2009-07-14 05:33 - 03819744 _____ () C:\windows\system32\FNTCACHE.DAT
2014-03-15 11:12 - 2011-09-19 13:49 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-15 06:55 - 2009-09-20 08:23 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-14 20:12 - 2014-03-14 20:12 - 00000000 ____D () C:\windows\Tasks\ImCleanDisabled
2014-03-14 11:16 - 2013-01-09 21:44 - 00000914 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-03-14 06:38 - 2012-04-02 04:04 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2014-03-14 06:38 - 2011-09-26 19:32 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-11 10:59 - 2009-09-20 08:30 - 00000000 ____D () C:\ProgramData\Sonic
2014-03-11 10:58 - 2014-03-11 10:58 - 00000000 ____D () C:\Users\Marketa\Documents\GomPlayer
2014-03-11 10:58 - 2014-03-11 10:28 - 00000000 ____D () C:\Users\Marketa\Desktop\DVD Radost ze zdravych deti
2014-03-11 10:57 - 2014-03-11 10:57 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\GRETECH
2014-03-11 10:57 - 2014-03-11 10:57 - 00000000 ____D () C:\Program Files\GRETECH
2014-03-11 07:33 - 2012-06-29 20:24 - 00000000 ____D () C:\Trefik10
2014-03-10 16:40 - 2011-09-15 05:05 - 00000000 ____D () C:\Users\Marketa\AppData\Local\Microsoft Help
2014-03-10 16:23 - 2014-02-19 16:48 - 00000000 ____D () C:\Users\Marketa\Desktop\Výzkum v MŠ NA Herzánce
2014-03-10 10:24 - 2011-09-23 16:30 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\BatteryBar
2014-03-10 09:29 - 2011-09-12 15:50 - 00000000 ____D () C:\Users\Marketa\AppData\Local\PDFC
2014-03-09 12:55 - 2013-08-24 11:15 - 00000000 ____D () C:\Users\Marketa\Desktop\Pro Terezku a kluky
2014-03-08 17:16 - 2013-11-12 07:16 - 00000000 ____D () C:\Users\Marketa\Desktop\Háčkování a pletení návody
2014-03-07 21:56 - 2014-03-05 07:32 - 00000000 ____D () C:\Users\Marketa\Desktop\Masky
2014-03-07 21:21 - 2014-03-07 21:21 - 00000000 _____ () C:\windows\setuperr.log
2014-03-07 16:51 - 2011-10-07 19:45 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\DAEMON Tools Lite
2014-03-07 16:06 - 2014-01-15 22:52 - 72515584 _____ () C:\windows\system32\config\SOFTWARE.iobit
2014-03-07 16:06 - 2014-01-15 22:52 - 00364544 _____ () C:\windows\system32\config\DEFAULT.iobit
2014-03-07 16:06 - 2014-01-15 22:52 - 00061440 _____ () C:\windows\system32\config\SAM.iobit
2014-03-07 16:06 - 2014-01-15 22:52 - 00032768 _____ () C:\windows\system32\config\SECURITY.iobit
2014-03-05 10:04 - 2014-03-05 10:04 - 43634688 _____ () C:\windows\system32\config\COMPONENTS.iobit
2014-03-02 20:55 - 2014-03-02 20:18 - 2653429760 _____ () C:\Users\Marketa\Downloads\Strom života.avi
2014-03-02 20:54 - 2014-03-02 19:07 - 00000000 ____D () C:\Users\Marketa\Downloads\Hwayi
2014-03-02 20:13 - 2014-03-02 19:58 - 00000000 ____D () C:\Users\Marketa\Downloads\12 Years a Slave (2013) DVDRip XviD-MAXSPEED
2014-03-02 18:08 - 2014-03-02 17:38 - 2560399726 _____ () C:\Users\Marketa\Downloads\Bláznivá, zatracená láska - CZ (2011).avi
2014-03-02 18:06 - 2014-03-02 18:04 - 00000000 ____D () C:\Users\Marketa\Downloads\Jen pockej, zajici!
2014-03-02 17:59 - 2014-03-02 17:59 - 00013615 _____ () C:\Users\Marketa\Desktop\nhc – zástupce.lnk
2014-03-02 17:46 - 2014-03-02 17:39 - 919937384 _____ () C:\Users\Marketa\Downloads\Babovresky (2013).avi
2014-03-01 12:14 - 2014-03-01 08:17 - 00000000 ____D () C:\Users\Marketa\Downloads\The Neverhood
2014-03-01 12:10 - 2014-03-01 12:10 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DreamWorks
2014-03-01 12:10 - 2014-03-01 12:10 - 00000000 ____D () C:\Program Files\DreamWorks Interactive
2014-03-01 08:29 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\Microsoft.NET
2014-03-01 05:30 - 2014-03-14 06:45 - 17074688 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-03-01 05:11 - 2014-03-14 06:45 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-03-01 05:10 - 2014-03-14 06:45 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-03-01 04:52 - 2014-03-14 06:45 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-03-01 04:51 - 2014-03-14 06:45 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-14 06:45 - 02168320 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-03-01 04:43 - 2014-03-14 06:45 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-03-01 04:43 - 2014-03-14 06:45 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-03-01 04:40 - 2014-03-14 06:45 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-03-01 04:38 - 2014-03-14 06:45 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-03-01 04:38 - 2014-03-14 06:45 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-03-01 04:37 - 2014-03-14 06:45 - 00553472 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-03-01 04:31 - 2014-03-14 06:45 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-03-01 04:25 - 2014-03-14 06:45 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-03-01 04:16 - 2014-03-14 06:45 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-03-01 04:14 - 2014-03-14 06:45 - 04244480 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-03-01 04:03 - 2014-03-14 06:45 - 00524288 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-03-01 04:00 - 2014-03-14 06:45 - 01964032 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-03-01 03:57 - 2014-03-14 06:45 - 11266048 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-03-01 03:32 - 2014-03-14 06:45 - 01820160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-03-01 03:27 - 2014-03-14 06:45 - 01156096 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-03-01 03:25 - 2014-03-14 06:45 - 00703488 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll

Some content of TEMP:
====================
C:\Users\Marketa\AppData\Local\Temp\promote-upx.exe


==================== Bamital & volsnap Check =================

C:\windows\explorer.exe => MD5 is legit
C:\windows\system32\winlogon.exe => MD5 is legit
C:\windows\system32\wininit.exe => MD5 is legit
C:\windows\system32\svchost.exe => MD5 is legit
C:\windows\system32\services.exe => MD5 is legit
C:\windows\system32\User32.dll => MD5 is legit
C:\windows\system32\userinit.exe => MD5 is legit
C:\windows\system32\rpcss.dll => MD5 is legit
C:\windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-21 00:23




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:448.47 GB) (Free:64.38 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.92 GB) FAT32

Available physical RAM: 1689.78 MB
Total physical RAM: 3066.27 MB
Percentage of memory in use: 44%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 68E784C7)
Partition 1: (Active) - (Size=300 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=448 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0C)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Marketa\Desktop" je 62430 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\accrdsub
"C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\acevents
"C:\Program Files\ActivIdentity\ActivClient\acevents.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTibMounterMonitor
c:\program files\common files\acronis\tibmounter\tibmountermonitor.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\actSessionUI32.exe
"C:\Program Files\ActivityMon Software\ActivityMon\actSessionUI32.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
c:\program files\common files\adobe\arm\1.0\adobearm.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANT Agent
c:\program files\garmin\ant agent\ant agent.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon
"C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync
"c:\program files\microsoft office\office14\bcssync.exe" /delayservices [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CognizanceTS
rundll32.exe C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarminExpressTrayApp
c:\program files\garmin\express tray\expresstray.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8
"c:\program files\google\chrome\application\chrome.exe" --no-startup-window [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8
"C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPADVISOR
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MobileBroadband
C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe /silent [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PTHOSTTR
C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Slu�ba Acronis Scheduler2
c:\program files\common files\acronis\schedule2\schedhlp.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion
"C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe" /Background [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAX
C:\Program Files\Analog Devices\SoundMAX\soundmax.exe /tray [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP
C:\Program Files\Analog Devices\Core\smax4pnp.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
c:\program files\common files\java\java update\jusched.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh
%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe
c:\program files\acronis\trueimagehome\trueimagemonitor.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WirelessAssistant
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WinZip Quick Pick.lnk
C:\PROGRA~1\WinZip\WZQKPICK.EXE

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Marketa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk
C:\Users\Marketa\AppData\Roaming\Dropbox\bin\Dropbox.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Marketa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^V��ezy obrazovky a spu�t�n� aplikace OneNote 2010.lnk
C:\PROGRA~1\MICROS~2\Office14\ONENOTEM.EXE


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000001


==================== End Of Log ==============================
Přílohy
Addition.zip
(12.56 KiB) Staženo 80 x
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: prosim o kontrolu - wrapper.z5x.net

#8 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKU\S-1-5-21-730507215-887370363-3937766701-1001\...\Run: [GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8] - C:\Program Files\Google\Chrome\Application\chrome.exe [859976 2014-03-15] (Google Inc.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)

CHR HKLM\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx [2014-01-15]
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd [2014-02-23]

R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)
S3 catchme; \??\C:\Users\Marketa\AppData\Local\Temp\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S0 SmartDefragDriver; System32\Drivers\SmartDefragDriver.sys [X]

C:\Program Files\IObit
C:\Program Files\Enigma Software Group
2014-03-28 22:24 - 2014-03-28 22:24 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\FRSTLauncher.exe
2014-03-28 22:23 - 2014-03-28 22:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\Nepotvrzeno 864135.crdownload
2014-03-28 22:22 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\trz75EF.tmp
2014-03-26 23:21 - 2014-03-26 22:57 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-03-26 23:04 - 2014-03-26 23:27 - 00010344 _____ () C:\zoek-results.log
2014-03-26 23:00 - 2014-03-26 23:01 - 01285120 _____ () C:\Users\Marketa\Downloads\zoek.exe
2014-03-26 22:57 - 2014-03-26 23:17 - 00000000 ____D () C:\zoek_backup
2014-03-26 22:56 - 2014-03-26 22:56 - 04095370 _____ () C:\Users\Marketa\Downloads\zoek.zip
2014-03-26 22:53 - 2014-03-26 22:52 - 01271747 _____ () C:\Users\Marketa\Downloads\trz1EAE.tmp
2014-03-25 22:16 - 2014-03-25 22:19 - 00000000 ____D () C:\AdwCleaner
2014-03-25 22:16 - 2014-03-25 22:16 - 00005541 _____ () C:\Users\Marketa\Desktop\JRT1.txt
2014-03-25 22:16 - 2014-03-25 22:16 - 00005541 _____ () C:\Users\Marketa\Desktop\JRT.txt
2014-03-25 22:08 - 2014-03-25 22:08 - 00000000 ____D () C:\windows\ERUNT
2014-03-25 22:06 - 2014-03-25 22:06 - 01950720 _____ () C:\Users\Marketa\Desktop\adwcleaner.exe
2014-03-25 22:06 - 2014-03-25 22:06 - 01038974 _____ (Thisisu) C:\Users\Marketa\Desktop\JRT.exe
2014-03-24 23:23 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\FRSTLauncher.exe

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched" /f

Hosts:
End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
cica18
Návštěvník
Návštěvník
Příspěvky: 134
Registrován: 12 Bře 2007 17:37

Re: prosim o kontrolu - wrapper.z5x.net

#9 Příspěvek od cica18 »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-03-2014 01
Ran by Marketa at 2014-03-30 22:24:55 Run:1
Running from C:\Users\Marketa\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKU\S-1-5-21-730507215-887370363-3937766701-1001\...\Run: [GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8] - C:\Program Files\Google\Chrome\Application\chrome.exe [859976 2014-03-15] (Google Inc.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)

CHR HKLM\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx [2014-01-15]
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd [2014-02-23]

R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)
S3 catchme; \??\C:\Users\Marketa\AppData\Local\Temp\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S0 SmartDefragDriver; System32\Drivers\SmartDefragDriver.sys [X]

C:\Program Files\IObit
C:\Program Files\Enigma Software Group
2014-03-28 22:24 - 2014-03-28 22:24 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\FRSTLauncher.exe
2014-03-28 22:23 - 2014-03-28 22:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\Nepotvrzeno 864135.crdownload
2014-03-28 22:22 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\trz75EF.tmp
2014-03-26 23:21 - 2014-03-26 22:57 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-03-26 23:04 - 2014-03-26 23:27 - 00010344 _____ () C:\zoek-results.log
2014-03-26 23:00 - 2014-03-26 23:01 - 01285120 _____ () C:\Users\Marketa\Downloads\zoek.exe
2014-03-26 22:57 - 2014-03-26 23:17 - 00000000 ____D () C:\zoek_backup
2014-03-26 22:56 - 2014-03-26 22:56 - 04095370 _____ () C:\Users\Marketa\Downloads\zoek.zip
2014-03-26 22:53 - 2014-03-26 22:52 - 01271747 _____ () C:\Users\Marketa\Downloads\trz1EAE.tmp
2014-03-25 22:16 - 2014-03-25 22:19 - 00000000 ____D () C:\AdwCleaner
2014-03-25 22:16 - 2014-03-25 22:16 - 00005541 _____ () C:\Users\Marketa\Desktop\JRT1.txt
2014-03-25 22:16 - 2014-03-25 22:16 - 00005541 _____ () C:\Users\Marketa\Desktop\JRT.txt
2014-03-25 22:08 - 2014-03-25 22:08 - 00000000 ____D () C:\windows\ERUNT
2014-03-25 22:06 - 2014-03-25 22:06 - 01950720 _____ () C:\Users\Marketa\Desktop\adwcleaner.exe
2014-03-25 22:06 - 2014-03-25 22:06 - 01038974 _____ (Thisisu) C:\Users\Marketa\Desktop\JRT.exe
2014-03-24 23:23 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\FRSTLauncher.exe

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched" /f

Hosts:
End
*****************

HKU\S-1-5-21-730507215-887370363-3937766701-1001\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8 => Value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814} => Key deleted successfully.
HKCR\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814} => Key deleted successfully.
HKLM\SOFTWARE\Google\Chrome\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd => Key deleted successfully.
C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx => Moved successfully.
C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd => Moved successfully.
LiveUpdateSvc => Service stopped successfully.
LiveUpdateSvc => Service deleted successfully.
catchme => Service deleted successfully.
esgiguard => Service deleted successfully.
SmartDefragDriver => Service deleted successfully.
C:\Program Files\IObit => Moved successfully.
C:\Program Files\Enigma Software Group => Moved successfully.
C:\Users\Marketa\Desktop\FRSTLauncher.exe => Moved successfully.
"C:\Users\Marketa\Downloads\Nepotvrzeno 864135.crdownload" => File/Directory not found.
C:\Users\Marketa\Desktop\trz75EF.tmp => Moved successfully.
C:\windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\Users\Marketa\Downloads\zoek.exe => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Marketa\Downloads\zoek.zip => Moved successfully.
C:\Users\Marketa\Downloads\trz1EAE.tmp => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Marketa\Desktop\JRT1.txt => Moved successfully.
C:\Users\Marketa\Desktop\JRT.txt => Moved successfully.
C:\Windows\ERUNT => Moved successfully.
C:\Users\Marketa\Desktop\adwcleaner.exe => Moved successfully.
C:\Users\Marketa\Desktop\JRT.exe => Moved successfully.
C:\Users\Marketa\Downloads\FRSTLauncher.exe => Moved successfully.
C:\windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\windows\Tasks\HP Photo Creations Communicator.job => Moved successfully.

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f =========

Operace byla dokonźena ŁspŘçnŘ.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync" /f =========

Operace byla dokonźena ŁspŘçnŘ.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8" /f =========

Operace byla dokonźena ŁspŘçnŘ.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8" /f =========

Operace byla dokonźena ŁspŘçnŘ.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion" /f =========

Operace byla dokonźena ŁspŘçnŘ.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched" /f =========

Operace byla dokonźena ŁspŘçnŘ.



========= End of Reg: =========

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

==== End of Fixlog ====
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: prosim o kontrolu - wrapper.z5x.net

#10 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
cica18
Návštěvník
Návštěvník
Příspěvky: 134
Registrován: 12 Bře 2007 17:37

Re: prosim o kontrolu - wrapper.z5x.net

#11 Příspěvek od cica18 »

T-Cleaner se mi zasekne hned na zacatku:

Stisknete klávesu A pro pokracovani, N pro ukniceni programu: a
C:\Program Files\Trend Micro\hijackthis.exe
C:\Program Files\Trend Micro\Marketa.exe

a dal nejede
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: prosim o kontrolu - wrapper.z5x.net

#12 Příspěvek od JaRon »

pokracuj dalsim krokom :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Odpovědět

Vrátit se na „Řešení problémů, logy“