ahoj, avast mi našel nějakou havět, tak vkládám log:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-05-2014 02
Ran by Camilla (administrator) on CAMILLA on 27-05-2014 12:05:47
Running from C:\Users\Camilla\Desktop
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\AsLdrSrv.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\HControl.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe
(NETGEAR) C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\WDC.exe
(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\avastui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\ShopperPro\JSDriver\1.36.1.172\jsdrv.exe
(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(forum.viry.cz) C:\Users\Camilla\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [] => [X]
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1549608 2009-08-17] (Synaptics Incorporated)
HKLM\...\Run: [HControlUser] => C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7739936 2009-09-16] (Realtek Semiconductor)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3888648 2014-05-27] (AVAST Software)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [SPDriver] => C:\Program Files\ShopperPro\JSDriver\1.36.1.172\jsdrv.exe [3350528 2014-04-28] ()
HKLM\...\RunOnce: [20140526] - C:\Program Files\Alwil Software\Avast5\setup\emupdate\5746f1c4-6291-4737-8e8e-bbe327075e22.exe /check [182720 2014-05-27] (AVAST Software)
HKU\S-1-5-21-2610358269-3719754714-3110867542-1001\...\Run: [TomTomHOME.exe] => C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-08-27] (TomTom)
HKU\S-1-5-21-2610358269-3719754714-3110867542-1001\...\Run: [SPDriver] => C:\Program Files\ShopperPro\JSDriver\1.36.1.172\jsdrv.exe [3350528 2014-04-28] ()
Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=AV01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xBF337BD0E904CB01
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.msn.com/?pc=AV01
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=AV01
SearchScopes: HKLM - DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
SearchScopes: HKLM - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
SearchScopes: HKCU - DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: No Name - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - No File
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: 127.0.0.1 localhost
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Camilla\AppData\Roaming\Mozilla\Firefox\Profiles\ocqo4mrv.default-1387555730067
FF Homepage: www.seznam.cz
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npLegitCheckPlugin.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Shopper-Pro - C:\Users\Camilla\AppData\Roaming\Mozilla\Firefox\Profiles\ocqo4mrv.default-1387555730067\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF} [2014-05-25]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-05-11]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-05-11]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-05-11]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-05-19]
========================== Services (Whitelisted) =================
R2 ASLDRService; C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe [84536 2009-06-15] (ASUS)
R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2014-05-09] (AVAST Software)
R2 NETGEARGenieDaemon; C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe [195400 2012-07-10] (NETGEAR)
==================== Drivers (Whitelisted) ====================
U3 Amdcl32;
R3 amdkmdag; C:\Windows\System32\DRIVERS\atipmdag.sys [5166592 2009-10-02] (ATI Technologies Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-05-09] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-05-09] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [777488 2014-05-16] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [411680 2014-05-16] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [68312 2014-05-16] (AVAST Software)
R1 aswTdi; C:\Windows\system32\Drivers\aswTdi.sys [56080 2013-12-19] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180632 2014-05-09] ()
R3 btwampfl; C:\Windows\system32\drivers\btwampfl.sys [508184 2013-08-28] (Broadcom Corporation.)
S3 HPEWSFXBULK; C:\Windows\System32\drivers\hpfxbulk.sys [17432 2009-02-25] (Hewlett Packard)
R3 HPFXBULK; C:\Windows\System32\drivers\hpfxbulk.sys [17432 2009-02-25] (Hewlett Packard)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [14392 2009-05-13] (ASUS)
R2 NPF; C:\Windows\system32\drivers\npf.sys [35088 2012-11-17] (CACE Technologies, Inc.)
R3 pfc; C:\Windows\System32\drivers\pfc.sys [10368 2011-02-26] (Padus, Inc.)
R3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [155648 2009-07-17] (Realtek Semiconductor Corp.)
R2 SPDRIVER_1.36.1.172; C:\Program Files\ShopperPro\JSDriver\1.36.1.172\jsdrv.sys [41320 2014-04-28] ()
S3 cpuz132; \??\C:\Users\Camilla\AppData\Local\Temp\cpuz132\cpuz132_x32.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-27 12:05 - 2014-05-27 12:06 - 00011653 _____ () C:\Users\Camilla\Desktop\FRST.txt
2014-05-27 12:05 - 2014-05-27 12:05 - 00000000 ____D () C:\FRST
2014-05-27 11:46 - 2014-05-27 11:46 - 00112640 _____ (forum.viry.cz) C:\Users\Camilla\Desktop\FRSTLauncher.exe
2014-05-27 11:43 - 2014-05-27 11:43 - 01056256 _____ (Farbar) C:\Users\Camilla\Desktop\FRST.exe
2014-05-26 08:54 - 2014-05-26 08:54 - 00000000 __SHD () C:\Users\Camilla\AppData\Local\EmieUserList
2014-05-26 08:54 - 2014-05-26 08:54 - 00000000 __SHD () C:\Users\Camilla\AppData\Local\EmieSiteList
2014-05-26 08:39 - 2014-05-27 10:34 - 00000224 _____ () C:\Windows\setupact.log
2014-05-26 08:39 - 2014-05-26 08:39 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-25 13:21 - 2014-05-25 13:21 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2014-05-25 13:21 - 2014-05-25 13:21 - 00000000 ____D () C:\ProgramData\ShopperPro
2014-05-25 13:20 - 2014-05-27 08:48 - 00000000 ____D () C:\Program Files\ShopperPro
2014-05-21 09:04 - 2014-05-27 08:29 - 00000000 ____D () C:\Program Files\Object Browser
2014-05-18 23:03 - 2014-05-19 19:14 - 00000000 ____D () C:\Program Files\globalUpdate
2014-05-18 23:03 - 2014-05-18 23:03 - 00000000 ____D () C:\Users\Camilla\AppData\Local\globalUpdate
2014-05-18 23:02 - 2014-05-18 23:07 - 00000000 ____D () C:\Program Files\SpeedItup Free
2014-05-18 23:02 - 2014-05-18 23:02 - 00000000 ____D () C:\Users\Camilla\AppData\Local\CrashRpt
2014-05-18 23:02 - 2014-05-18 23:02 - 00000000 _____ () C:\ProgramData\spds90.txt
2014-05-16 12:17 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-16 12:17 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-16 12:17 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-16 11:16 - 2014-05-09 09:06 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-16 11:16 - 2014-05-09 09:04 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-16 11:16 - 2014-04-12 04:15 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-16 11:16 - 2014-04-12 04:15 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-16 11:16 - 2014-04-12 04:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-16 11:16 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-16 11:16 - 2014-04-12 04:12 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-16 11:16 - 2014-04-12 04:11 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-16 11:16 - 2014-04-12 04:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-16 11:16 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-05-16 11:16 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-16 11:16 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-16 11:16 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-16 11:16 - 2014-03-04 11:17 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-16 11:16 - 2014-03-04 11:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-16 11:16 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-16 11:16 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-16 11:16 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-16 11:16 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-16 11:16 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-16 11:16 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-16 11:16 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-16 11:16 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-16 11:16 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-16 11:16 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-16 11:16 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-16 11:15 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-11 11:11 - 2014-05-11 11:11 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-05-09 09:03 - 2014-05-09 09:03 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-05-09 09:03 - 2014-05-09 09:03 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-05-07 08:27 - 2014-05-16 12:25 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-04-30 11:13 - 2014-04-30 13:09 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-04-29 12:42 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-29 12:41 - 2014-03-06 10:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-29 12:41 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-29 12:41 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-29 12:41 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-29 12:41 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-29 12:41 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-29 12:41 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-29 12:41 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-29 12:41 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-29 12:41 - 2014-03-06 09:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-29 12:41 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-29 12:41 - 2014-03-06 09:28 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-29 12:41 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-29 12:41 - 2014-03-06 09:18 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-29 12:41 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-29 12:41 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-29 12:41 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-29 12:41 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-29 12:41 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-29 12:41 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-29 12:41 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-29 12:41 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-29 12:41 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
==================== One Month Modified Files and Folders =======
2014-05-27 12:06 - 2014-05-27 12:05 - 00011653 _____ () C:\Users\Camilla\Desktop\FRST.txt
2014-05-27 12:05 - 2014-05-27 12:05 - 00000000 ____D () C:\FRST
2014-05-27 11:46 - 2014-05-27 11:46 - 00112640 _____ (forum.viry.cz) C:\Users\Camilla\Desktop\FRSTLauncher.exe
2014-05-27 11:45 - 2012-04-06 09:57 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-27 11:43 - 2014-05-27 11:43 - 01056256 _____ (Farbar) C:\Users\Camilla\Desktop\FRST.exe
2014-05-27 10:43 - 2009-07-14 06:34 - 00014240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-27 10:43 - 2009-07-14 06:34 - 00014240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-27 10:40 - 2013-02-17 23:08 - 01273634 _____ () C:\Windows\WindowsUpdate.log
2014-05-27 10:34 - 2014-05-26 08:39 - 00000224 _____ () C:\Windows\setupact.log
2014-05-27 10:34 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-27 08:48 - 2014-05-25 13:20 - 00000000 ____D () C:\Program Files\ShopperPro
2014-05-27 08:29 - 2014-05-21 09:04 - 00000000 ____D () C:\Program Files\Object Browser
2014-05-26 20:40 - 2010-06-06 09:46 - 00098168 _____ () C:\Users\Camilla\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-26 08:54 - 2014-05-26 08:54 - 00000000 __SHD () C:\Users\Camilla\AppData\Local\EmieUserList
2014-05-26 08:54 - 2014-05-26 08:54 - 00000000 __SHD () C:\Users\Camilla\AppData\Local\EmieSiteList
2014-05-26 08:40 - 2009-07-14 06:33 - 03938848 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-26 08:39 - 2014-05-26 08:39 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-25 13:21 - 2014-05-25 13:21 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2014-05-25 13:21 - 2014-05-25 13:21 - 00000000 ____D () C:\ProgramData\ShopperPro
2014-05-22 13:05 - 2011-02-20 17:06 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR
2014-05-19 19:14 - 2014-05-18 23:03 - 00000000 ____D () C:\Program Files\globalUpdate
2014-05-18 23:11 - 2013-11-07 21:22 - 00000000 ____D () C:\Users\Camilla\AppData\Local\CrashDumps
2014-05-18 23:07 - 2014-05-18 23:02 - 00000000 ____D () C:\Program Files\SpeedItup Free
2014-05-18 23:03 - 2014-05-18 23:03 - 00000000 ____D () C:\Users\Camilla\AppData\Local\globalUpdate
2014-05-18 23:02 - 2014-05-18 23:02 - 00000000 ____D () C:\Users\Camilla\AppData\Local\CrashRpt
2014-05-18 23:02 - 2014-05-18 23:02 - 00000000 _____ () C:\ProgramData\spds90.txt
2014-05-17 09:37 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-05-16 12:58 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-05-16 12:32 - 2012-04-06 09:57 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-05-16 12:32 - 2011-05-20 16:43 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-05-16 12:25 - 2014-05-07 08:27 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-16 12:23 - 2013-08-18 18:44 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-16 12:20 - 2010-06-09 19:40 - 90547776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-16 11:09 - 2014-01-13 12:43 - 00068312 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-05-16 11:09 - 2011-05-19 17:31 - 00777488 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-05-16 11:09 - 2010-06-05 22:06 - 00411680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-05-16 11:08 - 2012-09-03 18:52 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-13 16:23 - 2010-06-05 22:06 - 01584554 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-13 08:50 - 2012-05-15 11:29 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-05-12 08:28 - 2014-04-04 14:50 - 00000000 ____D () C:\Program Files\Mozilla Firefox.bak
2014-05-11 17:19 - 2011-10-27 18:12 - 00000000 ____D () C:\Users\Camilla\AppData\Roaming\Any Video Converter Professional
2014-05-11 11:11 - 2014-05-11 11:11 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-05-11 09:58 - 2009-07-14 06:53 - 00032578 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-05-10 10:27 - 2013-09-11 10:24 - 00005120 _____ () C:\Users\Camilla\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-09 09:06 - 2014-05-16 11:16 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 09:04 - 2014-05-16 11:16 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-09 09:03 - 2014-05-09 09:03 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-05-09 09:03 - 2014-05-09 09:03 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-05-09 09:03 - 2014-02-19 11:08 - 00002025 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-09 09:03 - 2013-03-20 18:36 - 00180632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-05-09 09:03 - 2013-03-20 18:36 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-05-09 09:03 - 2012-03-26 17:38 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-05-09 09:03 - 2011-05-19 17:31 - 00776976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1400231393926
2014-05-09 09:03 - 2010-06-05 22:06 - 00411552 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1400231393926
2014-05-09 09:03 - 2010-06-05 22:06 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-05-09 09:03 - 2010-06-05 22:04 - 00271264 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-05-06 05:25 - 2014-05-16 12:17 - 17382912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 05:07 - 2014-05-16 12:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 04:10 - 2014-05-16 12:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-04-30 13:09 - 2014-04-30 11:13 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe
[2014-05-16 11:16] - [2014-03-04 11:17] - 0304128 ____A (Microsoft Corporation) 998507B046BA314CE8245364C686FA67
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Camilla\Desktop" je 85 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Color LaserJet CM1312 MFP Series Fax
C:\Program Files\HP\HP Color LaserJet CM1312 MFP Series\hppfaxprintersrv.exe "HP Color LaserJet CM1312 MFP Series Fax" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPUsageTracking
"C:\Program Files\HP\HP UT\bin\hppusg.exe" "C:\Program Files\HP\HP UT\" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NETGEARGenie
"C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe" -mini -redirect [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar
C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
"C:\Program Files\Common Files\Java\Java Update\jusched.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk
C:\PROGRA~1\MICROS~2\Office10\OSA.EXE
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
prosím o kontrolu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: prosím o kontrolu
ahoj,
log vypada OK
preventivne prescanuj s MBAM
log vypada OK
preventivne prescanuj s MBAM
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
-
Camilla
- Návštěvník

- Příspěvky: 21
- Registrován: 06 Led 2007 19:41
- Místo/Bydliště: Žatec (Ústecký kraj)
- Kontaktovat uživatele:
Re: prosím o kontrolu
díky moc, ráno mi jel test po restartu a bylo toho hafo, tak jsem to radši dala sem. Projedu to tím MBAM. díky 

Přispějete na provoz fóra?