Prosím o kontrolu logu (ads by onlinebrowseradvertising)

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
yorg
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 12 Črv 2007 06:33

Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#1 Příspěvek od yorg »

Dobrý den.
Měl jsem problém s tím, že se mi ve FF opakovaně zobrazovaly plochy pro reklamu "ads by onlinebrowseradvertising" a mimo to mi vyskakovalo prázdné okna bez obsahu.
Příčinou byl pravděpodobně malware Plus-HD-9.4 0.94.107, který se i po odstranění z doplňku po restartu PC opakovaně instaloval.

Pokusil jsem se to odstranit a chtěl bych vás poprosit o kontrolu, zda to bylo úspěšné a zda tam přece jen něco nezůstalo.

Děkuji

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-06-2014
Ran by Jiri (administrator) on JIRI-PC on 23-06-2014 20:34:48
Running from C:\Users\Jiri\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(LSoft Technologies Inc) C:\Program Files (x86)\LSoft Technologies Inc\Active@ Hard Disk Monitor\DiskMonitorService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NirSoft) C:\Program Files\volumouse\volumouse.exe
(Create Software) C:\Program Files (x86)\Create Software\Create Synchronicity\Create Synchronicity.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
(Microsoft Corporation) C:\Users\Jiri\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
() C:\Program Files\volumouse\volumouse32.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
(Software602) C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
( ) C:\Program Files (x86)\Datacolor\Spyder4Pro\Utility\SpyderUtility.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Prog-Soft s.r.o.) C:\Program Files (x86)\PSPad\PSPad.exe
(forum.viry.cz) C:\Users\Jiri\Desktop\FRST-OlderVersion\FRSTLauncher.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Print2PDF Print Monitor] => C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe [220992 2011-10-04] (Software602)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKU\.DEFAULT\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [122200 2014-06-09] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [$Volumouse$] => C:\Program Files\volumouse\volumouse.exe [88576 2012-01-08] (NirSoft)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [Create Synchronicity - Scheduler] => C:\Program Files (x86)\Create Software\Create Synchronicity\Create Synchronicity.exe [245248 2012-03-11] (Create Software)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [122200 2014-06-09] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [SkyDrive] => C:\Users\Jiri\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [251048 2014-06-22] (Microsoft Corporation)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [] => [X]
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [NokiaSuite.exe] => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-10-02] (Nokia)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [779776 2014-03-13] (ZONER software)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Policies\Explorer: []
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpyderUtility.lnk
ShortcutTarget: SpyderUtility.lnk -> C:\Program Files (x86)\Datacolor\Spyder4Pro\Utility\SpyderUtility.exe ( )
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk
ShortcutTarget: Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OUTLOOK – zástupce.lnk
ShortcutTarget: OUTLOOK – zástupce.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE (Microsoft Corporation)
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.webisgreat.info/?l=1&q ... Z&unqvl=48
SearchScopes: HKLM-x32 - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.webisgreat.info/?l=1&q ... Z&unqvl=48
SearchScopes: HKCU - URL http://www.trovigo.com/Results.aspx?gd= ... rms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON http://suggest.search.conduit.com/CSugg ... earchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Mouse Gestures - {A6A49249-57AE-4295-8D4D-18A9502C7D8E} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll (Drowse)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
DPF: HKLM-x32 {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} http://security.symantec.com/sscv6/Shar ... vSniff.cab
DPF: HKLM-x32 {644E432F-49D3-41A1-8DD5-E099162EEEC5} http://security.symantec.com/sscv6/Shar ... /cabsa.cab
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.196.124.1 217.196.124.14

FireFox:
========
FF ProfilePath: C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979
FF SelectedSearchEngine: Conduit Search
FF Homepage: chrome://fastdial/content/fastdial.html
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 - C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 - C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: OvisLink.com/CBCamV - C:\Windows\Downloaded Program Files\npOvisLinkCamV.dll (OvisLink)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Jiri\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\cs@dictionaries.addons.mozilla.org [2014-06-20]
FF Extension: Fast Dial - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\fastdial@telega.phpnet.us [2014-06-20]
FF Extension: Garmin Communicator - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2014-06-20]
FF Extension: IE Tab 2 (FF 3.6+) - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} [2014-06-20]
FF Extension: Flashblock - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-06-20]
FF Extension: Cookies Manager+ - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d} [2014-06-20]
FF Extension: Block site - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc} [2014-06-20]
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\elemhidehelper@adblockplus.org.xpi [2014-06-20]
FF Extension: FireGestures - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\firegestures@xuldev.org.xpi [2014-06-20]
FF Extension: HyperTranslate - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\hypertranslate@mdc.com.xpi [2014-06-20]
FF Extension: Czech (CZ) Language Pack - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\langpack-cs@firefox.mozilla.org.xpi [2014-06-20]
FF Extension: QuickDrag - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\quickdrag@mozilla.ktechcomputing.com.xpi [2014-06-20]
FF Extension: Rotate Image - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\rotateimage@minisystems.de.xpi [2014-06-20]
FF Extension: FxIF - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{11483926-db67-4190-91b1-ef20fcec5f33}.xpi [2014-06-20]
FF Extension: Stylish - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2014-06-20]
FF Extension: Adblock Plus - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-20]
FF Extension: Tab Mix Plus - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2014-06-20]

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (YTBBoOkMarrK) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef [2014-02-14]
CHR Extension: (No Name) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhnjjbcnbmjmhgpliahlamecmbejpaol [2012-08-21]
CHR Extension: (SNT) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi [2014-02-14]
CHR Extension: (Best Save) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej [2014-02-14]
CHR Extension: (YoutubeAdblocker) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj [2014-02-14]
CHR Extension: (wweBsaavie) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek [2014-02-14]
CHR HKCU\...\Chrome\Extension: [bhnjjbcnbmjmhgpliahlamecmbejpaol] - C:\Users\Jiri\AppData\Local\CRE\bhnjjbcnbmjmhgpliahlamecmbejpaol.crx [2012-07-24]
CHR HKLM-x32\...\Chrome\Extension: [bhnjjbcnbmjmhgpliahlamecmbejpaol] - C:\Users\Jiri\AppData\Local\CRE\bhnjjbcnbmjmhgpliahlamecmbejpaol.crx [2012-07-24]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [73728 2010-04-14] (Software602 a.s.) [File not signed]
R2 Active@ Disk Monitor; C:\Program Files (x86)\LSoft Technologies Inc\Active@ Hard Disk Monitor\DiskMonitorService.exe [1464328 2010-09-15] (LSoft Technologies Inc)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [90112 2009-08-19] (ASUSTeK Computer Inc.) [File not signed]
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [435032 2014-06-09] (Garmin Ltd or its subsidiaries)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2013-12-03] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2013-12-03] (globalUpdate) [File not signed]
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-10-22] (VIA Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-09-01] (Intel Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [104912 2007-11-07] (EZB Systems, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R3 Spyder4; C:\Windows\System32\DRIVERS\dccmtr.sys [15360 2011-06-02] (Datacolor)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 efavdrv; \??\C:\Windows\system32\drivers\efavdrv.sys [X]
R3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-23 20:23 - 2014-06-23 20:34 - 00020465 _____ () C:\Users\Jiri\Desktop\FRST.txt
2014-06-23 20:23 - 2014-06-23 20:23 - 00000000 ____D () C:\Users\Jiri\Desktop\FRST-OlderVersion
2014-06-23 18:56 - 2014-06-23 18:56 - 00000687 _____ () C:\awh1110.tmp
2014-06-23 18:51 - 2014-06-23 18:51 - 00000000 ___HD () C:\OneDriveTemp
2014-06-22 21:54 - 2014-06-23 19:54 - 00000921 _____ () C:\Users\Jiri\Desktop\popis.TXT
2014-06-22 21:30 - 2014-06-23 20:34 - 00000000 ____D () C:\FRST
2014-06-22 21:29 - 2014-06-23 20:23 - 02082816 _____ (Farbar) C:\Users\Jiri\Desktop\FRST64.exe
2014-06-22 20:28 - 2014-06-22 20:28 - 00000687 _____ () C:\awhE4D2.tmp
2014-06-22 12:14 - 2014-06-22 12:14 - 00000000 ____D () C:\Users\Jiri\Desktop\Benro C2580F
2014-06-22 10:40 - 2014-06-22 10:40 - 00000687 _____ () C:\awh1C46.tmp
2014-06-21 22:53 - 2014-06-21 22:53 - 00000000 ____D () C:\Users\Jiri\AppData\Local\Anvisoft
2014-06-21 22:52 - 2014-06-21 23:06 - 00000000 ____D () C:\Program Files (x86)\Anvisoft
2014-06-21 22:25 - 2014-06-21 22:25 - 00000687 _____ () C:\awhE252.tmp
2014-06-21 21:20 - 2014-06-21 21:20 - 00000687 _____ () C:\awhE4F1.tmp
2014-06-21 09:56 - 2014-06-21 09:56 - 00000687 _____ () C:\awhE742.tmp
2014-06-20 17:23 - 2014-06-20 17:23 - 00000687 _____ () C:\awhE9A2.tmp
2014-06-18 21:08 - 2014-06-18 21:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia
2014-06-15 20:09 - 2014-06-15 20:10 - 00000135 _____ () C:\Windows\SysWOW64\debug.log
2014-06-15 08:46 - 2014-06-15 08:46 - 00108544 _____ () C:\Windows\SysWOW64\installd.exe
2014-06-15 08:45 - 2014-06-15 08:45 - 00246784 _____ () C:\Windows\SysWOW64\hfpapi.dll
2014-06-15 08:45 - 2014-06-15 08:45 - 00108544 _____ () C:\Windows\SysWOW64\hfnapi.dll
2014-06-12 17:38 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-12 17:38 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-12 17:38 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-12 17:38 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-12 17:38 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-12 17:38 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-12 17:38 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-12 17:38 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-12 17:38 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-12 17:38 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-12 17:38 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-12 17:38 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-12 17:38 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-12 17:38 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-12 17:38 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-12 17:38 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-12 17:38 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-12 17:38 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-12 17:38 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-12 17:38 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-12 17:38 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-12 17:38 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-12 17:38 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-12 17:38 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-12 17:38 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-12 17:38 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-12 17:38 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-12 17:38 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-12 17:38 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-12 17:38 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-12 17:38 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-12 17:38 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-12 17:38 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-12 17:38 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-12 17:38 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-12 17:38 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-12 17:38 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-12 17:38 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-12 17:38 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-12 17:38 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-12 17:38 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-12 17:38 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-12 17:38 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-12 17:38 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-12 17:38 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-12 17:38 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-12 17:38 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-12 17:38 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-12 17:38 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-12 17:38 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-12 17:38 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-12 17:38 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-12 17:38 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-12 17:38 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-12 17:38 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 17:38 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-12 17:38 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-12 17:38 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-12 17:38 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-12 17:38 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-12 17:38 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-12 17:38 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-12 17:38 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-12 17:38 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-12 17:38 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-06-12 17:38 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-12 17:37 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-12 17:37 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-11 21:20 - 2014-06-11 21:20 - 00000244 _____ () C:\Users\Jiri\Desktop\ecce homo fotky.URL
2014-06-11 19:02 - 2014-06-21 23:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-11 18:43 - 2014-06-11 18:43 - 00000000 ____D () C:\ProgramData\F-Secure
2014-06-11 18:05 - 2014-06-11 22:57 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\FreeFileSync
2014-06-11 18:05 - 2014-06-11 18:05 - 00000938 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileSync.lnk
2014-06-11 18:05 - 2014-06-11 18:05 - 00000926 _____ () C:\Users\Public\Desktop\FreeFileSync.lnk
2014-06-11 18:05 - 2014-06-11 18:05 - 00000000 ____D () C:\Program Files\FreeFileSync
2014-05-31 13:10 - 2014-05-31 13:10 - 00000221 _____ () C:\Users\Jiri\Desktop\4 - OSEL.CZ - popularizační videa ČAV.URL

==================== One Month Modified Files and Folders =======

2014-06-23 20:34 - 2014-06-23 20:23 - 00020465 _____ () C:\Users\Jiri\Desktop\FRST.txt
2014-06-23 20:34 - 2014-06-22 21:30 - 00000000 ____D () C:\FRST
2014-06-23 20:23 - 2014-06-23 20:23 - 00000000 ____D () C:\Users\Jiri\Desktop\FRST-OlderVersion
2014-06-23 20:23 - 2014-06-22 21:29 - 02082816 _____ (Farbar) C:\Users\Jiri\Desktop\FRST64.exe
2014-06-23 20:17 - 2009-07-14 06:45 - 00013472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-23 20:17 - 2009-07-14 06:45 - 00013472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-23 20:16 - 2013-08-30 16:38 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-23 20:14 - 2009-07-14 17:18 - 00673174 _____ () C:\Windows\system32\perfh005.dat
2014-06-23 20:14 - 2009-07-14 17:18 - 00143268 _____ () C:\Windows\system32\perfc005.dat
2014-06-23 20:14 - 2009-07-14 07:13 - 01596572 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-23 20:13 - 2012-08-20 19:35 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\AIMP3
2014-06-23 20:13 - 2012-08-20 17:10 - 01561474 ____N () C:\Windows\WindowsUpdate.log
2014-06-23 20:10 - 2013-12-03 23:59 - 00000908 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-06-23 20:10 - 2012-10-19 21:53 - 00000000 ___RD () C:\Users\Jiri\SkyDrive
2014-06-23 20:10 - 2012-08-20 21:19 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\Skype
2014-06-23 20:09 - 2013-06-25 20:01 - 00000000 _____ () C:\Windows\system32\Drivers\lvuvc.hs
2014-06-23 20:09 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-23 20:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-06-23 20:04 - 2014-03-19 22:54 - 00000000 ____D () C:\Program Files\Conduit
2014-06-23 20:04 - 2014-02-14 22:41 - 00000000 ____D () C:\Users\Jiri\AppData\Local\genienext
2014-06-23 20:04 - 2012-08-21 11:13 - 00000000 ____D () C:\Users\Jiri\AppData\Local\Conduit
2014-06-23 20:04 - 2012-08-21 11:13 - 00000000 ____D () C:\Program Files (x86)\Conduit
2014-06-23 19:57 - 2013-07-13 20:50 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-23 19:54 - 2014-06-22 21:54 - 00000921 _____ () C:\Users\Jiri\Desktop\popis.TXT
2014-06-23 18:56 - 2014-06-23 18:56 - 00000687 _____ () C:\awh1110.tmp
2014-06-23 18:51 - 2014-06-23 18:51 - 00000000 ___HD () C:\OneDriveTemp
2014-06-22 21:17 - 2014-02-20 21:33 - 00002157 _____ () C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-06-22 20:28 - 2014-06-22 20:28 - 00000687 _____ () C:\awhE4D2.tmp
2014-06-22 12:14 - 2014-06-22 12:14 - 00000000 ____D () C:\Users\Jiri\Desktop\Benro C2580F
2014-06-22 11:04 - 2013-12-03 23:59 - 00000912 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-06-22 10:40 - 2014-06-22 10:40 - 00000687 _____ () C:\awh1C46.tmp
2014-06-22 10:35 - 2009-07-14 07:08 - 00032558 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-21 23:06 - 2014-06-21 22:52 - 00000000 ____D () C:\Program Files (x86)\Anvisoft
2014-06-21 23:05 - 2014-06-11 19:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-21 23:04 - 2013-11-05 20:49 - 00000000 ____D () C:\Users\Jiri\Desktop\angličtina
2014-06-21 23:04 - 2013-11-05 20:45 - 00000000 ___RD () C:\Users\Jiri\Desktop\Programy
2014-06-21 23:04 - 2012-09-30 10:58 - 00000000 ____D () C:\Users\Jiri\AppData\Local\CrashDumps
2014-06-21 23:04 - 2012-08-20 18:05 - 00000000 ____D () C:\Windows\Panther
2014-06-21 22:53 - 2014-06-21 22:53 - 00000000 ____D () C:\Users\Jiri\AppData\Local\Anvisoft
2014-06-21 22:25 - 2014-06-21 22:25 - 00000687 _____ () C:\awhE252.tmp
2014-06-21 22:01 - 2013-12-03 23:59 - 00000000 ____D () C:\Program Files\PCDApp
2014-06-21 21:20 - 2014-06-21 21:20 - 00000687 _____ () C:\awhE4F1.tmp
2014-06-21 09:56 - 2014-06-21 09:56 - 00000687 _____ () C:\awhE742.tmp
2014-06-20 17:23 - 2014-06-20 17:23 - 00000687 _____ () C:\awhE9A2.tmp
2014-06-19 23:19 - 2013-12-03 23:59 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\Seznam.cz
2014-06-18 21:08 - 2014-06-18 21:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia
2014-06-16 22:46 - 2013-10-23 23:01 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\vlc
2014-06-16 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-06-15 20:10 - 2014-06-15 20:09 - 00000135 _____ () C:\Windows\SysWOW64\debug.log
2014-06-15 20:09 - 2012-08-20 17:37 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\Adobe
2014-06-15 08:46 - 2014-06-15 08:46 - 00108544 _____ () C:\Windows\SysWOW64\installd.exe
2014-06-15 08:45 - 2014-06-15 08:45 - 00246784 _____ () C:\Windows\SysWOW64\hfpapi.dll
2014-06-15 08:45 - 2014-06-15 08:45 - 00108544 _____ () C:\Windows\SysWOW64\hfnapi.dll
2014-06-12 18:51 - 2013-08-17 21:01 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 18:48 - 2012-08-20 20:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-12 18:48 - 2012-08-20 19:26 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-12 18:46 - 2014-05-06 21:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-12 17:45 - 2013-03-14 19:25 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-12 17:44 - 2014-03-19 22:31 - 00003556 _____ () C:\Windows\System32\Tasks\GarminUpdaterTask
2014-06-12 17:44 - 2012-08-21 07:16 - 00000000 ____D () C:\ProgramData\Garmin
2014-06-12 17:44 - 2012-08-20 19:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-06-12 17:44 - 2012-08-20 19:42 - 00000000 ____D () C:\Program Files (x86)\Garmin
2014-06-12 17:33 - 2014-03-15 10:30 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-12 17:33 - 2012-08-20 21:11 - 00000000 ____D () C:\ProgramData\Skype
2014-06-12 17:33 - 2012-08-20 17:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-11 22:57 - 2014-06-11 18:05 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\FreeFileSync
2014-06-11 21:20 - 2014-06-11 21:20 - 00000244 _____ () C:\Users\Jiri\Desktop\ecce homo fotky.URL
2014-06-11 18:43 - 2014-06-11 18:43 - 00000000 ____D () C:\ProgramData\F-Secure
2014-06-11 18:05 - 2014-06-11 18:05 - 00000938 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileSync.lnk
2014-06-11 18:05 - 2014-06-11 18:05 - 00000926 _____ () C:\Users\Public\Desktop\FreeFileSync.lnk
2014-06-11 18:05 - 2014-06-11 18:05 - 00000000 ____D () C:\Program Files\FreeFileSync
2014-06-11 17:58 - 2014-03-25 21:16 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-06-09 20:48 - 2012-08-20 20:49 - 00000000 ____D () C:\Program Files (x86)\rajce
2014-06-08 11:13 - 2014-06-12 17:37 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 11:08 - 2014-06-12 17:37 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-07 22:11 - 2014-03-02 21:40 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\avidemux
2014-06-07 21:10 - 2014-03-04 00:36 - 00000000 ___RD () C:\Users\Jiri\Desktop\video
2014-06-05 23:09 - 2012-09-19 19:44 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\YouTube Downloader
2014-06-05 19:38 - 2012-08-30 19:01 - 00000000 ____D () C:\Users\Jiri\AppData\Local\GARMIN_Corp
2014-06-03 19:54 - 2012-08-20 20:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-06-02 19:45 - 2014-05-22 21:44 - 00000000 ____D () C:\ProgramData\Corel
2014-06-01 19:26 - 2012-08-20 18:29 - 00000784 _____ () C:\Users\Jiri\Desktop\LR disk H.cmd
2014-05-31 13:10 - 2014-05-31 13:10 - 00000221 _____ () C:\Users\Jiri\Desktop\4 - OSEL.CZ - popularizační videa ČAV.URL
2014-05-30 12:21 - 2014-06-12 17:38 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-30 12:02 - 2014-06-12 17:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-30 12:02 - 2014-06-12 17:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-30 11:45 - 2014-06-12 17:38 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-30 11:39 - 2014-06-12 17:38 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-30 11:39 - 2014-06-12 17:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-30 11:38 - 2014-06-12 17:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-30 11:28 - 2014-06-12 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-30 11:27 - 2014-06-12 17:38 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-30 11:24 - 2014-06-12 17:38 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-30 11:21 - 2014-06-12 17:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-30 11:21 - 2014-06-12 17:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-30 11:20 - 2014-06-12 17:38 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-30 11:18 - 2014-06-12 17:38 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-30 11:11 - 2014-06-12 17:38 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-30 11:08 - 2014-06-12 17:38 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-30 11:06 - 2014-06-12 17:38 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-30 11:02 - 2014-06-12 17:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-30 10:55 - 2014-06-12 17:38 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-30 10:49 - 2014-06-12 17:38 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-30 10:46 - 2014-06-12 17:38 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-30 10:44 - 2014-06-12 17:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-30 10:44 - 2014-06-12 17:38 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-30 10:43 - 2014-06-12 17:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-30 10:42 - 2014-06-12 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-30 10:38 - 2014-06-12 17:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-30 10:35 - 2014-06-12 17:38 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-30 10:34 - 2014-06-12 17:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-30 10:33 - 2014-06-12 17:38 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-30 10:30 - 2014-06-12 17:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-30 10:29 - 2014-06-12 17:38 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-30 10:28 - 2014-06-12 17:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-30 10:27 - 2014-06-12 17:38 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-30 10:24 - 2014-06-12 17:38 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-05-30 10:23 - 2014-06-12 17:38 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-30 10:16 - 2014-06-12 17:38 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-30 10:10 - 2014-06-12 17:38 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-30 10:06 - 2014-06-12 17:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-30 10:04 - 2014-06-12 17:38 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-30 10:02 - 2014-06-12 17:38 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-30 09:56 - 2014-06-12 17:38 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-30 09:56 - 2014-06-12 17:38 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-30 09:54 - 2014-06-12 17:38 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-30 09:50 - 2014-06-12 17:38 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-05-30 09:49 - 2014-06-12 17:38 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-30 09:43 - 2014-06-12 17:38 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-30 09:40 - 2014-06-12 17:38 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-30 09:30 - 2014-06-12 17:38 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-30 09:21 - 2014-06-12 17:38 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-30 09:15 - 2014-06-12 17:38 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-30 09:13 - 2014-06-12 17:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-30 09:13 - 2014-06-12 17:38 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-27 16:08 - 2012-08-20 20:35 - 00000000 ____D () C:\ProgramData\TEMP
2014-05-24 20:22 - 2012-08-20 18:29 - 00000079 _____ () C:\Users\Jiri\Desktop\ping_dlouhy.cmd
2014-05-24 20:19 - 2012-08-20 18:29 - 00000044 _____ () C:\Users\Jiri\Desktop\ping_kratky.cmd

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-08 19:43




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:111.69 GB) (Free:26.65 GB) NTFS
Drive d: (disk500GB) (Fixed) (Total:465.76 GB) (Free:219.92 GB) NTFS
Drive f: (data) (Fixed) (Total:1397.26 GB) (Free:792.76 GB) NTFS

Available physical RAM: 5761.04 MB
Total physical RAM: 8190.05 MB
Percentage of memory in use: 29%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: D4F83DD6)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=112 GB) - (Type=07 NTFS)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 8305B1E2)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: 0264FC25)
Partition 1: (Not Active) - (Size=-698723860480) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\TEMP:12B8C802
AlternateDataStreams: C:\ProgramData\TEMP:39413AC3
AlternateDataStreams: C:\ProgramData\TEMP:3F30E778
AlternateDataStreams: C:\ProgramData\TEMP:493B3641
AlternateDataStreams: C:\ProgramData\TEMP:69E87FA2
AlternateDataStreams: C:\ProgramData\TEMP:838D4792
AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939
AlternateDataStreams: C:\ProgramData\TEMP:DEDD192D

==================== Security Center ==================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Jiri\Desktop" je 9 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyDrive
"C:\Users\Jiri\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background [x]


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================


Dodatek:
Přílohy
Addition.7z
(9.28 KiB) Staženo 60 x
Naposledy upravil(a) vyosek dne 23 Črv 2014 19:53, celkem upraveno 1 x.
Důvod: log odstranen z quote
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
yorg
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 12 Črv 2007 06:33

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#3 Příspěvek od yorg »

Děkuji za odpověď.
Jak vidím, tak tam toho ještě bylo dost ...

# AdwCleaner v3.213 - Report created 23/06/2014 at 21:54:13
# Updated 23/06/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Jiri - JIRI-PC
# Running from : C:\Users\Jiri\Desktop\adwcleaner_3.213.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\SNT
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\AlllCheaPPrrice
Folder Deleted : C:\ProgramData\websavvee
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\PCDApp
Folder Deleted : C:\Users\Administrator\AppData\Local\torch
Folder Deleted : C:\Users\Guest\AppData\Local\torch
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\torch
Folder Deleted : C:\Users\Jiri\AppData\Local\Conduit
Folder Deleted : C:\Users\Jiri\AppData\Local\genienext
Folder Deleted : C:\Users\Jiri\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Jiri\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Jiri\AppData\Local\torch
Folder Deleted : C:\Users\Jiri\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Jiri\AppData\Roaming\iPumper
Folder Deleted : C:\Users\sdileni\AppData\Local\torch
Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
Folder Deleted : C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
Folder Deleted : C:\Users\sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
Folder Deleted : C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
Folder Deleted : C:\Users\sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
Folder Deleted : C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
Folder Deleted : C:\Users\sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
File Deleted : C:\END
File Deleted : C:\Users\Jiri\daemonprocess.txt
File Deleted : C:\Users\Jiri\AppData\Roaming\LiveSupport.exe_log.txt
File Deleted : C:\Users\Jiri\AppData\Roaming\regsvr32.exe_log.txt
File Deleted : C:\Windows\System32\Tasks\Escolade
File Deleted : C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
File Deleted : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
File Deleted : C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
File Deleted : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-5195167130
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_pinnacle-videospin_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_pinnacle-videospin_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Escolade
Key Deleted : HKCU\Software\PIP
Key Deleted : HKCU\Software\Pokki
Key Deleted : HKCU\Software\RegisteredApplicationsEx
Key Deleted : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Deleted : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}
Key Deleted : [x64] HKLM\SOFTWARE\Speedchecker Limited
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Mozilla Firefox v30.0 (cs)

[ File : C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\prefs.js ]

Line Deleted : user_pref("browser.search.selectedEngine", "Conduit Search");

-\\ Google Chrome v

[ File : C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [8729 octets] - [23/06/2014 21:53:11]
AdwCleaner[S0].txt - [8495 octets] - [23/06/2014 21:54:13]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8555 octets] ##########
Naposledy upravil(a) vyosek dne 24 Črv 2014 05:40, celkem upraveno 1 x.
Důvod: log odstranen z quote
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#4 Příspěvek od vyosek »

:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
yorg
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 12 Črv 2007 06:33

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#5 Příspěvek od yorg »

Zde je požadovaný log.

Zoek.exe v5.0.0.0 Updated 22-06-2014
Tool run by Jiri on po 23.06.2014 at 22:13:46,09.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Jiri\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

23.6.2014 22:14:40 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6A49249-57AE-4295-8D4D-18A9502C7D8E} deleted successfully
HKEY_USERS\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A6A49249-57AE-4295-8D4D-18A9502C7D8E} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{A6A49249-57AE-4295-8D4D-18A9502C7D8E} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A6A49249-57AE-4295-8D4D-18A9502C7D8E} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{62D40876-DF18-411F-9D34-A9DD7A197BC5} deleted successfully
HKEY_USERS\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{A6A49249-57AE-4295-8D4D-18A9502C7D8E} deleted successfully
HKEY_USERS\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{9a757e3e-b120-4cce-adb0-781b2a8eac03} deleted successfully
HKEY_USERS\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{C9C42510-9B41-42c1-9DCD-7282A2D07C61} deleted successfully
HKEY_USERS\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110511311164} deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\prefs.js:
user_pref("browser.startup.homepage", "chrome://fastdial/content/fastdial.html");

Added to C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\prefs.js:

==== Deleting Files \ Folders ======================

C:\PROGRA~3\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} deleted
C:\Users\Jiri\AppData\LocalLow\{07739F97-FEFB-82EA-0061-1E6AB6BFFB8F} deleted
C:\Users\Jiri\AppData\LocalLow\{145D3096-67EA-B9FC-E79E-79FA947DCC14} deleted
C:\Users\Jiri\AppData\LocalLow\{966FBDF6-DE27-4F10-8CE1-7651EB976285} deleted
C:\Users\Jiri\AppData\LocalLow\{C80B0340-8095-56D5-60A8-27E3E596660C} deleted
C:\Users\Jiri\AppData\LocalLow\{CC225A68-1882-64CD-2112-A81B17DA0DE2} deleted
C:\Users\Jiri\AppData\Local\Packages\windows_ie_ac_001\AC\{07739F97-FEFB-82EA-0061-1E6AB6BFFB8F} deleted
C:\Users\Jiri\AppData\Local\Packages\windows_ie_ac_001\AC\{145D3096-67EA-B9FC-E79E-79FA947DCC14} deleted
C:\Users\Jiri\AppData\Local\Packages\windows_ie_ac_001\AC\{966FBDF6-DE27-4F10-8CE1-7651EB976285} deleted
C:\Users\Jiri\AppData\Local\Packages\windows_ie_ac_001\AC\{C80B0340-8095-56D5-60A8-27E3E596660C} deleted
C:\Users\Jiri\AppData\Local\Packages\windows_ie_ac_001\AC\{CC225A68-1882-64CD-2112-A81B17DA0DE2} deleted
C:\PROGRA~3\8f0ada70845d6e39 deleted
C:\Users\Jiri\.android deleted
C:\PROGRA~3\TubeItAdBlockFr deleted
C:\PROGRA~2\TubeItAdBlockFr deleted
C:\PROGRA~2\Mozilla Firefox\defaults\preferences\pref.js deleted
C:\PROGRA~3\InstallMate deleted
C:\PROGRA~3\GreatSoft deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Jiri\AppData\Local\CRE deleted
C:\Users\Jiri\AppData\Local\cache deleted
C:\Users\Jiri\Searches deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
"C:\Users\Jiri\AppData\Roaming\DriveCalculator Preferences" deleted
"C:\PROGRA~3\klcehoppgafgogecnclcbbbnocokbhkk\klcehoppgafgogecnclcbbbnocokbhkk.crx" deleted
"C:\PROGRA~3\klcehoppgafgogecnclcbbbnocokbhkk\update.xml" deleted
"C:\PROGRA~3\klcehoppgafgogecnclcbbbnocokbhkk" deleted

==== Firefox Extensions ======================

ProfilePath: C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979
- esk slovnk pro kontrolu pravopisu - %ProfilePath%\extensions\cs@dictionaries.addons.mozilla.org
- Fast Dial - %ProfilePath%\extensions\fastdial@telega.phpnet.us
- Garmin Communicator - %ProfilePath%\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
- IE Tab 2 FF 3.6 - %ProfilePath%\extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}
- Flashblock - %ProfilePath%\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
- Cookies Manager - %ProfilePath%\extensions\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d}
- <--Block site--> - %ProfilePath%\extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc}
- Element Hiding Helper for Adblock Plus - %ProfilePath%\extensions\elemhidehelper@adblockplus.org.xpi
- FireGestures - %ProfilePath%\extensions\firegestures@xuldev.org.xpi
- HyperTranslate - %ProfilePath%\extensions\hypertranslate@mdc.com.xpi
- Czech CZ Language Pack - %ProfilePath%\extensions\langpack-cs@firefox.mozilla.org.xpi
- QuickDrag - %ProfilePath%\extensions\quickdrag@mozilla.ktechcomputing.com.xpi
- Rotate Image - %ProfilePath%\extensions\rotateimage@minisystems.de.xpi
- FxIF - %ProfilePath%\extensions\{11483926-db67-4190-91b1-ef20fcec5f33}.xpi
- Stylish - %ProfilePath%\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
- Tab Mix Plus - %ProfilePath%\extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979
9FD6A1990289B9290563CA069CB74EF9 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll - Shockwave Flash
78A14800AFD86B235DC48B260E8AEFDE - C:\Windows\Downloaded Program Files\npOvisLinkCamV.dll - OvisLinkCBCamV
99F97C9FE748C37528C338A423577FCB - C:\Users\Jiri\AppData\Roaming\Mozilla\plugins\np-mswmp.dll - Microsoft® Windows Media Player Firefox Plugin


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
bhnjjbcnbmjmhgpliahlamecmbejpaol - C:\Users\Jiri\AppData\Local\CRE\bhnjjbcnbmjmhgpliahlamecmbejpaol.crx[]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
bhnjjbcnbmjmhgpliahlamecmbejpaol - C:\Users\Jiri\AppData\Local\CRE\bhnjjbcnbmjmhgpliahlamecmbejpaol.crx[]

YTBBoOkMarrK - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
SNT - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YTBBoOkMarrK - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
YTBBoOkMarrK - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
SNT - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YTBBoOkMarrK - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
YTBBoOkMarrK - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
SNT - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YTBBoOkMarrK - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
YTBBoOkMarrK - Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
SNT - Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YTBBoOkMarrK - Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
YTBBoOkMarrK - sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
SNT - sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YTBBoOkMarrK - sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek

==== Chrome Fix ======================

C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhnjjbcnbmjmhgpliahlamecmbejpaol deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{3A7B27C9-F3CE-4D89-984D-25274E12BEDF} Google Url="http://www.google.com/search?q={searchT ... utEncoding?}"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google\Chrome\ExtensionInstallForcelist deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\bhnjjbcnbmjmhgpliahlamecmbejpaol deleted successfully
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\bhnjjbcnbmjmhgpliahlamecmbejpaol deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Jiri\AppData\Local\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Cache emptied successfully
C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\fastdial\cache emptied successfully

==== Empty Chrome Cache ======================

No Chrome Cache found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=569 folders=188 47894821 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Jiri\AppData\Local\Temp will be emptied at reboot
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Jiri\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on po 23.06.2014 at 22:26:12,22 ======================
Naposledy upravil(a) vyosek dne 24 Črv 2014 05:39, celkem upraveno 1 x.
Důvod: log odstranen z quote
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#6 Příspěvek od vyosek »

:arrow: Nedavejte ty logy do Quote

:arrow: Dejte log z FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
yorg
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 12 Črv 2007 06:33

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#7 Příspěvek od yorg »

Omlouvám se. Měl jsem za to, že to je přehlednější.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-06-2014
Ran by Jiri (administrator) on JIRI-PC on 24-06-2014 15:48:21
Running from C:\Users\Jiri\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(LSoft Technologies Inc) C:\Program Files (x86)\LSoft Technologies Inc\Active@ Hard Disk Monitor\DiskMonitorService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NirSoft) C:\Program Files\volumouse\volumouse.exe
(Create Software) C:\Program Files (x86)\Create Software\Create Synchronicity\Create Synchronicity.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
(Microsoft Corporation) C:\Users\Jiri\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
() C:\Program Files\volumouse\volumouse32.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Software602) C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
( ) C:\Program Files (x86)\Datacolor\Spyder4Pro\Utility\SpyderUtility.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Print2PDF Print Monitor] => C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe [220992 2011-10-04] (Software602)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKU\.DEFAULT\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [122200 2014-06-09] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [$Volumouse$] => C:\Program Files\volumouse\volumouse.exe [88576 2012-01-08] (NirSoft)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [Create Synchronicity - Scheduler] => C:\Program Files (x86)\Create Software\Create Synchronicity\Create Synchronicity.exe [245248 2012-03-11] (Create Software)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [122200 2014-06-09] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [SkyDrive] => C:\Users\Jiri\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [251048 2014-06-22] (Microsoft Corporation)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [] => [X]
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Policies\Explorer: []
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpyderUtility.lnk
ShortcutTarget: SpyderUtility.lnk -> C:\Program Files (x86)\Datacolor\Spyder4Pro\Utility\SpyderUtility.exe ( )
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk
ShortcutTarget: Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OUTLOOK – zástupce.lnk
ShortcutTarget: OUTLOOK – zástupce.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE (Microsoft Corporation)
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - URL http://www.trovigo.com/Results.aspx?gd= ... rms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON http://suggest.search.conduit.com/CSugg ... earchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
DPF: HKLM-x32 {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} http://security.symantec.com/sscv6/Shar ... vSniff.cab
DPF: HKLM-x32 {644E432F-49D3-41A1-8DD5-E099162EEEC5} http://security.symantec.com/sscv6/Shar ... /cabsa.cab
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.196.124.1 217.196.124.14

FireFox:
========
FF ProfilePath: C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979
FF Homepage: chrome://fastdial/content/fastdial.html
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: OvisLink.com/CBCamV - C:\Windows\Downloaded Program Files\npOvisLinkCamV.dll (OvisLink)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Jiri\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\cs@dictionaries.addons.mozilla.org [2014-06-20]
FF Extension: Fast Dial - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\fastdial@telega.phpnet.us [2014-06-20]
FF Extension: Garmin Communicator - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2014-06-20]
FF Extension: IE Tab 2 (FF 3.6+) - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} [2014-06-20]
FF Extension: Flashblock - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-06-20]
FF Extension: Cookies Manager+ - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d} [2014-06-20]
FF Extension: Block site - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc} [2014-06-20]
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\elemhidehelper@adblockplus.org.xpi [2014-06-20]
FF Extension: FireGestures - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\firegestures@xuldev.org.xpi [2014-06-20]
FF Extension: HyperTranslate - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\hypertranslate@mdc.com.xpi [2014-06-20]
FF Extension: Czech (CZ) Language Pack - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\langpack-cs@firefox.mozilla.org.xpi [2014-06-20]
FF Extension: QuickDrag - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\quickdrag@mozilla.ktechcomputing.com.xpi [2014-06-20]
FF Extension: Rotate Image - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\rotateimage@minisystems.de.xpi [2014-06-20]
FF Extension: FxIF - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{11483926-db67-4190-91b1-ef20fcec5f33}.xpi [2014-06-20]
FF Extension: Stylish - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2014-06-20]
FF Extension: Adblock Plus - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-20]
FF Extension: Tab Mix Plus - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2014-06-20]

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [73728 2010-04-14] (Software602 a.s.) [File not signed]
R2 Active@ Disk Monitor; C:\Program Files (x86)\LSoft Technologies Inc\Active@ Hard Disk Monitor\DiskMonitorService.exe [1464328 2010-09-15] (LSoft Technologies Inc)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [90112 2009-08-19] (ASUSTeK Computer Inc.) [File not signed]
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [435032 2014-06-09] (Garmin Ltd or its subsidiaries)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-10-22] (VIA Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-09-01] (Intel Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [104912 2007-11-07] (EZB Systems, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R3 Spyder4; C:\Windows\System32\DRIVERS\dccmtr.sys [15360 2011-06-02] (Datacolor)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 efavdrv; \??\C:\Windows\system32\drivers\efavdrv.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-23 22:25 - 2014-06-23 22:25 - 00000000 ____D () C:\Users\Jiri\AppData\Local\Data aplikacÝ
2014-06-23 22:25 - 2014-06-23 22:13 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-06-23 22:14 - 2014-06-23 22:26 - 00034875 _____ () C:\zoek-results.log
2014-06-23 22:13 - 2014-06-23 22:23 - 00000000 ____D () C:\zoek_backup
2014-06-23 22:12 - 2014-05-21 08:36 - 01285120 _____ () C:\Users\Jiri\Desktop\zoek.exe
2014-06-23 22:12 - 2014-05-21 08:31 - 01414867 _____ () C:\Users\Jiri\Desktop\zoek.scr
2014-06-23 22:12 - 2014-05-21 08:31 - 01414867 _____ () C:\Users\Jiri\Desktop\zoek.com
2014-06-23 21:55 - 2014-06-24 15:45 - 00000224 _____ () C:\Windows\setupact.log
2014-06-23 21:55 - 2014-06-23 22:26 - 00000888 _____ () C:\Windows\PFRO.log
2014-06-23 21:55 - 2014-06-23 21:55 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-23 21:53 - 2014-06-23 21:54 - 00000000 ____D () C:\AdwCleaner
2014-06-23 21:53 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-23 21:52 - 2014-06-23 21:52 - 01342659 _____ () C:\Users\Jiri\Desktop\adwcleaner_3.213.exe
2014-06-23 20:35 - 2014-06-23 20:35 - 00009504 _____ () C:\Users\Jiri\Desktop\Addition.7z
2014-06-23 20:23 - 2014-06-24 15:48 - 00017572 _____ () C:\Users\Jiri\Desktop\FRST.txt
2014-06-23 20:23 - 2014-06-23 20:23 - 00000000 ____D () C:\Users\Jiri\Desktop\FRST-OlderVersion
2014-06-23 18:56 - 2014-06-23 18:56 - 00000687 _____ () C:\awh1110.tmp
2014-06-23 18:51 - 2014-06-23 18:51 - 00000000 ___HD () C:\OneDriveTemp
2014-06-22 21:54 - 2014-06-23 21:50 - 00001437 _____ () C:\Users\Jiri\Desktop\popis.TXT
2014-06-22 21:30 - 2014-06-24 15:48 - 00000000 ____D () C:\FRST
2014-06-22 21:29 - 2014-06-23 20:23 - 02082816 _____ (Farbar) C:\Users\Jiri\Desktop\FRST64.exe
2014-06-22 20:28 - 2014-06-22 20:28 - 00000687 _____ () C:\awhE4D2.tmp
2014-06-22 12:14 - 2014-06-22 12:14 - 00000000 ____D () C:\Users\Jiri\Desktop\Benro C2580F
2014-06-22 10:40 - 2014-06-22 10:40 - 00000687 _____ () C:\awh1C46.tmp
2014-06-21 22:53 - 2014-06-21 22:53 - 00000000 ____D () C:\Users\Jiri\AppData\Local\Anvisoft
2014-06-21 22:52 - 2014-06-21 23:06 - 00000000 ____D () C:\Program Files (x86)\Anvisoft
2014-06-21 22:25 - 2014-06-21 22:25 - 00000687 _____ () C:\awhE252.tmp
2014-06-21 21:20 - 2014-06-21 21:20 - 00000687 _____ () C:\awhE4F1.tmp
2014-06-21 09:56 - 2014-06-21 09:56 - 00000687 _____ () C:\awhE742.tmp
2014-06-20 17:23 - 2014-06-20 17:23 - 00000687 _____ () C:\awhE9A2.tmp
2014-06-18 21:08 - 2014-06-18 21:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia
2014-06-15 20:09 - 2014-06-15 20:10 - 00000135 _____ () C:\Windows\SysWOW64\debug.log
2014-06-15 08:46 - 2014-06-15 08:46 - 00108544 _____ () C:\Windows\SysWOW64\installd.exe
2014-06-15 08:45 - 2014-06-15 08:45 - 00246784 _____ () C:\Windows\SysWOW64\hfpapi.dll
2014-06-15 08:45 - 2014-06-15 08:45 - 00108544 _____ () C:\Windows\SysWOW64\hfnapi.dll
2014-06-12 17:38 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-12 17:38 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-12 17:38 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-12 17:38 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-12 17:38 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-12 17:38 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-12 17:38 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-12 17:38 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-12 17:38 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-12 17:38 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-12 17:38 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-12 17:38 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-12 17:38 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-12 17:38 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-12 17:38 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-12 17:38 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-12 17:38 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-12 17:38 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-12 17:38 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-12 17:38 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-12 17:38 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-12 17:38 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-12 17:38 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-12 17:38 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-12 17:38 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-12 17:38 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-12 17:38 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-12 17:38 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-12 17:38 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-12 17:38 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-12 17:38 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-12 17:38 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-12 17:38 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-12 17:38 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-12 17:38 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-12 17:38 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-12 17:38 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-12 17:38 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-12 17:38 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-12 17:38 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-12 17:38 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-12 17:38 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-12 17:38 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-12 17:38 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-12 17:38 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-12 17:38 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-12 17:38 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-12 17:38 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-12 17:38 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-12 17:38 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-12 17:38 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-12 17:38 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-12 17:38 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-12 17:38 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-12 17:38 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 17:38 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-12 17:38 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-12 17:38 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-12 17:38 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-12 17:38 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-12 17:38 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-12 17:38 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-12 17:38 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-12 17:38 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-12 17:38 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-06-12 17:38 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-12 17:37 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-12 17:37 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-11 21:20 - 2014-06-11 21:20 - 00000244 _____ () C:\Users\Jiri\Desktop\ecce homo fotky.URL
2014-06-11 19:02 - 2014-06-21 23:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-11 18:43 - 2014-06-11 18:43 - 00000000 ____D () C:\ProgramData\F-Secure
2014-06-11 18:05 - 2014-06-11 22:57 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\FreeFileSync
2014-06-11 18:05 - 2014-06-11 18:05 - 00000938 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileSync.lnk
2014-06-11 18:05 - 2014-06-11 18:05 - 00000926 _____ () C:\Users\Public\Desktop\FreeFileSync.lnk
2014-06-11 18:05 - 2014-06-11 18:05 - 00000000 ____D () C:\Program Files\FreeFileSync
2014-05-31 13:10 - 2014-05-31 13:10 - 00000221 _____ () C:\Users\Jiri\Desktop\4 - OSEL.CZ - popularizační videa ČAV.URL

==================== One Month Modified Files and Folders =======

2014-06-24 15:48 - 2014-06-23 20:23 - 00017572 _____ () C:\Users\Jiri\Desktop\FRST.txt
2014-06-24 15:48 - 2014-06-22 21:30 - 00000000 ____D () C:\FRST
2014-06-24 15:48 - 2012-08-20 17:10 - 01609713 _____ () C:\Windows\WindowsUpdate.log
2014-06-24 15:45 - 2014-06-23 21:55 - 00000224 _____ () C:\Windows\setupact.log
2014-06-24 15:45 - 2013-06-25 20:01 - 00000000 _____ () C:\Windows\system32\Drivers\lvuvc.hs
2014-06-24 15:45 - 2012-10-19 21:53 - 00000000 ___RD () C:\Users\Jiri\SkyDrive
2014-06-24 15:45 - 2012-08-20 21:19 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\Skype
2014-06-24 15:45 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-23 23:12 - 2012-08-20 17:14 - 00000000 ____D () C:\Users\Jiri
2014-06-23 22:33 - 2009-07-14 06:45 - 00013472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-23 22:33 - 2009-07-14 06:45 - 00013472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-23 22:30 - 2009-07-14 17:18 - 00673174 _____ () C:\Windows\system32\perfh005.dat
2014-06-23 22:30 - 2009-07-14 17:18 - 00143268 _____ () C:\Windows\system32\perfc005.dat
2014-06-23 22:30 - 2009-07-14 07:13 - 01596572 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-23 22:26 - 2014-06-23 22:14 - 00034875 _____ () C:\zoek-results.log
2014-06-23 22:26 - 2014-06-23 21:55 - 00000888 _____ () C:\Windows\PFRO.log
2014-06-23 22:25 - 2014-06-23 22:25 - 00000000 ____D () C:\Users\Jiri\AppData\Local\Data aplikacÝ
2014-06-23 22:23 - 2014-06-23 22:13 - 00000000 ____D () C:\zoek_backup
2014-06-23 22:13 - 2014-06-23 22:25 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-06-23 21:55 - 2014-06-23 21:55 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-23 21:54 - 2014-06-23 21:53 - 00000000 ____D () C:\AdwCleaner
2014-06-23 21:52 - 2014-06-23 21:52 - 01342659 _____ () C:\Users\Jiri\Desktop\adwcleaner_3.213.exe
2014-06-23 21:50 - 2014-06-22 21:54 - 00001437 _____ () C:\Users\Jiri\Desktop\popis.TXT
2014-06-23 20:35 - 2014-06-23 20:35 - 00009504 _____ () C:\Users\Jiri\Desktop\Addition.7z
2014-06-23 20:23 - 2014-06-23 20:23 - 00000000 ____D () C:\Users\Jiri\Desktop\FRST-OlderVersion
2014-06-23 20:23 - 2014-06-22 21:29 - 02082816 _____ (Farbar) C:\Users\Jiri\Desktop\FRST64.exe
2014-06-23 20:16 - 2013-08-30 16:38 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-23 20:13 - 2012-08-20 19:35 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\AIMP3
2014-06-23 20:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-06-23 19:57 - 2013-07-13 20:50 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-23 18:56 - 2014-06-23 18:56 - 00000687 _____ () C:\awh1110.tmp
2014-06-23 18:51 - 2014-06-23 18:51 - 00000000 ___HD () C:\OneDriveTemp
2014-06-22 21:17 - 2014-02-20 21:33 - 00002157 _____ () C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-06-22 20:28 - 2014-06-22 20:28 - 00000687 _____ () C:\awhE4D2.tmp
2014-06-22 12:14 - 2014-06-22 12:14 - 00000000 ____D () C:\Users\Jiri\Desktop\Benro C2580F
2014-06-22 10:40 - 2014-06-22 10:40 - 00000687 _____ () C:\awh1C46.tmp
2014-06-22 10:35 - 2009-07-14 07:08 - 00032558 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-21 23:06 - 2014-06-21 22:52 - 00000000 ____D () C:\Program Files (x86)\Anvisoft
2014-06-21 23:05 - 2014-06-11 19:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-21 23:04 - 2013-11-05 20:49 - 00000000 ____D () C:\Users\Jiri\Desktop\angličtina
2014-06-21 23:04 - 2013-11-05 20:45 - 00000000 ___RD () C:\Users\Jiri\Desktop\Programy
2014-06-21 23:04 - 2012-09-30 10:58 - 00000000 ____D () C:\Users\Jiri\AppData\Local\CrashDumps
2014-06-21 23:04 - 2012-08-20 18:05 - 00000000 ____D () C:\Windows\Panther
2014-06-21 22:53 - 2014-06-21 22:53 - 00000000 ____D () C:\Users\Jiri\AppData\Local\Anvisoft
2014-06-21 22:25 - 2014-06-21 22:25 - 00000687 _____ () C:\awhE252.tmp
2014-06-21 21:20 - 2014-06-21 21:20 - 00000687 _____ () C:\awhE4F1.tmp
2014-06-21 09:56 - 2014-06-21 09:56 - 00000687 _____ () C:\awhE742.tmp
2014-06-20 17:23 - 2014-06-20 17:23 - 00000687 _____ () C:\awhE9A2.tmp
2014-06-19 23:19 - 2013-12-03 23:59 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\Seznam.cz
2014-06-18 21:08 - 2014-06-18 21:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia
2014-06-16 22:46 - 2013-10-23 23:01 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\vlc
2014-06-16 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-06-15 20:10 - 2014-06-15 20:09 - 00000135 _____ () C:\Windows\SysWOW64\debug.log
2014-06-15 20:09 - 2012-08-20 17:37 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\Adobe
2014-06-15 08:46 - 2014-06-15 08:46 - 00108544 _____ () C:\Windows\SysWOW64\installd.exe
2014-06-15 08:45 - 2014-06-15 08:45 - 00246784 _____ () C:\Windows\SysWOW64\hfpapi.dll
2014-06-15 08:45 - 2014-06-15 08:45 - 00108544 _____ () C:\Windows\SysWOW64\hfnapi.dll
2014-06-12 18:51 - 2013-08-17 21:01 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 18:48 - 2012-08-20 20:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-12 18:48 - 2012-08-20 19:26 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-12 18:46 - 2014-05-06 21:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-12 17:44 - 2014-03-19 22:31 - 00003556 _____ () C:\Windows\System32\Tasks\GarminUpdaterTask
2014-06-12 17:44 - 2012-08-21 07:16 - 00000000 ____D () C:\ProgramData\Garmin
2014-06-12 17:44 - 2012-08-20 19:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-06-12 17:44 - 2012-08-20 19:42 - 00000000 ____D () C:\Program Files (x86)\Garmin
2014-06-12 17:33 - 2014-03-15 10:30 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-12 17:33 - 2012-08-20 21:11 - 00000000 ____D () C:\ProgramData\Skype
2014-06-12 17:33 - 2012-08-20 17:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-11 22:57 - 2014-06-11 18:05 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\FreeFileSync
2014-06-11 21:20 - 2014-06-11 21:20 - 00000244 _____ () C:\Users\Jiri\Desktop\ecce homo fotky.URL
2014-06-11 18:43 - 2014-06-11 18:43 - 00000000 ____D () C:\ProgramData\F-Secure
2014-06-11 18:05 - 2014-06-11 18:05 - 00000938 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileSync.lnk
2014-06-11 18:05 - 2014-06-11 18:05 - 00000926 _____ () C:\Users\Public\Desktop\FreeFileSync.lnk
2014-06-11 18:05 - 2014-06-11 18:05 - 00000000 ____D () C:\Program Files\FreeFileSync
2014-06-11 17:58 - 2014-03-25 21:16 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-06-09 20:48 - 2012-08-20 20:49 - 00000000 ____D () C:\Program Files (x86)\rajce
2014-06-08 11:13 - 2014-06-12 17:37 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 11:08 - 2014-06-12 17:37 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-07 22:11 - 2014-03-02 21:40 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\avidemux
2014-06-07 21:10 - 2014-03-04 00:36 - 00000000 ___RD () C:\Users\Jiri\Desktop\video
2014-06-05 23:09 - 2012-09-19 19:44 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\YouTube Downloader
2014-06-05 19:38 - 2012-08-30 19:01 - 00000000 ____D () C:\Users\Jiri\AppData\Local\GARMIN_Corp
2014-06-03 19:54 - 2012-08-20 20:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-06-02 19:45 - 2014-05-22 21:44 - 00000000 ____D () C:\ProgramData\Corel
2014-06-01 19:26 - 2012-08-20 18:29 - 00000784 _____ () C:\Users\Jiri\Desktop\LR disk H.cmd
2014-05-31 13:10 - 2014-05-31 13:10 - 00000221 _____ () C:\Users\Jiri\Desktop\4 - OSEL.CZ - popularizační videa ČAV.URL
2014-05-30 12:21 - 2014-06-12 17:38 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-30 12:02 - 2014-06-12 17:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-30 12:02 - 2014-06-12 17:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-30 11:45 - 2014-06-12 17:38 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-30 11:39 - 2014-06-12 17:38 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-30 11:39 - 2014-06-12 17:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-30 11:38 - 2014-06-12 17:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-30 11:28 - 2014-06-12 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-30 11:27 - 2014-06-12 17:38 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-30 11:24 - 2014-06-12 17:38 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-30 11:21 - 2014-06-12 17:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-30 11:21 - 2014-06-12 17:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-30 11:20 - 2014-06-12 17:38 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-30 11:18 - 2014-06-12 17:38 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-30 11:11 - 2014-06-12 17:38 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-30 11:08 - 2014-06-12 17:38 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-30 11:06 - 2014-06-12 17:38 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-30 11:02 - 2014-06-12 17:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-30 10:55 - 2014-06-12 17:38 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-30 10:49 - 2014-06-12 17:38 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-30 10:46 - 2014-06-12 17:38 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-30 10:44 - 2014-06-12 17:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-30 10:44 - 2014-06-12 17:38 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-30 10:43 - 2014-06-12 17:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-30 10:42 - 2014-06-12 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-30 10:38 - 2014-06-12 17:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-30 10:35 - 2014-06-12 17:38 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-30 10:34 - 2014-06-12 17:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-30 10:33 - 2014-06-12 17:38 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-30 10:30 - 2014-06-12 17:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-30 10:29 - 2014-06-12 17:38 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-30 10:28 - 2014-06-12 17:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-30 10:27 - 2014-06-12 17:38 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-30 10:24 - 2014-06-12 17:38 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-05-30 10:23 - 2014-06-12 17:38 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-30 10:16 - 2014-06-12 17:38 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-30 10:10 - 2014-06-12 17:38 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-30 10:06 - 2014-06-12 17:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-30 10:04 - 2014-06-12 17:38 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-30 10:02 - 2014-06-12 17:38 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-30 09:56 - 2014-06-12 17:38 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-30 09:56 - 2014-06-12 17:38 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-30 09:54 - 2014-06-12 17:38 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-30 09:50 - 2014-06-12 17:38 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-05-30 09:49 - 2014-06-12 17:38 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-30 09:43 - 2014-06-12 17:38 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-30 09:40 - 2014-06-12 17:38 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-30 09:30 - 2014-06-12 17:38 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-30 09:21 - 2014-06-12 17:38 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-30 09:15 - 2014-06-12 17:38 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-30 09:13 - 2014-06-12 17:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-30 09:13 - 2014-06-12 17:38 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-27 16:08 - 2012-08-20 20:35 - 00000000 ____D () C:\ProgramData\TEMP

Some content of TEMP:
====================
C:\Users\Jiri\AppData\Local\Temp\NEventMessages.dll
C:\Users\Jiri\AppData\Local\Temp\NOSEventMessages.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-08 19:43

==================== End Of Log ============================
Přílohy
Addition.7z
(9.11 KiB) Staženo 71 x
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#8 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [] => [X]
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Policies\Explorer: []
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpyderUtility.lnk
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - URL http://www.trovigo.com/Results.aspx?gd= ... EFC0EA9&q={searchTerms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON http://suggest.search.conduit.com/CSugg ... hx?prefix={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}

FF Extension: IE Tab 2 (FF 3.6+) - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} [2014-06-20]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 efavdrv; \??\C:\Windows\system32\drivers\efavdrv.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

2014-06-23 22:25 - 2014-06-23 22:13 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-06-23 22:14 - 2014-06-23 22:26 - 00034875 _____ () C:\zoek-results.log
2014-06-23 22:13 - 2014-06-23 22:23 - 00000000 ____D () C:\zoek_backup
2014-06-23 22:12 - 2014-05-21 08:36 - 01285120 _____ () C:\Users\Jiri\Desktop\zoek.exe
2014-06-23 22:12 - 2014-05-21 08:31 - 01414867 _____ () C:\Users\Jiri\Desktop\zoek.scr
2014-06-23 22:12 - 2014-05-21 08:31 - 01414867 _____ () C:\Users\Jiri\Desktop\zoek.com
2014-06-23 21:55 - 2014-06-24 15:45 - 00000224 _____ () C:\Windows\setupact.log
2014-06-23 21:55 - 2014-06-23 22:26 - 00000888 _____ () C:\Windows\PFRO.log
2014-06-23 21:55 - 2014-06-23 21:55 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-23 21:53 - 2014-06-23 21:54 - 00000000 ____D () C:\AdwCleaner
2014-06-23 21:53 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-23 21:52 - 2014-06-23 21:52 - 01342659 _____ () C:\Users\Jiri\Desktop\adwcleaner_3.213.exe
2014-06-23 20:35 - 2014-06-23 20:35 - 00009504 _____ () C:\Users\Jiri\Desktop\Addition.7z
2014-06-23 20:23 - 2014-06-24 15:48 - 00017572 _____ () C:\Users\Jiri\Desktop\FRST.txt
2014-06-23 20:23 - 2014-06-23 20:23 - 00000000 ____D () C:\Users\Jiri\Desktop\FRST-OlderVersion
2014-06-23 18:56 - 2014-06-23 18:56 - 00000687 _____ () C:\awh1110.tmp
2014-06-22 20:28 - 2014-06-22 20:28 - 00000687 _____ () C:\awhE4D2.tmp
2014-06-22 10:40 - 2014-06-22 10:40 - 00000687 _____ () C:\awh1C46.tmp
2014-06-21 22:25 - 2014-06-21 22:25 - 00000687 _____ () C:\awhE252.tmp
2014-06-21 21:20 - 2014-06-21 21:20 - 00000687 _____ () C:\awhE4F1.tmp
2014-06-21 09:56 - 2014-06-21 09:56 - 00000687 _____ () C:\awhE742.tmp
2014-06-20 17:23 - 2014-06-20 17:23 - 00000687 _____ () C:\awhE9A2.tmp

Task: {4C8F4FCF-2C5F-459C-8B43-11FE9E6CAC16} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION
Task: {A7974057-5413-4775-B7C5-D28D668A1075} - \Escolade No Task File <==== ATTENTION
Task: {B6C9E973-DD2A-4EC4-9DF2-C4A6AD8B395E} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

AlternateDataStreams: C:\ProgramData\TEMP:12B8C802
AlternateDataStreams: C:\ProgramData\TEMP:39413AC3
AlternateDataStreams: C:\ProgramData\TEMP:3F30E778
AlternateDataStreams: C:\ProgramData\TEMP:493B3641
AlternateDataStreams: C:\ProgramData\TEMP:69E87FA2
AlternateDataStreams: C:\ProgramData\TEMP:838D4792
AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939
AlternateDataStreams: C:\ProgramData\TEMP:DEDD192D

Hosts:
End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
yorg
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 12 Črv 2007 06:33

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#9 Příspěvek od yorg »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 22-06-2014
Ran by Jiri at 2014-06-24 17:34:58 Run:1
Running from C:\Users\Jiri\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [] => [X]
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Policies\Explorer: []
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpyderUtility.lnk
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - URL http://www.trovigo.com/Results.aspx?gd= ... EFC0EA9&q={searchTerms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON http://suggest.search.conduit.com/CSugg ... hx?prefix={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}

FF Extension: IE Tab 2 (FF 3.6+) - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} [2014-06-20]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 efavdrv; \??\C:\Windows\system32\drivers\efavdrv.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

2014-06-23 22:25 - 2014-06-23 22:13 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-06-23 22:14 - 2014-06-23 22:26 - 00034875 _____ () C:\zoek-results.log
2014-06-23 22:13 - 2014-06-23 22:23 - 00000000 ____D () C:\zoek_backup
2014-06-23 22:12 - 2014-05-21 08:36 - 01285120 _____ () C:\Users\Jiri\Desktop\zoek.exe
2014-06-23 22:12 - 2014-05-21 08:31 - 01414867 _____ () C:\Users\Jiri\Desktop\zoek.scr
2014-06-23 22:12 - 2014-05-21 08:31 - 01414867 _____ () C:\Users\Jiri\Desktop\zoek.com
2014-06-23 21:55 - 2014-06-24 15:45 - 00000224 _____ () C:\Windows\setupact.log
2014-06-23 21:55 - 2014-06-23 22:26 - 00000888 _____ () C:\Windows\PFRO.log
2014-06-23 21:55 - 2014-06-23 21:55 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-23 21:53 - 2014-06-23 21:54 - 00000000 ____D () C:\AdwCleaner
2014-06-23 21:53 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-23 21:52 - 2014-06-23 21:52 - 01342659 _____ () C:\Users\Jiri\Desktop\adwcleaner_3.213.exe
2014-06-23 20:35 - 2014-06-23 20:35 - 00009504 _____ () C:\Users\Jiri\Desktop\Addition.7z
2014-06-23 20:23 - 2014-06-24 15:48 - 00017572 _____ () C:\Users\Jiri\Desktop\FRST.txt
2014-06-23 20:23 - 2014-06-23 20:23 - 00000000 ____D () C:\Users\Jiri\Desktop\FRST-OlderVersion
2014-06-23 18:56 - 2014-06-23 18:56 - 00000687 _____ () C:\awh1110.tmp
2014-06-22 20:28 - 2014-06-22 20:28 - 00000687 _____ () C:\awhE4D2.tmp
2014-06-22 10:40 - 2014-06-22 10:40 - 00000687 _____ () C:\awh1C46.tmp
2014-06-21 22:25 - 2014-06-21 22:25 - 00000687 _____ () C:\awhE252.tmp
2014-06-21 21:20 - 2014-06-21 21:20 - 00000687 _____ () C:\awhE4F1.tmp
2014-06-21 09:56 - 2014-06-21 09:56 - 00000687 _____ () C:\awhE742.tmp
2014-06-20 17:23 - 2014-06-20 17:23 - 00000687 _____ () C:\awhE9A2.tmp

Task: {4C8F4FCF-2C5F-459C-8B43-11FE9E6CAC16} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION
Task: {A7974057-5413-4775-B7C5-D28D668A1075} - \Escolade No Task File <==== ATTENTION
Task: {B6C9E973-DD2A-4EC4-9DF2-C4A6AD8B395E} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

AlternateDataStreams: C:\ProgramData\TEMP:12B8C802
AlternateDataStreams: C:\ProgramData\TEMP:39413AC3
AlternateDataStreams: C:\ProgramData\TEMP:3F30E778
AlternateDataStreams: C:\ProgramData\TEMP:493B3641
AlternateDataStreams: C:\ProgramData\TEMP:69E87FA2
AlternateDataStreams: C:\ProgramData\TEMP:838D4792
AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939
AlternateDataStreams: C:\ProgramData\TEMP:DEDD192D

Hosts:
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\ => value deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpyderUtility.lnk => Moved successfully.
C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk => Moved successfully.
'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive1'=> Key not found.
'HKLM\Software\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}'=> Key not found.
'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive2'=> Key not found.
'HKLM\Software\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}'=> Key not found.
'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive3'=> Key not found.
'HKLM\Software\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}'=> Key not found.
'HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive1'=> Key not found.
'HKLM\Software\Wow6432Node\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}'=> Key not found.
'HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive2'=> Key not found.
'HKLM\Software\Wow6432Node\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}'=> Key not found.
'HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive3'=> Key not found.
'HKLM\Software\Wow6432Node\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}'=> Key not found.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\URL http://www.trovigo.com/Results.aspx?gd= ... => Value not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\SuggestionsURL_JSON http://suggest.search.conduit.com/CSugg ... => Value not found.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}' => Key deleted successfully.
'HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}'=> Key not found.
C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} => Moved successfully.
'HKLM\SOFTWARE\Policies\Google' => Key deleted successfully.
catchme => Service deleted successfully.
efavdrv => Service deleted successfully.
MBAMSwissArmy => Service deleted successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Jiri\Desktop\zoek.exe => Moved successfully.
C:\Users\Jiri\Desktop\zoek.scr => Moved successfully.
C:\Users\Jiri\Desktop\zoek.com => Moved successfully.
C:\Windows\setupact.log => Moved successfully.
C:\Windows\PFRO.log => Moved successfully.
C:\Windows\setuperr.log => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Windows\SysWOW64\sqlite3.dll => Moved successfully.
C:\Users\Jiri\Desktop\adwcleaner_3.213.exe => Moved successfully.
"C:\Users\Jiri\Desktop\Addition.7z" => File/Directory not found.
"C:\Users\Jiri\Desktop\FRST.txt" => File/Directory not found.
C:\Users\Jiri\Desktop\FRST-OlderVersion => Moved successfully.
C:\awh1110.tmp => Moved successfully.
C:\awhE4D2.tmp => Moved successfully.
C:\awh1C46.tmp => Moved successfully.
C:\awhE252.tmp => Moved successfully.
C:\awhE4F1.tmp => Moved successfully.
C:\awhE742.tmp => Moved successfully.
C:\awhE9A2.tmp => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4C8F4FCF-2C5F-459C-8B43-11FE9E6CAC16}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4C8F4FCF-2C5F-459C-8B43-11FE9E6CAC16}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineCore' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A7974057-5413-4775-B7C5-D28D668A1075}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A7974057-5413-4775-B7C5-D28D668A1075}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Escolade' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B6C9E973-DD2A-4EC4-9DF2-C4A6AD8B395E}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B6C9E973-DD2A-4EC4-9DF2-C4A6AD8B395E}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineUA' => Key deleted successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\ProgramData\TEMP => ":12B8C802" ADS removed successfully.
C:\ProgramData\TEMP => ":39413AC3" ADS removed successfully.
C:\ProgramData\TEMP => ":3F30E778" ADS removed successfully.
C:\ProgramData\TEMP => ":493B3641" ADS removed successfully.
C:\ProgramData\TEMP => ":69E87FA2" ADS removed successfully.
C:\ProgramData\TEMP => ":838D4792" ADS removed successfully.
C:\ProgramData\TEMP => ":A1EDB939" ADS removed successfully.
C:\ProgramData\TEMP => ":DEDD192D" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.


The system needed a reboot.

==== End of Fixlog ====
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#10 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
yorg
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 12 Črv 2007 06:33

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#11 Příspěvek od yorg »

vyosek napsal: :arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|
A z mé strany patří velké poděkování. :thumbsup:
Netušil jsem, že tam toho tolik může být. A to se snažím chovat zodpovědně a nelezu, kde je na první pohled zřejmé, že tam je nebezpečno.
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#12 Příspěvek od vyosek »

Nemate zac, rad jsem pomohl :worship: Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat :lock:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Zamčeno

Vrátit se na „Řešení problémů, logy“